Hi,    Has anyone come across this issue?  Since updating safari to version 17.3 on M1 iMacs, no matter what site we navigate to it just showing a black screen. Safari loads and it seems the pages are loaded too but everything is blacked out.  Any ideas?   thanks 

Good afternoon JAMF Nation. Just want to get your professional guide/advice on how to install the SentinelOne agents in our MacOS devices using JAMF. I have the PKG file needed but when I tried installing it as normal, it failed. Looking for a friend, TIA!

I'm in the process of building the latest Cisco Secure client for deployment.  I am building it using Stephane Sudre's Packages app (1.2.10).  I have the Cisco Secure pkg (pulled from Cisco directly) and the Choices.xml added in Scripts > Additional Resources.  The post-install script is very straight forward and just runs /usr/sbin/installer -pkg ./Cisco\\ Secure\\ Client.pkg -applyChoiceChangesXML ./Cisco-Secure_choices.xml -target / This works every time I run it on a clean install or if I run it locally on a machine with an older version of Cisco Secure.  If I try to deploy this package via Jamf policy to a machine with an older version of Cisco Secure installed, it fails 100% of the time and uninstalls the existing install. The Jamf policy log just gives the standard unhelpful "The Installer encountered an error that caused the installation to fail." message.  The install.log tells me that the error was with the post-install script, but that is so strai

Good Morning,Is anyone deploying/using Maxon. They provide a command file and a .plist file to automatically run the command file, but I am having a problem getting the command file to launch properly. I was thinking I could generate a login script, but I am not great at scripting, would anyone out there be willing to take a look for me?The command is:/Library/Application\\ Support/Maxon/Tools/mx1 user login -u software@quinnipiac.edu -p PASSWORD Maxon instructions  

Very new to Mac management and JAMF.  I've been using a test Mac to test my enrollment and policies and noticed that if I reinstall OSX to test the OOBE, the policies I have set to "once per computer" don't seem to re-run.Looking here, I see that there is a command to flush the policy history and effectively "reset" the computer.  So, I ended up creating a script to run that command, set it to trigger upon enrollment and set the execution frequency to "ongoing".  I also set the script priority to run before other actions.I assume this should mean that when the test Mac has OSX reinstalled, when it completes enrollment, that script should be the first thing to run and the policy history should be cleared and all of the other policies set to trigger at enrollment and run once per computer should run, but they're not.If I pull up the computer in question in JAMF Pro inventory and look at the policy history tab, I can see that the policy flush did run, but for whatever reaso

If I create a hidden account with the JAMF binary below, how can I delete the account or how can I unhide it? This is how I create it: sudo jamf createAccount -username localadmin -realname Local Admin -password P@ssw0rd -admin -hiddenUser This creates an account in /private/var/localadmin I have then tried to change the ID and or deleting it with DSCL, but I keep getting an error. sudo /usr/bin/dscl . -delete /private/var/localadmin delete: Invalid Path <dscl_cmd> DS Error: -14009 (eDSUnknownNodeName)

I found this script for deleting accounts below which works a treat.However I work expect after a inventory update for Local User Accounts section in device record to be cleard also. But it still showing the delete accounts. Is there something I can add to the script or do to ensure this part of the device record get reset.# Get a list of all user accountsuser_list=$(dscl . -list /Users | grep -v '^_')# Specify the admin account(s) that you want to excludeexcluded_users=("admin1" "admin2" "root" "management account")# Loop through the user list and delete user profiles except admin accountsfor user in $user_list; doif [[ ! " ${excluded_users[@]} " =~ " ${user} " ]]; thenif [[ "$user" != "Shared" ]]; then # Exclude 'Shared' userecho "Deleting user profile for: $user"sudo sysadminctl -deleteUser "/Users/$user"sudo rm -rf "/Users/$user"fifidone

I am not having problems finding the JAMF Tools, but I am having an issue with providing administrative access to someone on my team.  They can login to the account.jamf.com but it doesn't show them as part of our organization. It shows they need to join an organization.

Hi,Our fleet has just jumped from Catalina to Monterey and our users are struggling to locate the screen mirroring "Show in menu Bar" tickbox.  Ideally I would just like a script to enable this or our users. I have trieddefaults write ~/Library/Preferences/ByHost/com.apple.controlcenter.plist ScreenMirroring -int 18but it doesn't seem to work.weirdly sound and bluetooth work though which are controlled inside the same plist. e.g: defaults write ~/Library/Preferences/ByHost/com.apple.controlcenter.plist Sound -int 18anyone got any ideas how the ScreenMirroring preference can be set via terminal script? Cheers, ES

I had some questions about the JC login page. It seems inconsistent in when it is shown. This is causing some issues when we are doing onboarding as some people see the JC login screen and some people see the local login page. I see it consistently immediately after logging out, but if i logout then shutdown and go to login again I am only presented with the local login screen

I’m having a strange issue that started within the last week or so. Some laptops are not receiving some configuration profiles. Two profiles in particular (maybe more but this is the first I have noticed), and not every laptop is affected. One is for Jamf Connect. It’s an uploaded profile straight from the Jamf Connect Configuration app. The other is for the Root3 support app.I have tried different versions of each profile, one using the built-in Jamf Connect schemas and one with the upload. I have tried the same with the Root3 app, one using their JSON schema and one with the plist.Neither will push down to some devices. Hardware doesn’t make a difference, and neither does os. It’s happening on Monterey and Big Sur, and intel or Apple processors.I am at a loss. Logs for both say failed on the device inventory page and pending on the profile pages.We’re on Jamf Pro Cloud.Is anyone else having issues?

Hi there,I'm working on a script to wipe out student mobile accounts from our lab machines.These machines are AD-bound, provisioning options are set to create mobile account at login with no confirmation.Here's the script I'm running. As you can see, very simple because all our student accounts contain the "." character (e.g. john.doe) -- # list all users with the "." character in their namesUSERS=$( dscl . ls /Users | grep -e "\." )# echo usersecho Deleting the following users: $USERS# delete users/usr/bin/dscl . delete /Users/"$USERS"echo User accounts deleted# delete home folders/bin/rm -rf /Users/"$USERS"echo User home folders deleted The script successfully removes my test student account, but then I'm unable to re-add the student to the device from the login screen after a reboot, which will prevent students from being able to use the computers.Any ideas where I could get more information on what is broken?Alternatively, if there's a smarter way I should be doing this, I'm also o

Hello Jamf experts, We have a weird issue that just started occurring which we're not sure if it's because of a recent update to our Jamf Cloud instance because we hadn't added new Macs over the past few months. Anyway, we have a Configuration Profile that generates and deploys a SCEP certificate along with the Wi-Fi profile that uses the certificate. All's been well until recently when we provisioned a new Macbook Pro and it just refuses to install any Configuration Profile at all (we check in the Macbook's History > Policy Logs page in Jamf). After a lot of troubleshooting which included a check on the firewall to see if anything is being blocked (there isn't) we stumbled upon the fact that when the SCEP is applied, the Macbook immediately switches to and connects to that Wi-Fi and then it fails to proceed. When I exclude the deployment of SCEP, everything works as before. Now the question is, how can I make it so that the SCEP is deployed last? I know we can d

Hi,I am trying to install Snapgene, which requires the license install script to be executed as the logged in user as described here: https://support.snapgene.com/hc/en-us/articles/10304162065172-Command-Line-Installation-and-ActivationMy first attempt was simply to index using Composer, install Snapgene, execute script, build package with composer. Didn't work.When I execute the script locally everything works as expected, whoever as soon as I try to deploy it using Jamf Pro it won't. I then tried to follow https://scriptingosx.com/2020/08/running-a-command-as-another-user/ to no avail. The license won't be installed. Is there another way, I'm not aware of, which would execute the script locally so everything works as expected?

Hi Guys, anybody can help me to go-through the AutoPKG.How it's work and step-by-step process to create packages and deployment to target machines.

We have been using Oomnitza to pull inventory records from Jamf for a while. Unfortunately it seems like this stopped working suddenly when we upgraded to Jamf 11. We have tried the following: 1. Enabling the user to have the SSO edit option. 2. Creating a new user specific for this. 3. Creating a full permission user to access the integration. 4. Changing the password for the integration user. nothing seems to be working. Is there an API change with Jamf 11? 

Hello! We've been using Installomator for automatically installing and updating some apps. It has been working well for us so far. One thing I was curious about is if there is a way for Installomator to write to the plist file of the app that it is working on. From what I could tell thru their github, I don't think there is and currently I am planning to just use config profiles to manage the plist files. But if there's a better way or if I could do it using the same Installomator script that would be nice.For context, the apps in question are Firefox, Chrome, and Zoom.Any advice would be appreciated or if anyone would be willing to give me some insight on how they do it.Thanks!-Frank S.

Hi Everyone. I'm running into an interesting issue (maybe?) with Jamf Connect and Ventura. I have my workflow setup and it is deploying correctly to my test machine. After initial login, the local and IdP account mapping/creation works and everything else seems fine. What's interesting is when I reboot my laptop: I get the local account login which accepts my IdP credentials, then it takes me to the Jamf Connect login screen where I have to sign into my IdP account twice (Once to log in and then second time to verify the password). It's like I have to unlock locally before Jamf Connect can take over. Has anyone run into this issue? I feel like I'm missing something simple...FWIW:I have my login agent delivered through the Jamf-provided pkg, not via config profile.The laptop in question has Jamf Connect deployed via workflow, not PreStage Enrollment.

Hello Jamf Community, I previously posted this a couple weeks ago but still am struggling to figure out exactly how to get it working. I am trying to create a script that will prompt a user with a popup box on which application they'd like to uninstall (only apps we deem approved). For example, a popup would come up and ask someone "Select an app you'd like to uninstall" with a list of apps such as, Google Chrome, Firefox, Adobe, etc. Currently I have script that I feel is about 90% of the way there but still can't figure out how to get it completely working. I'll post it below. Also, if there's any easier way to do this, please do let me know as well! Any help is greatly appreciated! There may be some unnecessary lines in the script just FYI. Here's the script: #!/bin/bash # Parameters app1="$4" app2="$5" app3="$6" app4="$7" app5="$8" appList="$4 $5 $6 $7 $8" uninstallApp="choose from list every paragraph of \\"$appList\\" with title \\"Application Uni

I have a pair of iPads where the device certificate has expired, and they no longer seem to be communicating with our instance.How can I renew these certs, or otherwise get these in working order again?

Greetings JAMF NationersI am looking to create a uptime Extension Attribute.I have created an Extension Attribute with the data type: IntegerInput Type: Populated by ScriptMac OS C Script Contentes: #!/bin/sh echo -n"<result>" uptime "</result>" exit 0 This results in:23:40 up 14:02, 2 users, load averages: 0.50 0.35 0.35 /private/tmp/extensionAttributeScript: line 7: I would like a simple number in days, so I need to edit the result.Something like:uptime | awk -F'( |,)' '{print $2}'Results in:up 45 mins or up 4 daysHow do I get a simple number in days? Thanks in advance for any help!

I'd like to set a photo that's in a specific folder on each computer in my environment to be the screensaver, with the "classic" style. I'd also like to set it once, and then allow users to change it if they wish. I thought this would be a simple endeavor, but have not had any luck figuring out a successful method. Has anyone done something similar in their environment?

My executive leadership requested that we deploy a desktop picture to all computers, but they do not want it showing on the lock screen. I created a package for the image with Desktoppr and it works perfectly... Except that it changes the default lock screen and screensaver to be the same image. We also do not want to lock the image, users should be free to change it to whatever they want. My question is does anyone know how to set the lock screen image independently of the desktop picture? Can it be done with a script or a plist? 

Hi All,With Installomator SAP Privileges is installed -> added to Dock. There is also installation of an PPPC with DockToggleTimeout.mobileconfig from the website. But If I want to Toggle to admin nothing happens. What am i missing?thanks

I am attempting to remove our guest wireless network (SSID) using WPA2 personal from all machines in my environment. I have scoured through JAMF Nation, in search of posts looking to achieve the same. I was able to find a handful of useful discussions but none were fully applicable to my current requirement. Some posts had suggested achieving this in a configuration profile and supplying a bogus password so the machine is never able to connect to the network. I would like to remove the guest wireless network from all machines rather than fully implementing an all out ban from ever connecting to it again. In short, I'd like to accomplish the following: Create a smart computer group which inventories all machines with the guest network SSID. That is, all machines that have the guest network saved as a preferred network. Remove the SSID from all machines in this smart computer group. Please let me know what your thoughts are and if this is best approached with an extension attribute