As of macOS Sonoma 14.4 using "/System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport --getinfo" no longer returns info about the active Wi-Fi connection. If you want to collect the active SSID for macOS 14.4 or later you can use the wdutil tool and here's an EA to do that:    #!/bin/sh # EA - ActiveSSID # # Note: Using wdutil instead of networksetup so I don't need to know what # interface is Wi-Fi # Returns the currently active SSID activeSSID=$(/usr/bin/wdutil info | /usr/bin/awk '/SSID :/ { print $NF }') echo "<result>$activeSSID</result>"  

I'm working on a new post install script for Nudge. Delivering Nudge settings using a profile has not been as reliable as I would like it to be. I found Dan Snelson's Nudge post install script (https://github.com/dan-snelson/Nudge-Post-install/wiki) and it has been a good starting point. Its command to load the launch agent doesn't work. My understanding is that we need to use Launchctl bootstrap instead of Launchctl load as we did with older versions of macOS. I have other scripts that load launch daemons that use bootstrap/bootout. These work well. Since a launch agent loads when a user logs in, it's different. What is the proper command to load a launch agent using a script deployed by Jamf Pro? If I can get this one thing to work, it pretty much wraps up getting this done. 

Hello, So I'm circling back to this as last summer I have been having the same issue I am experiencing now. Which is Mac Apps both App Store and Jamf Catalog do not work at all. I have created a test with Loading the 2024 Creative Cloud suite put my test mac into a group and made sure mac was online, connected, and open. I send off the App to automatically install but absolutely nothing happens. I tried with a couple macs I have here to test. Nothing works, I've checked our firewalls to make sure nothing in there is blocking anything, and nothing. I dont know if someone knows some way of better troubleshooting or finding out where in the process of software install it is. We need to do a mass upgrade this upcoming weeks it would be nice to use this feature instead of making bunch of profiles and scripts.   

Hello dear Community,overnight the entire login screen disappeared two managed silicon Macs, MacOS 14.5.The login screen only shows a guest account, which is not available either because the FileVault is actived.I was able to access the hard drive using Target Mode and the data and user folders are still there. Has this ever happened to anyone? What could be the causes? I would be grateful for any tips.

For those that have implemented Memcached for your on-prem environments, what kind of hardware specs did you give your server? Looking at the latest release notes, I saw that Ehcache has been deprecated and Memcached is now required.

Microsoft has released Company Portal 5.2401.2 with support for Platform SSO.Users with SSO profiles receive a pop-up requesting registration with Azure Account to synchronize the local Mac password.Has anyone had this experience?

Hi all  i tried all to deploy the 1 password Google Chrome extension but it is not working did anybody do that and able help for me 

This might show up twice due to login weirdnesses, if it does I apologize...I'm creating a new prestage enrollment, and I have around 10 devices I want to assign.  I have individually found the serial numbers one at a time which is tedious but doable and checked the assign box, but in the interest of verifying that the correct machines (and only the correct machines) are assigned, I want to see only the assigned machines, not the several hundred "Not Assigned" ones.  the "Filter Results" box will let me filter for "Assigned" but that still shows me all the "Not Assigned" ones as well - I cannot figure out or find online the correct syntax to exclude the "Not Assigned".

Is anyone else's Tomcat settings in Jamf Pro Server Tools broken after upgrading to 11.3 on On-Prem Windows Server?Webserver is running just fine but Jamf Pro Server Tools show it as "not running" and throwing an error when trying to start it.Can control Tomcat through net start/stop tomcat9 or the tomcat9w.exe without any issue.As per warning:As a result of PI116512, new installations and upgrades using the installers will fail if Java 21 is installed. Mitigation: Uninstall Java 21 and reinstall Java 11, or manually install Jamf Pro.we stayed on Java 11.Just curious if this is something with our install or a general update issue?Thanks!

Hi All, may I know is there any script to know what the value for default browser. In the environment there are multiple browsers using, each one sited their own default browser. Need to know what is the default browser seted each Mac.thanks in advace 

Trying to create a script (python or bash) to push out in a policy via Jamf Pro to delete Google Chrome.app from a system. I've tried various scripts online (new to scripting sorry) and everything fails. I'm currently testing this script and trying to run it manually using bash chrome-uninstall.sh but it keeps saying command not found. What am I doing wrong? #!/bin/bash # Remove Chrome rm -rf /Applications/Google Chrome.app/ exit 0

New Jamf Admin here I have recently pushed a Firefox update for version 126.0.1 and am getting a lot of reports that Firefox doesn't open back up after updating. The app refuses to open and the only fix is reinstalling the app again. I'm not pushing the app with the configuration profile option selected. Does anyone know why this would be happening?

Looking for ways to push OS updates to users i tried nudge way to hard to setup for a novice user, so i tried the JAMF Pro software update and i get the ScheduleOSUpdate Missing 'ProductKey' error every time i try a Minor or Major update any other way to push the updates? or fix this error

Hello Jamf Nation, I am trying to implement the nist macos security compliance project into our organization devices, https://github.com/usnistgov/macos_security .  I have read through the wiki and it keeps saying in each page that: We recommend working off of one of the OS branches, rather than the main branch I am wondering how can i generate the script and configuration profiles and put them in jamf while we have different mac os versions, i.e. ventura, monterey, sonama. I hope i am expressing my self clear. Please any guidance on that?  Thank you, 

Is there a script to set up the home page for Microsoft Edge ?

Looking for some help with a script issue please.I've written a script based on Charle Edge's https://github.com/jamf/MakeMeAnAdmin to use in a Cyber Essentials Mac build. Whilst the original script temporarily elevated the users privileges I want to create a temporary separate admin account.Everything works well apart from the final stage (lines 50-65, labelled "# Write a script for the launch daemon to run to delete the temporary admin account if it exists, delete the launch daemon then provide feedback to user.") to cleanup the admin account. This part of the script does work when run manually so I'm thinking it's an issue with permissions and/or ownership.Any advice would be appreciated. Thanks#!/bin/bash ############################################### # "I need admin". # John Moore, April 2024. # Based on "MakeMeAnAdmin.sh" by Charles Edge, see https://github.com/jamf/MakeMeAnAdmin. # This Jamf Self Service script will provide the user with access to a separate admin ac

Hi,for some time now the Management Commands on my Jamf Pro instance have not been working. They are staying on the "Pending" status. This also affects the installation of Mac Apps (the ones with the VPP licenses). As far as I can tell all of my devices are affected? Is there anything I can do about this?Kind regards

Good morning!Relatively new and inexperienced MAC admin, so please be gentle and feel free to talk to me like you're talking to a 5th grader!In troubleshooting MDM communication with a large number of our Macs, the support tech I was working with suggested adding some EA's to assist in seeing what was going on. It definitely helped to identify and point us to a resolution, but one of them doesn't appear to be working the way I think it should? Note, that my background is mostly Windows enterprise, not any Bash, so I'm not sure exactly how to troubleshoot and resolve to get this particular EA to display what I want.Here's what was provided: #!/bin/bash theIDs=$(security find-identity -v | awk '{print $3}' | tr -d '"' | grep -E '^[A-Za-z0-9]{8}-[A-Za-z0-9]{4}-[A-Za-z0-9]{4}-[A-Za-z0-9]{4}-[A-Za-z0-9]{12}$') echo "$theIDs" if [ -z "$theIDs" ]; thenecho <result>"ERROR - No keychain identities matching a UUID found on this system.</result>"exit 1elseecho "At

I saw 2 accounts listed under Managed Local Administrator Accounts, 1 labeled as "jamf binary" and the other being "PreStage". I looked for where the 1st account was defined and I found it under User Initiated Enrollment > Computers > Managed Local Administrator Account > Create Managed Local Administrator Account I have a feeling that this was defined when we were going through the initial training with Jamf and something we don't really need because we don't allow user initiated enrollments and all our devices are enrolled from Apple School Manager. I'm not sure why Jamf would create this account on devices that have undergone ADE (I've confirmed its presence in our ADE devices with a dscl read). Would there be any issues with me removing that account?

I've often read on posts (or heard on YouTube videos) the admonition that one really shouldn't have many PreStage Enrolments without really being told the reason why not. Here I am looking at 8 of them and I can see that apart from one (Staff Macbooks which require Jamf Connect Config Profiles in PreStage), there really isn't that much difference between Lab 1, Lab 2, etc PreStages so I could technically combine them to just Lab PreStage. However, I assign computers to each PreStage and use the PreStage "membership" to populate our Smart Groups (e.g. Lab 1 Smart Group has criteria of memberof Lab 1 PreStage). If you are using a single PreStage for all your devices, how do you populate your Smart Groups? The only way I can see is if you make multiple criteria using "Serial Number equals XXXX" with the OR operator which I find more tedious than just checking them under the correct PreStage. Keen to hear how others are doing it.

Hi All,This one has come up before in the forums, but I am trying to determine why my script has stopped working in my test environment but still is working fine in production.  It's the same script and I made sure to change the script to reflect the API user in test.  We have a field in our preload called AssetTag which the script should be reading and then renaming the device to based on serial.  This script is failing with the following error:  Asset Tag is being set in the preload and is being seen by JAMF on the record but is not completing the change. Script exit code: 1Script result: Asset Tag is empty. Exiting...Error running script: return code was 1.  /bin/bash #set the variables for the server and API account jssUser=APIUSER jssPass=PASSWORD jssHost=https://jamfcloudinfohere.jamfcloud.com #get the serial number serialNumber="$(ioreg -l | grep IOPlatformSerialNumber | sed -e 's/.*\\"\\(.*\\)\\"/\\1/')" #get the asset tag from jamf asse

Greetings! I'm trying to create an EA that detects when a user has added their own user to a device. We need an indicator of "setup-ed-ness" on laptops. A device that a user has never powered on, or has but never logged in to, needs to not run a couple policies, but once someone has their user account (John Doe), it should be in a "ready" state.So I'm searching for "Machines with known accounts, plus more." We have two accounts fleet-wide, with predictable names. Once someone logs in with Jamf Connect, there should be a third account. But I can't write a one-size fits all for known1, known2, as well as unkonwn1, unkonwn2, unknownN in a Smart Group, at least not that I'm aware. I can create a smart group that checks for the presence of the expected users.I was thinking I'd need to write an EA, but zsh is giving me a devil of a time taking dscl's output and putting it into an array I can cross-check.Anyone have any guidance on a pre-existing EA that's c

We've noticed that since upgrading to Sonoma we are unable to push commands to laptop that is not logged in. If it is still on the log in window (Displaying list of users) we are not able to push Lock or Wipe Commands, they stay on pending. This is happening even if we plug a network cable in. 

Hi AllI use App installers in Jamf Pro to install and update apps. I have end user experience enabled to notify users on new updates and when an app will auto quit to apply the patches .I need to use IBM notifier for this and I need help in setting this up .Thanks

Hello,I would like to have your opinions on a subject concerning FileVault computers that need to be sent to an external customer after-sales support.What is the best procedure knowing that our managers want the devices to be sent to the external support service encrypted.These Macs only have one FV user account and SecureToken, that of the end-user whose password we don't know.The only local admin account created during the prestage is managed by LAPS.What would you advise me?Thank you