When the machines have been started this morning, compliance issues were found and the Company Resources were unavailable. In the Company Portal application which is also connected to the Jamf Pro, there were two different devices with the same serial number: one was marked as compliant and the other as non-compliant. Upon refreshing and the status, the same device had still two entries: one entry showed as compliant and the other one as non-compliant. As a solution for Compliance issues, we have the dedicated procedure as seen below:Restoring ComplianceIn the event of non-compliance, users can follow these straightforward steps to restore their MacBook's compliance. Click on the respective button on the right to open the respective guideline in your support app.1. Install System Updates:Make sure that all relevant system updates are installed on the MacBook.This ensures that the device is up to date. Install Updates2. Executing Policy Updates:Implementing the latest policy updates ens

We need to downgrade a bunch of machines back to safari 17.3 from our recent update to 17.4 as the devs need it for their contract work with our clients, any ideas on how to do this?

Hello all,I have an issue showing up at random with only a select few of the iPads I manage. A certain app will not install but will show up on the device grayed out and typically says Waiting (it is properly scoped and we have enough licenses). When you click on the grayed-out app, it either does nothing or prompts to be installed via the App Store.I'm also not able to install it through Self Service. The "Install" command is non-responsive and JAMF shows the command as failed, citing that the app is already scheduled for management. I am not able to delete the grayed out app because it's not installed. I supposed I could install it through the App Store but I shouldn't have to. The iPads are 7th gens running the latest iOS and have enough storage available to install the apps.Thanks!

Wondering if there is a way to change the default shell for all users?I see that a user can themselves type  chsh -s shellnamee.g. csh -s zshbut they have to authenticate.  I could run a script at login, once, but not sure how to tackle the need to provide their password.Also, I'd like to change the system so that new users have the newer shell (zsh)

Sorry if this is a simple one but couldn't find an answer elsewhereAfter I upload a package to Jamf, is there a way to download it? Giving I don't have the original package and it's not in Composer. I need this to be able to push the package through Munki and/ or Deploy studio Thanks!

Recently we have noticed that the System Preferences keeps popping up no matter how many time you turn it off or close it. I have checked the login items and nothing is selected. Any advise?

I've recently run into the issue where machines upgraded to 14.4 have had all their printers wiped, and are no longer able to add new printers. A few posts i saw online linked it to defender potentially causing the fault with the new os.  Im coming here to see if anyones run into the same issue and/or found a solution via jamf that could be easily sent to everyone on the newest sonoma version.   

We recently had Apple's APNS support team transfer our APNS cert to a new Apple ID as we had lost the secret questions to the original account. They were able to help, after much paperwork was sent, and it was transferred.When this process was completed for us, we got a different serial number for the cert in the APNS portal, and I am getting worried that is going to break something when I renew it in Jamf. Can someone confirm that the serial number being different on the cert after Apple transfers it to a new account is okay? The topic and Subject DN are the same, but the serial number is different. I really don't want to have to reenroll a bunch of devices. Thanks in advance!

I'm wondering if there is a way to bring up a GUI (jamfhelper, cocoadialog, etc) to give a device an already created EA. As mentioned, the EA is created, I just need a way for a technician who is setting up the computer to assign it to the right EA so that it drops into scope for some policies to run based on the EA. The EA I created has the following characteristics: Data Type: String, Input Type: Pop-Up Menu . I then have a few items in the dropdown to choose. I'm hoping to be able to assign one of those dropdown items directly from the computer.

I'm not actually having a problem with something but I was playing around with being able to find a substring from the output of a variable. I can't get this to give me the expected result. #!/bin/zsh proc=$(system_profiler SPHardwareDataType | grep "Chip:" | /usr/bin/awk '{print $2,$3,$4}') echo $proc if [ "$proc" = *"M2"* ]; then echo "M2 processor installed" else echo "unknown" fi The correct result should be "M2 processor installed". I get "unknown".  I looked up how to do this and found this site: https://linuxize.com/post/how-to-check-if-string-contains-substring-in-bash/ After reading that site I changed my conditional statement to match the syntax in the article. #!/bin/zsh proc=$(system_profiler SPHardwareDataType | grep "Chip:" | /usr/bin/awk '{print $2,$3,$4}') echo "$proc" if [[ "$proc" = *"M2"* ]]; then echo "M2 Processor installed" else echo "unknown" fi This works. The only change I made was to use "[[ ]]" instead of "[ ]". I have written a lot of conditi

Hi!Our middle schoolers are 1 to 1 w/ iPads and are able to add apps from Self Service and delete apps not needed. This helps them to self-manage free space on their devicesIs there a way using an app configuration to prevent deletion of one specific app?we already have this box UNCHECKED but it does not prevent the app from being deleted (🫤): “Allow users to remove app (iOS 14 or later) Allows the user to remove this app from a device. The app is not removed from the App Catalog in Jamf Pro.”Thanks!sandy 

I've read a previous post that stated to reset the PRAM/NVRAM, which did not work. Here's the error:Things we have tried.Reset NVRAM/PRAMUn-assigned from ABM then Re-assiged. Once completed, renewed the DEP token Enabled Debug Mode,  replicated the issue for about 15-20 minutes. Disabled debug mode and then download the Jamf Pro Server log. Uploaded to Jamf support caseJamf support stated there was an APNs mismatch, but we confirmed afterwards there was not.Ran First-Aid within macOS RecoveryFully wiped the disk and cleanly installed macOSIn Jamf Pro, un-assigned the machine from PreStage, save changes, wait 10-15 minutes and then assigned it back.Jamf support is now trying to say it's an issue with Apple and to contact Apple.Not sure what to do at this point, but I'd appreciate any help.

I need help with a script to change computer name. I am using the DEPNotify Starter 2.0.1 script. I am using the Popup 3 label for the list of University Campus, Popup 1 label for the building, and would like to use the last seven of the serial number. If Campus is New York, and the building is Central Hall and the serial number of machine is 1234567, I would like that translated to NYCH1234567 I am currently using the script as a policy in DEPNotify policy array with a custom trigger. I would like to make it that as the User/Tech selects their Campus and the Building the device is assigned to, that it will use that as part of the computer naming along with the 7 digits of the serial number. !/bin/shset serial variableserial=/usr/sbin/system_profiler SPHardwareDataType | /usr/bin/awk '/Serial Number (system)/ {print $NF}'appendserial=echo "${serial:5}"fordhamname=APPLE${appendserial}/usr/sbin/scutil --set ComputerName "${apple}"/usr/sbin/scutil --set Loc

When did the Jamf ID password policy change?I could not log in to my jamf account today.It looks like the password needs to be changed to at least 15 characters and include upper and lower case letters and numbers. Thanks.

We have had a cloud instance for a while now, and we've only been managing machines in our region, we're taking over the management for another region soon, and would like to use Sites to manage those. Having created a new site, one for ourselves and one for the other region, I see that all existing config, devices, policies and settings fall under the Full Jamf Pro default site. We haven't yet added any settings for the new region or any machines, so right now I'd just like to move all existing data into the site created for our region. Does anyone have a checklist of all the things that need to be attributed to a site? Or any other clever ways of doing this?   

Hi,We are having a weird issue in our environment. Few users are not able to complete Intune registration. While triggering Intune registration from self service app, Company portal is prompting for authentication in a loop. After 3 times, it would eventually fail.troubleshooting tried so far:-Deleted device from AAD-Deleted device from Intune-Removed company portal cache and also re-installed company portal app-Deleted the device from JAMF, removed MDM profile and re-enrolled the devicePer sign-in logs in AAD, there is a success for company portal sign-in. Just wondering if you have experience similar issue ? Any troubleshooting would be helpful. Thanks! 

How does one go about calling data from the JSS for use in BASH scripts? For example, I have the following code: /System/Library/CoreServices/ManagedClient.app/Contents/Resources/createmobileaccount -n $username -h /Users/$username -S -v For $username I would it to equal "Username" from a targeted computer within JSS> ComputerName> User and Location> Username. My use case would be for users of Casper Remote who were to migrate Network managed users to Local managed users. They would select the target machine within Casper Remote and a script that basically performs the above. They don't really need to lookup who the user is because JSS knows what user this computer belongs to. So for them, this process is very easy because I am leveraging JSS's database.

In the computer lab where I work, we use a generic student user account for all students on our Mac computers, and for privacy reasons, all web browsers are set to run in private "incognito" mode. Recently, with the introduction of the new Microsoft Teams (Work or School) app, I observed a couple of issues related to user logins. First, users could automatically be logged in by simply clicking their names on the splash screen when Teams loaded. Second, sometimes a Teams user would remain logged in even when the macOS user had logged out. To address these issues, I conducted some research and found that Microsoft's recommended solution is to delete Teams login information from the keychain. However, they do not specify which keychain entries need to be removed. After spending some time investigating, I identified the keychain entries related to Teams. It's worth noting that some of these entries are stored in the "Login" keychain, while others are stored in the "Local Items" k

First Post!Started a new MacBook Pro from Prestage Enrollment yesterday morning, looked great at first. I pulled up the Applications folder and sorted by Date Modified (newest) so I could keep an eye on the Apps as they popped up. Just Protect popped up. The rest never did. Checked the progress in JamfPro (Cloud) and all the apps are in Pending status. Looked again this morning, still pending, Checked all the scopes and looks fine. Just for giggles I put together a .pkg, wrote a policy to push it out to that laptop and two others that had used same pre-stage successfully. Those two grabbed the .pkg almost immediately, the other didn't. Those two were scoped identically to the third that failed.yes - The computer is checked in the pre-stage enrollment in Jamf.no - it did not inventory much at all except the basics, did not pull in the user info, current apps list, etc, that you would expect to see when a Mac does that first inventory upon enrollment. A little bird to

Hello, I've been using Jamf Connect for a while to sync users account, but since (I believe) the upgrade to Ventura, the login screen for Jamf Connect is always skipped on reboot.We are using Filevault, so usually I would simply run the command bellow to set the Jamf Connect login screen back in. This worked for every MacOS upgrades since Mojave./usr/local/bin/authchanger -reset -jamfconnect But since Ventura, the Jamf Connect login screen won't show up after a reboot. Even if I use the authchanger reset command. I just updated Jamf Connect to 2.24 unfortunately resulting to the same problem.Did this happen to anyone else ? Were you able to fix it ?

I am attempting to get policy statuses for computers from the API. I found a few older posts (from around 2015) saying it wasn't possible, but I also found this post (https://community.jamf.com/t5/jamf-pro/extract-a-jamf-policy-status/m-p/252920) that gave me some hope. I connected with PowerShell and was trying this:$url = "https://domain.jamfcloud.com/JSSResource/policies/id/318" Invoke-RestMethod -Uri $url -Method Get -Headers @{"Authorization" = "Bearer $token"}I get a response, but without any information:xml policy --- ------ version="1.0" encoding="UTF-8" policyAny ideas on returning policy statuses with the Jamf Pro API? 

I know this has been asked previously but want to know if there is any work being done to fix it apart from working directly on the affected Macs?The school has Jamf Connect synced with Google. If a student forgets their password it gets reset at Google but then they cannot log onto a Mac that they'd previously worked on as the old password is needed. Only fix is to login as a local admin on that mac and either reset the password or delete that user. This seems to be a known issue. Is there any work being done that can somehow sync passwords when the students are not logged in so we don't have to go around manually fixing it all the time?ThanksAndrew

Hello,I am attempting to create a custom Jamf Connect Menu Bar using the second example from Jamf's documentation (https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/Custom_Menu_Bar_Action_Items.html). While on a brief call with Jamf about work arounds for the 802.1X PI, I was told to use the command of "open url" to the self service policy. I am referencing the install item URL template (https://learn.jamf.com/bundle/jamf-pro-documentation-current/page/Jamf_Self_Service_for_macOS_URL_Schemes.html), but I am struggling with the XML in the PLIST and it keeps telling me my formating is wrong because I don't know which commands to use exactly; if I'm even going about this correctly. Does anyone have any examples of a PLIST running a policy from Self Service from their Menu Bar?Thank you

we need to remove VPN Icon from menu barany idea how to achieve this via configuration profile? 

Hey guys, I noticed that wiping our Macs reverts them to Ventura from Sonoma and was wondering if this is expected behavior. If it is, does anyone have recommendations for how we can get them updated as soon as they've restarted? If this is not expected behavior, does anyone know of a proper fix?