I have received a notification asking me to change the password method for user-initiated enrollment for the jamf admin account to a random password. I have set the password to a specific password so that I know what it is in case I ever have to use it in an emergency, so I don't want to change to a randomized password. Can anyone explain why it forces you to set the password to random and how do I get rid of the notification?

Zoom 5.5.2 was released over the weekend, and I uploaded the new pkg to Jamf so I could have all Macs updated before my institutions classes started Monday. The new version wasn't listed and still doesn't seem to be. There are a few devices that auto-updated to 5.5.2, and those are all coming up as an unknown version now. Any ideas when the newest version will be listed in Jamf?

Hi everyone. I'm trying to find a way where I can add a bookmark 'URL' on chrome to all users, any idea?

So, odd use case I know, but here's my dilemma: Our privileged wifi is allowed via certificates that are installed via configuration profile, and they authenticate based on the machine being bound to AD. Sometimes, our users take their laptops offsite for periods of time, during which their AD password changes. The next time the machine touches our network, it breaks the privileged wifi and puts the laptop on our general network. The solution has been to delete the wifi profile, delete the keychain entry that our general wifi installs in the login keychain, and then reinstall the wifi profile. I'd love to come up with a solution that a user can do from Self Service, but the issue becomes: how do i get the wifi certificate back on the machine if it doesn't have internet? Would it be possible to use Composer to create a package that "installed" the wifi profile, cache it, and then create the Self Service profile that uninstalls the current profile, deletes the single keychain entry,

We just went through JumpStart for MacOS and I'm struggling to get our Chrome package to install properly. Maybe an issue with the package itself? We have a smart group to look for computers without Chrome installed. I did figure out that I had to install Rosetta 2 first, but the Chrome policy appears to be successful, but then Chrome just isn't installed. I added Chrome to Self Service and tried running it and it says it finishes, but Chrome is no where to be found.

At the beginning of the academic year, I pushed out version 15.35 and we lock most software updates during the semester to prevent any additional headaches. I opened Word last week and saw a nice banner at the top telling me to update my Office. I run a script during Office install that sets update checking to Manual and have never seen this banner until recently. I do not see any options in the GUI to not display this update banner. Does anyone know how to disable it?

What is the best way to package and deploy office 2019? Thanks

Has anyone taken a look at Aspera Connect 3.5.2.x? Owned by IBM, and until today not listed under Third-Party Products, it is distributed as an .app installer, with the requisite PKG icon, probably a hint that IBM thinks we won't notice. It has a 501 line .script (AppleScript) intrusive script embedded in it. It has an embedded flat *.mpkg installer, that has embedded scripts with such lovely syntax as: Apparently the person writing the preflight script doesn't believe in close quotes... if [ $is_admin = "yes" ] ; then echo removing system wide apps rm -rf /Applications/Aspera Connect.app rm -rf /Applications/Aspera Crypt.app echo removing system wide plugin rm -rf /Library/Internet Plug-Ins/Aspera Web.plugin rm -rf /Library/Internet Plug-Ins/Aspera Web.webplugin # this is for versioned plugin dirs rm -rf /Library/Internet Plug-Ins/Aspera Web* fi echo removing local user plugin rm -rf ~/Library/Internet Plug-Ins/Aspera Web.plugin rm -rf ~/Librar

Hi all, We have iPads at our school that we currently have managed using device based management (i.e. they do not have a managed apple ID). After a recent test about how to deploy Books (or iBooks) it appears we need to have the iPads signed in with Managed Apple IDs (MAIDs). We do not need users (we are a Primary school) to have their own MAID. So our plan is to have MAIDs, that are created in ASM, that are specific for the device (in order to allow deploying Books to the Books App). We would like to be able to remotely sign in the iPads to the MAID and were wondering if there is a way to do this in Jamf Pro since you can assign a User (which is created by an import from ASM - i.e. the MAID) to an iPad. Otherwise getting each individual iPad and signing them into their MAID is just ...painful.

Hi,is anyone having troubles with the checkmark "Enable Self Service User Login"? We tried several times to uncheck it but looks like that it keep self re-enabling every time.It is frustrating.

Hey Guys, Just wondering what you guys are using for EA on checking uptime on the macs. I did find this :https://www.jamf.com/jamf-nation/discussions/10009/uptime-or-last-shutdown-restart Curious to see if you guys have an EA that works to report back in Days/Minutes and works on macOS Sierra!

Hello JAMFNation! I'm a relative noob. My company has restricted DropBox via the "Restricted Software" feature in JAMF. How do I add LDAP users to the exclusions list? Not seeing an obvious answer to this elsewhere on JAMFNation. We already have a few LDAP users on the exclusions list for this restriction, I just need to add one more. But when I select "Scope" and then try add an additional exclusion, I get only the option to exclude computers, buildings, groups, or departments. Thanks!

Hello fellow Jamf Admins, I'm trying to GET a specific extension attribute and only output the specific result using the following script: curl -sku $jssUser:$jssPass -H "accept: text/xml" xml=$(https://$orgName.jamfcloud.com/JSSResource/computers/id/$jamfID/subset/extension_attributes) deviceType=$(echo $xml | xpath "//*[id=$deviceTypeEAID]/value/text()") This command works perfectly when running it in Catalina and below, but for some reason when I run it in Big Sur I get the following error: Script result: Usage: /usr/bin/xpath5.28 [options] -e query [-e query...] [filename...] If no filenames are given, supply XML on STDIN. You must provide at least one query. Each supplementary query is done in order, the previous query giving the context of the next one. Options: -q quiet, only output the resulting PATH. -s suffix, use suffix instead of linefeed. -p postfix, use prefix instead of nothing. -n Don't use an external DTD. I'm pretty junior when it comes to scripting, and I'm n

Hi, I am building a new Jamf Pro Server which is going to take over the old server once operational. Can I use the activation code when setting this up without any impact to the existing server? Thanks

My company is in the process of setting up PatchBot (https://github.com/Honestpuck/PatchBot) for all of our Jamf Pro cloud instances. Per the checklist, I've set up all of the necessary policies (both computer and patch), and am using Firefox as my test case. I made the Firefox.pkg override, and created the Firefox.ptch recipe using the new package argument, and made the corresponding override. Problems: when running the autopkg.sh script, we're running into issues with both of the custom processors, JPCImporter and PatchManager. JPCImporter fails with a 409 error. It times out after the 10 attempts to update the package. 2021-01-08 11:29:17 DEBUG package update attempt 11 2021-01-08 11:29:18 DEBUG Attempt failed with code: 409 2021-01-08 11:29:18 DEBUG URL: https://***.jamfcloud.com/JSSResource/packages/id/166 PatchManager also fails with a 409 error and doesn't update the patch policies. The script just halts at line 190 after the 409 is returned. 2021-01-08 11:33:52 DEB

Hi, so in SCCM i have applications and do detection method for an application. With jamf of course there are packages and package receipts. When you have an essential application like an antivirus how do you make sure it stays on the machine. For example if a policy is set for recurring check in but run once per machine. Like I could set it to ongoing but seems bad to reinstall the package all the time. Wish I could just do a check to see if the file is there and if its not reinstall.

Here's a fun one for you duti users out there... I'm attempting to use duti with this script to set defaults. The commands work when run locally, but when I attempt to use a script or a command in Files & Processes, they don't work. It also didn't work when added to the duti package as a postinstall script. 10.15.7 is the version of macOS; anyone seen this before? Might cdef behave differently? #!/bin/sh #makes outlook default mail program /usr/local/bin/duti -s com.microsoft.outlook mailto #makes outlook default calendar program /usr/local/bin/duti -s com.microsoft.outlook ics all #makes outlook default contacts program /usr/local/bin/duti -s com.microsoft.outlook vcf all

In Sub-Location the Update Button for Devices is missing. The functionality (if enabled for the users role) is accessible via the direct link. https://*.jamfcloud.com/devices/updates.html The link should be available in the sidebar if it is enabled.

Hi, On 24 september when macOS Mojave 10.14.0 released i decided to upgrade my own MacBook Pro that was on 10.13.6.The upgrade was successful and at that moment it seems to be there were no problems at all, until i shutdown my device and booted it up the day after. When booting, seeing the log-in screen and trying to login with my Managed Mobile Account it will get stuck on the black screen with Apple logo endless. On our devices we have a local account configured for IT support, and that account is working flawless. What did i try to solve it;- Reset PRAM- Clear user templates- Clear ~/Library/Preferences- Rename ./mbr_cache ./mbr_cache-old- Reinstall macOS Mojave from Recovery (installer 14.0.22)- Reinstall macOS Mojave from Internet Recovery (installer 14.0.18)- Disable FileVault 2- Disk repair Also grabbbed an other fresh 10.13.6 MacBook Pro, configured my account etc etc and kept it clean as possible, upgraded and same issue appears. When booting to Safe Mode i am able to lo

Hi, I'm new to JAMF and wondered if any of this talent pool could point me in the right direction with fixing my problem. I would my user to be able to download Office 365 apps from Self-Service. As of right now, the apps show up in self-service but only redirect the user to the app store, and they can't download apps with their Managed Apple ID's. Is there a way to bypass the store and have it automatically install the apps when they click install?

Based on a JAMF webinar I want to create a self serv item that would format the drive on a Mac and install Catalina. I have created a policy that deploys Install macOS Catalina.app to /Applicationsand a second policy that executes the command '/Applications/Install macOS Catalina.app/Contents/Resources/startosinstall' --eraseinstall --agreetolicense --forcequitapps --newvolumename 'Macintosh HD' --nointeraction & In theory, this should quite all open apps, restart the computer, wipe the drive and install macOS Catalina. All it does is create a new partition and dump the installer files in there. That's it! The Catalina package runs fine when I install it manually.What am I doing wrong here?

Has anyone tried enrolling a new Mac with Catalina (10.15.0) and it just hangs on "Retrieving Activation Record "?

I need to push out a VPN payload that has its DNS servers set manually (Advanced/DNS under VPN settings in System Preferences) Is there a way to set the DNS servers for a VPN via script or terminal command?

Hello, Im an intern and I have been tasked with trying to figure out how to get JSS to pull the Department field from AD and then they want me to create a Smart Group with the search criteria of Departments. I have looked all over JSS but I can't seem to figure out how to get AD to pull that information. In the system settings for the LDAP AD server Departments has the correct attribute but then when I search a user JSS is still not pulling the information from AD.

Hello everyone, Does anyone know how to accurately report on whether or not a parent has linked their app to a student device in Jamf Pro?I can see in advanced searches there is an option for parent link with a free text box, but not sure what this is expecting.On a test device I have, it showed three when a parent had linked and zero when they hadn't - but is it really that simple?!?!Or is that the number of parent apps linked to that one device?