Any AppleScript people out there that can help me figure out why the "open location" part of the script is failing to open to the URL?This works:osascript -e "tell application \\"$browser\\" to activate"This does not work:osascript -e "tell application \\"$browser\\" to activate open location "https://www.yahoo.com""  loggedInUser=$(echo "show State:/Users/ConsoleUser" | scutil | awk '/Name :/ && ! /loginwindow/ {print $3}') # identify default browser defaultBrowser=$(plutil -p /Users/$loggedInUser/Library/Preferences/com.apple.LaunchServices/com.apple.launchservices.secure.plist | grep 'https' -b3 |awk 'NR==3 {split($4, arr, "\\""); print arr[2]}') if [ "$defaultBrowser" = "com.google.chrome" ]; then browser="Google Chrome" elif [ "$defaultBrowser" = "com.apple.safari" ]; then browser="Safari" elif [ "$defaultBrowser" = "org.mozilla.firefox" ]; then browser="Firefox" elif [ "$defaultBrowser" = "com.microsoft.edgemac" ]; then brows

Hi folks,Does anyone know a way to enforce the screensaver after 20 minutes of inactivity and require password to unlock in Ventura?I've been trying through a script but it doesn't seem to work, and end-users are still able to change the settings through System Settings.Thank you!

Long Story will try to keep it brief. 1,900 iPads enrolled into Jamf  were set up as single use Devices for training. Restricted to Safari and a couple of apps. No Apple ID, no need to connect to Azure Entra.Project gets put on hold, everyone forgets about iPads. Two years later project no longer on hold. Pull them out and all sorts of fun including expired MDM profile and Certs.  We have figured out most of the issues in reenrolling or DFUing the iPads.Except this one: After iPads went into storage we started enrolling Macs. Have pre-stage enrollment setup with Jamf Connect and Entra and SSO. Everything going great.. until.. iPad Project no longer on hold. When we go to DFU and re-enroll the iPad we are prompted for SSO. We do not want this. The hope is I can create an enrollment for the iPads that does not require SSO authentication. Ideas?

Hi all,Is there a solution to mark several iPads via Jamf and trigger a LostMode?e.g. 20 or more 50 iPads are stolen from a school and you want to activate the Lostmode with the appropriate message.How could we trigger this as quickly as possible and without much time expenditure with a message?Without having to set the LostMode on the iPad individually?Nice RegardsPeter

Hello together,Is it generally possible to assign the same app from two different ABM in same JAMF environment?Maybe is a stupid question but would like to know if it is possible.I have booked the app from two different ABM and assigned to the same JAMF but can only see booked app from one ABM!Thanks already for your help 🙂

Hello There,I am wondering if anyone having same issue that I am facing regarding Nudge.  Somehow when I am launching it the Nudge window doesn't show Deferral dropdown box as it is suppose to, So user can't defer the app any shap or form and it stays on window until user updates their compurter. All settiing for deferral are in JSON file. Deferral dropdown doesn't show on buttom right as it is suppose to. Any help appreciated.  {  "optionalFeatures": {    "acceptableApplicationBundleIDs": [],    "acceptableAssertionUsage": false,    "acceptableCameraUsage": false,    "acceptableScreenSharingUsage": false,    "aggressiveUserExperience": true,    "aggressiveUserFullScreenExperience": true,    "asynchronousSoftwareUpdate": true,    "attemptToBlockApplicationLaunches": false,    "attemptToFetchMajorUpgrade": true,    "blockedApplicationBundleIDs": [],  &nb

Hello,I want to use PreStage to enroll my macs that I already purchased.So I use Apple Configurator 2, they are registered in ABM but they don't appear in Jamf.Then I saw on ABM they are enroll with the Apple Configurator MDM server. I change the server to Jamf pro. I set by default that all macs added to ABM have to automatically use Jamf pro MDM server. But same issue, they use : Apple Configurator MDM server.My question is : is it possible to successfully enroll a mac with Apple configurator with Jamf pro? 

With Apple's changes to who qualifies for the Developer beta (as well as how it is installed), does anyone have advice on how to block users from installing it? In the past we always created a Restricted Software policy that restricted and then killed the process named "Install macOS <this year's name> Beta.app", but it looks like Apple is no longer deploying these in that way anymore. Granted, I could be wrong on that haha.We've created a similar policy for Sonoma, as well as an additional policy that blocks "macOSDeveloperBetaAccessUtility*" -- since it looks like that is the new deployment method. Have any of you come across a better solution?

I have been testing the Jamf compliance editor, and the scripts for the extension attributes are reporting 0 when the files the script is reading has a few failures and 2 exemptions. I am not seeing anything out of place in the script, any help? Here is the script for the Failure Count Attribute:  #!/bin/bash# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # ### Copyright (c) 2022 Jamf. All rights reserved.## Redistribution and use in source and binary forms, with or without# modification, are permitted provided that the following conditions are met:# * Redistributions of source code must retain the above copyright# notice, this list of conditions and the following disclaimer.# * Redistributions in binary form must reproduce the above copyright# notice, this list of conditions and the following disclaimer in the# documentation and/or other materials provided with the distribution.# * Neither the name of the Jamf nor the names of its cont

I have combed through all the threads here before posting, I am trying to figure out why this is happening to all unencrypted Macs on this server. The user gets a pop-up to enable FV, enter password, and then the following shows up in the logs: All the users have Secure Token, and they are enabled for FV2. Any help would be appreciated.  Here is the setup we have:    

Our Jamf environment requires that all Macs have FileVault enabled and we recently discovered that all of our Ventura systems can no longer unlock the drive with any administrator accounts. The only ones that can are standard accounts. We we're able to reproduce this issue on both an existing system that was upgraded to Ventura and a brand new MacBook Pro. To clarify:- FileVault is enabled on Mac OS Ventura.- Administrator accounts are unable to unlock the drive at startup/reboot.- Only Standard accounts are able to unlock the drive at startup/reboot.- We were able to reproduce the issue on both an older Silicon Mac and a brand new Silicon Mac out of the box. Any advice is greatly appreciated.

We've successfully deployed the reissue FileVault key script in our environment to send FV recovery keys to Jamf Pro to 99% of the Macs in our fleet. However, we have one Mac whose user is unable to send the key to Jamf Pro due to the following error: Error: User could not be authenticated. Error: Unable to unlock or authenticate to FileVault.To be sure, the user is using his Mac password to unlock System Settings, unlock FileVault at login, etc. But it's unable to generate a new FV key. Any suggestions on how to troubleshoot this sort of thing? I would prefer to avoid having to wipe/reinstall the OS unless it's the only option. 

Hello all! I'm new to JAMF. We have installed Mac Mini machines to be content caches for our iPads in the school system. They are set to configure themselves when they are plugged into the network and powered up. The default name is mac mini. I go and manually rename each one after it comes up. But for some reason, a couple of days later, the name has reverted to mac mini. I look in the history in JAMF and it only shows when it was created and each time I have renamed it. Any logs I can look at other than the history for the machine? Any ideas?

We use Jamf Pro Cloud to manage our Mac fleet but would like to hybrid join our Macs to Intune as a method to control who can use Office 365.  I see that Conditional access is being Deprecated.  Can I accomplish this with just using Device Compliance?  I keep getting Notifications in endpoint stating that an Intune update is coming concerning Intune device compliance.  I’m new to Azure / Intune so I apologize for my ignorance on that side.

Hello, Currently our staff have admin privileges on our Mac OS X Machines. We would like to take this away and make them a standard user. The only thing preventing us from doing so is adding Wifi Networks either at work or home. Does anyone know a way we can give permission to add wifi networks to a standard user without admin privileges? Any help is much appreciated. We are typically a OS X 10.10.X or 10.11.X environment. Thanks in advance

A couple of my users have experienced apps such as Chrome and FireFox deleting themselves after the migration from our previous MDM to Jamf.- We are using the migration tools from Jamf that were given to us after our migration meeting.- The only policies we have are for basic applications such as m365, OpenVPN, and Adobe.- Users retain their admin rights if they had them.- Chrome and Firefox are in our Self Service portal. I would like to find a solution to why this is happening. I keep going over our policies, our configuration profiles, and our prestage but I can't find a solution. We have zero uninstall policies and the only configurations that work on our computers are the initial Jamf Connect configurations and Windows Defender settings.When Jamf first enrolls or migrates, does it uninstall anything not in the provisioning script? Does it uninstall apps that are available in Self Service?

I'm working on moving users away from using the App Store to install apps and instead using Self Service. To make this transition easier, I want users to be able to open and browse the App Store, but not install anything. That way, if the user needs an app, it's simply a matter of the user getting a screenshot of what they need and submitting a ticket with the request, and I will then add it as a Self Service app.The most straightforward way of doing this seems to be to just prevent users from logging on to the App Store, but I'm not sure how to do this. We are not currently using managed Apple IDs.A similar question to this has been asked several times, but it looks like no one has presented the solution I am looking for:https://community.jamf.com/t5/jamf-pro/disabling-app-store-access/td-p/46605https://community.jamf.com/t5/jamf-pro/config-profile-restrict-app-store-and-restrict-app-store-to-mdm/td-p/180089https://community.jamf.com/t5/jamf-pro/restrict-app-store-apps/td-p/219061http

Hello - last post on this topic I could find was from 2015. Any way (Mojave and Higher) to disallow the "Reopen Windows When Logging Back In" across all Macs in a fleet? I know the way this is controlled behind the scenes has changed over the years. Thanks all!

I am new to Jamf Pro API and I am diving into more and more automations.  Can someone help me with how i would go about to updating multiple computer assignments for a static group by using computer names. If you have a working script, please assist. maybe via csv file?

Is there a way to send a pop up message to all Staff computers to notify them that there is an email problem?

Hi, I am trying to add Microsoft Offic 365 packages (Word, Excel, powerpoint etc..) to Dock but I got only ? mark. Obviously path is not correct.I have tried the below paths, none worked. Any help apreciated, please./Applications/Microsoft Wod.app/System/Applications/Microsoft Word.appfile:///Applications/Microsoft  Word.appfile:///Applications/Microsoft%20Word.app/Applications/Microsoft%20Word.app Thanks 

The remote command Update OS Versions on supervised devices is no longer available to run on the Devices tab. The 'Next' button is greyed out. There is a box saying You can now use Software Updates to manage OS updates but I do not want to do that, I want to run the OS update remote command. How do we get this option back?  Thanks!

Reports have been coming in about macs on the corporate network getting "poor network stability" messages periodically and my networking team has confirmed that systems are jumping from 5ghz network to the 2.4ghz network, or having a hard time moving from AP to AP based on proximity.  After doing some digging I have noticed some articles with similar issues referring to AWDL (Apple Wireless Direct Link).  https://www.meter.com/mac-osx-awdl-psa Mainly to disable this feature on systems to avoid future issues.    This article mentions that the issue should have been resolved in the recent updates to macOS, but systems with the latest OS are still reporting issues. Have others seen similar issues and implemented this practice of disabling the AWDL? 

Hi,I'm having an issue with a specific User-initiated enrollment does not complete fully on a MacBook Air.After enrollment the MacBook's serial number shows up in Jamf Pro console, but does not have any associated data/reports. For example, OS has null value, last Update has null value, etc.Running "sudo jamf recon" or "sudo jamf policy" on the client returns:The file /Library/Preferences/com.jamfsoftware.jamf.plist does not exist. Use the createConf verb to create it.I have tried creating the com.jamfsoftware.jamf.plist file successfully but then get further errors relating to security.This Mac was previously successfully enrolled with Ventura, 13.5 installed. The drive has been wiped (twice) and the record was deleted from Jamf Pro before re-enrollemnt.The model is MacBook Air Intel, Retina running Mojave. 10.14 has been re-installed (twice), with same results both times.Thanks for any guidance.

Hello,II have renewed the push certificate MDM on Jamf but when I send a mass command to renew the MDM profile on all the computers in my smart group and I look at the computers, the command still pending on all computers. If anyone has any idea where this might be coming from.