I have been stuck on this for the longest time. I am unable to do an iPhone to iPhone migration. The new device is enrolled in DEP/ABM and my current phone is not. The setup assistant shows up, I take my old phone and scan the blue globe. At this point I only get the option to do iCloud backup/restore to the new device. I no longer get an option to go device to device. Has anyone else experienced this issue before? Apple support is stating that it could be an issue with DEP/Jamf not allowing the Device to Device option. If I remove the device from Jamf/DEP, that would essentially throw away the reason to even have these devices in jamf or pre-stage.   As the screenshot shows, I am not blocking any of the Setup Assistant steps or auto advancing.   What I did is I went into Apple Business manager and removed the new phone from hitting any MDM server. I wiped the device and attempted the Setup Assistant with my old iPhone next to it and that gi

I am getting an issue on Mac mini (Late 2014) after upgrading it from 10.14.6 to macOS Monterey 12.7.3 through downloading installer from App Store. It says it cannot open a perl script. I've given the full disk access to terminal, sshd-keygen-wrapper. I am still getting the same issue. I am able to run the script directly from my ssh terminal but when automation tool (through ssh) tries to run the script the error is getting. /NFSmountDir is actually /System/Volumes/Data/NFSmountDir

We have some tools in Self Service only available to Jamf admins. Like a Microsoft uninstaller. I remote into user's computers and try to log in to Self Service to get to my admin tools but whenever I click on the log in button, it is already trying to log in with the local user credentials and I can enter my admin credentials. Is there a way to prevent that from happening? 

Hello,  we currently distribute ipads to users and then walk them through entering Vantagepoint server info and registration. We also do the same for apple id registration. I was wondering if it is possible to automate this info using Jamf? Like for example, once a user is assigned to an ipad in Jamf, is there a way for Jamf auto sign into their icloud account?For Vantagepoint, would their be a way to prepopulate server info? Thank you!

Hey everyone ...trying to install a package to all my fleet, it got installed successfully on all of them except 1 Mac !!"Installation failed. The installer reported: installer: Package name is XYZinstaller: Installing at base path / installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An error occurred while running scripts from the package “zyx.pkg”.)What does that mean? why only that endpoint!?

Greetings all,Is the Jamf One app for iOS obsolete?  I hadn't used it in quite a while, and when I tried today it gives a network connection error.  In investigating, I don't see it on the App Store anymore either...

Hello.I'm trying to ensure teams is closed prior to updating app and getting errors when trying to force close it. killall "Microsoft Teams (work or school).app" Works fine with Classic teams i'm sure it's something about work or school part getting lost in code just don't know how to fix it. Thank you for your time.

Hi there, Does anyone know of an app (preferably tied to Jamf) that is capable of hardware diagnostics? i.e temp, storage limits and general performance related variables.  

OOI, does anyone know of a way of deleting existing icons uploaded when creating Policies?Have a couple of duplicates/redundant icons that I'd like to just tidy up.

Here is the script I started using from Jamf Nation:  Parameters:  Error:   I found the Waiting Room and I had to give myself permission to view the folder because I don’t have access    The agent file is there.  But it fails to install.   Is there anything I should do?  It is failing on all of our organization's Macs. 

We have 100 MacBooks that we manage with On-Prem Jamf Pro.   We have seven (7) different VPN servers that our users can choose from to connect to the company's network.  Jamf is working normally on all machines EXCEPT for the MacBooks connected to our NY VPN server.  For the 5 people on the NY VPN server, they all have Pending Management Commands stuck for weeks, maybe months.  I clear them out, but they come back and go Pending indefinitely again.  Even the built-in commands (like InstalledApplicationList, SecurityInfo, ContentCachingInformation, ContentCachingInformation, CertificateList) are stuck Pending as well.  I cannot send any Configuration Profile to any of these machines on the NY VPN.  But the same Config Profiles work everywhere else.  I don't think that re-enrolling them in Jamf is an option since they are all working from home and also because the "Allow MDM Profile Removal" was not checked in the PreS

Just updated our jamf cloud to 11.3 and noticed that I have a whole load of config profiles now in 'No category assigned'  Prior to the upgrade all our config profiles where in the correct category.  As we have a pretty robust naming convention this took only a little bit of work to get them back where they should be.. but... better things to do!   Any one else? 

Hi JAMF Nation,Did anybody here find a fix for the Microsoft 365 problem with JAMF? I tried all the possible combinations, but without turning off security defaults, it just does not work well. How did you guys go about it?I also tried using AWS SES but to no avail, practically a wall at this point. 

Am I right in believing I have to change the setting for "autoDeployEnabled" to true before I will be able to see the password of a local admin? At the moment if doesn't appear to do anything even though it will pop-up a message saying viewing the password will cause the password to rotate in 1 hour.Currently just looking to see what/how this feature actually does. 

Hi Jamf Nation!I have some questions about what happened in a MacBook after it received the WIPE command, rebooted but without the firmware passcode being authenticated? Could the command be cancelled in any way?We have a MacBook Air (Retina, 13-inch, 2019) with Intel chipset running macOS 14.3. WIPE command issued and it is now stuck at the user login -> reboot to firmware lock loops."Clear Activation Lock" option was chosen when attempting the command, but it says activation lock not found, so the WIPE command was issued without. After the command was sent, the MacBook immediately rebooted into the Firmware lock, which then we realized the passcode is unknown. Attempt to boot or reboot the machine will first goes into the user login page, and ended up at firmware lock after user authentication. We did not reach the steps to enter the 6 digits arbitrary passcode.I read this from the previous post:@talkingmoose wrote:If the computer has been protected with a firmware passcode,

Hi! I decided to test using the Inventory Preload option on to PreStage enrollment of one computer. I got the CSV file completed and uploaded it successfully and it shows up as the Active data. After doing the PreStage enrollment (no previous record of this device), I don't see that it applied the preload data. I did only complete the serial number, department, and building fields in the CSV file since those were all I needed. My question is, does anyone know if certain fields (besides serial number) are required for this to work? Has anyone else had this happen or something to try? Thanks!

I am getting an error message "The operation couldn’t be completed. (com.jamfsoftware.task.errors error 5.)" on the logs of a policy for only one endpoint. All that the policy does is to remove the EFI password. How do i fix that?Is there a way to check through jump maybe that error is caused because the endpoint has no EFI password at all?

Reposting this from my personal website to gain some visibility.  UPDATE 1: I'm being told now that this change IS RETROACTIVE. Meaning your dozens/hundreds/thousands of endpoints that have been configured with Prestage enrollment, and an admin account created in that process, will have that password randomized. Which will break Secure Token/Volume Ownership/etc. Maybe you're okay with this, but if you're not, you NEED to reach out to your Jamf Representative and tell them.  I wanted to bring up that a big change is coming to Jamf soon and they (Jamf) seem to think it’ll be well received all around: forced LAPS for Prestage (ADE/DEP) admin accounts (See bullet 2 here, https://learn.jamf.com/bundle/jamf-pro-release-notes-current/page/Deprecations_and_Removals.html, “Functionality to specify the local administrator account for computers in a PreStage enrollment”). And to start with, I applaud Jamf for working on a LAPS solution. All we've ever asked in this whole

I've run into an issue with signing back into a Mac (macos 14.2.1) and I'm not exactly sure if it's related to JamfConnect. Our fully configured Mac is running Jamf Connect 2.29. I'm logging in with an administrator account created during PreStage enrollment. After no input for a while, the Mac goes to sleep or screensaver. If this state remains for too long, the mac won't complete the login. I can enter the credentials but it just give me the thinking circle and never completes the sign in. All input becomes disabled and I have to force reboot it. Afterwards, I can sign in again without issue. Troubleshooting is nearly impossible because I can't get response from the system while it's having the issues. Can anyone point me to logs or files I can reference afterward? Has anyone else seen this with Sonoma?

Can anyone provided details on what this feature does and how to configure it, as I'm not find the documentation very clear. I'm hoping that using it will allow a standard user to enable System Settings > Privacy & Security > Screen Recording & System Audio for Slack, but I can't work out what value is suppose to go in the Code Requirement field.

HiOur Jamf AE is being deliberately unclear on licence requirements when it comes to Jamf Connect.I was under the impression that we only needed one licence to add Jamf Connect to our Jamf Pro environment.He says we may need more but can't say why?!What is required?We have many machines added to our JAMF Connect pre-enrolment scope with no issue.Are licences required for each machine?

Hi, I am currently trying to replace Teamviewer 12 Host with Teamviewer 14 Host.I previously found a script on here and got it to work using Dropbox to host the PKG and Assignment files, as seen in the below script. Teamviewer have now bundled the Assignment file with the installer but trying to call this doesn't seem to work via Jamf. If I run it in Terminal, or from a local script file it will work but neither option works when calling from Jamf. I can continue Installing v12 and then running the v14 installer on top, which will retain the assignment but I'd rather it was installing cleanly on new devices. Run Assignment Tool (trying to run this directly from Jamf) /Applications/TeamViewerHost.app/Contents/Helpers/TeamViewer_Assignment -api-token *******-********************* -group-id g******** -alias "${ComputerName}" -grant-easy-access -wait 10 or creating a PKG to drop the Assign.sh file locally and calling it via the Jamf script sh "/Library/Applic

I have a configuration profile that adds our VPN configuration. I then have a policy that kicks off this simple bash script. open “/System/Library/CoreServices/Menu Extras/vpn.menu” All this does is check the box for "Show VPN status in the menu bar"This is the error that I'm getting.Script result: The files /“/System/Library/CoreServices/Menu and /Extras/vpn.menu” do not exist. When I run the command in the terminal it completes successfully.

I am working on printer deployments and have a question. I can push the HP or Xerox printer drivers to a machine, however the files are usually in .gz format. This is an issue since Casper wants the PPD file. Is there a more direct way to get the ppd sent to the machine? Do I need to script this, or am I making this harder than it needs to be? Thanks for any help!

How do I re-enroll, using Automated Device Enrollment, a MacBook that was factory reset by a user on being issued a new MacBook. Looking to repurpose the device for another user, but when booting it up it goes through the standard user experience rather than MDM.The device is still listed in Apple Business Manager and associated with the MDM server, and in Jamf Pro in the corresponding PreState Enrollment set-up it is listed as being in Scope. Despite this it doesn't appear to be running the PreStage Enrollment.