First Post!Started a new MacBook Pro from Prestage Enrollment yesterday morning, looked great at first. I pulled up the Applications folder and sorted by Date Modified (newest) so I could keep an eye on the Apps as they popped up. Just Protect popped up. The rest never did. Checked the progress in JamfPro (Cloud) and all the apps are in Pending status. Looked again this morning, still pending, Checked all the scopes and looks fine. Just for giggles I put together a .pkg, wrote a policy to push it out to that laptop and two others that had used same pre-stage successfully. Those two grabbed the .pkg almost immediately, the other didn't. Those two were scoped identically to the third that failed.yes - The computer is checked in the pre-stage enrollment in Jamf.no - it did not inventory much at all except the basics, did not pull in the user info, current apps list, etc, that you would expect to see when a Mac does that first inventory upon enrollment. A little bird to

Hello, I've been using Jamf Connect for a while to sync users account, but since (I believe) the upgrade to Ventura, the login screen for Jamf Connect is always skipped on reboot.We are using Filevault, so usually I would simply run the command bellow to set the Jamf Connect login screen back in. This worked for every MacOS upgrades since Mojave./usr/local/bin/authchanger -reset -jamfconnect But since Ventura, the Jamf Connect login screen won't show up after a reboot. Even if I use the authchanger reset command. I just updated Jamf Connect to 2.24 unfortunately resulting to the same problem.Did this happen to anyone else ? Were you able to fix it ?

I am attempting to get policy statuses for computers from the API. I found a few older posts (from around 2015) saying it wasn't possible, but I also found this post (https://community.jamf.com/t5/jamf-pro/extract-a-jamf-policy-status/m-p/252920) that gave me some hope. I connected with PowerShell and was trying this:$url = "https://domain.jamfcloud.com/JSSResource/policies/id/318" Invoke-RestMethod -Uri $url -Method Get -Headers @{"Authorization" = "Bearer $token"}I get a response, but without any information:xml policy --- ------ version="1.0" encoding="UTF-8" policyAny ideas on returning policy statuses with the Jamf Pro API? 

I know this has been asked previously but want to know if there is any work being done to fix it apart from working directly on the affected Macs?The school has Jamf Connect synced with Google. If a student forgets their password it gets reset at Google but then they cannot log onto a Mac that they'd previously worked on as the old password is needed. Only fix is to login as a local admin on that mac and either reset the password or delete that user. This seems to be a known issue. Is there any work being done that can somehow sync passwords when the students are not logged in so we don't have to go around manually fixing it all the time?ThanksAndrew

Hello,I am attempting to create a custom Jamf Connect Menu Bar using the second example from Jamf's documentation (https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/Custom_Menu_Bar_Action_Items.html). While on a brief call with Jamf about work arounds for the 802.1X PI, I was told to use the command of "open url" to the self service policy. I am referencing the install item URL template (https://learn.jamf.com/bundle/jamf-pro-documentation-current/page/Jamf_Self_Service_for_macOS_URL_Schemes.html), but I am struggling with the XML in the PLIST and it keeps telling me my formating is wrong because I don't know which commands to use exactly; if I'm even going about this correctly. Does anyone have any examples of a PLIST running a policy from Self Service from their Menu Bar?Thank you

we need to remove VPN Icon from menu barany idea how to achieve this via configuration profile? 

Hey guys, I noticed that wiping our Macs reverts them to Ventura from Sonoma and was wondering if this is expected behavior. If it is, does anyone have recommendations for how we can get them updated as soon as they've restarted? If this is not expected behavior, does anyone know of a proper fix?

I have been stuck on this for the longest time. I am unable to do an iPhone to iPhone migration. The new device is enrolled in DEP/ABM and my current phone is not. The setup assistant shows up, I take my old phone and scan the blue globe. At this point I only get the option to do iCloud backup/restore to the new device. I no longer get an option to go device to device. Has anyone else experienced this issue before? Apple support is stating that it could be an issue with DEP/Jamf not allowing the Device to Device option. If I remove the device from Jamf/DEP, that would essentially throw away the reason to even have these devices in jamf or pre-stage.   As the screenshot shows, I am not blocking any of the Setup Assistant steps or auto advancing.   What I did is I went into Apple Business manager and removed the new phone from hitting any MDM server. I wiped the device and attempted the Setup Assistant with my old iPhone next to it and that gi

I am getting an issue on Mac mini (Late 2014) after upgrading it from 10.14.6 to macOS Monterey 12.7.3 through downloading installer from App Store. It says it cannot open a perl script. I've given the full disk access to terminal, sshd-keygen-wrapper. I am still getting the same issue. I am able to run the script directly from my ssh terminal but when automation tool (through ssh) tries to run the script the error is getting. /NFSmountDir is actually /System/Volumes/Data/NFSmountDir

We have some tools in Self Service only available to Jamf admins. Like a Microsoft uninstaller. I remote into user's computers and try to log in to Self Service to get to my admin tools but whenever I click on the log in button, it is already trying to log in with the local user credentials and I can enter my admin credentials. Is there a way to prevent that from happening? 

Hello,  we currently distribute ipads to users and then walk them through entering Vantagepoint server info and registration. We also do the same for apple id registration. I was wondering if it is possible to automate this info using Jamf? Like for example, once a user is assigned to an ipad in Jamf, is there a way for Jamf auto sign into their icloud account?For Vantagepoint, would their be a way to prepopulate server info? Thank you!

Hey everyone ...trying to install a package to all my fleet, it got installed successfully on all of them except 1 Mac !!"Installation failed. The installer reported: installer: Package name is XYZinstaller: Installing at base path / installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An error occurred while running scripts from the package “zyx.pkg”.)What does that mean? why only that endpoint!?

Greetings all,Is the Jamf One app for iOS obsolete?  I hadn't used it in quite a while, and when I tried today it gives a network connection error.  In investigating, I don't see it on the App Store anymore either...

Hello.I'm trying to ensure teams is closed prior to updating app and getting errors when trying to force close it. killall "Microsoft Teams (work or school).app" Works fine with Classic teams i'm sure it's something about work or school part getting lost in code just don't know how to fix it. Thank you for your time.

Hi there, Does anyone know of an app (preferably tied to Jamf) that is capable of hardware diagnostics? i.e temp, storage limits and general performance related variables.  

OOI, does anyone know of a way of deleting existing icons uploaded when creating Policies?Have a couple of duplicates/redundant icons that I'd like to just tidy up.

Here is the script I started using from Jamf Nation:  Parameters:  Error:   I found the Waiting Room and I had to give myself permission to view the folder because I don’t have access    The agent file is there.  But it fails to install.   Is there anything I should do?  It is failing on all of our organization's Macs. 

We have 100 MacBooks that we manage with On-Prem Jamf Pro.   We have seven (7) different VPN servers that our users can choose from to connect to the company's network.  Jamf is working normally on all machines EXCEPT for the MacBooks connected to our NY VPN server.  For the 5 people on the NY VPN server, they all have Pending Management Commands stuck for weeks, maybe months.  I clear them out, but they come back and go Pending indefinitely again.  Even the built-in commands (like InstalledApplicationList, SecurityInfo, ContentCachingInformation, ContentCachingInformation, CertificateList) are stuck Pending as well.  I cannot send any Configuration Profile to any of these machines on the NY VPN.  But the same Config Profiles work everywhere else.  I don't think that re-enrolling them in Jamf is an option since they are all working from home and also because the "Allow MDM Profile Removal" was not checked in the PreS

Just updated our jamf cloud to 11.3 and noticed that I have a whole load of config profiles now in 'No category assigned'  Prior to the upgrade all our config profiles where in the correct category.  As we have a pretty robust naming convention this took only a little bit of work to get them back where they should be.. but... better things to do!   Any one else? 

Hi JAMF Nation,Did anybody here find a fix for the Microsoft 365 problem with JAMF? I tried all the possible combinations, but without turning off security defaults, it just does not work well. How did you guys go about it?I also tried using AWS SES but to no avail, practically a wall at this point. 

Am I right in believing I have to change the setting for "autoDeployEnabled" to true before I will be able to see the password of a local admin? At the moment if doesn't appear to do anything even though it will pop-up a message saying viewing the password will cause the password to rotate in 1 hour.Currently just looking to see what/how this feature actually does. 

Hi Jamf Nation!I have some questions about what happened in a MacBook after it received the WIPE command, rebooted but without the firmware passcode being authenticated? Could the command be cancelled in any way?We have a MacBook Air (Retina, 13-inch, 2019) with Intel chipset running macOS 14.3. WIPE command issued and it is now stuck at the user login -> reboot to firmware lock loops."Clear Activation Lock" option was chosen when attempting the command, but it says activation lock not found, so the WIPE command was issued without. After the command was sent, the MacBook immediately rebooted into the Firmware lock, which then we realized the passcode is unknown. Attempt to boot or reboot the machine will first goes into the user login page, and ended up at firmware lock after user authentication. We did not reach the steps to enter the 6 digits arbitrary passcode.I read this from the previous post:@talkingmoose wrote:If the computer has been protected with a firmware passcode,

Hi! I decided to test using the Inventory Preload option on to PreStage enrollment of one computer. I got the CSV file completed and uploaded it successfully and it shows up as the Active data. After doing the PreStage enrollment (no previous record of this device), I don't see that it applied the preload data. I did only complete the serial number, department, and building fields in the CSV file since those were all I needed. My question is, does anyone know if certain fields (besides serial number) are required for this to work? Has anyone else had this happen or something to try? Thanks!

I am getting an error message "The operation couldn’t be completed. (com.jamfsoftware.task.errors error 5.)" on the logs of a policy for only one endpoint. All that the policy does is to remove the EFI password. How do i fix that?Is there a way to check through jump maybe that error is caused because the endpoint has no EFI password at all?

Reposting this from my personal website to gain some visibility.  UPDATE 1: I'm being told now that this change IS RETROACTIVE. Meaning your dozens/hundreds/thousands of endpoints that have been configured with Prestage enrollment, and an admin account created in that process, will have that password randomized. Which will break Secure Token/Volume Ownership/etc. Maybe you're okay with this, but if you're not, you NEED to reach out to your Jamf Representative and tell them.  I wanted to bring up that a big change is coming to Jamf soon and they (Jamf) seem to think it’ll be well received all around: forced LAPS for Prestage (ADE/DEP) admin accounts (See bullet 2 here, https://learn.jamf.com/bundle/jamf-pro-release-notes-current/page/Deprecations_and_Removals.html, “Functionality to specify the local administrator account for computers in a PreStage enrollment”). And to start with, I applaud Jamf for working on a LAPS solution. All we've ever asked in this whole