Hey all! What sort of solutions do folks use if they want to take a simple shortcut to a webpage, add an icon to it, and place it in the dock through either a policy or PKG? We want some felxibility over how we deploy it and while I have used Dockutil/Profile creator and the web clips option as a config profile in JAMF...i've been wondering if there was a way we can deploy via policy or even standalone PKG, and without having to deploy it with a third-party app like dockutil.

I try to manage the settings of my clients Finder. I found a way to put a plist into a profile. It looks nice but cannot be modified by the user later on. So I’m looking for a way to set some defaults but let the user modify it if he or she likes.The same with the dock. I prefer to set up the dock but the user should be able to add new items and get rid of some others.Every hint I found is with older versions but none of them works on Big Sur.Please help. I don’t think I’m alone with this issue.BTW. I’m very new with JAMF, so be kind with a newbie. Thanks.

Hi everyone,Just wondering if anyone else has seen an issue with Jamf Connect not automatically launching into the menu bar after login?Only observing this behaviour on Monterey. Jamf Connect is performing the user login, because I'm logging in with my Azure user account. If I launch Jamf Connect manually via Applications, it then shows in the menu bar.Wondering if I'm now missing something in one of the config files that is causing this not to auto launch. This is also tested against a completely fresh install. Regards,Mark

Hello All, Wondering, is there a way to restrict an application from being able to look/share contact information?Example:A user downloads Whats App on their phone, can we stop Whats App from seeing company owned contacts? But if a user wants to share their personal, that is okay.

Hi there ,I am using a script to erase install Big Sur on our machines.I was testing out the script and it works fine for all devices with Big Sur or previous version above 10.9. But it doesn't work for Laptops which are already in MontereyActual script which do my erase / install process"$installer_path" --eraseinstall --agreetolicense --forcequitapps --newvolumename "$computername" & "$jamfHelper" -windowType hud -lockhud -heading "ERASING AND INSTALLING" -description "$erase_dialog" -icon "$mac_os_installer_path" If pass this command on Monterey device , it doesn't give no output. Any suggestions on how to make it work?

I have one student out of two thousand whose iPad has decided to delete Self Service and several other apps from the iPad randomly. When I check the history of the iPad there is no record of the apps being deleted. I have switched the student to a different iPad and have the same problem. Now, I know what you are thinking. The student must be deleting the apps herself. I haven't ruled that out, but she and the teacher both swear that she is not deleting the apps. If she was deleting them, wouldn't that should up in the history in Jamf Pro? I have also prevented app deletion on her iPad. Yet the apps keep disappearing. It seems that they reinstall when the iPad checks in. The iPad is a 7th gen iPad running iOS 14.3. iPads are tied to users through LDAP and we use Smart Groups to determine app scopes. Self Service is assigned to all users and devices. I have never run into this issue before and not being able to solve is driving me insane.

Hello All,We attempted blocking Monterey via a software restriction for the exact process name, "install macOS Monterey.app", which we're having mixed results on it actually working within the organization. One of the major issues is that it appears this process name is different based off the lanuage preference set for the machine. One example would be the german process, "macOS Monterey installieren" is not restricted when attempting to restrict the exact process listed above.In attempt to have a catch all I configured an addition restriction where we're not checking for the exact process name, and just "macOS Monterey".Anyone seen this issue and been able to come up with a catch all?

We bought a batch of about 30 Macs a couple months ago and made sure they were all enrolled in DEP at the time of purchase (verified through ABM). I also verified that the PreStage Enrollment listed all the Macs we bought. I've deployed about 10 Macs from that big purchase so far and they have all enrolled and pulled down all the MDM profiles as expected... until recently. We got to a point in the stack where we're starting to see a few Macs (3 so far) that have no idea that they are supposed to be managed. We take the Macs out of the box, plug them in for power and ethernet, then we turn them on. We pick the language and country etc, tell them to use ethernet, then they completely skip over this Remote Management screen that they are supposed to see:It goes straight into privacy and the rest of the non-DEP setup screens. I've had my techs stop the process as soon as they identify that the Remote Management screen doesn't come up. I still have a bunch more Macs that I need to setup

Hi Jamf Nation and happy JNUC 2021! Today we released Jamf Pro 10.33 which includes support for Account-driven user enrollment for iOS/iPadOS. This workflow streamlines the user enrollment onboarding process and focuses on providing corporate access to BYO users while maintaining user privacy on their personal device. We are also excited to announce Unified Endpoint Management Connector (UEMC) which is an integration between Jamf Threat Defense, Jamf Private Access, Jamf Data Policy and Jamf Pro for iOS/iPadOS. To learn more, please check out the Jamf blog post here. This release also includes improvements to the Azure Active Directory integration within Jamf Pro, Recovery Lock password rotation, and a patch title filter option.NOTE: Support for Jamf Imaging has been discontinued. With Jamf Pro 10.33, Jamf will no longer distribute Jamf Imaging as part of the Jamf Pro .dmg file. Please read full release notes here.Kaylee Cloud Upgrade ScheduleYour Jamf Pro serv

Hi all,we use Jamf School for several months now and are pretty happy with it. Today we created a second "System Administrator" in Jamf School for personell redundancy.Since then the old (first) admin cannot login anymore and is presented a "401 Unauthorized Access" error (please see attached screenshot).The new (second) admin is not shown an account and therefore cannot admin Jamf School neither (2nd screenshot).Does anyone has a glue what has happened? Any hints would be really appreciated.Thank you!Johann

Hello All Is there a way to push wallpaper and lock screen images to the Iphones in JAMF? I know its possible under the management tab as a command but is there a way for a config profile or something else so that I dont need to do it manually before shipping it out 

Hi All, So, with Big Sur being OS 11.x, has anyone come up with a good option for not having that collide with 10.11.x? Say you have a smart group, and you say "OS Version -like 11.". That matches both 11. and 10.11. Sure, you could also say AND "OS Version greater than 10.15" or something, but it's still something we're going to have to deal with until Apple gets to macOS 17... (since it appears Big Sur updates are going to be 11.x, so the next major release will be macOS 12). Thoughts? Am I missing something obvious? Should we just ask for regex for OS version and call it a day?

Does any one know of a way to get notifications when a new version of JAMF is available?

Hello, everyone. I'm working on a policy to execute a shell script from a vendor that installs a piece of software. It's a rather large .sh file (24mb) and, if I'm reading it right, it looks like the majority of the file is the raw contents of a .tar that get expanded into a couple of files when it executes. I've uploaded the script and added it to a profile with the two parameters that it needs to run and, of course, it fails. Is there a log file somewhere on a client that will give me the output of the execution attempt? I'm hoping to get some clues about what's going on here other than the generic error message that pops up in Self Service.

Hello !I have a script that runs fine when I execute it from self service, but it fails when I try to push it with a policy. The problem resides when I want to open the app with the command: osascript -e 'open app "application name"' I have an error type -10822 when run from the policy but works fine in self service. I also tried to execute that command with sudo -u $loggedInUser osascript -e 'open app "application name"' or with su $loggedInUser osascript -e 'open app "application name"' but no way. If I make a script locally to use the open command, it's fine when run as the logged user but if I run as root and use the $loggedInUser variable in the script, it fails.Any idea to help me to resolve this ?  It's on a Big Sur mac with Apple M1 chipset.

We bind our devices to AD during the DEP setup.We get our users to log into their dvices using their AD credentials, usually no issues at all with the mobile account setup and the users AD account is recognised.I have come across a device that for the first time is giving me grief with an error that simply statesUnable to create mobile accountThere was an issue creating the mobile accountIts quite a 2017 iMac with Filevault enabled and I can log in with the local account that we auto setup with no issues.I have tried reinstalling Catalina via Restore which didn't help.Unbind rebind didn't help.Checked directory and OU structure in AD and that all looks good.The settings in Computer Management > Directory Bindings are correct and have not changed.Kind of running out of things to point at that could be causing this.At this point I am heading towards a complete wipe and restart but wondering if this could be a hardware or Filevault related issue.I am going through the console logs now

We have a few printers that we have pushed out directly to MacBooks and those all seemed to install fine, but I just went through and added the majority of our printers to Self Service (rather than figuring out who needs what). The printers show up in Self Service, but when I click "Install" I get the message "This item is no longer available" and the printer doesn't show up in my printer list. The policy is enabled, the printer is added to it, I'm not sure what's wrong.

Has anyone successfully uploaded the Monterey 12.0.1 installer to jamf cloud?  I tried as a DMG and as a pkg created using the MegaPKG script. It uploads up to 40% and hangs in Safari then up to 100% in Chrome then it just hangs. File size is about 12gigs. Logged a call with support.  

Hi,We are using LAPSforMac/LAPS.sh at master · caffine247/LAPSforMac · GitHub for LAPS rotation however this script is not working on macOS Big Sur or Monterey.Here is the error message:Just wondering if someone has an alternative or fix for this ?Thanks!

Just wondering if anyone has some pointers or ideas on how you install R packages for lab use? Most of of what I see describes installing via the R console I’m also wondering if there is a way to install directly from the repositories What I really want to do is script it so that I can just deploy using Jamf Pro

Hello, I'm trying to fetch some informations about a given device with thhe API and I can't get it to work, can someone enlight me ?Here's my stylesheet definition:cat << EOF > /tmp/computer.xslt <?xml version="1.0" encoding="UTF-8"?> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="text"/> <xsl:template match="/"> <xsl:for-each select="computer/general"> <xsl:value-of select="name"/> <xsl:text>,</xsl:text> <xsl:value-of select="serial_number"/> <xsl:text>,</xsl:text> <xsl:value-of select="site/name"/> <xsl:text>
</xsl:text> </xsl:for-each> </xsl:template> </xsl:stylesheet> EOF And here's how I run it:fetchDetails=$(curl -sk 'authorization: Basic HIDDEN' -H "Accept: application/xml" https://HIDDEN/JSSResource/computers/id/$jamfID | xsltproc /tmp/computer.xslt -) echo "$fetchDetails" And how

When trying to run an uninstall script for our content filter (iBoss), it fails when running via Policy. However, if you login with a local administrator account and run the script on the machine itself... it works fine. Here is the error: If I echo out the majority of the commands, I narrowed the failure down to the certificate removal. Here is the content of the script: #!/bin/bash # ********************************************************************** # * # * Filename: uninstall.sh # * # * Description: # * # * Notes: # * # * # * # * # * Copyright (c) 2018 iboss, Inc. All rights reserved. # * This software may not be published, distributed or reproduced in any # * manner for any purpose without the express written consent of # * iboss, Inc. # **********************************************************************/ mkdir /tmp/uninstallLogs 2>/dev/null exec &> >(tee -a /tmp/uninstallLogs/$(basename $0).log) date isAws2018=$(uname -r | grep 4.14 | grep amzn1) isA

Hello Community, after reading a lot of posts about how to set a wallpaper for the desktop, I still have not found the solution for my problem: I created a package wich contains a picture.jpg. This package (picture) should be installed to the directory "/Library/Desktop Pictures". After running the policy to install the picture, the result in the logfile sounds: "Installation failed. The installer reported: installer: Error trying to locate volume at /Library/Desktop Pictures". When I open a terminal at the target client, and look for the directory, I only can find it at "/Volumes/Macintosh HD/System/Library/Desktop Pictures" If I paste the complete path as a target to install the picture inside, I get the same response in the logfile. Can anyone help me to solve this problem ?Thank you very much for answering and stay health!

Is there a way to remove a configuration profile that has a wifi configuration without forcibly removing the device from that network? We're a school district, and each teacher has a MacBook Air, so they're all over the place, making physical access difficult. I'm breaking a configuration profile down into its parts to make it more modular. One of these new parts is a wifi profile, which I've deployed to a guinea pig while I was there in person. I added that device to the wifi profile's scope and made sure it applied. However, upon removing the old profile, the device was kicked off of wifi and didn't reconnect. Restarting the wifi doesn't fix it, and neither does restarting the computer, despite the new wifi profile's presence. I could easily physically enter the wifi password, but these devices are everywhere, literally miles apart. It seems odd to me that Jamf forcibly removes the credentials for the wifi when the configuration profile is di

In previous versions, you can go to /opt/cisco/anyconnect/profile and edit an xml file. In this version, it looks like this is now controlled by a .anyconnect file in the users folder. I'm looking for a way to automate this workflow for new hires. How are some of you guys doing this? (I'm also using DeployStudio for imaging)