HiI’m trying to set up a BYOD environment besides our company owned devices. As shown here           With PreStage Enrollments it works like a charm but on the personally owned devices it doesn’t install at all. I followed this manual but it doesn’t work. All I got is an error, shown hereWhat is going wrong here? Thanks

Oooh, badges!  (Come on, somebody had to set up the inevitable follow-up.)

Hi folks,Newbie here.I'm trying to configure jamf connect, and I'm unclear if I have to have a hybrid setup.Users are in AWS Directory Services (which is just managed AD).This  is connected to Azure AD via Azure AD connect using password passthru.Where I am stuck is the ROPG settings in the plist file. I'm not sure how to find the ROPGID Client ID or discovery url.Any clues?Thanks!

This might be a simple thing but for the life of me im at a loss. We have some seriously locked down iPads for inmates and know how to restrict safari to a specific website and all that but how do i push/create a bookmark icon onto the home screen so its easier to get to?

Using The MUT v5.0.3 on Jamf Pro 10.7.1. Have a .CSV file of just S/N. In MUT I select Computer Static Group, Add to Static Group, My GroupID for this is 168. Pre-Flight tells me Looks good! I click Submit Updates. I then in the MUT.log file I get this error-Failed PUT. 409Error: Unable to match computer I created a fresh static group and that group gave me the same error.

I had a question about Enrollment policies. If I have policies set for just Enrollment does it only work once when it's a new device and being setup? Or does it run those policies if the device has been wiped and reinstalled OS which would make the Enrollment policies run. Not understanding the Enrollment policies. I've just saw Jamfs video on auto enrollment with using this script https://gist.github.com/e1848e3b410395f05c9fcd9ed78386a5. I was curious on creating a policy that says Enrollment Complete would it just install once on first setup of device or if device is wiped and reinstalled OS.

So the good one I think was upgraded to Big Sur while the bad one had Big Sur installed from Apple Internet Recovery,  Haven't found any way to "enable".

I seem to recall in my previous Jamf administrator life that I could add ~/Applications/ for software inventory collection on Macs. I'm trying to add that path now but when I click Save, I get: "An error occurred while saving changes." I also tried /Users/*/Applications/ with the same result.  Is searching users' home folders for apps no longer a thing?

We currently have a standard JSS group that contains our support staff who have been added to the standard group as LDAP users. In the privileges section of the group under the "Jamf Pro Server objects", the "Read" section for "Scripts" has been selected. The support staff can access the "Scripts" section under Computer Management and can see the list of scripts we use for our policies, but when selecting to view the contents of any of the scripts they are met with an "Access Denied 403" message. I know they certainly used to have access to view the scripts, so I'm wondering if there's been an update that might have caused this, although I couldn't say how long the scripts have been inaccessible for. I've tried removing the permissions and re-adding them. Creating another test group with the same privileges and also granting them "Update" and "Create" access rights. Bizarrely this didn't make any difference, they still had no access. Does anyone have any ideas on how we can let t

Hello everyone, I'm wondering what best practices is to map printers to be installed either via policy or via self service. According to the JAMF documentation it says to use URI or IP based mapping, however, I'm assuming that this isn't taking into consideration that you may have print servers available. We are revamping our print servers this summer, before next school year, and I'm thinking that I should create new printer packages for self service as well, since we are switching to Sierra. I have been with my district, and JAMF, for about a year now and I've been creating all printer packages with mapping that used the print servers. However, I noticed that most of the printers installed before me were installed with IP's. We haven't really noticed an issue, however, I assume that it would help to have the print server take care of queuing the print jobs to prevent issue. So, utilize print servers or map straight to IP's? That is the question.

Hey all,We currently use WebHelpDesk by solar winds and for reasons both obvious and not, we are looking at alternatives.  I was wondering what other help desk systems other Jamf Admins were using and liking? We have demos set up with zendesk, FreshDesk, and Incident IQ (which we are leaning toward). Thanks for any feedback you can provide!

I'm trying to make Panopto 7.0.0 available on Self Service, however, it always seems to error out at the very end. After digging through some logs, I found that the installer should prompt the user with the message in the title (due to Mojave's "enhanced" security) and that is were Jamf is calling the error. Is there a way to get this to work through Self Service? I have tried to script a better installation for the Panopto package but I can't seem to get it to actually function correctly afterwards (in-app upload always breaks). Any help would be much appreciated.

I'm trying to deploy a new configuration profile that contains settings for kernel extensions, system extensions and privacy policy. When it attempts to push out JAMF results in an error:-[__NSCFConstantString objectForKeyedSubscript:]: unrecognized selector sent to instance 0x7fff8adf40e0This is an on-premise JAMF instance version 10.32.2 Has anybody else experienced this or something similar? 

Hi All - Does anyone know of a way to see if a user is / has been running a time machine backup from their mac? I know I can get various info using tmutil, but to my knowledge all I'm getting from that is when it's actively backing up, and would just show client ID and running = 0 when it's not actively running a backup. Any ideas?

IT pros will be able to delay Apple updates for 90 days with iOS 11.3, macOS 10.13.4 YAY!

Is there a trick to making the restricted apps payload not nuke users web clips? Thanks!

Hi all,  First off, thank you all for helping me so far with basic questions, I finally got access to the Composer app and it's been so much easier to deploy packages and whatnot. 🙂 I'm trying to use the built in policy option for creating a local account for backdoor access, to have users be able to access their machine in case of a password issue, etc. Two accounts get created, CompanyUser (for the user to be able to access) and CompanyAdmin (which I have forgotten the password to). I have a script that hides the account in the /private/var/CompanyUser (or /private/var/CompanyAdmin respectively) and that works fine, but when running this script it gives and error on the part when it goes to create the users: Error creating user: An account with the user name CompanyAdmin already exists.. When I go to the /private/var/ folder, no such user directories are present. Hmm. Odd. I try logging in to the users from the login screen (I only currently know the passw

Hi, friends! One of our Jamf Heroes, @rastogisagar123, just reminded me that everyone may not know you can explore the historical JNUC magic through a number of videos we have on file at jamf.com. That's right! They're available RIGHT NOW if you wanted to see what we spoke about in past years. Just head on over to: https://www.jamf.com/resources/search/?filters=Videos%2CJamf+Nation+User+Conference+2020%2CJamf+Nation+User+Conference+2019%2CJamf+Nation+User+Conference+2018%2CJamf+Nation+User+Conference+2016%2CJamf+Nation+User+Conference+2015%2CJamf+Nation+User+Conference+2014   See a historical session you especially love? Mention it in a comment! I'll start with mine. I LOVED being able to share the Rituals story during a Day 2 Keynote with @jzwaan and then introducing Jamf Heroes for the first time! Check it out at https://youtu.be/ljfiUD-eTFg?t=5061  

Hello, At the moment I'm facing some troubles with a script. I want to uninstall the EndPointProtector from CoSoSys. They provide a remove script, which I want to start from a JSS script. The problem: you have to enter a pre-defined uninstall password. How could I pass this from my script to the other script? I already tried something like this: #The uninstall password unpw="xxxxxx" #This calls the EPP uninstaller script cd /Library/CoSoSys/EndpointProtector/ echo "$unpw " | ./remove-epp But it didn't worked. I guess the problem is "remove-epp" is no command but an other script, so basically my script hands over the string to the launch command of the other script but not to the input method inside this remove-eps script... Any ideas how I could solve this? It causes a lot of troubles right now for us....

We recently learned that our student population somehow got the jamf mgmt account password. We want to switch to randomized passwords but we also use the mgmt account for working on the machine when admin priv is required. So obviously that will no longer be an option. What are other people doing for local admin rights on managed computers? We could use domain credentials but in my experience it's not uncommon for Macs to lose their domain bind, and I see in the official docs that JAMF recommends a local account in case of domain disconnect.  So then I thought about making a hidden local admin account but then we're back to having one universal set of credentials and risk the students somehow getting this password. Any thoughts are appreciated.

Got my certs uploaded, but when I run a test I get: org.apache.http.conn.HttpHostConnectException: Connect to gsxapi.apple.com:443 [gsxapi.apple.com/17.151.129.22] failed: Connection timed out: connect How do I know if this is on my end and I need to open something up internally, or if this is on Apple's end and they haven't whitelisted my IP yet? Do they send an email specifically announcing the whitelist? I haven't received anything mentioning it yet.

Dear All, Need help on executing a bash script: How to run this via bash script? sudo defaults write ~/Library/Preferences/ByHost/com.apple.controlcenter.plist Sound -int 18 sudo defaults write ~/Library/Preferences/ByHost/com.apple.controlcenter.plist Screen\\Mirroring -int 18 sudo defaults write ~/Library/Preferences/ByHost/com.apple.controlcenter.plist Bluetooth -int 18  Thanks!Raj.  

Hi all Since iOS 14.2 we have a problem with the in camera QR code scanner. The square shows up but the pop up with the link does not. Also the scanner is not available in settings>control centre so we cannot add it to the control centre as an icon. I think both problems are related and I am pretty sure it has something to do with our Jamf School environment as I have no problems with my personal (Identical type) iPad. Unfortunately I can't find anything in the restricions and there does not seem to be an QR code build in application which needs to be added to the whitelist. Nonethless it seems blocked somehow. Is there anybody who can shed some light on this issue?Thanks muchFrederic

I have an .app bundle contained in a .dmg that I am trying to package to deploy to our fleet of machines to the /Applications directory. When I package this via composer utilizing either drag and drop from /Applications to Composer, or via normal snapshot and drag from the .dmg to /Applications I get a usable package that installs fine on 10.15.7 machines. However, when this same package is run(manually or via policy in Jamf Pro) on a macOS 11.x machine the installation to /Applications is literally zero KB and is an unusable "shell" of the .app bundle. The icon is greyed out with a crossed out circle in it(indicating nothing is there). I'm racking my brain trying to figure out why, has anyone else experienced this/know a fix/workaround?

We have a few machines that did not update their FV recovery key, so I created a policy that will be scoped to a smart group. I did not create the smart group yet so I have the policy scoped to Specific Machines and Specific users, with nobody added; no targets. It is also set to run once per machine and only attempt 3 times. However, despite these settings it did still push out to all our machines and was attempting on failed machines indefinitely. I have it disabled currently but can find no reason why it pushed out to anybody. has anyone encountered this before and if so, was there a fix for it?