A profile called "whitelist during school hours" is setup with a time filter. It has a whitelist, so that private games and other unwanted apps will disappear from the students' home screen. Unfortunately, the profile works only for 60-80 % of the iPads automatically. We have to push the button "re-try" in the administration console, or we have to ask the students to open the app Jamf Student, so that their iPads asks the Apple Push Server for any updates (including updates on profiles).Have you experienced non-reliability with time filtered profiles?Any suggestions how to fix that are welcome. (We tried IP address based profiles that work a bit better, but they aren't reliably either.)

Hi allApologies if this has been answered already but we are trying to push an 802.1x LAN profile down to our macOS devices.We have managed to push the wireless equivalent down with a certificate etc however when we try and create the LAN equivalent the device doesn't pick the certificate defined in the profile. Has anybody come across this issue before? We've seen a similar issue in the past with windows devices where you have to start the wired auto config service but wasn't sure if something similar was required on macs?thanks  

Can anyone help with JSON script line to change the name of Managebookmarks?  "ManagedBookmarks": { "type": "array", "title": "Bookmarks",

 一年以上前に紛失したiPadが突然Jamf Pro上に表示され、運用上紛失モードを設定、捜索した結果見つかったiPadの紛失モードを解除したいができない。強制的に解除できる方法はありませんか？状況紛失時したiPadはセルラーモデル、紛失後セルラー回線は契約解除紛失モードに設定した時点でセルラー回線は無効であったため、おそらく見つけた人がWi-Fiで繋げたのではと想像回収後は、紛失モードであるためWi-Fi設定が不可、故に紛失時とは違うSIMを指してアンテナマークが表示され通信できることは確認しているが、強制再起動等実施してもコマンドを受け付けない

I suck at writing extension attributes... I need one that will determine the version number currently installed on a Mac. I have a Smart group setup to filter out current versions, leaving computers with old versions. I need the EA so when I pull a report, I can not only see what version is installed, but compare it to the macOS that is installed on that same machine. Is there a tool or something to help create an EA like this?

Just checking to see if anybody else is running in to this issue. When we started deploying Office updates, we were using Installomator, but we started seeing some issues where not all of the office apps were updating. We then switched to the package, but we're having the same issue, where some of the office apps aren't updating and it breaks the app, so we have to just rerun the installer. The other issue is, after it updates, it sometimes removes the icons from the dock, but not all it'll just remove one.

I had this extension attribute that will tell me if the mac had Office 2016 or 2019 installed, I need one now for office 2021, can anyone help me modify it? #!/bin/bashwordVersion=$(defaults read "/Applications/Microsoft Word.app/Contents/Info.plist" CFBundleShortVersionString)majorVersion=$(awk -F '.' '{print $1}' <<< "$wordVersion")minorVersion=$(awk -F '.' '{print $2}' <<< "$wordVersion")if [[ $majorVersion -ge "15" ]]; thenif [[ "$majorVersion" -ge "16" ]] && [[ "$minorVersion" -ge "17" ]]; thenecho "<result>2019</result>"elseecho "<result>2016</result>"fielseif [[ -d "/Applications/Microsoft Office 2011/" ]]; thenecho "<result>2011</result>"elseecho "<result>Not Installed</result>"fifiexit 0

Hi All, I'm trying to automate the actual Computer to Site assignment via API as we keep on having Computers assigned to wrong Sites.. :) So far I have not had much success, does anyone maybe have an idea how to tackle this?

so it seem that the build it option JAMF Pro does not woke and i see the same problem others have posted the white brick when i try a ad login, so i suck with Mac scripting also now to JAMF looking to do is when the system runs in enrollment or first boot and it see the MDM setting and start to run that.   last step would be join AD.what i am looking to have it do is1. Join AD2. set the OU3. set the AD commuter name the the SN then reboot if needed4. this maybe a second scrip ( when assign a use set the Mac name that show up in mac info to the Users name)

Hey guys,I've been working on a computer lab and I have some time to troubleshoot. I had to upgrade the lab from Ventura and 2022 Adobe apps to Sonoma and Adobe 2024 apps.Previously for the Adobe 2022 apps I would run them though Composer and I had no problem pushing them out and they would install successfully on my lab computers.However, this time round the installations fail about 90% of the time, a few would work but most of the time they would fail. I have Photoshop, Illustrator, Acrobat, etc and package them individually.I came across this: https://community.jamf.com/t5/jamf-pro/adobe-product-package-fails-to-install/m-p/301627I was going to try that when I also read to check the \\var\\log\\install.logI had it open when I was using Composer to create a new snap shot and I could see a bunch of failed messages. Mostly saying Install failed: The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. Then when the Insta

Hi, i am trying to script the final step in our onboarding process, where the user is presented with a list of Locations to chose, and once selected, the script will pull the serial number and rename the machine the location-serialnumberI'm 90% sure I have it right but i am getting echo errors when testing in CodeRunner... and i'd appreciate some extra eyes / advice....  #!/bin/bash #/usr/local/bin/dialog # Pull device serial number for lookup serialNumber=$(ioreg -c IOPlatformExpertDevice -d 2 | awk -F\\" '/IOPlatformSerialNumber/{print $(NF-1)}') nserialNumber=${serialNumber} #Specify variables for swiftDialog dialogInstalled="/usr/local/bin/dialog" downloadDialog="https://github.com/swiftDialog/swiftDialog/releases/download/v2.5.1/dialog-2.5.1-4775.pkg" pathToDownload="/usr/local/dialog" pathToPackage="/usr/local/dialog/dialog-2.5.1-4775.pkg" #Check if swiftDialog is installed if [ -e "$dialogInstalled" ];then   echo "Dialog Is installed" else   echo "Dialog is no

Hello everyone not really a reach out for help but more informational.Our company ticketing system has been getting a lot of reports once upgrading to 14.6 & 14.6.1 that their macs are slow to lock and their touchid no longer work or theres a huge delay. I myself upgraded and was affected.Reading through some apple forums someone identified that the issue was with a configuration profile that sets the local device password policy. It uses the com.apple.mobiledevice.passwordpolicy payload type.I went looking into our jamf instance and found a password policy configuration group and unscope my machine from it. I then locked my mac and both lock and touchid were back to instantly working. I rescoped the same policy back to my mac and boom delays again.This is where things get complicated for our environment, we have conditional access policies set by intune that our macs register to for access to certain apps. Those conditional access policies are tied to our jamf  password

Hello Everyone,We’re expanding our student loaner program to include Mac laptops. Each semester, students will check out these laptops for their coursework, and at the end of the term, the devices are returned to be reset and reissued.Here are the key issues we’re facing:Active Directory Binding: All devices must be bound to AD, and there’s no workaround at the moment. We’re looking into Jamf Connect or an alternative, but those options won’t be ready in the near future.Data Removal: We need a reliable way to remove user data at the end of each loan period.External Resetting: The entity handling the checkout process (not internal IT) will need to complete the reset. This means the "Wipe" command isn't viable since we can't ensure consistent internet access or the ability to follow a complex process.We currently have a Self Service item that successfully removes user profiles. It works great for us. However, the biggest challenge is managing applications. We need to find a way to remove

Only works under Catalina. Why is Apple making it so difficult to automate OS replacement/updates?

We found few apps in Jamf School Apps->Update have new version.But it seems not automatic push update version to iPad. I need manuallyclick "Update all devices" in each Apps.

Hi all!I got a question from someone who couldn't sync their Jamf School users to Apple School Manager. Looking in his Jamf School portal, I saw the following error 'The user ** cannot be synched because the user was created manually in Jamf School or from an SIS'. Is it not possible to sync/upload Jamf created users from Jamf to ASM? Or am I missing something in the configuration or does it need to be done in a different way?Thanks :)

I am working on a remediation policy for Self Service that will trigger the uninstall and then reinstall of a profile. Doing this is easy to do. I created a smart group then excluded the smart group from the profile I was testing with. Once the policy causes the Mac to be added to the smart group, the profile gets removed. When the Mac is removed from the smart group the profile is installed again. But there's a problem... I wanted to have a step that would verify the the profile did get reinstalled. To do that, I used this command: profiles show -o stdout | grep "ProfileDisplayName = "ProfileName"" | /usr/bin/awk '{print $3}' | sed 's/[[:punct:]]//g') When I was testing this on my own Mac and a test Mac, I was testing removing a profile we have for Zoom. The profile is simply named "Zoom". The command above works perfectly for a profile named with just one word. If the profile is named something like "Zoom Profile" the command will output "no such file or directory". I have tried

What would cause a brand new computer to skip user creation right after an internet network is chosen? We have a few recent computers that went out and some of the computers in that shipment, seemingly upon choosing a network, enrolls the computer and the management user then goes straight to the login screen. Mind you that other computers from the same shipment worked/enrolled normally.

Hello! We are running macOS 14.6.1 on a fleet of iMac's and Macbook Pros. The Mac's can AirDrop to other devices (EG it can see my phone and sends files successfully to it) but the Mac itself doesn't appear to AirDrop too. (So I cannot AirDrop from my phone to the Mac). We've different various devices (Managed and non managed) and the Mac doesn't appear as an AirDrop destination of any of them. These devices are new so we can't test with other versions of macOS (So we don't know if it's a new thing or always been like this!). The Mac's are all MDM managed and we have tried being on the same WiFi network (And also not being on the same WiFi network). They have WiFi and Bluetooth enabled. We tried the solution here but it didn't make any difference (We checked, the command does the value correctly). Has anyone else seen this or have any ideas on how to fix it?! Thank you in advance 

I am trying to setup managed favorites in Microsoft edge. can someone share a working plist for managed browsers in edge?My basic requirement is to have few URLs in managed favorites and then few URLs in folders structure something like this:url-Microsoft.comurl-Intune.microsoft.comJamf(folder)            url-id.jamf.com             url-jamfcloud.comInternal(folder)            url-abc.com Appreciate your help in advanced.

We use Solarwinds for asset tracking and internal support. The installation instructions have you running a command to silently install. How would that be done? I'm used to Intune allowing your to run an install command but not sure where to do that here. Thanks.

Hi Jamfers!Is there a way I can use authchanger to force Jamf Connect to display the 'local login' screen by default as opposed to the 'Azure Login' (or whichever IdP screen you might use)I've managed to use 'sudo authchanger -reset' to switch the Jamf Connect login window off, and 'sudo authchanger -reset -JamfConnect' to turn it back on, but I'd like our users to have easy access to the Azure login option should they require it. The reason: our on-prem WiFi uses 802.1x security and doesn't play nice with Jamf Connect, so users will have to switch to local login when on-site anyway. I'd just like to save them all one less click in the morning :-)We've looked into workarounds for the WiFi security but local login seems like it is going to be our best course of action as the alternatives would be more hassle than it is worth. Thanks for your help and time! Steve.

Hello together,I am currently looking for a solution to automatically create tickets when a device becomes uncompliant. We check the compliants with JAMF.I can have emails sent automatically with Smart Groups, but only to my user.Would I have to create a service user for this or is there another way?Many thanks in advance!Regards,Jonas

Is there a way to block specific sudo commands from being ran? Two specific commands that I have in mind are: sudo jamf removeFramework or sudo /usr/local/jamf/bin/jamf removeFramework sudo -s We don't want users with admin rights to be able to remove the Jamf framework, and we don't want them to be able to elevate their Terminal session to root. We use CyberArk EPM to allow non-admin users to run sudo commands that they need to run as part of their jobs. I recently discovered that non-admin users can run both of these commands with CyberArk installed. Both are very dangerous. We want to be able to allow legitimate admins to be able to run these commands. I sometimes have to run removeFramework to clear out issues with the Jamf agent or Jamf keychain issues. I also frequently elevate terminal sessions to root to be able to view the contents of certain directories where a normal sudo command won't do it. We just want our regular users to not be allowed to run these commands. I can't thi

I've been trying to script a plist change to com.Safari.plist that sets the value for the favorites toolbar show to true. Here is what i'm running, and what it returns: #!/bin/sh defaults write /Users/$3/Library/Preferences/com.apple.Safari.plist ShowFavoritesBar-v2 -bool true defaults read com.apple.Safari exit 0 Script result: {"ShowFavoritesBar-v2" = 1;} I think I'm missing that step that tells the OS to ignore the cashed version of this file and use the modified one. Gabe ShackneyPrinceton Public Schools