Feel like this is a dumb question - but my search hasn't yielded anything obvious. I work in government Mac environment. I can ARD/JAMF Remote/Screen Share into any Mac hardwired onto my network. When users are on their laptop, I can't figure out a good way to do so. All my users use VPN when offsite. Their computers are enrolled in my JSS, but is there a way to reliably remote into their machines if I need to? Inter-office I would just find them in ARD or type their IP into screen sharing... how can I do it for laptops on offsite wifi (but behind our VPN)

Hi!We have a couple of In-House apps deployed to iPads as "Install Automatically / Prompt User to install". These applications seems to be reinstalling now and then.. In the attached image I have been sending blank pushes to provoke it. Does anyone else experience this behavior?

I've got a situation where I need to temporarily uninstall the Stateful Firewall from McAfee Endpoint Security on a Mac for testing. I know the /usr/local/McAfee/uninstall EPM command will uninstall the entire suite, but I need to only remove the StatefulFirewall. I can't seem to find a guide anywhere that tells me what the trigger is for each module /usr/local/McAfee/uninstall xxx I saw a list many moons ago but I can't find it now to save my life. Can anyone point me in the right direction?

Since the changes to the binary and locations of I can no longer run any commands via apple remote desktop Any ideas?

Using the built in VNC server, we have users who connect to macs and sometimes forget to disconnect. I would love to have a way to manually kick off any connected VNC connection. I know you can do this with RealVNC, but I cant find a way to do it with the built in VNC server. Can this be done?

Hi there; I've had a problem recently creep on a couple users' Macs that I can't seem to troubleshoot. When the user tries to open PowerPoint, the application bounces in the docks and then does nothing. It is limited to the user profile, as any other user on the same machine does not have the issue. No error message is displayed. I've tried reinstalling the app and moving MicrosoftRegistrationDB.reg out of the Group Containers folder, along with the various other .plist files. I've also tried running the updater to install the latest updates. Both machines I've encountered this with are running macOS 10.12.3 and are running Office 15.31 (updated to 15.32 as part of troubleshooting process). I've been renaming the user profile and having the users create a new one and then moving their files back over - which is not an ideal solution but works for now. Any ideas?

In the Apple Menu "Shutdown" and "Restart" have dissapeared. We have not changed anything, if i delete /Library/Managed Preferences then it comes back, it would appear the settings do disable the shutdown in apple menu is in com.apple.loginwindo.plist, which we have a configuration profile which includes a loginwindow payload, so i assume there is something JSS is doing with the plist. Anyone have any ideas?

Has anyone Tried to do this ? I Want to create an user (Lets Call it VAULT)The VAULT account needs to be enabled for FV2 and therefore have a secure token so it can unlock the machine, but I don't want it to be usable to actually get into the MAC, mainly to safeguard against it being used to unlock FV2 and then Auto Login to the machine. (Autologin needs to stay enabled for the machine) It would also be handy to hide it from the user log in screen. ANyone have any clues ?

Its been a while since we are noticing that JAMF web user interface is clunky specially on 'Scope' tab.

I'm currently running into an issue where iOS devices in a certain group will allow iCloud login on the setup screen, but it is greyed out in Settings thereafter. It seems likely that a configuration profile is to blame, but I haven't been able to find settings in any that would seem to cause this. Are there any known PIs as of Jam Pro 10.8.0 that would cause this? Has anyone else ran into gotchas with restrictions or similar payloads that could prevent iCloud login?

Hello, we have 2000 iPads being managed and our database size is almost 5GB. Is this too big for the number of the iPads that we manage? Thanks

HAproxy needs a .pem format. JSS uses the Java Keystore format. How to convert from one to the other so I can get SSL Termination working with HAProxy? I tried using the JAMF "CA Backup" in JSS. That downloads a .p12 file and then converting that but HAproxy won't load that.

Hello, we want to block the MacOS Mojave update. I scope to all devices and set the Software restrictions as following: I made 3 additional restrictions which block: MojaveinstallAssistentosinstallersetupd (process found in activity monitor) I can still load it from the AppStore and install if after it. What am I doing wrong? Best regardsMaurice Fiedler

Hello, I managed to connect my JIM with my Jamf Web App successfully. I even manage to make a Test LDAP looking for all users of my company and I see it. However I have a problem at the time of enrolling devices the screen where they add the user and password can not authenticate them. ¿Does anyone have an idea that I'm missing? Thanks

Is there any particular reason that would cause policies triggered at login to be so unreliable? I have a login script which needs to run every time a user logs in. The actual outcome can be one of the following:- The script runs perfectly- There is a delay, but once the script gets started it runs perfectly- Only parts of the script seem to get executed- The script doesn't run at all and has to be manually triggered by the user from Self-Service What causes this? How do I troubleshoot this? It's not due to the age of the Mac because we see this behaviour even on brand new Macs. This seems to have been a problem ever since we started using the Jamf system - we're currently on version 10.6.0 and it still happens. Alternatively if the login trigger can't be fixed, is there an alternative way to run a script at login while still having it centrally stored and managed in the Scripts area of the Jamf system? I don't want it to have to be a file that I have to de

Greetings,We're a new Casper shop, as of April. We have AD feeding data into Casper. As part of preparing for our rollout, one thing I've been asked to do is figure out if there is a way to have a user provide their LDAP UserName during the Self Enroll process so the user can be linked to the inventory asset in the JSS immediately. I haven't found a way to do this thus far. Why? For the Self Enroll process, this would minimize effort after a device is enrolled, in that the device and user could be associated at enrollment time, rather require a tech or admin constantly monitoring for new enrollments, trying to figure out who the user is and then updating the inventory record.The Self Enroll using the QuickAdd package works just fine. But we have these extra steps that require us to edit the inventory data later on so we can associate the asset with an LDAP UserName, which can be time consuming. So, first, am I missing something here? I feel like this should be a

Does anyone have a good way to manage the System Preferences pane for the App Store? I've searched around but haven't found a good solution. I'd like to not have to block the entire App Store. I just don't want the application to automaticallycheck for updates.

Problem with JIM does not work with Web App. It turns out that it does not work since I installed a signed public certificate from my Web App (Jamf Pro) I publish everything from an environment in Amazon Web Services. Have some idea of how I can solve it, the configuration of JIM if it is successfully achieved. The Apache server and the JIM server if they repsonden between them. 2018-11-15 17:06:00,445 WARN jsam-core [[iPOJO] pool-1-thread-1] [WARNING] com.jamfsoftware.jsam.core.jss.JssCheckinManager : No service interface found in the class hierarchy, use the implementation class2018-11-15 17:06:00,711 INFO c.j.j.c.u.PaxLoggingStartupListener [[iPOJO] pool-1-thread-1] Waiting for OSGI Log Service2018-11-15 17:06:01,727 INFO c.j.j.c.u.PaxLoggingStartupListener [[iPOJO] pool-1-thread-1] OSGI Log Service is initialized2018-11-15 17:06:01,727 INFO c.j.j.c.j.JssCommunicationServiceImpl [[iPOJO] pool-1-thread-1] Beginning enrollment process2018-11-15 17:06:02,664 WARN c.j.j.c.k.p.AclFil

Does anyone have any information on how Shared iPad mode works with iCloud. I was under the impression that work and projects are synced to iCloud so that user can sign into a different iPad and carry on with their work. I'm finding the Photos (gallery) is automatically syncing to iCloud and follows the user around. But other apps like Explain Everything and Pic collage don't upload to iCloud. They seem to be local only so this data is cleared when they are removed from the iPad as a recent user. Do I need to enable anything to force apps to automatically sync to iCloud? Or do the users needs to manually save their work to iCloud each time?

Hello, I've been wondering how the curtain screen, where it's written "Casper imaging is finishing install....". Because it has been bugging me a lot lately. I have a few policies that trigger events, and each of them trigger some package installs.Since forever i've always been able to install those packages through the self service without the curtain screen.But since about 2 or 3 month i've been randomly gettinh these whenever i try so install something, and then you just cannot use you computer while it's going on, and you always have to wait for the computer to restart by itself. How does this work ? How can I prevent this ?Cause i need my users to install packages on their own through the self service, and this must not happen.

I have a large group whose Macs are being refreshed and up until this evening, I haven't had any issues with: 1. adding the user to the new computer via the JSS console, 2. Preparing the invitation for VPP for that user, and 3. Add the user to the list of software that group gets... The issue we have is the invitation has not appeared for this user. Their name is in all 3 lists: Users, VPP Invitations, VPP Assignments. Has anyone else had this problem on a Mac? Thanks.

Does anyone know how to fix the issue with packages with a + character in the file name when running a HTTPS distribution point on IIS in Windows Server 2012 R2. Its not an issue when using a SMB distribution point on Windows Server 2012 R2.

I could use the hive mind on this one as I am out of ideas. Around version 68 of Chrome, we started having an issue with Chrome immediately crashing when launched. At first I thought it was how I was packaging up the app. This was after a clean re-image using DEP. It has even effected some existing users after they have upgraded (we pushed it out via JAMF). Things i've tried that did not fix the issue: Used composer to create package with root:wheel 755 permissions. Used Packages to package Chrome. Re-imaged and installed chrome from chrome.com. No JAMF policy. Tried multiple versions of OSX. Tried imaging without DEP. We are currently running JAMF 10.7.1 and I have tried this one OSX 10.12,10.13. All other apps are fine, it's just Chrome! At this point, we cannot offer Chrome to new users and its blowing my mind.

Since the final release of Mojave 18A391, Macs that have a config profile set to defer FileVault until the next logout/restart do not prompt the user to enable FileVault when restarting/logging out of an AD-mobile user. You can log into a local admin user and the normal/expected behavior occurs upon a restart/log out. I've seen this on both 2018 T2 and 2017 (and earlier) Macs. Anyone else? This adds manual steps that a user was able to perform on their own in the past :( I just filed a Bug Report 44798927 for this issue.

I'm working on a silent deployment of an agent that needs to install to and run as a service in the user context. Running the .pkg installer as the user via a bash script produces an error from the installer process when recurring checkin is used as the trigger: PackageKit: XPC error in __43-[_PKInstallClientConnection blockingProxy]_block_invoke (Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.apple.installd.user was invalidated." UserInfo={NSDebugDescription=The connection to service named com.apple.installd.user was invalidated.}) The installation, however, works if run via "sudo jamf policy" in terminal as well as through Self Service. Workarounds such as using a custom plist that at load calls script that runs the installation as well as copying files down via dmg and using a sudo -u $user launchtl load command via bash script do work - but only for users with administrative privileges. As it stands, I haven't found a way to successfully install