Hello Teams, Kindly help me with a script to remove admin right on some of our MAC managed by JAMF.

Hi there,we are trying to set up the Jamf-Proxy for Venafi PKI and we are running into issues. We set up everything according to the manual. From my understanding Jamf-Cloud is getting connected to the Proxy as I can see a request on the Proxy itself. There is a POST command in the direction of the Venafi PKI which then is stopped with an error : x509: certificate signed by unknown authority.Also we are able to connect to the Venafi PKI from the Proxy via API. Has anyone ever seen the same error and knows what we might have to configure? 

Hello Experts,  I am trying to run the subject scriptJAMF ECOSYSTEMI have been struggling since yesterday to run the script and getting the following error even my username and password are correctUser Input is NOT OK, we cannot connect to JAMF API and now will EXIT! status_code: 401Could you please help me out what I am doing mistake?

I need to pull a report of all MAC addresses for the computers in my environment and the built-in reporting only can display the Primary MAC address. From other posts it seems the only way is with Extension Attributes but the few scripts I've found (https://community.jamf.com/t5/jamf-pro/how-to-customize-what-gets-inventory-for-primary-mac-address-and/m-p/193541#M182332) don't return any results when creating extension attributes. Does anyone have any ideas on how I can grab this info?Thanks!

So I need to renew the VPP certificate for our cloud server and we don't have access to the apple id last year's was created with.  I tried uploading one from the main apple id that is admin for Apple School Manager but it says it doesn't match.I know you can add another VPP token, do i just make a new one?  Will i have to reassign all the app licenses?Suggestions? Thoughts? Prayers?

Good morning all!I just had a couple of questions.I have been task to add hardening to the Macs. It occurred to me that it would be easier for the users and to me, for troubleshooting purposes, to deploy 14 rules per week and see how the users get affected.so at first I starting typing the rules that shows under the profile then going to the files and adding the configs one rule at the time. Now, reread the how to use the tool and the only part that it mentioned to do manually if I use the Jamf Pro Upload is to add the Json, which I did. However, Im seeing that the Json is only for exceptions.I'm a bit lost if I have to also do a new policy and runt he script that is uploaded.?Or by using only the profile and allocating it to the machines is enough and I can ignore the Json unless I have to do an exception?I would appreciate if someone can assist me shed some light on the question.  

Hello,Looking for a way to disable end users from changed the Name field on MacBooks using Ventura.System Settings /  General / About .....NameI set the name for my student machines and don't want them changing it.

I have noticed, when user start Microsoft teams screenshare for 1st time it asks for 'screen & System Audio Recording' permissionWarning box shows message as below"Microsoft Teams (work or school)" would like to record this computer's screen and audio.grant access to this application in privacy and Security settings, located in system settings.As a user I am allowed to give this necessary permission, is this can be automated, so users don't have to perform additional step in 'privacy and Security settings' while they are on call?

I'm working on a client setup right now where the computer goes through ADE/DEP and a tech logs in as the administrator account. That kicks off the DEPNotify Helper script and that workflow. This includes the naming of the computer which, in turn, scopes the FileVault Configuration Profile to the computer. It also includes binding the computer to AD. At this point, if I check fdesetup for a list of enabled users, I just get the admin account. So far, so good. After that the admin logs out (but doesn't reboot or shut down or other wise go back to the FileVault lock screen) and a staff person logs in which creates the mobile account. Now if I run fdesetup I see the admin account and the staff account are both enabled. Jamf confirms the same thing. Both accounts are enabled and FileVault is turned on at this point. However... if I reboot, only the admin account is visible on the lock screen. If I don't reboot, but instead log in as either the staff account or the admin account again and j

We have an annual PCI audit that we have to run on randomly selected Macs once a year. After the Macs have been selected, I scope those Macs to a policy that runs the script below. Everything works up to the point of uploading the resulting .zip file to the computer record on the Jamf server. I keep getting a "curl: (26) Failed to open/read local data from file/application" error. Unfortunately my curl skills are weak and I can't figure out what I'm doing wrong. I think I'm doing something wrong with the -F option or I'm not using the variables correctly in the curl command (line 91).#!/bin/bash # this script s used to collect a full system profiler dump in txt format # as well as user accounts, groups, crowdstrike info, open ports # it will put all the files in /Library/company/PCI/<computername>/ # for later retrieval and submission for PCI audit # Set variables for the JAMF API jamf_url="https://company.jamfcloud.com" jamf_user="API-only-account" jamf_password="password_here

I'm kind of confused here about this version of FileZilla in Jamf.  I 'purchased' about 300 "FileZilla Pro - FTP and Cloud" licenses. I created the available FileZilla app in Self Service from the Computers - Mac Apps - App Store. It installed fine and works, as I transferred files just fine. But I don't see anywhere that it is restricted nor where one would enter a subscription, it did not notify me anywhere that it is a trial.  Does it act like the free app?  It says it is a free app in the Jamf setup (see picture).  In the app blurb it says "Subscribe to FileZilla Pro to begin your 7 days free trial." If I don't subscribe does it just act like the free app? I did build a FileZilla package and had the free app available, but wanted something that would update the app, as many of the Jamf Mac apps do.  Any thoughts are appreciated!

Help! We're migrating to Jamf Connect from AD, and we've done successful testing and migrations and I've been setting up user accounts with no issues. But all of a sudden today when I went to change someone's password using the menu bar agent, I got this error: "Unable to reach any KDC in realm xxxxxxx, tried 10 KDCs"Nothing has changed in our infrastructure that I am aware of; does anyone know what would cause this? I am freaking out a little.

hi all,anyone found a way to disable/lock itunes or parts of it? especially files transfer.

One of our App dev teams is looking to use AWS EC2 mac for their pipeline.  Our security department wants this managed like any other Mac in our environment.  I know very little about AWS and these instances.  Anyone got step by step guide or suggestions?

I have a requirement were wanted to hide or uninstall below MacOS default application i.e. (Freeform, Mail, Messages, Music, TV, Stocks, Chess)Is there any way I can achieve this?

I have JAMF pro cloud instance and when I enroll new device using PreStage Enrollment, all my 12 application installations show ''background items added" notification on the right side of mac devices. can we mute these notifications?

Does anyone have a good method to pull al list of all applications across all machines? We have Jamf Cloud so I am not sure if I can run SQL queries directly against the DB. Preferably something I can get to Excel so I can filter out all the Windows applications on VMs.

Hello,I am running into a strange issue with the wipe computer management command on what seems to be specific 22" iMac models. The issue I am running into is that when I initiate the wipe command on the selected machine, the command goes through at first but when the machine reboots, it results in the "no boot disk found" error screen. I have tested this on several 22" 2019 Intel iMacs and they've all resulted in the same behavior. I have then had to manually restore the Mac via USB drive because the wiping process reverts the machines back to the original base OS. A retrace of my steps:Select Mac to be wiped > start wipe computer command > type in 6-digit wipe pin > observe command going to the Mac > type the same pin into the Mac > allow the Mac to reboot > Mac displays "no boot disk" errorHowever, I have had a 100% success rate with wiping 27" 2020 Intel iMacs. One thing I've noticed that is different about the 2020 iMacs is that they do not ask for the 6-dig

I’m new to Jamf development and have been learning a bit from our senior Jamf developer, who said one of our biggest complaints from end users was not knowing when an application had finished updating because it would never relaunch.So that’s what I set out to explore. My goal was to create and deploy a browser package that would automatically relaunch the browser post-update.Someone on the forums suggested using Jamf Pro > Computers > Content Management > Mac Apps > Jamf App Catalog, since there I would have the ability to select the option “Automatically open app after update.”Should mention here that this is different from the Packaging process we are using, which can be described as:Create a new Package when a new version of an app becomes availableUpdate the existing Patch Management policy to reflect the new version of the appDeploy to whatever groups we’ve scoped in the Patch Management policyFor my test:I created a Smart Group that contains just one of my test Macs.

Good afternoon.I am trying to set up Kerboros SSO in place of binding MacBooks to active directory and using mobile network accounts. This will be on laptops that only have a single user.  The only thing I want Kerboros to manage is to sync local account passwords to match a users active directory password. I got things working to the point where the passwords sync and it works pretty slick.The problem I am having is that window to sync their mac password and their Active directory password comes up on every login.  The user can cancel out of the window our type their two passwords again, but its a bit annoying that it comes up on every login. Is there a way to have this password sync check pop up maybe only monthly? Thank you, Doug

Is Jamf capable of reporting what monitors and external devices are connected to Macs? If not, is there a 3rd party app that is capable of this? Thanks!

Hi, communnity!I have a problem regarding app branding. I have set an icon for testing in my DEV instance to check that both app icon and self service banner were working fine. The issue has arrived after having implemented in PROD when we've noticed that Self Service app is not retrieving nor app icon or banner from Jamf Pro/ Settings/ Branding/ MacOS. After that we've been testing in DEV to change to a different icon to check if changes will applied but it's applying the old icon image who's been removed from settings. It's like the old image remain cached.Any clue on that?Thanks in advance,

I’ve passed the JAMF 200 and have been learning about JAMF from Jamf Catalog and also trying to get more hands on experience at work.I'm keen to learn more and aim to do JAMF 300 in 6 months time. Are there any good books for new Mac Admins? I’m keen to learn more about scripting and macOS so maybe a book on AppleScript? I’m open to any suggestions that may have helped others in their Mac Admin careers.

I've used command sudo jamf removemdmprofile and  sudo jamf removeframework to fix certificate expired issue, After that I renerolled my mac with Jamf with web. My mac received all configuration profiles, but self service applicaton and jamf binary can not be pushed on my mac. Anyone knows how to install that manually?

Hello all, Would anyone out there be able to provide me with a Script that on execution would delete all Users and/or User's home folder's with the exception of the user that is logged in and an option to specify specific (admin) users that need to stay on there? It is likely that my Macs have a User Home folders that don't have a local user. So if the Local user doesn't exist, it still should wipe the Home folders of anyone but the current logged in user (and the specified admin user(s). I would be tremendously gratefull!