I'm trying to create an extension attribute to report back ipv6 addresses but not having much luck... So far I got this... Anybody had success with doing something similar?

We have an issue where an Extension Attribute value is becoming hex code in a Configuration Profile. To give a bit more background, we use Cisco Umbrella for web filtering. In order to identify the user to Umbrella, we use a Configuration Profile which contains an Extension Attribute which is mapped to userPrincipalName from AzureAD. For most of our end users, this populates correctly in the format "username@company.com". However, in a few cases it becomes "username@company.com". "@" is the unicode hex code for "@". Looking at the Computer itself in Jamf correctly displays "@". Does anyone have any suggestions? Is this related to an old bug of PI-006195?

I'm needing to delete a ton of Smart Device Groups but they all have apps associated to them.  How can I delete these groups without having to go into each one and remove the apps first.  I have 80+ groups and do not want to do each one manually.

Hey all, We are in a one-to-one for Macs in our district and have given instructions to parent on how to set up screen time on their children's MacBook Air's.  Our problem comes when a parent doesnt remove the screen time lock during testing.  Sometimes the screen time filtering gets in the way of testing apps and websites.   So we figured out a solution.  Log into an admin account on the students computer, go to System Settings/Users and Groups and click the i button for the students user account and click delete account, then choose "Dont Change the Home Folder". Now you must navigate to the user folder and remove the word "(deleted)" from the users folder.   Once complete log out and have the user log back in.  Screen time should now be disabled. This helps us deal with testing for specific students who need this feature disabled for tests.

I am having trouble using Jamf Pro to run the SUPERMAN script. It works for minor updates of 14.0 but not working on 13.6. Any Suggestions? 

Is there a way to skip the "Choose your walllpaper setting" in macOS Sonoma when a new user logs in? We have set a standard desktop background that we want to use across all our computers.

Hi,I spoke with Apple and they believe this is a Jamf issue. In my IT team, we have received since yesterday at least 5-10 users complaining that their memory is consistently being used up within approximately 20 minutes of restarting. This is something that they have to keep doing throughout the day to use the computer before it warns again to start closing apps due to low Application Memory. Even without anything open, the memory pressure starts to get up into the yellow.There are a few processes we're seeing in Activity Monitor that spike into the GBs of memory used: ManagedClient, mdmclient, and MCXCompositor (this last one fluctuates though between a "normal" amount to then about 7GB for about 10 minutes, then back down).Has anyone else seen this recently? 

Hi everyone, I'm having a somewhat urgent issue with 46 instructor desktop machines at our college. Somehow a configuration profile that was scoped to these machines created another random profile called 'General' that keeps replicating over and over, reaching 3900 unique ID installations of the same profile name on each of the desktops. I've never seen this before, and other than removing the scope I haven't been able to stop it trying to create more and more General profiles. It's causing users not to be able to log in, and reboots are taking 15-20 minutes even on new M2 Mac desktops. It's happening on Monterey and Ventura OS, Intel and Silicon. Anyone seen this before? Hoping I won't have to rebuild each of these machines. 

This is sort of in regards to the issue of being unable to upgrade Shared iPads seemlessly to iPadOS 17 as per https://support.apple.com/en-ca/105058. I'm looking into how iPads by default receive and apply updates. I understand there is a restriction profile that can be applied to defer software updates for up to 90 days according to https://support.apple.com/en-ca/guide/deployment/depd30715cbb/web.  The way I read it is that the 90 days takes effect from when the software update, in this case iPadOS 17, is released and not from when the deferral policy is pushed out. iPadOS 17 was released September 18, 2023 so 90 days from that date would be December 17, 2023.  So I'm wondering what's going to happen in regards to our Shared iPads updating.  After December 17, 2023 will iPads automatically start updating on their own?  What will happen if I apply a deferral restriction configuration profile?  Will it even make a difference? We are sitting down this coming We

 Why or how does the “Clear Parent Restriction” work?We have found that as soon as the function is triggered via Jamf Portal, the student iPad loses the set restrictions of the parent app, but shortly afterwards the set restrictions of the parent app on the iPad apply again.And then you ask yourself, why doesn't the information arrive on the parent app that the "Clear Parent Restriction" command has now been triggered via Jamf?This means that the restrictions of the parent app always intervene.Is this a bug or was it not thought through? Or thought differently?What experiences have you done? Would that be a feature request?CheersPeter

I would like to add URL's to self service to be on the left hand corner of the page when a user opens self service is there any way I can do this on Casper? Thanks!!Nicholas

Hello everyone! I can't seem to find information on the subject and I would like to better understand mobile devices that are Personally Owned versus Institutionally Owned. Thank you all.

Hello,can someone confirm that the "web content filter" is broken in IOS 16.4.1?Only Blacklist seems to work.(My testing device worked fine on iOS 16.x before the update)Edit: Device = iPad 8. Gen 128G/Wifi/cellthanks,-Sebastian

I need to remove a lot of scripts from my Jamf Pro server. I inherited this Jamf Pro server from the person who held my position before. He didn't leave behind any documentation. To speed up the process I need to find out what scripts are actually in use. I want to remove all of the unused scripts. I will save them somewhere in case any of them are needed later. I looked around for some ideas but none that I could find posted here worked. Does anyone have a good way of doing this?

Having a issue with scripts not saving when clicking the save button. Basically the button does nothing (leaving the page and Jamf asks if I really want to leave the page so I know its been edited) I have tried firefox, chrome, safari. Not sure what's going since nothing has changed on our end and everything has been working fine for months,

Hey folks, this is my first post here and we have Jamf Pro since 2 weeks. We have a customized Teamviewerqs.pkg which is deployed to all computers. At the first start the window with Eula prompted. Is there a way to block it or accept it with a config in background? Cheers

Hi,I work at a private K-12 school with students that can be forgetful. Every now and then we need to change a user's password via the Google Admin console (user forgot, info leak, etc)We rolled out Jamf Connect this school year, and we're realizing that when we change the password via Google Admin console, Jamf Connect no longer works. If we try to have the user sign in with the Jamf Connect google window, it will try to open a verification window that refuses to accept the new password.Our fix is to use the local admin account, sign in that way, then use the local admin to change the user's account password to the new password. Is there any Jamf setting that would allow the Jamf Connect feature to change account passwords upon sign in? Or am I doing this the correct way?

Hello AllWe are runnning into an issue with laptops trying to update OS and being met with an error that states "you need to be an owner to install". Some machines the workaround of "sudo softwareupdate -i -a -R", will install the update but this isnt ideal. All machines are M1 machines, DEP enrolled and going through the same prestage. It seems like its related to SecureToken missing (which might also be causing some FV2 issues) for the user, at least thats what my google fu leads me to.  I kind of remember there being a script out there that could be used to assign a securetoken, we used it at my last place but I cant seem to find it. Any help is appreciated!!!!

Hello, I am new to jamf and our client is requesting that we automate turning off of Natural Scrolling. I have found a script that when run in terminal works perfect and does not prompt the user for anything. Currently this is what I am using:#!bin\\bashdefaults write NSGlobalDomain com.apple.swipescrolldirection -bool falseWhen I go to run this through jamf it just fails and does nothing. I'm sure I am missing something but have racked my brain and cannot figure it out. Thanks in advance for the help.

I have Ongoing policy with Recurring Check-in and Custom Trigger. Frequency is set to "Ongoing". Device is scoped to policy   sudo jamf policy sudo jamf policy -id <xxx> sudo jamf policy -trigger zoom_update sudo jamf policy -event zoom_update   Any of the above commands does not trigger the policy. It shows "No policies were found for the "zoom_update" trigger."  Any suggestions? Thank you

Hello, I downloaded and got the Big Sur installer which is 12.21 GB.When I try to package it with Composer, the pkg is only 15.6MB and damaged. I tried with Composer versions 10.25.1 and 10.26 beta. Do you have the same problem ? Thank you for your help

What is the best way to release a device when it's no longer in your organization? You are able to do it through Jamf School or Apple School Manager, which option should you use?Thanks!

Is there a way, on User enrolled devices, to take away admin privileges to be as close to a Pre-Stage enrollment as possible? Just starting to integrate Jamf in with our creative Team , they use Adobe with a lot of plug-ins and file transfer services, I sent out one pre-stage enrolled device and got alot of backlash in blocking the users workflow.That being said, I want to be able to test with a user that I can work closer with but is User enrolled so the circumstances are a little different. Let me know any suggestions , Thanks 

I'm trying to add a mac with macOS Sonoma via BYOD enrollment. iOS devices are set up correctly and already do work, but when I'm trying to login via Settings -> Privacy and Security -> Profiles -> Work or School account, I'm getting the following error:Did not receive an enrolment profile from your MDM server. Contact your administrator.

Greetings,Curious if anyone has run into this scenario;We are using JSS cloud, devices enrolled in Apple School Manager and assigned to the JSS, scoped to a Prestage Configuration that bypasses all steps in Apple Setup except Location Services, Registration & FileVault.  We're also using an Enrollment Customization Configuration.  We do not create a local admin account in our PrestageThis Prestage is the only one in use and has not changed in years. While setting up a new or freshly-erased-with-new-os Mac:Start the computer, which initiates Apple Setup.Step through the screens to the Remote Management screen.Let the JSS enrollment complete.At the Account Setup screen, Shut the computer off.The scenario here is that a setup tech could finish up for the day and rather than continue setup, shut the computer down, or let it go to sleep.  I've only been able to replicate if the computer is shut down.Restart the computer.At this point, the computer boots to a log