Hello Jamf Community! I'm making an extension attribute that basically tracks if a local user is at the Standard level or Admin level. I've ran the script in 2 test macs in our environment where one Mac is a Standard account and the other is an Admin account. For whatever reason, the extension attribute will always resort to "Admin" as the result. I've tried several things to trouble shoot this. Here's what I've done.  Originally the elif statement was an else statement I've switched the if statements where it would be != 'Yes', is_admin would be No. and vice versa. I've ensured these script worked by running the script in terminal for both test macs, and they should work.  Not too sure what is going on and I'm thinking it's just my jamf environment now. Does anybody have suggestions on what might be going on?  #!/bin/bash result='' # Get the current logged-in user current_user=$(whoami) # Check if the current user is an admin is_admin=$(d

Hello!My company is going through the early stages of a merger and we're looking at bringing the other company's Macs into our Jamf environment. This is a little premature since we haven't yet combined our LDAP or ABM but the powers that be are requesting it. I wanted to see if anyone has had any experience with having a second LDAP provider and ABM account connected to their environment or if what we're looking to do is not possible.

One of our users complained that his machine is running slow after Jamf enrollment. "Hi there,Might just be a coincidence, but the performance of my Mac has massively slowed down and become very laggy since the Jamf install. During a call earlier my laptop just restarted." Unfortunately this is not the 1st person to complain about that.  The specs are :  MacBook Pro (14-inch, 2021)Processor Type: Apple M1 ProNumber of Processors: 1Total Number of Cores: 10Apple Silicon: YesArchitecture Type:arm64Operating System Version: 12.1.0Operating System Build: 21C52 As admin are there any troubleshooting steps I could follow and check what is wrong with his machine ? I want to stress that this user hasn't complained at all before the enrolment. 

Hi,We use EntraID for single sign on purposes are my organization. We use JAMF connect to serve our SSO login screen to users when logging into their Macs, and we also use passthrough authentication to streamline the process a bit. In our JAMF Connect config profile, we have OIDCPassthroughAuth set to true and OIDCNewPassword set to false, as per the passthrough auth instructions for EntraID. Here's the issue: we have a password rotation policy in our organization. When the a user's org password rotates, the SSO password they use no longer matches the local account password on their mac, and after the SSO challenge they will have an "incorrect password" error when signing in. Is there a way to make it so that when their organization password rotates, it updates their local account password on their mac? Thank you.

I have noticed that ever since our JamfCloud instance was upgraded to 11.1, scrolling in Jamf Pro frames using 2-finger scrolling or a scroll wheel on a mouse rarely works. It seems to happen at random in some pages, but the one place I can replicate it 100% is Computer record > History > Policy Logs.  I can NEVER scroll down the frame in the page using 2-finger scrolling or a scroll wheel. I have to either manually drag the thumb up and down or I have to use my arrow keys.  I use Safari exclusively, so I don't know if it happens in other browsers. This seems to be too specific to be a system issue. Scrolling works everywhere else in my browser and the OS. Has anyone else noticed this too?

Hi folks, please forgive my lack of knowledge in advance.  I am very new to Jamf Pro and have been slowly making my way through the mountain of training but also need to be able to utilize it dailiy, for my current position.In our environment, which I inherited, We have exactly 5 items available in self service.  2 of which I created, 2 that relate to existing packages and 1 that I cannot find in Policies (or anywhere else for that matter.) I've tried to look up possible package locations, as well as the app itself, to no avail.  I'm trying to figure out what it does...   I'm guessing it's a script of some sort, created by my predecessor, but I'd like to investigate the script, to see what it does, and remove it or update it if necessary.  If you're wondering, yes, I've run it.  It did not give an error message or any other type of message.  It seemed to run through it's process and stop. My question is: How to I locate the package?&nbs

Hi everyone,  i can for the life of me work out how to efficiently deploy updates to my devices. I have been testing with Sonoma 14.0 as a baseline and JAMF 11.2 in the lab.What i want to achieve is deploy an update and allow the end user to defer it by a number of days. I have tested deploying an update and installing immediately and it works. In JAMF, Computers > Software Updates > i can target a group with the option : Download, install, and allow deferraland i can specify a number. Apparently these are the deferrals i can allow the user. How do i specify the days i want the user to be able to defer? Do i need a config profile?Is software updates solely from JAMF really achievable ? I think i am wasting my time here. Will Nudge or any other script help with that? I am at my wits end with how updates work on Macs.Any insights would be appreciated. 

This is kinda complicated, but the Mac is not checking in every 15 minutes.  In fact, it hasn't checked in since Mid-December, but a few management commands have run. Is there a way to remote force a check in without removing in and running the sudo command?  It would seemingly have to be a configuration policy?  Since it is only one user, I should be able (if responsive) to remote in and run it the terminal, but if the user isn't responsive, I still want it to check in since there have been updates that need to be installed.

Do the 'Start Screen Saver after:' and 'Use Screen Saver Module at Path:' settings still function properly for the 'Login Window' configuration profile (JAMF Pro 10.46) in macOS Ventura? We attempted to apply both a custom screen saver and one of the built-in options but are not seeing any of the desired results.Curious if I'm missing something. 

I'm having trouble getting Jamf AD CS connector to work flawlessly, and wondering if anyone else has a similar use case, and if they managed to solve it. Recently procured JamfOn-Prem ADAD CS setup in a different domain, but there is a trust relationship (and it works for other MDMs and bound clients)Using a domain user account, instead of the local user (AdcsProxyAccessUser) created by the .\\deploy.ps1 The domain account has been configured on both the AdcsProxy site configuration, for  oneToOneMappings under system.webServer/security/authentication/iisClientCertificateMappingAuthenticationIt's also been modified to be the Identity for the AdcsProxyPool.  Certs issue successfully, but only if the same user account is a member of the administrators local group on the server.Jamf Support are saying this shouldn't be the case, but cannot get to the bottom of which permission it needs that's granted by Administrators, that it needs to successfully issue cert

Hi Mac Experts,I have an end user who started the Sonoma upgrade and powered their laptop off during the upgrade process. When they powered it back on, it finished the upgrade, but they can't login with their main account.  My tech team was able to login with our admin account. I also was able to create a new account for them on the computer, which works fine. I know I can just migrate their data over from the corrupt account to the new one, but I really want to fix the old one. So here is what happens:They boot their laptop.At the login screen they enter their original username and passwordIt starts loading their profile and they see the new Sonoma desktop background.Then it gets stuck,  nothing else loads, you can't control the computer with either your keyboard or mouse. Their only option is to power cycle the machine and log in as another user.So from a MacOS technical prospective, what items are necessary for a profile to work correctly? What parameters, plists, etc

Hi,After upgrading a suite of iMacs from Big Sur to Sonoma, the dock now has ? instead of applications. They do not work when clicked on.I have read some posts on here but nothing has helped me understand where the problem is.To be upfront I am new to Jamf Pro and this system was already setup before I looked at it.I have gone to Settings, Computer management, Dock items. In there are entries for the dock items. Each one is currently in the same format and here is Google Chrome as an example:file://localhost/Applications/Google%20Chrome.app/ Is this entry correct? Is there something else that controls that Dock that I am missing? Adam

Hi all,I have a question about using both JSS and MS Intune together with Apple Classroom. The (student) iPads will be managed with JSS and the (teacher) MacBooks will be managed with Intune. Will it still be possible to use Classroom? Thanks in advance!J

We have an application, Coginiti Pro, that requires a user to have elevated rights before installing on the Mac, or else the install doesn't work correctly.We use Jamf Pro, and currently I've added some text to the Self-Service installation page telling users they need to elevate their rights before running the install. We use the Privileges app for temporary rights elevation.I was wondering if I could script this. The current Coginiti Pro install we use is a script rather than a PKG. I'd like to add some code to the script that says "check if the current user is running as a standard user". If so, I'd display a message reminding the user to elevate their rights before proceeding.Is something like that possible? 

Am I able to stage a .sh file on my user's computers?This script contains a sudo command but I want to be able to run from the user's account. This will be a break glass script to fix the stupid Sonoma Time/Date bug. What file permissions would I need to assign as well?

Hi All,Does anyone know why the Management Command tab  (See the attached image -02) is missing from some iMacs on the JAMF? Imac is communicating to the JMAF server but I can not push any software or any commands.Help will be much appreciated       

Hi All,I'm trying to install the app using a Self-service on iMac. I can see the app on the Self-service portal but When I click on the install button I get the error  Cannot reach a JAMF MDM serverWhen I check the device on the JAMF server it communicates with the server  This is the error that I get When I click on the install button Help will be much appreciated  

I have an iPad in Lost mode. I am unable to connect the device to our WiFi to get it out of Lost mode. Please help.

Hi,  I know there are some similar posts notably this one here: https://community.jamf.com/t5/jamf-pro/popup-user-notification/m-p/235439/thread-id/223319 but I'm relatively new to jamf pro and just looking for a bit of similar more tailored advice. I want to be able to set up a 'notice for a new user' policy that pops up only once on a Mac for the first time a user logs in, which has an accept button that the user must click for it to disappear.(a bit similar to accept terms and conditions before downloading a new program I guess). If the user does not click accept, then the policy stays on screen/ keeps being presented until accepted. Is it possible to  do something like this, maybe using some of the ideas presented in this thread above?  I'm up to Jamf 200 but not had much experience with creating policies or with scripting  yet, but I'm fairly confident I could  hopefully follow along some tips or any advice given here, thanks.

I'm trying to establish the last time a user actually logged in to their laptop. I have, therefore, created a Computer Extension that runs a simple script that is supposed to display a String result in User and Location:#!/bin/zsh/usr/bin/last -1 -t console | <result>/usr/bin/awk '{print $4, $5, $6}'I added the Computer Extension to the Configuration Profile under ALLOWED EXTENSIONS but nothing ever seems to be displayed. How are Computer Extensions actually meant to work, i.e. how am I meant to actually see the data that is gathered???

Dear all.Is anyone of you aware of a way how to prevent the auto-starting of Teamviewer (and with that, the basic setup assistant) after the installation?I have seen that there are quite a few Launch agents and Launch Daemons included in the installer package, but I don't really know how to manipulate the portions in there to just block the auto start after installation.Any idea? Thanks a million.CheersChris

I'm trying to deploy FortiClient 7.0.2, and I have some questions about order of operations and whether this is going to cause trouble on specific OS versions. I still have some more testing to do but it seems to work on the one I tried, but maybe it was a fluke. I can post configs as necessary, but I suspect that they aren't needed for these questions as it's more about how these functions work.I have a script that grabs the file from our server and installs it. That works. I need to get curl to fail out of the script if the download fails, but I haven't looked into it yet so I'm sure I can find a way.Unfortunately though, FortiClient needs users to make tons of changes to System Prefs. Full Disk Access, requests for VPN connections, and request for System Extensions.I used PPPC to grab those Full Disk Access settings from an install and make a config profile.Will it cause a problem if I deploy those before the policy for the install, when the filepaths and apps don't exist yet? It se

We have noticed a strange bug with iPads running iOS 17. We use a content filtering Configuration Profile on all our student iPads to ensure that they are not able to delete their Safari history. The Clear History option within settings is still greyed out as well as the Delete option with in the History tab. However students are able to slide from right to left over their History to delete it now. Has anyone found another way to block deleting Safari history that would also block students from this method? 

Hi All,So admittedly I am a little new to Jamf Pro, but I have gone through the Jamf Pro 100 course. My question is, I have a few iPads which their MDM certificates had expired, and I had that the only 2 ways to re-enroll them were via web re-enrollment OR having to completely reset and clear all data from the iPads. I tried web re-enrollment and no luck there, so I reset the iPads. And now they have valid MDM certs, so thats good, but now when I try to send management commands, here is my issue -- commands like "enable/disable bluetooth" work just fine, but when I try to send commands like "Update Inventory", it doesn't work. Why do some commands work and others don't reach the iPad?

So I recently updated the server token in jamf pro for our ABM instance as it expired on the 1st.  Both jamf pro and ABM show that they are sync'ed and communicating with each other, however, in jamf pro, when I go to check our existing prestage enrollments, they are all showing 0 devices available.