Hey everyone. I deployed a policy that runs a script which notifies users that they need to reboot their Macs. The policy is scoped to a Smart Group that contains users whose Macs have been up for 10 days or more. The issue I'm running into is that after the users reboot, they're seeing the notification again. My guess is that an inventory update isn't happening quickly enough after the reboot to remove them from the Smart Group. Can anyone help me configure this properly? Happy to provide any other details. Thanks in advance!

Greetings all, We're getting our Fall builds ready, and again I am facing the issue of automating the software installation for the Wacom tablets in our Industrial Design (17 Cintiq 27" panels) and Multimedia (10 Wacom 12" LCD tablets) labs.  I'd really like to not have to walk around to each one of these to individually allow the permissions they need (which is Wacom Technical Support's position). Does anyone have, or know of, a way to automate this, particularly in Jamf Pro, but I'll take anything.  We are running Big Sur on a variety of Mac types, but no M1's have Wacoms hooked to them yet.  There were a variety of suggestions in Jamf Nation last year, but most of them were for Mojave and we were unable to get them to work successfully in Catalina. Thanks in advance for any suggestions.

I am working on a script that uses Swift Dialog to prompt users who have been running their Macs for a long time to reboot. The script creates a launch daemon after getting user input from Swift Dialog. The user is offered a drop down menu with 4 options: Reboot Now, 1 hour, 4 hours, 1 day. The StartInterval for the launch daemon gets set based on the option the user chooses from the drop down menu. Users are allowed 3 deferrals which I track using a PLIST. After the time set in the StartInterval elapses, the user is able to choose a different option. This changes the StartInterval to a new value. I included a step in the script to bootout the launch daemon just before it gets deleted and replaced with a new one containing the new StartInterval. When the new launch daemon is installed, there's a step to bootstrap it. I see in the policy log that the bootout step is failing, which then leads to the bootstrap step also failing since the launch daemon is still running.  Boot-out fail

Hi All,We have a few laptops that are actively checking in and performing inventory updates however, there are a couple commands that have been pending for a week, like the "lock device" command.I have attempted the following in an attempt to fix:Canceling all pending commandsSending a blank pushAny ideas on what could be the issue? The lock command has worked well in the past and the only thing recently changed was the MacOS updates(beta) was turned on and we've been upgrading people from 14.0 to 14.6. All devices were already on Sonoma before the issue arose.

Good afternoon,We are currently testing the Compliance Editor and have deployed the CIS Level 1 benchmark to three test devices via Jamf Pro. The benchmark appears to be fully implemented on these devices. However, the 'Sonoma CIS Benchmark Level 1 Audit' in Jamf is showing that the devices are non-compliant because Siri Listen was not disabled (system_settings_siri_listen_disable). I checked the devices, and Siri Listen was already disabled (screenshot below) before the CIS benchmark was applied. Does anyone know how can I resolve this false positive?  Thank you.

In previous versions of Mac OS I was setting users home page in Safari with a PKG that copied a com.apple.Safari.plist to their own /Library/Preferences/ folder or in a policy under Files & Processes and running the jamf command to enable home page. I also use to be able to dismiss the Welcome startup screen and change the default open behavior from Favorites to Homepage. I've had no success testing with El Capitan and wondering what is working for others? Any help is much appreciated. Thanks,

Hi,I am trying to replicate a smb distribution point using jamf admin, but whenever it's trying to mount the share it adds http to the path. Is that expected / am I missing something? It also adds the share name at the end twice, which doesn't make sense to me? So it's trying to connect to:smb://http://sharename.domain.com/jamf/jamfbut the address should be:smb://sharename.domain.com/jamf/ - at least that's how I can connect manuallyOr does jamf admin use some other way to connect I'm not aware of?Thanks,Georg 

HI,Does anyone have a working script to add asset numbers to iPad records using a csv file?We want to scan serial number and asset tag at 1 to 1 rollout, and then upload to put asset number into the iPad record.Thanks!Sandy

Hi, is there a way to prevent users signing in to the MacBook with an Apple ID? In a Configuration Profile in Restrictions, I have the following: Preferences -> -> Disable Selected Items -> Apple ID Preference Pane, iCloud, Internet AccountsFunctionality -> Disable -> Allow Internet Accounts modification in System Settings (macOS 14 or later, supervised) But users can still go into System Settings and sign in to their Apple ID. 

We are using Jamf Connect for our Macbooks and during provisioning, there is a way to make it call DEPNotify without a user logging in. We can't use Jamf Connect on our labs because we could not make it work the way we wanted to with Google as the authentication source. So we're stuck with NoMAD for now, which is fine but I wanted to be able to run DEPNotify similar to how Jamf Connect does it (without a user logging in). Anyone have suggestions how we can achieve the same?

A couple of questions that are interconnected: 1. Jamf needs a user to log in first in order to escrow the secure boot token required to be able to wipe the device from Jamf, right?2. What's the best way to create an auto login user during the provisioning process? I'd like to use this account to run DEPNotify (as it doesn't run without a user apparently; happy to be corrected if wrong) immediately upon enrollment completion and then delete the auto log in user and itself once it has completed it's run. This will also hopefully cause Jamf to escrow the secure boot token. 

@MakiK Jamf ProとSafe InternetのUEMコネクトを設計する場合の考え方を知りたいです。※Safe Internetを資料でしか知りえず間違った質問であればご容赦願います。Safe Internetがグループ単位でしかブロック状況を見ることができないとした場合仮に140グループ（学校数）を設定するならば、Jamf ProのスマートデバイスグループにUEMコネクトのためのグループを作成することになると考えていますが、合ってますでしょうか？仮に140のスマートデバイスグループを作成した場合、Jamf Proのパフォーマンスに影響を与えないかを心配していますが、影響を与えますか？※現行運用では、スマートデバイスグループはパフォーマンスに影響を与えるため、必要最小限にしてほしい、と依頼を受けているため。

@MakiK Jamf Proを小中校別々のインスタンスを構成した場合、Safe Internet（Data Policy含む）も同様に複数となるのか、それとも１つで構成できるのかを知りたい。現段階ではインスタンスは一つで設計したいが、仮に小中学校で分けた場合、Safe Internet（Data Policy含む）で考慮すべきことを知っておきたい。※Jamf ProとSafe Internetが1対1の構成であれば、並行して導入するData Policyのライセンス数が最大規模の学校の生徒数しかないため、複数のインスタンスとどのようにUEMコネクトすべきなのかを知っておきたい。 

Please vote on my idea to bring back the old Inventory user interface at https://ideas.jamf.com/ideas/SCH-I-315

Hey everyone, I didn't manage to connect our Macs to our wifi network that is using 802.1x authentication at Jamf Connect login window ! Our Macs are not binded to AD and we would use user credentials.Can you shed some light on how to configure it properly to make it work? Thanks in advance

Hello All,   I've seen some older posts on here in regards to logging users out of their iCloud account but can't get them working as of right now.   We are looking to disable iCloud across our org, but some users are logged in. I've tested disabling iCloud via a config profile, which works, but doesn't log anyone out of iCloud that's already logged in.   Does anyone have a working script that logs a user out of their iCloud account?    

I have been using Installomator and it has been working great. However, is there an option for the app/script to perform a check-in and install the latest update only if the app is already installed. Currently, when I run Installomator, it installs the app regardless of whether it was previously installed or not.For instance, during my testing, I didn't install Google Chrome on one machine and installed it on another using Self Service. I would like Installomator to update the app, but only on the computer where it was installed by the user/Self Service. On the machine where Google Chrome was not installed previously, I don't want Installomator to perform any installation.Is there a way to modify the script so that it only runs when the app is detected on the system? This would ensure that Installomator updates the app only when it is already present. TY

Hello everyone, My company and I are looking to allow our users access to the print options on the mac with out full admin credentials. These users have local accounts on their computer, not domain based.I know the following script that most people have used on the forms is below, however, it uses the term everyone. /usr/sbin/dseditgroup -o edit -a everyone -t group lpadminI know that if I replace everyone with the specific user, e.g. Charlie, then Charlie would get access to the Printer group but not Anthony, even though they share the same computer. However, this would require me to replace the name every time I give the script to another user or run it in Jamf. Is there a way to specify that you only want the current logged in user to be added to this group? I have tried the following in replace of everyone but I end up with the error Record was not found:whoami`whoami`$USER$LoggedInUser Thanks in Advance

I'm getting worried about the future of the Jamf Admin and Composer apps. Composer is the only one that has been updated for Apple Silicon, but it is basically the exact same app it's always been since version 9. Composer's interface could use some updating. New package manifests are painfully out of date (My god, it still lists Shockwave!). Jamf Admin really is unchanged since version 9. Jamf Admin REALLY needs to be updated for Apple Silicon and to support Dark Mode. It also needs improved error reporting and recovery. When there's a problem (interrupted connection, bad pkg, wrong phase of the moon, I'm wearing the wrong aftershave to work...)  it can take hours for broken uploads to be removed so we can try uploading again.Jamf Admin is a far more efficient method of uploading and editing packages (when it works) than the JSS web interface. I like that I can upload multiple packages at the same time and then edit them afterward. The web interface only allows one upload at a tim

Afternoon All    Hoping someone can help who being using Jamf app catalogue longer than we have.We recently started using Jamf app catalogue to manage some of core apps for patching etc.   I noticed yesterday that there was a new update from chrome it appeared to install fine and chrome seems to be working on the latest version 126.0.6478.183.However we get below error message when going to About chrome, I have noticed it on a handfull of machines but I expect its probably on all of them.  Reinstalling chrome doesnt seem to help either have raised a ticket with Jamf support but that hasnt turn up much so far. The logs show chrome updating without error so I'm somewhat puzzled.As anyone else come across this issue with managing chrome via jamf App catalogue?Thanks

Hi all,We use NinjaOne RMM alongside Jamf PRO for remote management of our MacOS devices, and in order to provide remote support we use the NinjaOne remote access app (NC Streamer).It requires these permissions to run:I've created a configuration policy with the scope - Computers with NC Streamer, config below:It isn't applying the permissions remotely. Have I got the right configuration?Many thanks,

こんにちは！ Jamf Education User Groupページをご覧いただきありがとうございます😊 このページではiPadの運用管理に携わる全ての皆様への・最新情報のご提供・ユーザー間における情報交換の促進・効率的なデバイス管理の実現・Jamfからのお知らせ などを発信していきたいと考えております。 また、皆様からの質問も受け付けております。グループトップページ上部の「Joing Group Hub」をクリックして是非ご参加ください。 今後のアップデートをお楽しみに！

Scenario is this tried to add macbook to ABM via Apple configurator 2 it worked but checked mdm server it shows correctly, but when we boot macbook, after the wifi connection it doesn't redirect to the policy pop-up via jamfpro can anyone face with this issue? 

I discovered that this model only has an HDMI and power cable connection.  Previous TV models have connected to our network with a network cable, so how does one get this 3rd Generation connected and enrolled in JAMF? This new device configuration has prevented me from configuring them as I did before with a cabled connection.--The TV is present in Apple School Manager and enrolled in JAMF Pro.--I cannot find the TV in our JAMF inventory by searching on serial number. (makes sense as it has not connected to any WiFi yet)--When powered on and connected to a monitor, the TV sees but will not connect to our open guest network: " The WiFi network requires further authentication to connect. Use your iPhone or iPad to continue". Choosing this option goes nowhere.  So I then try a secured WiFi network... --We created a special wireless configuration for TVs to auto-join a secure WiFi network, but this is not automagically working as with previous generations.  It appe

I am unable to find a way to added Cisco Thousand Eyes Uninstall to Managed Login Items as it is a EXEC file it doesn't have a bundle id or team identifier. Hoping someone has setup a different EXEC that might know what I need to add the config profile. Thanks