Version: 12.1 MontereyProcessor: M1 ProLast Inventory Update:01/12/2022 at 12:27 PMLast Check-in:01/12/2022 at 12:26 PMSupervised: Yes What are my troubleshooting steps to get these to go through. Let's collab.  

Hey I seem to be having issues with end users being able to install osx updates on their macs managed by jamf, the users are prompted for the password to upgrade to 14.0 but won't accept the user's password when being prompted is anyone seeing this or have we set this somewhere in jamf pro. I am having to log them out login as admin and update the mac Thanks  

I was just wondering if it was possible to release devices in Jamf Pro instead of doing it through Apple School Manager?I don't see a way to do bulk releases in Apple School Manager.I noticed under the connection to Jamf in ASM (Settings > MDM Server Info) - we have 'Allow this MDM Server to release devices.' checked.Just wanted to see if there was a way of bulk-releasing devices in Jamf. Otherwise I will do them one-by-one in Apple School Manager.

When initiating a user enrollment it prompts for the device to Assign to user. Though I have created a number of users under Settings > User account and groups entering the username, full name or email address of any of the users is never accepted, and selecting the search option, i.e. the magnifying glass, the resulting drop-down list has no users. What value is meant to be entered in response to this prompt?

Feel like I have to be missing something obvious here... but I can't seem to get this to behave. Trying to make an extension attribute that checks if homebrew is installed, and outputs the result of "which brew" if so.... pretty basic. This works perfectly from terminal both as my standard user and as root... but when jamf runs it... all that's returned to the extension attribute is "Installed: " with no file path listed.From terminal, i get what seems to be a proper output jamf should be happy with:sh-3.2# ./test2.sh <result>Installed: /opt/homebrew/bin/brew</result>Extension Attribute Code:#!/bin/bash if [[ $(which brew) != "brew not found" ]]; then brewstatus="Installed: $(which brew)" else brewstatus="Not installed" fi echo "<result>$brewstatus</result>" exit 0 

For stolen computers I used to push out Prey and I'd be able to get location, screen shot, camera shot. The location is always sketchy in terms of being able to actually track a computer, but the web cam pictures and the screenshots were great in terms of being able to get names and other reportable information for the police.With latest systems though we need to give permission from the computer for camera access as well as screen recording access, which we can't do since it's no longer in hand.I know I can firmware lock the computers and provide a message to return the device, but it's more likely the computer will end up in the trash than returned.What is anyone doing now to track/recover computers other than locking and providing a message to return?Again, this is after the fact... I don't want to have spying software on my student laptops before the fact (for various reasons.)Thanks!  

Hi guys, how we can enable Enhanced Protection in the Chrome browser via JAMF? I tried some Plist files but its not working on my end 

After several years of more or less being neglected Jamf has announced they are archiving NoMad. I figure NoMad is worthy of a moment of remembrance. How did you guys use NoMad and how many of you still use NoMad?   Strangely enough we used NoMad to make the domain bound life easier giving our users by giving a more stable way to update passwords and map network drives, never mind NoMad was designed to be used without domain binding. We moved off NoMad about 3 years ago.  https://www.jamf.com/blog/jamf-to-archive-nomad-open-source-projects/

Hi, How do you force an Xprotect version update? Trying: softwareupdate --background-critical outputted the following: softwareupdate[92845]: Triggering background check with forced scan (critical and config-data updates only) ... But running: defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString shows an older version of XProtect For our labs we updated to 10.15.7 using the Combo and Supplemental PKGs but the Xprotect version remained an old version. We like to control the software update process so we have everything unchecked in Software Update Not sure if that has something to do with Xprotect being unable to update even when running softwareupdate --background-critical from the Terminal.

Hello Folks, I am uploading push certificates on the jamf account, In the process of creating I used csr later on jamf account. Once I signed the csr and got the "JAMFSignedCSR.plist" and used this on identity.apple.com, I got an error "Invalid certificate signing request". Is there any solution to this problem?

How Can I disable mirroring hp screen on macOS ? Displaylink driver is useless. screens are connected usingHi all,Monitor: 2 x HPE27ED G4 QHDConnection: Test 1: Monitors linked to each other by Display Port cable and one of them is linked to Mac using Usb-c cable.Test 2: Monitors linked to Mac using g Usb-c cable each: only one monitor can make displayNo docking station to test.Anyone else struggling :) ?

Hi All,When I try to update the push notification I get this error anyone has any idea why I'm getting this?Didn't change anything in my server except to update the server from 2012 R2 to R2019. That was the only change I did for my server.When I Download the signed CSR from Jamf Nation and upload it to the Apple push certificate portal I get this error. Thanks 

Hello! I hope someone can help me with this. I've look into several other links and it does not seem to work.We generally have the Sharing preferences disabled in our Jamf using the Config Profile. We have a certain group of people who needs Screen Sharing. While we can exempt them from Sharing preferences which allows Screen Sharing, this will open up the ability for them to enable File Sharing, Media Sharing, Content Caching, and so on. 1. Is there a way to keep Sharing preferences disabled and allow only Screen Sharing? 2. Is there a way to enable Sharing preferences, allow Screen Sharing but disable the rest inside the Sharing preferences (File, media, Content cache, Bluetooth, internet sharing, printer sharing...etc)I've tried the below but it doesnt seem to work. My test machine is on Sonoma.!/bin/bash /usr/libexec/PlistBuddy -c ‘Set :com.apple.screensharing:Disabled No’ /private/var/db/launchd.db/com.apple.launchd/overrides.plist launchctl load /System/L

I am having troubles allowing non admin users to change the Date and Time on their Macbooks. There are quite a few teachers who let their Macbooks battery drain over the holiday break and when they got back in district their date and time were wrong and they could no longer connect to WiFi. We had previously enable Non Admins to change their date and time settings with the following command: #Allow Date/Time Change security authorizationdb write system.preferences.datetime allow This unlocks the date and time section within system preferences for non admin users but for some reason when users try to change their date and/or time it reverts back once they click save. For example if the year says 2018 instead of 2020 the staff member changes it to 2020 and clicks save, then the year will change itself back to 2018. (Settings that set the time automatically have been turned off at this point.) We can successfully change the time when logged in as a local admin account but our users are

just upgraded to 11.1.3 and when i go into a computer details management tab, theres no remote assist button

I use the block USB policy with Jamf protect, but it is still not working. Some USBs are working, and some cannot be used to move data. 

Hello,I hope you are well, I am new using jamf pro, we want to launch a policy with a script to uninstall Malwarebytes from all Macs, I found the following script  https://github.com/eth-its/autopkg-mac-recipes-yaml/blob/main/Scripts_for_Uninstallers/Application-uninstall.shWe ran it on some laptops as a test, and it does remove the Malwarebytes application from Applications, but the icon still appears in the top bar, and if I click on it, it asks me if I want to restore or uninstall Malwarebytes.Can you please help me to supplement the script to make the uninstallation completely and not give users a chance to restore malwarebytes.

Hello and thank you for taking a moment to look at this. I will try and keep it short and sweet! I am running Jamf 10.4 and am having issues getting Patch Management to display any software titles. When I go into Patch Management > New I get the following error...(A connection error occurred while attempting to download software titles from this source.) Everything else is working as far s I can tell. However, I have not used this feature before, only glanced once or twice in the past and the software at one point did populate. Am I missing something easy here or has anyone seen this before at all? I appreciate any and all suggestions, thank you!

Hi all,i wanted to remove MDM Profiles from a client and used sudo jamf removeFramework instead removeMDMProfile. So now i have a problem..i can´t enroll this device because the profiles are still there and cannot be deleted.How can install jamf on a mac manually und do sudoremoveMDMProfileThe easiest solution would be to remove the old profiles on a mac but they are not removable. I cannot remove them as admin.Any ideas?greetz Frank 

FYI: This is for newly imaged/enrolled machines only. I'm not attempting this with machines currently deployed.  Is it possible to force Filevault to enable with 0 interaction from the end-user? Currently we have it auto-enable during enrollment but there is a small window that pops up that says "Turn on" or "Cancel" and they are unable to login for the first time without selecting "Turn on", but I'm hoping to skip that altogether. Since they have no option to move forward without enabling it, ideally we can force it in the background. We have: Jamf Pro, Jamf Connect, "Automatically install PPPC" with Jamf management framework and Jamf Connect. We currently have 2 Config Profiles that enable FV (though I'm honestly not sure which does what or if they're redundant):Application and Custom Settings > Jamf Applications > com.jamf.connect.login > Enable Filevault: TrueSecurity & Privacy > Filevault > Enabled Filevault > Enabled (At Login)

I am trying to install a different self-signed cert for each device. Is it possible to do it in JamF Now? I was able to install the same cert for all the devices through a custom profile configuration, but I want to install a unique cert for each device. Is this scenario only supported in JamF Pro?

Is this possibe? Can force install the 2021 license but some users use an O365 license so want to make an smart group that only users with an 2019 license update to 2021 thanks 

We are just rolling out new computers to our staff, the currently have MBPs with local accounts, on the new computers, we are adding them to the AD domain to ease with logins and password across our district. If we let them use Migration Assistant, they will create new users on the computer with their settings and files and not use the new account that we are trying to get them to use. We will assist them in moving their files, bookmarks,images and music over, but don't want them to use Migration Assistant. I have tried to rename / remove the app, I tried to restrict the app, nothing works. Any ideas?

We are trying to setup some of our field iPads to have a passcode, but then restrict the user from being able to change the passcode.  We have a payload that requires a 6 digit passcode on all our iOS devices.  I tried a couple things and have not had the results we are looking for.First tried to set the Restriction->Functionality->Modifying Passcode to Restricted but when new devices enrolled they bypassed the prompt to set a passcode and the won't let the user go into settings to set one.Then I turned that restriction off and had someone put the passcode on one of those devices and then turned the restriction to restricted and they couldn't change it, but that's too manual for each device.Second thing we tried was to setup a smart device group for any device where the passcode compliance with profile was compliant hoping that a new device being enrolled wouldn't pop into this smart group until the passcode was set; set the Restriction->Functionality->Modify

How can you export the Outlook 365 My Computer Archive files? I have a user that is migrating to a new Mac and wants to transfer these files from Outlook 365 on his old Mac to Outlook 365 on the new, but I do not see a way to export the My Computer archived files. In Outlook 2011 you can export and create a .OLM file but in the new Outlook i do not see it. Thanks