As shown in the below screenshots, after clicking "Change Password" then authenticating, I am taken to a home page screen. I then have to scroll down and select "Change Password" again. When changing the password there, an error occurs. I am using Jamf Now's Jamf Connect option with Azure.    

We use Okta as our main identity provider, and I'd like to leverage that alongside Jamf Connect to get Zero-touch working in my environment.  is there any advice for disabling Nomad and getting Okta and JC working nicely together?

Hi there, Jamf App Catalog is great at patching applications. The only caveat is the method that it uses to communicate with the end-user that an update is pending. Most of our users ignore or are unaware of the notification from Jamf App Catalog when a new update is pending and as a result complain of their apps getting abruptly closed. This is compounded by an ongoing issue of inconsistent notifications (an issue that has been open for a couple of years).   Is there a way to mitigate the above issue by maybe a passthrough of a notification to a prompt or dialog box that the user can interact with? All my attempts at trying to resolve this issue is cut short by there being no direct feedback on the local machine that is recording Jamf App Catalog interactions with the local machine i.e a log that can be leveraged to base notification triggers on a Jamf Pro policy and Notifier App.   I thought to leverage IBM Notifier for this task as it would be ideal. Except that once

 Greetings all,Until last JAMF Pro update i had no issue with the script below. But as of today, the script returning blank result without error. Any idea ?   APIUsername="" APIuserpassword="" JAMFServer="" EAID1=69 JAMFAPIToken=$(curl -X POST -u $APIUsername:$APIuserpassword -s $JAMFServer/api/v1/auth/token | plutil -extract token raw -) DeviceSerialNumber=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}') curl -u $APIUsername:$APIuserpassword -H "Accept: application/xml" $JAMFServer/JSSResource/computers/serialnumber/$DeviceSerialNumber/subset/extension_attributes | xpath -e \\ "//*[id=$EAID1]/value/text()" 2>/dev/null 

Does anybody have a way to look for Rapid 7 and it's version? it doesn't seem to put anything in the /Applications folder.

@MakiK 現在「Return to Service」Appsの検証をしているのですが、何も操作せずに復帰しますが、最後に下記の注意がポップアップします。先週のイベントの動画では表示されなかったと記憶しています。これはReturn to Serviceの「Appの構成」タブに記述する内容が不足していると言うことでしょうか。

Hello everyone,I have received command entries from JAMF tech support to adjust our password policy that is reporting errors. I have been running these commands manually with a remote session with the user and it works. Is there a way to create Policies so that this will run without the user and myself involved? Reboot is not required but to run the commands requires user name and password in Terminal. On the user's Mac in Terminal run  sudo jamf removeframeworkOnce that completes stay in Terminal and  run  sudo profiles renew -type enrollmentAny help is much appreciated.  

I tried creating shortcuts directly on iPads and it let me do that but after refreshing the profile they disappeared! I then found out about the Web Clips and put those in my profile and organised them on the Layout however they don't show on the iPads either!Can someone explain how I get URL shortcuts on to a home screen please!

I looked all over the internet, tried ChatGPT and can't find anything to allow a few websites to pop up windows.  This is affecting our Intune Integration when Safari opens and it goes to login.microsoftonline.com and device.microsoftonline.com. It take 2-3 times before we can successfully get through the enrollment.Does anyone know how to do this, I don't want to allow all pop-ups as I think that is dangerous. Apple isn't making this easy.  

We have been using Nudge as a means to prod users to update for a few years and it has been flawless until recently. In test machines Nudge is no longer running despite having the launch agent installed being included in our managed login item profile. Manually installing the Nudge suite causes the service to run, but it doesn't pick up its settings in our Nudge config profile (minimum OS and whatnot). Granted we created our Nudge config profile back with version 1.x. Comparing the json for 1.x to 2.x looks identical, so I don't think that is our issue. Has anyone experienced something like this? 

I haven't used the Software Updates feature before. In the past, I have tried performing a mass action using a static group for testing. Yesterday, I decided to do that for some of my hot spares on the bench to take them from 14.5 to 14.6 and discovered that we had enabled the Software Updates feature. This understandably removed that ability from an action, so I figured I would give it a try with an eye towards deferrals as the "killer app" of the process.We control updates on our active machines with some restrictions payload and restricted software, but the spares are a little more relaxed. The only thing they get is our software update payload, which is set to make sure updates are automatic and enabled:So I decided to take two of them, put them in a static group and run the following:This ran very much like previous experiences with the MDM action. Devices eventually handled the commands and downloading/staging commenced. I set one machine aside with the 'REBOOT(8)' man page open

Hey everyone. I deployed a policy that runs a script which notifies users that they need to reboot their Macs. The policy is scoped to a Smart Group that contains users whose Macs have been up for 10 days or more. The issue I'm running into is that after the users reboot, they're seeing the notification again. My guess is that an inventory update isn't happening quickly enough after the reboot to remove them from the Smart Group. Can anyone help me configure this properly? Happy to provide any other details. Thanks in advance!

Greetings all, We're getting our Fall builds ready, and again I am facing the issue of automating the software installation for the Wacom tablets in our Industrial Design (17 Cintiq 27" panels) and Multimedia (10 Wacom 12" LCD tablets) labs.  I'd really like to not have to walk around to each one of these to individually allow the permissions they need (which is Wacom Technical Support's position). Does anyone have, or know of, a way to automate this, particularly in Jamf Pro, but I'll take anything.  We are running Big Sur on a variety of Mac types, but no M1's have Wacoms hooked to them yet.  There were a variety of suggestions in Jamf Nation last year, but most of them were for Mojave and we were unable to get them to work successfully in Catalina. Thanks in advance for any suggestions.

I am working on a script that uses Swift Dialog to prompt users who have been running their Macs for a long time to reboot. The script creates a launch daemon after getting user input from Swift Dialog. The user is offered a drop down menu with 4 options: Reboot Now, 1 hour, 4 hours, 1 day. The StartInterval for the launch daemon gets set based on the option the user chooses from the drop down menu. Users are allowed 3 deferrals which I track using a PLIST. After the time set in the StartInterval elapses, the user is able to choose a different option. This changes the StartInterval to a new value. I included a step in the script to bootout the launch daemon just before it gets deleted and replaced with a new one containing the new StartInterval. When the new launch daemon is installed, there's a step to bootstrap it. I see in the policy log that the bootout step is failing, which then leads to the bootstrap step also failing since the launch daemon is still running.  Boot-out fail

Hi All,We have a few laptops that are actively checking in and performing inventory updates however, there are a couple commands that have been pending for a week, like the "lock device" command.I have attempted the following in an attempt to fix:Canceling all pending commandsSending a blank pushAny ideas on what could be the issue? The lock command has worked well in the past and the only thing recently changed was the MacOS updates(beta) was turned on and we've been upgrading people from 14.0 to 14.6. All devices were already on Sonoma before the issue arose.

Good afternoon,We are currently testing the Compliance Editor and have deployed the CIS Level 1 benchmark to three test devices via Jamf Pro. The benchmark appears to be fully implemented on these devices. However, the 'Sonoma CIS Benchmark Level 1 Audit' in Jamf is showing that the devices are non-compliant because Siri Listen was not disabled (system_settings_siri_listen_disable). I checked the devices, and Siri Listen was already disabled (screenshot below) before the CIS benchmark was applied. Does anyone know how can I resolve this false positive?  Thank you.

In previous versions of Mac OS I was setting users home page in Safari with a PKG that copied a com.apple.Safari.plist to their own /Library/Preferences/ folder or in a policy under Files & Processes and running the jamf command to enable home page. I also use to be able to dismiss the Welcome startup screen and change the default open behavior from Favorites to Homepage. I've had no success testing with El Capitan and wondering what is working for others? Any help is much appreciated. Thanks,

Hi,I am trying to replicate a smb distribution point using jamf admin, but whenever it's trying to mount the share it adds http to the path. Is that expected / am I missing something? It also adds the share name at the end twice, which doesn't make sense to me? So it's trying to connect to:smb://http://sharename.domain.com/jamf/jamfbut the address should be:smb://sharename.domain.com/jamf/ - at least that's how I can connect manuallyOr does jamf admin use some other way to connect I'm not aware of?Thanks,Georg 

HI,Does anyone have a working script to add asset numbers to iPad records using a csv file?We want to scan serial number and asset tag at 1 to 1 rollout, and then upload to put asset number into the iPad record.Thanks!Sandy

Hi, is there a way to prevent users signing in to the MacBook with an Apple ID? In a Configuration Profile in Restrictions, I have the following: Preferences -> -> Disable Selected Items -> Apple ID Preference Pane, iCloud, Internet AccountsFunctionality -> Disable -> Allow Internet Accounts modification in System Settings (macOS 14 or later, supervised) But users can still go into System Settings and sign in to their Apple ID. 

We are using Jamf Connect for our Macbooks and during provisioning, there is a way to make it call DEPNotify without a user logging in. We can't use Jamf Connect on our labs because we could not make it work the way we wanted to with Google as the authentication source. So we're stuck with NoMAD for now, which is fine but I wanted to be able to run DEPNotify similar to how Jamf Connect does it (without a user logging in). Anyone have suggestions how we can achieve the same?

A couple of questions that are interconnected: 1. Jamf needs a user to log in first in order to escrow the secure boot token required to be able to wipe the device from Jamf, right?2. What's the best way to create an auto login user during the provisioning process? I'd like to use this account to run DEPNotify (as it doesn't run without a user apparently; happy to be corrected if wrong) immediately upon enrollment completion and then delete the auto log in user and itself once it has completed it's run. This will also hopefully cause Jamf to escrow the secure boot token. 

@MakiK Jamf ProとSafe InternetのUEMコネクトを設計する場合の考え方を知りたいです。※Safe Internetを資料でしか知りえず間違った質問であればご容赦願います。Safe Internetがグループ単位でしかブロック状況を見ることができないとした場合仮に140グループ（学校数）を設定するならば、Jamf ProのスマートデバイスグループにUEMコネクトのためのグループを作成することになると考えていますが、合ってますでしょうか？仮に140のスマートデバイスグループを作成した場合、Jamf Proのパフォーマンスに影響を与えないかを心配していますが、影響を与えますか？※現行運用では、スマートデバイスグループはパフォーマンスに影響を与えるため、必要最小限にしてほしい、と依頼を受けているため。

@MakiK Jamf Proを小中校別々のインスタンスを構成した場合、Safe Internet（Data Policy含む）も同様に複数となるのか、それとも１つで構成できるのかを知りたい。現段階ではインスタンスは一つで設計したいが、仮に小中学校で分けた場合、Safe Internet（Data Policy含む）で考慮すべきことを知っておきたい。※Jamf ProとSafe Internetが1対1の構成であれば、並行して導入するData Policyのライセンス数が最大規模の学校の生徒数しかないため、複数のインスタンスとどのようにUEMコネクトすべきなのかを知っておきたい。 

Please vote on my idea to bring back the old Inventory user interface at https://ideas.jamf.com/ideas/SCH-I-315