In previous versions, you can go to /opt/cisco/anyconnect/profile and edit an xml file. In this version, it looks like this is now controlled by a .anyconnect file in the users folder. I'm looking for a way to automate this workflow for new hires. How are some of you guys doing this? (I'm also using DeployStudio for imaging)

Hi all! I'm testing some things with the new Apple M1 Macbook Pro in combination with Jamf. The problem I'm currently struggling with, is that when you perform a wipe on the device initiated by Jamf is that you can't install new clean system again. After the wipe has been done, I boot from recovery mode to start a clean install.First you have to open disk utility to erase the SSD and create a volume to install on. But then I get the following attached error message. Did anyone else test this also and are you having the same issue? The only option to get the Mac working now, is by attaching it to another Mac and revive it with Apple Configurator 2.

Has anyone come up with a way to delete users that have logged into carts with a script for summer maintenance? Want to only leave the admin accounts on it. Thanks

I have LDAP set-up to pull in Room from AD. To make it apply, I have to go to inventory>Details>Location>Click the ellipsis>Click the blue magnifying glass, and then the attribute are populated, Save, for each record. Can this be achieved automatically? I use this room info for smart groups, and if it were automatic, it would save a hemp of manually clicking. Thanks, Matt

I'm looking at the various endpoints related to mobile devices and mobile device applications, and I'm not seeing any obvious way to get the Bundle Size (displayed on the device's Inventory > Apps page via the API:Am I missing something?Thanks for any pointers!

Hi there.  My school has a pool of 40 2017 MacBook Airs running Mojave that the kids use.  They are not assigned 1 to 1, rather they are in a couple of carts and the kids pull from the pool randomly.One or more of our kids are quite savvy and have figured out how to boot into Recovery Mode and change passwords, and wreak other havoks.  What is the recommended method for preventing students from entering recovery mode, single user mode, booting to installer thumb drives, etc.?

Is it possible to search on the existence of a network service? I'm thinking of an extension attribute or smart group or something of the like.We specifically want to track if the Cortex network service called "Cortex XDR Network Filter" is installed.  

We have several app we deleted from our student's iPads. As soon as we removed the students from the scope, the apps disappeared from their iPads. But they are still there, using storage, even though more than a month has passed. There's a fun "Removal Deferred. Will be removed on 10-10-2021" message that mocks us. I could go to the app screen and remove it from each iPad, once a time, but it would take forever.Googling for a solutiona I got to this page:https://docs.jamf.com/jamf-school/deploy-guide-docs/Deferred_Removal_of_Apps_and_Documents.htmlIt says: "or navigate to the app details page and click Delete deferred apps from devices".But I don't see this option. Would anybody be so kind as of taking a screenshot and showing where it is?Thanks in advance. 

Hey everybody,I've seen some stupid things the last time and I wanna know if someone other has the same problem.The Self Service App on macOS only shows a windows, that appears to be a mobile view. I'm not able to fit the size. I already tried to re-enroll a device, but the problem stays the same. If someone has the same problem and has already found a solution for this, let me know!This Problem appears on macOS 11.6 and also on macOS 12 (Developer Beta).Thank you!

Hello, So, I have been trying to obtain a specific data from UAPI, but keep getting 404 errors, which is a response code that it cannot find the data requested... I am able to generate and authenticate with the token fine and I am even able to pull lists, for example pulling the list of all computers via: computerslistall=$(curl -X GET --header "Authorization: Bearer $token" "Accept: application/json" "$jssurl/uapi/preview/computers") Is working fine and if I echo $computerslistall - I get a full list of all computers currently in JSS. However, when I am trying to obtain a specific computer, no matter what I try I get 404... I have tried:$jssurl/uapi/preview/computers/id/XXXX$jssurl/uapi/preview/computers/ComputerOverview/id/XXXX$jssurl/uapi/preview/computers/results/id/XXXX So far I have been unable to find any GET example where a specific data is obtained via UAPI. Would appreciate if anybody has any info/explanation/example on this. Here is a full script code, if anybody needs

Our infrastructure team is decommissioning the Domain controller that we are using for Domain Connection.  I have tried just updating the field in the Jamf Cloud Server, but it did not connect properly. I seem to remember putting the AD controller into the JIM configuration when setting it up, but I can't find a way to update that field.  Is their a guide to updating Domain Controllers for Jamf Cloud using a JIM LDAP Proxy?  All of the guides I see just cover the Jamf Server configurations.

From what I had been reading, I thought it was possible to upgrade a Big Sur 11.3+ client to Monterey via the MDM "Download and Install Updates" command as long as the device was at the login window. In testing, that doesn't appear to be the case. Am I missing something, or am I just wrong?

Good Afternoon all,I have a deployment that I am working on and want to see if others have done something similar. I am deploying iPads to several locations that need to act as Kiosks with a locked down survey for the public, but also allow access to a Web based video translation service when it's needed by the staff.  So I was wondering if there is a way to deploy the configuration profile for each service through Self Service?  That way depending on the use case, the profile can be changed back and forth.If anyone has experience doing this or suggestions for other solutions that you have done, please let me know. 

I'm working on a script that can run to secure screen screen saver corners. The through is I pull the usernames of non system accounts and put the commands below through a forloop.Below is my for loop with variable. I added an echo in my troubleshooting. It looks like my for loop isn’t breaking apart each users in the variable’s array.Anyone run into this or know what I am missing here?=====================adminuser@test-mac ~ % userList=$(dscl /Local/Default -list /Users uid | awk '$2 >= 100 && $0 !~ /^_/ { print $1 }')for u in $userListdoEcho $usersudo -u $u defaults write com.apple.dock wvous-tl-corner -int 0sudo -u $u defaults write com.apple.dock wvous-bl-corner -int 0sudo -u $u defaults write com.apple.dock wvous-tr-corner -int 0sudo -u $u defaults write com.apple.dock wvous-br-corner -int 0donejohn.doeadminusersudo: unknown user: john.doeadminusersudo: error initializing audit plugin sudoers_auditsudo: unknown user: john.doeadminusersudo: error initializing audit plug

Hello,I know there's a discussion about this in another tread (https://community.jamf.com/t5/jamf-pro/deploying-cisco-amp-v-1-9/m-p/213222#M201846) but it is a bit old and perhaps not relevant to this specific issue.I downloaded the AMP agent from our console. It downloads as a .dmg file. I converted it to a .pkg file and attempted to deploy it via Jamf policy. I get this error:Executing Policy AMP for Endpoints v1.16.0.841Downloading amp_BW_Protect_v1.16.0.841.pkg...Downloading https://use1-jcds.services.jamfcloud.com//download/ba805935816b4ce58100361adc837690/amp_BW_Protect_v1.16.0.841.pkg?token=ceff4da85cd4407485a0dc68f74c0df5e89itz2754vxdrj54vfr2r8uom1yic2w...Verifying package integrity...Installing amp_BW_Protect_v1.16.0.841.pkg...Installation failed. The installer reported: installer: Package name is ampmac_connectorinstaller: Upgrading at base path /installer: The upgrade failed. (The Installer encountered an error that caused the installation to fail. Contact the software manuf

Not sure if this is possible. We are rolling out MacBooks to students and are making their account a standard user by default. If a student manages to make their account an administrator, is there a way to check that and change it back? Say they figure out what the JAMF admin account password is. I have one computer I know of where the student has changed their account type, and created a second admin account. Any options here aside from re-imaging?

Hi,I am having a strange issue, where I can find the user account under LDAP > Test feature, but it does not find that same account under Users on JSS... Anybody seen this before?I can find another account in both: LDAP > Test and under Users, which are located in the same OU on the AD, but this particular one I can't, which doesn't make any sense... Appreciate any suggestions on this! 

Hi all, My employer users AnyConnects Always On function which is a nuisance with functions that require graceful shutdowns of macOS like upgrading from Big Sur to Monterey. In the past I have used a script to unload AnyConnects LaunchAgent and kill its PID. The script still works fine if run locally, the script kills AnyConnect and it stays dead.If run from JAMF Pro via policy with a script payload, AnyConnect opens right back up as soon as the policy finishes. Maybe some nuance has changed with JAMF and the space at which it runs scrips? Any ideas?  #!/usr/bin/env bash #* FileName: Cisco-AnyConnect-4-TempDisable.sh #*============================================================================= #* Script Name: Cisco-AnyConnect-4-TempDisable #* Created: [] #* Author: #*============================================================================= #* Purpose: Temporarily diable Cisco AnyConnect in order to prevent OS #* intallations problems, among other uses.

I have turned turned off Apple TV updates but has anyone noticed or have an issue when someones goes to airplay the user gets a message to enter the airplay passcode and then when  then on the projector goes black but the laptop looks like it's projecting. After the user restarts their laptop and/or desktop they are then able to airplay successfully. Is there an easy fix because currently factory resetting the MacOS has done the trick except for one that has a repeated issue. Is this a bug in MacOS or in the TVOS most of the Apple TVS we have are running TVOS 15 and some running older TVOS 14 and one running TVOS 13 I also posted on Apple Community for further information 

Hi Everyone, Wondering if anyone has recently experienced an issue with Apple Kerberos SSO for macOS not recognizing the default realm set in the Jamf config profile? I have been testing this in advance of replacing enterprise connect, and had it set up and working perfectly with our single domain, got everything working how I wanted it, live password testing etc, and had several test users reset their password successfully. Now this week when I went to change my own password, I got the message in the screenshot. Nothing in the config profile has changed, has anyone seen this or have any suggestions?all clients are on Catalina latest version Thanks!

Hi there, I'm trying to understand what version of TLS is used for the 'Simple' authentication type, does anyone have an idea? Hopefully its not TLS v1.1 ? many thanks

Hi Guys Who has GPG suite deployed and can help me with it?There is not much to find on jamfnation, and am not sure if there is a silent installer. thnx in advance

I am periodically having huge issues when trying to deploy apps to iPads in Jamf School.For example, I have 2 iPads refusing to install any managed apps at all at the moment with the error "The license could not be found. Please check the licenses in the app details page."The apps have plenty of space licenses and they're assigned to other iPads just fine.Usually I end up having to wait a week when it suddenly starts working again?Anyone got any ideas what's causing this?

Hi folks I have tinkered with an Apple Script until it successfully "automagically" creates an eMail signature for MS Outlook that pulls some of it's data directly from our Active Directory. When launched manually it works like a charm. Now what I would like to do is to expose this script via SelfService to our users. However it doesn't seem to work as presumably the script will not run in the security context of the local user. Is there an easy way to get the script to run in the context of the local mac user ? Any insight would be appreciated.

After a clean install of Monterey, I enrolled an M1 MacBook Air that is apart of our prestage environment within Apple Business Manager. During the initial account setup we are trying to utilize email address for the account name and on previous versions of MacOS have not had any issues. Whenever I try to edit the account name field the @ disappears and any attempt to replace it yield the same results. I am curious if anyone else has experienced this behavior as well.