I am having issues updating a classic API script with the bearer token. Testing the script below I seem to have an issue somewhere as the variable will not propagate accordingly. I am getting "MBA-1" every time I run the script.   # Getting the computer's serial number to make the API call serialnumber=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}') # Decrypting the string above function DecryptString() { echo "${1}" | /usr/bin/openssl enc -md md5 -aes256 -d -a -A -S "${2}" -k "${3}" } string=$(DecryptString $EncryptedString $Salt $Passphrase) model=$(system_profiler SPHardwareDataType | grep "Model Identifier" | awk '{print $3}' | sed 's/[1-9].*$//') case $model in MacBookPro) short=MBS ;; MacBook) short=MB ;; MacBookAir) short=MBA ;; iMac) short=IMC ;; *) short=UNK ;; esac # A basic API Call that's getting information for the computer. # computerxml=$(curl -s -H “Authorization: Bearer ${token}” -H ${jamfurl}/JSSRes

Each week we go through and find the machines that have a 'Filevault 2 Individual Key Validation' of 'Unknown' and reach out to those users to resolve (via check in, reboot, etc). My confusion is why they validations becomes 'Unknown'. I imaged a machine recently and the validation was 'Valid' and everything was fine, but after turning it off for a few days it later became 'Unknown'. What causes Jamf to no longer recognize the key is valid? The machine was imaged and had a valid key then only a day or two later it became 'Unknown'.Did it try to rotate itself and the new key just needs to be validated by Jamf? If that's the case, how can we change the rotation frequency?Does it regularly need to check-in with Jamf to validate the key even though it hasn't changed? If so, how can we tell it to validate the key less frequently?We have a smart group enabled and use the 'Issue new FV key' policy on it but we aren't sure if that's helping at allhttps://learn.jamf.com/bundle/jamf-pro-doc

I am seeing this issue with Macs running Sonoma and Connect 2.27.0. I am not sure if Connect is actually causing this but it is currently my prime suspect.What is happening is this. The Mac boots up, asks for a PW to decrypt the drive and then opens to the Finder no problem. I can also log in using the Local Login option. If I then log out, it brings up Connect and I can log back in no problem.But (you knew this was coming) if I lock the screen or put the machine to sleep from the Finder, when it wakes up and asks for a password, it will not accept whatever I enter. It acts like I'm entering the wrong password and I can't get past this and must reboot the machine to get back in.Anyone else seeing this? I have't seen it on any of my machines before Sonoma.

When enrolling a computer I have the need to automatically add the device to an AD security group after the AD bind. I attempted to use dseditgroup for this but it does not seem to recognize computers (even though there is a "-t computer" option). Has anyone done this or know of a way to automate this via a script as part of the enrollment process? Thanks.

Hello All,In our environment the Loggen in User name is in firstname.lastname format and I am trying to figure out how to extract the first name with a script. Till now what I have is below #!/bin/bash#gets current logged in usergetUser=$(ls -l /dev/console | awk '{ print $3 }')Echo $getUser#gets namedfirstName=$(finger -s $getUser | head -2 | tail -n1 | awk '{print toupper($2)}')computerName="ABCD-ABM-"$firstName"-MacBook"Echo $computerName#set all the name in all the placesscutil --set ComputerName "$computerName"scutil --set LocalHostName "$computerName"scutil --set HostName "$computerName" sudo Jamf reconAnd the result I am getting is - ABCD-ABM-LASTNAME-MacBook I am not good with scripting however what I understand is the 'firstName' is unable to fetch first name from firstname.lastname however same works good when the name is like firstname lastname. 

Hi,  How can I create new admin user using command line and user home will be delete automatically when remove from System Preferences?I successfully create new admin user using the following command but when I delete this user from system preferences the home folder will not delete automatically compare to users create manually from system preferences.Any advice?Thank yousudo sysadminctl -addUser Admin -fullName "Admin" -password admin123 -home /Users/admin -shell /bin/zsh -admin

Heard today that there is no option for Virtual Attendance at JNUC 2024. ------------------------------------------------------------------------- EDIT 02/15/24 - It appears that recorded sessions will be made available in November. Information regarding this was buried in the FAQ for the event.  Still a bummer though.    The original message below may be ignored.  ------------------------------------------------------------------------- This development saddens me, and I'm sure it will make others sad as well. Charge us more to attend virtually if you must to make things happen this year. Many customers cannot attend live for whatever reason. Some may not be able to get hotel rooms to make the stay, others may not be able to break away from work. Having the virtual option keeps us all in the loop, without it, it is like being on the outside of a movie theater during a major summer release.     Don't shut out your customers Jamf. Be more inclusive tha

When I filter a list of computers in Jamf Pro there is a column heading that says BOOT FULL. What does this mean? Thanks,Jim

I have been able to successfully add dock items but I would like to remove several default items from student users docks.  Do I need to add them to the Dock Items and then delete them?  I don't see any information on how to remove default items like facetime, etc. I am new to jamf and have new macs to set up for our classroom labs.  Any help is appreciated. 

I updated 4 MacBook's and a Studio that where still running macOS 12 about 3 weeks ago, and JAMF still show them running the old OS how can i force the full scan of the systems

Hello !First of all, please excuse me if the questions are found somewhere else, but I can't find clearly the informations needed. Please note that I'm not familiar with API.As the basic authentication will be soon removed, I already disabled it in Jamf Pro. I checked all my scripts and it seems that it's working fine. However, I have some questions:1) I read that classic API uses JSSResource as part of the URI. And I have this example to get the department of a computer. I would like to change that so I can use the api/v1 URI but I can't find the exact path. Actually, I get the department this way:department=$(curl -H "Accept: application/xml" --header "Authorization: Bearer ${token}" "${jssURL}JSSResource/computers/serialnumber/${macSerial}" | xmllint --xpath "string (//computer/location/department)" -)How should I change this ? And first of all, is it still possible to do this way ?2) I use keywords in the position and room fields of a computer's inventory. It allows me to put those

The new user interface for devices remembers the filter and even the selected iPads even if the filter is changed.  I accidentally erased 20 devices inadvertently before I realized what I was doing.  The previous interface did not behave this way.  Could there be some sort of UI toggle that disables this functionality?  I'd hate to forget what I had selected and erase or do some other function before it's too late. After the fact I did see there is a warning that says: "After filter, some selected devices may not display in the table.  Your previously selected devices will still be scoped."  I'd rather this not be the case. I always want to see what my scope is.  At the very least I should be able to deselect items that are in scope.  At least in Jamf Pro I can clear the filter and sort by selected to unselect items.  

Hello,I need to rename the computers using the Full Name that is set in User and Location.I have a script that renames using the login user but the name I need is the Full Name in Jamf.Any idea how to retrieve the Full Name ?thanks for your help.

Hi all. I have been tasked with changing the background image on the login window to reflect new company branding. I am looking for confirmation to see if anyone has been able to successfully do this in Monterey, and if so, how as I believe it is a protected system file and is not possible with FileVault enabled.I started testing with this older article Setting Screensaver, Lock Screen, and FileVault screen to same image (Mojave) as well as several posts found on the Apple community boards with no success. I am hoping to avoid disabling FileVault on hundreds of machines simply to change an image.Any guidance you can provide would be appreciated.

My organisation has recently procured Jamf, and it's a majority Windows org.I'm quite new to Jamf, but familiar with MDMs, and most of my day is spent using a Windows machine. We have a number of applications that we have API access to, and I've been successful in setting up API access within powershell using client credentials, and able to make basic GET calls, and some simple POST commands - such as creating departments, or categories. I have a list of departments I need to create, and want to also create smart groups for each of those departments, pulling in computers where the department is set to a specific value.I've created a smart group manually and able to GET the configuration options in an API output.My familiarity with API is using JSON for the POST calls, but looking at the GET output, it's an XML format, in a single string (weird to me, but maybe that's shell standard?)However, I cannot get it to POST and create a group, when I modify the specific options from t

Other than deleting them, does anybody know if there is an alternative method to unmanaging devices that are shown as managed that are no longer contactable (Remove MDM Profile -  will not work here) in JAMF?Reason is we would like to keep the inventory.Thanks 

Hello all,I've done a search for this but haven't quite found the info I'm after. Basically we are looking to flip the switch on federated authentication via Google for our Managed Apple IDs. We have ~70 people who are currently using their work email address for their Apple ID. Just want to know what their experience will be when we flip that switch. Will it just be a case of re-authenticating with their Google details or will it be more painful? &#x1f605Any info will be greatly appreciated!

I'm pretty sure I know the answer, but can't find the statement in any documentation.  Is it possible to pull attributes when you have Cloud Identity Provider enabled for Azure in via extension attributes?  If so, what attributes are available?

Hello, Our organization would like to set the "Download External Images" to "Only in Messages from my Contacts" which we were able to do with ease. However, we want to add a few known emails to everyones contacts or at least to the "Junk - Safe Senders" list so this change doesn't cause issues with our users. Is there a way to do this?

Hello all,I have a two-part question... Has anyone ever installed the Datadog agent into JamfPro so it can be accessed through SelfService? And do I need to get a script from Datadog to get it configured so it can be installed on the Mac using SelfService?I'm planning to get the free trial of Datadog, but I want to see if this can be done since the trial is only for 14 days. I want to be able to show my management that Datadog works and can be available for all of our users using SelfService. Thanks for any feedback :) 

Hi everyone. I am using Composer to build packages a different MDM and really enjoying it.One question I have- am I missing on updates/upgrades? How do I check if a new version is available? Is it paid/free? Where to look for info? Couldn't find any useful info on the product page itself. Right now I have 10.40.0-[lots of digits].

Have a Mac that's lost contact with Jamf...Trying to update the MDM profile with "sudo profiles renew -type enrollment" but end up with a "different server URL" error.  (I guess the prestage changed)sudo jamf removemdmprofile didn't work - maybe because the machine has Ventura?When I ran jamf policy I got "device signature error"After running jamf removeframework the "bad" MDM profile persists. ...  Is the only solution to wipe the device or have I missed something?

We have limited number of licenses for MainStage, just enough for the number of teachers. We're now replacing their ageing Macbooks with newer ones but they can't install the app using self-service because there are no free licenses. How have others worked around this (without purchasing extra licenses)? I have created a script that deletes the app and do a recon (the record for the device in Jamf no longer shows the app as installed in inventory) but the license is not released (Mac Apps still show all licenses are used). Is there a delay when this gets updated or do I really have to wipe the old device before the record is updated?

Hello, I would like to configure the "Wait to send Messages for -+ " under the "Undo Send" to 20 seconds for all MacBook Outlook clients through JAMF Pro. Can this be done?

Hi, When trying to download Self Service from the JSS (JAMF cloud), I am met with the above error message. I have performed this ask previously with on premise solutions and had no problem - but it seems unless I automatically install it (which I don't want to do as it will install for everyone) I cannot use the app and test out the functionality. Is there a way around this?