Hi there, I've been trying to find a way to get an extension attribute in Jamf to look at "/Library/Management/super/super.log" for a line: Parameter Error: You can not use both the --deadline-count-soft and --deadline-count-hard options at the same time. You must pick one deadline count behavior. And report the result of true/false. I have a policy setup to uninstall and reinstall super from there.

Hi there, We're currently using Installomator/swiftDialog scripts to handle patch management in our environment on Jamf Pro. We noticed some behaviour from the end-users, specifically how they tend to ignore the prompts for most application updates. There are some key applications that when we push updates to, must get updated as soon as possible. What solutions do you use for this? What I had in mind was a means to "nudge" end-users to update followed by a separate workflow to kill app process and update.

Hello All,Please help me a payload to upload in jamf pro to grey out "Launch Automatically after login" option under DisplayLink.Thank you. 

Got this message in Jamf pro server tools in the Tomcat tab after upgrading to 11.4.1: Error: failed to start the server: could not find the service named "Tomcat8". But the Apache Tomcat 9.0 service is running. Is this a "cosmetic" error. Gui version 3.1.1.Everything seems to work despite this error message. 

Hi,I have a problem with my patch management. Most of the software that I am patching via the management has only under 10% of the computers on the latest version with most of them scattered across many different versions. How can I remedy this? My current settings for the Patch Policies are:Distribution method: Make available in SelfServiceUpdates deadline: 7 daysGrace period: 15 minutesShould I use different settings or is the problem somewhere else. Some of the Software is installed on hundreds of Macs.

I am trying to create a PLIST file that has nested Keys.  I have tried to use Default Writes, PUtil and Plistbuddy.  Below is what I am trying to accomplish in the plist file. Can someone please assist in the command to get this to work. <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN""http://www.apple.com/DTDs/PropertyList-1.0.dtd">‹plist version="1.0">‹dict>           <key>DC</key>            ‹dict>                           <key>FeatureLockdown</key>                           ‹dict>                                            <key>bEnableGentech</key>   

I thought one of the benefits the Jamf Cloud Services Connection was supposed to provide was the ability to finally manage the icons we've uploaded for self service. If it's there, I'm not seeing a way to do that. If it's not there, is that ever going to be a thing? 

Hi everyone! I am the IT responsive person at a primary/secondary school at Spain. We have 100 managed iPADs.I've recently moved from Cisco Meraki to Jamf School.I'm experiencing a problem with certain Apps automatic installation.For example, Bee-Bot and Blue-Bot Apps.Bee-Bot was added to the JAMF account and installed without any problem, but when I try to install Blue-Bot for all the iPADs, an error message is displayed at the iPADs screen. It says: "This Apple ID is not valid to purchase content". I don't know how is the exact translation to english since we received the error message in spanish.So the App is not being installed.I tried adding 200 licenses of Blue-Bot first at Apple Shool Manager, but nothing changed.Please, any idea that could help? Thank you!Jose

Running a managed MBP and iMac and was wondering what a simple solution would be to backup my machines. I realize most of my data is in iCloud (and the cloud) but as of late I've had to reinstall my apps and it's a royal pain - even though some of then were on the App Store some were not and one has to hunt down old serial numbers and find the actual place where you can download the software. I know there is the update feature using firewire cable but I will need to do a fresh install as it's a new MAC.I'm thinking a simple TimeMachine backup may be ok, was wondering if superduper  (I don't really need a notable backup) would be ok too as I've used that before. I know these backup solutions work great but was wondering how adding the whole managed computer / Jamf thing into the mix would effect these backup strategies?  

Hi,I'm preparing deployment of the admin-by-request tool Privileges (https://github.com/SAP/macOS-enterprise-privileges), but I've run into a snag when I try to install it via Jamf.So, the package that I've made has the .app, the LaunchDaemon and the PrivilegedHelperTool, all according to the documentation, and they all install fine. But when I run it the first time, I get the following prompt asking me for adminstrator credentials to install the PrivilegedHelperTool again: If I enter them, it works as expected, but the problem is that I want a standard user to be able to install this without entering any admin credentials.Has anyone encountered this problem? I don't understand why it wants to install it when I've already pre-installed it via my package.

Hi Everyone, Today's crisis is related to VMware Fusion. We have version 8.5 installed, however, we are finding out the license we used to install it is expiring in 5 days. We are working directly with VMware to acquire a new license to use on our Macs. The question is, does anyone know of an easy way to package up or push out the new license without the need of repackaging Fusion? Thankfully, this is only affecting a handful of our Macs. Thanks in advance.

We are pretty new to Jamf and still trying to understand the scripting.  We have a renamecomputer script that we got as part of our onboarding for computers.  Was working great till we started sending in the department on the user from Okta.  So now the naming is off.  I am pretty good at Powershell and C#, but bash scripts I am struggling with.  Is there way in a bash script to look up a department value in like a switch statement?example if the department is "IT", then can you do something like this?switch (department)case "irs":     value = 123case "IT":     value = 987Any help or pointers to reference links would be great.  I am not sure what the bash term would be to do that so if I can get someone to help with that, might be able to get this figured out.

Has anyone had success with the EraseDevice API call?I have the shell command: /usr/bin/curl --silent --show-error --connect-timeout 30 --request POST --user "username":"password" "https://site.jamfcloud.com/JSSResource/computercommands/command/EraseDevice/passcode/123456/id/#" but I keep receiving the error: <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Unauthorized</p> <p>The request requires user authentication</p> <p>You can get technical details <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2">here</a>.<br> Please continue your visit at our <a href="/">home page</a>. </p> </body> </html> The user account making that API call has read, update, and delete permissions on the JSS Object, Computers, and it has the JSS Action, Send Comput

iPadOS 17.* with Jamf Safe Internet. Under VPN, DNS, & Device Management Content Filter reads Invalid. Anyone know what causes this and or how to fix?

This may not be specifically about Jamf School but looking for a general recommendation and I think Jamf School users would be most likely able to relate.Our school division is trying to re-use older iPads which use iOS v12.5.7 as the latest OS.  The iPads are being used for communication devices for limited use cases.  Places where only 1 or 2 apps are needed so we can lock these apps down.The use case I'm trying to address is where teachers need to lock the app down to a video library where only the 5 or 6 videos can be accessed and nothing else.  If the students in this case have access to any other apps they will get distracted and sometimes combative.One idea was to use something like Microsoft Stream in Single App Mode but it isn't compatible with iOS v12.5.7.  It works in Google Chrome and I'm currently looking into using Chrome Browser Cloud Managment along with a content filter to lock the student into Microsoft Stream web version.  I don't really pref

Hi there !Currently got a frustrating bug in Jamf Pro as it happens as soon as I log off (manually or via auto logout).I'm used to the interface in english but since the version 11 of Jamf and the new interface with translations, it keeps ignoring my setting to keep the interface in english and shows me french as soon as I login.Computer language is french, Chrome is used and empty cache/private navigation/Firefox got same issue.Timezone in Paris/Monaco does not change anything. How to reproduce:On top right corner lick on Account Settings when logged/Language & Region/ set language to english, save and logout.When I log back interface is back in french even if setting is still in english. Workaround:Set langage to french (but anything should work I think), save, set it back to english, save, interface back in english until next logout.Hope it can be fixed soon ! 

I've been trying to created a managed folder of bookmarks/favorites deployed via Configuration Profile to Microsoft Edge. It isn't available via the JSON custom schema.    I've uploaded this plist, borrowed from Talking Moose, using the com.microsoft.edge domain. This info outlines how the setting should work:https://docs.microsoft.com/en-us/deployedge/microsoft-edge-policies#managedfavoritesMaybe I'm missing how to make the setting "mandatory".Thanks for any help.

Have an application that I  want  to use with that (EndNote) but it needs some extra scripts to run (with SmartGroups) after installation but I cannot find the "Update Inventory" option after this application is installed. (manually) is that not available if you use Mac Apps ?thanks

I've been down the rabbit hole of deploying Cisco's new Secure Client and I am running into an issue that I cannot find any documentation on. Some context: we only need the Umbrella Module for our school and nothing else that is loaded within Cisco's PKG. I have been successful with deploying the choice XML file, but I get the following pop-up in the installation:  I would like this permission to be enabled within the config profile I built in jamf, but I can't seem to locate any of the info I need to do so. I already have gone through Cisco's docs and pushed out the System Extensions payload, but that seems to be just for the Cisco Secure Client itself and not this "AnyConnect VPN Service." If I manually toggle it on, the Umbrella Roaming Module will activate and work as it should, but if this is not toggled on, then the roaming stays inactive.   Any ideas? I am assuming there is something I am missing in the System Extensions payload, but I could be wrong... 

Hi everyone, We just implemented Jamf Connect and are still testing it. We had issues with devices randomly getting kicked off AD, so since we are on AzureAD now, we decided to get Jamf Connect. When we set everything up when a user logs in, we can reboot the machine, and someone else can log in. Now, after a reboot, no one else but the last user can log in. How can I get out of this? What are your best practices for using Jamf Connect in a lab environment?  Thank you

Is there any benefit or drawback to installing config profiles through prestage (where it says "Use this section to add configuration profiles to the PreStage enrollment") vs. after enrollment (a config profile scoped to all computers)?If the former is advised, would I then remove all scopes in the actual config profile(s)? As it stands, right now we don't install via prestage. Rather it enrolls, it does its thing, then installs policies and config profiels.Thanks folks! :)

I am unclear as to how to keep licensed Apps, like FileMaker Pro, up to date with "Apps" in the JSS. I found lots of good stuff like Adobe Reader and I see FMP in that list too but how does it handle licensing? Testing with Reader worked flawlessly. But its a free app. It would be nice to use that Apps - JAMF apps area to keep as many apps up to date as possible to avoid packaging etc. Can anyone point me in the right direction for that, video on TY or something? Cheers.. 

We've got a Journalism cart that has about 26 MacBooks in it. Some issues popped up and I wanted to test clearing out the profiles daily because some students just don't listen and keep ~50GB in their profile even though they have external drives for their work.I have a pretty simple script that just makes sure to ignore our admin accounts and runs a..for a in $userListsysadminctl -deleteUser $aThis seems to work and the home folder is gone but the account is still technically there when you go into users and groups. So when we try to login the MacBook just hangs since there's technically an account still there but no home folder.These users are not secure token holders since only students use them so it's not that and they are Jamf Connect created accounts.Is this just not possible on M1s? They had Intel Macs before I got here and said they used this script all the time but now it just falls a little short with fully removing the account from the device.

Hi, We have a Configuration Profile pushing out our WiFi settings with certs currently, but recently the first batch started expiring. They get renewed, no problem, but the expired cert is left in the keychain. I'm trying to script the removal of them using the following script, so they can't be selected for the wireless profile. #!/bin/bash # Grabs the expired certificate hashes expired=$(security find-identity | grep EXPIRED | awk '{print $2}') # Check for certs if [ -z "$expired" ] then echo "No expired certificates, we're all good" else # Deletes the expired certs via their hash echo "Deleting expired certs" security delete-certificate -Z $expired fi exit 0 #success If I run these commands locally on the machine, then it works no problem, but via a policy it always fails with: 'Unable to delete certificate matching "XXXXXXXX..." Any thoughts? Is there a better way to manage certificates for WiFi profiles? ThanksChris

Details Executing Policy Install Cisco Secure Client 5Downloading Cisco Secure Client 5.1.pkg...Downloading https.jamfcloud.com/jcds/downloads/Cisco%20Secure%20Client%205.1.pkg...Verifying package integrity...Installing Cisco Secure Client 5.1.pkg...Installation failed. The installer reported: installer: Package name isinstaller: Installing at base path / installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. The package is attempting to install content to the system volume.)