Good Afternoon all,I have a deployment that I am working on and want to see if others have done something similar. I am deploying iPads to several locations that need to act as Kiosks with a locked down survey for the public, but also allow access to a Web based video translation service when it's needed by the staff.  So I was wondering if there is a way to deploy the configuration profile for each service through Self Service?  That way depending on the use case, the profile can be changed back and forth.If anyone has experience doing this or suggestions for other solutions that you have done, please let me know. 

I'm working on a script that can run to secure screen screen saver corners. The through is I pull the usernames of non system accounts and put the commands below through a forloop.Below is my for loop with variable. I added an echo in my troubleshooting. It looks like my for loop isn’t breaking apart each users in the variable’s array.Anyone run into this or know what I am missing here?=====================adminuser@test-mac ~ % userList=$(dscl /Local/Default -list /Users uid | awk '$2 >= 100 && $0 !~ /^_/ { print $1 }')for u in $userListdoEcho $usersudo -u $u defaults write com.apple.dock wvous-tl-corner -int 0sudo -u $u defaults write com.apple.dock wvous-bl-corner -int 0sudo -u $u defaults write com.apple.dock wvous-tr-corner -int 0sudo -u $u defaults write com.apple.dock wvous-br-corner -int 0donejohn.doeadminusersudo: unknown user: john.doeadminusersudo: error initializing audit plugin sudoers_auditsudo: unknown user: john.doeadminusersudo: error initializing audit plug

Hello,I know there's a discussion about this in another tread (https://community.jamf.com/t5/jamf-pro/deploying-cisco-amp-v-1-9/m-p/213222#M201846) but it is a bit old and perhaps not relevant to this specific issue.I downloaded the AMP agent from our console. It downloads as a .dmg file. I converted it to a .pkg file and attempted to deploy it via Jamf policy. I get this error:Executing Policy AMP for Endpoints v1.16.0.841Downloading amp_BW_Protect_v1.16.0.841.pkg...Downloading https://use1-jcds.services.jamfcloud.com//download/ba805935816b4ce58100361adc837690/amp_BW_Protect_v1.16.0.841.pkg?token=ceff4da85cd4407485a0dc68f74c0df5e89itz2754vxdrj54vfr2r8uom1yic2w...Verifying package integrity...Installing amp_BW_Protect_v1.16.0.841.pkg...Installation failed. The installer reported: installer: Package name is ampmac_connectorinstaller: Upgrading at base path /installer: The upgrade failed. (The Installer encountered an error that caused the installation to fail. Contact the software manuf

Not sure if this is possible. We are rolling out MacBooks to students and are making their account a standard user by default. If a student manages to make their account an administrator, is there a way to check that and change it back? Say they figure out what the JAMF admin account password is. I have one computer I know of where the student has changed their account type, and created a second admin account. Any options here aside from re-imaging?

Hi,I am having a strange issue, where I can find the user account under LDAP > Test feature, but it does not find that same account under Users on JSS... Anybody seen this before?I can find another account in both: LDAP > Test and under Users, which are located in the same OU on the AD, but this particular one I can't, which doesn't make any sense... Appreciate any suggestions on this! 

Hi all, My employer users AnyConnects Always On function which is a nuisance with functions that require graceful shutdowns of macOS like upgrading from Big Sur to Monterey. In the past I have used a script to unload AnyConnects LaunchAgent and kill its PID. The script still works fine if run locally, the script kills AnyConnect and it stays dead.If run from JAMF Pro via policy with a script payload, AnyConnect opens right back up as soon as the policy finishes. Maybe some nuance has changed with JAMF and the space at which it runs scrips? Any ideas?  #!/usr/bin/env bash #* FileName: Cisco-AnyConnect-4-TempDisable.sh #*============================================================================= #* Script Name: Cisco-AnyConnect-4-TempDisable #* Created: [] #* Author: #*============================================================================= #* Purpose: Temporarily diable Cisco AnyConnect in order to prevent OS #* intallations problems, among other uses.

I have turned turned off Apple TV updates but has anyone noticed or have an issue when someones goes to airplay the user gets a message to enter the airplay passcode and then when  then on the projector goes black but the laptop looks like it's projecting. After the user restarts their laptop and/or desktop they are then able to airplay successfully. Is there an easy fix because currently factory resetting the MacOS has done the trick except for one that has a repeated issue. Is this a bug in MacOS or in the TVOS most of the Apple TVS we have are running TVOS 15 and some running older TVOS 14 and one running TVOS 13 I also posted on Apple Community for further information 

Hi Everyone, Wondering if anyone has recently experienced an issue with Apple Kerberos SSO for macOS not recognizing the default realm set in the Jamf config profile? I have been testing this in advance of replacing enterprise connect, and had it set up and working perfectly with our single domain, got everything working how I wanted it, live password testing etc, and had several test users reset their password successfully. Now this week when I went to change my own password, I got the message in the screenshot. Nothing in the config profile has changed, has anyone seen this or have any suggestions?all clients are on Catalina latest version Thanks!

Hi there, I'm trying to understand what version of TLS is used for the 'Simple' authentication type, does anyone have an idea? Hopefully its not TLS v1.1 ? many thanks

Hi Guys Who has GPG suite deployed and can help me with it?There is not much to find on jamfnation, and am not sure if there is a silent installer. thnx in advance

I am periodically having huge issues when trying to deploy apps to iPads in Jamf School.For example, I have 2 iPads refusing to install any managed apps at all at the moment with the error "The license could not be found. Please check the licenses in the app details page."The apps have plenty of space licenses and they're assigned to other iPads just fine.Usually I end up having to wait a week when it suddenly starts working again?Anyone got any ideas what's causing this?

Hi folks I have tinkered with an Apple Script until it successfully "automagically" creates an eMail signature for MS Outlook that pulls some of it's data directly from our Active Directory. When launched manually it works like a charm. Now what I would like to do is to expose this script via SelfService to our users. However it doesn't seem to work as presumably the script will not run in the security context of the local user. Is there an easy way to get the script to run in the context of the local mac user ? Any insight would be appreciated.

After a clean install of Monterey, I enrolled an M1 MacBook Air that is apart of our prestage environment within Apple Business Manager. During the initial account setup we are trying to utilize email address for the account name and on previous versions of MacOS have not had any issues. Whenever I try to edit the account name field the @ disappears and any attempt to replace it yield the same results. I am curious if anyone else has experienced this behavior as well.

Howdy Jamfers! In our previous MDM with computers running Mojave, we were able to push out a Configuration Profile that would set Time Machine to run on AC Power. We copied over this .plist into Jamf in the Application & Custom Settings tab, but it is now seen an "Unknown Keys" for use with Big Sur. See Figure 1. below. Does anyone know if there is an updated Key Value for the Preference Domain com.apple.TimeMachine.plist that will work with Big Sur? Thanks in advance!Aaron Figure 1. 

Hello JN, I am trying to get ready for our fall 2020 semester roll-out here at CU. I am testing the Graham Pugh Erase install script over at Github. My policy fires, downloads the .py script and the specified macOS version 10.15.4. It stop with the following and does not erase and install. My Parameter Flags are: 4 --erase and 5 --version=10.15.4 What am I missing? TIA, /randy Working around a very dumb Apple bug in a package postinstall script that fails to correctly target the Install macOS.app when installed to a volume other than the current boot volume. Please file feedback with Apple! Product downloaded and installed to /Library/Management/erase-install/Install_macOS_10.15.4-19E287.sparseimage [run_installinstallmacos] Mounting sparse disk image to identify installer app./dev/disk3 GUID_partition_scheme /dev/disk3s1 EFI /dev/disk3s2 Apple_HFS

Hello,I upgraded my Jamf Pro server from 10.28.to 10.31 today (it runs on Windows server).  Based on the instructions about the upgrade I checked the Change Management log file path and 1) it exists and 2) Tomcat runs as Local Service and has permissions to the directory.  I also tried changing the permissions on the directory so 'everyone' has modify.  I rebooted the server.  That didn't make any difference.Since running the 10.31 upgrade, the server startup will not get past Initializing Change Management.  I am wondering if anyone else has encountered this and what a solution might be.  I did submit a support request with Jamf but have not heard back yet.Thank you,AJ

I am working on a script that will prep the Application folder for another user. This will remove all the user installed apps. I have been working on this for a bit and am having trouble finding my mistake. Im sure there are there are other ways to do this better and I am all ears. The issue here is that my array seems to not be splitting correctly at the end, causing my end result to be one line instead of multiple looped entries. Thanks for any assistance. #!/bin/bash IFS="," # create an array with all the filer/dir inside ~/myDir array=(/Applications/*) delete=("/Applications/Utilities","/Applications/App Store.app","/Applications/Automator.app","/Applications/Calculator.app","/Applications/Calendar.app","/Applications/Chess.app","/Applications/Contacts.app","/Applications/DVD Player.app","/Applications/Dashboard.app","/Applications/Dictionary.app","/Applications/FaceTime.app","/Applications/Font Book.app","/Applications/Image Capture.app","/Applications/Launchpad.app","/Applica

Hello!!I am trying to understand the client connectivity on our internal network and am curious to know the traffic flow.  I have a JAMF Pro Server, a bunch of Mac clients, and the JAMF Cloud server.   As far as connectivity of the clients, the Mac clients have a JAMF agent, correct?  The Mac clients when sending application usage data, do they connect directly to the cloud?  For example would the traffic flow like: mac_client_jamf_agent --> JAMF Cloud Server --> Internal JAMF Pro Infrastructure server?   Or would traffic from the clients flow like: mac_client_jamf_agent --> Internal JAMF Pro Infrastructure server --> JAMF Cloud Server Does that make sense on what I am asking?Then as far as clients on an external network, would they have to connect back into my internal network to connect to the JAMF Pro Infrastructure server or do they connect directly to the JAMF Cloud Server?  TIA!!! 

Hello everyone! I was wondering if there is any way to do a reinstall of MacOS Big Sur over Monterey via self service. One computer was updated to Monterey and time is a bit of a crunch. Or would the best way to be just boot to USB and then install that way. I want to try to avoid losing data of course, but I am willing to update the client that it is possible that a wipe may be needed 

Hey y'all lovely people!I am looking for an easy way to get my GSX information up to date after our connection went down for a month or two. It seems that the only filters for PO date and warranty expiration date are (past or before certain date) and (x number of days before or after now) I don't have a way to search for all computers that have PO Date or Warranty expiration date missing. I had thought about creating a search that grabs all computers and run a GSX update on that, but some computers have that info manually entered in and if a GSX update is run that info gets erased.Another option is to get all computers filter those who have this data missing and add them to a static group, but then I have to erase that static group possibly at the start (not sure if I can) then also manually run GSX update after the script runs, not ideal, but possible.With that I would like to have a smart group of all devices that have GSX info missing and then run a mass action on that to

Installing Jamf Pro Current Version 10.33.0 on macOS Monterey Version 12.1, mysql 8.0.27. I keep getting "No database connection" when trying to access locally on port 8443. I've worked through "Troubleshooting Database Connectivity from the Jamf Pro Server" a few times, and double checked the DataBase.xml file. Any suggestions would be greatly appreciated. In the meantime I'll try on another Mac with a released version.

How can i remove/delete a computer from a smart group? this computer had a policy cached, was populated in a smart group, then via self service installed the cached application. the computer has been removed from the policy that caches, but the smart group still lists the computer has having the application cached, thus the self service policy still has the application available. how do i get this computer out of the smart group?smart group --> ACTION --> DELETE COMPUTERS, will this delete ALL the computers in the smart group?

Hi all, Has anyone figured out how to auto-configure for exchange 2016? I'm trying to avoid the steps that- once my network users luanch outlook 2016 - they have to input 'their email' , then they choose 'Exchange', then they have to input thier 'username', 'password', and 'server'. Is there a way to automate this to the whom ever network user is login in?

Where does one locate "My Assets" in Jamf Nation?

I wanted to block our users from installing Monterey until we get a chance to test it in our environment.So I downloaded and launched the installer, then opened Activity Monitor to get the process name.The installer showed up as:Install macOS Monterey But when I tried blocking that process (with Restrict exact process name checked), it didn't work.On a hunch I changed it to this: Install macOS Monterey.app That worked.I'm not sure why this is the case, because there's definitely no .app in the process name.