Just upgraded to Jamf Pro 10.5. When I run a quickadd.pkg or enroll via Jamf Recon, everything works perfectly except running jamf commands from the terminal. I run any of the following commands the terminal returns with "sudo: jamf: comand not found": sudo jamf reconsudo jamf policysudo jamf enroll -promptsudo jamf manage Has anyone else run into this issue? I'm using the thin image method, so the quikadd.pkg & recon are vital to my process. OS is currently High Sierra 10.13.5

We have an environment that already is set up for Apple devices.  I don’t know anything about how it is setup or what any of the configuration looks like.  My question is how do I enroll a new iPad into the application Jam Pro and is there a limit on how many devices can be setup? I think but I am not sure this application houses two departments' worth of devices mine and another department, and I am not sure how to differentiate between mine and theirs except by the serial but as far as I know, there is no information telling me what our serial’s numbers are.  So another question how can I tell which are mine and which are not, it seems like they are all dumped into the same area. These iPads are brand new out of the box, usually with iPad previously managed when they were wiped during the iPad setup we would get to a point where you would put in a username and password to connect to the MDM at which point I am guessing the MDM config would sync to the device?

When creating a new Extension Attribute, I don't have the option to set the input type to "Script" I've been trying to create a smart group based on "uptime," but each guide that I go over says to set the extension input type to "Script"Am I missing something? Am I in the wrong place?Thank you! 

Hi , For some of our users jamf login window has stopped showing up, the users are only seeing mac user to login. OS version is Sonoma 14.0Jamf connect version is 2.30is anyone else having similar issue and can share a fix , i know re isntalling the profile might fix it but i dont want to perform last resort as first. Thanks,

 When trying to add https://apps.apple.com/us/app/home/id1110145103 to some iPads I get the usual, "go get a volume license OR download it directly and let local iCloud accounts get it for free." Well, I dont want local iCloud accounts so I want to go get the license... ...but over in biz manager I can't seem to find this app, no matter how I search! Anyone else figure out how to deploy it?

Hi, I am relatively new to Jamf, but just dabbling in some Plists to force a Google Chrome homepage. I have got this working, but the issue I'm having is that it only works once the app has been force quit. (So if I normally cross off Chrome and reopen it, it opens on a blank Google Search page. Then if I manually force quit Chrome and reopen it, it works as I want it to).Is there a way to make it so that apps automatically force quit once they are just normally crossed off or even so that they automatically force quit when a user logs out? Students won't listen and go the long way around of manually force quitting - so this would be an ideal solution.As well as this (similar query) is there a way to completely disable the option to 'reopen windows when logging back in'? I believe this would be a big help to this issue. Many thanks

In Sonma the default behavior when you click on the Desktop is to show Stage Manager. This is going to cause a lot of calls to our help desk. I'm writing a KB article for them, but a Config Profile to change the setting from the default "Always" to "Only in Stage Manager" would help, a lot. Never created a custom profile before but I'm looking through documents now. Anyone already done this though? or faster at it than I? We probably won't be deploying until end of the month at the earliest (Netskope won't have a compatible release for at least another 2-3 weeks).

Hi,    Has anyone come across this issue?  Since updating safari to version 17.3 on M1 iMacs, no matter what site we navigate to it just showing a black screen. Safari loads and it seems the pages are loaded too but everything is blacked out.  Any ideas?   thanks 

Good afternoon JAMF Nation. Just want to get your professional guide/advice on how to install the SentinelOne agents in our MacOS devices using JAMF. I have the PKG file needed but when I tried installing it as normal, it failed. Looking for a friend, TIA!

I'm in the process of building the latest Cisco Secure client for deployment.  I am building it using Stephane Sudre's Packages app (1.2.10).  I have the Cisco Secure pkg (pulled from Cisco directly) and the Choices.xml added in Scripts > Additional Resources.  The post-install script is very straight forward and just runs /usr/sbin/installer -pkg ./Cisco\\ Secure\\ Client.pkg -applyChoiceChangesXML ./Cisco-Secure_choices.xml -target / This works every time I run it on a clean install or if I run it locally on a machine with an older version of Cisco Secure.  If I try to deploy this package via Jamf policy to a machine with an older version of Cisco Secure installed, it fails 100% of the time and uninstalls the existing install. The Jamf policy log just gives the standard unhelpful "The Installer encountered an error that caused the installation to fail." message.  The install.log tells me that the error was with the post-install script, but that is so strai

Good Morning,Is anyone deploying/using Maxon. They provide a command file and a .plist file to automatically run the command file, but I am having a problem getting the command file to launch properly. I was thinking I could generate a login script, but I am not great at scripting, would anyone out there be willing to take a look for me?The command is:/Library/Application\\ Support/Maxon/Tools/mx1 user login -u software@quinnipiac.edu -p PASSWORD Maxon instructions  

Very new to Mac management and JAMF.  I've been using a test Mac to test my enrollment and policies and noticed that if I reinstall OSX to test the OOBE, the policies I have set to "once per computer" don't seem to re-run.Looking here, I see that there is a command to flush the policy history and effectively "reset" the computer.  So, I ended up creating a script to run that command, set it to trigger upon enrollment and set the execution frequency to "ongoing".  I also set the script priority to run before other actions.I assume this should mean that when the test Mac has OSX reinstalled, when it completes enrollment, that script should be the first thing to run and the policy history should be cleared and all of the other policies set to trigger at enrollment and run once per computer should run, but they're not.If I pull up the computer in question in JAMF Pro inventory and look at the policy history tab, I can see that the policy flush did run, but for whatever reaso

If I create a hidden account with the JAMF binary below, how can I delete the account or how can I unhide it? This is how I create it: sudo jamf createAccount -username localadmin -realname Local Admin -password P@ssw0rd -admin -hiddenUser This creates an account in /private/var/localadmin I have then tried to change the ID and or deleting it with DSCL, but I keep getting an error. sudo /usr/bin/dscl . -delete /private/var/localadmin delete: Invalid Path <dscl_cmd> DS Error: -14009 (eDSUnknownNodeName)

I found this script for deleting accounts below which works a treat.However I work expect after a inventory update for Local User Accounts section in device record to be cleard also. But it still showing the delete accounts. Is there something I can add to the script or do to ensure this part of the device record get reset.# Get a list of all user accountsuser_list=$(dscl . -list /Users | grep -v '^_')# Specify the admin account(s) that you want to excludeexcluded_users=("admin1" "admin2" "root" "management account")# Loop through the user list and delete user profiles except admin accountsfor user in $user_list; doif [[ ! " ${excluded_users[@]} " =~ " ${user} " ]]; thenif [[ "$user" != "Shared" ]]; then # Exclude 'Shared' userecho "Deleting user profile for: $user"sudo sysadminctl -deleteUser "/Users/$user"sudo rm -rf "/Users/$user"fifidone

I am not having problems finding the JAMF Tools, but I am having an issue with providing administrative access to someone on my team.  They can login to the account.jamf.com but it doesn't show them as part of our organization. It shows they need to join an organization.

Hi,Our fleet has just jumped from Catalina to Monterey and our users are struggling to locate the screen mirroring "Show in menu Bar" tickbox.  Ideally I would just like a script to enable this or our users. I have trieddefaults write ~/Library/Preferences/ByHost/com.apple.controlcenter.plist ScreenMirroring -int 18but it doesn't seem to work.weirdly sound and bluetooth work though which are controlled inside the same plist. e.g: defaults write ~/Library/Preferences/ByHost/com.apple.controlcenter.plist Sound -int 18anyone got any ideas how the ScreenMirroring preference can be set via terminal script? Cheers, ES

I had some questions about the JC login page. It seems inconsistent in when it is shown. This is causing some issues when we are doing onboarding as some people see the JC login screen and some people see the local login page. I see it consistently immediately after logging out, but if i logout then shutdown and go to login again I am only presented with the local login screen

I’m having a strange issue that started within the last week or so. Some laptops are not receiving some configuration profiles. Two profiles in particular (maybe more but this is the first I have noticed), and not every laptop is affected. One is for Jamf Connect. It’s an uploaded profile straight from the Jamf Connect Configuration app. The other is for the Root3 support app.I have tried different versions of each profile, one using the built-in Jamf Connect schemas and one with the upload. I have tried the same with the Root3 app, one using their JSON schema and one with the plist.Neither will push down to some devices. Hardware doesn’t make a difference, and neither does os. It’s happening on Monterey and Big Sur, and intel or Apple processors.I am at a loss. Logs for both say failed on the device inventory page and pending on the profile pages.We’re on Jamf Pro Cloud.Is anyone else having issues?

Hi there,I'm working on a script to wipe out student mobile accounts from our lab machines.These machines are AD-bound, provisioning options are set to create mobile account at login with no confirmation.Here's the script I'm running. As you can see, very simple because all our student accounts contain the "." character (e.g. john.doe) -- # list all users with the "." character in their namesUSERS=$( dscl . ls /Users | grep -e "\." )# echo usersecho Deleting the following users: $USERS# delete users/usr/bin/dscl . delete /Users/"$USERS"echo User accounts deleted# delete home folders/bin/rm -rf /Users/"$USERS"echo User home folders deleted The script successfully removes my test student account, but then I'm unable to re-add the student to the device from the login screen after a reboot, which will prevent students from being able to use the computers.Any ideas where I could get more information on what is broken?Alternatively, if there's a smarter way I should be doing this, I'm also o

Hello Jamf experts, We have a weird issue that just started occurring which we're not sure if it's because of a recent update to our Jamf Cloud instance because we hadn't added new Macs over the past few months. Anyway, we have a Configuration Profile that generates and deploys a SCEP certificate along with the Wi-Fi profile that uses the certificate. All's been well until recently when we provisioned a new Macbook Pro and it just refuses to install any Configuration Profile at all (we check in the Macbook's History > Policy Logs page in Jamf). After a lot of troubleshooting which included a check on the firewall to see if anything is being blocked (there isn't) we stumbled upon the fact that when the SCEP is applied, the Macbook immediately switches to and connects to that Wi-Fi and then it fails to proceed. When I exclude the deployment of SCEP, everything works as before. Now the question is, how can I make it so that the SCEP is deployed last? I know we can d

Hi,I am trying to install Snapgene, which requires the license install script to be executed as the logged in user as described here: https://support.snapgene.com/hc/en-us/articles/10304162065172-Command-Line-Installation-and-ActivationMy first attempt was simply to index using Composer, install Snapgene, execute script, build package with composer. Didn't work.When I execute the script locally everything works as expected, whoever as soon as I try to deploy it using Jamf Pro it won't. I then tried to follow https://scriptingosx.com/2020/08/running-a-command-as-another-user/ to no avail. The license won't be installed. Is there another way, I'm not aware of, which would execute the script locally so everything works as expected?

Hi Guys, anybody can help me to go-through the AutoPKG.How it's work and step-by-step process to create packages and deployment to target machines.

We have been using Oomnitza to pull inventory records from Jamf for a while. Unfortunately it seems like this stopped working suddenly when we upgraded to Jamf 11. We have tried the following: 1. Enabling the user to have the SSO edit option. 2. Creating a new user specific for this. 3. Creating a full permission user to access the integration. 4. Changing the password for the integration user. nothing seems to be working. Is there an API change with Jamf 11? 

Hello! We've been using Installomator for automatically installing and updating some apps. It has been working well for us so far. One thing I was curious about is if there is a way for Installomator to write to the plist file of the app that it is working on. From what I could tell thru their github, I don't think there is and currently I am planning to just use config profiles to manage the plist files. But if there's a better way or if I could do it using the same Installomator script that would be nice.For context, the apps in question are Firefox, Chrome, and Zoom.Any advice would be appreciated or if anyone would be willing to give me some insight on how they do it.Thanks!-Frank S.

Hi Everyone. I'm running into an interesting issue (maybe?) with Jamf Connect and Ventura. I have my workflow setup and it is deploying correctly to my test machine. After initial login, the local and IdP account mapping/creation works and everything else seems fine. What's interesting is when I reboot my laptop: I get the local account login which accepts my IdP credentials, then it takes me to the Jamf Connect login screen where I have to sign into my IdP account twice (Once to log in and then second time to verify the password). It's like I have to unlock locally before Jamf Connect can take over. Has anyone run into this issue? I feel like I'm missing something simple...FWIW:I have my login agent delivered through the Jamf-provided pkg, not via config profile.The laptop in question has Jamf Connect deployed via workflow, not PreStage Enrollment.