Hi all, I'm not sure if this has been posted about beforehand, though I couldn't really find anything that answers my question beyond "Re-enroll the device". Basically we had a mishap in our environment where, upon renewing our Push Certificate, another Apple ID than the original was used, causing our devices to display the "APNs Feedback error". From preliminary research it seemed that this was a known issue, but no fix in place beyond re-enrolling the affected devices (All of them, if that's the case).We have since found that going back to the original Apple ID and generating the Push Certificate from there has reverted the majority of our devices, which we hadn't yet re-enrolled, to having no feedback errors, but those we had already rolled this out for are now getting the APNs Feedback error. My question is, to avoid re-enrolling each device (Which doesn't seem to be able to be automated, even by using sudo jamf reenroll -invitiation

My users are not able to create any groups in outlook, the tab is grayed out.

Hello!I know there is a command to trigger policies which is "jamf policy -id<number>" and I am wondering where I can find the policy ID number. I was looking at the each policy I made, but I couldn't find or see anything related to the ID number. Does anyone know a way to find the policy ID?

There is no urgency for this. What I am trying to do is learn how to create a script to do one-off application updates using a policy instead of using Patch Management. The idea is to include a set of parameters that a Jamf tech can fill in to specify which app we are updating with the policy that the script is attached to. The script below works, but there's just one issue. I'm using an osascript to display the dialog to alert the user that the app is about to be updated. The dialog appears, but it does not show the name of the app we are updating. Instead it shows the name of the parameter. Does osascript not work with parameters, or am I just doing something wrong? I don't want the update to run until the user has quit the app and clicked OK. Here's a screenshot of the dialog that appears. My script is below. Thanks for the help! #!/bin/sh #Updates application at the path defined in paramater 7 to the version defined in parameter 4. For parameter 5, fill in the full application

We're still struggling to get our Macs to register with Intune. After each failed attempt, in addition to removing the partial computer entries from Intune, we have to delete every single file and keychain entry that has anything at all to do with Intune and the Company portal app. After a lot of searching I came up with this script to remove the files associated with it: #!/bin/sh #variable for storing the current users name assuming the computer has the end user # and not the admin user logged in when this script is run. currentuser=`stat -f "%Su" /dev/console` rm -Rfv /Users/$currentuser/Library/Application Support/com.microsoft.CompanyPortal.usercontext.info rm -Rfv /Users/$currentuser/Library/Application Support/com.microsoft.CompanyPortal rm -Rfv /Users/$currentuser/Library/Application Support/com.jamfsoftware.selfservice.mac rm -Rfv /Users/$currentuser/Library/Saved Application State/com.jamfsoftware.selfservice.mac.savedState rm -Rfv /Users/$currentuser/Library/Saved Applica

Hi all, I am interested in setting SSID order within Macbooks. So I searched JAMFNation (as I do) and I actually found the answer.https://www.jamf.com/jamf-nation/discussions/18223/re-order-wifi-preferred-networks So within this chat, the solution is provided as a python script, which I am very happy about. I have tested this within JAMF Pro 10.6, it works as expected. But I would like to change thePreferredSSIDs = ["SSID_1", "SSID_2", "SSID_3"] line to bePreferredSSIDs = ["$4", "$5", "$6"] so that future JAMF Pro admin can easily see the listed SSID within the policy. But $4, $5, $6 do not work in python script :( Would any of you know how to read the $4, $5, etc parameter and parse it to the python script?

Hi,I have upgraded a machine to Big Sur, and now get a question mark against system apps in the managed Dock. Currently, these are added like this /Applications/Calculator.app for example. I'm guessing this is to do with these apps now sitting in System/Applications - however, updating the path does not solve the issue. Has anyone else come across this?

I receive the following error when trying to edit a configuration profile.  Any help would be greatly appreciated.

I am attempting to remote wipe the membership of a smart group but this action isn't working. After choosing Wipe Device and clicking Next, there is a spinning dots symbol for a few seconds but the screen down't move on and the action doesn't happen. Other actions like Restart work fine. Any help appreciated!

I tried posting this yesterday, but the forums flagged it as spam for some reason. So I created a support case (JAMF-3163676), but have not heard anything.I upgraded our JAMF 10.30.0 server to 10.31.1 last night. Everything went fine except now it's stuck at Initializing Change Management and I don't know how to fix it. There is one single error in /usr/local/jss/logs/JAMFSoftwareServer.log.The /usr/local/jss/logs/JAMFChangeManagement.log exists and the "jamftomcat" account has permissions to modify it. JAMFSoftwareServer.log:2021-08-11 19:26:00,457 [ERROR] [erverThread] [gUncaughtExceptionHandler] - Uncaught Exception from thread InitializeServerThread - ManagerFactory [org.apache.logging.log4j.core.appender.rolling.RollingFileManager$RollingFileManagerFactory@6bfb2009] unable to create manager for [/var/log/JAMFChangeManagement.log] with data [org.apache.logging.log4j.core.appender.rolling.RollingFileManager$FactoryData@5330f439[pattern=/var/log/JAMFChangeManagement.log.%i, appe

Hello, Is it possible to set somewhere in the configuration profiles that a local user must have a certain password complexity? Unfortunately, I can't find anything about this. Thank you!

Hi all,We just intregrated the Apple School Manager with Jamf School to some schools. So far, everything is working fine execept for the Apple IDs.I mean, I've wiped de device, I've applied the correct blueprint through the Apple Configurator. It links the iPad automatically to the JAMF, it goes automatically to the correct group, it takes the correct owner and finally all free and paid apps are being installed automatically. The enrollmente is apparently OK.The only problem here is that the managed Apple ID (by ASM) is not being pushed to the iPad.All Apps installed, find my device ON but there's no Apple ID signed in to the iPad. Could you please help me how to do that?, how or where shall I add the Apple ID to be pushed to the iPad during the enrollment? Thanks in advance.Mousani Junior.

Hi all, I used to get email alerts for every post, but have just realised I've not got them for a week or so... Is everyone else getting the alerts?

The built-in Apple software update payload that we can use in a policy will save a plist file to /Library/Application Support/JAMF called .userdelay.plist. The presence of this plist means that the user has selected one of the deferral options. It was easy to create an extension attribute that checks the file path above for the plist file, but what I would also like to do is track how long of a deferral the user selected. The text of the plist file is below. What I would like to do is make an extension attribute that will report the value for the key called "lastChosenDeferDate". <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>140</key> <dict> <key>deferStartDate</key> <date>2021-08-11T14:08:46Z</date> <key>lastChosenDeferDate</key> <date>2021-08-13T14:08:46Z<

I'm not a Jamf Cloud customer, but my understanding is that 10.31 was scheduled to be installed for Jamf Cloud customers this past weekend and it was cancelled very last minute. Can someone at Jamf provide a reason? Should on-premise customers who already installed 10.31 be concerned? Should we be holding off until 10.31.1 comes out?Please don't tell me to contact Jamf Support. I'm not the only customer who has this question and all customers would benefit from an answer.

Is there a way to restart the process of enrolling a new computer into jamf with the prestage enrollment? I have one macbook that wasn't assigned when first starting a set, or rather the wrong one got assigned.  I started them all up, set the country, language, put in the wifi, and on the one, it went to the privacy screen whereas the rest, started the enrollment process.   I corrected the mistake but it won't enroll now.  In the past, I have had to wipe to factory to get it do it again, but wondered if there was another way instead of having to do that, because I will have to reload the OS, iMovie, Garage band etc again on this if I go back to factory. Thanks in advanced.

HelloIs there a way to initiate an iCloud backup to a group in Jamf School? We're wiping 300+ iPads, and I need to make sure they're all backed up. I really don't want to do them one at a time 😇

Hello,we are using the support app https://marketplace.jamf.com/details/support-app/Trying to click on "Remote Support" ends with an error because of missing permissions.Our config looks like this - TeamViewer QS ist already installed:<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>CustomColor</key><string>#506d85</string><key>FirstRowLinkLeft</key><string>com.teamviewer.TeamViewerQS</string><key>FirstRowLinkRight</key><string>com.jamfsoftware.selfservice.mac</string><key>FirstRowSubtitleLeft</key><string>Share your screen</string>Any solutions for this problem? Thank you! 

Hi guys We use Goverlan in our company for remote screen sharing and troubleshooting. Up until now, this was only possible on Windows computers, but the latest version also has support for Mac. I deployed the Goverlan Reach Client without issues, but it does need some permissions, which I have some trouble activating remotely. These are the needed permissions. Users can manually review and allow these, but not all users are tech savvy enough to do this. Is there any way to allow these through Jamf?Thanks!Valérie

Has anyone worked in a distribution plan for this? I am having a little bit of a trouble figuring out a way to package and install on our workstations.

We're running 3 different versions of Maya in my labs (for reasons), and when I try to add all 3 versions to the dock using dockutil, it will only add the first one, and I get:Maya already exists in dock. Use --replacing 'Maya' to update an existing item item /Applications/Autodesk/maya2020/Maya.app was not added to Dock Maya already exists in dock. Use --replacing 'Maya' to update an existing item item /Applications/Autodesk/maya2022/Maya.app was not added to Dockthe apps all have the same name (but not directory), Maya.app. Their directories are:/Applications/Autodesk/maya2022/Maya.app /Applications/Autodesk/maya2020/Maya.app /Applications/Autodesk/maya2019/Maya.appIs there anyway to add multiple apps with the same name? The wiki for dockutil is sparse. I can add the app directories, but they go at the end of the dock, and have folder icons, so we're not sure students will notice them.  

i'm looking for clarity around filevault and network accounts (not AD!), mostly on big sur and m1 models.  until the introduction of silicon macs, i've been using a firmware password to provide some protection on machines that go walking for one reason or another.  now with our new m1 macs, it seems that my only option for any kind of hardware security is filevault.my issue is on shared laptop machines (school setting, laptops are in carts); i don't see a way of enabling filevault while allowing network users to consistently log in without making every potential network user a mobile account and enabling them as a filevault user - which is ridiculous and defeats the purpose of hardware security - if everyone can decrypt the drive, then encryption is worthless.with filevault enabled, after a reboot, the only user(s) who are able to log in are the filevault enabled users.  it would appear my 8021x/scep profile is ignored and i have no network access either (although wpa2 j

Hey, I am looking ideas to use Python to accomplish various tasks with Jamf. I am not sure where to get started or how powerful Python is with Jamf Pro.

New to Jamf, and Apple.. is there a way to change the self service app icon for iOS devices? I searched for a while and only find people talking about macOS devices, but nothing about iOS. Also is there a way to push a bookmark to iOS through Jamf? Possibly create out own App button inside self service so they can click that? Instead of opening safari. I am asking because our newest iPads are going to testers, and the special education department has asked if we can make it easy for staff to open the testing website.

We are setting up about 800 MBA devices. They grab the JSS policies and apps, which is awesome. But when going into JAMF I notice that a bunch of them say "_mbsetupuser" at USERNAME at LOGIN/LOGOUT. We use JAMF MUT tool and I wonder if this could spell disaster down the road or if the systems have not updated to JAMF.