Hi Everyone,After upgrading the operating system to Sonoma, I noticed that I could not see the Profiles section. I see the message in the screenshot below. Has anyone encountered this situation? Does anyone know the solution? 

We have created Sites in our Jamf instance and are now planning to delete all of them. Before proceeding, I would like to ensure that none of the sites are currently being used by any policies, groups, or configuration profiles. Could you suggest the best way to gather detailed information on their associations?  

Is anyone having issues packaging the additional content for Logic Pro X 11?I've tried twice, and my normal method isn't playing ball.In short, 'Composer' a whole installation, Also move related receipts to /Library/Receipts and add that to Composer. Build the PKG, PKGchunk up the 60-80GB file, upload and test deploy.If I remember correctly, the Logic Pro X 10 receipts used to appear in the users library and had to be moved. Now they're arriving in /Library/Apple/System/Library/Receipts - this seems to be a protected location. Any sudo ditto commands to that location result in 'Operation not permitted'.Anyone had any success getting Logic to register all the installed content?

Hi all, I was wondering if I'm the only one no longer able to load the https://macadmins.software/ site that was previously hosted by Microsoft? When I go there now from any device I get a GoDaddy page, so it looks like they didn't renew the site hosting perhaps? I used this site all the time to get the most recent packages for Microsoft software. Is everyone else seeing the same thing as me? If so, has anyone heard anything about this, if this will be coming back or if that's it? I know for a while now while the links all pointed to the most recent versions of software, the version numbers listed on the site were stuck on some old version from many months back, but it was still working to download the most current releases as early as this month.

hi does any one know how to force safe search in google for ios. ie automate the ticking of the safe search box in google settings on the ipads? or is a one by one process, i have a fleet of 500 and need to do it by the end of the day..yay

Hello,Need to force some extensions on our fleet via MDM. I've already done so with most of our enabled browsers but can't find anything on Safari on how to do that.Is there any way to force them on it?

I am attempting to set up pre-stage enrollments for Jamf, but am running into some issues:I manually assigned a device to our business manager account for testing purposes. When I sign into the account, everything looks like it works correctly, but the device isn't assigned to any user. Is there a way that it can be automatically assigned?I would love to get Google SSO set up for creating the local user account. Would I need Jamf Connect to accomplish this?Thank you in advance!

Help! I have been trying to endlessly to get this to work...what am I doing wrong? I know for a fact that the logged in user has the workplace join key in their keychain but for some reason, when trying to run this for an EA it doesn't report correctly.  I know the jamf runs with elevated privileges, but should it be able to run this without prompt for user credentials (like root), or is this not going to be possible?   #!/bin/zsh currentUser=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ { print $3 }' ) uid=$(id -u "$currentUser") haswpjkey="No" wpjkey=$(launchctl asuser "$uid" sudo -iu "$currentUser" security dump-keychain | grep "Workplace Join Key" | xargs) [[ "${wpjkey}" == *"Microsoft Workplace Join Key"* ]] && haswpjkey="Yes" echo "<result>$haswpjkey</result>"  

If I wanted to test a script locally on my mac before deploying it out - how would i go about doing it?Do I open my terminal and drag the".sh" file in there?

I'm trying to configure my updates to run via S.U.P.E.R finally, and I keep running into the error: Warning: Inaccurate deferral found for macOS major upgrade 1 of 1 is: DeferredUntil:2025-01-10 00:00:00,Title:macOS Ventura 13.7.2,Build:22H313,Version:13.7.2 I have config profiles setup for Apple Software Updates and  SUPER the following: Apple Software Allow installation of macOS beta releases Automatically install macOS updates Automatically install app updates from the App Store Restrict software updates to administrator users only Automatically check for updates Automatically download new updates when available Automatically install configuration data Automatically install system data files and security updates   MacJutsu.Super <key>AuthJamfComputerID</key> <string>$JSSID</string> <key>InstallMacOSMajorUpgrades</key> <true/> <key>InstallMacOSMajorVersionTarget</key> <strin

Has anyone had success setting up SMTP in JSS using Google's SMTP relay? We are struggling to find settings that work. This is the doc I'm referencing: https://support.google.com/a/answer/2956491?hl=en

Hi, Can anyone please help me with this??We had a restriction payload to delay major macOS for 90 days, which is working fine even more than we wanted. Since it has been more than 90 days after the release of macOS 15, this should be available to update for every device. But macOS 15 is still not showing up when trying to update! I thing I did was, I modified the same profile but only disable ChatGpt integration didnt change macOS Settings and re-pushed the same profile couple of days ago. JAMF Support confirms that re-pushing the same profile for macOS restrictions doesnt restart the timer, as this timer is depend on the release date by Apple. Really lost in here! And btw we dont have any profile controlling the macOS except disabling the macOS betas.

Good afternoon All, I tried multiple times to get S.U.P.E.R.M.A.N script to work in my Jamf Pro instance. If anyone have a basic configuration profile that works well with their instance please share. I read the Wiki page but I do not see how the policy uses the configuration profiles to run and control when "super".

Hello !For some reasons, I would like to change the default icon of FileMaker Pro. I install the app, change the icon in the information tab and package it using Composer.But when I deploy it on some test computers with a Jamf policy, I have different message errors like "The app is damaged and cannot be opened", sometimes with a message telling me to drop it in the trash. If I right click on the app or it's dock icon then click "Open", it will open.I would like to be able to avoid this message,  allowing the app to open using command line or Apple Script to bypass that security, or another way to customize the FileMaker Pro's icon without having this message.I found that it could be possible to make appear again the ability to choose to open apps from any source, but I would like to avoid that option for security purpose. I want to keep it as "Open from Apple and identified developers".Thank you !

Hi all,   I'm the only Jamf admin for my company and have been asked to removed a specific Chrome extension from all our Macs across 9 locations. Is there a way AI can do this without physically going to all locations and removing it one by one? I saw a few posts, but I'm a newbie and don't know where to even start. Thanks in advance!

I am trying to figure out how to completely remove Jamf connect from my machines.I have tried running the uninstaller but it leaves profiles in my profile list of client machines that do not exist in my profiles built and deployed from Jamf Pro. I have looked for these profiles in my list of deployable profiles and they do not exist.I have turned off every profile and policy I believe is related to connect but two profiles still show up in the list on client machines. 

Hi All,  I'm implementing Jamf Connect with One Login and have bumped into a pretty weird issue. For Jamf Connect Login, I get prompted for user pass and MFA. the MFA defaults to a push notification to One Login Protect on my phone which , if I accept it if logs in just fine.  Issue is that if instead of using the push I actually type the 6 digit OTP code in the same app on the phone, Jamf connect login fails with a  401 err... In a browser , OTP works, when testing the OICD setup in the Jamf Connect Configuration App that also works with OTP.... Trying with another auth app like Google auth produces the same result.   Of course I raised it with Jamf Support too and will write the result but was just wondering if anyone bumped into something similar before

Hello,   I've been looking through the documentation to determine if Jamf Protect scans downloaded files for viruses before allowing them to open and I can't seem to find a definitive answer.    I know Jamf Protect focuses on providing comprehensive security for macOS devices, including real-time monitoring and threat detection. However, specific features like scanning downloaded files for viruses before allowing them to open are typically associated with traditional or next-generation antivirus solutions.   Does anyone know the answer to this?   Thanks!Matt

I have seen a few posts about getting a list of Chrome extensions installed but have not had any luck. Does anyone know of a way to generate a report of installed Chrome extensions?

Is there any way to block file sharing from mac to remote system via microsoft RDP?

Hello. I can get these commands and scripts to work just fine when running them locally on my Mac, but they seem to fail when getting pushed from Jamf.Scripts.1:  #!/bin/sh defaults write NSGlobalDomain "AppleShowAllExtensions" -int "1" && killall Finder 2: #!/bin/sh defaults write NSGlobalDomain "AppleShowAllExtensions" YES && killall Finder Both work fine, surprisingly. Whether I run the scripts from Terminal, or I run the commands themselves directly from Terminal, it works both ways. But if I run either of the two scripts via a policy through Jamf, it doesn't work. The script runs and I see Finder quit/restart, but the setting for 'Show all filename extensions' does not change.I was going to try a Configuration Profile instead, but cannot figure that out. I had started something like this:Preference Domain: com.apple.finder <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://

I'm trying to get Jamf Protect offline client/policy talking from Mac to SIEM. It appears that protectctl is only useful with the full cloud product, or else my clients are broken. If protectctl needs cloud version, why is it installed on my Macs? And how do you debug without it. The files in the db folder are totally opaque for debugging. It appears that protectctl diagnose is also useless without cloud. Ideas?

I've setup the "Device Compliance" in Jamf as well as the "Partners Compliance Management" in Entra ID successfully and syncs daily with Jamf. However, it appears that after a macOS device has registered in Entra ID, a day later it's no longer compliant and "MDM" is no longer reporting as "Microsoft Intune" but as "N/A".  In Intune, all macOS devices are also not reporting any compliance status. Any suggestions?   

Hey Community,  I am facing an issue and need to identify the solution for that. I have couple of enrollment customizations which are working fine with PreStage enrollment. But I wan enrollment customization for user initiated enrollment. For example, I want to guide the users how to install the MDM profile once downloaded.  But I can see enrollment customization works only with PreStage Enrollment. Any ways to achieve this for user inititated enrollment? Thanks in advance. 

Hi all,So we are using the MakeMeAnAdmin script for almost 3 years without a hitch.Now we are having the first macoS 12.3.1 devices and the MakeMeAnAdmin script does not work anymore. On older macOS versions everything works fine.Anyone else experiencing this issue?