My Google-foo is failing me today. I'm outside of my wheelhouse trying to convert our distribution points from SMB to HTTP. I've got my clients connecting successfully, but every policy is failing with Error: Package was not successfully downloaded. -1001 I can't find anything on error 1001. Does anyone have any insight?

The teams app appears to be problematic whenever multiple users share an iPad. The problem is, the one user may sign out, but if another user has a profile on the same ipad and clicks theirs to sign into teams, it will bypass all security and open up in the previous user's account who just signed out. Obviously, quite a real privacy issue. here is a link to the situation as observed by others. https://techcommunity.microsoft.com/t5/microsoft-teams/issue-in-microsoft-teams-app-in-ipad/m-p/107695 The only way around this at present is to go into settings and clear the app data. The toggle appears as a switch, suggesting this is a one-time setting change, but it is not. Is there any way to install teams for iPad where exiting the program automatically clears the app's data?

I've followed the steps in Jamf pro help topic 109994 to create a report of all the applications in my environment, but when I look at the generated csv file, there are many lines that appear to be missing the application name, i.e. ",,User’s MacBook Pro" rather than "some_application.app,3.6.1,User’s MacBook Pro"I can view an individual's computer's applications in the console, and many of these applications do now show up in the application report. I infer that these missing applications are the lines that are lacking the application name. Has anyone found a solution to this problem?

Hello AllI am having an issue where our local usernames are being setup as "first.last" and this is causing issues down the provisioning road. We are using OneLogin with JAMF Connect and have the LDAP attributes pulling as well, below are the attrbitutes currently mappedUserID - uSNCreatedUSername- sAMAccountnameRealName - GivenNameusersUUID - uidNumber I changed these attributes and it seems this could be the cause but im not sure. Attributes that were in Attribute mappings before the change when the names came in as "firstlast" correct formatUserID - not mappedusername - cnreal name - givennameusersUUID - UidNumber Just wanted to get some advice on what could be causing this, these are the only things ive changed lately

I would like to ask if anybody might have performance and overall reliability comparisons of running the JSS and Distribution points on macOS vs VMs?My existing hardware is:JSS and primary distribution pointMacPro Late 2013, 6 core 3.5 GHz Intel Xeon E5, 32 GB RAMMacPro Late 2013, 6 core 3.5 GHz Intel Xeon E5, 32 GB RAM Additional Distribution pointsMacPro Late 2013, quad core 3.7 Ghz Intel Xeon E5, 32 GB RAM

Hi, Just wondering if anyone knows whether there is some sort of log on Mac's that shows what is happening during 802.1x connections and disconnections etc for wired 802.1x not wireless?I can see in Console under the Machine name (devices) a bunch of things for eapolclient  in the All Messages pane but can't see this info in any logs 

Hi all, Due to 'reasons' such not able to check VM's being hosted within Parallels Desktop, my company has decided to restrict Parallels Desktop from running within macOS for everyone. I am currently setting up a Restricted Software for Parallels.- I have setup various Process Name such as Parallels, "Parallels Desktop", Parallels D*, etc, with and without " quotes.- I have turned off or on Restrict exact process name- I have turned on Kill Process But no matter the combinations I tried for Process Name or Restrict Exact Process Name, I either get:- When Restrict exact process name = on, the restriction does not work at all. I can still start Parallels Desktop, no matter what name I put in.- When Restrict exact process name = off, the restriction works too well. Even when I have Parallels not running, it kill message pops up every 15 minutes, asking the user to stop using Parallels. Does anyone else know how to restrict Parallels Desktop proper

WIth nomad it seems to go to login screen between the upgrade of OS so it doesn't complete upgrade till login then it shows the remaining minutes then the upgrade will be complete. Is their a way around this or did I miss something in my settings or in settings that needs to be there for the upgrades to be auto? Thanks for helping.

I had a curious question about something I noticed while auditing our managed apps in our JamF Pro instance. I think a few of our apps have shown this same message, but I wanted to focus on this one because of the unique situation.The app in question is called Audio Exam Player. The app is designed for dyslexic students to read of a recording of a test or quiz a teacher has set up and the student can listen to the questions and answers (there is an Audio Exam Creator that goes with it). I noticed today that in our JamF Pro that the following error messages came up when I viewed the app settings.This app is disabled. It is not deployed to users or devices and is no longer available from Self Service.Complete information about this app is currently unavailable, or the app may be unavailable from the App Store.I also have a screenshot of the app settings attached. I did see that the app is still listed in the App Store as well as Apple School Manager, so I am not sure why I am getting thi

So have a bunch is kids just downloading and running the jar file! Is there a way to black list jar files with jar launcher?

The company I work for has rolled out Mac Minis as Zoom Rooms in several of our conference rooms. Some of those rooms have A/V racks that connect ceiling mounted microphones and speakers to the computer through an external audio card on the Mac (currently the external audio card is a crappy logitech headset adapter, but audio quality doesn't seem to be an issue). The problem is, the mic and speakers feed back if the mic gain is turned up too high unless the "Thru" checkbox is unchecked in Audio-MIDI setup (which makes sense). I can uncheck the box manually, but Audio-MIDI setup resets itself and re-checks the box after the computer reboots, which is scheduled once a week since the computer is a Zoom Room device. I haven't been able to find anything (aside from Applescript UI scripting, which I would prefer to not use if possible) to un-check that box via a script. The most promising thing I've found so far is: /Library/Preferences/Audio/com.apple.audio.DeviceSettings.plist Th

Hey folks,Our machine naming convention is 11 characters long. The first 4 characters are:m = macd/p = desktop/portable21 = deployment year...then the last 7 characters of that machine's serial number.We can't change this naming convention operationally/culturally (eg use the full serial). It has to be the way it is.Currently at enrollment, we display the full serial number on the screen, and the person imaging it will count 7 characters back, and manually type/paste that in. This lends itself to errors, that don't always get caught in time.We can sort out automating the first 4 characters, but does anyone have a clever idea about how we could automatically put the last 7 of the serial into the name? 

I believe I have a slightly different situation here than what I've found online so far regarding resetting passwords.  In our situation we have a bunch of laptops that went out to Teachers that were not included in our pre-stage enrollment.  Since then, a local user account has been created (admin with secure token) and now we want to send out enrollment invites to get these devices logged into the system.  So far I've been able to do so quite easily on a test machine, and can even create a hidden admin account with password that we can use to backdoor into the device if needed.  One purpose of doing this would be to reset a forgotten password.  However, I'm beginning to realize that this may not be possible because the first account created (501) has a secure token and the second account (502) does not.  At this time I am unable to reset the password of the original account.  I should say that we are primarily using macOS Catalina and Big Sur. 

HiI’m trying to set up a BYOD environment besides our company owned devices. As shown here           With PreStage Enrollments it works like a charm but on the personally owned devices it doesn’t install at all. I followed this manual but it doesn’t work. All I got is an error, shown hereWhat is going wrong here? Thanks

Oooh, badges!  (Come on, somebody had to set up the inevitable follow-up.)

Hi folks,Newbie here.I'm trying to configure jamf connect, and I'm unclear if I have to have a hybrid setup.Users are in AWS Directory Services (which is just managed AD).This  is connected to Azure AD via Azure AD connect using password passthru.Where I am stuck is the ROPG settings in the plist file. I'm not sure how to find the ROPGID Client ID or discovery url.Any clues?Thanks!

This might be a simple thing but for the life of me im at a loss. We have some seriously locked down iPads for inmates and know how to restrict safari to a specific website and all that but how do i push/create a bookmark icon onto the home screen so its easier to get to?

Using The MUT v5.0.3 on Jamf Pro 10.7.1. Have a .CSV file of just S/N. In MUT I select Computer Static Group, Add to Static Group, My GroupID for this is 168. Pre-Flight tells me Looks good! I click Submit Updates. I then in the MUT.log file I get this error-Failed PUT. 409Error: Unable to match computer I created a fresh static group and that group gave me the same error.

I had a question about Enrollment policies. If I have policies set for just Enrollment does it only work once when it's a new device and being setup? Or does it run those policies if the device has been wiped and reinstalled OS which would make the Enrollment policies run. Not understanding the Enrollment policies. I've just saw Jamfs video on auto enrollment with using this script https://gist.github.com/e1848e3b410395f05c9fcd9ed78386a5. I was curious on creating a policy that says Enrollment Complete would it just install once on first setup of device or if device is wiped and reinstalled OS.

So the good one I think was upgraded to Big Sur while the bad one had Big Sur installed from Apple Internet Recovery,  Haven't found any way to "enable".

I seem to recall in my previous Jamf administrator life that I could add ~/Applications/ for software inventory collection on Macs. I'm trying to add that path now but when I click Save, I get: "An error occurred while saving changes." I also tried /Users/*/Applications/ with the same result.  Is searching users' home folders for apps no longer a thing?

We currently have a standard JSS group that contains our support staff who have been added to the standard group as LDAP users. In the privileges section of the group under the "Jamf Pro Server objects", the "Read" section for "Scripts" has been selected. The support staff can access the "Scripts" section under Computer Management and can see the list of scripts we use for our policies, but when selecting to view the contents of any of the scripts they are met with an "Access Denied 403" message. I know they certainly used to have access to view the scripts, so I'm wondering if there's been an update that might have caused this, although I couldn't say how long the scripts have been inaccessible for. I've tried removing the permissions and re-adding them. Creating another test group with the same privileges and also granting them "Update" and "Create" access rights. Bizarrely this didn't make any difference, they still had no access. Does anyone have any ideas on how we can let t

Hello everyone, I'm wondering what best practices is to map printers to be installed either via policy or via self service. According to the JAMF documentation it says to use URI or IP based mapping, however, I'm assuming that this isn't taking into consideration that you may have print servers available. We are revamping our print servers this summer, before next school year, and I'm thinking that I should create new printer packages for self service as well, since we are switching to Sierra. I have been with my district, and JAMF, for about a year now and I've been creating all printer packages with mapping that used the print servers. However, I noticed that most of the printers installed before me were installed with IP's. We haven't really noticed an issue, however, I assume that it would help to have the print server take care of queuing the print jobs to prevent issue. So, utilize print servers or map straight to IP's? That is the question.

Hey all,We currently use WebHelpDesk by solar winds and for reasons both obvious and not, we are looking at alternatives.  I was wondering what other help desk systems other Jamf Admins were using and liking? We have demos set up with zendesk, FreshDesk, and Incident IQ (which we are leaning toward). Thanks for any feedback you can provide!

I'm trying to make Panopto 7.0.0 available on Self Service, however, it always seems to error out at the very end. After digging through some logs, I found that the installer should prompt the user with the message in the title (due to Mojave's "enhanced" security) and that is were Jamf is calling the error. Is there a way to get this to work through Self Service? I have tried to script a better installation for the Panopto package but I can't seem to get it to actually function correctly afterwards (in-app upload always breaks). Any help would be much appreciated.