Hi  Can someone please help me with the nudge custom launchagent? I am trying to run Nudge in every 3 hours instead of default 30 mins.  So far, I tried to edit the .plist file in /library/Launchagents and repackage Nudge from Composer and deploy from JAMF, but no luck so far. Got the error saying unable to move files in final destination while running policy.   

Background information: I need to mass remove all devices from all groups via api I've been reading through all the API Calls available from jamfs /api page, i've come to the conclusion if it would be anywhere, it would be here [https://ENTERJSS.URLHERE] :8443/api/#!/mobiledevicecommands/createMobileDeviceCommandURL_post but via "Delete" (assuming a Remove From Groups Option is an available command) instead of "Post" but "Post" is all that's available. Am I missing something? Does anyone know of a way to remove an iOS Device from all static groups via API Call? Thank you

Hello everyone, I hope you are well and can answer my questions.   We are currently on-boarding a new client and they are using MaaS360 at the moment with another MSP. I have everything just about finished up in JAMF, except Auto-Enrollment which requires connecting to the Apple Business Manager Server. Once I do, that is usually what bring in the devices (If I remember correctly). If the devices are currently already setup with a MDM profile on them with another MDM service provider, would that be interfered with if I would setup the connection between ABM and JAMF? I am wanting to make this transition seamless and have zero down time as the customer works 24/7 and needs access to these devices.  I have only done setup of new users to JAMF and not migrated from another MDM Provider. Any insight would be helpful.    My Plan was to have the users setup and tie that to Groups and profiles so that when he sees the users account it downloads the appropriate profile and

We are a young company and have been on Jamf Pro for less than a year. We were not able to start our operations with Apple Business Manager (ABM) so we will need to bring our existing inventory (all purchased direct from Apple) into ABM. I have been reading about the process here and I am concerned about the part that says:If you want to add a Mac that’s currently configured, you must first erase all content and settings.Important: All your data will be erased. Make sure you have an up-to-date backup of your data because it will all be erased.We have more than 100 active computers in Jamf. Is there a way to bring them into ABM without erasing everything? I can't see how that is going to go over well with one user, let alone 100+.Needless to say I am looking for some guidance (and hopefully some reassurance) that there is a better way.

I would like to stop spotlight from indexing certain locations across all my Macs. I need it to stop indexing the mounted network shares. Is there a way to do that? I could not find a setting regarding that in Jamf Pro.

Would there be any issues with using the same ABM account to manage volume purchasing across multiple Jamf Pro servers/instances? Any particular reason you would want to avoid doing this? I tried searching for similar questions here and information in the docs, but didn't find anything relevant. Thank you.https://docs.jamf.com/10.26.0/jamf-pro/administrator-guide/Integrating_with_Volume_Purchasing.html

Hi folks Has someone found a solution to disable the auto update check function in deepl.app?I tried already with  preference domain: com.linguee.DeepLCopyTranslator <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>autoUpdateEnabled</key> <false/> </dict> </plist>  and searched also for some other plists but had no luck to disable this function. The problem is all releases which are published to the user via app directly do not correspond with the main releases which are published directly from the developer.And our user without admin rights cant update it.Privilege Access via jamf connect is not an option for this :) I cant use also Installomator for it, because the URL is the one for the main releases. THank you in advance J

My end user noticed the option to type part of a URL or term doesn't function after I configured Chrome as she requested.  Either I'm enforcing something that disables it or I have to enable a key, but can't find what it's called in the Enterprise documentation.    <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>AutofillAddressEnabled</key> <false/> <key>AutofillCreditCardEnabled</key> <false/> <key>BrowserAddPersonEnabled</key> <false/> <key>BrowserSignin</key> <integer>0</integer> <key>DefaultBrowserSettingEnabled</key> <true/> <key>DefaultSearchProviderEnabled</key> <false/> <key>DefaultSearchProviderName</key> <string>Google Search</string> <key>DefaultSearchPr

I am looking to change all of my users System preferences --> General --> set 'Show scroll bars' to 'Always'. I didnt see it in "managed Preferences" so I am wondering how to set this in jamf for my users.

We have been working with Jamf Pro / Jamf Connect for a while now. Jamf Connect is set up with our Azure instance and works perfectly well. Now we also have a separate Google Workspace and we are trying to configure Jamf Connect for it. I have downloaded the latest version of Jamf Connect which i'm pushing to the devices which will need to log in with their google credentials. However, upon installing Jamf Connect and restarting the device, the apple logo appears and the loading bar gets stuck mid way. After some time, the logo and bar dissapear and I can see the mouse, however the rest of the screen is black. When I click on the keyboard I can hear sounds. Anyone else encountered this issue and managed to solve it? Or maybe someone can assist me with what I can troubleshoot? The Jamf Connect Package is being deployed via Jamf Pro policies. Mac OS versions tested on Sonoma and Ventura (both same result)

Hi All   is there anyway that Email address in entra can be claim on credential for Jamf connect instead of the UPN in entra? or have both? Thanks

How can we disable or hide the Apple Intelligence and Siri options in System Preferences? I attempted to do this using a configuration profile, but it didn’t work.    

I would like to know if anyone else is experiencing this issue. Unable to log in with any user on the device while writing data to the server, the system will notify and prompt to log in again. We tried logging in again, but the device is still unresponsive. Note: Model: MacBook Pro (13-inch, M1, 2020)Processor: Apple M1FileVault 2 Enabled (System)Personal Key: Yes Preliminary testing steps: Resetting the password and account did not resolve the issue. Checked for the latest macOS update through Recovery Mode. Unable to access Safe Mode on macOS. To verify the accuracy of the information, users can confirm that they successfully accessed the system without needing to enter a password.

Trying out the new Self Service feature added to App Installers. I'm testing using the Google Drive app. I've made the app selection from the Jamf App catalog, configured it for Self Service, and scoped to my targets. Whenever any of the computers/users opens Self Service and clicks to install Google Drive, we get the error: "This application is unavailable.  Try again later." from Self Service.Anyone else experiencing this issue?

I have downloaded and tested the new Self Service+ and it is definitely an improvement over the old Self Service app.I'm wondering if/when it will see better support in Jamf Pro. Currently to deploy it I'd be pushing a .pkg installer via a computer Policy, whereas the old Self Service app has an entire panel in the Jamf Pro settings for automatically deploying and configuring it on endpoints. As we get closer to EOL for the old Self Service will we see similar support for the Self Service+ app added to Jamf Pro?

I am trying to remove and add some Dockitems to our new Users, so far it goes well with the Built in Tool and policies. Just these three Apps don't work.  I am using the following path file://localhost/System/Applications/TV.app/file://localhost/System/Applications/Music.app/file://localhost/System/Applications/Launchpad.app/ I'm aware that there are other tools like dockutil and dockmaster, but I would like to use the built-in functions. Am I doing something wrong or is this a known issue?

Hello, I would like to hide the window that asks whether to send diagnostic data when opening Microsoft Edge. After some research, I found the Edge Policy available in Jamf (com.microsoft.Edge). I added DiagnosticData and configured it. The profile is applied. Unfortunately, it doesn’t work—the window still opens. The other configured settings are applied.   Edge version : 132   Edge Policy : The Diagnostic window : Thanks

Hello, Today, We found out the Jamf Connect login is not working when connected to our corporate WiFI network which is basically EAP/TLS machine level cert auth with auto-join configured through Configuration Profile.  Does anyone has any solution for this issue ? OR does anyone come across this issue ? Note: Jamf Connect Login works perfectly fine on home network / mobile hotspot.

I've got a profile added to my prestage to enable FileVault during enrollment, and for random systems, it seems to be failing to turn on FileVault. The profile is installed on the system, but the key is Unknown and FileVault 2 status is Not Enabled. These machines have all been on macOS 14.x (few with 14.1, few with 14.3). The weirdest one of all though, is a system with 13.7.3 enrolled, got the profile deployed, and FileVault enabled and key escrowed to Jamf. I doublechecked and confirmed the documentation states this is for macOS 14.0 or later. Anyone else seeing anything similar? My environment is running 11.12.1. I could rip out that profile from one system and then deploy the previous profile that I was using to enable at first login (I confirmed that both profiles are not on the systems affected). Also of note - users are FileVault2 Enabled, and have SecureToken issued. I also checked the PI's and didnt see anything that sounded similar to this.

Hey Everyone!I have been at this for hours and I am not sure what I am doing wrong. I am trying to make an extention attribute that will display the users current keyboard input type. We have users in the UK and in the US and I have been asked to show if the users mac has a UK Keyboard or a US Keyboard. This is my script, its very simple and I am not sure why its not showing a result in Jamf Pro. Even know it shows a result in terminal and code runner.  #!/bin/bash# get the keyboard layout nameresult=$(defaults read com.apple.HIToolbox AppleCurrentKeyboardLayoutInputSourceID)echo "<result>$result</result>"  Here is my EA's Attributes  I am trying to find out if I need to contact jamf or am I missing something. Any help would be greatly appreciated!         

In 11.11 a new attribute for macOS was released - Battery Health.  However the only value I see reported for any of my computers over 14.4 is Unknown.  Is anyone seeing this work?  There is a note stating that this will work for iOS but not iPadOS - but nothing about it not working for macOS.

I try to add the app screen recorder to in iPad. Tipping on the "+" sign on the screen has no effect. It is not possible to add or delete items. Is there a solution?

We are on Jamf Now and I have added SAP Privileges to all the devices to allow my team to make themselves an admin. This is installed via the App Installer and added to the device Blueprint. It was working well, but I think recently it automatically updated to version 2.0 of Privileges, and now has stopped allowing users to escalate themselves to admin - everyone is stuck as a standard user. I suspect this is because the new 2.0 upgrade needed to reinstall the Helper tool, but when it auto-updated the users were all in standard access mode. And now we are stuck with no way to change this. Is there a way to prompt Jamf to install the Helper tool so that Privileges will work again?

Hey everyone, I'm currently looking for a smart way to automatically logout logged in macOS users. Situation: School using PSSO, users can work on whatever Mac they want. Most students don't log out properly. No planning on force rebooting the Mac. No planning on login into each Mac using local admin credentials and ending the sessions.   Fast User Switching and AutoLogOutDelay are configured as follows:   sudo defaults write /Library/Preferences/.GlobalPreferences MultipleSessionEnabled --bool YES sudo defaults write /Library/Preferences/.GlobalPreferences com.apple.autologout.autoLogoutDelay -int 300   The autoLogoutDelay seems to be completely broken and / or doesn't work at all. All accounts are still logged in despite the delay of 5 minutes - or I just don't geht how it's supposed to work.   Anyway - I've stumbled across this post which seems to be an effective way (need to test it) https://community.jamf.com/t5/jamf-pro/force-logout-help-please/m-p/130871#M11

Hi folks, I am looking for a way to prohibit enabling of Internet Sharing since it can be a pretty serious security risk. I was able to do it with Quest's QAS group policies, but we've stopped using that product. Is there a way to granularly disable Internet Sharing permanently using managed preferences? Thanks!