I'm trying to deploy a new configuration profile that contains settings for kernel extensions, system extensions and privacy policy. When it attempts to push out JAMF results in an error:-[__NSCFConstantString objectForKeyedSubscript:]: unrecognized selector sent to instance 0x7fff8adf40e0This is an on-premise JAMF instance version 10.32.2 Has anybody else experienced this or something similar? 

Hi All - Does anyone know of a way to see if a user is / has been running a time machine backup from their mac? I know I can get various info using tmutil, but to my knowledge all I'm getting from that is when it's actively backing up, and would just show client ID and running = 0 when it's not actively running a backup. Any ideas?

IT pros will be able to delay Apple updates for 90 days with iOS 11.3, macOS 10.13.4 YAY!

Is there a trick to making the restricted apps payload not nuke users web clips? Thanks!

Hi all,  First off, thank you all for helping me so far with basic questions, I finally got access to the Composer app and it's been so much easier to deploy packages and whatnot. 🙂 I'm trying to use the built in policy option for creating a local account for backdoor access, to have users be able to access their machine in case of a password issue, etc. Two accounts get created, CompanyUser (for the user to be able to access) and CompanyAdmin (which I have forgotten the password to). I have a script that hides the account in the /private/var/CompanyUser (or /private/var/CompanyAdmin respectively) and that works fine, but when running this script it gives and error on the part when it goes to create the users: Error creating user: An account with the user name CompanyAdmin already exists.. When I go to the /private/var/ folder, no such user directories are present. Hmm. Odd. I try logging in to the users from the login screen (I only currently know the passw

Hi, friends! One of our Jamf Heroes, @rastogisagar123, just reminded me that everyone may not know you can explore the historical JNUC magic through a number of videos we have on file at jamf.com. That's right! They're available RIGHT NOW if you wanted to see what we spoke about in past years. Just head on over to: https://www.jamf.com/resources/search/?filters=Videos%2CJamf+Nation+User+Conference+2020%2CJamf+Nation+User+Conference+2019%2CJamf+Nation+User+Conference+2018%2CJamf+Nation+User+Conference+2016%2CJamf+Nation+User+Conference+2015%2CJamf+Nation+User+Conference+2014   See a historical session you especially love? Mention it in a comment! I'll start with mine. I LOVED being able to share the Rituals story during a Day 2 Keynote with @jzwaan and then introducing Jamf Heroes for the first time! Check it out at https://youtu.be/ljfiUD-eTFg?t=5061  

Hello, At the moment I'm facing some troubles with a script. I want to uninstall the EndPointProtector from CoSoSys. They provide a remove script, which I want to start from a JSS script. The problem: you have to enter a pre-defined uninstall password. How could I pass this from my script to the other script? I already tried something like this: #The uninstall password unpw="xxxxxx" #This calls the EPP uninstaller script cd /Library/CoSoSys/EndpointProtector/ echo "$unpw " | ./remove-epp But it didn't worked. I guess the problem is "remove-epp" is no command but an other script, so basically my script hands over the string to the launch command of the other script but not to the input method inside this remove-eps script... Any ideas how I could solve this? It causes a lot of troubles right now for us....

We recently learned that our student population somehow got the jamf mgmt account password. We want to switch to randomized passwords but we also use the mgmt account for working on the machine when admin priv is required. So obviously that will no longer be an option. What are other people doing for local admin rights on managed computers? We could use domain credentials but in my experience it's not uncommon for Macs to lose their domain bind, and I see in the official docs that JAMF recommends a local account in case of domain disconnect.  So then I thought about making a hidden local admin account but then we're back to having one universal set of credentials and risk the students somehow getting this password. Any thoughts are appreciated.

Got my certs uploaded, but when I run a test I get: org.apache.http.conn.HttpHostConnectException: Connect to gsxapi.apple.com:443 [gsxapi.apple.com/17.151.129.22] failed: Connection timed out: connect How do I know if this is on my end and I need to open something up internally, or if this is on Apple's end and they haven't whitelisted my IP yet? Do they send an email specifically announcing the whitelist? I haven't received anything mentioning it yet.

Dear All, Need help on executing a bash script: How to run this via bash script? sudo defaults write ~/Library/Preferences/ByHost/com.apple.controlcenter.plist Sound -int 18 sudo defaults write ~/Library/Preferences/ByHost/com.apple.controlcenter.plist Screen\\Mirroring -int 18 sudo defaults write ~/Library/Preferences/ByHost/com.apple.controlcenter.plist Bluetooth -int 18  Thanks!Raj.  

Hi all Since iOS 14.2 we have a problem with the in camera QR code scanner. The square shows up but the pop up with the link does not. Also the scanner is not available in settings>control centre so we cannot add it to the control centre as an icon. I think both problems are related and I am pretty sure it has something to do with our Jamf School environment as I have no problems with my personal (Identical type) iPad. Unfortunately I can't find anything in the restricions and there does not seem to be an QR code build in application which needs to be added to the whitelist. Nonethless it seems blocked somehow. Is there anybody who can shed some light on this issue?Thanks muchFrederic

I have an .app bundle contained in a .dmg that I am trying to package to deploy to our fleet of machines to the /Applications directory. When I package this via composer utilizing either drag and drop from /Applications to Composer, or via normal snapshot and drag from the .dmg to /Applications I get a usable package that installs fine on 10.15.7 machines. However, when this same package is run(manually or via policy in Jamf Pro) on a macOS 11.x machine the installation to /Applications is literally zero KB and is an unusable "shell" of the .app bundle. The icon is greyed out with a crossed out circle in it(indicating nothing is there). I'm racking my brain trying to figure out why, has anyone else experienced this/know a fix/workaround?

We have a few machines that did not update their FV recovery key, so I created a policy that will be scoped to a smart group. I did not create the smart group yet so I have the policy scoped to Specific Machines and Specific users, with nobody added; no targets. It is also set to run once per machine and only attempt 3 times. However, despite these settings it did still push out to all our machines and was attempting on failed machines indefinitely. I have it disabled currently but can find no reason why it pushed out to anybody. has anyone encountered this before and if so, was there a fix for it?

Howdy!Is there any way in Jamf Pro to customize email notifications to have more information in the message body?For example, I've set up a recent smart group to notify me of machines that JSS hasn't seen in over 1 week.  It tells me the machine name, and gives a link into Jamf.  Machine names aren't super detailed, and I'd rather have the information I care about in the message body rather than having to log into Jamf to see what I need. Any way to make it include things like the assigned user right in the message body? Thanks!

How heavily do most of you leverage extension attributes to track the state of a laptop, such as in-service, out-of-service, damaged, out for repair or slated for return to the IT team because a staff member has departed/been terminated?We don't have a separate IT asset management system at this time and use JAMF as our system of record for all laptops, desktops, and iPads. We have been using a spreadsheet as a tracker for these items, but being able to build smart groups and run reports using extension attributes that indicate the state of the laptop would be more appealing.Any tips or best practices for those that do leverage extension attributes for this? Good idea, bad idea?Thanks!

Hi Jamf nation, Since we updated to 10.32 (from 10.26) all configuration profiles are failing with "This profile no longer exists or contains invalid payload data" (already enrolled Device) or "The profile is either missing some required information or contains information in an invalid format." (newly enrolled Device)Any suggestion? Thank youBRDaniel

Hi all,I am trying to install a network profile for the corporate wifi and it failed to install it on the station.The error that appears in Jamf under Failed Commands is : ״The ‘Wi-Fi Network’ payload could not be installed. The 802.1X service could not be updated.״Appreciate your help.

Wondering if anyone else has seen the following behaviour and has a solution. I am requesting a system certificate from a Microsoft CA using the 'AD Certificate' payload within a configuration profile. The Mac is bound to AD and has the appropriate root trust certificates installed for the CA, however the request fails with the following error. This same profile works fine on our Mountain Lion clients so I am wondering is this a feature in Mavericks. Dec 10 10:33:03[2580:1]:ADCertificatePayloadPlugin.credentialsForDomain domainname = ETF; username = <deleted>$Dec 10 10:33:03[2580:1]:+ADCertificatePayloadPlugin.getCertificateFromServerDec 10 10:33:03[2580:1]:+GetCertificateFromCAServer credentials username = <deleted>$Dec 10 10:33:04[2580:1]:+GetCertificateFromCAServer gss_aapl_initial_cred status = 0Dec 10 10:33:04[2580:1]:+GetCertificateFromCAServer running as euid = 0Dec 10 10:33:04[2580:1]:+GetCertificateFromCAServer ca_name = <deleted>Dec 10 10:33:04[25

So, I have modified the classic LAPS API script to work over the new Jamf Pro UAPI (you can check it out it here: JAMF UAPI LAPS script ), did not realizing it will only work if jq binary is installed and working on the mac, so I am trying to put together a policy to install jq at enrollment complete and to push it to all the macs which don't have it currently installed. What I have tried:Package the jr binary from my work mac, where jq is installed and working from /usr/local/bin/ using ComposerTo make sure it will be executable, I added "Execute Command" to the policy: chmod +x /usr/local/bin/jq​  But if I check for it via: which -a jq or try running curl with jq pipe - it can't find it...I thought maybe $PATH is set incorrectly, but it looks alright to me:    akamenev@MacBook-Pro bin % ls -lh total 0 lrwxr-xr-x 1 root wheel 89B Sep 22 17:41 authchanger -> /Library/Security/SecurityAgentPlugins/JamfConnectLogin.bundle/Contents/MacOS/authcha

I am trying to make a software restriction to kill and remove Slack on macOS but for some reason it does not seem to be working. I have tried using slack.app and the service name which is just slack, the app just keeps running happily. Any ideas? I work for a financial firm that is extremely strict on management and they don't like Slack, it is what it is.

Hello, We are in the process of selling many of out 8th grade MacBooks to the students. We are marking them sold in our cataloging system and have run the removeframework (along with many other tasks), but we never figured out how to script deleting the device from the JSS. Using our cataloging system I can create a list of serial numbers for the devices to delete. Is there some way to use this list of serial numbers to automate deleting the devices? My quick look didn't reveal anything, but figured I would check. Thanks,Tim

If you participated last year, remember the fun little "side quest" for lack of a better term that Jamf provided last year to earn points? Go to this session... visit this booth... say hello to this person... What do you think this year's gonna be, if anything? I know I sure had fun with this part of it!

I'm trying to deploy LEGO Education Spike https://apps.apple.com/us/app/lego-education-spike/id1469183033. When I search it in Apple School Manager it shows up as both an iPad and Mac app (I've never seen this before). I purchased licenses but they are only showing up in the Mobile Devices Apps section in Jamf Pro. How do I get it to work for Macs as well? 

Hello everyone, I have a few machines in a lab environment where the primary iMac is attached to an external monitor. Once a new user logs into the machine, the external display automatically displays to the right of the primary iMac by default. Has anyone determined a way to set the iMac to view the external display from the left of the machine instead? Thank you in advance.

I've seen a number of postings regarding installing Sophos Central (including https://www.jamf.com/jamf-nation/discussions/12348/script-to-launch-sophos-cloud-installer which ultimately points to a derflounder post) but I'm not having any luck at all with getting things to work... Can someone help me out a bit? Have things changed since the referenced post?