I have been trying to get Barracuda Device Manager installed from JAMF on our companies macbooks.  In order to install it manually you have run a script that Barracuda provides. I have no issues doing the manual install but I want to automate it now. I have tried just uploading the pkg I downloaded from Barracuda but that doesn't work. I tried to run the script manually before I installed from JAMF and it doesn't work. I uploaded the script and installed from JAMF that doesn't work. I have tried adding the script to the pkg when creating the software policy that doesn't work. I also used JAMF composer to create the pkg and tried all of the steps I mentioned before. I did check the logs I found this: Installing at base path / installer: The install failed. The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. So right now I am thinking of a couple of things that maybe happening it may be something on my end w

I'm trying to create a Policy to update mac like SUPER can since our organization won't allow it's use.  Issue i'm having is when running command I keep getting error messages saying" No such update No updates are available.  "Here is Syntax I have hopefully someone can point out my error.sudo -S softwareupdate --install 'macOS Sequoia 15.2-24C101' --restart --force --no-scan --agree-to-license --stdinpass "$4" --user "$5"   I've tired "macOS Sequoia 15.2-24C101", "macOS Sequoia 15.2", "15.2"Really appreciate everyone time for reviewing this posting. 

We are deploying beyond trust jump clients on all of our macs and following the instructions by setting up a configuration profile to enable all screen sharing, disk sharing other settings on the backend through jamf without users being notifiied however still some of the users are presented with this which is annoying for the user as well as IT team . what could have been missing in the configuration profile . any help would be greatly appreciated  

We seem to have Macs already enrolled being added again into Jamf somehow, but since the entry is already there it overwrites the original hostname and adds a () at the end. These Macs are not being enrolled a second time, this appears to be random duplicate entries. A fellow jamf/mac admin I work with had this happen to his mac today and he had done nothing out of the ordinary to it, so we searched and found several entries shown below. I did a search for (1) - (10) and found multiple for each. XXXXXXXXXXC32P (10) XXXXXXXXXXXJT4 (2) XXXXXXXX647 (2) XXXXXXXXYWP (2) XXXXXXXXXX9VH (2) XXXXXXXXXNL9 (2) XXXXXXXXGH5 (2) XXXXXXXW9QG (2)

I currently have the script to try and uninstall python3 in Homebrew:   sudo brew uninstall python3   and keep getting the error "sudo: brew: command not found". I've also tried the command /opt/homebrew/bin/brew uninstall python3 and run into the error "Running Homebrew as root is extremely dangerous and no longer supported.As Homebrew does not drop privileges on installation you would be giving all build scripts full access to your system." I'm certain that Homebrew and python3 (via Homebrew) is installed on the device I'm pushing this script to. Is there another way I should be running uninstall commands for Homebrew? 

Hello,I am getting this message when I attempt to uninstall or install Netskope from Jamf, which prompts me to elevate.I have given both the Netskope and the Remove Netskope Client full disk access.I am using the uninstall script for Jamf, provided by Netskope on their download page.I don't know what more I can do to prevent the pop-up. Help? 

Hello community, Using Jamf Teacher I noticed a problem: Since all the management certificates have validation dates (for example until 2028), students can simply change the date on their iPads to 2029 and Jamf Teacher is unuseable, restrictions will not reach this iPad. (The student is also not able to use the internet oder other things, due to the wrong timestamp, but that‘s not the point) Reading a lot of threats here I noticed that I‘m not the only one with this problem, but I couldn‘t find my solution. Is there any way to set the time and date automatically on iPads? The best solution would be via a configuration profile, but I couldn‘t find any. I found some scripts for Macs, but do they also work for iPads (and how do I activate them for our iPads?   Thank you for your help 

Hiwe have recently pushed beyond trust jump clients to all our laptops via jamf . i can see the logs saying its successfully installed confirming from rep console establishing a remote session. however i am unable to see the app in the list of applications in jamf for any of the machines. , any idea why . Thanks

I'm testing scheduling OS updates in Jamf Pro 11.11.2. I have Software Updates setup to Download and Schedule to Install for the latest version based on device eligibility. I ensured that the bootstrap token is escrowed. On the target device I see a message that reads:Managed UpdatedAn update to macOS 15.2 is past due. You can install it now or it will be installed automatically 12/12/2024, 9:56am The issue is that the time keeps changing and it never get its installed. Any suggestions? 

I've created an EA with the script  #!/bin/bash echo "$(mdls "/System/Applications/Utilities/Terminal.app" -name kMDItemLastUsedDate | awk '{print $3}')" and running it on my device, it returns  2024-12-12 as expected. I then created a Smart Group with Criteria <Name of EA>, Operator 'after (yyyy-mm-dd)' and Value '2024-01-1'. Jamf returns a list of devices but I do not believe this list is accurate, as it does not include my device when I've been using Terminal all morning. Any suggestions on what could be happening or what I can do to improve its accuracy?  

Hello We have started to enroll our macbooks for our employees without adminrights. Yes we have the privilege access configured in jamf connect, but don't want use it for everyone :) So i started to configure what is necessary for our employees that they can work without adminrights. So far so good. Now i am actually helpless with this one problem about creating a symlink via jamf pro policy after installation of Visual Studio code. What i need is: A symlink in the directory /usr/local/bin/code which points to /Applications/Visual Studio Code.app/Contents/Resources/app/bin/code   So i am able to create it, but it isnt working. Checking it on a testmachine the symlink shows me in the "get info" as "Original" the path /usr/local/bin/code  instead of /Applications/Visual Studio Code.app/Contents/Resources/app/bin/code   So its not the first symlink i create but its the first in this location /usr/local/bin/code so maybe i am doing something wrong. I am using this sho

Hello Jamf family, Is there a script that can uninstall apps like in Intune? Thanks, JM

I have deployed BeyondTrust's remote support client to my test machine. However, if I set the configuration profile to Allow Standard Users to Allow Access for ScreenCapture, the app doesn't seem to realize it's been authorized. It continues to prompt to allow. Even if I check it with an administrator account. As you can see in the screenshots, even the Accessibility and Full Disk Access are also showing denied, even though they are set to allow in the configuration profile.The fun part is (on a fresh image) if I set the ScreenCapture to Deny, then use an administrator account to allow while on the computer, it actually does allow it.

Has anybody been able to configure the Apple Intelligence Report section in Privacy and Settings?

Hi eveyrone, Rookie here. how can I upload a larger than 5GB pkg to jamfCloud?  With Jumf Sync the max is 5GB. I checked the log and I get below. Failed to copy Adobe_AE to JCDS (Jamf Sync): dataRequestFailed(statusCode: 400, message: Optional("EntityTooLarge: Your proposed upload exceeds the maximum allowed size - max allowed size = 5368709120")). Adobe After Effects on its own package is 6.38 GB.    

I am trying to renew the certificate on my IIS distribution point on a Windows server.  The documentation has changed recently and the new documentation seems to have left out the part of making that request in the Certificates snapin in mmc. I can get part way through from memory but I know there were some other settings that I cannot recall.  This is the documentation updated in October of 2024... https://learn.jamf.com/en-US/bundle/technical-articles/page/Using_IIS_to_Enable_HTTPS_Downloads_on_a_Windows_Server_2016_or_2019_File_Share_Distribution_Point.html Does anyone have a printed out copy of this page prior to the update?  I recall that it was step 4 where they talked about making the request that I need to do.   Thank you in advance for any help.

May be a silly post but I thought I post here for some ideas if any. So i been tasked to create a green colored folder on users desktop that contains "X file". I can get this working on my local system but when I package it and deploy it to another system when the folder installs on the new system the color reverts back to default. Basically it seems like the custom folder color settings don't carry over. I've tried installing the folder in a shared location then creating a colored alias still no go. I've also tried creating a custom green icon folder and trying to redirect that icon to the shared folder location but even that is proving to be challenging. has anybody ever had to tackle a silly task like this? I've been at it for a few days already maybe I'm overthinking?

Hi everyone, Does anyone have experience switching Apple accounts when renewing a VPP Server token? What is the impact on applications? Can we have more than one Apple account for the VPP Server token? Thank you.

Hi all,    can someone confirm this for me, (those who use sandbox) Does this have it's own JCDS??   so, if i connect via the sanbox, it's not conecting to our live cloud jcds??   TIA

In Apple's macOS Sequoia 15.0 release notes the following is mentioned: "Executables, scripts, and launchd configuration files can be installed using MDM and stored in a secure and tamper-resistant location." How does this work in Jamf? I have searched but could not come up with the answer. Has anyone been using this and if so how do I configure a tamper resistant location?

Greetings admins! I wrote a custom migration script that reads several aspects of the users home folder and backs them up to a user specified destination.  That part seems to be working OK, but when I go to write this data back to the same locations on the user's new system, it needs full disk access to work.  My idea was to have the script run directly from Self service (Policy > script execute), but in order to do so, Self service needs full disk access to be able to write back to the users Library folder.  What PPPC do I need to create to allow Self service to have full disk access?

Just thought I'd loop you guys on a nice tool. If you're here, you're running an MDM with probably a high amount of Apple devices. Your enterprise is then too probably running macOS caching servers to save on bandwidth etc. Currently there's a couple widely used tools for monitoring your caching servers like ErikNG's Cacher (https://github.com/erikng/Cacher) and krypted's precache (https://github.com/krypted/precache). Just wanted to let you guys know about one more that I found particularly helpful. Netdata (https://github.com/firehol/netdata) by ktsaou at Firehol is a free/great tool for monitoring all types of Linux/Unix type devices. It also can monitor some more basic functions of macOS machines. Recently he assisted me with writing a plugin to also help with monitoring the caching function on our caching servers. (https://github.com/firehol/netdata/issues/2766) This in conjunction with prometheus and grafana, has allowed me to monitor historicals, create alerts when something

I've setup an API role to Read Smart Computer Groups + Read Static Computer Groups but when I try the script (at bottom) following I get this result:-  Access token obtained successfully. {   "httpStatus" : 401,   "errors" : [ ] } I'm fairly new to the API side of things so might be the script is inaccurate.  My Questions are:- 1) If I go to JAMF_PRO_URL/Api what do I put for username and password (screenshot below)? Is this an account that has access to the Jamf Pro instance or should this be client id / secret or something else?  2) What privileges do you need as a user in Jamf Pro to be able to run these API calls?  3) Is there something wrong with the script below? If I do echo "$access_token" should it show details or would it be normal to get a response like "Could not extract value..."    For the script below I changed JAMF_PRO_URL to URL for Jamf Pro instance and CLIENT_ID + SECRET to details of the API Client.      #

What is Sovereign Cloud in the Setting > Global > Device Compliant used for?Is it just a text box that we enter anything or leave blank or the connection setting to ITunes  

Guys, In my environment I got 85 devices enrolled in Jamf using User initiated Enrollment because my organization did not have ABM and that's why user initiated enrollment did for those 85 devices. Now my organization going to bring rest 30 - 40 devices unmanaged devices to jamf through ABM by enrolling through ADE. In case If I bring those 85 devices to ABM and assign the ADE profile to those 85 devices, shall I run the reenroll command to enroll through ADE or I've to do the factory reset and initiate the ADE. Kindly advice