Hello and happy holidays everyone!I would like to ask your help to understand if there's a way to gather the main OS language set at user level.We have a mixed environment with two languages being used (Italian and English) with only some single-language applications installed accordingly (Office 2011 and Adobe's).Knowing which language is being used would be very helpful to create smartgroups and deploy apps/updates (such as Office 14.2.5) where there are separate updates for each country.Many thanks for your support!CiaoCarlo

Hi ,I am experiencing weird issue with my Mac M1 pro deviceDevice was part of pre-stage enrollment, remote management gave us some certificate issue We just unassigned the device from pre-stage and ABM, restarted the device and ideally it should give us normal setup assistance but  the Remote management prompt fails to disappear, we restarted the device but no luckIt still gets the "Remote management certificate error" though it is not part of pre-stage and unassigned in ABM  

I am banging my head against the wall with this one and I feel a though the solution should be simple. I read that Jamf Pro 10.26 is supposed to be able to permit enabling NTP/time zone settings without needing location services turned on. However, for the life of me, I cannot find documentation detailing how. I tested a custom configuration profile that does apply the settings successfully, but only if location settings are enabled. For Catalina, I currently use a script (see below). I do not want to rely on my end users turning on location settings to get this configured. How is everyone else doing this now? Am I missing something obvious? Current script: #!/bin/sh #################################################################################################### # # DEFINE VARIABLES/PARAMETERS # #################################################################################################### timeserver="$4" defaults='/usr/bin/defaults' systemsetup='/

Hello We are looking to move over from Meraki to our Jamf environment, we currently have about 900 in Meraki and 600 in Jamf.  Just looking to get any info on this, i saw a post about a quick add pkg and script but not much other info. Thank you!! any help is much appreciated!!

Hello,We use User profiles for setting the wifi configuration.We had old setup where the user account was a mobile account.We migrated with rtrouton script (https://github.com/rtrouton/rtrouton_scripts/tree/main/rtrouton_scripts/migrate_ad_mobile_account_to_local_account) , these mobile account to local account.The "user profiles" were removed from the current user (as seen in the gui, and confirmed with the "profiles" command)But in the Jamf interface, in the inventory, these profils are still displayed. These users lost the wifi configuration this way. More problematic, updates to these profils aren't pushed back to these users. 

Hey All,I'm curious about a few features with The Mut v6.0  and am wanting to test it out but I can't figure out how to sign in to the application as we use Single Sign-On to auth to Jamf Pro.  I have tried using my SSO credentials in the username/password fields or settings another password to my Jamf Pro user, but both methods are still telling me that I have invalid credentials. Is there something I am missing? or do I need to completely disable SSO to be able to use The Mut?

Hi everyoneIm a total noob to JamF. I recently joined a company and they have about 10 macs which are out of use.They charged me with writing up a protocol for wiping, reinstalling and re enrolling the macs to JamF.The company currently uses Jamf but Iv not actually used it myself.Iv done a bit of research on the subject. I found this video detailing a process for Catalina. However I would like this process to run and be completed through jamf and not need the selfservice part.Could anyone pls tell me the steps to follow for this process? It would be an amazing help!!Thanks in advance

Hello everyone,Does anyone know the command that will run the 'Free up space' command for the OneDrive folder.I want to run it after a user has logged out, just wanting to know if this is possible first.Thanks, Browner.

Hi everyone,The majority of my end users are standard users with Filevault2 enabled. If they try to upgrade Monterey they get this message "You must provide authorization for this volume by setting it as your startup disk." I have a self service policy that downloads MacOS Monterey 12.1 and then unpackages itself into their /Applications folder. Following that has a Files and processes payload with the executed line /Applications/Install\\ macOS\\ Monterey.app/Contents/Resources/startosinstall --agreetolicense --forcequitapps This is the feedback when going to logs in Jamf for each attempt: Result of command: Error: failed to authorize for installation. Provide a password with --stdinpass or --passprompt. By using the agreetolicense option, you are agreeing that you have run this tool with the license only option and have read and agreed to the terms. If you do not agree, press CTRL-C and cancel this process immediately.Can anyone help me out where I am suppose

Hi Guys, I'm having some issue with upgrading 11.6 to 11.6.2My environment is a bit difficult. 1) we are on prem2) App Store and Software update blocked 3) Users do not have admin rightsThe only way is to push the installer via JAMF and use the script to install. I also keep having error during the upgrade too. Do anyone have a good idea of how to do it smoothly? 

We have managed iPhones in Apple business manager synced with JAMF Pro. We have federated our domain so our business email addresses can be used as Apple IDs. Is there are way to only allow our business federated email addresses (now Apple IDs) to be used to sign in on our managed devices? We've had a few people sign in to our managed phones with their personal iCloud/Apple ID accounts, and it syncs their apps and wallpapers across both devices, as well as connects both phones. 

Hello all,Sorry for the novice question -- I am a ConfigMgr/Windows Engineer who recently was asked to support this environment until our open positions are filled. I've tried to find documentation on this process and troubleshooting it but have had no luck with the official docs.My support team is trying to get this new device provisioned for an end user and claims the device was in Jamf but simply "vanished" at some point. I can confirm the device does not exist in Jamf. The device does exist in ABM and has been assigned to Jamf. What would be my next steps in getting this device to show back up within Jamf? Thanks

To reduce the amount of licences we have deactivated the option "Allow Jamf Pro to perform management tasks" on certain devices that have not been active for a longer period of time. Now we want to re-enable this option on some devices, but we are not able to get the randomly generated management password for these devices. Is there a way to read out this randomly generated password? 

To my knowledge, Apple does not currently have a way for us to enforce what accounts are able to login using the iCloud pane on iPads. We are about to unlock the iCloud pane for our students to be able to login with their MAIDs, I'm looking to prevent them from being able to install an apps with a personal AppleID on another device and have those apps install automatically on their issued device if they are logged in with that personal account. Anyone have a config for blocking Settings -> App Store -> Automatic Downloads -> Apps?  How are others dealing with this issue with iPads and MAIDs?

I see lots of posts about the difficulty of clearing forgotten passcodes since the iPads no longer connect to wi-fi after going to sleep for a period of time, resulting in a DFU as the fix - but I did not see anything about whether we could block students entirely from entering a passcode on the iPad? Is that possible? Thanks!

Hello all, We're seeing this issue with some computers on our instance where the Management tab for some devices wont load. For the computers that won't it spins and spins until you see the message "temporarily unavailable" (and still just spins). Possibly related, it seems that these computers wont take new profiles either. I think that it may be related to a config profile that was generated incorrectly (i.e. this pppc utility / jamf pro issue  https://github.com/jamf/PPPC-Utility/issues/90 ) that caused a lot of our computers to have over 1000 (sometimes 10000) failed management commands, which we can see on the ones we can view management for. I deleted that profile, thinking that might help clear it all out, but the failures are still listed with something of an error message in its place. I thought I might have some luck with the with the "cancel management commands" from the inventory actions button, but that too hangs. I've also tried to use the classic

Update 12/28On December 9, 2021, a Remote Code Execution (RCE) vulnerability (CVE-2021-44228) was identified in the log4j library (https://www.lunasec.io/docs/blog/log4j-zero-day/). The log4j project released version 2.15 to address this issue. New information has come to light identifying ways to exploit log4j 2.15 when the formatMsgNoLookups parameter was not set. CVE-2021-45046 was assigned to this and fixed on December 16, 2021 in log4j 2.16.  We have continued to assess the impact and mitigate the vulnerability across our platform (tracked as PI-010403) as the security community has identified new issues in log4j.  Due to the nature of these issues, these are considered critical vulnerabilities. What Jamf products are impacted by the log4j vulnerability?Jamf Pro (hosted on-premises): PatchedJamf Pro versions older than 10.31 do not use log4j 2.x&nb

Hello everyone,We have recovered macOS Big Sur 11.6.2 InstallAssistant.pkg from https://mrmacintosh.com/ and are trying to upload it to Jamf Admin and JSS but it fails.Some of you also have this problem?

Hi There, our JSS Web Admin Stopped working yesterday and it came with following error:----------------http Status 404 Type Status report Message Description: The requested Resource () is not available, Apache Tomcat /6.0.24.----------------I restarted the Tomcat from JSS Setup Utility and also unload and load the Tomcat from the terminal and also did the following:Restart Web Services from Server Admin Restart My SQL Services Asked our LAN Admin's to Restart the server (Shutdown and restart) and they done it.Replace the Server.xml in /Library/tomcat/conf after doing backup of the file. (few times that this sever Tomcat had the same behavior this action fixed the issue). Still I am getting the same error. I sent the an email to JAMF this morning but so far NO answer. As this is our production server I have to fix it ASAP. any idea will be appreciated.

Hello!I'm looking for a way to check when a device has moved from one smart group to another. In this case I am using an integer Extension Attribute to track a devices vulnerability compliance. If a device reports that a specific file is >0 it is put in a group that says there is a vulnerability. Once that EA drops to 0, that device is good. Is there a way to check which devices HAD an EA >0 but are now at 0 so I can track that the vulns are being remediated?Thank you!

Hi,Devices enrolled via ABM do not appear in Search inventory in Jamf Pro,But the device is available under scope in Pre-stage Enrollment Tab Is this how it works ? ADE enrolled devices wont appear in Search inventory?

Scenario:When Mac laptops are imaged and joined to the domain in our corporate environment the desktop support teams have the option of giving the domain user local admin rights on their Mac device. Unfortunately, more often than not, they do so. The Mac image comes with a generic local admin account that all devices have and needs to be kept in place. These rights need to be preserved. New policy has come from the top, all local admin rights for domain users are to be removed from all domain devices. I have been recently given the role of Casper Admin with zero experience in Casper or OSX after an engineer left. Questions:How do we remove these rights from each device centrally through Casper JSS? Is there a way to do so? If this has to be some sort of script, what exactly should it be and how would it be distributed to devices as they come online and continue to check the devices to ensure that there are no new local rights given? Any help is definitely appreciated and certainl

if someone can briefly explain to me the purpose of the 'Management Account' when creating a QuickAdd package and Configuration ? (We already create a local Admin on each mac prior to any enrollment in casper system) when creating your QuickAdd packages and/or Configuration, what are some of you choosing from the options below?Hide it or NOT hide itAllow SSH for management account only

Here what I am seeing, Version Anyconnect 4.10.03104 with Compliance Module 4.3.2161.4343 giving me a DNS Error "The VPN client agent's DNS component experienced an unexpected error.  The VPN connection has been disconnected.  Please restart your computer or device, then try again." Now this versions supports Catalina 15.7 no problem but also notice Socket Filtering is greyed out. When I upgrade the Catalina 15.7 to Monterey 12.1 I get the DNS trying to connect. I also needed to allow Socket Filtering. Not sure if anyone been running to a similar issue? 

Now I got a setup that works like expected. User boots his empty MacBook and Jamf installs all the applications and settings. After a while the Mac asks to log in. But in the background it’s still downloading and preparing stuff.So I would like to show  a Work in Progress screen to the user and prevent him to shut down or do anything with his computer until everything is ready.Any ideas how to do that?