We have an annual PCI audit that we have to run on randomly selected Macs once a year. After the Macs have been selected, I scope those Macs to a policy that runs the script below. Everything works up to the point of uploading the resulting .zip file to the computer record on the Jamf server. I keep getting a "curl: (26) Failed to open/read local data from file/application" error. Unfortunately my curl skills are weak and I can't figure out what I'm doing wrong. I think I'm doing something wrong with the -F option or I'm not using the variables correctly in the curl command (line 91).#!/bin/bash # this script s used to collect a full system profiler dump in txt format # as well as user accounts, groups, crowdstrike info, open ports # it will put all the files in /Library/company/PCI/<computername>/ # for later retrieval and submission for PCI audit # Set variables for the JAMF API jamf_url="https://company.jamfcloud.com" jamf_user="API-only-account" jamf_password="password_here

I'm kind of confused here about this version of FileZilla in Jamf.  I 'purchased' about 300 "FileZilla Pro - FTP and Cloud" licenses. I created the available FileZilla app in Self Service from the Computers - Mac Apps - App Store. It installed fine and works, as I transferred files just fine. But I don't see anywhere that it is restricted nor where one would enter a subscription, it did not notify me anywhere that it is a trial.  Does it act like the free app?  It says it is a free app in the Jamf setup (see picture).  In the app blurb it says "Subscribe to FileZilla Pro to begin your 7 days free trial." If I don't subscribe does it just act like the free app? I did build a FileZilla package and had the free app available, but wanted something that would update the app, as many of the Jamf Mac apps do.  Any thoughts are appreciated!

Help! We're migrating to Jamf Connect from AD, and we've done successful testing and migrations and I've been setting up user accounts with no issues. But all of a sudden today when I went to change someone's password using the menu bar agent, I got this error: "Unable to reach any KDC in realm xxxxxxx, tried 10 KDCs"Nothing has changed in our infrastructure that I am aware of; does anyone know what would cause this? I am freaking out a little.

hi all,anyone found a way to disable/lock itunes or parts of it? especially files transfer.

One of our App dev teams is looking to use AWS EC2 mac for their pipeline.  Our security department wants this managed like any other Mac in our environment.  I know very little about AWS and these instances.  Anyone got step by step guide or suggestions?

Hi there,I'm not sure if this functionality exists for MacOS, but it does for Chromebooks, and it's pretty amazing, so we'd like to leverage it for our iMac labs at the very least, and if it works there maybe go org-wide with it. The problem is I'm not sure what method to attack this problem with.Currently our iMacs (like the rest of our Apple computers) are AD bound. Users log in with a mobile account, and use Enterprise Connect for password management.I know that Macs support Kerb/SSO authentication, and also that Google's SecureLDAP can work for macOS as well, but what I really want is for the login screen to show me a Classlink login page so users can sign in with a QR code badge.Since our Google accounts use Classlink as their IDP and show the splash page when you try to log into them via web browser, I started going down the rabbit hole of getting a test machine bound to Google Secure LDAP, thinking it might spawn a splash page for Classlink login. But now I'm realizing that mech

I have a requirement were wanted to hide or uninstall below MacOS default application i.e. (Freeform, Mail, Messages, Music, TV, Stocks, Chess)Is there any way I can achieve this?

I have JAMF pro cloud instance and when I enroll new device using PreStage Enrollment, all my 12 application installations show ''background items added" notification on the right side of mac devices. can we mute these notifications?

Does anyone have a good method to pull al list of all applications across all machines? We have Jamf Cloud so I am not sure if I can run SQL queries directly against the DB. Preferably something I can get to Excel so I can filter out all the Windows applications on VMs.

Hello,I am running into a strange issue with the wipe computer management command on what seems to be specific 22" iMac models. The issue I am running into is that when I initiate the wipe command on the selected machine, the command goes through at first but when the machine reboots, it results in the "no boot disk found" error screen. I have tested this on several 22" 2019 Intel iMacs and they've all resulted in the same behavior. I have then had to manually restore the Mac via USB drive because the wiping process reverts the machines back to the original base OS. A retrace of my steps:Select Mac to be wiped > start wipe computer command > type in 6-digit wipe pin > observe command going to the Mac > type the same pin into the Mac > allow the Mac to reboot > Mac displays "no boot disk" errorHowever, I have had a 100% success rate with wiping 27" 2020 Intel iMacs. One thing I've noticed that is different about the 2020 iMacs is that they do not ask for the 6-dig

I’m new to Jamf development and have been learning a bit from our senior Jamf developer, who said one of our biggest complaints from end users was not knowing when an application had finished updating because it would never relaunch.So that’s what I set out to explore. My goal was to create and deploy a browser package that would automatically relaunch the browser post-update.Someone on the forums suggested using Jamf Pro > Computers > Content Management > Mac Apps > Jamf App Catalog, since there I would have the ability to select the option “Automatically open app after update.”Should mention here that this is different from the Packaging process we are using, which can be described as:Create a new Package when a new version of an app becomes availableUpdate the existing Patch Management policy to reflect the new version of the appDeploy to whatever groups we’ve scoped in the Patch Management policyFor my test:I created a Smart Group that contains just one of my test Macs.

Good afternoon.I am trying to set up Kerboros SSO in place of binding MacBooks to active directory and using mobile network accounts. This will be on laptops that only have a single user.  The only thing I want Kerboros to manage is to sync local account passwords to match a users active directory password. I got things working to the point where the passwords sync and it works pretty slick.The problem I am having is that window to sync their mac password and their Active directory password comes up on every login.  The user can cancel out of the window our type their two passwords again, but its a bit annoying that it comes up on every login. Is there a way to have this password sync check pop up maybe only monthly? Thank you, Doug

Is Jamf capable of reporting what monitors and external devices are connected to Macs? If not, is there a 3rd party app that is capable of this? Thanks!

Hi, communnity!I have a problem regarding app branding. I have set an icon for testing in my DEV instance to check that both app icon and self service banner were working fine. The issue has arrived after having implemented in PROD when we've noticed that Self Service app is not retrieving nor app icon or banner from Jamf Pro/ Settings/ Branding/ MacOS. After that we've been testing in DEV to change to a different icon to check if changes will applied but it's applying the old icon image who's been removed from settings. It's like the old image remain cached.Any clue on that?Thanks in advance,

I’ve passed the JAMF 200 and have been learning about JAMF from Jamf Catalog and also trying to get more hands on experience at work.I'm keen to learn more and aim to do JAMF 300 in 6 months time. Are there any good books for new Mac Admins? I’m keen to learn more about scripting and macOS so maybe a book on AppleScript? I’m open to any suggestions that may have helped others in their Mac Admin careers.

I've used command sudo jamf removemdmprofile and  sudo jamf removeframework to fix certificate expired issue, After that I renerolled my mac with Jamf with web. My mac received all configuration profiles, but self service applicaton and jamf binary can not be pushed on my mac. Anyone knows how to install that manually?

Hello all, Would anyone out there be able to provide me with a Script that on execution would delete all Users and/or User's home folder's with the exception of the user that is logged in and an option to specify specific (admin) users that need to stay on there? It is likely that my Macs have a User Home folders that don't have a local user. So if the Local user doesn't exist, it still should wipe the Home folders of anyone but the current logged in user (and the specified admin user(s). I would be tremendously gratefull!

Hi allSince iOS 17, students can change the background with the new "Focus" function. When will this be integrated into the Jamf restrictions?Thank and best RegardsPeter

Hi all, how would I change the password of the managed devices inside of Jamf, I know how to instruct them to change it from their end but im not sure how to change it from our end, how would I do this?

I've been trying to figure out a way to utilize this new service across our mac devices that still require LDAP user authentication. Has anyone else successfully got this to work?Right off the bat I cannot figure a simple solution of injecting the certificates Google requires to a client and authenticate directly. So I started digging into the idea of running open directory and using stunnel. I ran into some road blocks configuring the .conf file and getting it to communicate to google. Is this the way to go? Or is there is better solution I am not able to find online?

I am using a pretty generic version of the DEPNotify script, but I would like to be able to have it display a visual log of what applications have installed/failed all on the screen while the DEP enrollment is running so that techs have an easy way to verify all required apps have installed, without checking them one by one.  Does anyone have any advice or tips on how to best get started?  Scripting isn't my strongest area, but I generally can get by but this one has me scratching my head

Greetings!We have received a notice from campus network security team, saying that in coming months, internet inbound network traffic, where network traffic originated from public internet and to be received within campus networks, will be denied as default, but the outbound to the internet is allowedI am concerned the connection of our 60 iPads to JamfPro cloud, I read the document at https://learn.jamf.com/en-US/bundle/technical-articles/page/Permitting_InboundOutbound_Traffic_with_Jamf_Cloud.html . I'd like to clarify whether I need to ask the campus network team to add the IPs of "ap-northeast-1" under "Outbound Traffic from Jamf Cloud" onto their whitelists.Regards.Simon  

Hello everyone. We are no longer using Nudge and would like to uninstall it. Anyone have an idea on how to do this? I do not see an uninstall in the download of the apps. This needs to be pushed out via JAMF. 

Hi all,I have an issue where staff are taking student-configured laptops out of the carts and using them as their own teacher MacBooks. Student laptops aren't configured in the same way as staff laptops and I'd like to prevent this from happening.While I can limit who can sign in to the actual Jamf Connect app by OU, I can't figure out how to limit who can log in to the Connect OAuth login screen. Does anyone know how to do this?The only limit I can find in Google Cloud Console is domains, not groups, subdomains, or OUs.Thanks!

Hi-We currently have a pretty small library of apps provisioned from our purchasing volume that are meant to be scoped to specific computers. I have most of those apps configured to install automatically rather than via self service because each app is supposed to be installed on specific machines that really shouldn't ever be without them. The apps are scoped to the specific machines they are meant to appear on via static computer groups, but for some reason each machine in my fleet is being pestered with "App Install - [Mac App]" MDM commands that are marked "Pending - All licenses are in use or the license is not assigned yet." Obviously, it's not a huge deal since only the scoped machines appear to be getting the license from the VPP and installing the app, but I am confused why these commands are being sent to machines that are out of scope for the app? Is there anything I need to do other than make sure the scope is correct for each Mac App?