Has anyone ever had luck using a smart group to change a device state based on time of day?For example, create a smart group that has app restrictions and move devices in and out of that group based on a recurring schedule. 

Hello folks,I have a new M1 MacBook Pro, which I rolled out with DEP. English was selected in the language selection at the beginning of the Mac installation. I changed the language to German and then continued the installation. FileVault is enabled via jamf Connect Login Configuration Profile. Now I have the problem that the language was not changed to German on the login screen and the keyboard layout is still set to ABC. (But the language in macOS is German.) If I switch it to German, it's back to ABC after the next restart. In the past we were able to solve the problem by performing a macOS update. After the update, the language on the login screen was German again and the keyboard layout remained in German.sudo languagesetup -> 13 did not bring anything.Does anyone know the problem and has an idea? Cheers 

Hello Jamf, So around a month ago, a user reported that they were unable to log in after restarting. I had them show me the issue, and after logging into the jamf connect log-in window, the screen just goes black for about 30 seconds, then prompts them back to log-in window again. Turning off the wifi allowed the user to log in, but if he restarted, the issue was still there. This trickled down to a few more users, and I opened a Jamf support ticket. I tried all their troubleshooting and uploaded logs, config files, and system reports, and they saw nothing unusual. They also had me to set  "Enable Filevault" to false in our "Jamf Connect Login" config profile since it was already enabled via its own standalone config profile. I thought that was solved, but then one of our VP's reached out to me, stating that they were unable to log in and were having the same issue.  I checked our okta logs as I had a hunch that the issue was mfa related. I checked mfa usage reports

A few months ago, I was able to use the Jamf API to obtain a computer's room assignment. I need to now get the computer's site. I don't care if I can only obtain the site ID or its actual name. I need this so I can avoid creating a separate installer package for the different regions in my company. I want the install script to first obtain the computer's site assignment and then choose the appropriate customization for each region. I thought this would be similar to getting the room assignment but apparently it's not. Does anyone know the correct way to do this?

In Patch Management Spotify is indicating that version 1.2.43.420 is the latest version even though 2 newer versions have been released since that one.  Can this be fixed to display the correct latest version. 

I am looking for a way to fully disable Airdrop for CIS standard security reasons on our Macs, the typical defaults write com.apple.NetworkBrowser DisableAirDrop -bool YES removes the option from finder but this option still lives in the go menu and the CIS check continues to fail.  Any Ideas or special config profiles people have created?

I am trying to locate a device that was previously assigned to a user so that I can deauthorize an app that was used on it. The guidance from the app provider (Kuta), says I need to log in on the old device to deauthorize it. Any help would be appreciated!

I am installing Maya 2024 and I am running into this popup.  I am able to get the license to verify via the network server when putting in my credentials.  I haven't tried on a non-admin machine.I created a configuration profile with Managed Login Items, and added the Team Identifier/Bundle ID to it and deployed it to my machines and still getting the popup.  I've not seen this popup before.  Anyone have any info/experience on this?Here is the script I am using, with the AutoCad and Mudbox install lines removed:  #!/bin/bash ### Install AutoDesk Combo 2023 (AutoCAD, Maya & MudBox) ### silently @ login window with network licenses (aka multi-user lab/classroom deploy) ### 2022.07.27 by JonW ### Simply update variables/products below the function section as desired ### Read the additional details at the end of the script for more clarity on licensing. ### Ensure: ### 1) installer app(s) re-packed from .dmg by Composer & deployed to /private/tmp (

Our school division uses Active Directory and managed Apple IDs.  I currently allow personal Apple IDs to be set up on a computer.  Some users have been granted administrative access on the computer they use because of the remote work they do.  I have observed that when personal Apple IDs are used with an account when a software update is available it will prompt for authentication but the username section is greyed out with just their username, but even when using their current password it says try again.  This also happens with some other things like require lock screen password. The lock screen issue just came to my attention today but the Software Update I've been getting around that by either remoting into the computer, logging into our local account and authenticating there or pushing out a Software Update policy in Jamf Pro to that computer. Does anyone know why this happens with personal Apple ID and how I can get around this?  This seems to happen at l

I'm seeing this issue with certain installers on Sonoma 14.6.1. When deploying via recurring check-in trigger, the policy just fails. When triggering via Self Service, I see the pop-up (attached) and after accepting and authenticating, the install works as expected. I've dug through some older threads to see if there was a problem with the Jamf and Terminal PPPC that we use but I can't find the issue! I've attached screenshots of the Config Profiles I've tried, also tried the one linked below but no joy! Please could someone help me find what I am missing!https://github.com/jamf/JamfPrivacyPreferencePolicyControlProfiles 

I have a Smart Group monitoring computers where the bootstrap token isn't escrowed. In the past week, I noticed a couple freshly wiped + re-enrolled computers (all on Sonoma 14.2 and 14.2.1), where the first user logging into the computer isn't getting the Secure Token or Volume Ownership. Also, the bootstrap token doesn't get escrowed. Background: in our 1:1 deployments, we have a PreStage-created, hidden local admin account. In this 1:1 PreStage, we have enrollment customization turned on, pointing to our SSO IdP. User gets a device, logs in through SSO, which populates their info into the local user creation screen. They enter their password again, and get logged into the device. Enrollment finishes, and for some reason Jamf is showing the PreStage admin account as the only Secure Token holder and Volume Owner. And as mentioned, bootstrap Token doesn't get escrowed. I can fix manually using sudo profiles install -type bootstraptoken, but trying to figure out why this is happeni

Hello All, I was wondering if anyone here has been able to successfully implement OneDrive Known folder move?We are trying to move user's Desktop and Documents folders to OneDrive, without any user interaction, we have tried to apply these settings using the Applications and Custom settings payload, we can see the CP in System preferences Profiles but nothing changes in Onedrive. Other settings like hide dock icon and open at login are successfully applied with the same CP.<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>KFMBlockOptOut</key> <true/> <key>KFMOptInWithWizard</key> <string>xxxxxxxxx</string> <key>KFMSilentOptIn</key> <string>xxxxxxxxx</string> <key>HideDockIcon</key> <true/> <key>OpenAtLogin&l

Anyone else getting 503 errors from Jamf Pro

My Automated Enrollment on the Jamf Now side is working fine however I'd like to add the Jamf Security cloud (RADAR/Jamf Protect product) as an integration in the UEM section. However there's no option for Jamf Now but there are options for Pro,School etc which seems strange. Then when creating the activation profile manually theres an option for Jamf Now but when selected nothing happens. I've enrolled the devices manually and they're showing as unmanaged as I've used the QR code from the admin pages as the QR codes sent to end users dont actually work. Any help is appreciated.  

We use Okta/FIDO2 to allow users to login to Self Service and see certain Apps only they are assigned.We're seeing an issue where the private browser window has automatically filled in the username with a different one (some users have 2 Okta accounts, one for elevated privileges elsewhere in our business).Anyone else seeing this? Is it Jamf, or Okta? It's been hard to narrow down so far.

Is it still the case that there is no way of allowing Location Services for a specific app, for non admin users? I don’t see a PPPC option for it, and it’s been stated that this is impossible in the past. Zoom soft-phone client wants location services enabled for 911 call routing. Users don’t have admin rights.I've seen someone say the below works for Big Sur, but even then I believe that just enables the general Apple location services, and not specifically for an app in particular.#!/bin/sh sudo /usr/bin/defaults write /var/db/locationd/Library/Preferences/ByHost/com.apple.locationd LocationServicesEnabled -int 1 sudo /usr/bin/defaults write /Library/Preferences/com.apple.timezone.auto Active -bool trueI need Location Services checked for Zoom specifically.

A profile called "whitelist during school hours" is setup with a time filter. It has a whitelist, so that private games and other unwanted apps will disappear from the students' home screen. Unfortunately, the profile works only for 60-80 % of the iPads automatically. We have to push the button "re-try" in the administration console, or we have to ask the students to open the app Jamf Student, so that their iPads asks the Apple Push Server for any updates (including updates on profiles).Have you experienced non-reliability with time filtered profiles?Any suggestions how to fix that are welcome. (We tried IP address based profiles that work a bit better, but they aren't reliably either.)

Hi allApologies if this has been answered already but we are trying to push an 802.1x LAN profile down to our macOS devices.We have managed to push the wireless equivalent down with a certificate etc however when we try and create the LAN equivalent the device doesn't pick the certificate defined in the profile. Has anybody come across this issue before? We've seen a similar issue in the past with windows devices where you have to start the wired auto config service but wasn't sure if something similar was required on macs?thanks  

Can anyone help with JSON script line to change the name of Managebookmarks?  "ManagedBookmarks": { "type": "array", "title": "Bookmarks",

 一年以上前に紛失したiPadが突然Jamf Pro上に表示され、運用上紛失モードを設定、捜索した結果見つかったiPadの紛失モードを解除したいができない。強制的に解除できる方法はありませんか？状況紛失時したiPadはセルラーモデル、紛失後セルラー回線は契約解除紛失モードに設定した時点でセルラー回線は無効であったため、おそらく見つけた人がWi-Fiで繋げたのではと想像回収後は、紛失モードであるためWi-Fi設定が不可、故に紛失時とは違うSIMを指してアンテナマークが表示され通信できることは確認しているが、強制再起動等実施してもコマンドを受け付けない

I suck at writing extension attributes... I need one that will determine the version number currently installed on a Mac. I have a Smart group setup to filter out current versions, leaving computers with old versions. I need the EA so when I pull a report, I can not only see what version is installed, but compare it to the macOS that is installed on that same machine. Is there a tool or something to help create an EA like this?

Just checking to see if anybody else is running in to this issue. When we started deploying Office updates, we were using Installomator, but we started seeing some issues where not all of the office apps were updating. We then switched to the package, but we're having the same issue, where some of the office apps aren't updating and it breaks the app, so we have to just rerun the installer. The other issue is, after it updates, it sometimes removes the icons from the dock, but not all it'll just remove one.

I had this extension attribute that will tell me if the mac had Office 2016 or 2019 installed, I need one now for office 2021, can anyone help me modify it? #!/bin/bashwordVersion=$(defaults read "/Applications/Microsoft Word.app/Contents/Info.plist" CFBundleShortVersionString)majorVersion=$(awk -F '.' '{print $1}' <<< "$wordVersion")minorVersion=$(awk -F '.' '{print $2}' <<< "$wordVersion")if [[ $majorVersion -ge "15" ]]; thenif [[ "$majorVersion" -ge "16" ]] && [[ "$minorVersion" -ge "17" ]]; thenecho "<result>2019</result>"elseecho "<result>2016</result>"fielseif [[ -d "/Applications/Microsoft Office 2011/" ]]; thenecho "<result>2011</result>"elseecho "<result>Not Installed</result>"fifiexit 0

Hi All, I'm trying to automate the actual Computer to Site assignment via API as we keep on having Computers assigned to wrong Sites.. :) So far I have not had much success, does anyone maybe have an idea how to tackle this?

so it seem that the build it option JAMF Pro does not woke and i see the same problem others have posted the white brick when i try a ad login, so i suck with Mac scripting also now to JAMF looking to do is when the system runs in enrollment or first boot and it see the MDM setting and start to run that.   last step would be join AD.what i am looking to have it do is1. Join AD2. set the OU3. set the AD commuter name the the SN then reboot if needed4. this maybe a second scrip ( when assign a use set the Mac name that show up in mac info to the Users name)