Hello all, We want to provide an action to all our IT helpdesk teams that they should run on the user's Mac before a support incident is sent to a dedicated Mac support team. They  don't always have physical access to the Mac and won't have access to the JAMF Console.   Is it possible to run a policy on a managed Mac through an API call ? The policy itself is very simple: it only contains the "Update Inventory" command and the scope is set to all computers, so there's no requirements on scope or possible issues on exclusions.  I could not find any API action on policies to do that..

HelloMy company is planning to move away from Sophos to MS Defender. Is there any tools out there that locks a user out while the uninstall Sophos is happening, reboots and then installs Defender? Assuming I can do this via a policy but I just don't want users to intervene while it's uninstallingThanks! 

Hello, we have a problem with google chrome. After getting 20 licenses and deploying to our ipads it is not showing up on the ipad screen. According to jamf school it is installed, but on the ipad it is not. The layout is configured correctly and the profile is up to date. What can be the problem?

Hello, we have a lot of iPads for a special use case. Therefore the devices are very restricted. We are using a configuration profile with a home screen layout and restrictions for Apps.We restricted many apps and especially we are using the function "App usage" with "Only some apps allowed". Since iOS 18 it's no longer possible to send a document via Airdrop to this device. The sound of reception is heard but no notification appears to allow the document. The status on the other device which send the document is "waiting".It works again, if I remove the function "app usage" from configuration profile. Is there any option to add AirDrop or the notification to "allowed apps"? Or is there any other workaround to use this function with AirDrop? Best regardsFabian

Hello, We are going to use Jamf Security Cloud (Radar) on our macOS devices.We will not be using the ZTNA part.I still haven't understood if the Jamf Trust application is really necessary if we are not using ZTNA and, if it is necessary, what does it bring? Thank you for your help.

Greetings all, We are migrating from our on-prem Jamf Pro to the cloud product.  We are working with Rocketman Tech as consultants, and with Jamf Support of course.  I just wanted to hear from anyone who has gone through this transition as to things to watch out for, possible problem points, things you would do differently and so forth.  Our "lift and shift" date is January 21, 2025, so we are definitely approaching the critical point in the process.  Any thoughts or comments would be greatly appreciated.

We are currently seeing minor updates being deferred even though there are no restrictions on them. There is a major OS Deferral set for 90 days and enforced and no other settings.  I thought maybe it may have been the Jamf configuration profile, so I configured just the settings manually but same issue appears. If I disable the configuration profile completely, all updates show Deferred: NoThere going to be no major release until the end of the year so its safe to disable the policy for now but would be great to get an understanding on why this is occuring.    

I never configured a separate patch policy for Jamf connect I just went into Settings--Jamf Apps---Jamf Connect and have the Automatically Deploy and Update Jamf Connect configured.  Currently it shows the latest version and Minor\\Maintenace is selected. I notice that for some reason I only have a handful of devices that are on the current release and the others are on various older versions.    What triggers Jamf Connect to upgrade?   Where would I see why it is failing

We're looking at our options for patch management/app updates. Many of our apps are available in either the Mac Store or Jamf store so we could just use automatic updates. Is there a best practice? Is it better to use automatic updates or use patch management?

My district uses Jamf School to manage iPads.  We set wallpapers for each school and prevent students from changing the wallpaper.  Students found a couple of loopholes in iPadOS 17 that allowed them to change the wallpaper (via Focus and by setting a picture from the Photos app as background).  These loopholes are resolved, but some of the iPads still have the wallpaper students set.  The wallpaper hasn't reset to the assigned wallpaper after checking in or after reinstalling the profile that sets the wallpaper.  For some iPads we've tested, we can only get the wallpaper to reset after erasing the device. We can continue to erase iPads as needed to correct this (most could probably benefit from this anyway), but is there another solution we could try to force the wallpaper back to the assigned wallpaper?  

Hi Everyone,After upgrading the operating system to Sonoma, I noticed that I could not see the Profiles section. I see the message in the screenshot below. Has anyone encountered this situation? Does anyone know the solution? 

We have created Sites in our Jamf instance and are now planning to delete all of them. Before proceeding, I would like to ensure that none of the sites are currently being used by any policies, groups, or configuration profiles. Could you suggest the best way to gather detailed information on their associations?  

Is anyone having issues packaging the additional content for Logic Pro X 11?I've tried twice, and my normal method isn't playing ball.In short, 'Composer' a whole installation, Also move related receipts to /Library/Receipts and add that to Composer. Build the PKG, PKGchunk up the 60-80GB file, upload and test deploy.If I remember correctly, the Logic Pro X 10 receipts used to appear in the users library and had to be moved. Now they're arriving in /Library/Apple/System/Library/Receipts - this seems to be a protected location. Any sudo ditto commands to that location result in 'Operation not permitted'.Anyone had any success getting Logic to register all the installed content?

Hi all, I was wondering if I'm the only one no longer able to load the https://macadmins.software/ site that was previously hosted by Microsoft? When I go there now from any device I get a GoDaddy page, so it looks like they didn't renew the site hosting perhaps? I used this site all the time to get the most recent packages for Microsoft software. Is everyone else seeing the same thing as me? If so, has anyone heard anything about this, if this will be coming back or if that's it? I know for a while now while the links all pointed to the most recent versions of software, the version numbers listed on the site were stuck on some old version from many months back, but it was still working to download the most current releases as early as this month.

hi does any one know how to force safe search in google for ios. ie automate the ticking of the safe search box in google settings on the ipads? or is a one by one process, i have a fleet of 500 and need to do it by the end of the day..yay

Hello,Need to force some extensions on our fleet via MDM. I've already done so with most of our enabled browsers but can't find anything on Safari on how to do that.Is there any way to force them on it?

I am attempting to set up pre-stage enrollments for Jamf, but am running into some issues:I manually assigned a device to our business manager account for testing purposes. When I sign into the account, everything looks like it works correctly, but the device isn't assigned to any user. Is there a way that it can be automatically assigned?I would love to get Google SSO set up for creating the local user account. Would I need Jamf Connect to accomplish this?Thank you in advance!

Help! I have been trying to endlessly to get this to work...what am I doing wrong? I know for a fact that the logged in user has the workplace join key in their keychain but for some reason, when trying to run this for an EA it doesn't report correctly.  I know the jamf runs with elevated privileges, but should it be able to run this without prompt for user credentials (like root), or is this not going to be possible?   #!/bin/zsh currentUser=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ { print $3 }' ) uid=$(id -u "$currentUser") haswpjkey="No" wpjkey=$(launchctl asuser "$uid" sudo -iu "$currentUser" security dump-keychain | grep "Workplace Join Key" | xargs) [[ "${wpjkey}" == *"Microsoft Workplace Join Key"* ]] && haswpjkey="Yes" echo "<result>$haswpjkey</result>"  

If I wanted to test a script locally on my mac before deploying it out - how would i go about doing it?Do I open my terminal and drag the".sh" file in there?

I'm trying to configure my updates to run via S.U.P.E.R finally, and I keep running into the error: Warning: Inaccurate deferral found for macOS major upgrade 1 of 1 is: DeferredUntil:2025-01-10 00:00:00,Title:macOS Ventura 13.7.2,Build:22H313,Version:13.7.2 I have config profiles setup for Apple Software Updates and  SUPER the following: Apple Software Allow installation of macOS beta releases Automatically install macOS updates Automatically install app updates from the App Store Restrict software updates to administrator users only Automatically check for updates Automatically download new updates when available Automatically install configuration data Automatically install system data files and security updates   MacJutsu.Super <key>AuthJamfComputerID</key> <string>$JSSID</string> <key>InstallMacOSMajorUpgrades</key> <true/> <key>InstallMacOSMajorVersionTarget</key> <strin

Has anyone had success setting up SMTP in JSS using Google's SMTP relay? We are struggling to find settings that work. This is the doc I'm referencing: https://support.google.com/a/answer/2956491?hl=en

Hi, Can anyone please help me with this??We had a restriction payload to delay major macOS for 90 days, which is working fine even more than we wanted. Since it has been more than 90 days after the release of macOS 15, this should be available to update for every device. But macOS 15 is still not showing up when trying to update! I thing I did was, I modified the same profile but only disable ChatGpt integration didnt change macOS Settings and re-pushed the same profile couple of days ago. JAMF Support confirms that re-pushing the same profile for macOS restrictions doesnt restart the timer, as this timer is depend on the release date by Apple. Really lost in here! And btw we dont have any profile controlling the macOS except disabling the macOS betas.

Good afternoon All, I tried multiple times to get S.U.P.E.R.M.A.N script to work in my Jamf Pro instance. If anyone have a basic configuration profile that works well with their instance please share. I read the Wiki page but I do not see how the policy uses the configuration profiles to run and control when "super".

Hello !For some reasons, I would like to change the default icon of FileMaker Pro. I install the app, change the icon in the information tab and package it using Composer.But when I deploy it on some test computers with a Jamf policy, I have different message errors like "The app is damaged and cannot be opened", sometimes with a message telling me to drop it in the trash. If I right click on the app or it's dock icon then click "Open", it will open.I would like to be able to avoid this message,  allowing the app to open using command line or Apple Script to bypass that security, or another way to customize the FileMaker Pro's icon without having this message.I found that it could be possible to make appear again the ability to choose to open apps from any source, but I would like to avoid that option for security purpose. I want to keep it as "Open from Apple and identified developers".Thank you !

Hi all,   I'm the only Jamf admin for my company and have been asked to removed a specific Chrome extension from all our Macs across 9 locations. Is there a way AI can do this without physically going to all locations and removing it one by one? I saw a few posts, but I'm a newbie and don't know where to even start. Thanks in advance!