I'm currently running into an issue where iOS devices in a certain group will allow iCloud login on the setup screen, but it is greyed out in Settings thereafter. It seems likely that a configuration profile is to blame, but I haven't been able to find settings in any that would seem to cause this. Are there any known PIs as of Jam Pro 10.8.0 that would cause this? Has anyone else ran into gotchas with restrictions or similar payloads that could prevent iCloud login?

Hello, we have 2000 iPads being managed and our database size is almost 5GB. Is this too big for the number of the iPads that we manage? Thanks

HAproxy needs a .pem format. JSS uses the Java Keystore format. How to convert from one to the other so I can get SSL Termination working with HAProxy? I tried using the JAMF "CA Backup" in JSS. That downloads a .p12 file and then converting that but HAproxy won't load that.

Hello, we want to block the MacOS Mojave update. I scope to all devices and set the Software restrictions as following: I made 3 additional restrictions which block: MojaveinstallAssistentosinstallersetupd (process found in activity monitor) I can still load it from the AppStore and install if after it. What am I doing wrong? Best regardsMaurice Fiedler

Hello, I managed to connect my JIM with my Jamf Web App successfully. I even manage to make a Test LDAP looking for all users of my company and I see it. However I have a problem at the time of enrolling devices the screen where they add the user and password can not authenticate them. ¿Does anyone have an idea that I'm missing? Thanks

Is there any particular reason that would cause policies triggered at login to be so unreliable? I have a login script which needs to run every time a user logs in. The actual outcome can be one of the following:- The script runs perfectly- There is a delay, but once the script gets started it runs perfectly- Only parts of the script seem to get executed- The script doesn't run at all and has to be manually triggered by the user from Self-Service What causes this? How do I troubleshoot this? It's not due to the age of the Mac because we see this behaviour even on brand new Macs. This seems to have been a problem ever since we started using the Jamf system - we're currently on version 10.6.0 and it still happens. Alternatively if the login trigger can't be fixed, is there an alternative way to run a script at login while still having it centrally stored and managed in the Scripts area of the Jamf system? I don't want it to have to be a file that I have to de

Greetings,We're a new Casper shop, as of April. We have AD feeding data into Casper. As part of preparing for our rollout, one thing I've been asked to do is figure out if there is a way to have a user provide their LDAP UserName during the Self Enroll process so the user can be linked to the inventory asset in the JSS immediately. I haven't found a way to do this thus far. Why? For the Self Enroll process, this would minimize effort after a device is enrolled, in that the device and user could be associated at enrollment time, rather require a tech or admin constantly monitoring for new enrollments, trying to figure out who the user is and then updating the inventory record.The Self Enroll using the QuickAdd package works just fine. But we have these extra steps that require us to edit the inventory data later on so we can associate the asset with an LDAP UserName, which can be time consuming. So, first, am I missing something here? I feel like this should be a

Does anyone have a good way to manage the System Preferences pane for the App Store? I've searched around but haven't found a good solution. I'd like to not have to block the entire App Store. I just don't want the application to automaticallycheck for updates.

Problem with JIM does not work with Web App. It turns out that it does not work since I installed a signed public certificate from my Web App (Jamf Pro) I publish everything from an environment in Amazon Web Services. Have some idea of how I can solve it, the configuration of JIM if it is successfully achieved. The Apache server and the JIM server if they repsonden between them. 2018-11-15 17:06:00,445 WARN jsam-core [[iPOJO] pool-1-thread-1] [WARNING] com.jamfsoftware.jsam.core.jss.JssCheckinManager : No service interface found in the class hierarchy, use the implementation class2018-11-15 17:06:00,711 INFO c.j.j.c.u.PaxLoggingStartupListener [[iPOJO] pool-1-thread-1] Waiting for OSGI Log Service2018-11-15 17:06:01,727 INFO c.j.j.c.u.PaxLoggingStartupListener [[iPOJO] pool-1-thread-1] OSGI Log Service is initialized2018-11-15 17:06:01,727 INFO c.j.j.c.j.JssCommunicationServiceImpl [[iPOJO] pool-1-thread-1] Beginning enrollment process2018-11-15 17:06:02,664 WARN c.j.j.c.k.p.AclFil

Does anyone have any information on how Shared iPad mode works with iCloud. I was under the impression that work and projects are synced to iCloud so that user can sign into a different iPad and carry on with their work. I'm finding the Photos (gallery) is automatically syncing to iCloud and follows the user around. But other apps like Explain Everything and Pic collage don't upload to iCloud. They seem to be local only so this data is cleared when they are removed from the iPad as a recent user. Do I need to enable anything to force apps to automatically sync to iCloud? Or do the users needs to manually save their work to iCloud each time?

Hello, I've been wondering how the curtain screen, where it's written "Casper imaging is finishing install....". Because it has been bugging me a lot lately. I have a few policies that trigger events, and each of them trigger some package installs.Since forever i've always been able to install those packages through the self service without the curtain screen.But since about 2 or 3 month i've been randomly gettinh these whenever i try so install something, and then you just cannot use you computer while it's going on, and you always have to wait for the computer to restart by itself. How does this work ? How can I prevent this ?Cause i need my users to install packages on their own through the self service, and this must not happen.

I have a large group whose Macs are being refreshed and up until this evening, I haven't had any issues with: 1. adding the user to the new computer via the JSS console, 2. Preparing the invitation for VPP for that user, and 3. Add the user to the list of software that group gets... The issue we have is the invitation has not appeared for this user. Their name is in all 3 lists: Users, VPP Invitations, VPP Assignments. Has anyone else had this problem on a Mac? Thanks.

Does anyone know how to fix the issue with packages with a + character in the file name when running a HTTPS distribution point on IIS in Windows Server 2012 R2. Its not an issue when using a SMB distribution point on Windows Server 2012 R2.

I could use the hive mind on this one as I am out of ideas. Around version 68 of Chrome, we started having an issue with Chrome immediately crashing when launched. At first I thought it was how I was packaging up the app. This was after a clean re-image using DEP. It has even effected some existing users after they have upgraded (we pushed it out via JAMF). Things i've tried that did not fix the issue: Used composer to create package with root:wheel 755 permissions. Used Packages to package Chrome. Re-imaged and installed chrome from chrome.com. No JAMF policy. Tried multiple versions of OSX. Tried imaging without DEP. We are currently running JAMF 10.7.1 and I have tried this one OSX 10.12,10.13. All other apps are fine, it's just Chrome! At this point, we cannot offer Chrome to new users and its blowing my mind.

Since the final release of Mojave 18A391, Macs that have a config profile set to defer FileVault until the next logout/restart do not prompt the user to enable FileVault when restarting/logging out of an AD-mobile user. You can log into a local admin user and the normal/expected behavior occurs upon a restart/log out. I've seen this on both 2018 T2 and 2017 (and earlier) Macs. Anyone else? This adds manual steps that a user was able to perform on their own in the past :( I just filed a Bug Report 44798927 for this issue.

I'm working on a silent deployment of an agent that needs to install to and run as a service in the user context. Running the .pkg installer as the user via a bash script produces an error from the installer process when recurring checkin is used as the trigger: PackageKit: XPC error in __43-[_PKInstallClientConnection blockingProxy]_block_invoke (Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.apple.installd.user was invalidated." UserInfo={NSDebugDescription=The connection to service named com.apple.installd.user was invalidated.}) The installation, however, works if run via "sudo jamf policy" in terminal as well as through Self Service. Workarounds such as using a custom plist that at load calls script that runs the installation as well as copying files down via dmg and using a sudo -u $user launchtl load command via bash script do work - but only for users with administrative privileges. As it stands, I haven't found a way to successfully install

Hey Team!In the latest Jamf, opening Self Service changes its stock icon to whatever Branding graphic you define. What I'm looking to do is change the stock icon to match our branding image. I've done the following but currently stuck! -Created an icns image of the branding image -Command-I the Self Service.app and replace the Jamf image as well as replace the AppIcon.icns file in Show package contents>Contents>Resources -Took the new Self Service.app, packaged it up, deployed it, and on end user's computer nothing changed. Show package contents shows the new icns file so it does go through but I feel like its a cache issue at this point? -Clearing /Library/caches/icon caches didn't do the trick nor rebooting. Thoughts? Thanks!

Hi All! We are running into a weird issue. With our 10.13 and 10.14 machines, we are running into the issue where the following items are not shown to be configured during setup: Location Services Choose Your Look Touch ID They are selected to not be skipped (some of the only ones we want the user to configure) but they are not shown at all. Here's a screenshot: We also tested just turning them all on, and it's still skipped, not sure what's going on. Anyone else running into this issue? Cheers,Chris

Hello all, First off, any guidance is much appreciated. I have a security application that is installed upon enrollment. Scoped to that policy is a smart group that looks for devices that have removed that security application or if the application does not exist. What I am finding is that when a user removes the application and it becomes part of that group again, I am having to manually flush the log for that machine in order for the policy to run again. Is there a way to flush the log automatically when a computers enters that smart group? Execution policy is : once per computerSwitching to "on-going" would essentially run the policy every time it checks in. I could create a script added to an "on-going" policy that checks to see if the application exist and runs before the installer. Again, the script will run every single time it checks in. Thoughts?

Is an EA script able to output multiple lines of output? For instance, we want to display two attributes out of a plist file at /Users/loggedInUser/Library/Preferences/com.dms.echo.plist The plist file looks like this... <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>NSNavPanelExpandedSizeForOpenMode</key> <string>{712, 448}</string> <key>NSStatusItem Preferred Position Item-0</key> <real>881</real> <key>echoDays</key> <integer>30</integer> <key>echoing</key> <true/> <key>dmsEchoHasBeenLaunched</key> <true/> <key>supportLogging</key> <true/> </dict> </plist> We really only want the "echoDays" and "echoing" attributes displayed. Can a script format th

Hello does anyone have any information on whitelisting SystemPolicyAllFiles. This was discussed in the JNUC 2018 TCC session, but I don’t believe the presenter went in depth about accomplishing this. Is whitelisting SystemPolicyAllFiles restricted to individual applications, or is it possible to simply bypass all PPPC prompts by whitelisting SystemPolicyAllFiles?

I just setup a new Jamf Pro server running on Ubuntu Server 18.0.4 LTS. I followed the steps outlined in this article. I typed everything exactly as written. These steps worked seven months ago when I deployed another Jamf Pro server, so I'm confused why it's not working now. I can use Connect to Server... to mount the CasperShare, but it also mounts as read-only despite my using an account that should have read/write access. Has anyone else run into this? Does anyone have any ideas that may help?

I'd like to manage the Apple Measure App that came out with IOS 12, however, when I try adding the app to the list of applications, I can't find it on the list. The TV App had similar issues when it was first released but there was a work around for it. Has anyone found a similar work around for the Measure App? Great app, just very distracting for students. Thanks.

I'm on 10.3.1, and I need a command to check a computer's connection to the JSS in a bash script. I've read about the /usr/local/bin/jamf checkJSSConnection command, but is there a way to limit how many times it will check the connection before it times out? I'm writing a script where I want it to do one thing if there is a JSS connection and do something else if there isn't. #!/bin/sh checkJSSConnection=$(/usr/local/bin/jamf checkJSSConnection) if [[ $checkJSSConnection != *"The JSS is available"* ]]; then echo "run local script" sh /path/to/local_script.sh else echo "run JSS policy" jamf policy -event customtrigger fi If the JSS is available, it takes only a few seconds to confirm that. If the JSS isn't available it retries for 55-60 seconds, which is longer than I'd like it to take. Any ideas on how to get a quicker response? I talked with Jamf Support and they recommended using jamf recon instead, like this: #!/bin/bash -v checkJSSConnection=$(jamf recon) i

MacOS MOJAVE is supposed to be 5.7GB at this time it download only a 22.5 MB file that try to connect to APPLE recovery servers. does anyone know how to avoid it? i must download a full installer to create our images and update our distribution point.