Has anyone had any luck getting these to work?  or am i just doing something stupid?

Hello,I've been testing how to recover a device in the case an employee logged into their iCloud account with their personal credentials on a supervised machine. I was able to successfully boot into recovery mode, erase the machine then after rebooting again use the MDM recovery key in JAMF to regain control over the machine. However, I tried another scenario where I used the personal iCloud account to remotely lock the machine. I was not able to find a procedure to recover the machine in that case.Is there a process for this, or is there a way to disable remote lock via iCloud in Jamf Now?

Afternoon All  For those in education sector, how are people dealing with deploying the extra content for Logic sound loops etc.Packaging it unsurprisingly a none starter due to size. 68GB is way to big.Are there any good script out there? Looking around have only come accross loopdown   https://github.com/carlashley/loopdown but loooks like thats been no longer developed.Just wondered if anyone had experience of this and has any tips/tricks to share.Thanks

Hi all, I recently took over as the Jamf admin for my institution, and am trying to make sense of some settings that were enabled prior. In regards to this setting in Settings > Global > User-initiated enrollment > Computers:We also have a managed local administrator account created via PreStage. Would this setting enable SSH for both the user-initiated and PreStage managed local administrator accounts, or just the user-initiated only?  I tried to find information about this in other Jamf Nation posts but couldn't seem to find anything - please let me know if I missed any helpful posts. I also tried looking at System Settings > General > Sharing > Remote Login while logged into each of the managed local accounts and did not see either of them listed as allowed users, though I understand this may not be visible by design. Thanks in advance!

We track Macbooks by name in Jamf but students are easily able to rename their Macbooks by going to System Settings - General - About, and then just clicking and typing over the name that we set. When I look in restrictions, there's an option to restrict the entire General section but we don't want to do that. I just want to restrict the About section in General to prevent them from renaming the Mac.  

our users have to authenticate about 3 times during enrollment. 1st to authenticate / start enrollment 2nd time to create local account 3rd time to authenticate to Zscaler We use Entra as our iDP and everything is setup fine in JAMF Connect as existing users are able to authenticate to Azure without issue.  Is there a way to have the Mac store the SSO credentials so it can be passed to other apps during enrollment?  We are using Device Compliance...finally got rid of Conditional access..TIA  

I am able to create Print Queues (printer with default settings) and make those available in Self Service for staff to install. So for those people who want Color 1-Sided EcoStaple, they can select that "Printer" in Self Service and they are set. BUT, I would also like to create a bunch of Presets so staff can change the default per job. I can create all the Presets, just not sure how to make that available in Self Service for staff to install. Any direction would be appreciated.

Hello Jamf Community, I’m Darshan Hiranandani, and I’m currently in the process of deploying iPads for classroom use. I’m looking for advice on how to best manage these devices using Jamf Pro to ensure a seamless rollout for both teachers and students. I have a few questions: Are there any key settings or configurations you recommend enabling or disabling specifically for an educational setting? What’s the most efficient way to manage app distribution to the iPads? Should I be using the VPP (Volume Purchase Program) for apps, and what’s the best strategy for updating and maintaining these apps after installation? Regarding security, what are the best settings to implement on the iPads to ensure they’re secure, but still functional for students who may need certain features or apps? I’d appreciate any insights or recommendations from those who have experience with iPad deployments in education. Looking forward to your suggestions! Thanks! Regards Darshan Hiranandani

We are trying to change the MacOS Date & Time setting "24-hour time" on 15.2 via a script. There is nothing recent / working anywhere on the web. Is it impossible?

I have been trying to get Barracuda Device Manager installed from JAMF on our companies macbooks.  In order to install it manually you have run a script that Barracuda provides. I have no issues doing the manual install but I want to automate it now. I have tried just uploading the pkg I downloaded from Barracuda but that doesn't work. I tried to run the script manually before I installed from JAMF and it doesn't work. I uploaded the script and installed from JAMF that doesn't work. I have tried adding the script to the pkg when creating the software policy that doesn't work. I also used JAMF composer to create the pkg and tried all of the steps I mentioned before. I did check the logs I found this: Installing at base path / installer: The install failed. The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. So right now I am thinking of a couple of things that maybe happening it may be something on my end w

I'm trying to create a Policy to update mac like SUPER can since our organization won't allow it's use.  Issue i'm having is when running command I keep getting error messages saying" No such update No updates are available.  "Here is Syntax I have hopefully someone can point out my error.sudo -S softwareupdate --install 'macOS Sequoia 15.2-24C101' --restart --force --no-scan --agree-to-license --stdinpass "$4" --user "$5"   I've tired "macOS Sequoia 15.2-24C101", "macOS Sequoia 15.2", "15.2"Really appreciate everyone time for reviewing this posting. 

We are deploying beyond trust jump clients on all of our macs and following the instructions by setting up a configuration profile to enable all screen sharing, disk sharing other settings on the backend through jamf without users being notifiied however still some of the users are presented with this which is annoying for the user as well as IT team . what could have been missing in the configuration profile . any help would be greatly appreciated  

We seem to have Macs already enrolled being added again into Jamf somehow, but since the entry is already there it overwrites the original hostname and adds a () at the end. These Macs are not being enrolled a second time, this appears to be random duplicate entries. A fellow jamf/mac admin I work with had this happen to his mac today and he had done nothing out of the ordinary to it, so we searched and found several entries shown below. I did a search for (1) - (10) and found multiple for each. XXXXXXXXXXC32P (10) XXXXXXXXXXXJT4 (2) XXXXXXXX647 (2) XXXXXXXXYWP (2) XXXXXXXXXX9VH (2) XXXXXXXXXNL9 (2) XXXXXXXXGH5 (2) XXXXXXXW9QG (2)

I currently have the script to try and uninstall python3 in Homebrew:   sudo brew uninstall python3   and keep getting the error "sudo: brew: command not found". I've also tried the command /opt/homebrew/bin/brew uninstall python3 and run into the error "Running Homebrew as root is extremely dangerous and no longer supported.As Homebrew does not drop privileges on installation you would be giving all build scripts full access to your system." I'm certain that Homebrew and python3 (via Homebrew) is installed on the device I'm pushing this script to. Is there another way I should be running uninstall commands for Homebrew? 

Hello,I am getting this message when I attempt to uninstall or install Netskope from Jamf, which prompts me to elevate.I have given both the Netskope and the Remove Netskope Client full disk access.I am using the uninstall script for Jamf, provided by Netskope on their download page.I don't know what more I can do to prevent the pop-up. Help? 

Hello community, Using Jamf Teacher I noticed a problem: Since all the management certificates have validation dates (for example until 2028), students can simply change the date on their iPads to 2029 and Jamf Teacher is unuseable, restrictions will not reach this iPad. (The student is also not able to use the internet oder other things, due to the wrong timestamp, but that‘s not the point) Reading a lot of threats here I noticed that I‘m not the only one with this problem, but I couldn‘t find my solution. Is there any way to set the time and date automatically on iPads? The best solution would be via a configuration profile, but I couldn‘t find any. I found some scripts for Macs, but do they also work for iPads (and how do I activate them for our iPads?   Thank you for your help 

Hiwe have recently pushed beyond trust jump clients to all our laptops via jamf . i can see the logs saying its successfully installed confirming from rep console establishing a remote session. however i am unable to see the app in the list of applications in jamf for any of the machines. , any idea why . Thanks

I'm testing scheduling OS updates in Jamf Pro 11.11.2. I have Software Updates setup to Download and Schedule to Install for the latest version based on device eligibility. I ensured that the bootstrap token is escrowed. On the target device I see a message that reads:Managed UpdatedAn update to macOS 15.2 is past due. You can install it now or it will be installed automatically 12/12/2024, 9:56am The issue is that the time keeps changing and it never get its installed. Any suggestions? 

I've created an EA with the script  #!/bin/bash echo "$(mdls "/System/Applications/Utilities/Terminal.app" -name kMDItemLastUsedDate | awk '{print $3}')" and running it on my device, it returns  2024-12-12 as expected. I then created a Smart Group with Criteria <Name of EA>, Operator 'after (yyyy-mm-dd)' and Value '2024-01-1'. Jamf returns a list of devices but I do not believe this list is accurate, as it does not include my device when I've been using Terminal all morning. Any suggestions on what could be happening or what I can do to improve its accuracy?  

Hello We have started to enroll our macbooks for our employees without adminrights. Yes we have the privilege access configured in jamf connect, but don't want use it for everyone :) So i started to configure what is necessary for our employees that they can work without adminrights. So far so good. Now i am actually helpless with this one problem about creating a symlink via jamf pro policy after installation of Visual Studio code. What i need is: A symlink in the directory /usr/local/bin/code which points to /Applications/Visual Studio Code.app/Contents/Resources/app/bin/code   So i am able to create it, but it isnt working. Checking it on a testmachine the symlink shows me in the "get info" as "Original" the path /usr/local/bin/code  instead of /Applications/Visual Studio Code.app/Contents/Resources/app/bin/code   So its not the first symlink i create but its the first in this location /usr/local/bin/code so maybe i am doing something wrong. I am using this sho

Hello Jamf family, Is there a script that can uninstall apps like in Intune? Thanks, JM

I have deployed BeyondTrust's remote support client to my test machine. However, if I set the configuration profile to Allow Standard Users to Allow Access for ScreenCapture, the app doesn't seem to realize it's been authorized. It continues to prompt to allow. Even if I check it with an administrator account. As you can see in the screenshots, even the Accessibility and Full Disk Access are also showing denied, even though they are set to allow in the configuration profile.The fun part is (on a fresh image) if I set the ScreenCapture to Deny, then use an administrator account to allow while on the computer, it actually does allow it.

Has anybody been able to configure the Apple Intelligence Report section in Privacy and Settings?

Hi eveyrone, Rookie here. how can I upload a larger than 5GB pkg to jamfCloud?  With Jumf Sync the max is 5GB. I checked the log and I get below. Failed to copy Adobe_AE to JCDS (Jamf Sync): dataRequestFailed(statusCode: 400, message: Optional("EntityTooLarge: Your proposed upload exceeds the maximum allowed size - max allowed size = 5368709120")). Adobe After Effects on its own package is 6.38 GB.    

I am trying to renew the certificate on my IIS distribution point on a Windows server.  The documentation has changed recently and the new documentation seems to have left out the part of making that request in the Certificates snapin in mmc. I can get part way through from memory but I know there were some other settings that I cannot recall.  This is the documentation updated in October of 2024... https://learn.jamf.com/en-US/bundle/technical-articles/page/Using_IIS_to_Enable_HTTPS_Downloads_on_a_Windows_Server_2016_or_2019_File_Share_Distribution_Point.html Does anyone have a printed out copy of this page prior to the update?  I recall that it was step 4 where they talked about making the request that I need to do.   Thank you in advance for any help.