Hi, I am trying to deploy Office 2021 (VolumeLicense) and with that I want do disable the ability for users to login to office and use their private Office 365 licenses.On this site (https://learn.microsoft.com/de-de/microsoft-365/enterprise/network-requests-in-office-2016-for-mac?view=o365-worldwide) I found three preferences witch to my understanding should just do that:  defaults write com.microsoft.Word UseOnlineContent -integer 0 defaults write com.microsoft.Excel UseOnlineContent -integer 0 defaults write com.microsoft.Powerpoint UseOnlineContent -integer 0  But they don't seem to work (not when deployed through Jamf or run locally).Has anyone been handling this?

Hi all!We are currently testing our implementation of Jamf Pro Cloud. I am trying to set Chrome as the default browser for my organization, but I cannot find the option to do that through Jamf. And anything online about this is over a few years old. I just wanted to check in and see if there has been a change to this, or if anyone has a clever way of getting around it!Thanks!

Hey guys, our users have no admin rights on their Macs. Is it possible to allow them to use the Erase option in settings app (General =>  transfer and reset => erase all content and settings? It seems like the erase app actively needs admin rights, and these things seems like cannot be handled using privilege management systems like BeyondTrust. We tried to run the commands stated here from self service, but also there same message as stated above. Any hints / proposals? If not, I guess the only way for users is holding down their power button and reinstall from there, right? However we would prefer the way from settings app since it's more convenient. Thank you so much for your thoughts on that. bestFlory

Got Regex?

So I am working on getting all of our Mac devices registered with Entra ID. I have set up the notification to let the users know that they need to register and then it directs them to self service to do so. This is great , however my issue is with the triggers, I'm looking for a way that if the Mac such as mine currently is registered with Entra ID, how can I no longer have my device receive the pop up notification. I only want the pop up to trigger if the device is not registered, so this will help with current Macs as well as new macs when they come into our environment. I've looked every where for solutions and could not find any hoping someone here has found a way to get this done. 

I am on JAMF Pro 11.5.1 and I am having a strange issue on a number of macs where Self Service is crashing immediately but only for Mobile accounts. Local Accounts can open Self Service without any problems. Has anyone run into this before? I have tried re-installing Self Service and re-running recon and policy but its still persisting. 

We are relatively new to Jamf Pro.  NFR/Test was set up for us to use by Jamf staff.  Now that we have a few devices in our PRODUCTION instance and ABM setup along with that, I decided to stand up the Test/NFR environment.  When I get to the point of creating the new MDM server in ABM, I am prompted to download a new "MDM Server Token."  However, I am warned that doing that will result in my existing token being reset.  I do not want to break Production.  Is there a way around this?  Thanks.

So I wanted to push an OS update to my test Macs, which I have previously done via Inventory, pick the machines I want, Actions, Update OS version etc.It's still there, I can still choose its radio button, but a blue box appears saying "You can now use Software Updates to manage OS updates". But the Software Updates feature appears to be a beta, and I don't particularly want to use a beta. I would like to use the existing Update OS Version mass action.The blue box says that I can continue using the existing feature, but that it will be deprecated in a future version. But the "Next" button is greyed out, with no indication as to why.So, despite the wording, is it already deprecated? Or should the Next button still be available, and if it should be, has anyone got any ideas about why it isn't?Thanks,Lisa.

Hey guys, we're looking for an opportunity to grey out the option "Allow this user to administer this computer" in system settings. Our users are no local admins and we do not want them to enable that option. Any ideas? thank you so much, Best, Florian

I know that most folks are recommending user-driven provisioning where the end-user gets to enjoy the process of being involved in setting up their Macbooks. Our org is not one of those. Our users prefer to get their Macbooks and get to work immediately and not have to wait for apps to install or things to be configured while they sit and do nothing. We achieve this in Windows by pre-provisioning (Microsoft calls it white glove) where we assign common apps (Office, Chrome, VLC, etc) to the devices rather than the user and we leave user-specific apps (not all users get Adobe Creative Cloud for example) to be installed after the user logs in. This way, we can get a fleet of Windows laptops ready for use by anyone with very minimal delays experienced by the user (they can work in Outlook and Chrome while Adobe CC is being installed in the background). I plan to achieve the user side of things using DEPnotify but any suggestions how to pre-provision common apps? Is putting the comon a

I'm looking for a way to not have Keynote, Numbers, and Pages install on enrollment. Is there a way to do this? Or do I just have to remove them afterward?

Lately, every Mac that has tried to perform user-initiated enrollment in Jamf has been met with "Device Signature Error in the jamf log. To resolve, we perform these steps:1. Remove Jamf Framework2. Remove Jamf CA certificate3. Remove contents of /Library/Application Support/JAMF/Downloads/4. Run this command: sudo update_dyld_shared_cache -force5. Delete the mac from Jamf console6. Run the QuickAdd package on the mac7. Approve the Device Management Profile on the Mac8. Assign the user to the Mac in the Jamf Pro console This issue seems to have started with MacOS 10.14.5, but that may be coincidence. I have attached screenshots from an affected Mac. We have 3 macs that are broken right now, and 2 that were repaired using the procedure above. Anyone else seeing encountering this?

I am working with a Jamf environment that currently does not have any Jamf LAPS capable admin accounts. They did not create a “Management Account” in User-initiated enrollment. They did not create a “local administrator account” int PreStage Enrollment.   We have since specified a “Management Account” and a “local administrator account”. With two separate names. They are using Apple Business Manager Automated Device Enrollment. There are some locations that do not have ABM, so they are using User-initiated enrollment. (That is begin resolved). LAPS is working with newly enrolled Mac systems using either admin accounts.    Is there away to retroactively add a User-initiated enrollment “Management Account”? I’ve tried using “jamf policy -trigger enrollmentComplete”. This will successfully re-run the enrollment policies, but it does not create the “Management Account” from User-initiated enrollment. “profiles -N” does work. But that requires user interaction.   Thought

I am trying to automate the creation of an Outlook signature and I have most of the parts down except I can't find a way to pass values from User and Location to the script. I thought passing $FULLNAME or $POSITION as script parameters would work but all it does is literally pass the string "$FULLNAME" to the script.

Hello!I need a hand writing an Extension Attribute script to gather "Reason for privilege elevation".The below command works in Terminal directly on a Mac running macOS 14 to gather the info but I don't know how to then parse it into a script for an Extension Attribute. The text in bold is what I want to gather. An endless running list of reasons would be ideal. Any help would be much appreciated 😊sudo log show --style compact --predicate 'subsystem == "com.jamf.connect"' --debug --info | grep "Reason for privilege elevation:"Result:2024-04-04 10:09:22.221 Df Jamf Connect[55703:31aeb0] [com.jamf.connect:PrivilegeElevation] Reason for privilege elevation: Admin elevation test 12024-04-04 10:18:37.006 Df Jamf Connect[55703:31aeb0] [com.jamf.connect:PrivilegeElevation] Reason for privilege elevation: Figma install

Anyone sussed out a way to remotely manage the startup security utility settings on Apple Silicon Macs? We use a lot of music production software that requires the "Reduced Security" option to be enabled and I haven't seen a way to deploy these settings either in PreStage or as part of enrollment. Is manually changing these on each device the only option here? Currently all devices on Ventura but moving to Sonoma over the summer.  Appreciate any help. 

This may be a newbie question but I have looked everywhere: Initially I was trying to get Jamf Tools: after some googling, it says I will need jamf nation account and go to My Assets.I create a jamf account for myself but ofcourse, no subscription hence no tools.My workplace uses Jamf Pro. I thought I can connect the two together and download the tools I will need. How do I connect the two together so I can use their subscription and download the jamf tools? If you say, "you dont connect your personal jamf nation account to their company's Jamf Pro":1. Do you create a new jamf nation account for each company you work with?2. My initial thought was I would use my jamf nation account -connect it to work email-work company and get the subscription and once I move to a new company, I would "un-link" and connect to theirs instead of creating bunch everywhere. Another reason I thought of using my jamf nation account is to have my certification in all in one place. It woul

Hi,I'm trying to create a configuration profile for distributing fonts, but no matter what file I try to upload (I've confirmed the fonts work fine on a local Mac), I get the following error:"File format not supported." Has anyone run in to this and know what needs doing to make it work? I've searched the forum but I've been unable to find anything on this particular issue. 

I have a script to remove the default apps from the dock but I can't get it to execute when a user logs in. It only works when I run the policy in terminal or from Self Service. The policy is set to trigger at login but doesn't seem to run. Is there an issue with the script or a Jamf policy setting that should be modified? #!/bin/bash# Get currently logged in usercurrentUser=$(scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }')# Path to dockutil tooldockutilbin="/usr/local/bin/dockutil"# Sleep for 30 secondssleep 30# Remove default Mac apps from the dock/bin/launchctl asuser $(id -u $currentUser) $dockutilbin --remove 'App Store' --restart $loggedInUserPlist/bin/launchctl asuser $(id -u $currentUser) $dockutilbin --remove 'Contacts' --restart $loggedInUserPlist/bin/launchctl asuser $(id -u $currentUser) $dockutilbin --remove 'FaceTime' --restart $loggedInUserPlist/bin/launchctl asuser $(id -u $currentUser) $dockutilbin --re

The yesterday announced Apple TV 4K has no USB-C connector on the back:Apple TV 4K specs As we have no DEP, we have to use Apple Configurator to enrol the Apple TVs into the JSS. Does anyone know if and how we can enrol the Apple TV 4K without DEP?

My company is making a switch from Jamf to a new MDM, and we are in the process of migrating them over. I have been unenrolling the laptops from Jamf first and then usually deleting the profile in the Jamf console. However, I found a few profiles in Jamf that I missed. Despite them being unenrolled on the device for over a week, they are still checking in with Jamf according to the console. How is this possible? How is the device still checking in when JAMF has been removed from the device? 

I work at a university, which means we try to keep the same configuration throughout the academic year, which in turn means that I mostly don't use JAMF for about 9 months and then have a really crazy 3 months to prepare next year's configuration. Quite often, during those 9 fallow months, big changes happen. This time it's especially bad because we have also migrated to a cloud instance, which seems to have brought a number of changes along with it.The thing I'm struggling with is that the Composer interface seems to have changed in such a way that it's completely useless now. But it must be just me, because I don't see anybody else posting about it.Now, when I do a snapshot, instead of showing the files that it found in the main pane, in an expandable tree, I have to expand the snapshot itself in the left pane, and then Files – or at least I can find a list of what it found anywhere else but here. But that doesn't seem to be the right thing either; it's just a list of items that I ca

 Must have strong Mac, Apple & JAMF technical architecture experience, providing customer service focused macOS & JAMF solution design at least Jamf 300 certifiedThe successful applicant will be a macOS & JAMF Subject Matter Expert ArchitectApple Certified Support Professional (ACSP), or ACP certified or equivalent.starting from validating and/or gathering requirements (due diligence) from the business stakeholders Bash Scripting experienceDesigning a system and produce HLD, LLD, tech note. Build and implementation.  Service handover to operations team. Involve in creation of SOP and KB articles.Creating service solution architecture and service design based on modern Enterprise Mobility Management solutions (Air Watch/Workspace One, Microsoft Intune, JAMF Pro) Need to be commercially aware as hosting and licensing costs can influence the solution! Responsible to build & implement the solution within the designed architecture.Excellent

Every time I change an erroneous computer name on Jamf through "Search Inventory" the name eventually reverts back to "David's MacBook Pro" or something. Any ideas why this might be happening?

Looking for some guidance on how to suppress the Jamf Connect sign in window for a strictly local user account. In this particular work flow we have a few Mac's setup as Podcast stations using Hindenburg because of this there's only a local account on the machine called "Podcast" to preserve the application preferences. I would like to allow network logins on these machines (if possible) by leaving the Jamf Connect client installed. The issue I'm having now is when a user signs into the local "Podcast" account they're presented with the Jamf Connect "sign in" window which is causing confusing. I've gone over the various Jamf Connect keys but I can't seem to locate any options to suppress this window.Help!