Hello,I received this message from Jamf Pro Server :jamfim.lfz.ch Infrastructure Manager instance has not checked in with the JSS. What does this mean? Is it critical? Can you help me with any action I need to take? Thanks !

Afternoon!I reimaged around 30 iMacs 2017s and erased and reset up the HDDs as APFS and everything seemed good to go. However, I noticed that the Hard drives are filling up fast (school isn't in session so I'm the only one who has logged on) and are now maxed out. I originally thought that I must have spaced out and just sloppily messed up*. So, I re-imaged them again (I paid special attention to what I was doing this time around) and the same thing happened. They are Smart verified and I also ran Disk Inventory X which shows only about 80 GBs of real usage (this sounds about right). I'm wondering if the age of the HDDs could be doing this since they are used A LOT and constantly on. Any thoughts or articles would be great because the college won't want to buy new iMacs (but maybe new SSDs).*I've tackled setting up maybe a few thousand (if not many thousand) and this is the first time that I have encountered this.Thanks in advance!

Just wanted to see if anyone else had an SMTP issue upgrading an internally hosted Jamf Pro server from 10.x to 11.x? If so, how did you resolve it? We have two internally hosted Jamf Pro server environments, in the 10.x environment SMTP works fine, however in the 11.x upgraded environment it stopped working. We have a ticket open, but wanted to check here too.

Hey Jamf peoples. Is there a way to get jamf to run a local script without waiting to see the results of the script?  I've written up a pretty basic Jamf Helper script to aide with encouraging/forcing users to restart their computers. Because I set a long time out on the jamf helper window, Ideally I'd echo a script locally to the computer and then have Jamf start the script and immediately exit the policy.  When I test using an event trigger, the policy doesn't doesn't complete on Jamf's side until the local script resolves.  Is this possible without something like a launch daemon or launch agent? This is basically what I was trying to do: #!/bin/bash#variablesscriptPath="/Library/myOrg/restart.sh"directoryPath=$(dirname $scriptPath)mkdir -p $directoryPathtouch $scriptPathecho '#!/bin/bashorgIcon="/Users/Shared/MyOrgLogo.icns"helper=/Library/Application\\ Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelperdate1=$(date "+%y%m%d")pmDate=$(da

Hey everyone,Are any of you experiencing issues connecting your MacBook to guest Wi-Fi networks like hotel or airport Wi-Fi? Some users are encountering error messages and are unable to pass through capital.apple.com.Any ideas on how we can resolve this issue?Thanks.

What is the proper way to automatically enroll a new device into a Static Group during prestage enrollment? I'm using Sonoma 14.4.1. Currently I have to do this manually after the end user boots up the machine. There are policies configured to a certain Static groups new devices needs to belong in. 

We are trying to update a lab of computers to 10.7.3. These computers are partitioned 50/50 with a 10.6.8 partition and and a Windows XP partition. We are getting the following error when trying to run the update: *Mac OSX could not be installed on your computer Mac OS X can't be installed on the disk Macintosh HD, because a recovery system can't be created.* Wondering if anyone else has run into this problem and if so how did you get around it?? We have tried the install both through SelfService and by just running the install straight from the computer.

I am working on deploying a new zero-touch provisioning process. This new policy alerts the user that they're running an outdated macOS if they enroll a Mac running macOS older than Sonoma. The alert includes a button to click to launch Software Update. After the upgrade to Sonoma, the ZTP policy launches automatically thanks to a launchdaemon that gets installed on Macs running an OS older than Sonoma. After the ZTP policy completes, the user needs to reboot. When they login, they are kept waiting 10-12 minutes before they reach the desktop. When I ran this through on my test Mac, I found that softwareupdatd is responsible for this but I have not figured out exactly what is allegedly updating. Since we just ran an upgrade to Sonoma, all of the OS components should be up to date. If a Mac running Sonoma (any version of Sonoma) enrolls, we don't see this issue. This is not a complete disaster. It's just an annoyance. I did not see this happen with a Mac VM that I enrolled yesterday. The

We are transitioning to the latest version of MS Office 2021. We currently have 2019 installed, using both the serializer and 365 licensing (I'm not sure I am labeling the two license types properly). I saw a video from last years JNUC that made it seem like all I have to do with the serialized installs is to install the new serializer for 2021 Office. For 365 users, nothing needs to be done. Is this actually the case? Do I need to install the full Office 2021 package? If I am understanding properly, I don't have to do that (save for new installations).

I am trying to create a script that displays a message when a specific application is launched to alert the user it is not supported and they're using it at their own risk. I was able to get the base script I want to trigger together, but cannot seem to find a way outside of constant loop checking running processes to trigger it (below). I thought maybe a daemon would be my best bet but I can't seem to find a way to know if the application is launched. #!/bin/bash# Infinite loop to continuously monitor processeswhile true; do # Check if 'Microsoft OneNote' process is running if pgrep -x "Microsoft OneNote" > /dev/null; then echo "Microsoft OneNote process has started!" fi # Adjust sleep time as needed to avoid high CPU usage sleep 5 # Check every 5 seconds, adjust as necessarydone Anyone have a way to launch a script only at application launch, not by checking if it is running/open? 

when I do an inventory and collect hidden accounts, some macs show 60+ hidden accounts.does any knows why so many hidden accounts gets created? thank you.

Hi folks,We have a policy for our Core Apps that is set to execute once per computer each day and is triggered by a check-in. This is to ensure that users don't delete apps that they shouldn't delete, and if they do then running this policy should re-install any apps. There are multiple apps that use this same event trigger "Core-Apps".I'm currently in the process of developing a new enrolment procedure, however in testing it appears that a recurring check-in is occurring and when this happens, the enrolment process halts until the Core Apps policy has complete. As you can imagine this increases the time it takes to perform the enrolment. The Jamf.log states the following:"Checking for policies triggered by "recurring check-in" for user..."Previously, we have used this trigger to install all the core apps during enrolment, however this doesn't provide very good on-screen feedback, so instead of this I've created separate enrolment policies for each app so that better feedback can be sh

We have an iPad that has been sitting unused since November while the employee it was assigned to was laid off for the winter (we are a construction company and have a lot of seasonal layoffs).  The user is ready to start back up for this season but can't remember his passcode.  We issued the clear passcode command but there are several commands including the clear passcode that are stuck in pending.  The iPad is on LTE with Verizon.  The only WiFi it was ever connected to had it's password changed a while ago and one of the pending commands is the one to push the new WiFi information out to it so connecting it to WiFi appears to not be an option.  We have tried several incorrect passcodes and have been locked out several times, 1 minute, 5 minutes, 15 minutes and now 1 hour.  Has anyone had this happen or have any suggestions on what to do?  We don't care if it resets itself and we can start from scratch but it seems it needs to get it unlocked to ha

The Cisco anyconnect uninstaller ( from gui or running uninstaller from command line) has popup box that has two options, 'uninstall' or 'quit'. Is it possible via command line to have it choose 'uninstall'? I have a simple script to uninstall, but in testing the script I get the popup box, so I'm assuming running the script via Casper it will not work due to the popup box.

We have noticed that iOS MS Edge has forced the Sync accounts startup screen on Edge.  This was introduced in version 98.1108.56.  I put the following in the Edge app config section in Jamf, but it did not work.  Maybe these values are only good for Intune?!?!?<dict><key>com.microsoft.intune.mam.managedbrowser.account.syncDisabled</key><true/></dict>https://docs.microsoft.com/en-us/mem/intune/apps/manage-microsoft-edge  Wondering if there's any App Config that would disable this feature or how do people control MS Edge on iOS devices.

Hi there, Has anyone figured out a way to make the local admin account created in prestage into volume owner (post prestage)? The behaviour I've see so far lines up with Apple's documentation on this topic which is that the first user signed in gets the bootstrap token.I know it's possible to manually grant the local account volume owner status but that requires the current volume owner account details which in our environment is the local accounts created by Jamf Connect all as unique usernames and passwords so this cant be scripted and automated directly.

I am getting the message saying "Self Service is a component of Jamf Pro, developed by Jamf. This app must be associated with a Jamf Pro Server. Contact your IT administrator for more information." We use automated device enrollment and the iPads experiencing this issue are enrolled into our Jamf instance. Our Self Service app is set to be installed manually to avoid Apple IDs. I have already set up the app configuration as seen on the Jamf Pro documentation. Is there anything else that I am missing? Thank you!

Hi All,I need to find a way to set MacOS to use Microsoft Edge as the default browser.  Either by script or config profile.  Alot of auth/token services do not work with Safari on Monterey so would like to avoid using it altogether.  We would also like to give users the option to move to a MacOS device and a good attraction is the ability to sign into Edge (which they used on their Windows machines) and have their favourites, browsing history and cookies appear on the MacOS version of Edge. Any help would be greatly appreciated. Gavin

I am trying to create a smart group that will show me Macs that have been booted for more than 7 days. Many times, my team gets support tickets from users that would not have been necessary if they had rebooted their Macs at least once a week. I love that Macs can stay booted for a really long time. My record is 92 days, but to get there, I had to put up with some quirks and minor issues. I just wanted to see how long I could go between reboots. I don't want my users doing this, so I want to create a smart group for Macs that are booted up longer than 7 days, and then display a message asking them to please reboot soon. I have found extension attributes that will show me the up time, or last reboot, but when I go to create the smart group, the operator shows only is, is not, like, and not like. What I need it to show is something like "more than X days ago". Does anyone know how I get this? Maybe I'm using the wrong extension attributes?

hi all, i need some advise input from anyone about my environment. we just recently build a new NDES Cert server and we use Azure App proxy pointing to our NDES to deploy 802.1x certificate to allow our azure joined windows devices access to our wifi (we use Cisco ISE for authentication and authorization). We currently have our macs bound to the domain to allow cert request (so it can request cert from the old CA if its in office). We recently got our Jamf Connect setup and have no reason to bind to domain anymore. I want to ask anyone advise of what is the best practice for us to deploy our 802.1x cert to our mac that will be Jamf Connect only? is it possible to integrate our Jamf cloud with our Azure app proxy for certificate deployment (just like intune - windows)?Or do i need to go with Jamf AD CS Connector? or do i go with setup Jamf SCEP so it can point to my NDES server (on prem)? i prefer not to do this as I want to limit the amount of network connection between my NDES servers

Hello everyone,I'm looking for help deploying AppleScript through Jamf Pro. I know the basics of bash scripts but almost nothing about AppleScript. I got the following AppleScript from one of our network administrators:tell application "System Events"set macUser to name of current userend telltryset FortiDir to POSIX file "/Users/Shared/Fortinet/Forticlient"set ztnaConfig to POSIX file "/Users/Shared/Fortinet/Forticlient/ztnaconfig.json"set FortiDir to POSIX path of the file FortiDirset ztnaConfig to POSIX path of the file ztnaConfigdo shell script "chown -R " & macUser & " " & FortiDir with administrator privilegesdo shell script "chmod 755 " & FortiDir with administrator privilegesdo shell script "chmod 644 " & ztnaConfig with administrator privilegesdisplay dialog "BW FortiClient permissions patch successful"on error theErrdisplay dialog "File permissions update failed for " & FortiDirend tryI tried to deploy it as a shell script in Jamf like this:#!/bin/bash

I feel like I'm just missing this somewhere, but is it possible to query the api to find the Jamf pro management ID? I know where it lives in the console but I would like to programmatically send a wipe computer command to device through this endpoint: https://yourserver.jamfcloud.com/api/v2/mdm/commands and that requires the Jamf pro management ID. If there's a better way to wipe a device other than this endpoint, I would also like to know. Thanks!

Not directly related to Jamf, but for those of you working in Colleges and Universities, what are the benefits of managed Apple IDs for your users?  This is via SSO/Federation in Apple School Manager.

Is it possible to deploy the OneDrive plist config file via jamf or does it have to be packaged in composer so it installs in the correct location?

I'm looking for the best way to prevent all Mac users with local admin privileges from removing a wireless/wired profile and SSID configuration for a specific wireless/wired network.The goal is to ensure that the wireless network settings are enforced and cannot be modified or removed by the end-users, even if they have admin access on their Macs.Is this possible?