I use a script to update Zoom to what ever version the app owners at my company say we are allowed to install. The script runs a curl command to download the installer for the version we want, then it installs the package. It first checks if Zoom is running. If it's not, it runs the install. If it is, it does not install the newer version of Zoom. The policy runs at check-in scoped to all comptuers with an exclusion for computers already running the version of Zoom we want to install. I have been trying to figure out how to detect if Zoom is running a meeting or not. Somoene may simply have Zoom launched, but not have a meeting running. I know a lot of my users just keep Zoom running. This results in the update taking longer to get done on all of my Macs. Does anyone know what process to look for if Zoom is in a meeting?

Situation: In Apple Business Manager we have two MDM server settings. We want to migrate our Mac laptops from the America MDM profile to the India MDM profile. What is the best approach for this?According to me first change the MDM setting from America to India in Apple Business Manager then reset the device and enroll the device again. Or do we have any other way of doing it?

Hi all, Fairly new to Jamf, having an issue getting a Self-Service installer for Citrix Workspace to function.I have downloaded the .dmg file from Citrix, packaged it up, and added it to an install policy. I've enabled FUT and FEU as it's a .dmg and not .pkg. But on installing from our Self Service, the application isn't actually installed despite self service saying install complete (not appearing in Applications list). Any guidance on where to go? Thanks!

Hello everyone,I hope you are doing well. I have Okta integrated with Jamf through Jamf Connect, I am wondering is it somehow possible to pass user's Full Name or at least Username in Okta to Jamf / Mac.What I am trying to do is to change computer name to be the same as the name of the Okta user.So far my closest success to this was to create script that takes username or alias(alias has precedence) of the currently logged in user and sets it as computer name. Code is below: #!/bin/bash admin1="admin1" admin2="admin2" # get username of the currently logged in user username=$(/usr/bin/logname) # get currently logged in user's alias if alias is not available, username will be used instead alias=$( echo "show State:/Users/ConsoleUser" | scutil | awk '/Name && ! /loginwindow/ { print $3 }' ) # If logged in user is not one of local admins that are for IT personel if [ $username != $admin1 ] && [ $username != $admin2 ]; then if [ $username == $alias ]; then

Hello, Using hybrid joined Azure, we appear to have an issue with our Conditional Access configuration between Jamf and Entra. We have configured Jamf Device Compliance with a Compliance Test Group and an Application Group, the connection verification status: Success between Jamf and Intune is confirmed and partner compliance management configured.A group of test Mac’s in Jamf have Company Portal and Intune integration policies installed and they are registered in Entra We have configured Conditional Access policies in Intune and targeted all cloud apps but when we run the CA policy we are locked out of Cloud Apps because according to Entra Sign-in logs the Mac is non-compliantAm I missing something?

Not sure what I am doing wrong here. I have created a Supervision Identity in JAMF Pro. But when I try to add it to my keychain, the password I provide is invalid. I've deleted and recreated the identity many times. Any idea what is going on? 

Version: 12.1 MontereyProcessor: M1 ProLast Inventory Update:01/12/2022 at 12:27 PMLast Check-in:01/12/2022 at 12:26 PMSupervised: Yes What are my troubleshooting steps to get these to go through. Let's collab.  

Hey I seem to be having issues with end users being able to install osx updates on their macs managed by jamf, the users are prompted for the password to upgrade to 14.0 but won't accept the user's password when being prompted is anyone seeing this or have we set this somewhere in jamf pro. I am having to log them out login as admin and update the mac Thanks  

I was just wondering if it was possible to release devices in Jamf Pro instead of doing it through Apple School Manager?I don't see a way to do bulk releases in Apple School Manager.I noticed under the connection to Jamf in ASM (Settings > MDM Server Info) - we have 'Allow this MDM Server to release devices.' checked.Just wanted to see if there was a way of bulk-releasing devices in Jamf. Otherwise I will do them one-by-one in Apple School Manager.

When initiating a user enrollment it prompts for the device to Assign to user. Though I have created a number of users under Settings > User account and groups entering the username, full name or email address of any of the users is never accepted, and selecting the search option, i.e. the magnifying glass, the resulting drop-down list has no users. What value is meant to be entered in response to this prompt?

Feel like I have to be missing something obvious here... but I can't seem to get this to behave. Trying to make an extension attribute that checks if homebrew is installed, and outputs the result of "which brew" if so.... pretty basic. This works perfectly from terminal both as my standard user and as root... but when jamf runs it... all that's returned to the extension attribute is "Installed: " with no file path listed.From terminal, i get what seems to be a proper output jamf should be happy with:sh-3.2# ./test2.sh <result>Installed: /opt/homebrew/bin/brew</result>Extension Attribute Code:#!/bin/bash if [[ $(which brew) != "brew not found" ]]; then brewstatus="Installed: $(which brew)" else brewstatus="Not installed" fi echo "<result>$brewstatus</result>" exit 0 

For stolen computers I used to push out Prey and I'd be able to get location, screen shot, camera shot. The location is always sketchy in terms of being able to actually track a computer, but the web cam pictures and the screenshots were great in terms of being able to get names and other reportable information for the police.With latest systems though we need to give permission from the computer for camera access as well as screen recording access, which we can't do since it's no longer in hand.I know I can firmware lock the computers and provide a message to return the device, but it's more likely the computer will end up in the trash than returned.What is anyone doing now to track/recover computers other than locking and providing a message to return?Again, this is after the fact... I don't want to have spying software on my student laptops before the fact (for various reasons.)Thanks!  

Hi guys, how we can enable Enhanced Protection in the Chrome browser via JAMF? I tried some Plist files but its not working on my end 

After several years of more or less being neglected Jamf has announced they are archiving NoMad. I figure NoMad is worthy of a moment of remembrance. How did you guys use NoMad and how many of you still use NoMad?   Strangely enough we used NoMad to make the domain bound life easier giving our users by giving a more stable way to update passwords and map network drives, never mind NoMad was designed to be used without domain binding. We moved off NoMad about 3 years ago.  https://www.jamf.com/blog/jamf-to-archive-nomad-open-source-projects/

Hi, How do you force an Xprotect version update? Trying: softwareupdate --background-critical outputted the following: softwareupdate[92845]: Triggering background check with forced scan (critical and config-data updates only) ... But running: defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString shows an older version of XProtect For our labs we updated to 10.15.7 using the Combo and Supplemental PKGs but the Xprotect version remained an old version. We like to control the software update process so we have everything unchecked in Software Update Not sure if that has something to do with Xprotect being unable to update even when running softwareupdate --background-critical from the Terminal.

Hello Folks, I am uploading push certificates on the jamf account, In the process of creating I used csr later on jamf account. Once I signed the csr and got the "JAMFSignedCSR.plist" and used this on identity.apple.com, I got an error "Invalid certificate signing request". Is there any solution to this problem?

How Can I disable mirroring hp screen on macOS ? Displaylink driver is useless. screens are connected usingHi all,Monitor: 2 x HPE27ED G4 QHDConnection: Test 1: Monitors linked to each other by Display Port cable and one of them is linked to Mac using Usb-c cable.Test 2: Monitors linked to Mac using g Usb-c cable each: only one monitor can make displayNo docking station to test.Anyone else struggling :) ?

Hi All,When I try to update the push notification I get this error anyone has any idea why I'm getting this?Didn't change anything in my server except to update the server from 2012 R2 to R2019. That was the only change I did for my server.When I Download the signed CSR from Jamf Nation and upload it to the Apple push certificate portal I get this error. Thanks 

Hello! I hope someone can help me with this. I've look into several other links and it does not seem to work.We generally have the Sharing preferences disabled in our Jamf using the Config Profile. We have a certain group of people who needs Screen Sharing. While we can exempt them from Sharing preferences which allows Screen Sharing, this will open up the ability for them to enable File Sharing, Media Sharing, Content Caching, and so on. 1. Is there a way to keep Sharing preferences disabled and allow only Screen Sharing? 2. Is there a way to enable Sharing preferences, allow Screen Sharing but disable the rest inside the Sharing preferences (File, media, Content cache, Bluetooth, internet sharing, printer sharing...etc)I've tried the below but it doesnt seem to work. My test machine is on Sonoma.!/bin/bash /usr/libexec/PlistBuddy -c ‘Set :com.apple.screensharing:Disabled No’ /private/var/db/launchd.db/com.apple.launchd/overrides.plist launchctl load /System/L

I am having troubles allowing non admin users to change the Date and Time on their Macbooks. There are quite a few teachers who let their Macbooks battery drain over the holiday break and when they got back in district their date and time were wrong and they could no longer connect to WiFi. We had previously enable Non Admins to change their date and time settings with the following command: #Allow Date/Time Change security authorizationdb write system.preferences.datetime allow This unlocks the date and time section within system preferences for non admin users but for some reason when users try to change their date and/or time it reverts back once they click save. For example if the year says 2018 instead of 2020 the staff member changes it to 2020 and clicks save, then the year will change itself back to 2018. (Settings that set the time automatically have been turned off at this point.) We can successfully change the time when logged in as a local admin account but our users are

just upgraded to 11.1.3 and when i go into a computer details management tab, theres no remote assist button

I use the block USB policy with Jamf protect, but it is still not working. Some USBs are working, and some cannot be used to move data. 

Hello,I hope you are well, I am new using jamf pro, we want to launch a policy with a script to uninstall Malwarebytes from all Macs, I found the following script  https://github.com/eth-its/autopkg-mac-recipes-yaml/blob/main/Scripts_for_Uninstallers/Application-uninstall.shWe ran it on some laptops as a test, and it does remove the Malwarebytes application from Applications, but the icon still appears in the top bar, and if I click on it, it asks me if I want to restore or uninstall Malwarebytes.Can you please help me to supplement the script to make the uninstallation completely and not give users a chance to restore malwarebytes.

Hello and thank you for taking a moment to look at this. I will try and keep it short and sweet! I am running Jamf 10.4 and am having issues getting Patch Management to display any software titles. When I go into Patch Management > New I get the following error...(A connection error occurred while attempting to download software titles from this source.) Everything else is working as far s I can tell. However, I have not used this feature before, only glanced once or twice in the past and the software at one point did populate. Am I missing something easy here or has anyone seen this before at all? I appreciate any and all suggestions, thank you!

Hi all,i wanted to remove MDM Profiles from a client and used sudo jamf removeFramework instead removeMDMProfile. So now i have a problem..i can´t enroll this device because the profiles are still there and cannot be deleted.How can install jamf on a mac manually und do sudoremoveMDMProfileThe easiest solution would be to remove the old profiles on a mac but they are not removable. I cannot remove them as admin.Any ideas?greetz Frank