I'm new to Jamf.  We have 1 computer that went through the prestage enrollement.  I can see the MDM profiles on the device and it states that this mac is supervised and managed but in Jamf it shows as unmanaged, enrolled via automated enrollment =yes, it  has not checked in since the device was wiped. Can someone point me in the right direction.  

Hi, I've built a configuration profile with the above preference set on one of our Macs, then uploaded the launcservices plist from it into the profile payload (omitting anything unrelated to Adobe) and deployed that to another test Mac to confirm it works - but PDFs still open in Preview. I've checked and re-checked the plist, and it matches the Mac that does open them in Acrobat Reader DC where relevant. Is there a way to achieve this, besides using Duti (the current build of which I believe doesn't even work under Mojave)?

According to this article the device_aad_information is written to the Jamf database, how can I use this to create a smart group or at least show in Jamf if it is registered with  Azure AD https://learn.jamf.com/bundle/technical-paper-microsoft-intune-current/page/Computer_Regisration_for_End_Users.html 

This is what I have now, just looking for guidance on making this work #!/bin/sh username=`ls -l /dev/console | cut -d " " -f 4` scutil --set ComputerName "$4""$username" scutil --set HostName "$4""$username".domain scutil --set LocalHostName "$4""$username" jamf recon If I execute this script from terminal following results: SCPreferencesSetLocalHostName() failed: Invalid argument I can run following lines, line by line fine all is good. scutil --set ComputerName whateverUsername scutil --set HostName whateverUsername.domain scutil --set LocalHostName whateverUsername Any suggestions?

I work in an education environment and some of the new features in Ventura have prevented our students from using the programs in the way they used to.For example, they have limited access to Garage Band and aren't able to make their own changes or add their own files. Is there some way to give "full access" to applications through Jamf?

I created a script that will tell you what the latest available macOS is that you can install on your hardware but will not run as an extension attribute, it shows blank but if I run it manually it will show the macOS version.Does anyone know how I can fix the script to make it work for an extension attribute?Thanks in advance,#!/bin/bash # All models, model indentifiers, and macOS compatibility provided by Apple. # List will need to be updated when new model come out. # MacBook Pro - https://support.apple.com/en-us/HT201300 # MacBook Air - https://support.apple.com/en-us/HT201862 # iMac - https://support.apple.com/en-us/HT201634 # Mac Mini - https://support.apple.com/en-us/HT201894 # Mac Pro - https://support.apple.com/en-us/HT202888 # Mac Studio - https://support.apple.com/en-us/HT213073 # Read system profile and extract the model identifier system_profile=$(system_profiler SPHardwareDataType) model_identifier=$(echo "$system_profile" | awk -F': ' '/Model Identifier/ {print $2}'

We're trying to setup a few loaner devices at our schools in the event a kid forgets their iPad.I setup two iPad 9th gens for testing, setup the ADEP profile for a shared device, all users are setup in ASM.I logged in as a user and was prompted to create a passcode, great. Then I logged out and logged in with another user and it worked the same.The problem is now when you go to the other iPad to sign in it takes the shared iPad passcode, logs in for about 10-15 seconds, the automatically logs the user out stating "Login failed please try again"I've been messing with them for about a day and just can't find any reason for this to be happening. Has anyone else ever seen this issue? 

Hello all! This is my first post on Jamf Nation - I'm a newcomer to Jamf and Apple in general, having taken over for my organization's previous Jamf admin.Some backstory:Currently, we install macOS updates by downloading the OS .app, packaging it in Composer as a .dmg, staging the update package on our endpoints via policy, and then using a second policy to initiate the installation with the following command:  echo '<localAdminPassword>' | '/Applications/Install macOS Ventura.app/Contents/Resources/startosinstall' --agreetolicense --forcequitapps --nointeraction --user <localAdminUsername> --stdinpass  This works great for initiating after-hours installs. However, my leadership has indicated they'd like an option for users to kick off updates from Self Service. While I can make this available in Self Service as-is, the problem is that this doesn't allow the user to control when the endpoint reboots; it doesn't even notify them a reboot is incoming.

From time to time I encounter policies that get stuck in pending and I don't know how to resolve the issue.Example, today a new system was setup for a user and enrollment complete fine. I have an enrollment trigger set for a provisioning package that installs all of our basic applications. This is the first time it didn't function - I can see the trigger is active and the logs show pending, but nothing happened after 20 minutes and a restart.In order to get the policy to run I had to scope it to self service to be run manually, which worked, but now the original enrollment provision is still sitting in pending with no failure or option to cancel.How do you resolve this? Both to get a pending to run and to cancel a no longer needed policy sitting in pending.

Using this json from  https://github.com/macadmins/nudge/blob/main/Schema/jamf/com.github.macadmins.Nudge.json  I am unable to get the mainHeader, subHeader and other elements customized with the text that I want. After I make a change in the configuration profile I see that the changes I made show up in /Library/Managed Preferences/com.github.macadmins.Nudge.plist but the Nudge app does not show these changes. What did work was changing the icon paths for light and dark modes. Does anyone have some tips on how to get this text to change? I have been quitting Nudge and relaunching it after each change I make. Nudge seems to be working well otherwise. Thanks!

I'm trying to complete a script run by a launchdaemon to delete a specific account if it is over X hours old. I started with Sean Rabbit's similar script here. But drifted away as I didn't need all that.I've tried "dscl -delete" and "sysadminctl -deleteUser" but they just convert the account to a standard user.I'm now trying to use "jamf deleteAccount" but it doesn't even seem to run (log created, but nothing in it).In all three cases the script works fine when run with sudo, and it's my understanding that /Library/LaunchDaemons/ are run as root? #!/bin/bash # Some Variables jamfBinary="/usr/local/bin/jamf" user="eucadmin" ageLimit=5 #in minutes ageLimit=$((ageLimit * 60)) currentTime=$(date +%s) #list users and if our target is on the machine check its admin and then if it's too old delete it users=$(/usr/bin/dscl . list /Users) if echo "$users" | /usr/bin/grep -wq "$user" && groups eucadmin | grep -qw admin;then userCreateTime=$(/usr/bin/dscl . -readpl

Hello, We have several computers and devices that have not communicated with Jamf for several months.I wanted to know if it was possible to send an MDM Lock or Wipe command and then unmanage them.Will these MDM commands still be deployed if the computer or the device is unmanaged but a check-in is done again? Thank you

We are trying to set up a site in Apple Business Manager as we are building out a new process and want to start testing. I have run into an error when I am trying to upload the token from Apple business manager to the Jamf site.I will add the file then click upload it will say "Unable to handle file upload." I've tried multiple browsers and computers and still no luck.I have uploaded a new public key to Apple Business Manager, then I downloaded a new token and I've attempted this multiple times.

Description: I have encountered a persistent issue with Jamf Pro version 10.49. When attempting to edit a 'Distribution Point', upon clicking the 'Edit' button, I am faced with a continuous loading spinner, preventing any further actions. The expected behavior would be for the edit options to appear without any delay or persistent spinning.Additional Information:Browser version: Chrome, Safari, Firefox in normal and private window.Operating System of Distribution Point : 13.5Network conditions: No conditionsQuestion: Do you have any idea what might be causing this issue or any suggestions for potential solutions?

With the advent of new JC versions coming out , what is the best and easiest way to clone a Jamf Connect Configuration Profile without having to manually cut and paste all of the variables from one to another? I tried cloning then changing the JC version and I get this message:  

Our config profile for blocking sharing works fine on macOS 12, but 13 you can edit the computer name in General / About just by clicking on name, Restricting the General prefs is not blocking About, but all other General settings.What have I missed?

Hi all,Is there a way to hide apps from the homescreen in iOS without removing them entirely from the phone? I know how to do it manually on my phone, but I'm not sure I've found anything that works within Jamf. We have a content filter application that needs to be installed to function, but the app itself only contains text and so it seems to confuse our users if it's visible on the home screen. Thanks in advance for any suggestions!

Since 10.50 (Cloud)When I click on a smart group on the dashboard (the value) I'm redirected to the page.. there is some blue-whirling.. and a blank page.. no results are displayed. Not every time, but more often than not.I now need to click on the smart group name, then results. Chromium browsers  (no I can't use a different browser) Anyone else? Was all working fine in 10.49

Hello Jamfnation! I just got back to work from JNUC 2018 and I'm very excited to put into use all the new things I learned. I manage a small fleet of 25 MacBooks, this is expected to double next year. We're using DEP to enroll our machines but would like to stop binding to AD and start using NoMad for AD authentication and local account management. Now there are a few tutorials and different ways to do this. Would anyone recommend a specific "simple" way of doing this, or point me in the right direction to get started. Thanks in advance!

I am trying to set up DEP on our JSS and when ever I get to the point where I have to upload the server token file, I get the error "Problem contacting Apple services" I've redownloaded the private key, deleted and recreated the Management server on Apple's side and tried again but always this error. Anyone got any idea why?

Hi team,Is there any way to suppress the notification asking permission for Falcon to filter network content (screenshot below).Our fleet is on either Catalina or Big Sur. I have created the relevant Configuration Profiles as per the deployment guide supplied by CrowdStrike. Functionally everything works as expected. I am wondering if it is possible to have that message automatically approve or if this is just part of macOS?Thanks!

My DEPnotify policy is set to trigger on "Enrollment Complete". It seems as though the trigger only works half the time. I just tried enrolling 3 machines and the policy never ran. I ended up having to run the "DEPnotify (do not delete)" policy manually from Self Service. Any tips? I already tried disabling "Network State Change" Attached is a screenshot of one of the machines.

Dear Jamf Community,I've created a custom desktop wallpaper and have there components: 1.) Desktoppr2.) A LaunchAgent plist3.) A shell script that the launch agent callsOwner and permissions are correctly set: root:wheel 644 for launch agent and script. Locations:Launch Agent is is: "/Library/LaunchAgents" Script in is in "/Library/Scripts"Desktoppr is installed in default locationLocation of wallpaper: "Library/Desktop Pictures/" Here is the plist and the script:PLIST<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>com.BoltonCSD.set-wallpaper</string> <key>ProgramArguments</key> <array> <string>/Library/Scripts/set_wallpaper.sh</string> </array> <key>RunAtLoad</key> <true/> <key

We're using cloud and just receiving this generic "Cannot toggle feature. Try again." message when pressing "Use the new experience" button in the new software updates experience page:Anyone else having the same issue or am I missing something? 

Hi everyone,I'm currently working on a custom desktop wallpaper and have learned a lot from reading older posts on here for it. My next question, or a second part of this project would involve using the same wallpaper as a login background. We currently AD bind our macs, if that's relevant.I have made the wallpaper 4480x2250 (same as Apple wallpapers). DPI 300. Any thoughts? Also, the simpler the better and to avoid me asking dumb follow-up questions, please provide explicit steps to accomplishing the solution :-)Thanks!Phil