Ever since our Jamfcloud instance was updated to 10.40.1 over the weekend I have seen this error in every Mac enrollment for a couple of our config profiles (Cisco AnyConnect and Crowdstrike Falcon): The same team ID may not appear in both AllowedTeamIdentifiers and AllowedSystemExtensions. We have made zero changes to the profiles in question, so I can only assume the reason we're seeing it now is because of a change in Jamf Pro that now reports this condition where before it would not.  I looked it up and it appears that according to Apple's developer documentation, this is a true error. The question I have is how do we fix it? Which would be the better fix? Removing it from AllowedTeamIdentifiers or removing it from AllowedSystemExtensions?

How can I get the list of apps installed with Brew? I could not pull this list with Jamf Pro via script. Because the brew list command should work in the corresponding profile. However, I guess Jamf Pro doesn't run it in the relevant profile. Is there a practical method? I used the following commands;brew list --caskbrew list

Hello, I was looking for where to open a ticket for this issue but did not find where to do that.Maybe some of you will have an idea about what I am doing wrong. We have Jamf Pro cloud version and I have never deployed a pkg and made it run on a user’s machine. The user is one of my bosses and he gave me a link to a DuoDeviceHealth pkg which I was able to download from Duo. I then set a cloud distribution point and uploaded the pkg. In Computer Management – Scripts I pasted the script he supplied.sudo mkdir -p "/Library/Application Support/Duo/Duo Device Health"sudo touch "/Library/Application Support/Duo/Duo Device Health/NoAutoLaunchAfterInstall"sudo /usr/sbin/installer -pkg /path/to/installer/DuoDeviceHealth-3.0.0.0.pkg -target / (This path location is where the PKG file was downloaded on my laptop)sudo rm "/Library/Application Support/Duo/Duo Device Health/NoAutoLaunchAfterInstall"I made a policy named DuoDeviceHealth and enabled it and the trigger is Recurring Check inIn Packages

Hi All,Have anyone tried to install ChatGPT on  MDM manage devices(I'm using JAMF pro )?When I tap on the installed app I get an error  as below with two options VIew in store or OKUnable to Install "ChatGPT"you must purchase this app to install it.      View in App Store               OKI have pushed the app to selected devices it is available in the Self-service and shows as "Reinstall"This is urgent have to configure this before WednesdayHelp will be much appreciate Thanks

After starting with my company in June, I went through our Jamf Pro server to look things over. I noticed several Macs that have either failed MDM commands such as profiles that attempted to install, or a long list of pending commands. They are still checking in with Jamf Pro. I need to create a list of these systems but I haven't figured out how to do that. I don't know what criteria to use to track them all down. Has anyone ever had to do this? If so, what was your solution?

I'm trying to apply the same wallpaper image to multiple monitorsI set up the CP / Restriction / Functionality / Lock desktop picture to /Users/Shared/Wallpaper/Wallpaper.jpg It sets the wallpaper on the primary monitor but does not set on the secondary one.I've tried with a script also to test  #!/bin/zsh wallpaper_path=/Users/Share/Wallpaper/Wallpaper.jpg osascript -e "tell application \\"Finder\\" to set desktop picture to POSIX file \\"$wallpaper_path\\""  Am I missing something or is this an Apple "feature"?

Hello experts. I'm new to jamf and this community so apologies if this has been answered already as I haven't been able to find a recent solution response. I have a policy that enables users to run a script and management wants to know who has run it via self-service.  So far, I've been able to get this computer-by-computer, but is there a better way?   My solution uses: Finds a subset of computer history data by ID (jamf.com) with the subset set to PolicyLogs.  With thousands of computers scoped for the policy, that's a large number of API calls to make.   Ideally I would use Finds a subset of data for a policy (jamf.com); however, there is no subset for PolicyLogs.   Any advice or solutions you can offer? 

So I'm using a policy with a trigger of Login so it's basically a LaunchAgent ... does the command get stored somewhere on the client so I can verify that it made it there? Where do the output and errors go ... jamf.log or do I need the script to redirect everything?

Hello everyone, I am try to create a smart group that would allow me to identify computers that have company portal on them. It seems like in Ventura, Jamf Pro is not reading installed Mac Apps from the server.My Situation:I have deployed company portal as well as MS Remote Desktop from Jamf Pro via Mac Apps. This is going to 2 machines, Ventura and Monterey. On my mac with Monterey, I can see the apps showing as Company Portal.app and Microsoft Remote Desktop.app. However on the Ventura mac neither of these are showing in the Inventory. I can see them on the mac though. I have added the ~/Applications/ folder to the inventory search to no avail. Anyone have any thoughts?

The networking team for our district is trying to move all of our mobile devices onto a MAC Address whitelisted Wifi network. Is there a way I can export in bulk specific information (like the MAC address) from the Hardware page of each iPad?

Hi Wondering if anyone has fixed this solution. We are getting a growing number of machines getting the following error while using 4.9 / 4.10 AnyConnect on Big Sur. Settings for the Config Profile are below, its scoped only to M1 ComputersCould anyone suggest any problems that i might have? Thanks! 

Hi Guysare we able to add another authenticator app to jamf if the user does not have access to the internet to login okta to be able to use local to login 

I'm currently working on a workflow to resolve some missing Secure Tokens for users at a client site. Because I don't want to test on production machines, I've got a machine here that I've enrolled in my own Jamf tenant to test against. My issue? I can't REMOVE Secure Token from one of the test users on this machine so I can test the script.FV is not enabled, the admin user has Secure Token. I run the following command in CLI and get an error:sudo sysadminctl -adminUser <username> -adminPassword <password> -secureTokenOff <username> -password <user-password>    Result: "Operation is not permitted without secure token unlock"(I also played around with the order of things in the command, no difference)My GoogleFu is failing me because everything I'm finding relates to ADDING Secure Token to a user who does not already have it.  Can anyone shed some light on this for me? Thanks 

Hello All Playing around with the Jamf App Catalog feature.  Wondering when an app updates if the users is booted out of the App or does the install cache install or ?I have auto updates installed on many of the listed apps, so trying to test can be challenging.P.

I'm new to Jamf, but I've been working on configuring the Okta side of things. I've managed to get Jamf Connect integrated with Okta, but I'm encountering an issue during testing. The system prompts for login twice - first for Disk Encryption, then for Okta. Is there a way to streamline the process so that only the Okta login is required to access the Mac, without involving the local account that Jamf Connect set up? Your guidance would be much appreciated.

Hello everyoneHaving issues with Content Caching for the past few weeks and driving me crazy.We have a M2 Mac mini with the IP address 10.10.10.10 ( not real IP ).The end-points are on the same network.I've created a Configuration Profile for the Cache System and the end-points with the followingConfiguration Profile Settings.I have read https://support.apple.com/en-ca/guide/deployment/depde72e125f/web and https://support.apple.com/en-ca/guide/mac-help/mchl3b6c3720/mac and I can't seem to get it workingDo I need a DNS TXT record? I didn't put one in since I set the My Local Networks to use one public IP addressWhat am I doing wrong?Here is my Configurations settings 

Hi everyone,Hope someone can help me with the below issues I am having;I am trying to install a custom app which I got from a vendor in a .dmg format.  Within the dmg there is a .pkg file and then two script files called install.tool and uninstall.toolAs per guidance by the vendor I need to run a command to call the "install.tool" via a command and then add a parameter to point it to a server which we have running in our environment.  This all needs to happen before the actual installation takes place i.e. while the .dmg file is mounted and I think this is where I am going wrong or having difficulty to run the above script via command before the actual installation takes place.I have come across a few threads on here to use composer which I have done but I have not had any particular success deploying it via JamfPro. It seems weird, as if I run the .pkg file (which I got from composer) on the test I have Mac, the program installs fine but not via JamfProSorry my Mac

Hello very new to Jamf. Have set up in prestage enrollment a local admin account (with admin permissions) and was hoping to use that local account as the one required to make any changes.Also, have the box checked in the policy to require admin when installing/deleting apps However - when the macs go through enrollment and first user is prompted to create an account, it is set up as administrator. It can uninstall apps, send things to trash (after using creds) etc. I want this to be a standard account What am I missing?

Hi everyone, I just finished setting up Jamf Connect with my Jumpstart call and afterwards I discovered my users have to log in twice. We are using Okta as our SSO and that is setup and connected. But when I restarted the computer, I get the Mac login screen with my user name and my password works and I immediately have to login in with my SSO credentials again. Is this normal or can I get one of these screens eliminated? 

I am writing a quick script to delete a file from our users computers. We have Jamf Connect on all computers currently.I'm using this script to get the logged in user:loggedInUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' )This used to work for us but now that we are on Jamf Connect it just shows the IDP user, not the local user. I need the local user in the variable because that is actually where Documents are stored for the user.Any way to extract the actual Local account that the user is logged into and avoid the IDP user?

We've replaced our lab computers with M2 MacMinis running Ventura and the package I set up to install the desktop background for the old computers is installing, but the config policy is not applying the image.  Do I need to replace the spaces with %20?  I didn't before.

When you change a config profile in Jamf and tell it to distribute to all what is the process that happens on the MDM side? Does it send a command to remove the original profile and then download and install the changed profile? or does it download the changed profile first, remove the original profile and install the changed profile? I am asking because the MDM profile I am changing effects the network settings (VPN) and most likely the network connection will be disrupted. If the changed profile is not first downloaded before the original is removed then I cant see how it will get the changed profile.

Hi all,We're encountering a random issue with the Jamf Connect login window hanging and preventing any interaction with the computer. The login window is gray, the spinning beachball spins, and we can't click on anything.To get around this we have to force shutdown the Macbook by holding the power button, then after starting up again, quickly click Local Login before the Jamf Connect login window can try to load.Any thoughts? I can't yet find anything in common between the users its happening to, other than that they've brought their Macbooks home, which should be fine and works for most users. Jamf Connect version 2.19 Build 4482 using Google LDAP2020 Macbok Air M1 on Monterey  

I'm trying to follow the documentation for deploying SwiftDefaultApps in order to make Outlook the Default Mail Reader and Excel the default app for CSV files for our production fleet of over 300 MacBook Air M1's.I'm using GitHub - Lord-Kamina/SwiftDefaultApps: Replacement for RCDefaultApps, written in Swift. for material.  I am also referencing this article for deploying a script via policy Configuring a Mac’s Default Apps for Different File Types | apizz (wordpress.com). Here's my dumbed down verison of the script from wordpress:#!/bin/bash# Set default apps for usersSWDA="/usr/local/bin/swda"MAIL="/Applications/Microsoft Outlook.app"SHEET="/Applications/Microsoft Excel.app"### MAIL #### Default mail client$SWDA setHandler --app "$MAIL" --mail# mailto: links$SWDA setHandler --app "$MAIL" --URL mailto# message$SWDA setHandler --app "$MAIL" --URL message# email$SWDA setHandler --app "$MAIL" --UTI com.apple.mail.email### FILE TYPES #### .csv$SWDA setHandler --ap

So I open the network prefs, select the wifi interface go to the little cog wheel at the bottom and select "Make Service Inactive". Can somebody please tell me how to do this via the Terminal, or at least a script that I can push out via jamf or something? Oh, it needs to work on Mojave and higher macOS...