Hello, Has anyone been able to run Microsoft Intune Integration on Macbooks with Intel chips and Ventura OS?We tried to run the policy on Macbooks with Intel chips and Ventura OS but the integration doesn't work and the device will never get registered in AAD.We also tried with M1 chips, but there is no issue, on macbook with Monterey OS and Intel chip, the integration will work. The integration will stop at this step on intel devices with Ventura: We already tried with different browsers, deleting the profiles, using webview and reenrolling the device and everything else that could be found on the internet. Has anyone been able to make this integration between Jamf and Intune with this scenario? Thanks,Traian   

Hi I am looking for a script to replace the Username in the inventory section with the Extension Attribute of "Last User Logged In".  In addition to add "@companyX.com" as a suffix to the user name.  This would help me greatly in getting Asset inventory for my company via Azure.  I am getting the Last User Logged In by Extension Attribute.  So if the "Last User Logged In" is john.doe , take john.doe and add @companyX.com and fill the Username in the inventory section as john.doe@companyX.com.  This would then poll Azure and I would get all the data I need.  Still looking for a way to not manually update the username field when deploying a Mac to another user.  My scripting skills are limited, apologies. Thanks,JT

What is the theoretical maximum limit of a Jamf Pro Cloud instance? Could the system support say, 50,000 devices across 12 locations? Combination of laptops and iPads. Edit: This is to settle a debate and not for practical application. 

HiI've been using this function to decrypt api account password in one of my scripts, and i can see it failing to decrypt in some machines. Different versions of macOS, i really can't see a pattern. Anyone seen something similar?function decrypt_string() {apipass=$(echo "$encrypted_string" | openssl enc -aes-256-cbc -d -salt -base64 -A -S "$salt" -k "$passphrase" )} 

Hi,When I issued a sudo pmset repeat wakeorpoweron MTWRFSU 08:00:00when I check it will show the correct.Repeating power events:  wakepoweron at 8:00AM weekdays onlyWhen I issue command sudo pmset repeat shutdown MTWRFSU 18:00:00 it shows only but missing the wakepoweron. Am I missing anything?Repeating power events:  wakepoweron at 8:00AM weekdays only

<Disclaimer> New to Jamf here. I am finding after I enroll the devices into my inventory that I need to go into the profile that it is assigned in the scope tab, I have to click the save button for it to install. Save thing with pushing Apps to devices. I have the Apps in the device group but until I go into the App and save it, it just says pending.. Any ideas?

Does anyone have an example of pushing device specific configuration to a machine?Scenario: I'd like to populate a file on every laptop device that contains the content of certain extension attributes that are centrally defined and keep that regularly up to date when I make changes in the admin portal.Is there any means to do this? Everything I am seeing all seems to be geared around "shared" or "common" policies that are associated to machines/groups. I'm not looking to create 100 different policies each associated to one machine. I'm looking to populate based on actual attributes set on the device itself in the portal. Another way of looking at this - is it possible to have a policy that has "templated content" in it where the template values come from EA's set on the device?

There was an issue with 10.48.1 so there was no Windows installer.Curious if anyone updated to 10.48.2 yet.Jamf Pro 10.48.2 Now Available

I am a new user to MUT, and Im trying to update an Extension Attribute as a test. I'm in our sandbox environment. When I run MUT, nothing updates.I've pulled the logs, and every device I'm trying to update says, "PUT failed. 401." I've figured out through my own research that 401 = unauthorized. I've double-checked I have full admin rights with the account I'm using. I'm now wondering if it's how I'm connecting to the server.Has anyone else seen this issue? How can I resolve this?

We are currently looking to implement some preferences to Outlook.We have configurations to block users from adding personal emails but is there a way to report on how many users have personal emails added and how to remove them  Thanks  

Hey JAMF Nation Community!I was exploring with my team and wanted to see if there's a way to block users from adding a personal O365 account to their Outlook via a plist. I've checked around JAMF Nation and online and haven't seen anyone bring this up. Just wanted to see if anyone has implemented a solution in their own environments? Thanks!

Hi :) Has anyone else found themselves looking for a smart group you know you created?Every now and again we will create a new smart group and it could be anywhere from a few hours to a couple of days and suddenly it is nowhere to be found! It happened again this morning; I created a smart device group and within an hour it was gone.Just me or goes the Jamf gremlin not like your smart groups either? 🙊 Thanks. 

Does anyone successes to build the VM in Apple Silicon chip devices using VM Ware fusion 13.0,2, If so please guide me to create it successfully.

Hi everybody,Hope everyone is having a great Saturday.Quick question for all.. I have a remote user that keeps entering the correct password (according to her) on her Mac, but it doesn't work and would like to reset it at this point. However, the credentials for the admin account seem to not work either for some reason. Is there a way in Passcode Compliance in JAMF pro to reset the password on a Mac or disable it on her machine so she can enter the last PW? Thanks everyone.

We are experiencing an odd issue in Jamf where it is reporting both 13.5 and 13.5.0. I have confirmed that 13.5.0 is not a beta version since the build number is the same across these 2 versions. I have also already tested on a Mac that is reporting in Jamf as 13.5.0 that sw_vers -productversion displays 13.5.Has anyone else been experiencing this issue?

I am in the process of writing a new "make me an admin" script. I know there are others that are available but I wanted to do this myself. Yesterday, I got a version of the script working. It promotes the user to admin, then launches Jamf Helper with a countdown. When the countdown is finished, it reverts the user back to a standard account. That part works perfectly. The next step is to add a function to check if the user is already an admin user. That's where I'm having trouble. If I run this part of the script through CodeRunner, it displays the Jamf Helper with a "Done" button. Obviously, the variables defined are working. My Jamf Helper syntax is correct. The if statement that contains the Jamf Helper configuration works. What will be added later is an "else" to elevate the standard user to admin, then launch Jamf Helper with a countdown. When I have these two steps working, I will go back and add in the ability to demote any additional admin accounts that the user may have added

Hi everyone,I created a policy to install Google Chrome using the Installomator script and accidentally scoped it to all computers instead of just newly enrolled devices. Some of my staff report Chrome installing fine and no other issues. Others are saying they get the prompt that Chrome is installing, it closes Chrome, and then says it updated... 30 minutes later, they get the prompt again and it closes Chrome, etc.Is there a way to kill the process so it stops trying to install Chrome?Let me know if you need any information from the script I am using or the policy I created, etc.  

Hi! We are looking for a way to enable our user to enroll new macs onsite with our corporate wifi.WiFi is a SSID Hidden WPA2-Enterprise, so users have to use their AD credentials to connect.During Zero-Touch-Setup when the mac setup is prompting the user to connect to a wifi, majority of them are not able to connect a hidden ssid wifi with ad login on top, macOS prompts for the password which user have to leave blank, press enter and then gets asked for their AD Credentials.Or we have issues with the wifi after Initial deployment when the user made it to the wifi and the macs are terminating the connection right before Jamf Connect. How do you guys handle this? A separate "Setup Wifi" and pushing the right corporate wifi after setup with an config profile? Seems not ideal, so we are open for inspiration :) 

Hi I want to add an App but it is not listed in the Jamf list. Is there a way to do this? it about this application https://www.papersapp.com/Thanks 

I have a script I am using for creating website shortcuts on the desktop. My manager doesn't like that they all end in .webloc and asked if I can hide the extension, which can be done in the Finder. The only way I found to do this is using AppleScript command set extension hidden. I have no problem running the following script as myself (removing the sudo -u $logged_in_user). It creates the shortcut and hides the webloc extension. But no matter what I cannot figure out how to get this to work when running the script as root. Since the script will run from JAMF it will always run as root. Any help with this would be appreciated.    #!/bin/zsh logged_in_user=$(/usr/sbin/scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ {print $3}') webloc_filename="Apple" webloc_address="https://www.apple.com/" shortcutPath="/Users/${logged_in_user}/Desktop/${webloc_filename}.webloc" webloc_data='<?xml version="1.0" encoding="UTF-8"?

Hi everyone,Combing over articles, including this one: http://www.cainehorr.com/jamf-workflow-for-tenable-nessus-agent/.Is anyone using an extension attribute that tells you what host the Nessus Agent is currently linked to? This way we can see if it's incorrectly linked to the wrong host in the EA, then send a policy to re-link the Macs to the right host.Currently using the EAs below ok:• Nessus Agent Installation Status• Nessus Agent Service Status• Nessus Agent versionThank you!

How would I remove a user associated to a laptop? They just received a new laptop, and I'd like to remove them from the current laptop so It can be redeployed. Additionally, whenever I try to make changes to the laptop (like renaming it) I receive a prompt stating the user will be added to a group or other changes could be made to the user.  

Our cloud asset was recently upgraded to 10.27There are new Patch Policies available and a handful of "Legacy" and "Deprecated" Software Titles. I'm seeing EA errors for the Patch Management of Microsoft AutoUpdate and for Mozilla Firefox. I'm no EA wizard, but I don't see anything obvious in the EA provided by the Patch Management. Anyone else seeing this?

When migrating from jamf on-prem to cloud, devices are first unenrolled from on-prem.  Which means they loose every Configuration Profile for system extensions, PPPC, 802.1X etc.  Users get the notification prompt to enroll into jamf cloud and if they click through that it does migrate them successfully.  But is anyone aware of a process to make this smoother so users don't see dozens of other notifications/prompts while they're in the "limbo" state? I saw Rocketman Tech had a workflow using DEPNotify that made things a bit smoother.  It did look like it was able to hide all of those notifications (at least during the demo https://youtu.be/ZTbv5ZvI3pI).  But on current versions of macOS there isn't a way to stage profiles that remain after unenrollment as far as i know.  So the only option i see to help with all the prompts would be to use AppleScript to close out the undesired notifications.  I don't know how well that would work since that

Hi all,I’m having an issue trying to get a machine to register to my intune. This issue is only happening to one computer and all of the others are working fine which leads me to believe that the issue is within Intune. Please kindly share your thoughts on this issue on where to check in intune or Jamf. (See screenshot) Thanks.