Is there a way to skip the "Choose your walllpaper setting" in macOS Sonoma when a new user logs in? We have set a standard desktop background that we want to use across all our computers.

Hi,I spoke with Apple and they believe this is a Jamf issue. In my IT team, we have received since yesterday at least 5-10 users complaining that their memory is consistently being used up within approximately 20 minutes of restarting. This is something that they have to keep doing throughout the day to use the computer before it warns again to start closing apps due to low Application Memory. Even without anything open, the memory pressure starts to get up into the yellow.There are a few processes we're seeing in Activity Monitor that spike into the GBs of memory used: ManagedClient, mdmclient, and MCXCompositor (this last one fluctuates though between a "normal" amount to then about 7GB for about 10 minutes, then back down).Has anyone else seen this recently? 

Hi everyone, I'm having a somewhat urgent issue with 46 instructor desktop machines at our college. Somehow a configuration profile that was scoped to these machines created another random profile called 'General' that keeps replicating over and over, reaching 3900 unique ID installations of the same profile name on each of the desktops. I've never seen this before, and other than removing the scope I haven't been able to stop it trying to create more and more General profiles. It's causing users not to be able to log in, and reboots are taking 15-20 minutes even on new M2 Mac desktops. It's happening on Monterey and Ventura OS, Intel and Silicon. Anyone seen this before? Hoping I won't have to rebuild each of these machines. 

This is sort of in regards to the issue of being unable to upgrade Shared iPads seemlessly to iPadOS 17 as per https://support.apple.com/en-ca/105058. I'm looking into how iPads by default receive and apply updates. I understand there is a restriction profile that can be applied to defer software updates for up to 90 days according to https://support.apple.com/en-ca/guide/deployment/depd30715cbb/web.  The way I read it is that the 90 days takes effect from when the software update, in this case iPadOS 17, is released and not from when the deferral policy is pushed out. iPadOS 17 was released September 18, 2023 so 90 days from that date would be December 17, 2023.  So I'm wondering what's going to happen in regards to our Shared iPads updating.  After December 17, 2023 will iPads automatically start updating on their own?  What will happen if I apply a deferral restriction configuration profile?  Will it even make a difference? We are sitting down this coming We

 Why or how does the “Clear Parent Restriction” work?We have found that as soon as the function is triggered via Jamf Portal, the student iPad loses the set restrictions of the parent app, but shortly afterwards the set restrictions of the parent app on the iPad apply again.And then you ask yourself, why doesn't the information arrive on the parent app that the "Clear Parent Restriction" command has now been triggered via Jamf?This means that the restrictions of the parent app always intervene.Is this a bug or was it not thought through? Or thought differently?What experiences have you done? Would that be a feature request?CheersPeter

I would like to add URL's to self service to be on the left hand corner of the page when a user opens self service is there any way I can do this on Casper? Thanks!!Nicholas

Hello everyone! I can't seem to find information on the subject and I would like to better understand mobile devices that are Personally Owned versus Institutionally Owned. Thank you all.

Hello,can someone confirm that the "web content filter" is broken in IOS 16.4.1?Only Blacklist seems to work.(My testing device worked fine on iOS 16.x before the update)Edit: Device = iPad 8. Gen 128G/Wifi/cellthanks,-Sebastian

I need to remove a lot of scripts from my Jamf Pro server. I inherited this Jamf Pro server from the person who held my position before. He didn't leave behind any documentation. To speed up the process I need to find out what scripts are actually in use. I want to remove all of the unused scripts. I will save them somewhere in case any of them are needed later. I looked around for some ideas but none that I could find posted here worked. Does anyone have a good way of doing this?

Having a issue with scripts not saving when clicking the save button. Basically the button does nothing (leaving the page and Jamf asks if I really want to leave the page so I know its been edited) I have tried firefox, chrome, safari. Not sure what's going since nothing has changed on our end and everything has been working fine for months,

Hey folks, this is my first post here and we have Jamf Pro since 2 weeks. We have a customized Teamviewerqs.pkg which is deployed to all computers. At the first start the window with Eula prompted. Is there a way to block it or accept it with a config in background? Cheers

Hi,I work at a private K-12 school with students that can be forgetful. Every now and then we need to change a user's password via the Google Admin console (user forgot, info leak, etc)We rolled out Jamf Connect this school year, and we're realizing that when we change the password via Google Admin console, Jamf Connect no longer works. If we try to have the user sign in with the Jamf Connect google window, it will try to open a verification window that refuses to accept the new password.Our fix is to use the local admin account, sign in that way, then use the local admin to change the user's account password to the new password. Is there any Jamf setting that would allow the Jamf Connect feature to change account passwords upon sign in? Or am I doing this the correct way?

Hello AllWe are runnning into an issue with laptops trying to update OS and being met with an error that states "you need to be an owner to install". Some machines the workaround of "sudo softwareupdate -i -a -R", will install the update but this isnt ideal. All machines are M1 machines, DEP enrolled and going through the same prestage. It seems like its related to SecureToken missing (which might also be causing some FV2 issues) for the user, at least thats what my google fu leads me to.  I kind of remember there being a script out there that could be used to assign a securetoken, we used it at my last place but I cant seem to find it. Any help is appreciated!!!!

Hello, I am new to jamf and our client is requesting that we automate turning off of Natural Scrolling. I have found a script that when run in terminal works perfect and does not prompt the user for anything. Currently this is what I am using:#!bin\\bashdefaults write NSGlobalDomain com.apple.swipescrolldirection -bool falseWhen I go to run this through jamf it just fails and does nothing. I'm sure I am missing something but have racked my brain and cannot figure it out. Thanks in advance for the help.

I have Ongoing policy with Recurring Check-in and Custom Trigger. Frequency is set to "Ongoing". Device is scoped to policy   sudo jamf policy sudo jamf policy -id <xxx> sudo jamf policy -trigger zoom_update sudo jamf policy -event zoom_update   Any of the above commands does not trigger the policy. It shows "No policies were found for the "zoom_update" trigger."  Any suggestions? Thank you

Hello, I downloaded and got the Big Sur installer which is 12.21 GB.When I try to package it with Composer, the pkg is only 15.6MB and damaged. I tried with Composer versions 10.25.1 and 10.26 beta. Do you have the same problem ? Thank you for your help

What is the best way to release a device when it's no longer in your organization? You are able to do it through Jamf School or Apple School Manager, which option should you use?Thanks!

Is there a way, on User enrolled devices, to take away admin privileges to be as close to a Pre-Stage enrollment as possible? Just starting to integrate Jamf in with our creative Team , they use Adobe with a lot of plug-ins and file transfer services, I sent out one pre-stage enrolled device and got alot of backlash in blocking the users workflow.That being said, I want to be able to test with a user that I can work closer with but is User enrolled so the circumstances are a little different. Let me know any suggestions , Thanks 

I'm trying to add a mac with macOS Sonoma via BYOD enrollment. iOS devices are set up correctly and already do work, but when I'm trying to login via Settings -> Privacy and Security -> Profiles -> Work or School account, I'm getting the following error:Did not receive an enrolment profile from your MDM server. Contact your administrator.

Greetings,Curious if anyone has run into this scenario;We are using JSS cloud, devices enrolled in Apple School Manager and assigned to the JSS, scoped to a Prestage Configuration that bypasses all steps in Apple Setup except Location Services, Registration & FileVault.  We're also using an Enrollment Customization Configuration.  We do not create a local admin account in our PrestageThis Prestage is the only one in use and has not changed in years. While setting up a new or freshly-erased-with-new-os Mac:Start the computer, which initiates Apple Setup.Step through the screens to the Remote Management screen.Let the JSS enrollment complete.At the Account Setup screen, Shut the computer off.The scenario here is that a setup tech could finish up for the day and rather than continue setup, shut the computer down, or let it go to sleep.  I've only been able to replicate if the computer is shut down.Restart the computer.At this point, the computer boots to a log

Hi there, I'm working on a policy that should be able to deploy a launchdaemon plist to all machines. The below script I found here https://communithttps://community.jamf.com/t5/jamf-pro/remote-management-active-extension-attempt/m-p/119717y.jamf.com/t5/jamf-pro/remote-management-active-extension-attempt/m-p/119717    #!/bin/bash cat << 'EOF' > /Library/Scripts/jamf-Restart.sh #!/bin/bash sudo killall jamf sleep 10 sudo jamf policy EOF chmod 644 /Library/Scripts/jamf-Restart.sh chown root:wheel /Library/Scripts/jamf-Restart.sh cat << EOF > /Library/LaunchDaemons/jamf-Restart.plist <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>jamf.restart</string> <key>ProgramArguments</key> <array> <string>sh</string> <string&

We've decided to move our scoped policies and conf. profiles to smartgroups, as we realized this will save a lot of work in the long run. I don't seem to find an efficient way to do this, at the moment i have to go through every single policy and conf profile and change the scope manually, which isn't even the bad part, the worse is that i can't find a way to list all the policies scoped to one department.When the policy is scoped to a few departments, it can't be found anymore in the search, it shows "2 computer groups, 2 departments" or something like that and that excludes the keyword from the search.Any help/ideas would be highly appreciated.

Found the solution to my problem - How to lock classroom pane/options with a custom profile in JAMF explained in first comment We are looking into deploying Classroom for our teachers and students next year. We would be doing Teacher Managed classes. (macOS devices, teacher and student). By default, students can change settings that include them being able to leave the class, and requires student approval to lock etc... Which is never going to work. JAMF has a couple wonderful configuration profile setting under Restrictions - Functionality. However they ONLY work with Prestage Enrolled devices, not those enrolled via QuickAdd. I have tested and confirmed that with a clean install of 10.14.4 and QuickAdd that the configuration indeed does nothing. Students can still change settings and require permissions etc. Allow Classroom to perform AirPlay and View Screen without prompting, Allow Classroom to lock the device without prompting,Require teacher permission to leave Classroom unm

Hi, Totally fed up with the constant updates of Flash player plug in. Does anyone have a deployable method to remove it from my lab Macs? I know there is the manager in the Utilities folder, and you can uninstall it with that. But this does not look scriptable to me. And I need a deployable method as there are about 300 Macs with it on. As usual, any help will be greatly appreciated.

Pretty new to Jamf and Mac management. Have been looking at the patch management process and focusing on browser updates, although what I'm discussing is applicable to any application update, not just browsers.What I'm seeing is some confusion among our users regarding the patching process. For example, user gets notified that there's an update available for Microsoft Edge. User initiates the install process. Browser closes, update begins.My question is: how does the user know the update has finished applying and they can safely re-open the browser? Is there a way to tell the application to restart after an update has applied? Curious to know how other admins/organizations are handling this. Thanks!