Mostly Sonoma 14.4.1 OSWe have a Configuration Profile that has Require Passcode, Complex Passcode and Alphanumeric Value along with values in the rest of the settingsThis prevents the users from changing values in Lock Screen for Start Screen Saver when inactive, Turn display off on battery inactive, Turn display off on power adapter when inactive and Require password after screen saver begins or display is turned offI removed this from a target computerI cloned this configuration profile and added the clone to a target computerThis resulted in users being able to change the values for all of these itemsFor compliance we need to set Require password after screen saver begins or display is turned off to Immediately and prevent users from changing this valueI have been looking in Apple documentation and Jamf Community but the closest I have found was an un answered question at the bottom of the post from 03-27-2024 https://community.jamf.com/t5/jamf-nation/don-t-require-password-after-s

I have tried to create a PPPC config with the utility and given a couple apps "allow" for accessibility, and "let standard users approve" for input monitoring and screen recording. while I understand these settings will not show in the macOS GUI, the users are still not able to enable these settings without admin prompt. I have only tested on Ventura, but we have a few machines (with more to come) running Sonoma. Is there something I'm missing?

We may be getting some new users joining from outside the USA. We are using JAMF Pro. I am guessing it will work OK in other countries, but looking for any sage advise from others who may be going this route.For example - we are about 80% zero touch deployment, but have a few things still to manually set up and check by hand. We won't be able to do a hand check for these things for people outside the USA, but we can likely remote in and manually do those things.I am curious if/how we can arrange for a Mac to be purchased and added into ABM in a foreign country. Will we need to contact an Apple rep that is local to the user? Or is it just as easy as finding a reseller locally who can do it? We want to avoid having to walk the user through connecting the Mac to ABM via Configurator.

Hi all, I see that there is an option to prevent changes to bluetooth for iOS devices.My question is, does the Jamf have the ability to disable bluetooth entirely? We have a security requirement to disable it.Thanks!

I have a list of computers that I want to run a script against it. However, they don't have anything in common that I can use a smart group. I was looking at static groups with no success. Is there a way that a .csv or plain text file can be uploaded to get a group created? so I don't have to manually do 50 endpoints.

Hi,it seems a couple of my VPP Tokens have been revoked. The token all come from the same Apple School Manager. Is there anything I can do about this myself? Renewing the Tokens does not do anything. Jamf Support is responding really slow and the situation has been like this for a month now. Any Advice would be appreciated. 

Is there any way to customize the Jamf Pro administration interface with colors, background or logo ? (Except just dark and light mode)When working with 3 different Jamf Pro enviroments back and forth, it is easy to make changes in the wrong environment.

We have a user who has just started and they have a personal iPhone backed up to iCloud. We want them to be able to restore this backup to a new, managed iPhone but it doesn't seem to work.We wipe the Managed iPhone and allow Proximity Setup, the Personal iPhone sees the Managed iPhone and goes through the steps to restore and it appear to be working, however after enrolment through our IdP the Managed iPhone goes to the Home Screen and nothing happens (apart from our required Managed Apps being there).Does anyone have any success doing the above? I'm wondering if it's even possible to do?

I have around 30 MacBook Air computers which were shipped with macOS Big Sur. I was thinking of creating a static computer group and add the serial number for those MacBooks so that I could then add them to a policy which updates the software from macOS Big Sur to macOS Sonoma when the user logs in. Is this possible? The devices I have are PreStage enrolled for ADE. I'm still early in learning more about JAMF so if anyone had some advise or direction on how to go about this that would be greatly appreciated. The use case is that just now if we give one of these to a user it will enrol on Big Sur which is unsupported. Is there a better way? Can we upgrade them to Big Sur then erase the MacBook so it then enrols and installs macOS when next user logs in? As far as I'm led to believe this would install macOS Big Sur again as this is what the device was shipped with. 

Hello,1) We want to name our Macbooks based on below criteria: Prefix + 5 digits 00001 --> 99999.No duplicate should be created.Process should be silent or at least automated.2) We want as well to rename already enrolled computers using same criteria:Prefix + 5 digits 00001 --> 99999.No duplicate should be created.Process should be silent or at least automated.We intend to apply this naming convention on:Most machines are DEP Enrolled.Some are Self-InitiatedJamf Pro looks limited in this context.Any ideas ? 

We have a requirement for a Kisk devices on our reception for a Power Apps built for visitors.I am utilising a single app mode to deploy this. However the application is not installing without entering the apple id. 

Hey ya'll, we are about to roll out Jamf Connect to our users and I'm struggling with how to report our progress. Currently, we have a policy for the Jamf Connect app in our self service, and I can look at logs to see who ran the policy. My concern is if these logs get flushed. Is there a place to see my current Jamf Connect license count, and even better to see which devices are using a license? Thanks! 

Hello JAMF Nation, Has anyone been able to successfully create and package with the WFBS Trend client to be pushed out via policy in JAMF every single attempt I have made as resulted in failure or corrupted installations. I have found several posts here, that have helped with potential ideas but unable to get anything going successfully. Keep in mind I am a JAMF NOOB but am learning more and more each day. I have 30 machines that are out in the field and have been tasked to creating packages for: Skype for Business WFBS TrendMicro That are a bit of a challenge any assistance would be greatly appreciated. Thank You

We're doing some testing in our QA environment and configured all our Config Profiles to match what is in Prod. We've enrolled 4 Mac's and they show Invalid and the Recovery key is super long. I did try the github reissue filevault key, also escrowbuddy and ran the files and processes command, but neither work. When I run the reissue command and type in password and it's successful and I run a jamf recon, the recovery key validation changes to Valid, but the recovery key is still wrong and when you refresh it, it goes back to Invalid.    

I have a computer that is enrolled but MDM Capability is No and under Management, Management Commands are missing. I tried to re-enoll it via enrollment URL but that didn't make a difference. Any ideas?

I've been having some issues whereby JAMF Composer just seems to hang during the after snapshot on some software. It makes it through the initial indexing phase fine, however it looks like it hangs while adding files to the package staging area. It hangs on a different file each time, it is not consistent, but it is usually a file within the .app I am packaging. When I cancel creating the package source, it will usually spit out on error stating that it "can't communicate with the helper application." I've tried changing a few settings, namely I've whether or not the executables in the package require rosetta, but to no avail. (for the record, this software is advertised as being fully silicon-based, so there should be no requirements for rosetta).Anyone have any ideas? I am wondering if I just want to throw up my hands and try making the package completely manually. I have been very frustrated with composer lately, but I digress.

Has anyone been able to get Goodnotes working on the iPad via Jamf Pro?  I've received an Education License from them, but I'm unable to get it to push out to our ipads.I've tried adding the settings listed at this link to the App Config without any success.https://support.goodnotes.com/hc/en-us/articles/6543387103503and I've also looked at this article to see if any of this could help.https://support.goodnotes.com/hc/en-us/articles/6859707661455-Installing-GoodNotes-for-Institutions-via-JAMF-SchoolI've been back and forth with their support, but it seems like they have more experience with Jamf school settings and not Jamf Pro.Any help would be appreciated, thanks

Hello,I received this message from Jamf Pro Server :jamfim.lfz.ch Infrastructure Manager instance has not checked in with the JSS. What does this mean? Is it critical? Can you help me with any action I need to take? Thanks !

Afternoon!I reimaged around 30 iMacs 2017s and erased and reset up the HDDs as APFS and everything seemed good to go. However, I noticed that the Hard drives are filling up fast (school isn't in session so I'm the only one who has logged on) and are now maxed out. I originally thought that I must have spaced out and just sloppily messed up*. So, I re-imaged them again (I paid special attention to what I was doing this time around) and the same thing happened. They are Smart verified and I also ran Disk Inventory X which shows only about 80 GBs of real usage (this sounds about right). I'm wondering if the age of the HDDs could be doing this since they are used A LOT and constantly on. Any thoughts or articles would be great because the college won't want to buy new iMacs (but maybe new SSDs).*I've tackled setting up maybe a few thousand (if not many thousand) and this is the first time that I have encountered this.Thanks in advance!

Just wanted to see if anyone else had an SMTP issue upgrading an internally hosted Jamf Pro server from 10.x to 11.x? If so, how did you resolve it? We have two internally hosted Jamf Pro server environments, in the 10.x environment SMTP works fine, however in the 11.x upgraded environment it stopped working. We have a ticket open, but wanted to check here too.

Hey Jamf peoples. Is there a way to get jamf to run a local script without waiting to see the results of the script?  I've written up a pretty basic Jamf Helper script to aide with encouraging/forcing users to restart their computers. Because I set a long time out on the jamf helper window, Ideally I'd echo a script locally to the computer and then have Jamf start the script and immediately exit the policy.  When I test using an event trigger, the policy doesn't doesn't complete on Jamf's side until the local script resolves.  Is this possible without something like a launch daemon or launch agent? This is basically what I was trying to do: #!/bin/bash#variablesscriptPath="/Library/myOrg/restart.sh"directoryPath=$(dirname $scriptPath)mkdir -p $directoryPathtouch $scriptPathecho '#!/bin/bashorgIcon="/Users/Shared/MyOrgLogo.icns"helper=/Library/Application\\ Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelperdate1=$(date "+%y%m%d")pmDate=$(da

Hey everyone,Are any of you experiencing issues connecting your MacBook to guest Wi-Fi networks like hotel or airport Wi-Fi? Some users are encountering error messages and are unable to pass through capital.apple.com.Any ideas on how we can resolve this issue?Thanks.

What is the proper way to automatically enroll a new device into a Static Group during prestage enrollment? I'm using Sonoma 14.4.1. Currently I have to do this manually after the end user boots up the machine. There are policies configured to a certain Static groups new devices needs to belong in. 

We are trying to update a lab of computers to 10.7.3. These computers are partitioned 50/50 with a 10.6.8 partition and and a Windows XP partition. We are getting the following error when trying to run the update: *Mac OSX could not be installed on your computer Mac OS X can't be installed on the disk Macintosh HD, because a recovery system can't be created.* Wondering if anyone else has run into this problem and if so how did you get around it?? We have tried the install both through SelfService and by just running the install straight from the computer.

I am working on deploying a new zero-touch provisioning process. This new policy alerts the user that they're running an outdated macOS if they enroll a Mac running macOS older than Sonoma. The alert includes a button to click to launch Software Update. After the upgrade to Sonoma, the ZTP policy launches automatically thanks to a launchdaemon that gets installed on Macs running an OS older than Sonoma. After the ZTP policy completes, the user needs to reboot. When they login, they are kept waiting 10-12 minutes before they reach the desktop. When I ran this through on my test Mac, I found that softwareupdatd is responsible for this but I have not figured out exactly what is allegedly updating. Since we just ran an upgrade to Sonoma, all of the OS components should be up to date. If a Mac running Sonoma (any version of Sonoma) enrolls, we don't see this issue. This is not a complete disaster. It's just an annoyance. I did not see this happen with a Mac VM that I enrolled yesterday. The