Hello, I would like to hide the window that asks whether to send diagnostic data when opening Microsoft Edge. After some research, I found the Edge Policy available in Jamf (com.microsoft.Edge). I added DiagnosticData and configured it. The profile is applied. Unfortunately, it doesn’t work—the window still opens. The other configured settings are applied.   Edge version : 132   Edge Policy : The Diagnostic window : Thanks

Hello, Today, We found out the Jamf Connect login is not working when connected to our corporate WiFI network which is basically EAP/TLS machine level cert auth with auto-join configured through Configuration Profile.  Does anyone has any solution for this issue ? OR does anyone come across this issue ? Note: Jamf Connect Login works perfectly fine on home network / mobile hotspot.

I've got a profile added to my prestage to enable FileVault during enrollment, and for random systems, it seems to be failing to turn on FileVault. The profile is installed on the system, but the key is Unknown and FileVault 2 status is Not Enabled. These machines have all been on macOS 14.x (few with 14.1, few with 14.3). The weirdest one of all though, is a system with 13.7.3 enrolled, got the profile deployed, and FileVault enabled and key escrowed to Jamf. I doublechecked and confirmed the documentation states this is for macOS 14.0 or later. Anyone else seeing anything similar? My environment is running 11.12.1. I could rip out that profile from one system and then deploy the previous profile that I was using to enable at first login (I confirmed that both profiles are not on the systems affected). Also of note - users are FileVault2 Enabled, and have SecureToken issued. I also checked the PI's and didnt see anything that sounded similar to this.

Hey Everyone!I have been at this for hours and I am not sure what I am doing wrong. I am trying to make an extention attribute that will display the users current keyboard input type. We have users in the UK and in the US and I have been asked to show if the users mac has a UK Keyboard or a US Keyboard. This is my script, its very simple and I am not sure why its not showing a result in Jamf Pro. Even know it shows a result in terminal and code runner.  #!/bin/bash# get the keyboard layout nameresult=$(defaults read com.apple.HIToolbox AppleCurrentKeyboardLayoutInputSourceID)echo "<result>$result</result>"  Here is my EA's Attributes  I am trying to find out if I need to contact jamf or am I missing something. Any help would be greatly appreciated!         

In 11.11 a new attribute for macOS was released - Battery Health.  However the only value I see reported for any of my computers over 14.4 is Unknown.  Is anyone seeing this work?  There is a note stating that this will work for iOS but not iPadOS - but nothing about it not working for macOS.

I try to add the app screen recorder to in iPad. Tipping on the "+" sign on the screen has no effect. It is not possible to add or delete items. Is there a solution?

We are on Jamf Now and I have added SAP Privileges to all the devices to allow my team to make themselves an admin. This is installed via the App Installer and added to the device Blueprint. It was working well, but I think recently it automatically updated to version 2.0 of Privileges, and now has stopped allowing users to escalate themselves to admin - everyone is stuck as a standard user. I suspect this is because the new 2.0 upgrade needed to reinstall the Helper tool, but when it auto-updated the users were all in standard access mode. And now we are stuck with no way to change this. Is there a way to prompt Jamf to install the Helper tool so that Privileges will work again?

Hey everyone, I'm currently looking for a smart way to automatically logout logged in macOS users. Situation: School using PSSO, users can work on whatever Mac they want. Most students don't log out properly. No planning on force rebooting the Mac. No planning on login into each Mac using local admin credentials and ending the sessions.   Fast User Switching and AutoLogOutDelay are configured as follows:   sudo defaults write /Library/Preferences/.GlobalPreferences MultipleSessionEnabled --bool YES sudo defaults write /Library/Preferences/.GlobalPreferences com.apple.autologout.autoLogoutDelay -int 300   The autoLogoutDelay seems to be completely broken and / or doesn't work at all. All accounts are still logged in despite the delay of 5 minutes - or I just don't geht how it's supposed to work.   Anyway - I've stumbled across this post which seems to be an effective way (need to test it) https://community.jamf.com/t5/jamf-pro/force-logout-help-please/m-p/130871#M11

Hi folks, I am looking for a way to prohibit enabling of Internet Sharing since it can be a pretty serious security risk. I was able to do it with Quest's QAS group policies, but we've stopped using that product. Is there a way to granularly disable Internet Sharing permanently using managed preferences? Thanks!

I'm currently testing Jamf and have everything working as I want with with the exception of figuring out the best way to rename computers after they are setup.  Currently I'm using Jamf with Jumpcloud pushing the user accounts for staff to an employee's computer however I'm stuck with the default computer name of Macbook Pro. I'm trying to figure out the best way to script this or use a policy that runs after the user is setup  to that a machine can be renamed for username-Macbook Pro.I'm wondering what the best way is to accomplish the renaming task so it can be automated and not have to be done manually each time a computer is deployed . Thanks for any suggestions. 

So I enrolled a test Apple TV... After I confirmed that it received all of the desired configuration profiles, I sent a wipe command to it. Out of the corner of my eye, I saw the screen go black so I then deleted its record from the JSS. With the screen black, the Apple TV sat there with no light on the front of it. After 2 or 3 minutes I got impatient and unplugged it - I thought it would have rebooted after the wipe. When I reconnected the power cable, I see that it has my “Conference Room Display” payload still on it, which means it’s still managed and never got the wipe command from the JSS!The “Conference Room Display” restriction does not allow me to get to the main tvOS screen so I can perform a system reset. To make matters worse, I can’t send any management commands to it because it’s no longer in the JSS! Is there any magic command I can do to this thing to get it back to factory?

We have tried to set up device compliance multiple times and it keeps failing on registration.  I currently have a ticket open with jamf support but its going nowhere.I have upgraded my cloud to version 10.46.1Here is part of the log from the company portal app.2023-05-25 13:37:31.279 | workplaceJoinSdk | 344229 | INFO: -[WPJBaseKeychainAccessor getRegistrationInformationWithTenantIdentifierInternal:domainName:error:] [Line 190][2023-05-25 13:37:31 +0000][WPJBaseKeychainAccessor] getRegistrationInformationWithTenantIdentifierInternal - check for incomplete registration or no registration.2023-05-25 13:37:31.279 | workplaceJoinSdk | 344229 | ERROR: [errorCode:-400][2023-05-25 13:37:31 +0000][WPJBaseKeychainAccessor] getRegistrationInformationWithTenantIdentifierInternal - tenant is unregistered!2023-05-25 13:37:31.280 | workplaceJoinSdk | 344229 | ERROR: [errorCode:-400][2023-05-25 13:37:31 +0000][WPJDecisionHandler] retrieveKeychainAccessorForTenantInternal - unable to retrie

Hi folks,we have a policy available in Self-Service, which executes a script that opens Microsoft Outlook and set some settings.#!/bin/sh #Get current User currentuser=$(scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }') echo $currentuser #Runs Apple Script with current User sudo -u $currentuser /usr/bin/osascript -e 'tell application "Microsoft Outlook" to set properties of exchange account 1 to {ldap server:"xxx.xxx.local", ldap use ssl:true, ldap port:"xxx"}'When executed from Self-Service we are getting a pop-up asking for "Jamf wants to control access to Microsoft Outlook".We've created a mobileconfig with PPPC but still get the pop-up.Can someone give us a hint how we can solve this?thx and regards! 

I'm having a really hard time consistently getting forced updates to work through Jamf. I finally was able to get a upgrade via packaged policy to work yesterday but I'm not having a lot of success using the Software Update payload within the policy for minor updates. I need to figure this out because ensuring that our computer operating systems are up-to-date are the whole reason why we upgraded to Jamf Pro in the first place. I'm currently testing computers going from 13.0.1 to 13.1 and 12.6.0/1 to 12.6.2 It says the policy executes correctly, but it's not installing the updates on the computer

I am testing moving users from Admin to Standard and I am running the command below in Files and Processes in a policy and it works and makes the user Standard, but when I reboot it reverts back to Admin. The machine was bound to the domain (we are working to get away from that), so I thought maybe that had something to do with it, and I unbound and ran the policy again and when I rebooted, I was back to Admin again. I have no policies applying post reboot and none of my profiles appear to be doing anything in terms of user rights. Does anyone know what I may be missing and how I can keep this from happening? dseditgroup -o edit -d myusername -t user -L admin

Hello all, We want to provide an action to all our IT helpdesk teams that they should run on the user's Mac before a support incident is sent to a dedicated Mac support team. They  don't always have physical access to the Mac and won't have access to the JAMF Console.   Is it possible to run a policy on a managed Mac through an API call ? The policy itself is very simple: it only contains the "Update Inventory" command and the scope is set to all computers, so there's no requirements on scope or possible issues on exclusions.  I could not find any API action on policies to do that..

HelloMy company is planning to move away from Sophos to MS Defender. Is there any tools out there that locks a user out while the uninstall Sophos is happening, reboots and then installs Defender? Assuming I can do this via a policy but I just don't want users to intervene while it's uninstallingThanks! 

Hello, we have a problem with google chrome. After getting 20 licenses and deploying to our ipads it is not showing up on the ipad screen. According to jamf school it is installed, but on the ipad it is not. The layout is configured correctly and the profile is up to date. What can be the problem?

Hello, we have a lot of iPads for a special use case. Therefore the devices are very restricted. We are using a configuration profile with a home screen layout and restrictions for Apps.We restricted many apps and especially we are using the function "App usage" with "Only some apps allowed". Since iOS 18 it's no longer possible to send a document via Airdrop to this device. The sound of reception is heard but no notification appears to allow the document. The status on the other device which send the document is "waiting".It works again, if I remove the function "app usage" from configuration profile. Is there any option to add AirDrop or the notification to "allowed apps"? Or is there any other workaround to use this function with AirDrop? Best regardsFabian

Hello, We are going to use Jamf Security Cloud (Radar) on our macOS devices.We will not be using the ZTNA part.I still haven't understood if the Jamf Trust application is really necessary if we are not using ZTNA and, if it is necessary, what does it bring? Thank you for your help.

Greetings all, We are migrating from our on-prem Jamf Pro to the cloud product.  We are working with Rocketman Tech as consultants, and with Jamf Support of course.  I just wanted to hear from anyone who has gone through this transition as to things to watch out for, possible problem points, things you would do differently and so forth.  Our "lift and shift" date is January 21, 2025, so we are definitely approaching the critical point in the process.  Any thoughts or comments would be greatly appreciated.

We are currently seeing minor updates being deferred even though there are no restrictions on them. There is a major OS Deferral set for 90 days and enforced and no other settings.  I thought maybe it may have been the Jamf configuration profile, so I configured just the settings manually but same issue appears. If I disable the configuration profile completely, all updates show Deferred: NoThere going to be no major release until the end of the year so its safe to disable the policy for now but would be great to get an understanding on why this is occuring.    

I never configured a separate patch policy for Jamf connect I just went into Settings--Jamf Apps---Jamf Connect and have the Automatically Deploy and Update Jamf Connect configured.  Currently it shows the latest version and Minor\\Maintenace is selected. I notice that for some reason I only have a handful of devices that are on the current release and the others are on various older versions.    What triggers Jamf Connect to upgrade?   Where would I see why it is failing

We're looking at our options for patch management/app updates. Many of our apps are available in either the Mac Store or Jamf store so we could just use automatic updates. Is there a best practice? Is it better to use automatic updates or use patch management?

My district uses Jamf School to manage iPads.  We set wallpapers for each school and prevent students from changing the wallpaper.  Students found a couple of loopholes in iPadOS 17 that allowed them to change the wallpaper (via Focus and by setting a picture from the Photos app as background).  These loopholes are resolved, but some of the iPads still have the wallpaper students set.  The wallpaper hasn't reset to the assigned wallpaper after checking in or after reinstalling the profile that sets the wallpaper.  For some iPads we've tested, we can only get the wallpaper to reset after erasing the device. We can continue to erase iPads as needed to correct this (most could probably benefit from this anyway), but is there another solution we could try to force the wallpaper back to the assigned wallpaper?