We use Solarwinds for asset tracking and internal support. The installation instructions have you running a command to silently install. How would that be done? I'm used to Intune allowing your to run an install command but not sure where to do that here. Thanks.

Hi Jamfers!Is there a way I can use authchanger to force Jamf Connect to display the 'local login' screen by default as opposed to the 'Azure Login' (or whichever IdP screen you might use)I've managed to use 'sudo authchanger -reset' to switch the Jamf Connect login window off, and 'sudo authchanger -reset -JamfConnect' to turn it back on, but I'd like our users to have easy access to the Azure login option should they require it. The reason: our on-prem WiFi uses 802.1x security and doesn't play nice with Jamf Connect, so users will have to switch to local login when on-site anyway. I'd just like to save them all one less click in the morning :-)We've looked into workarounds for the WiFi security but local login seems like it is going to be our best course of action as the alternatives would be more hassle than it is worth. Thanks for your help and time! Steve.

Hello together,I am currently looking for a solution to automatically create tickets when a device becomes uncompliant. We check the compliants with JAMF.I can have emails sent automatically with Smart Groups, but only to my user.Would I have to create a service user for this or is there another way?Many thanks in advance!Regards,Jonas

Is there a way to block specific sudo commands from being ran? Two specific commands that I have in mind are: sudo jamf removeFramework or sudo /usr/local/jamf/bin/jamf removeFramework sudo -s We don't want users with admin rights to be able to remove the Jamf framework, and we don't want them to be able to elevate their Terminal session to root. We use CyberArk EPM to allow non-admin users to run sudo commands that they need to run as part of their jobs. I recently discovered that non-admin users can run both of these commands with CyberArk installed. Both are very dangerous. We want to be able to allow legitimate admins to be able to run these commands. I sometimes have to run removeFramework to clear out issues with the Jamf agent or Jamf keychain issues. I also frequently elevate terminal sessions to root to be able to view the contents of certain directories where a normal sudo command won't do it. We just want our regular users to not be allowed to run these commands. I can't thi

I've been trying to script a plist change to com.Safari.plist that sets the value for the favorites toolbar show to true. Here is what i'm running, and what it returns: #!/bin/sh defaults write /Users/$3/Library/Preferences/com.apple.Safari.plist ShowFavoritesBar-v2 -bool true defaults read com.apple.Safari exit 0 Script result: {"ShowFavoritesBar-v2" = 1;} I think I'm missing that step that tells the OS to ignore the cashed version of this file and use the modified one. Gabe ShackneyPrinceton Public Schools

Hello to all, Sometimes I remotely wipe my test macs for various reasons. Is the best practice that after the wipe command is sent, and it begins to wipe, should I also delete the device from JAMF inventory or leave it in JAMF inventory? 

I wanted to monitor if our Macs are doing their Microsoft Defender Full and Quick Scans  properly in Jamf.As I couldn't find any solution out-of-the-box I came up with a custom script, in case anybody got the same need.The problem I faced, was that the Mac only saves the state of the last 7 scans (Quick and Full Scans are combined). So let's say you schedule your Quick Scans once per day and your full scans once per week and the user is on vacation only on the "Full-Scan-Day", you have no chance to see, if a full scan never ran or just the week before, but was overwritten by Quick Scans.That's why I came up with two different timestamps for the full scans, that one timestamp will always be in Jamf, to see when the last full scan ran, the second one might not really be needed, as it only checks the Full Scan within the last 7 scans.The script might be a bit fragile as it relies on Microsoft to keep the same format for the "mdatp scan list" command, but for now it works :)You will a

It's extremely annoying that Jamf have decided to prevent Jamf Pro cloud instances from being upgraded before 14th September to v11.9.0, after already bumping v11.8.0 of Jamf Pro.It does not seem fair that we are still waiting for key features to be made available in Jamf Pro, which should have already been released months ago.Why Jamf are you making life so difficult with getting new key new features made available to Jamf Pro customers?

We are a school housed on a church campus which means there is often foot traffic in our rooms outside of school hours for church activities. We have our wifi ssids and the church has theirs, not tumultuous - we just have different needs to accommodate. We largely don't have an issue allowing the use of our technology, but recently noticed our Apple TVs connecting to the church's guest network. We obviously want to keep our devices on our network.Is it possible in Jamf School to restrict the ability to change Wi-Fi networks on TVos? 

what are you guys/gals doing with the 'secure token' popup ? I don't have FV2 enabled and AD users are getting the popup, so we have them select 'bypass'. i created a configuration profile, using the custom settings payload i added this .plist file (com.apple.MCX as preference domain) <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <key>cachedaccounts.askForSecureTokenAuthBypass</key> <true/></dict></plist>

I need help with standard user elevation as user should be able to forget the Wi-Fi networks as they required. in my case if it asks for admin credentials to forget the network.is there any privilege management feature in jamf?  

I received notice that my SSO cert is expiring in a few weeks and I can not find anything on what the process is to update it. I talked to the person that runs our AD side and he doesn't remember ever doing this so he wasn't sure if this autoupdates automatically. Any advice on where to start would be much appreciated! Thanks! 

There's an ongoing bug with composer that is hit or miss between composer versions 11.3.0 to 11.5.0 where the file/folder view portion of composer doesn't actually show any of the files/folders of your source or package. Its there if you kind of know where the folders would be if you just randomly click around the screen but everything in that section is like hidden. I'm tried this version of composer on two separate machines (M2 and intel chip) with the issue. Some of the threads of those with the same issue said Composer 11.4.0 appears to be the most stable working. Only Composer 11.5.0 is available for me to download through my profile. Does anyone have the Composter 11.4.0 or an older version installer package for me to use? 

Hello everyone,  IDK if anyone is using the great add on to Macs, but if you are can you help me get 4 Tiles to work?  Tile #1 - Submit a Service Desk Ticket - the link is mailto:#servicedesk@mycompany.com. Nothing happens.  Tile #2 - Battery - can't get it to display the battery level. Tile #3 - Storage - can't get the amount of storage to display.  Tile #4 - Privacy and Security - can't figure put how to open this one. We want end users to be able to open Privacy & Security directly without going through SystemSettings>Privacy and Security.  Other than that, it is a great addition to our JAMF program. If you haven't tried it - check it out.  https://github.com/root3nl/SupportApp JNUC 2021 release with training: https://www.youtube.com/watch?v=LijCmR6gQAM

 Here is the translation:Hi!We are currently setting up several hundred Macs, and we are experiencing that more and more of them are having issues downloading applications.Inside the managed apps list on the devices, we see the error "Duplicate request," and in the activity log on the device, the error "connection to service with pid 1706 named com.apple.appstored.xpc" also appears.I also notice that all the apps, at least at one of the locations (I haven't checked them all), are marked with the yellow tag "shared app."Any tips on how we can get all the apps through? It's starting to wear on the users.

We have various shell scripts in which we open or directly execute a policy in the self service as follows:  open "jamfselfservice://content?entity=policy&id=10&action=view"  Since the update from 11.4.1 to 11.7.1, we have noticed the problem that the following error message appears when we open / execute such a policy (unfortunately I can't insert a screenshot, I don't seem to have any permissions):Self Service quit unexpectedly.Click Reopen to open the application again.Click Report to see more detailed information and send a report to Apple. if you first open the Self Service app and then execute the command, it works.Does anyone else have this problem?Our workaround is now to open self Serivce first, and then wait with a sleep 5 until hopefully the app is started, so that the URL command can be executed afterwards.  open "/Applications/Self Service.app" sleep 5 open "jamfselfservice://content?entity=policy&id=54&action=view" &

Hi Anyone, we have a company AWS own VPN. When we run the AWS VPN its bypasses the Jamf Radar policy and the user can be access how we can fix this issue

I'm working creating a script that performs several functions. One of the functions requires me to obtain the computer's Jamf Pro ID. I'm trying to figure out how to do this using the new API. I thought if I have a variable for the computer's serial number I could use that to query for the Jamf Pro ID. Is this possible?

We have a user who has discovered a log file on their MacBook called MCXTools.log that is being endlessly written to with the same entry (ID's have been obfuscated for security): Aug 27 13:45:39 mdmclient[20216] [0:MDMDaemon] Using MDM profile: <DeviceEnrollment> [CloudConfiguration:SetupAssistant] EnrollID: XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX (User:XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX) <Payload: JAMF Manual Enrollment Payload: MDM (<com.apple.mdm> 00000000-0000-0000-A000-XXXXXXXXXXXX:00000000-0000-0000-A000-XXXXXXXXXXXX) from profile: MDM Profile (00000000-0000-0000-A000-XXXXXXXXXXXX:00000000-0000-0000-A000-XXXXXXXXXXXX)> It has been writing these lines (and others) endlessly ever since it was enrolled. I cannot find any information on the internet about this log file and wondered if anyone has seen this before and what it is doing?

I've messing around with the below script I found, so we can allow some users to forget ssid's. When I forget the wifi, I still get the admin prompt, but if I hit cancel on the prompt, it does forget the ssid. Just trying to figure out how to get the prompt to not show on Sonoma.   #!/bin/bash # Get a list of preferred Wi-Fi networks wifiList=$(networksetup -listpreferredwirelessnetworks en0 | sed 's/^\\*//') # Present a dialog box for selecting a Wi-Fi network to forget selectedWifi=$(osascript -e 'choose from list {'"${wifiList}"'} with prompt "Select the Wi-Fi network to forget:"' | tr ',' '\\n' | sed -n 2p) if [ -n "$selectedWifi" ]; then # Forget the selected Wi-Fi network without requiring admin privileges sudo -u $USER networksetup -removepreferredwirelessnetwork en0 "$selectedWifi" echo "Wi-Fi network '$selectedWifi' has been forgotten." fi echo "Please select the Wi-Fi network you want to forget."   

Hi there,We currently have Google Workspace configured in Jamf Pro. This allows us to manually search for users in "Users and Location" to assign them to a device.We also have Jamf Connect in our environment that associates the local account with an Okta account which is linked to the user's Google Workspace email.Is there some way to automate assigning user details into User and location based on the username of a logged in user?

We have a policy in Jamf that applies a disk encryption configuration defined in Jamf Pro's settings. (Settings \\ Disk encryption configurations)We also have a device that needs to run the built-in guest user, but not in Safari-only mode that is enforced when FileVault is on. FIleVault has already been enabled via that policy on this particular device.Based on a test, it seems that if we disable FileVault, it will just turn it back on per that policy that previously ran & applied the disk encryption configuration.Short of wiping the device and not applying that policy, is there a way to clear out that configuration as-is, to prevent FileVault from turning back on? 

Hi all,I'm looking for some advice please?I have a lab of 20 Macs joined to a Windows domain. I've pushed out Office LTSC Standard 2021 and the volume license serializer via Jamf which is working well. When a student logs into a Mac using their domain credentials and open Word, I can see that it’s activated with the volume license.However, I encounter issues when the Office applications prompt students to sign in. If they enter their student Office365 credentials then Office LTSC converts to a Microsoft 365 Subscription license. I’m then unable to revert the license back to our volume license. Logging out of Office LTSC results in Office LTSC showing as ‘Not activated”. I'm just wondering if anyone else has come across this before? Is there anyway I can force it to use the volume license? Any help of advice would be great, thanks! N

Hello everyonePretty new to jamf so please excuse me.We are in the process of using jamf connect to elevate access currently still testing.I had one test machine that was running 2.34 elevated access was working i had about ~3minutes left of admin access, then our jamf connect policy decided to trigger (upon checkin) and upgraded to 2.35. All the sudden the request admin button via jamf connect does nothing. I checked 2 other macs that were running 2.35 and both are experiencing the same, requesting admin rights does nothing.Opening jamf connect to collect logs, I see one error that stands outProcess: Jamf Connect, Category: PrivilegeElevation, Contents: Elevation failed, role base elevation is active but OIDCAdminAttribute is not setAnd this is where it gets weird for me, initially our OIDCAdminAttribute was set to roleAfter it broke, jamf support told me is incorrect and to change it to either groups or roles & to delete the jamf connect state plist every change role>groups&gt

I am trying to find a way to create a policy that will restart a computer after it's been up for X number of days. I don't want it to force a reboot instantly though. I want the user to have the option to postpone it 2 or 3 times until it forces. Has anyone had any luck with this?