Howdy Jamfers! In our previous MDM with computers running Mojave, we were able to push out a Configuration Profile that would set Time Machine to run on AC Power. We copied over this .plist into Jamf in the Application & Custom Settings tab, but it is now seen an "Unknown Keys" for use with Big Sur. See Figure 1. below. Does anyone know if there is an updated Key Value for the Preference Domain com.apple.TimeMachine.plist that will work with Big Sur? Thanks in advance!Aaron Figure 1. 

Hello JN, I am trying to get ready for our fall 2020 semester roll-out here at CU. I am testing the Graham Pugh Erase install script over at Github. My policy fires, downloads the .py script and the specified macOS version 10.15.4. It stop with the following and does not erase and install. My Parameter Flags are: 4 --erase and 5 --version=10.15.4 What am I missing? TIA, /randy Working around a very dumb Apple bug in a package postinstall script that fails to correctly target the Install macOS.app when installed to a volume other than the current boot volume. Please file feedback with Apple! Product downloaded and installed to /Library/Management/erase-install/Install_macOS_10.15.4-19E287.sparseimage [run_installinstallmacos] Mounting sparse disk image to identify installer app./dev/disk3 GUID_partition_scheme /dev/disk3s1 EFI /dev/disk3s2 Apple_HFS

Hello,I upgraded my Jamf Pro server from 10.28.to 10.31 today (it runs on Windows server).  Based on the instructions about the upgrade I checked the Change Management log file path and 1) it exists and 2) Tomcat runs as Local Service and has permissions to the directory.  I also tried changing the permissions on the directory so 'everyone' has modify.  I rebooted the server.  That didn't make any difference.Since running the 10.31 upgrade, the server startup will not get past Initializing Change Management.  I am wondering if anyone else has encountered this and what a solution might be.  I did submit a support request with Jamf but have not heard back yet.Thank you,AJ

I am working on a script that will prep the Application folder for another user. This will remove all the user installed apps. I have been working on this for a bit and am having trouble finding my mistake. Im sure there are there are other ways to do this better and I am all ears. The issue here is that my array seems to not be splitting correctly at the end, causing my end result to be one line instead of multiple looped entries. Thanks for any assistance. #!/bin/bash IFS="," # create an array with all the filer/dir inside ~/myDir array=(/Applications/*) delete=("/Applications/Utilities","/Applications/App Store.app","/Applications/Automator.app","/Applications/Calculator.app","/Applications/Calendar.app","/Applications/Chess.app","/Applications/Contacts.app","/Applications/DVD Player.app","/Applications/Dashboard.app","/Applications/Dictionary.app","/Applications/FaceTime.app","/Applications/Font Book.app","/Applications/Image Capture.app","/Applications/Launchpad.app","/Applica

Hello!!I am trying to understand the client connectivity on our internal network and am curious to know the traffic flow.  I have a JAMF Pro Server, a bunch of Mac clients, and the JAMF Cloud server.   As far as connectivity of the clients, the Mac clients have a JAMF agent, correct?  The Mac clients when sending application usage data, do they connect directly to the cloud?  For example would the traffic flow like: mac_client_jamf_agent --> JAMF Cloud Server --> Internal JAMF Pro Infrastructure server?   Or would traffic from the clients flow like: mac_client_jamf_agent --> Internal JAMF Pro Infrastructure server --> JAMF Cloud Server Does that make sense on what I am asking?Then as far as clients on an external network, would they have to connect back into my internal network to connect to the JAMF Pro Infrastructure server or do they connect directly to the JAMF Cloud Server?  TIA!!! 

Hello everyone! I was wondering if there is any way to do a reinstall of MacOS Big Sur over Monterey via self service. One computer was updated to Monterey and time is a bit of a crunch. Or would the best way to be just boot to USB and then install that way. I want to try to avoid losing data of course, but I am willing to update the client that it is possible that a wipe may be needed 

Hey y'all lovely people!I am looking for an easy way to get my GSX information up to date after our connection went down for a month or two. It seems that the only filters for PO date and warranty expiration date are (past or before certain date) and (x number of days before or after now) I don't have a way to search for all computers that have PO Date or Warranty expiration date missing. I had thought about creating a search that grabs all computers and run a GSX update on that, but some computers have that info manually entered in and if a GSX update is run that info gets erased.Another option is to get all computers filter those who have this data missing and add them to a static group, but then I have to erase that static group possibly at the start (not sure if I can) then also manually run GSX update after the script runs, not ideal, but possible.With that I would like to have a smart group of all devices that have GSX info missing and then run a mass action on that to

Installing Jamf Pro Current Version 10.33.0 on macOS Monterey Version 12.1, mysql 8.0.27. I keep getting "No database connection" when trying to access locally on port 8443. I've worked through "Troubleshooting Database Connectivity from the Jamf Pro Server" a few times, and double checked the DataBase.xml file. Any suggestions would be greatly appreciated. In the meantime I'll try on another Mac with a released version.

How can i remove/delete a computer from a smart group? this computer had a policy cached, was populated in a smart group, then via self service installed the cached application. the computer has been removed from the policy that caches, but the smart group still lists the computer has having the application cached, thus the self service policy still has the application available. how do i get this computer out of the smart group?smart group --> ACTION --> DELETE COMPUTERS, will this delete ALL the computers in the smart group?

Hi all, Has anyone figured out how to auto-configure for exchange 2016? I'm trying to avoid the steps that- once my network users luanch outlook 2016 - they have to input 'their email' , then they choose 'Exchange', then they have to input thier 'username', 'password', and 'server'. Is there a way to automate this to the whom ever network user is login in?

Where does one locate "My Assets" in Jamf Nation?

I wanted to block our users from installing Monterey until we get a chance to test it in our environment.So I downloaded and launched the installer, then opened Activity Monitor to get the process name.The installer showed up as:Install macOS Monterey But when I tried blocking that process (with Restrict exact process name checked), it didn't work.On a hunch I changed it to this: Install macOS Monterey.app That worked.I'm not sure why this is the case, because there's definitely no .app in the process name.

My Google-foo is failing me today. I'm outside of my wheelhouse trying to convert our distribution points from SMB to HTTP. I've got my clients connecting successfully, but every policy is failing with Error: Package was not successfully downloaded. -1001 I can't find anything on error 1001. Does anyone have any insight?

The teams app appears to be problematic whenever multiple users share an iPad. The problem is, the one user may sign out, but if another user has a profile on the same ipad and clicks theirs to sign into teams, it will bypass all security and open up in the previous user's account who just signed out. Obviously, quite a real privacy issue. here is a link to the situation as observed by others. https://techcommunity.microsoft.com/t5/microsoft-teams/issue-in-microsoft-teams-app-in-ipad/m-p/107695 The only way around this at present is to go into settings and clear the app data. The toggle appears as a switch, suggesting this is a one-time setting change, but it is not. Is there any way to install teams for iPad where exiting the program automatically clears the app's data?

I've followed the steps in Jamf pro help topic 109994 to create a report of all the applications in my environment, but when I look at the generated csv file, there are many lines that appear to be missing the application name, i.e. ",,User’s MacBook Pro" rather than "some_application.app,3.6.1,User’s MacBook Pro"I can view an individual's computer's applications in the console, and many of these applications do now show up in the application report. I infer that these missing applications are the lines that are lacking the application name. Has anyone found a solution to this problem?

Hello AllI am having an issue where our local usernames are being setup as "first.last" and this is causing issues down the provisioning road. We are using OneLogin with JAMF Connect and have the LDAP attributes pulling as well, below are the attrbitutes currently mappedUserID - uSNCreatedUSername- sAMAccountnameRealName - GivenNameusersUUID - uidNumber I changed these attributes and it seems this could be the cause but im not sure. Attributes that were in Attribute mappings before the change when the names came in as "firstlast" correct formatUserID - not mappedusername - cnreal name - givennameusersUUID - UidNumber Just wanted to get some advice on what could be causing this, these are the only things ive changed lately

I would like to ask if anybody might have performance and overall reliability comparisons of running the JSS and Distribution points on macOS vs VMs?My existing hardware is:JSS and primary distribution pointMacPro Late 2013, 6 core 3.5 GHz Intel Xeon E5, 32 GB RAMMacPro Late 2013, 6 core 3.5 GHz Intel Xeon E5, 32 GB RAM Additional Distribution pointsMacPro Late 2013, quad core 3.7 Ghz Intel Xeon E5, 32 GB RAM

Hi, Just wondering if anyone knows whether there is some sort of log on Mac's that shows what is happening during 802.1x connections and disconnections etc for wired 802.1x not wireless?I can see in Console under the Machine name (devices) a bunch of things for eapolclient  in the All Messages pane but can't see this info in any logs 

Hi all, Due to 'reasons' such not able to check VM's being hosted within Parallels Desktop, my company has decided to restrict Parallels Desktop from running within macOS for everyone. I am currently setting up a Restricted Software for Parallels.- I have setup various Process Name such as Parallels, "Parallels Desktop", Parallels D*, etc, with and without " quotes.- I have turned off or on Restrict exact process name- I have turned on Kill Process But no matter the combinations I tried for Process Name or Restrict Exact Process Name, I either get:- When Restrict exact process name = on, the restriction does not work at all. I can still start Parallels Desktop, no matter what name I put in.- When Restrict exact process name = off, the restriction works too well. Even when I have Parallels not running, it kill message pops up every 15 minutes, asking the user to stop using Parallels. Does anyone else know how to restrict Parallels Desktop proper

WIth nomad it seems to go to login screen between the upgrade of OS so it doesn't complete upgrade till login then it shows the remaining minutes then the upgrade will be complete. Is their a way around this or did I miss something in my settings or in settings that needs to be there for the upgrades to be auto? Thanks for helping.

I had a curious question about something I noticed while auditing our managed apps in our JamF Pro instance. I think a few of our apps have shown this same message, but I wanted to focus on this one because of the unique situation.The app in question is called Audio Exam Player. The app is designed for dyslexic students to read of a recording of a test or quiz a teacher has set up and the student can listen to the questions and answers (there is an Audio Exam Creator that goes with it). I noticed today that in our JamF Pro that the following error messages came up when I viewed the app settings.This app is disabled. It is not deployed to users or devices and is no longer available from Self Service.Complete information about this app is currently unavailable, or the app may be unavailable from the App Store.I also have a screenshot of the app settings attached. I did see that the app is still listed in the App Store as well as Apple School Manager, so I am not sure why I am getting thi

So have a bunch is kids just downloading and running the jar file! Is there a way to black list jar files with jar launcher?

The company I work for has rolled out Mac Minis as Zoom Rooms in several of our conference rooms. Some of those rooms have A/V racks that connect ceiling mounted microphones and speakers to the computer through an external audio card on the Mac (currently the external audio card is a crappy logitech headset adapter, but audio quality doesn't seem to be an issue). The problem is, the mic and speakers feed back if the mic gain is turned up too high unless the "Thru" checkbox is unchecked in Audio-MIDI setup (which makes sense). I can uncheck the box manually, but Audio-MIDI setup resets itself and re-checks the box after the computer reboots, which is scheduled once a week since the computer is a Zoom Room device. I haven't been able to find anything (aside from Applescript UI scripting, which I would prefer to not use if possible) to un-check that box via a script. The most promising thing I've found so far is: /Library/Preferences/Audio/com.apple.audio.DeviceSettings.plist Th

Hey folks,Our machine naming convention is 11 characters long. The first 4 characters are:m = macd/p = desktop/portable21 = deployment year...then the last 7 characters of that machine's serial number.We can't change this naming convention operationally/culturally (eg use the full serial). It has to be the way it is.Currently at enrollment, we display the full serial number on the screen, and the person imaging it will count 7 characters back, and manually type/paste that in. This lends itself to errors, that don't always get caught in time.We can sort out automating the first 4 characters, but does anyone have a clever idea about how we could automatically put the last 7 of the serial into the name? 

I believe I have a slightly different situation here than what I've found online so far regarding resetting passwords.  In our situation we have a bunch of laptops that went out to Teachers that were not included in our pre-stage enrollment.  Since then, a local user account has been created (admin with secure token) and now we want to send out enrollment invites to get these devices logged into the system.  So far I've been able to do so quite easily on a test machine, and can even create a hidden admin account with password that we can use to backdoor into the device if needed.  One purpose of doing this would be to reset a forgotten password.  However, I'm beginning to realize that this may not be possible because the first account created (501) has a secure token and the second account (502) does not.  At this time I am unable to reset the password of the original account.  I should say that we are primarily using macOS Catalina and Big Sur.