I am trying to figure out how to completely remove Jamf connect from my machines.I have tried running the uninstaller but it leaves profiles in my profile list of client machines that do not exist in my profiles built and deployed from Jamf Pro. I have looked for these profiles in my list of deployable profiles and they do not exist.I have turned off every profile and policy I believe is related to connect but two profiles still show up in the list on client machines. 

Hi All,  I'm implementing Jamf Connect with One Login and have bumped into a pretty weird issue. For Jamf Connect Login, I get prompted for user pass and MFA. the MFA defaults to a push notification to One Login Protect on my phone which , if I accept it if logs in just fine.  Issue is that if instead of using the push I actually type the 6 digit OTP code in the same app on the phone, Jamf connect login fails with a  401 err... In a browser , OTP works, when testing the OICD setup in the Jamf Connect Configuration App that also works with OTP.... Trying with another auth app like Google auth produces the same result.   Of course I raised it with Jamf Support too and will write the result but was just wondering if anyone bumped into something similar before

Hello,   I've been looking through the documentation to determine if Jamf Protect scans downloaded files for viruses before allowing them to open and I can't seem to find a definitive answer.    I know Jamf Protect focuses on providing comprehensive security for macOS devices, including real-time monitoring and threat detection. However, specific features like scanning downloaded files for viruses before allowing them to open are typically associated with traditional or next-generation antivirus solutions.   Does anyone know the answer to this?   Thanks!Matt

I have seen a few posts about getting a list of Chrome extensions installed but have not had any luck. Does anyone know of a way to generate a report of installed Chrome extensions?

Is there any way to block file sharing from mac to remote system via microsoft RDP?

Hello. I can get these commands and scripts to work just fine when running them locally on my Mac, but they seem to fail when getting pushed from Jamf.Scripts.1:  #!/bin/sh defaults write NSGlobalDomain "AppleShowAllExtensions" -int "1" && killall Finder 2: #!/bin/sh defaults write NSGlobalDomain "AppleShowAllExtensions" YES && killall Finder Both work fine, surprisingly. Whether I run the scripts from Terminal, or I run the commands themselves directly from Terminal, it works both ways. But if I run either of the two scripts via a policy through Jamf, it doesn't work. The script runs and I see Finder quit/restart, but the setting for 'Show all filename extensions' does not change.I was going to try a Configuration Profile instead, but cannot figure that out. I had started something like this:Preference Domain: com.apple.finder <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://

I'm trying to get Jamf Protect offline client/policy talking from Mac to SIEM. It appears that protectctl is only useful with the full cloud product, or else my clients are broken. If protectctl needs cloud version, why is it installed on my Macs? And how do you debug without it. The files in the db folder are totally opaque for debugging. It appears that protectctl diagnose is also useless without cloud. Ideas?

I've setup the "Device Compliance" in Jamf as well as the "Partners Compliance Management" in Entra ID successfully and syncs daily with Jamf. However, it appears that after a macOS device has registered in Entra ID, a day later it's no longer compliant and "MDM" is no longer reporting as "Microsoft Intune" but as "N/A".  In Intune, all macOS devices are also not reporting any compliance status. Any suggestions?   

Hey Community,  I am facing an issue and need to identify the solution for that. I have couple of enrollment customizations which are working fine with PreStage enrollment. But I wan enrollment customization for user initiated enrollment. For example, I want to guide the users how to install the MDM profile once downloaded.  But I can see enrollment customization works only with PreStage Enrollment. Any ways to achieve this for user inititated enrollment? Thanks in advance. 

Hi all,So we are using the MakeMeAnAdmin script for almost 3 years without a hitch.Now we are having the first macoS 12.3.1 devices and the MakeMeAnAdmin script does not work anymore. On older macOS versions everything works fine.Anyone else experiencing this issue?

Has anyone had any luck getting these to work?  or am i just doing something stupid?

Hello,I've been testing how to recover a device in the case an employee logged into their iCloud account with their personal credentials on a supervised machine. I was able to successfully boot into recovery mode, erase the machine then after rebooting again use the MDM recovery key in JAMF to regain control over the machine. However, I tried another scenario where I used the personal iCloud account to remotely lock the machine. I was not able to find a procedure to recover the machine in that case.Is there a process for this, or is there a way to disable remote lock via iCloud in Jamf Now?

Afternoon All  For those in education sector, how are people dealing with deploying the extra content for Logic sound loops etc.Packaging it unsurprisingly a none starter due to size. 68GB is way to big.Are there any good script out there? Looking around have only come accross loopdown   https://github.com/carlashley/loopdown but loooks like thats been no longer developed.Just wondered if anyone had experience of this and has any tips/tricks to share.Thanks

Hi all, I recently took over as the Jamf admin for my institution, and am trying to make sense of some settings that were enabled prior. In regards to this setting in Settings > Global > User-initiated enrollment > Computers:We also have a managed local administrator account created via PreStage. Would this setting enable SSH for both the user-initiated and PreStage managed local administrator accounts, or just the user-initiated only?  I tried to find information about this in other Jamf Nation posts but couldn't seem to find anything - please let me know if I missed any helpful posts. I also tried looking at System Settings > General > Sharing > Remote Login while logged into each of the managed local accounts and did not see either of them listed as allowed users, though I understand this may not be visible by design. Thanks in advance!

We track Macbooks by name in Jamf but students are easily able to rename their Macbooks by going to System Settings - General - About, and then just clicking and typing over the name that we set. When I look in restrictions, there's an option to restrict the entire General section but we don't want to do that. I just want to restrict the About section in General to prevent them from renaming the Mac.  

our users have to authenticate about 3 times during enrollment. 1st to authenticate / start enrollment 2nd time to create local account 3rd time to authenticate to Zscaler We use Entra as our iDP and everything is setup fine in JAMF Connect as existing users are able to authenticate to Azure without issue.  Is there a way to have the Mac store the SSO credentials so it can be passed to other apps during enrollment?  We are using Device Compliance...finally got rid of Conditional access..TIA  

I am able to create Print Queues (printer with default settings) and make those available in Self Service for staff to install. So for those people who want Color 1-Sided EcoStaple, they can select that "Printer" in Self Service and they are set. BUT, I would also like to create a bunch of Presets so staff can change the default per job. I can create all the Presets, just not sure how to make that available in Self Service for staff to install. Any direction would be appreciated.

Hello Jamf Community, I’m Darshan Hiranandani, and I’m currently in the process of deploying iPads for classroom use. I’m looking for advice on how to best manage these devices using Jamf Pro to ensure a seamless rollout for both teachers and students. I have a few questions: Are there any key settings or configurations you recommend enabling or disabling specifically for an educational setting? What’s the most efficient way to manage app distribution to the iPads? Should I be using the VPP (Volume Purchase Program) for apps, and what’s the best strategy for updating and maintaining these apps after installation? Regarding security, what are the best settings to implement on the iPads to ensure they’re secure, but still functional for students who may need certain features or apps? I’d appreciate any insights or recommendations from those who have experience with iPad deployments in education. Looking forward to your suggestions! Thanks! Regards Darshan Hiranandani

We are trying to change the MacOS Date & Time setting "24-hour time" on 15.2 via a script. There is nothing recent / working anywhere on the web. Is it impossible?

I have been trying to get Barracuda Device Manager installed from JAMF on our companies macbooks.  In order to install it manually you have run a script that Barracuda provides. I have no issues doing the manual install but I want to automate it now. I have tried just uploading the pkg I downloaded from Barracuda but that doesn't work. I tried to run the script manually before I installed from JAMF and it doesn't work. I uploaded the script and installed from JAMF that doesn't work. I have tried adding the script to the pkg when creating the software policy that doesn't work. I also used JAMF composer to create the pkg and tried all of the steps I mentioned before. I did check the logs I found this: Installing at base path / installer: The install failed. The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. So right now I am thinking of a couple of things that maybe happening it may be something on my end w

I'm trying to create a Policy to update mac like SUPER can since our organization won't allow it's use.  Issue i'm having is when running command I keep getting error messages saying" No such update No updates are available.  "Here is Syntax I have hopefully someone can point out my error.sudo -S softwareupdate --install 'macOS Sequoia 15.2-24C101' --restart --force --no-scan --agree-to-license --stdinpass "$4" --user "$5"   I've tired "macOS Sequoia 15.2-24C101", "macOS Sequoia 15.2", "15.2"Really appreciate everyone time for reviewing this posting. 

We are deploying beyond trust jump clients on all of our macs and following the instructions by setting up a configuration profile to enable all screen sharing, disk sharing other settings on the backend through jamf without users being notifiied however still some of the users are presented with this which is annoying for the user as well as IT team . what could have been missing in the configuration profile . any help would be greatly appreciated  

We seem to have Macs already enrolled being added again into Jamf somehow, but since the entry is already there it overwrites the original hostname and adds a () at the end. These Macs are not being enrolled a second time, this appears to be random duplicate entries. A fellow jamf/mac admin I work with had this happen to his mac today and he had done nothing out of the ordinary to it, so we searched and found several entries shown below. I did a search for (1) - (10) and found multiple for each. XXXXXXXXXXC32P (10) XXXXXXXXXXXJT4 (2) XXXXXXXX647 (2) XXXXXXXXYWP (2) XXXXXXXXXX9VH (2) XXXXXXXXXNL9 (2) XXXXXXXXGH5 (2) XXXXXXXW9QG (2)

I currently have the script to try and uninstall python3 in Homebrew:   sudo brew uninstall python3   and keep getting the error "sudo: brew: command not found". I've also tried the command /opt/homebrew/bin/brew uninstall python3 and run into the error "Running Homebrew as root is extremely dangerous and no longer supported.As Homebrew does not drop privileges on installation you would be giving all build scripts full access to your system." I'm certain that Homebrew and python3 (via Homebrew) is installed on the device I'm pushing this script to. Is there another way I should be running uninstall commands for Homebrew? 

Hello,I am getting this message when I attempt to uninstall or install Netskope from Jamf, which prompts me to elevate.I have given both the Netskope and the Remove Netskope Client full disk access.I am using the uninstall script for Jamf, provided by Netskope on their download page.I don't know what more I can do to prevent the pop-up. Help?