I have a script to remove the default apps from the dock but I can't get it to execute when a user logs in. It only works when I run the policy in terminal or from Self Service. The policy is set to trigger at login but doesn't seem to run. Is there an issue with the script or a Jamf policy setting that should be modified? #!/bin/bash# Get currently logged in usercurrentUser=$(scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }')# Path to dockutil tooldockutilbin="/usr/local/bin/dockutil"# Sleep for 30 secondssleep 30# Remove default Mac apps from the dock/bin/launchctl asuser $(id -u $currentUser) $dockutilbin --remove 'App Store' --restart $loggedInUserPlist/bin/launchctl asuser $(id -u $currentUser) $dockutilbin --remove 'Contacts' --restart $loggedInUserPlist/bin/launchctl asuser $(id -u $currentUser) $dockutilbin --remove 'FaceTime' --restart $loggedInUserPlist/bin/launchctl asuser $(id -u $currentUser) $dockutilbin --re

The yesterday announced Apple TV 4K has no USB-C connector on the back:Apple TV 4K specs As we have no DEP, we have to use Apple Configurator to enrol the Apple TVs into the JSS. Does anyone know if and how we can enrol the Apple TV 4K without DEP?

My company is making a switch from Jamf to a new MDM, and we are in the process of migrating them over. I have been unenrolling the laptops from Jamf first and then usually deleting the profile in the Jamf console. However, I found a few profiles in Jamf that I missed. Despite them being unenrolled on the device for over a week, they are still checking in with Jamf according to the console. How is this possible? How is the device still checking in when JAMF has been removed from the device? 

I work at a university, which means we try to keep the same configuration throughout the academic year, which in turn means that I mostly don't use JAMF for about 9 months and then have a really crazy 3 months to prepare next year's configuration. Quite often, during those 9 fallow months, big changes happen. This time it's especially bad because we have also migrated to a cloud instance, which seems to have brought a number of changes along with it.The thing I'm struggling with is that the Composer interface seems to have changed in such a way that it's completely useless now. But it must be just me, because I don't see anybody else posting about it.Now, when I do a snapshot, instead of showing the files that it found in the main pane, in an expandable tree, I have to expand the snapshot itself in the left pane, and then Files – or at least I can find a list of what it found anywhere else but here. But that doesn't seem to be the right thing either; it's just a list of items that I ca

 Must have strong Mac, Apple & JAMF technical architecture experience, providing customer service focused macOS & JAMF solution design at least Jamf 300 certifiedThe successful applicant will be a macOS & JAMF Subject Matter Expert ArchitectApple Certified Support Professional (ACSP), or ACP certified or equivalent.starting from validating and/or gathering requirements (due diligence) from the business stakeholders Bash Scripting experienceDesigning a system and produce HLD, LLD, tech note. Build and implementation.  Service handover to operations team. Involve in creation of SOP and KB articles.Creating service solution architecture and service design based on modern Enterprise Mobility Management solutions (Air Watch/Workspace One, Microsoft Intune, JAMF Pro) Need to be commercially aware as hosting and licensing costs can influence the solution! Responsible to build & implement the solution within the designed architecture.Excellent

Every time I change an erroneous computer name on Jamf through "Search Inventory" the name eventually reverts back to "David's MacBook Pro" or something. Any ideas why this might be happening?

Looking for some guidance on how to suppress the Jamf Connect sign in window for a strictly local user account. In this particular work flow we have a few Mac's setup as Podcast stations using Hindenburg because of this there's only a local account on the machine called "Podcast" to preserve the application preferences. I would like to allow network logins on these machines (if possible) by leaving the Jamf Connect client installed. The issue I'm having now is when a user signs into the local "Podcast" account they're presented with the Jamf Connect "sign in" window which is causing confusing. I've gone over the various Jamf Connect keys but I can't seem to locate any options to suppress this window.Help! 

We have been using this script likely stolen from somewhere without source for a few years now to configure the nomad launch agent. The python bits need to be updated and unfortunately I don't know python which is making it a tad bit complicated to update. Any advice would be much appreciated.  loggedInUserPid: looks to be printing the user ID which is simple enough to translate to bash.launchctlCmd: I have not the foggiest what this does to try to translate it.**We are moving to JAMF connect later this year.  #!/bin/sh ## postinstall #*============================================================================= #*==============================å=============================================== #* REVISION HISTORY #*============================================================================= #* Date: #* Author: #* Solution: #*============================================================================= pathToScript=$0 pathToPackage=$1 targetLocation

I have a bit of a stupid question. Why doesn't the Enrollment Method display for Computers in the Device Record? For example, in the screenshot below, you'll see the enrollment method is blank for a computer that passed through Prestage like normal.But for mobile devices, the enrollment method properly displays in the inventory record.This in no way seems to effect any function within Jamf. I'm just wondering why this is and if its the same for everyone. Thanks!

Looking after iOS devices for a large IT company.We have a 'default' set of restrictions; every newly setup device gets this. There are other profiles as well that look after things for all devices (passcodes are a good example). Restrictions, though, are the main concern.So, there are manually created restriction profiles for managers. Another set for those in comms. Another set for interns, another set for something else, and so on. Things are now a little arbitrary.TLDR managers can use WhatsApp and USB (for Carplay) connections. Comms are allowed to use WhatsApp, and interns are allowed to use only critical apps (for example, only Outlook, Teams, and MS Authenticator). Everybody else just gets the Default (automatically) and can play with the Calander and other not-so-important stuff. But not WhatsApp! GDPR laws in Europe.A static group based on serial is used to 'map'  each device to each set of restrictions.What is starting to get on my nerves is the 'configuration creep'. I

Bonjour à tous,J’ai mis en place la solution de filtrage JAMF Trust, l’application bien installée, visible sur RADAR, le filtrage WEB fonctionne correctement.Cependant, je me suis rendu compte d’un problème un peu plus tard, j’ai un conflit avec le VPN Cisco qui confond le paramètre DNS de JAMF Trust.Lorsque le VPN Cisco est monté, le filtrage WEB ne fonctionne plus.Lorsque je désactive le VPN, le filtrage fonctionne à nouveau.Avez-vous déjà vu cela ?Pourriez-vous s’il vous plaît avoir une solutionMerci beaucoup pour votre aideTraduit avec DeepL.com (version gratuite)

We are implementing a "home made" solution so our AD students can login into specific Macs on specific time remotely using Screen Sharing.In order to complete our solution, we thought on activating Screen Sharing (not ARD) on specific hours by sending scripts to activate/deactivate Screen Sharing.We haven't found the command lines to add users/groups to the "only these users" menu.Yes, it is easy to do it with ARD (ARDAgent / kickstart), but we need to use Screen Sharing.Anyone knows the commands to set specific users to use Screen Sharing ?

Hello, I'm at the point where I had to create Sites in Jamf. I've never had a problem adding VPP licenses to apps but now when I scope an app, i.e. GMail, to "Campus A", I get "Content not available to assign to mobile devices". If I remove the site (in other words Full Jamf), I can assign VPP to the apps. (I tried adding it first to Full Jamf and then changing it to Site and I still had the same problem).Do I need to add these sites to ASM?  

Hello, I applied a "Facetime Deletion"  and " iMessage App Deletion" within the Restricted Software. The process name I used was -----System/Applications/FaceTime.app and /System/Applications/Messages.app I restricted the exact process name, applied "delete application" and "kill process". Both apps still appear on the dock bar on the test Macbook laptop. Am I missing something?  

Looking to limit UIE to a specific group via SSO and/or Cloud Identity Provider (Azure).Currently we have SSO configured via Okta and CIP setup with Azure.  Anyone got ideas on how to do the restrictions?  I've tried adding the group under Access, but it still allows all users.  

Hello,I'm looking for Managed login items in profile configuration. I've seen it in documents and video (see screenshots), but don't see it in my Jamf Pro.My interface is in French.Where is it?

We have been creating a local Administrator account during enrollment on every machine. We are now questioning whether this is necessary at all. Currently all of our users are administrators and we do not use standard accounts. Can anyone think of a good reason as to why we would need another administrator account on the machine? 

Hey everyone, we're currently working on upgrading to MacOS Sonoma using Jamf Pro as Admin. We're looking for a way to run the upgrade overnight without requiring end users to enter admin credentials. According to Apple Support documentation, users need to be volume owners to initiate the upgrade, but they still need admin credentials to do so.https://support.apple.com/guide/deployment/about-software-updates-depc4c80847a/web#dep7d4a58bedCan we implement any type of policy to run the upgrade without asking for admin credentials?

Hello community,I've seen a tremendous number of posts related to this issue. During DEP enrollment using a PreStage Enrollment configuration, the local MacOS account hangs for a while then fails with the error "Computer account creation failed".A high number of posts refer to the potential fix as being related to any of the following, which I've diligently tried to no avail:Complete wipe and reinstall of MacOS, removing any potential leftover files, users or authorization keys that might lead to the issue.Ticking and unticking of the "Setup Assistant Options" in the PreStage Enrollment configuration, which allows administrators to skip configuration steps during first-time enrollment.Skipping the local account creation altogether, creating a standard account or creating an administrator account through the PreStage Enrollment "Account Settings" page.None of these worked. However, I've tried creating a new, empty PreStage Enrollment, and adding back my desired settings, configuration p

Ever since we upgraded to macOS Sonoma, the following script is no longer working that is used as an Extension Attribute within Jamf Pro to report if TouchID is Enabled and Disabled:#!/bin/shTouchIDStatus=`bioutil -rs | grep functionality | awk '{print $4}'`if [[ "$TouchIDStatus" = "0" ]]; thenresult="TouchIDDisabled"elif [[ "$TouchIDStatus" = "1" ]]; thenresult="TouchIDEnabled"elseresult="Error"fiecho "<result>$result</result>"What I see for TouchID is Error.Any advice is very much appreciated!

I am getting an error -1 The cert for this server is invalid.  I am not sure what cert its talking about.  Im thinking I dont have the app configuration.  Has anybody used it and what did you do to get it running

Has anyone put together a policy/script to uninstall homebrew with Jamf?They have an uninstall script located here:https://github.com/homebrew/install#uninstall-homebrew But if I upload that to Jamf and run it with "--quiet --force" it throws an error shown below.  Seems like something from Jamf is adding a "/" argument to the script and it's causing it to fail.  Script exit code: 1 Script result: Warning: Unrecognized option: '/' Homebrew Uninstaller Usage: /Library/Application Support/JAMF/tmp/uninstallHomebrew.sh [options] -p, --path=PATH Sets Homebrew prefix. Defaults to /usr/local. --skip-cache-and-logs Skips removal of HOMEBREW_CACHE and HOMEBREW_LOGS. -f, --force Uninstall without prompting. -q, --quiet Suppress all output. -n, --dry-run Simulate uninstall but don't remove anything. -h, --help Display this message.

Dear Jamf Team, We are an IT service provider managing multiple Jamf Pro Cloud Instances for our clients. Over the past few weeks, we have encountered significant technical issues that have disrupted our services and negatively impacted our client relationships. Below is a detailed description of the problems we faced: Technical Issues Encountered: • Previously uploaded and functional packages suddenly became unavailable. Within the Jamf Pro Web Interface, these packages displayed a status of "Availability pending."• Client-Side Errors: "Error: Package was not successfully downloaded. 500", "Error: Package-2.1.1.pkg is not available on the HTTP server."• Server-Side Errors: Unable to get download URL from JCDS 2. Falling back to JCDS 1.x. org.springframework.web.client.HttpClientErrorException$NotFound: 404 Not Found: "Not Found" Possible Cause and Support Interaction: • We suspect these issues stem from an infrastructure change implemented by Jamf in mid-Decem

Hi, we are very new to JAMF pro having recently updated from JAMF now.  We've just had to share our local admin password with a remote user and would like to now have this changed. Can this be changed manually without any need for scripting if so how? Thanks in advance

I changed my password via Jamf Connect yesterday, but when the prompt to sync passwords appeared it did not accept my previous password, giving me the "Your local password is incorrect" message. Rebooting showed that I needed my previous password to log in to FV. Once at the desktop, logging into Jamf Connect used my new password but still would not accept the old one when trying to sync passwords. Based on this Jamf Nation thread (https://www.jamf.com/jamf-nation/discussions/35744/jamf-connect-login-with-okta-local-password-issues), I manually changed my local password using the diskutil apfs changePassphrase command. This worked in that my FV password now matches my Jamf Connect password, but after the FV login I now get a Jamf login screen, where the old password is required. When I get to the desktop, Jamf Connect works with the new password as before, but still prompts to sync passwords. I've tried multiple passwords to no avail. As a result, I cannot complete a login to Ja