Is there a possibility to disable the new feature in macOS Sonoma *Video Reaction* by default with a profile?It leads already with us several times to the fact that in an important meeting from the nothing e.g. balloons came. This is not very professional.Would there also be the possibility that the users (if they want it) can activate this feature again?Thanks for any advice on how I can disable this.

Hello to all. My Security Team wants to link Hyperproof Hypersync to our JAMF system. Has anyone heard of this and/or have had success getting this to work? I'm providing the link to HH documentation. https://docs.hyperproof.io/admin/en/hypersyncs/connecting-jamf Thank you for any help with this. 

Hi again,I have solved my previous issue - now just wondering if there is a json or plist file which I can use to force this highlighted setting to be toggled 'On' by default for all users by default. I have looked in the general settings on the configuration profile and not been able to find anything related to this. Many thanks again for any suggestions!

Is it possible to give full disk access to apps like cron, sshd-keygen-wrapper and terminal (other apps as well) through the ssh terminal session of a M1 MAC

We have been running Jamf on our computers since the launch of our company three years ago. From time to time we have computers that need to be removed from our system and I would like to know the best practices. Up to this point all my attention has been on getting computers enrolled.All our computers are in Apple Business Manager (ABM) and they are enrolled in Jamf using PreStage enrollment. This works well.When an employee leaves the company I lock the computer in Jamf before the computer is shipped back.When I receive the returned computer, I use the unlock code from Jamf to unlock the computer. I then release it from ABM. Next I select Remove MDM profile. Once I confirm that the profiles have been removed, I then delete the computer from Jamf.Is this the best, or at least, correct way to do this, or is there a better way?  

I'm seeing this popup on some of our users devices since the upgrade to Monterey, but I'm not entirely sure what it's trying to do, and it seems like I need to know in order to prevent it from popping up by automating what it's trying to do. I think this is from trying to install FortiClient, but I'm not positive. How can I tell what it's doing so I can make this easier on our users?

Hello all, I am running into an issue trying to deploy Cisco Secure Client v 5.1.0.136 & 5.1.2 where the bundled Duo desktop is causing a pop up to appear. Anytime the installer is pushed a security system cert trust setting pop up will appear. If you click cancel, the VPN installs as it should and there are no issues. I am trying to push these as silent installs so end users don't have to interact with anything, but I can't seem to find a way to do so. We are not DUO customers and just want to use the Secure Client VPN.I have been following this thread in my troubleshooting, so I am aware it is Duo desktop causing the issue. I have tried the steps in that thread regarding pushing out a Duo cert, but the pop up still keeps appearing. I have reached out to both Cisco and DUO about it, however neither have been very helpful. Cisco basically said DUO Desktop isn't supposed to be there even though it is and DUO wouldn't help since I wasn't a customer. I'm curious if anyone ou

Can anyone tell me what I'm doing wrong? I'm trying to write a script that checks the version of macOS so I can have it trigger a Jamf policy based on the version of macOS that the computer is running. I wanted to account for all versions of Sonoma and all versions of Ventura.  I keep getting "integer expression expected" errors. I used shellcheck.net and it didn't find any problems. I'm testing this in CodeRunner. I also tested it in Terminal. I thought I knew how to do this! I have even looked at some other scripts that I have that use similar syntax. They work. #!/bin/zsh macOSVersion=$(/usr/bin/sw_vers | grep "ProductVersion" | /usr/bin/awk '{ print $2 }') echo "$macOSVersion" if [ "$macOSVersion" -ge 14 ] && [ "$macOSVersion" -lt 15 ]; then echo "This Mac is running macOS Sonoma" elif [ "$macOSVersion" -ge 13 ] && [ "$macOSVersion" -lt 14 ]; then echo "This Mac is running macOS Ventura" else echo "This Mac is running a macOS earlier than Ventur

I am working on a script that will produce an alert message using Swift Dialog if CrowdStrike has logged any malicious behaviors. This is meant for my support team who may be helping one of our users find out if CrowdStrike may be responsible for an issue they are having. I created a Self Service policy that runs the script. I was given this command from our CrowdStrike rep: log show --predicate 'process == "Falcon Notifications"' --last 1h I used this command to create a variable: detection=$(log show --predicate 'process == "Falcon Notifications"' --last 1h | grep "malicious behavior detected") If I simulate an incident of malicious behavior, the phrase that follows grep will appear in the log. Therefore, when I echo "$detection" it will output a result that contains that phrase. If the log doesn't have that phrase, the output of $detection will be nothing. Later in the script, I have a conditional statement:   if [ "$detection" ]; then echo "Malicious behavior detected" # Displ

Hi , For some of our users jamf login window has stopped showing up, the users are only seeing mac user to login. OS version is Sonoma 14.0Jamf connect version is 2.30is anyone else having similar issue and can share a fix , i know re isntalling the profile might fix it but i dont want to perform last resort as first. Thanks,

Hi, I'm looking to make a policy that will install AWS CLI, and have been running into a few problems. I originally tried via pip, but ran into permissions issues during the execution. I then tried via brew, however I am running into a roadblock there. Currently, I am able to successfully get brew installed via a script I found here. I then created another policy with the command 'brew install awsci', configured under files and processors-> execute comand, but get the response 'brew not found'. I accounted this to the command being run as root instead of the user, so I then tried to create a script (attached below) that would run as the current user. Unfortunately, it returned with: 'Script result: bash: brew: command not found' I am able to manually enter the command 'brew install awscli' from the logged in user via terminal, so I know that works...any thoughts on how to get this working completely via jamf? Thanks in advance

Hello everyoneSorry - I'm new to jamf.I need to create a policy that inserts a line in a config file.Do you have any ideas on how I should proceed here?Best regards

Trying to configure a login window message with configuration profile? Any ideas

Hi , We have recently updated our VPN and would like to update our host address for all macbook across the company through JAMF. I know we can package the profile.xml with cisco any connect installer and assign the profile to everyone but we dont want to go that path. Is there a way we can update the host address on all cisco any connect instances for all users much simpler way via jamf ?Thanks,

I package Figma desktop application after download the app as .dmg via composer and deployed thorugh policy with no issue. It was working fine on macOS Monterey but after upgrade to Ventura it is not working saying corrupted. I also tried to re-install from policy still get same error. But if I right click the app icon from docker and click "open" a new window pop up from there if I click open again that will launch Figma desktop and this need to do for the 1st time after upgrade. Any suggestion for that. Any one know how I can kipp Figma process running that way i will script to remove the Figma App from /Applications folder and re-install to see that resolve the issue or not.

Hi,  I am trying to deploy a new plist from JAMF but this one contains <array> and it failed to deploy.here the example :<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><array>  <dict>    <key>organization</key>    <string>company1</string>    <key>display_name</key>    <string>C1</string>    <key>onboarding</key>    <false/>  </dict>  <dict>    <key>organization</key>    <string>company2</string>    <key>display_name</key>    <string>C2</string>    <key>onboarding</key>    <false/>  </dict></array></plist> if I remove array ti

Good Afternoon!I'm not sure if someone could help me figure out what is going on with this. We are currently deploying the CrowdStrike Falcon Sensor in our environment, and have a policy that pushes out the install package and a script. The install package works without issue, but we are having some issues with the script.When the endpoint is licensed already, the script returns a failed status code and a status message as to why it failed in Jamf ("ERROR: The machine is already licensed"), but does not return that message in the script so we can tell it to succeed in the case that it is already licensed. #!/bin/sh # THIS SCRIPT LICENSES THE CROWDSTRIKE FALCON SENSOR RESULT=$(/Applications/Falcon.app/Contents/Resources/falconctl license "$4") echo " OUTPUT: ${RESULT} " Which results in the following:Script result: Error: This machine is already licensed OUTPUT: Any idea what is going on here?

Hello,We're deploying MS Defender, but need some help with how to remove or hide the "Exclusion" option from MS Defender user interface, if it's possible. My current configuration "MDATP MDAV configuration settings" appears to enable to exclude a default path, but I prefer to not have "Exclusion" option available or visible. 

Just upgraded to Jamf Pro 10.5. When I run a quickadd.pkg or enroll via Jamf Recon, everything works perfectly except running jamf commands from the terminal. I run any of the following commands the terminal returns with "sudo: jamf: comand not found": sudo jamf reconsudo jamf policysudo jamf enroll -promptsudo jamf manage Has anyone else run into this issue? I'm using the thin image method, so the quikadd.pkg & recon are vital to my process. OS is currently High Sierra 10.13.5

We have an environment that already is set up for Apple devices.  I don’t know anything about how it is setup or what any of the configuration looks like.  My question is how do I enroll a new iPad into the application Jam Pro and is there a limit on how many devices can be setup? I think but I am not sure this application houses two departments' worth of devices mine and another department, and I am not sure how to differentiate between mine and theirs except by the serial but as far as I know, there is no information telling me what our serial’s numbers are.  So another question how can I tell which are mine and which are not, it seems like they are all dumped into the same area. These iPads are brand new out of the box, usually with iPad previously managed when they were wiped during the iPad setup we would get to a point where you would put in a username and password to connect to the MDM at which point I am guessing the MDM config would sync to the device?

When creating a new Extension Attribute, I don't have the option to set the input type to "Script" I've been trying to create a smart group based on "uptime," but each guide that I go over says to set the extension input type to "Script"Am I missing something? Am I in the wrong place?Thank you! 

Hi , For some of our users jamf login window has stopped showing up, the users are only seeing mac user to login. OS version is Sonoma 14.0Jamf connect version is 2.30is anyone else having similar issue and can share a fix , i know re isntalling the profile might fix it but i dont want to perform last resort as first. Thanks,

 When trying to add https://apps.apple.com/us/app/home/id1110145103 to some iPads I get the usual, "go get a volume license OR download it directly and let local iCloud accounts get it for free." Well, I dont want local iCloud accounts so I want to go get the license... ...but over in biz manager I can't seem to find this app, no matter how I search! Anyone else figure out how to deploy it?

Hi, I am relatively new to Jamf, but just dabbling in some Plists to force a Google Chrome homepage. I have got this working, but the issue I'm having is that it only works once the app has been force quit. (So if I normally cross off Chrome and reopen it, it opens on a blank Google Search page. Then if I manually force quit Chrome and reopen it, it works as I want it to).Is there a way to make it so that apps automatically force quit once they are just normally crossed off or even so that they automatically force quit when a user logs out? Students won't listen and go the long way around of manually force quitting - so this would be an ideal solution.As well as this (similar query) is there a way to completely disable the option to 'reopen windows when logging back in'? I believe this would be a big help to this issue. Many thanks

In Sonma the default behavior when you click on the Desktop is to show Stage Manager. This is going to cause a lot of calls to our help desk. I'm writing a KB article for them, but a Config Profile to change the setting from the default "Always" to "Only in Stage Manager" would help, a lot. Never created a custom profile before but I'm looking through documents now. Anyone already done this though? or faster at it than I? We probably won't be deploying until end of the month at the earliest (Netskope won't have a compatible release for at least another 2-3 weeks).