Just seeing if anyone has had success in deplying through Jamf Now a blueprint with a Custom Profile that has a DNS Setting payload.The Profile works find when installed manually but when it's deployed via Jamf Now isn't being enabled.

I know some of this has been covered once or twice before, but I'm VERY new to Jamf. I just recently started with this company and saw Jamf for the first time. Now, I'm basically the admin for an app I've only recently become acquainted with that manages computers running operating systems I've never supported in my short IT career. As you might imagine, I have a million questions, but I'll start with Mass Action commands.After a bunch of attempts, I finally got 2 machines to update from 12.6.0 to 12.6.1, but when I try and get them to Ventura, I get this in Jamf: Unsupported InstallAction for majorOS updateIt doesn't matter whether I've checked the option for majorOS update or not.I always choose the option to defer as I was tasked to do.When I run the mass action command, I see nothing on the target computers (no notifications etc) and after 5 minutes or so I get the failure result in Jamf. It's frustrating to say the least.This happens on an iMac and a MacBook.I have a third Ma

Hi, A couple years prior to joining my current organization, they moved their On-Prem Jamf Pro to the cloud. While the JCDS is setup, it isn't the Master DP, with the master being an on-prem smb server shared between our two campuses. I plan on doing a replication and then making the JDCS the master. My question is, does it make sense to keep an on-prem distribution point? 

I've had some free and paid Mac Store Apps setup for distribution for a long time and for a long time they have worked just fine. Now, all of a sudden, they're not always installing on a newly enrolled iMac. Is there any way to trigger an automatic install of Mac Store Apps?

We are a school district with staff setup as standard users on their Macbooks. We do not allow the App Store because, by law, we have to approve apps to protect student data. I just found out today that our M1 Macbooks that have been updated to MacOS Sonoma are completely bypassing any "Restricted Software" settings in Jamf. So users that update are able to open terminal, the App store, etc. even though the restrictions are setup and were working on Ventura. We are on Jamf version 10.49.0 so I don't believe the update is the issue. Any suggestions are appreciated!

Hi All, I'm looking at deploying Android Studio through Self Service for non-elevated users. I've uploaded the dmg file, and written a script to move the .app file to /Applications on each users machine. The package is dependent on JVM, so I've also packaged the JDK and have deployed that. My current challenges are: Once deployed, users are prompted with a message that this application was downloaded from the internet. I've tried using the spctl to add a label but to no avail... #!/bin/sh spctl --add --label "Android Studio" "/Applications/Android Studio.app" spctl --enable --label "Android Studio" On the first launch of Android Studio, the application downloads and installed supporting artefacts. One of these requires elevated rights... Has anyone packaged Android Studio and is able to provide any tips? Thanks, Jaems

Hi,Recently, I've been doing some cleanup work with our jamf pro instance and have gotten to printers. We have around 15 Konica Minolta BizHub 554e/754e's that our macs direct print to using LPD. Another admin has one giant AppleScript used to add all applicable printers, but I feel like there has to be a more efficient way. I've played around with Jamf Admin mapping, and it works fine; however, it seems like scripting might be the way to go. Does anyone have any advice or a good script they can share? 

How can I create a Patch Management Rule to distribute Safari for macOS Monterey and for macOS Ventura Clients? The Patch Management Policy does not offer an option for both systems. I created one for the Ventura Clients which is scoped to a Smart Group, but how can I setup a second one for the Monterey Clients?

Hello this is my first posting.I have an issue on one of our iMac, I tried to re-enroll and install MDM profile but says cannot install the profile. tried to remove is using "sudo JAMF removeFramework" but says "command not found!" tried to checked the but no "JAMF" folder exist. MDM profile exist in System Preferences.Is there a way to manually remove the MDM Profiles?

we have been deploying new M1 macbook air machines since July.  we changed our deployment workflow this year to use a workflow in MDS to deploy the os (big sur) and packages (instead of pushing packages/policies over the air through JAMF).  we skip the setup assistant and enroll into mdm through user enrollment.we haven't had any issues except that recently our users started getting the device enrollment notification saying that our organization can automatically configure their mac... even though they have the mdm profile installed and we're actively managing machines through JAMF. has something changed in big sur where this is now expected behavior?  i should hope not... any insight would be appreciated. 

Hello everyone,I am wondering what they proper way is to set up the following....I'd like to allow folks to login with their personal Apple IDs to use iMessage and to be able to connect their AirPods to their MacOS computers but then restrict everything else in iCloud (iCloud Photos, iCloud Drive, Find My, etc.). I see where you can apply iCloud restrictions via Configuration Profile but not sure if applying these also conflict with allowing the aforementioned items I'd like to leave open. Thanks in advance.

Hey Everyone, I know how secure tokens work, I know how to give them out. I have a particular question about having them automatically enabled without having to log into the account manually on each machine. I have it enabled so that every account can have a secure token, when they login. The issue I'm having, is my Local Administrator account.I have my management account as JAMFADMIN, and my local administrator is just "administrator". That's the account I use to reimage machines and do maintenance/updates. As we know, M1 machines need to have the account doing updates/OS installs to have a secure token. I have this account being made on Enrollment, so it should get one. The account is on the machine, but if I do a remote command to do an update, the secure token isn't enabled until I physically go to the computer and log into the account. Then it's available. Does anyone know how to make this token appear, without logging in?If anyone needs any other information, pleas

Hi Folks,I need some assistance. I have been trying to onboard M1/M2 through prestage enrolment and it's failing due to rosetta2 not being available as some apps not getting installed properly. Can anyone suggest to me step by step process on how to install rosetta2 on those macs before any other application?  Thanks,Rish

Maximum of how many device we can enroll into Jamf now?

Hi Guys im config the jamf radar and i need to add some websites to exception group we blocked for all users how can able do that 

I've been having some trouble updating the iMac's to the most recent macOS patch 13.6.2 with JAMF. I usually restart the computers just before I send the remote command and I do see the series of commands queueing and completing in the computers history but then the update never goes through. I did this for around 16 of our computers that we have and its the same problem for all of them and they just never get updated. Any solution?

We are using Jamf Device Compliance with InTune.Following this tech paper we have it working fairly well. Technical Paper: Integrating with Microsoft Intune to Enforce Compliance on Mac Computers Managed by Jamf Pro 10.43.0 or LaterWhen the end user goes through computer registration and JamfAAD opens they are prompted to "Always Allow" "Microsoft Workplace Join Key". This is expected and documented here. (Although it would be great to have a smoother workflow)Our issue is the certificate in the login keychain for Device Compliance is not trusted for some reason. (See attached image)The cert seems to be issued by "MS-Organization-Access" I don't have that CA and our Azure folks don't seem to know about it either.Thoughts?Eric   

I have 2 macs that do not have the FileVault key showing in their Disk Encryption page. I set up a policy to renew these keys. When it was done executing I ran sudo jamf policy command and this error popped up. What did I miss in the policy that prevented the authentication error? Any help greatly appreciated!  ? 

Hello can someone please send me pictures of how your erase-install script is set up inside of Jamf Pro. I can get the script to execute locally on the test machine, but when I try to add it via self service it will not execute.. I have the Package downloaded and added to a Policy as well as the script attached and the Execute command of: /Library/Management/erase-install/erase-install.sh --update --reinstall --cleanup-after-use --check-power ...I have tried it with just the package, I have tried it with the script and the package, and the script alone and still no success. I have read the Jamf Pro section of the script  GitHub about 30 times and still can't find a solution trying to execute it on a computer with Sonoma 14. via the self service... the icon will show but when click nothing happens If you have it running Properly I would appreciate if I could get pictures because Im stumped. 

I have a preboot script that I install on my Macs to initiate some Jamf policies but it requires Rosetta 2 to be installed prior. I usually pre-install Rosetta with "softwareupdate --install-rosetta --agree-to-license" but with 13.5, you now get this error: "Package Authoring Error: 032-69584: Package reference com.apple.pkg.RosettaUpdateAuto is missing installKBytes attribute" and my preboot script package fails to install.Has anyone else experienced this with macOS 13.5? 

I'm trying to create an extension attribute to report back ipv6 addresses but not having much luck... So far I got this... Anybody had success with doing something similar?

We have an issue where an Extension Attribute value is becoming hex code in a Configuration Profile. To give a bit more background, we use Cisco Umbrella for web filtering. In order to identify the user to Umbrella, we use a Configuration Profile which contains an Extension Attribute which is mapped to userPrincipalName from AzureAD. For most of our end users, this populates correctly in the format "username@company.com". However, in a few cases it becomes "username@company.com". "@" is the unicode hex code for "@". Looking at the Computer itself in Jamf correctly displays "@". Does anyone have any suggestions? Is this related to an old bug of PI-006195?

I'm needing to delete a ton of Smart Device Groups but they all have apps associated to them.  How can I delete these groups without having to go into each one and remove the apps first.  I have 80+ groups and do not want to do each one manually.

Hey all, We are in a one-to-one for Macs in our district and have given instructions to parent on how to set up screen time on their children's MacBook Air's.  Our problem comes when a parent doesnt remove the screen time lock during testing.  Sometimes the screen time filtering gets in the way of testing apps and websites.   So we figured out a solution.  Log into an admin account on the students computer, go to System Settings/Users and Groups and click the i button for the students user account and click delete account, then choose "Dont Change the Home Folder". Now you must navigate to the user folder and remove the word "(deleted)" from the users folder.   Once complete log out and have the user log back in.  Screen time should now be disabled. This helps us deal with testing for specific students who need this feature disabled for tests.

I am having trouble using Jamf Pro to run the SUPERMAN script. It works for minor updates of 14.0 but not working on 13.6. Any Suggestions?