Has anyone been able to get mice to have right-click enabled by default? We are running lab machines with new users logging in all the time and would prefer they not have to enable that for themselves each time. I have seen (and tried) various solutions here on Jamf (scripts run in a policy) but have not been able to get it to work. I am interested if anyone has had any success while running Monterey.Thanks-

Hey all,We have some users that don't get added to our Prestage Enrollment (ABM problem, not a Jamf issue), so they create local accounts then need to manually enroll via the url.After the manual enrollment we have their machine install Jamf Connect but on their next reboot we'd like them to log in with Jamf Connect and force them to create a new user without the option to migrate the user they've already been using. (Yes, this will create an additional account on the machine but it's much easier for us to have them use their Okta account rather than their personal account.)Unfortunately no matter what settings we use in the Config Profile, the option always opens for them to Migrate their local account:<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>OIDCProvider</key> <string>Okta</string> <key&

We have around 10 smart groups we use for our 3rd party updates. All the smart groups are set to use the Criteria "Patch Reporting Software Title" then we point it to the Patch Management we have setup for that specific software and we use "Less Than" and pick our version. For some reason our Adobe Reader group isn't reading the devices correctly. We're currently deploying version 23.003.20269, but this smart is listing devices that have already been updated to 23.003.20269. None of the other smart groups are doing this. Not sure what's going on.  

Hello, What would be the best way to prevent users from downloading software/applications from the internet. We have the appstore blocked in the restricted software section but I am worried they can download some software/apps from Chrome or Safari with DMG files?What would be the best practice to prevent this?Thanks 

Does anyone have a working Extension Attribute to read if the Root account is enabled? The one I was using does not appear to work anymore, and none of the commands I am seeing on the internet are working either. This is what I was using.  #!/bin/bash rootCheck=$(dscl . read /Users/root | grep AuthenticationAuthority > /dev/null 2>&1 ; echo $?) if [ "${rootCheck}" == 1 ]; then echo "<result>Disabled</result>" else echo "<result>Enabled</result>"\\ fi   

Hello,I'm new to managing devices (iOS) in Jamf Pro. I'm looking for a set of best practices when it comes to setting up devices, including restrictions, settings etc. We have just a few iPhones in the company but I want to make sure they are properly secured and managed. Any advice is much appreciated! Thanks. 

Hi Folks,I'm trying to find a way to update our extension attribute every 5 minutes, but only one specific, so i don't want to mess with the inventory collection.I figured my best bet is to create a script that does the same as it does now for the EA, but instead of just doing a <results> echo, writing it directly using the APII still need to redo my JAMF 400 since i found the whole API thing so confusing, but i think i have the idea down.would this be effective/would you do it differently?-credentials-grab serial number from system profiler-use serial to grab the computer ID using the API (so "https://***.jamfcloud.com/JSSResource/computers/serialnumber/$serial_number")-execute the script (in this case, it checks the IP for a specific interface)-writes the value using the API by using the previously fetched ID (i think this should go via the computer then, not clear if there's a better way?)as you might be able to tell, i kind of know what to do but still feel lost, tips/hi

Does anyone have recommendations for installing Jamf Infrastructure Manager? I am receiving the attached rollback error after initiating the installation and entering the verified parameters. I used the following as resources: https://hcsonline.com/support/white-papers/installing-jamf-infrastructure-manager-on-a-windows-server https://docs.jamf.com/infrastructure-manager/2.1.0/Installing_a_Jamf_Infrastructure_Manager_Instance.html The system settings are as follows: Windows Server 2016 x64 VM (patched, latest build).4 GB RAM80 GB HD w/ plenty of disk space availableJava 11 w/ path configured I currently have a ticket open with Jamf but so far the troubleshooting suggestions have been fairly basic steps that I had already taken like ensuring the FQDN is used for hostname and installing from an elevated command prompt session. The login credentials for the API user are also valid. The installation log is extremely verbose but I parsed every single line. There is a single 1603 error

Hello Folks,We have an interesting request that came through recently and are looking for some guidance.There are a handful of employees using Apple Notes and they would like to backup this content to iCloud. We have Apple Business but are not actively provisioning accounts for employees. As a matter of fact, we are just blocking iCloud across our environment. We are governed by HITRUST and have to be mindful about what content is stored, especially on personal accounts.  We are just trying to find a way to protect against data loss for these individuals. Is is possible to force iCloud logins only to company-owned accounts? We really don't want to deal with activation locks, etc. in addition to the aforementioned DLP concerns. Thanks!

We have Microsoft Intune configuration configured for device compliance. There is an app in SelfService for them to Register with the Company portal.What I would like is a prompt or notification to the user that they need to register and if they don't it nags them again.

Hi everyone, I'm sure that this subject has been talked about, but I haven't been able to find it. My question is: Can you run two MDM solutions at the same time? I have both MS Intune and JamF available to me and I was wondering if it was possible? I don't think it is, but I want to make sure. - Thanks

Not sure what's going on but I've setup the JAMF DEP automated enrollment.I've been able to successfully enroll 20+ macs in the last week, but all of the sudden today, my device is not enrolling correctly. All devices that are being enrolled are showing "Unmanaged" and the JAMF binary is missing from the /usr/local/JAMF folder is missing. Oddly enough though, the base MDM profiles are coming down as well as JAMF Connect package.  

I have run into an odd issue where on some machines complete the S1 upgrade and some machine fail it after the agent is installed (hence the S1 console sees them online and on the correct version).  It seems like a permissions issue that I don't know how to tackle.This is the install script - This is the one I decided on using.This is the upgrade script - Alternate scriptWIth the install script, I got 3 Macs that Completed and 11 that failed.Successful. Not successful. This is the error:Script result: installer: Package name is SentinelOne installer: Upgrading at base path /installer: The upgrade failed. (The Installer encountered an error that caus installation to fail. Contact the software manufacturer for assistance. An ur error occurred while moving files to the final destination.)I guess I'm confused as to why it completed on 3 Macs but failed on 11 Macs.  Same script.  Same everything...Any help would be appreciated.    

I have about 30 mac mini's in asm that's pointed to jamf server, but these are not in jamf pro - we did go over our device count license in jamf pro but since our rep has added some, wondering how i can get them in jamf now, will i have to unbox them and reinstall the OS

Hi all, been looking around the past few weeks on some information on getting Tableau and JAMF to play nice so I can make use of Tableau's nice visual reporting for our environment. Haven't really found anything substantial. I did find a JAMF Marketplace post (https://marketplace.jamf.com/details/jamf-tableau-integration/) but all the links seem broken, and it looks to be catered more towards On-Prem environments anyway. Wondering if anyone has had experience on using the two together? Thank you!

Full disclosure - we're only just getting started with JAMF Pro, so apologies if I've missed something obvious.We want to manage a small fleet of iPads, configured to be in Shared Mode using guest account only (so no data is retained between sessions - important consideration for us).I want to add a webclip / URL to the key web application that these will be used for, and from what I read here (https://docs.jamf.com/10.24.1/jamf-pro/release-notes/Bug_Fixes_and_Enhancements.html) this should now be possible. However, I still get an error in the management console for the device stating "The payload type “com.apple.webClip.managed” is not permitted to be installed for the system in multi-user mode.". Wondering if I'm missing something obvious?Secondly, I have the device smart group supposed to be setting a wallpaper / lock screen on the device, but this doesn't appear to take. The group says the wallpaper command was 'Acknowledged', but it stays on the default. I DO have a setting a

Does anyone have any guides within the past 3 years for getting the dev environment setup for jamf pro? Everything i find online is from 2016-18 and rather outdated. I want to test the LAPS but dont want to enable it in prod incase pulling the password doesnt work. 

Hi All,I need to deploy MS Defender using Jamf pro to all managed macOS. I am following the instruction mentioned by Microsoft on Set up the Microsoft Defender for Endpoint on macOS policies in Jamf Pro | Microsoft Learn. But I am not able to navigate to Settings > Endpoints > Onboarding. I don't see onboarding option. I do have Global Admin access in Azure. Do I need to get any other access to access the above mentioned path please?  Thanks. 

I'm trying to deploy some apps to a batch of macOS devices using Jamf Pro, but every time I initiate the deployment, I receive an error message with code 432. Has anyone else encountered this error before, specifically error code 432? Please give some guidance to solve my problem.

I've got a device that shows not having checked in since 8/21 but the end user has been using it daily. She went to use her phone this morning and it said iPhone Unavailable, check back in 15 minutes. No love after 15. Remote commands are not getting to the device and she cannot use her pin to unlock it bc of said message. Hard shutdown and restart did not help. Any thoughts?DeclarativeManagementPending

Hi Nation, I hope you are all well.I am trying to set up Intune Integration for Compliance, however every article I seem to find is around Conditional Access which is legacy, I can not find anything that details guidance for Device Compliance and the Intune config. Does anyone have a good link ? ThanksBob - Reno

Bear with me on this, but I am considering allowing 6 digit number passcode for macOS login.  My threat assessment is similar to that of an iPhone, that has a 4 digit passcode protecting the device, which essentially has access to all the same company information the Mac is going to have.  In both cases, the attack vector requires physical access to the device and then a considerable amount of number guessing, but not before locking the device out after 10 wrong guesses. Our devices will also have Password Sync installed, so users who wish to configure that certainly can, and then use their company password for login. Our Macs are all ABM -> MDM enrolled, purchased through official channels, we don't have Active Directory.  We do use Okta for but as i mentioned and I have configured Password Sync with Okta and as mentioned users can configure Password Sync if they wish. Am i missing anything here, that should require Mac login passwords to be long and c

Has anyone successfully used the SecureW2 SCEP setup with Jamf on macOS AND iOS?I am having an issue with our iOS devices not connecting to the network. They get the profile payload that includes the cert, Wi-Fi profile, and SCEP settings (the same settings as on the macOS devices) and the iOS device starts to connect but never fully connects and just cycles through the connection process over and over. The macOS devices connect fine a few minutes after they get the cert.It gets the cert from SecureW2, so that part is working, but it just never actually connects to the network. I followed their, somewhat out-of-date, instructions found here:Deploy Client Certificates via SCEP to Jamf Managed Devices (securew2.com) Anyone else had issues with the setup for iOS devices?

Hello guys, I have a bunch of test macs which I use for testing so I'm constantly re-imaging them and enrolling them to Jamf. I want to know if there is a way that I can automate the removal of the Jamf record without having to in Jamf gui web interface and looking for the record for the mac and then deleting it.   

Hello Jamf community, We have multiple PreStage Enrollment (1 for each lab + 1 for employee laptops). Other than each one being used as a criteria to place devices into Smart Computer Groups, there is no reason for these to exist as they all have the same settings anyway. So I am attempting to simplify this by deleting all existing PSE and creating a new one (and checking the box for Automatically assign new devices). We'll then use PO number as criteria for Smart Computer Groups or just manually assign each device to a Static Computer Group. My question is: what effect will it have on existing enrolled devices? If any of the existing devices need to be re-provisioned (e.g. a Macbook being assigned from a leaving staff to new staff), do we have to do anything special? Thanks for any advice on the matter.