HelloFirst of all, sorry if this is already solved in some other thread. I have not found it.It turns out that in my son's school they force me to install on his computer the JAMF application to know what he does during school hours. But it so happens that I don't want them to be able to know what my son (or whoever may use the computer) does outside of school hours. I assume that the hours when the application works can be configured in the application. But since they are the ones who install it, and I don't have administrator permissions on it, I can't know if they set it up correctly or not.What options do you recommend me so that this does not happen? I had thought of creating a virtual machine and have them install the application on that machine. Another option I had considered was to install a second operating system on an external hard drive, and outside school hours boot the computer from it. But maybe I am making my life too complicated and there is a simpler option, such as

I've got multiple developers who are having an issue where when connected to Cisco VPN User Tunnel, they are not able to connect to a USB connected iPhone in Xcode.  When not connected to Cisco VPN User Tunnel, the developers are able to access the USB connected phone without issue.

We have set up Single Sign-on via Azure, and it works like a charm.However, a couple of weeks ago, an alert popped up that the "Signing Certificate issued by SSO Identity Provider is expiring in .. days".I followed the instructions to "Visit your SSO Identity Provider to update the certificate", and the newly activated certificate is valid until June 2026.   But, the alert does not go away.   In the SSO settings, we originally linked to a URL for the Identity Provider Metadata Source; and, this URL did not change in Azure when the new certificate was activated.  I tried to replace the URL with the updated metadata file, but still no change in the alert. I suspect that the best practice for SSO certificate management involves updating it more than 30 days ahead of the expiration (30 days, being when the alerts started); and, since it progressed to the point of alerting, it can't be undone?   Having reached this point, however, I wonder what I can

Hey Jamf Admins! We're getting back into the swing of things at Rocketman Tech and part of that swing is LaunchPad - The Jamf Admin Meetup! The Rocketman Tech team will be presenting a JNUC 2024 Recap where we will discuss macOS Sequoia, CIS Compliance, Blueprints, and Platform SSO with Jamf Pro.Date: October 11th, 2024Time: Noon MDT (GMT-6)Register here: https://rkmn.tech/j-launchpad  Additionally, we're super curious about everyone's favorite sessions from JNUC last week. If you weren't able to attend this is an excellent opportunity to get your hands on a curated list of the best of the best from JNUC. Survey: https://rkmn.tech/launchpad-survey As always, super stoked to see y'all there!- Caleb  

Hello,Using JamfNow, I am able to enrol a Mac purchased via Apple business. (i.e. device was automatically inserted into ABM on purchase of device by Apple).I am able to use created blueprint within JamfNow to push the setup to the Mac.I have 1 issue, the status screen for the device says that Activation lock is not activated, when I look on the Mac looking at System Information I can see that activation lock is not activated.   I have tried the various combinations of activating Find My on the Mac, deactivating, wiping the Mac, reinstalling. I have gone as far as wiping the Mac by erasing disk and reinstalling OS around 10 times trying the various combinations without luck.I have even have gone as far as removing the Mac from JamfNow and ABM and trying to get activation lock to activate outside of the ABM without success.My understanding is that while a user cannot remove the management profiles, they could wipe the Mac and reinstall using their own Apple ID or if stolen the

Hey Everyone! We are looking to send out documentation to our fleet on how to enable and use TouchID on their macOS system should they want to. That being said, I am having a hard time determining which macOS systems in our fleet even support it. I am not looking for if it is enabled, disabled, or if fingerprints have been registered just trying to see if the touch sensor technology is even there on some systems in our fleet. Can this be accomplished with an Extension Attribute? If so, can anyone point me in the right direction? I tried like every one of them suggested in this thread but not working on 14.5 Sonoma as an EA or linked to a Smart Group: https://community.jamf.com/t5/jamf-pro/touchid-extension-attribute/m-p/170024 Looking to avoid painstakingly going through each model and looking it up, hah. Thank You!

Is there any application that can be used for the iPad and Macbooks to record the screen as it goes through ADE? I want to be able to use this for training purposes for our staff and IT department to make how-to. I have a bezel but it doesn't allow the ability to record the enrollment screen when enrolling a new device through our prestage. 

Hi All,   Has anyone got the script enable the migrating local account with cloud identify (Azure), Pleas see link for more information:  https://learn.jamf.com/en-US/bundle/jamf-connect-documentation-current/page/Existing_Local_Account_Migrations.html Kind Regards

 Hi Jamf Nation, Is there a remote lock script that someone can recommend for a Mac in Jamf Pro that not managed? (Can only be deploy by Jamf Pro)Also is there a script to turn Mac's from unmanaged to Managed in Jamf Pro? Thanks in Advance Nation!

Hey. Im trying to upgrade GoodNotes for Institutions into GoodNotes for Business. There is only an instruction how to install a license key for iPad/iPhone (https://support.goodnotes.com/hc/en-us/articles/7568710302607-Installing-Goodnotes-for-Business-Enterprise-via-Jamf-Pro?source=search&auth_token=eyJhbGciOiJIUzI1NiJ9.eyJhY2NvdW50X2lkIjoyNTM0NzUsInVzZXJfaWQiOjc3MDkxMDA4MjcwMjMsInRpY2tldF9pZCI6MjMzMjk5LCJjaGFubmVsX2lkIjo2MywidHlwZSI6IlNFQVJDSCIsImV4cCI6MTY5NTIyMjU1OX0.MN6d_0tdipaCu0_cJb_fbyPYt1kHRPpY9l69iLvegXo). Does someone know how I can install a license on MacBook via JamfPro? 

HiWe are facing an issue where ex-employees have signed in with personal accounts on icloud on corporate devices. Its been a pain while re-purposing the device where find my mac cannot be removed . I know we can restrict signing in to personal accounds via configuration policy but management dont want to take that route at this point of time . 1. is there a way other than contacting apple support to remove find my mac from the computer while wiping it ?2. if we enable activation lock , will that help to erase or disable find my mac for users  Any help would be appreciated, Thanks,

We have one VPP account hooked into our jamf pro cloud install. We did originally have an additional site set up which would create an global entry and an additional entry for the second site, but that was an inherited mistake which was since fixed. A couple of weeks ago I went through and started removing old apps or apps with no scope. Once there were fewer entries, I noticed that every time I added a new app to the Mobile Device Apps list, it would create an extra duplicate entry with the default options. We normally only do auto-install, but there's always a duplicate entry for the same app set to Make Available in Self Service with no scope. Why is this happening and how can I fix it?

Hi, as was suggested to me, I'm trying to use a hybrid solution to take advantage of App Installers with regards to the management of updates, and the installomator policies for initial provisioning, as Mac Apps have an important delay for installations when executed in Self Service.However, I have a simple but annoying issue in the Store, as in the "All" category, I see both installation options, even if I clearly deactivated all the Self Service Categories on Mac Apps Self Service tab. How can I handle this? The "All" category doesn't seem to be removable, so I ask those who make these two options coexist how they handle this annoying redundancy on self service.

When I run the application on the iPad, it will wipe and reconfigure itself fine with all of the applications but does not retain the name or the username/email. How do I get the username/email and the device name to stay the same on enrollment?Ex. Name: iPad 1username: name@yourcompany.comWhen it wipes, the information above will be removed from Jamf Pro. How can I make it stay? 

Hello fellow Jamf Admins,I have a request in from our InfoSec team to disable the data collection features within Firefox. I have tried pushed config profiles with custom settings to turn them off. Here's the output:<key>DataCollection</key><dict><key>Experimentation</key><false/><key>HealthReport</key><false/><key>Submission</key><false/><key>Telemetry</key><false/></dict> Firefox is not changing the settings though. It seems to not care about the plist at all. Has anyone run into an issue like this and if so, how did you get Firefox to behave? Thanks in advance!

Is it just me or is this forced update feature not working for you too? NothIs it just my system or is this not working for you too? Updates do not get forced and we are all on Sonoma.  

We have had the Darktrace cSensor running on our macs for months. I am currently tasked with creating a report that pulls in all machines with DT sensor and its running. I found a script that I could use with extension attributes to report that the sensor is installed and running, but it does not pull any data once it's set up as the exention attribute. I can run this script in a local bash environment on my mac and it seems to report that sensor is running on my mac. #!/bin/bash# check for processPROCESS=$( pgrep Darktrace\\ cSensor )#see if process is runningif [[ -z "$PROCESS" ]]; thenRESULT="Not Running"elseRESULT="Running"fi#report resultsecho "<result>${RESULT}</result>"

Is anyone having trouble with the Jamf Server logs not actually logging?   I have a support ticket open (CS0951135) for this because I think the log4j2.xml file is not setup correct, it was broken before in 10.45, but stuff has changed in that configuration file and it is even more broken in 10.46. I am in a windows server environment, and installed using the jamf windows installer. I am installing it on the D drive on my Jamf server and not on my C drive, but I am using the installer to do all of this, so not doing anything special.  Is there anyone else out there with windows using not the c drive for Jamf with this issue?

Hello Jamf Community, We are currently in the process of setting up an on-premises Jamf server but have encountered an error. The computer begins to enroll with the MDM after entering the user credentials in Remote Management, then retrieves enrollment profile, begins to install enrollment profile, then gives an error. The error: Enrolling with management server failed. Unable to contact the SCEP server at https://our-server-domain.local:8443//CA/SCEP  Has anyone experienced this issue, or know what is causing it and how to fix it? Also, I am not sure why it is inserting two forward slashes after the port and before CA: 8443//CA. Any and all help is greatly appreciated. Thank you.

Is there a way to get a report or list of all failed commands for our mobile devices in Jamf Pro.  Whenever I go to a device for any reason I often find failed commands from several months ago and manually clear those.  But it would be nice to be able to know all the devices with failed commands so I can look at what failed without having to go to each device individually.

Hey folks,Since updating our inventory of MacBooks to MacOS 14 Sonoma, users have noticed weird behaviour with Airdrop that was working correctly on MacOS 13.x. From the jamf-managed MacOS 14 MacBook, users can:Airdrop TO Jamf-managed iPad (iPadOS 17.0.3)Airdrop TO non-managed personal iPhone (iOS 16.7.1) However, airdrop is not working in the other direction. If the other devices are not signed into the same iCloud account, the MacOS device is not even visible as an available device to airdrop to (visible to everyone settings are enabled). If the devices are signed into the same icloud account, the MacOS device will be visible as an Airdrop target, but actually sharing a file will timeout and fail. All of these devices (including jamf-managed MacOS) are able to Airdrop TO a personal non-managed MacOS 13.4 device We have no Configuration Profiles restricting use/access to Airdrop. Airdrop settings are set to 'visible to everyone' on all devices. The issue only

I've tried moving all of the apps that use Policies to install to use Jamf App Catalog instead (if they are present). What I noticed is that the apps take a long time to install when re-provisioning a Macbook. Sometimes it would take 3 days before the apps would show up as installed on the Macbook. Is this delay normal? Is there a setting to force it to install immediately after enrolment just like it did with Policies?

These unwanted logoffs happen in most cases when I click on the "Refresh" button after uploading PKGs to our Jamf Cloud server (hosted by Jamf).I always use Safari (with a 2-factor auth.) for Jamf tasks, should I change the browser or is it a browser settings thing?

Hello! We are unable to log into any computer that is bound to Active Directory with the mobile account that is created. We've noticed that:- On Jamf, impacted computers will stop checking in.- Computers will flap on the network, that is, they will intermittently lose connection and gain connection.- When we log into a local administrator account, use sudo jamf policy and other commands and log out, the mobile account will be accessible for only a temporary period of time.- AD connection is valid, and all iMacs are in the proper OU. There are no duplicate entries.- All computers are on Sonoma.- We use Crowdstrike, and no alerts have been triggered. Any ideas as to why this may be happening?

Hello! Trying to polish up our Jamf Connect configuration, but I notice upon reboot the Jamf Connect screen doesn't pop up, I have Filevault disabled, and I made it so the authchanger script runs every time the computer logs in. This is the plist file:<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>CreateJamfConnectPassword</key><true/><key>CreateNewUserHide</key><true/><key>DemobilizeUsers</key><true/><key>DenyLocal</key><true/><key>DenyLocalExcluded</key><array><string>orgadministrator</string></array><key>EnableFDE</key><false/><key>EnableFDERecoveryKey</key><false/><key>LocalFallback</key><false/><key>LoginWindowMessage</key><string>Welcome to xyz! Please log