Hey everyone - total beginner here with very little scripting knowledge. I am currently in the middle of trying to remove Symantec from all our macs and have the script file to do it, however I need to install this file to a specific location on each mac and then run it. How would I do this? I tried to use composer and create a before and after image and then make that into a pkg but it didn't work and it did not add the file to my test machine in the location I wanted. I know there is a simple way to do it but cannot find a step by step guide online

Good morning all. I'm having issues getting JAMF to initialize after an update to 10.34.1 from 10.29. The update installs no problem, but it gets hung up on Initializing Change Management when attempting to complete.I tried a solution found here: https://community.jamf.com/t5/jamf-pro/jamf-server-hanging-on-initializing-change-management/m-p/243366I ran the steps involved there to run the MySQL command and while it does restart the initialization, it still hangs at the same spot.Has anyone run into this recently and have alternative options or solutions?

In Protect, when a Alert Auto-Resolves or just Resolves, what does that mean. Did a file get quarantined? Is the file/program blocked but still on the device? Did it get deleted? Do we know?

New info this morning regaridng log4J.  Version 2.15, included in the recent JAMF patch, is still vulnerable.  When is a patch incoming? Event Impact:CVE-2021-45046 was originally believed to allow a denial of service in Log4J 2.15.0 if certain non-default configurations were used. Security researchers have since found ways to leverage this vulnerability to allow remote code execution. Additional research on Log4J 2.15.0 also showed that previous mitigations (specifically setting system property log4j2.formatMsgNoLookups or environment variable LOG4J_FORMAT_MSG_NO_LOOKUPS to true) did not provide sufficient protection as there are still code paths in Log4J where message lookups could occur. References:https://logging.apache.org/log4j/2.x/security.html

I tried to deploy Jamf Connect with GoogleID as per the Jamf Connect admin guide but during login, I'm getting an error "Configuration is nil or invalid"Does anyone come across this issue? please suggest

The Mac sometimes cannot connect to a wifi network even though there is no profile showing for that particular network.  A search on the web seems to suggest that the following files need to be deleted from /Library/Preferences/SystemConfiguration/:com.apple.airport.preferences.plistcom.apple.network.eapolclient.configuration.plistcom.apple.wifi.message-tracer.plistNetworkInterfaces.plistpreferences.plistI just wonder if there could be a script to do this.  I tried using a bash script but always has "no such directory"  "no permission" etc errors.Any help would be appreciated.

Looks like our fix for jamf for our previous issue was not complete.https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45046https://logging.apache.org/log4j/2.x/security.html 

Hi All, I'm new to the API and newish with scripting, so please bear with me.My end goal is: have a list of all the Mobile Device Applications and what they are scoped to. I've tried this for loop:#!/bin/bash IDs=$(curl -sku myusername:mypassword -H "content-type: text/xml" https://myinstance:8443/JSSResource/mobiledeviceapplications | xmllint --format - | awk -F '[<>]' '/<id>/{print $3}') for idNumber in $IDs do curl -sku myusername:mypassword -X GET -H "Accept: application/xml" https://myinstance:8443/JSSResource/mobiledeviceapplications | xmllint --xpath "/mobile_device_application/scope/text()" - done Though it tells me that the "Xpath is empty".Is there a way for me to reiterate through the Application IDs I find using curl, and show me the scope for each and all of them? Thank you

I have an admin account created with our DEP Profile "Staff admin". We manually create a second admin account "Tech admin" when provisioning and finishing touches for distribution. I want to get rid of that Staff Admin account, both moving forward for newly provisioned devices, and for existing devices in the fleet.For the first, all I need to do is replace the info in the DEP Profile, is that right?For existing accounts, how can I achieve this? My concern is with the secure boot tokens and ensuring that Jamf can still perform tasks administratively for both new and existing devices without issue. I don't have a full grasp on how Jamf performs elevated tasks and don't want to screw it up!Unless I'm missing something I don't see a payload to do this in the documentation. As a scripted solution, any known templates that have been used or might be useful here? Thanks in advance!

Forgive me if this has been addressed already.  I was unable to find anything quite like what I am after. I need to export our inventory and for that export to include specific attributes about the individual machines. If I were to export all computer inventory I just get a few options for how to base the search like computer name, applications, etc. Doing this will only display that search criteria, like a list of just computer names.What I am looking for is a way to pull the full inventory list and have it also display some of the info I would find when drilling down into the machine properties. For example could I export all the machines with their respective Serials, Reported IP Addresses, and Site? Or Computer name, User, and Building? Something like that. 

I have Created the Config profile for this in Jamf and it does not seem to be working.Process starts with:Checking for expected bundle ID: /usr/bin/defaults read "/Applications/iTerm.app/Contents/Info.plist" CFBundleIdentifier Results: com.googlecode.iterm2 Create a Configuration Profile with the appropriate settings including the bundle ID and no love.

Hi I can't seem to find how to see the number of JAMF device licenses consumed and remaining?I'd like to add that to my dashboard. There is an explanation of managing other software licensing but can't find anything for JAMF?? Sorry if this is a noob question. cheers,Andrew

hello,when we get the 10.34.1 patch? our managed jamf pro server is still on 10.34 😞thanks!

Hello All,I'm pretty new with Jamf and I need some help. Strange things are happening when the computers check-in with Jamf. When the Macs check-in they will blink, which I assume is normal behavior. When this blink happens users are reporting that if they have any application windows minimized in the dock they will maximize on their own. The other, more troubling issue is that if the check-in happens while they happen to be in a video call both incoming and outgoing audio will drop out and the users have to leave the meeting and come back. The first issue is an annoyance but the second one is a real problem. I have the check-in set to the maximum 60 minutes but these issues still happen. Is there anything I can do to make the check-in less intrusive. Is there a setting where I can make it check in once per day unless I force it, for example. Any help would be appreciated.

Hi everyone,I work for a High School and I'm having a hard time figuring out the root of this issue. They authenticate via Google, then type their local password, to get an error message saying  "You are not allowed to log in at this time". Though, this is working on a few users of the same groups and all, so the inconsistency is throwing me for a loop. When I call for JamfConnectLogin.log, I get: authorizationhosthelper.x86_64[4394:7709] [com.jamf.connect.login:KeychainAdd] Tried to get the login name but couldn't find it. macOS Version: 11.6.0JamfConnect 2.6 Anyone have any ideas? Would be much appreciated.

Hi all We are going to upgrade our users from from ElCapitan to High Sierra. As part of this we will need to uninstall SEP, and then install SCEP, preferably using a single policy/script. I am new to this so and advice/suggestions would be greatly appreciated. Has anyone already done a script for this? Many thanksStruan

Hey all, Got a machine here to enroll, download the QuickAdd.pkg, everything appears to work as expected. Starting up Self Service the first time gives the popup about approving the MDM profile in System Preferences, but when I click the button to go over into Sys Pref, there's no profile there to approve. Totally blank. Is there an extra step or a different method now? Thanks!

Getting this message when trying to apply a second configuration profile to an ipad. Tried on a few devices, all have the same message.  Could it be because both profiles work on different aspects in the "notifications" category? in one case, i allow a notification from JAMF app, and push that out to all ipads. In the second case, i want to limit an application (in this case CLOCK notifications). because they act on the same "group" i cant do it? well that sucks, because i dont want to limit clock notifications on every device in the company, and i want to have jamf notifications showing up how i want them.... can someone confirm? thanks   

Hello, I would like to push a policy to unbind machines and convert them to local ones.  I am wondering what can goes wrong!1) Doe the user should retype his password?2)will Filevault still synching ?3) Should the user backup his data before running the job?4) Will the asset keep same ID in Jamf Pro? "must still be managed by the MDM".5) Is the user going to loose his preferences?I make some attempts ending by affecting some of these fonctionalities.Any way to make it happen with respect for these requirments? P.S: we do not use Nomad.

Hello Everyone, i was wondering if there is a way to restore gui access to a server that i limited to computers and mobile devices only ? ( not full access ). i forgot to turn on clustering on that server and i need gui access. tried accessing it locally (127.0.0.1) didnt help, im also wondering how should i update it if i dont have GUI access ? thanks for everyone that can help,

Hey All, Hoping someone can help clarify something for me. Wondering if it is possible to deploy an app/pkg to a computer on a non recurring basis after Enrollment. Example: I create a report of computers that don't have our in-house VPN App for one reason or another. Can I then target those machines on the report and install the app via a Policy one time?  Giving the user the option to pull it via Self Service with email communications on a deadline the app has to be installed by, has still resulted in some users still not installing the app manually, so I am wondering if I am able to do a one time push or if there is a better way to complete this task?

Has anyone gotten the native MacOS VPN client to work with IPsec using a Configuration Profile? I am trying to get it to work with our Fortigate firewall but it keeps complaining that the server is not responding but I can successfully connect to it using a Windows machine. On the server (Fortigate) side, I am seeing the error message that Phase 1 negotiation has failed (Peer SA proposal does not match local policy). I can't find any other fields that I could edit to change the algorithms and the DHgroup as advised. Should I just go with using a Profile that contains a script to do this?

We had an unmanaged macbook (at the time) go missing earlier this year. When we moved to JAMF the device was added as a managed device in Apple Business Manager.The missing macbook showed up in JAMF a couple days ago. My understanding is that someone needed to reset the macbook in order for it to enroll to JAMF automatically. Are there other ways the enrollment process could be triggered other then a reset?The Enrollment Method does have "PreStage enrollment: Apple Business Manager" so we know it was ADE. The IP address for the enrollment happens to be an existing employee so we want to make sure we understand how the enrollment happened.

Cannot connect to my account to download the new JamfConnect.  account.jamf.com not working?  Anyone else experiencing this issue?  Is there an ETTR?

Is anyone else having issues today? I'm getting "A connection error occurred while attempting to download software titles from this source." and https://jamf-patch.jamfcloud.com/v1/ gives a 504 Gateway Time-out.