Hi All,I need to disable most of the "More Gestures" (third tab of System Pref>Trackpad ) for MN Online Assessments.I have tried a custom Config Profile/user level which I created by uploading the trackpad plist, but while I was able to save it, it would not deploy.The rest of my profiles appear to be working, and the test computer is receiving all other expected profiles.MCX Settings in this area specifically say 10.6 onlySo I'm trying to package using Composer>Monitor File System ChangesThe files it appears to effect are~/Library/Preferences/ByHost/.GlobalPreferences.xxxxxxxx.plist~/Library/Preferences/com.apple.driver.AppleBluetoothMultitouch.trackpad.plist~/Library/Preferences/.GlobalPreferences.plist I have tried packaging and deploying every combination of these filesDeploy via login policy with: FEU, FUT, Fix ByHost Files The settings are not applying on my target computer (and not after logging out and back in) On my package creator computer with all de

Hi all,Anyone have any skills with deploying NinjaOne to Macs through Jamf?I’m having some troubles deploying Ninja to my environment in Jamf pro. I’m deploying the pkg using a policy. I pulled the pkg direct from my Ninja admin site using their method of acquiring the necessary file. I’m also deploying a config file to allow the necessary streamer application to run in the background and quiet install (see screenshot for config.) Every time I deploy through Jamf, the NC Streamer file does not go to the device, and the device does not enter my Ninja console. When I manually install the same pkg without Jamf, the NC Streamer installs fine and the device is added as a local machine. I’m trying to figure out where I’m going wrong with my install and why this is isn’t working through Jamf. It’s just a simple PKG in a policy and a small config file.Please let me know if anyone has suggestions for me or if I need to provide more info.I have contacted NInja support already. They claim it’s a

here's my problem:-a user tries to change his/her password and it fails because the mac lost trust with AD, I'm able to send configuration profiles, do a "sudo jamf recon" works fine, except the mac is not bound, even though in Directory Utility it shows its bound. -after unbinding and rebinding everything works fine.(fyi: macs are on 10.11.6 and 10.12.x with JSS: 9.96) I'm trying to avoid having to do that manually.How can I do that using a script if a mac is actually bound to AD? thank you for your help.

Does anybody know what could be wrong? I don't see Transfer to a work account for one Apple ID account, only Keep as a personal account. I had read https://support.apple.com/en-gb/102159 and checked every option. Once I saw Transfer to a work account, but I was told to update my Mac to the latest OS. After that, I had tried many times without success. It's giving only one option: Keep as a personal account. It wouldn't be a big issue, but the problem is that this Apple ID is used for an APN certificate.  

Hey everyone!I'm reaching out for guidance on a complex issue I've encountered with integrating Jamf Pro and Microsoft Entra ID for SSO, specifically regarding user attribute mappings and device enrollment processes. Despite a successful setup of Single Sign-On and Cloud Identity Providers for new macOS device enrollments with corporate credentials, I've hit a stumbling block with more detailed configurations.Core Issues:User Attribute Mappings: My goal is to map the User Name attribute to the onPremisesSamAccountName (essentially, the UPN without @domain.com) for a more intuitive username representation. Additionally, I aim to map Phone attributes to mobilePhone and Position to jobTitle, enhancing user profile completeness within our system.Device Enrollment Customization: During the Setup Assistant phase of Automatic Device Enrollment (via ABM), I intend to pre-fill the primary account information with the device owner's details. However, the system defaults to using the UPN/email fo

Hello , Is there any way to block all apps except the chosen ones? I saw on Apple developer that whitelisted app were deprecated whitelistedAppBundleIDs[string],but solution with allowListedAppBundleIDs didn't work for me. In my case I need to push policy to block everything except preinstalled apps and 5 chosen by IT. 

Howdy all, I am facing an issue that I can’t seem to solve with running Microsoft AutoUpdate via script from Jamf to keep our mac office apps updated. I have had this set up for several years and it had been working beautifully as a hands off solution. I am not sure exactly when it started failing, I recently noticed the problem and started digging into it. I am wondering if anyone is facing the same problem, or has advice on what to try.The setup is fairly simple, a policy that runs against a smart group of any macs with office apps that are not the latest version once a day. It runs a script to use the MAU command line msupdate to pull and install any available updates.Script is below, it only worked under user context originally so that is why it is set that way.The error I am seeing on every run now is related to the XPC connection, this happens on all clients no matter what, -reinstalled MAU with latest version, brand new mac build with latest install etc.  I have the original PPP

I am working on a script to automate naming, renaming, and name enforcement for our mobile devices. The script uses an API call to send the rename command to devices that don't meet our naming convention. I use this call all the time. It works perfectly from my account with full admin rights. However, when I run the script with my API management account which has limited rights the command fails with the following message: <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Unauthorized</p> <p>The request requires user authentication</p> <p>You can get technical details <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2">here</a>.<br> Please continue your visit at our <a href="/">home page</a>. </p> </body> </html>I have  Send Mobile Device

Hello,We have an LDAP server (Active Directory) configured on our JSS.We will move to Azure AD.For this, we have configured "Cloud Identity Providers" to integrate with our Azure AD.Everything seems ok with tests. We can query for groups, users and get "true" for membershipWe are trying to scope and limit policies (Self Service) to group memberships from AzureAD (via Cloud Identity Provider). I can search for the group and add it to the Limitations section of the policies.But when I try to test the policies on computers, the policies are not available when users connect to Self Service using the Azure AD accounts in the target groups.When we try with Active Directory groups, that works well but not with Azure AD groups.Do you know if this is normal? Can't scopes with Azure AD groups?We have Jamf Cloud 10.33.Thank you for your help

Hey All,Running into an issue, I assume it’s simple, but I’m blanking as to what I am doing wrong. #!/bin/zsh --no-rcsclient_id="REMOVED"client_secret="REMOVED"url="https://REMOVED"##Gets Access TokengetAccessToken() { response=$(curl --silent --location --request POST "${url}/api/oauth/token" \ --header "Content-Type: application/x-www-form-urlencoded" \ --data-urlencode "client_id=${client_id}" \ --data-urlencode "grant_type=client_credentials" \ --data-urlencode "client_secret=${client_secret}") access_token=$(echo "$response" | plutil -extract access_token raw -) token_expires_in=$(echo "$response" | plutil -extract expires_in raw -) token_expiration_epoch=$(($current_epoch + $token_expires_in - 1))}checkTokenExpiration() { current_epoch=$(date +%s) if [[ token_expiration_epoch -ge current_epoch ]] then echo "Token valid until the following epoch time: " "$token_expiration_epoch" else echo "No valid token available, getting new token" getAccessToken fi}# I run the function h

Hi,I want to migrate my on prem installation of Jamf Pro to a clustered environment. However I cannot find many resources about that topic. I could only find this Video on the training catalogue: https://trainingcatalog.jamf.com/cluster-jamf-pro-instances/251345Is there any written documentation on the topic? Or something made by the community?Kind regards

Hi Guys! Is there a simple, and effective way to change a hostname of a joined Mac via Jamf? We have a little bit too much "David's MacBook Air" going on :)

So with the concern of data being send to chatgpt, how do we disable Apple Intelligence and chatGPT integration using JamfPro (Cloud) in macOS 15.1?

Can someone help me with a script or payload any option to enable screensharing on specific app like Teams / Slack or Zoom - Automatically from Jamf or Mosyle- we are using Mosyle for managing MAC'sNote: User: With out manually clicking on it.If yes, please help me with the same.

Hey All,Is it possible to change the timeout on a Jamf Cloud console session?We're on Jamf Cloud 10.42 using SSO to login to the console, if that matters.The main issue (among others), is that when performing a GSX lookup, the web session usually times out before the look up finishes.We have ~1400 workstations which takes at least 10-15 minutes to update, but more often than not results in a session timeout.  I've tried creating a SMART group where there is no Warranty info for the device, but the only options are Warranty Expiration is before/after or within a certain # of days.It does seem as though if I open a new JSS tab in the same browser window and work in there while the GSX lookup is ongoing in the other tab, that the GSX lookup session will not timeout.I did check the SSO settings, but it only has a Token expiration time, which is not what I'm looking for. Thanks for any thoughts.Phil

Hello everyone, teachers use the Managed Apple ID but cannot download applications in the AppStore, the only apps that can be downloaded are the same as those from the selservice. Do you know a solution so that teachers managed Apple IDs have more possibilities? I use JamfPro, Thank you

Hello Jamf Nation, I have been attempting to deploy the latest macOS 15.6 update to the pending devices. However, each time I use the Software Updates feature to update the version, I encounter the following error: “UnableToFindUpdatesAndOutOfRetries”. As a result, the devices do not receive the update.Do you have any suggestions or alternative methods I can try?

I have one user who cannot log in through the LDAPS login at initial setup. No other user has this issue. Their username can be queried through the LDAPS search test and each field populates correctly. They have no issues with other platforms that use LDAPS. I have changed their password and it has made no difference. Are there restrictions that can be placed on a user that I am missing?

Hi, I’m trying to manage our recurring license limit in Jamf School since we’ve just renewed a couple days ago. I’ve already released the devices from our organization and they don’t even show up in the Inventory > Devices menu anymore. When I select them under the License Assignment menu, I only get the option to “Assign a Perpetual License” and there’s no option to remove a recurring license: Thank you in advance.

Hi , I tried all the topics on jamf and internet , but didn’t work , and it seems there is a missed step related to PList i think. the steps i did are as per below:1- from computers , select configuration profiles , add new2- scope = add computer you want, level is computer level.3- Application & custom Settings : add External Application and name it, application domain is com.microsoft.Egde , Edit Schema and add the JSON as below [  {    "toplevel_name": "Managed Favourites"  },  {    "url": " https://keepersecurity.eu/vault/ ",    "name": "Keeper"  }]that didn’t take effect , but it has been applied according to JAMF logs.there is something missed ,specially i noticed the Plist preview didn’t change with JSON added as above 

Hello,With the new version of Jamf Connect 2.45, I noticed an issue with the login window.The login banner takes up the full width of the screen.Is there a way to reduce it to the size of the EntraID login window?

In this scenario, which would you use? • You're starting a new company in 2025 • Fresh Jamf Pro build • Fresh Apple Business Manager   Do you use DEP Notify, Jamf Setup Manager, or something else? https://www.jamf.com/blog/apple-device-enrollment-jamf-setup-manager/

Greetings everyone!I am working with the Jamf Pro API and cannot for the life of me figure out how to obtain a list of every title which is available in the Jamf App Catalog, even if I am not currently deploying it.I have experimented with several existing endpoints including /api/v2/patch-software-title-configurations, but only ever seem to get titles which are currently being deployed or patched.What I am trying to get is the FULL list of apps which would be present in Computers → MacApps → Jamf App Catalog → New → Jamf App Catalog, which (as of this posting) lists 265 titles.In Context, I am creating a Python script to acquire, analyse, normalize and update data which resides across a number of data sets (Excel, SQL etc). When we are deploying a new app, I effectively want to know if that title is available in the Jamf App Catalog.If someone could point me to the correct Classic or Jamf Pro API endpoint, it would be much appreciated! Thank you all in advance!

Is anyone else experiencing issues with the "Lock Desktop Picture" configuration with MacOS 15? I recently updated our fleet from 14 to 15.5 and it seems to have broken our branded desktop picture. Not only has it reset the wallpaper to the default, but it has also broken the functionality setting. I am also open to just making a policy that sets and locks the desktop if that is a better process.   

I need to force install a Chrome Extension.I have looked in Jamf Nation for solution but latest ones were in 2017 and they currently do not work (from my testing).Has anyone got them to work with Monterey?