We are transitioning to the latest version of MS Office 2021. We currently have 2019 installed, using both the serializer and 365 licensing (I'm not sure I am labeling the two license types properly). I saw a video from last years JNUC that made it seem like all I have to do with the serialized installs is to install the new serializer for 2021 Office. For 365 users, nothing needs to be done. Is this actually the case? Do I need to install the full Office 2021 package? If I am understanding properly, I don't have to do that (save for new installations).

I am trying to create a script that displays a message when a specific application is launched to alert the user it is not supported and they're using it at their own risk. I was able to get the base script I want to trigger together, but cannot seem to find a way outside of constant loop checking running processes to trigger it (below). I thought maybe a daemon would be my best bet but I can't seem to find a way to know if the application is launched. #!/bin/bash# Infinite loop to continuously monitor processeswhile true; do # Check if 'Microsoft OneNote' process is running if pgrep -x "Microsoft OneNote" > /dev/null; then echo "Microsoft OneNote process has started!" fi # Adjust sleep time as needed to avoid high CPU usage sleep 5 # Check every 5 seconds, adjust as necessarydone Anyone have a way to launch a script only at application launch, not by checking if it is running/open? 

when I do an inventory and collect hidden accounts, some macs show 60+ hidden accounts.does any knows why so many hidden accounts gets created? thank you.

Hi folks,We have a policy for our Core Apps that is set to execute once per computer each day and is triggered by a check-in. This is to ensure that users don't delete apps that they shouldn't delete, and if they do then running this policy should re-install any apps. There are multiple apps that use this same event trigger "Core-Apps".I'm currently in the process of developing a new enrolment procedure, however in testing it appears that a recurring check-in is occurring and when this happens, the enrolment process halts until the Core Apps policy has complete. As you can imagine this increases the time it takes to perform the enrolment. The Jamf.log states the following:"Checking for policies triggered by "recurring check-in" for user..."Previously, we have used this trigger to install all the core apps during enrolment, however this doesn't provide very good on-screen feedback, so instead of this I've created separate enrolment policies for each app so that better feedback can be sh

We have an iPad that has been sitting unused since November while the employee it was assigned to was laid off for the winter (we are a construction company and have a lot of seasonal layoffs).  The user is ready to start back up for this season but can't remember his passcode.  We issued the clear passcode command but there are several commands including the clear passcode that are stuck in pending.  The iPad is on LTE with Verizon.  The only WiFi it was ever connected to had it's password changed a while ago and one of the pending commands is the one to push the new WiFi information out to it so connecting it to WiFi appears to not be an option.  We have tried several incorrect passcodes and have been locked out several times, 1 minute, 5 minutes, 15 minutes and now 1 hour.  Has anyone had this happen or have any suggestions on what to do?  We don't care if it resets itself and we can start from scratch but it seems it needs to get it unlocked to ha

The Cisco anyconnect uninstaller ( from gui or running uninstaller from command line) has popup box that has two options, 'uninstall' or 'quit'. Is it possible via command line to have it choose 'uninstall'? I have a simple script to uninstall, but in testing the script I get the popup box, so I'm assuming running the script via Casper it will not work due to the popup box.

We have noticed that iOS MS Edge has forced the Sync accounts startup screen on Edge.  This was introduced in version 98.1108.56.  I put the following in the Edge app config section in Jamf, but it did not work.  Maybe these values are only good for Intune?!?!?<dict><key>com.microsoft.intune.mam.managedbrowser.account.syncDisabled</key><true/></dict>https://docs.microsoft.com/en-us/mem/intune/apps/manage-microsoft-edge  Wondering if there's any App Config that would disable this feature or how do people control MS Edge on iOS devices.

Hi there, Has anyone figured out a way to make the local admin account created in prestage into volume owner (post prestage)? The behaviour I've see so far lines up with Apple's documentation on this topic which is that the first user signed in gets the bootstrap token.I know it's possible to manually grant the local account volume owner status but that requires the current volume owner account details which in our environment is the local accounts created by Jamf Connect all as unique usernames and passwords so this cant be scripted and automated directly.

I am getting the message saying "Self Service is a component of Jamf Pro, developed by Jamf. This app must be associated with a Jamf Pro Server. Contact your IT administrator for more information." We use automated device enrollment and the iPads experiencing this issue are enrolled into our Jamf instance. Our Self Service app is set to be installed manually to avoid Apple IDs. I have already set up the app configuration as seen on the Jamf Pro documentation. Is there anything else that I am missing? Thank you!

Hi All,I need to find a way to set MacOS to use Microsoft Edge as the default browser.  Either by script or config profile.  Alot of auth/token services do not work with Safari on Monterey so would like to avoid using it altogether.  We would also like to give users the option to move to a MacOS device and a good attraction is the ability to sign into Edge (which they used on their Windows machines) and have their favourites, browsing history and cookies appear on the MacOS version of Edge. Any help would be greatly appreciated. Gavin

I am trying to create a smart group that will show me Macs that have been booted for more than 7 days. Many times, my team gets support tickets from users that would not have been necessary if they had rebooted their Macs at least once a week. I love that Macs can stay booted for a really long time. My record is 92 days, but to get there, I had to put up with some quirks and minor issues. I just wanted to see how long I could go between reboots. I don't want my users doing this, so I want to create a smart group for Macs that are booted up longer than 7 days, and then display a message asking them to please reboot soon. I have found extension attributes that will show me the up time, or last reboot, but when I go to create the smart group, the operator shows only is, is not, like, and not like. What I need it to show is something like "more than X days ago". Does anyone know how I get this? Maybe I'm using the wrong extension attributes?

hi all, i need some advise input from anyone about my environment. we just recently build a new NDES Cert server and we use Azure App proxy pointing to our NDES to deploy 802.1x certificate to allow our azure joined windows devices access to our wifi (we use Cisco ISE for authentication and authorization). We currently have our macs bound to the domain to allow cert request (so it can request cert from the old CA if its in office). We recently got our Jamf Connect setup and have no reason to bind to domain anymore. I want to ask anyone advise of what is the best practice for us to deploy our 802.1x cert to our mac that will be Jamf Connect only? is it possible to integrate our Jamf cloud with our Azure app proxy for certificate deployment (just like intune - windows)?Or do i need to go with Jamf AD CS Connector? or do i go with setup Jamf SCEP so it can point to my NDES server (on prem)? i prefer not to do this as I want to limit the amount of network connection between my NDES servers

Hello everyone,I'm looking for help deploying AppleScript through Jamf Pro. I know the basics of bash scripts but almost nothing about AppleScript. I got the following AppleScript from one of our network administrators:tell application "System Events"set macUser to name of current userend telltryset FortiDir to POSIX file "/Users/Shared/Fortinet/Forticlient"set ztnaConfig to POSIX file "/Users/Shared/Fortinet/Forticlient/ztnaconfig.json"set FortiDir to POSIX path of the file FortiDirset ztnaConfig to POSIX path of the file ztnaConfigdo shell script "chown -R " & macUser & " " & FortiDir with administrator privilegesdo shell script "chmod 755 " & FortiDir with administrator privilegesdo shell script "chmod 644 " & ztnaConfig with administrator privilegesdisplay dialog "BW FortiClient permissions patch successful"on error theErrdisplay dialog "File permissions update failed for " & FortiDirend tryI tried to deploy it as a shell script in Jamf like this:#!/bin/bash

I feel like I'm just missing this somewhere, but is it possible to query the api to find the Jamf pro management ID? I know where it lives in the console but I would like to programmatically send a wipe computer command to device through this endpoint: https://yourserver.jamfcloud.com/api/v2/mdm/commands and that requires the Jamf pro management ID. If there's a better way to wipe a device other than this endpoint, I would also like to know. Thanks!

Not directly related to Jamf, but for those of you working in Colleges and Universities, what are the benefits of managed Apple IDs for your users?  This is via SSO/Federation in Apple School Manager.

Is it possible to deploy the OneDrive plist config file via jamf or does it have to be packaged in composer so it installs in the correct location?

I'm looking for the best way to prevent all Mac users with local admin privileges from removing a wireless/wired profile and SSID configuration for a specific wireless/wired network.The goal is to ensure that the wireless network settings are enforced and cannot be modified or removed by the end-users, even if they have admin access on their Macs.Is this possible?

Hi there, I've been trying to find a way to get an extension attribute in Jamf to look at "/Library/Management/super/super.log" for a line: Parameter Error: You can not use both the --deadline-count-soft and --deadline-count-hard options at the same time. You must pick one deadline count behavior. And report the result of true/false. I have a policy setup to uninstall and reinstall super from there.

Hi there, We're currently using Installomator/swiftDialog scripts to handle patch management in our environment on Jamf Pro. We noticed some behaviour from the end-users, specifically how they tend to ignore the prompts for most application updates. There are some key applications that when we push updates to, must get updated as soon as possible. What solutions do you use for this? What I had in mind was a means to "nudge" end-users to update followed by a separate workflow to kill app process and update.

Hello All,Please help me a payload to upload in jamf pro to grey out "Launch Automatically after login" option under DisplayLink.Thank you. 

Got this message in Jamf pro server tools in the Tomcat tab after upgrading to 11.4.1: Error: failed to start the server: could not find the service named "Tomcat8". But the Apache Tomcat 9.0 service is running. Is this a "cosmetic" error. Gui version 3.1.1.Everything seems to work despite this error message. 

Hi,I have a problem with my patch management. Most of the software that I am patching via the management has only under 10% of the computers on the latest version with most of them scattered across many different versions. How can I remedy this? My current settings for the Patch Policies are:Distribution method: Make available in SelfServiceUpdates deadline: 7 daysGrace period: 15 minutesShould I use different settings or is the problem somewhere else. Some of the Software is installed on hundreds of Macs.

I am trying to create a PLIST file that has nested Keys.  I have tried to use Default Writes, PUtil and Plistbuddy.  Below is what I am trying to accomplish in the plist file. Can someone please assist in the command to get this to work. <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN""http://www.apple.com/DTDs/PropertyList-1.0.dtd">‹plist version="1.0">‹dict>           <key>DC</key>            ‹dict>                           <key>FeatureLockdown</key>                           ‹dict>                                            <key>bEnableGentech</key>   

I thought one of the benefits the Jamf Cloud Services Connection was supposed to provide was the ability to finally manage the icons we've uploaded for self service. If it's there, I'm not seeing a way to do that. If it's not there, is that ever going to be a thing? 

Hi everyone! I am the IT responsive person at a primary/secondary school at Spain. We have 100 managed iPADs.I've recently moved from Cisco Meraki to Jamf School.I'm experiencing a problem with certain Apps automatic installation.For example, Bee-Bot and Blue-Bot Apps.Bee-Bot was added to the JAMF account and installed without any problem, but when I try to install Blue-Bot for all the iPADs, an error message is displayed at the iPADs screen. It says: "This Apple ID is not valid to purchase content". I don't know how is the exact translation to english since we received the error message in spanish.So the App is not being installed.I tried adding 200 licenses of Blue-Bot first at Apple Shool Manager, but nothing changed.Please, any idea that could help? Thank you!Jose