I am trying to deploy some books to a few student iPads. I have created the students in ASM but after syncing I cannot see them in Jamf School.I have checked "Enable synchronization with ASM"Checked "Create missing users"When I try to invite users to register with volume purchasing, I see "No managed Apple ID's found to invite".When I sync, I see this:Synchronization statusVolume Purchasing 1 user(s) and 316 app(s) synchronizedAutomated Device Enrollment: 199 placeholder(s) updatedApple School Manager: 1 location(s), 0 classe(s), 0 user(s) and 0 Managed Apple ID(s) synchronized Can anyone please advise me what I have missed please?

Hi!Has anyone managed to get information about the iMac computer's SSID running MacOS BigSur via extensions attribute. If so, how did you do it?Regards

Hi I was wondering if anyone had any tips on how I could create a profile to automate these steps when installing Bitdefender on Big Sur. https://www.bitdefender.com/support/changes-to-bitdefender-endpoint-security-for-mac-in-macos-big-sur-2626.html I want to remove the user interaction aspect if possible

Just wondering if anyone is having any success using Jamf Connect with macOS Monterey? Currently we are working through internal systems readiness with macOS Monterey beta testing, and when using Jamf Connect (v2.4.3) with Monterey many issues are being experienced.At present experiencing the following issues:If using the "tab" key to switch between username & password boxes the mac will lock up and requires to be powered off.When using Okta for SSO, Jamf Connect will not login using just a username, instead it requires a users full email address to be entered in to the username field.Authentication through Jamf Connect seems to always fail on 1st attempt but is then successful on subsequent login attempt.1st login attempt is only successful if network connectivity is disabled so that cached credentials are used.On M1 Macs, although Jamf Connect will authenticate successfully using Okta, before macOS desktop loads user is immediately logged back out unless network connectivity

Hi all,I'm trying to find a way to create a custom configuration profile for an app and distribute it to all our iOS devices. The manual only has a guide on how to do it in VMWare Workspace One (where you just copy and paste the whole string into a "custom" field).How do I do this in Jamf? Here's an example of what I need to distribute to all our iOS devices:<dict>  <key>FilterBrowsers</key>  <true />  <key>FilterSockets</key>  <false /></dict>Kind regards,Joni

Hi, Our company is wanting to roll out Microsoft Edge to all our Mac fleet and make it the default browser. This is to keep in line with our company's upgrade to Windows 10 pcs. Anyway, the default search engine in Edge is bing. We would like to change this to google so users are still using a familiar search engine. But I do not know go about setting this up remotely. And the other thing is changing default search engine manually is quite cumbersome, so writing up some instructions for end users to follow is not the way to go. So anyone know anything how to go about it? Thanks in advance.

The internet traffic between our managed macOS Mojave laptops and the Apple Software Updates website is blocked for security reasons. So I can not use the regular System Preferences - Software Update to update native macOS software.This is not an issue for me, because every time Apple release a Software Update, I wait a week or so and I visit the following URL https://support.apple.com/downloads and I download the specific package (in .dmg format), I save the .dmg package into a USB Stick and I update the macOS laptops and I am good to go.Now, the problem is that Apple just released an important security update https://support.apple.com/en-us/HT212808 just for Safari 14.1.2.My question is since that I believe this time it is just Safari the issue, is Apple going to publish just the Safari .dmg package update on the regular https://support.apple.com/downloads website? If not, how can I download just the Safari 14.1.2 in .dmg/.pkg format so I can install into our macOS Mojave laptop

Hi all, I'm receiving the following error when trying to save a change to the Restrictions Profile in Jamf Pro. I'm removing com.apple.DocumentsApp from the App Usage section showing apps not allowed so that the Files app becomes visible on the iPads. Note: I have put * to replace the actual url information. Unexpected Error Http failure response for https://*.jamfcloud.com/uapi/config-profiles/ios/f15a5a62-b203-499a-b2ef-1c2f74c4ba94: 500 OK This does not happen when saving changes to other configuration profiles (such as the layout of the home screen) etc. The rest of Jamf Pro appears to be working fine.

Long story short...the school I work for just revamped printing.  Printing is handled by PaperCut.  They emailed a link to download a mobileconfig file to install on the students' iPads.  I really don't feel like manually installing it on 500+ devices.  I'm looking through configuration profiles but don't see any option.

Hi guys I have managed several mac PRO.but there are curios thing about mac's serial number.some mac doesnt have serial number and its inconsistent.sometimes its 3 or 4 pls anyone tell me why or suspectedthank you 

Somehow JAMF is showing my teachers' Managed Apple IDs incorrectly, it is using the suffix our students have.  It gets that information from ASM, but ASM is correct and the sync isn't correcting it in JAMF.  A suggestion was made that I use a curl command to update these accounts in JAMF.  So I have tried, but so far have not been able to change anything.I am passing credentials of an Admin account.  And the connection works, as I can run a command to get information about a user.  From that command, I am also confident I have the correct ID #. The command runs, gives no error message, but changes nothing.  I have also attempted to change the Grade, just to see if that was possible and that also did not change the account in JAMF.  Below is two renditions of the command I am running from a Windows command prompt.  Any thoughts on why this would not work?  Bad syntex?  Do I have to enable API commands somewhere in JAMF?Thanks in advance.

If you buy Jamf Training pass,  1. Can you retake the test as many time as you want?  2. Can you also take many courses as you want?3.What is covered by Jamf training pass? Thanks!

I was attempting to reset ACL and permission bits to root:wheel 775 to a folder and all subfolder. Then add a specific user to that ACL list as well, let's say the username is Tim.So on a folder and all subfolders/files I want the following permissions: root (owner) 7 wheel(group) 5 everyone 5 tim 7 (read/write) I have been using: chmod -R +a <folder> "tim allow read,write" When it's all said and done, I want the finder window to NOT SHOW CUSTOM permissions and show simply "read/write". Second question: What is the command line option to "apply to enclosed items" in the finder menu? Let's say I wanted to perpetuate the current permissions to all subfolders/files. Is there an easy command to do this?

I am doing some tests with our installation and workflow on the new M1 with Big Sur.  It seems that it was fine installing our older version of Jamf Connect Login (2.0.4) from self service as long as I would check for Rosetta on the hardware first, and then install it if it wasn't present.  All seemed well until I decided to do the latest OS update for Big Sur, and after the restart I am getting the following Error : Unrecoverable error: SecurityAgent was unable to create requested mechanism JamfConnectLoginLoginUI".  So now the machine is bricked as it's stuck unable to run the login screen.I haven't figured out a way to get around this without reformatting the device, the problem is it won't boot, and when I am in recovery mode with terminal, the authchanger program won't run due to the an incompatible CPU type (yes authchanger is only for x86, yet in recovery it's stuck to arm64.  Anyone else think of some way I could get reset and remove JCL from the Login windo

Hi all,I’m trying to do something super simple but I’m obviously missing something: I’m deploying Jamf Connect with OKTA. I have two apps (Access + Admin). My user is in these two apps and I thus expect the user to be an admin on the mac (at user creation) but the user keeps getting the standard role.Is there anything wrong in the PLIST below?Why is my new user not getting the admin role?Thanks     <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>AllowNetworkSelection</key> <true/> <key>AuthServer</key> <string>clienst_instance.okta.com</string> <key>CreateJamfConnectPassword</key> <true/> <key>EnableFDE</key> <true/> <key>EnableFDERecoveryKey</key> <true/> <key>Migrate</key> <true/> <

As I was working to reassign iPads to different staff this school year, I realized that the pre-stage enrollments that I have been using no longer have devices within the Scope.  I am also unable to add devices to the scope. Any help I can get to get devices back into those pre-stage enrollments is much appreciated.

Hi,Does anybody know where the settings are located for deferring major and minor updates separately. The one's mentioned here https://support.apple.com/en-gb/guide/mdm/mdm02df57e2a/web as Defer major releases and Defer minor releases. I only found deferring updates here: Configuration Profiles > Restrictictions > Functionality, but this is 1 profile which I think should be 2 seperate ones. With Monterey around the corner being able to defer a major release separately from minor updates would be really helpful. Thanks, Tim

We got a couple of OS X 10.11 machines, that where enrolled in a different MDM (we cannot access anymore)Since there is a lot of data on the drives we do not want to wipe the machinesIs there a trick to get rid of the old MDM profile ? "Normal" profile removal via bash fails with error "Profile is not removable" bash-3.2# profiles -R -p com.uni.mdmprofiles uninstall for identifier:'com.uni.mdm' and user:'root' returned 101 (Profile is not removable.)

I attended my first JNUC in 2020 which was in virtual mode where I want to share my experience and observations:1. I never feel it was in virtual mode, even I feel energy and enthusiasm was on the higher side.2. Full marks goes for systematic planning and unbeatable experience.3. I already attended few events like this from different vendors but Jamf have always some unique thing.4. I really want to appreciate that Jamf do lot of pre-checks before the event goes live.5. last year we had awesome jamf and other speakers ( aka ..jamf customers) and all of them were just awesome. Good part about the session was you definitely learn something that will help you in real time.6. They always focus on hybrid session content i.e. technical + management + best practices + awareness about other security/other tools which makes the event more successful.7. For sure its always pleasure to make the awesome connections in any event. I wish I could present something this time but hectic schedule d

Hey all,So I'm sure there are bunch of ways to do this, however I've not explored this until now (and we are all working remotely). With new machines we get purchased we are thinking of sending them to the staff directly and having them set it up, but currently I'm using DEP Notify to run a script at login after a local admin account is created. We used to run this from our network so that the unit could bind to AD and get the right permissions and then we would help new users login before leaving our network to create their mobile accounts. Is there a good way to continue to do this remotely or would I have to switch to a whole new method of imaging to remove the bind (which would not be great for when we get back due to wireless authentication and such requiring a bind)? How is everyone doing binds these days? I assume NoMAD and JAMF connect are being used, but what alternatives are there? Gabe ShackneyPrinceton Public Schools

Hi Guys 👋 New here, so please forgive me if this is a silly question and I'm getting all of the terminology wrong.We recently acquired Jamf Pro and we've got it up and running with a few basic policies. So far we've only enrolled devices manually (with either an email invite or downloading the agent from our Jamf instance). Policies and everything work just fine on enrolled devices which is great.We've also configured the PreStage Enrolment integration so that Apple Business Manager (ABM) and our Jamf console are linked, which all worked without a hitch, but I'm confused about the PreStage Enrolment policy.I don't understand how we 'transition' a device from PreStage enrolment to a 'full enrolment' - i.e. - if I PreStage enrol a device, does it then just pick up all of the policies and config I've configured for my other devices that are assigned to 'All managed devices', or do I need to recreate my other policies in the PreStage enrolment settings? All I really want to do

Hey guys,I'm working on upgrading some MBAs and I have a policy that creates a new standard user which the students can use. I have the Macs joined to an AD and I thought just to test I should try to login as the student account. It fails. I know it's not the password since I reset it. Weird thing is, is that if I make the account an administrator then it allows me to login?!?! I then remove the admin rights and reboot and it goes back to failing. Any ideas?Thanks!

I get the feeling I'm behind the 8-ball. Our educational institution has been running macOS High Sierra until very recently when Adobe dropped support for it forcing us to upgrade to Mojave. Since the students are not using the labs due to COVID-19 I have time to catch up and learn what I should have learned in Mojave and Catalina but now for Big Sur. Why go to Big Sur? I prefer all my Mac labs to be on the same operating system version where possible and we are considering a lab of the new Mac Mini computers with Apple M1 SOC. I setup my first Big Sur lab machine yesterday (a Mac Pro 2013) and none of the policies ran that I could see, nor did any of the installers execute. For example, my installer to create /Library/AdminToolBox and drop all my scripts there failed like this: Checking for policies triggered by "recurring check-in"... Executing Policy Copy Maya Installers Mounting casper cp: /Volumes/casper/Packages/Installers_2020.pkg: Operation not permitted Erro

Is this topic covered somewhere?

I have build a NoMAD config profile and have pushed it out. When it is FIRST INSTALLED, it works beautifully. If I either Quit NoMAD (and let it relaunch according to the LaunchAgent) or restart the computer, it breaks horribly. As you can see from my raw plist below It should show extra menus but after the NoMAD app is quit and it relaunches, it loses all the customization and it even stops displaying the password expiration in the menu bar! <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>ADDomain</key> <string>ourdomain</string> <key>GetHelpOptions</key> <string>https://internalsite.company.org</string> <key>GetHelpType</key> <string>URL</string> <key>HideExpiration</key>