Hello everyone,I use a device smart group that includes all iPhones to push a background image. The criteria I am using is Model > is > iPhone. This pushes every month to make sure anyone that changes it will have it set back to the correct background. For some reason, some users reported that their iPhone background has changed to a blank, black background. Pushing the wallpaper change directly to a user's device using the wallpaper change command fixes the issue no problem. What I am trying to find out is why it's happening in the first place and how to prevent it from happening again. Thanks,Matt

We run a script through self service that migrates data from a user's old computer to their new computer (computers connected via target disk mode). Data copies perfectly, however, Jamf throws up some messages like the attached for things like Documents, Desktop, Downloads, Reminders etc. Any idea of how to allow that in advance without having to click OK every time? Config profile maybe?

I have tried writing a script about four different ways simply to report what version cURL is installed on Macs. I am scratching my head why the value is blank after running recon on various Macs.  Below is the script:#!/bin/bash if command -v curl >/dev/null 2>&1; then curl_version=$(curl --version | awk 'NR==1{print $2}') echo "cURL is installed. Version: $curl_version" else echo "cURL is not installed." fi

Hello! I сan't erase all content on macOS Ventura, I tested PreStage (cleaned the test mac several times), and it looks like I didn’t delete the profiles from the test device at some point. And now i can’t erase all content from the test device. I tried to add the device again through User-initiated enrollment, but it shows up as UNMANAGED, and I can’t delete profiles or wipe the device.Please tell me how to clean the device.

I'd like to find a way to allow users to change the following things, either without a password or using their own, instead of needing admin rights.Power settings, like how long before turning off the display on battery or power adapterNetwork settings, like changing wi-fi networks Auto-Join settingPrinting settings, like updating Options and Supplies (this only started asking for an admin password since I think Ventura)Privacy and Security, like adding an app to Accessibility.Does anybody know a good way to do this? I wish the config profiles were a bit more like GPOs in this regard because I suspect I need a script instead of a checkbox.

We seem to be running into an issue with Secure Tokens. Searching has made me realize this is something most people are having difficulty with but it's usually with the Admin account not having a token but ours is sometimes the other way around.Long story short a second admin account that was added during the enrollment stage was getting the token then other users logging into the device would not get a token, now really showing itself with updates and the users getting a "You need to be an owner" error.So I created a script to run from Self Service that just prompts the user for their password then runs the command and passes the credentials of the Admin with the secure token. However, it always errors out saying the users password is incorrect but when I test and run the same thing from the terminal on the test device it works fine. Is there something I'm missing here? Does apple do something to restrict this kind of access from a script?   #!/bin/bash # Prompt the us

My Google-foo is failing me.  Although my script works to trigger the Jamf helper window - I get 'posix_spawn(): 2: No such file or directory' <-- And as far as I can tell it's because i'm trying to call launchctl -but - can't figure it out.  Is this an error I should be concerned about?JHELPER="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" LOGGED_IN_USER=$(stat -f%Su /dev/console) LOGGED_IN_UID=$(id -u "$LOGGED_IN_USER") echo $LOGGED_IN_USER WELCOME=$("$JHELPER" -windowType utility -windowPosition lr -heading "Urgent message from Mac Desktop Services." -alignDescription natural -description "An urgent OS update is needed on your system. Please run sofware update at the end of the day (Apple Menu --> System Settings --> General - Software Update) and install Ventura macOS 13 updates to bring your system to 13.6 if it is not already. Please do not click Upgrade to Sonoma, only updates for macOS 13 Ventura " -button1 "Go to u

Buen día, por favor alguien sabe cómo aplicar bloqueo de pantalla, al cerrar la tapa y abrir ya tenga el bloqueo para ingresar password, esto desde jamf pro. Saludos!!

We’ve recently removed admin rights on Macs for all of our users. Does anyone know of a way to enable users to always be able to administer preferred/saved Wifi networks which are saved on their machines without having to grant them temporary admin rights?

We have just started using Jamf Pro.  We were using Meraki and some of our iPads are in there.  What is the best (or proper) sequence for getting these into Jamf Pro?  My thought was to do this in the following order but was hoping someone could confirm this will successfully move this from Meraki to Jamf Pro.1.  In Meraki under DEP, select the device and click Remove Device2. In ABM, go to the device and choose edit Device Management and change it to our Jamf Pro MDM from the list.3. Wait for Jamf Pro to sync with ABM and the device should now be in my list in Jamf Pro to assign to a prestage enrollment.

Hi After updating to iOS 17 the wallpaper we use suddenly started zooming in after it's added to the phone.It looks correct for around 1 second and then it zooms in on the image.Anyone else had that issue and found a solution? Worked perfect using the same image on iOS 16.I have not changed anything to the smart group we used for iOS 16, since it's just set up to add it to all enrolled devices.//Kenneth

We use Jamf School to manage iPads and will be using Jamf Pro to manage Mac Minis for a high school computer lab. Can these two use the same VPP token and the same Apple ID? In my research, I'm finding that we can use the same Apple ID but need to create a different location with a seperate VPP token. Is this correct? 

hey guys,  I was trying to make computers compliant with cis level 1 hardening standards. Although i have solved some of the standards with configuration profiles, but many remained and i thought automating the process with a script would be easier.i found this great project https://github.com/usnistgov/macos_security.git  and i have tried it on my computer, though it did not fix everything, but it improved my compliance. I created the below bash script and tested it. but when i created the script in jamf and went on and made it a policy on one computer, it failed.any one please have an idea to solve this? or maybe i could change my approach. the script is :#!/bin/bashcd /Users/$USER/Applicationsmkdir cis_compliancecd cis_compliance/macos_securitygit clone https://github.com/usnistgov/macos_security.gitcd macos_securitygit checkout montereypip3 install -r requirements.txt --userbundle install --binstubs --path mscp_gems./scripts/generate_baseline.py -k cis

Hi,we would like to have the apps compass and calculator on the desktop for students.In the layout of the configuration these are also displayed but not on the ipads of the students.How can I install the software?RegardsStefan

I have been using Composer with no issues ever since we started with JAMF back in Jan 2022.I did have version 10.48 installed and updated a few days ago to 10.50 version of the apps (Composer & Admin), and they have both been working fine all week.This morning after continuing to work on a project and using Composer all morning, shortly before lunch it crashed.I got the usual Apple popup for a crash, but then tried to open Composer again. It prompted for my password, saying it was going to install a helper application, started to open but then crashed again. I tried rebooting. I tried throwing the apps to Trash and installing version 10.48, still crashes. I tried following this article (https://community.jamf.com/t5/jamf-pro/composer-will-not-open/m-p/217853) but it didn't help. I will add I didn't have the folder mentioned (/Library/PrivilegedHelperTools/) when i first checked. I manually created the folder, copied the com.jamfsoftware.Composer.helper file that I found w

Hello everyone,  We use an extension attribute that will identify the Max supported macOS by going through OS regexs. For Sonoma, we are using the regex below SonomaRegEx="(^Mac1[3-9]|MacBook\\d{2}|MacBookAir([8-9]|\\d{2})|Macmini([8-9]|\\d{2})|MacPro([7-9]|1\\d)|iMacPro[1-9]|iMac(1[8-9]|2[0-9]),\\d|MacBookPro(1[4-9]|2[0-9]),\\d)" And it will identify it's maxOS with: # Compare Model Identifier against Sonoma Regex compatible Macsif [[ $myModel =~ $SonomaRegEx ]]; thenmaxOS="14"fi So far, it's working partially. As devices are updating inventory I am seeing them update, but on my Macbook Air (m1, 2020) it will not show up as Max OS 14. It does, however show up in a smart group where it searches for Model Identifier matching the regex.  Is there anything obvious that I am missing?  

Hi Peeps, I'm having an issue with this login window, and I can't find any solution for this particular issue.  

Hey Guys,I have MFA setup in Onelogin for my Jamf Connect app.  The Onelogin activity log shows an error that MFA is set on the Onelogin side. I opened a case with JAMF support and they say that I need the success codes in my PLIST, but they don't know what those should be. I opened a case with Onelogin, and they said that the OIDC standard doesn't support MFA.Anybody have this working? My intent is to have MFA presented upon MAC login.Thanks for your thoughts! 

Firefox manages certificates separated from the system certificates that are used by Safari or Chrome. To circumvent the issue that users are presented with the "certificate not trusted, add exception" notification, it is possible to add the certificates automated to the users firefox installations by utilizing the following commands: Importing Certificates on Firefox & code snippet for looking for the profile name I know that there is also the CCK utility, but that is also more or less a pain in the a**, especially when you want to maintain firefox installations that are already existing (and have a filled user profile). Firefox now provides the possibility to trust certificates that are stored in the system keychain by setting the key "about:config", "security.enterprise_roots.enabled" to TRUE. Mozilla Help This setting should also be stored somewhere in prefs.js, but i have not figured out how to fiddle around with this file without ruining the user profile. Now my questi

Edit: Disregard

I believe the issue is with the OS version line (Major and Minor), but I have very little experience in creating scripts. !/bin/sh # Get user logged into console and put into variable "user" user=ls -l /dev/console | cut -d " " -f 4osMajor=$(sw_vers -productVersion | awk -F"." '{print $2}')osMinor=$(sw_vers -productVersion | awk -F"." '{print $3}') sudo -u $user defaults -currentHost write com.apple.screensaver CleanExit -string "YES"sudo -u $user defaults -currentHost write com.apple.screensaver PrefsVersion -int 100sudo -u $user defaults -currentHost write com.apple.screensaver showClock -string "NO"sudo -u $user defaults -currentHost write com.apple.screensaver idleTime -int 600 if [[ $osMajor -eq 14 ]] && [[ $osMinor -ge 2 ]] || [[ $osMajor -ge 15 ]]; then sudo -u $user defaults -currentHost write com.apple.screensaver moduleDict -dict moduleName -string "iLifeSlideshows" path -string "/System/Library/Frameworks/ScreenSaver.framework/PlugIns/iLifeSlideshows.appex" typ

I have an environment where network users are logging into lab machines with Jamf Connect which creates a local user account for them, but when they go to use some apps for the first time the apps ask for permission to access common folders (Desktop, Documents, etc) and this can cause a problem because if they for some reason click Don't Allow when the app requests it then this has to be manually fixed by an admin ... and in the case of some apps like Adobe Premiere Pro the app won't even open if access to those folders is denied.Does anyone know of a way through Jamf of setting these app permissions for users when they sign in so the apps don't have to request access when the user first opens them?Thanks in advance.

Hello All,I'm still learning JAMF so I apologize if this is a basic question, but I would like some help with figuring out the best practice in order to manage multiple locations on Jamf Pro. My IT team is in charge of taking care of users in California along with users in England and I am trying to find out what is the best practice in order to do so. For example, people in England might need to have access to different applications, or if we needed to modify our Zero Touch Deployment for them, we would like to keep it separate from our California side.I have looked into using Sites that is offered within Jamf Pro, but I hear that this is not the best way to go about this. 

I apologize if this has been asked and answered or documented somewhere, but I've looked and can't really find my answer.  I'm looking to change the distribution method for an app from Install Automatically to Make Available In Self Service. I know how to do that, but my question is what will this do to devices that already have the app installed? Will the app be pulled and require them to download it, or will it remain on device? Thanks!-Matt

I am trying to create a policy in Self Service that is scoped out to all devices, but is only accessible for a certain local admin account to install/run. When devices are enrolled, a default local admin account is automatically created and we do not use LDAP, so I'm trying to find a way to limit this policy from being run by unauthorized users. Is there any way to accomplish this? Or is there perhaps a way to require admin credentials be entered before the policy can run?The policy works great when I scope it to a test device, but as soon as I add the local admin account to the limitations, the policy is removed and disappears from Self Service.