Hello everyone,When we enroll our Macs we sign in with premade account from pre-stage settings for the remote management and after that we set upp the user account for the computer. In this case the Inventory > User and Location is blank.Does anyone know any good way/script on how to fetch the local username and have it placed in the filed for username in Inventory > User and location?In about 14 days we shell enroll 550 new Macs to students. We're not too interested in updating the user information manually. 😆

Does anyone have any experience utilizing Jamf Connect login LAPS functionality? https://travellingtechguy.blog/jamf-connect-and-laps/ Following this link there is specific plist config info called out for LAPS control built into Jamf Connect, our intended use case would be finding something that can manage our local admin passwords without being AD bound and securely using the FV2 escrow key seems like an interesting idea.  Any thoughts on best practice?

Hi All! Any recommendations you might have on this would be appreciated. Disclaimer, I haven't pulled out all the stops on testing this, just looking to see if anyone has a quick solution.Is there a way to set QuickTime as the default video playback application on client devices via Jamf, through Configuration Profiles or Policy? Or really any method.I have tried using the custom App payload in the configuration profiles, but I am a noob when it comes to json and plists. I can't even find the proper .plist or preference .plist that is setting Apple TV as the default. Along those lines, any resources on how to utilize that payload would be fantastic :) Any ideas are appreciated! Thank You!

Ever since our Jamfcloud instance was updated to 10.40.1 over the weekend I have seen this error in every Mac enrollment for a couple of our config profiles (Cisco AnyConnect and Crowdstrike Falcon): The same team ID may not appear in both AllowedTeamIdentifiers and AllowedSystemExtensions. We have made zero changes to the profiles in question, so I can only assume the reason we're seeing it now is because of a change in Jamf Pro that now reports this condition where before it would not.  I looked it up and it appears that according to Apple's developer documentation, this is a true error. The question I have is how do we fix it? Which would be the better fix? Removing it from AllowedTeamIdentifiers or removing it from AllowedSystemExtensions?

How can I get the list of apps installed with Brew? I could not pull this list with Jamf Pro via script. Because the brew list command should work in the corresponding profile. However, I guess Jamf Pro doesn't run it in the relevant profile. Is there a practical method? I used the following commands;brew list --caskbrew list

Hello, I was looking for where to open a ticket for this issue but did not find where to do that.Maybe some of you will have an idea about what I am doing wrong. We have Jamf Pro cloud version and I have never deployed a pkg and made it run on a user’s machine. The user is one of my bosses and he gave me a link to a DuoDeviceHealth pkg which I was able to download from Duo. I then set a cloud distribution point and uploaded the pkg. In Computer Management – Scripts I pasted the script he supplied.sudo mkdir -p "/Library/Application Support/Duo/Duo Device Health"sudo touch "/Library/Application Support/Duo/Duo Device Health/NoAutoLaunchAfterInstall"sudo /usr/sbin/installer -pkg /path/to/installer/DuoDeviceHealth-3.0.0.0.pkg -target / (This path location is where the PKG file was downloaded on my laptop)sudo rm "/Library/Application Support/Duo/Duo Device Health/NoAutoLaunchAfterInstall"I made a policy named DuoDeviceHealth and enabled it and the trigger is Recurring Check inIn Packages

Hi All,Have anyone tried to install ChatGPT on  MDM manage devices(I'm using JAMF pro )?When I tap on the installed app I get an error  as below with two options VIew in store or OKUnable to Install "ChatGPT"you must purchase this app to install it.      View in App Store               OKI have pushed the app to selected devices it is available in the Self-service and shows as "Reinstall"This is urgent have to configure this before WednesdayHelp will be much appreciate Thanks

After starting with my company in June, I went through our Jamf Pro server to look things over. I noticed several Macs that have either failed MDM commands such as profiles that attempted to install, or a long list of pending commands. They are still checking in with Jamf Pro. I need to create a list of these systems but I haven't figured out how to do that. I don't know what criteria to use to track them all down. Has anyone ever had to do this? If so, what was your solution?

I'm trying to apply the same wallpaper image to multiple monitorsI set up the CP / Restriction / Functionality / Lock desktop picture to /Users/Shared/Wallpaper/Wallpaper.jpg It sets the wallpaper on the primary monitor but does not set on the secondary one.I've tried with a script also to test  #!/bin/zsh wallpaper_path=/Users/Share/Wallpaper/Wallpaper.jpg osascript -e "tell application \\"Finder\\" to set desktop picture to POSIX file \\"$wallpaper_path\\""  Am I missing something or is this an Apple "feature"?

Hello experts. I'm new to jamf and this community so apologies if this has been answered already as I haven't been able to find a recent solution response. I have a policy that enables users to run a script and management wants to know who has run it via self-service.  So far, I've been able to get this computer-by-computer, but is there a better way?   My solution uses: Finds a subset of computer history data by ID (jamf.com) with the subset set to PolicyLogs.  With thousands of computers scoped for the policy, that's a large number of API calls to make.   Ideally I would use Finds a subset of data for a policy (jamf.com); however, there is no subset for PolicyLogs.   Any advice or solutions you can offer? 

So I'm using a policy with a trigger of Login so it's basically a LaunchAgent ... does the command get stored somewhere on the client so I can verify that it made it there? Where do the output and errors go ... jamf.log or do I need the script to redirect everything?

Hello everyone, I am try to create a smart group that would allow me to identify computers that have company portal on them. It seems like in Ventura, Jamf Pro is not reading installed Mac Apps from the server.My Situation:I have deployed company portal as well as MS Remote Desktop from Jamf Pro via Mac Apps. This is going to 2 machines, Ventura and Monterey. On my mac with Monterey, I can see the apps showing as Company Portal.app and Microsoft Remote Desktop.app. However on the Ventura mac neither of these are showing in the Inventory. I can see them on the mac though. I have added the ~/Applications/ folder to the inventory search to no avail. Anyone have any thoughts?

The networking team for our district is trying to move all of our mobile devices onto a MAC Address whitelisted Wifi network. Is there a way I can export in bulk specific information (like the MAC address) from the Hardware page of each iPad?

Hi Wondering if anyone has fixed this solution. We are getting a growing number of machines getting the following error while using 4.9 / 4.10 AnyConnect on Big Sur. Settings for the Config Profile are below, its scoped only to M1 ComputersCould anyone suggest any problems that i might have? Thanks! 

Hi Guysare we able to add another authenticator app to jamf if the user does not have access to the internet to login okta to be able to use local to login 

I'm currently working on a workflow to resolve some missing Secure Tokens for users at a client site. Because I don't want to test on production machines, I've got a machine here that I've enrolled in my own Jamf tenant to test against. My issue? I can't REMOVE Secure Token from one of the test users on this machine so I can test the script.FV is not enabled, the admin user has Secure Token. I run the following command in CLI and get an error:sudo sysadminctl -adminUser <username> -adminPassword <password> -secureTokenOff <username> -password <user-password>    Result: "Operation is not permitted without secure token unlock"(I also played around with the order of things in the command, no difference)My GoogleFu is failing me because everything I'm finding relates to ADDING Secure Token to a user who does not already have it.  Can anyone shed some light on this for me? Thanks 

Hello All Playing around with the Jamf App Catalog feature.  Wondering when an app updates if the users is booted out of the App or does the install cache install or ?I have auto updates installed on many of the listed apps, so trying to test can be challenging.P.

I'm new to Jamf, but I've been working on configuring the Okta side of things. I've managed to get Jamf Connect integrated with Okta, but I'm encountering an issue during testing. The system prompts for login twice - first for Disk Encryption, then for Okta. Is there a way to streamline the process so that only the Okta login is required to access the Mac, without involving the local account that Jamf Connect set up? Your guidance would be much appreciated.

Hello everyoneHaving issues with Content Caching for the past few weeks and driving me crazy.We have a M2 Mac mini with the IP address 10.10.10.10 ( not real IP ).The end-points are on the same network.I've created a Configuration Profile for the Cache System and the end-points with the followingConfiguration Profile Settings.I have read https://support.apple.com/en-ca/guide/deployment/depde72e125f/web and https://support.apple.com/en-ca/guide/mac-help/mchl3b6c3720/mac and I can't seem to get it workingDo I need a DNS TXT record? I didn't put one in since I set the My Local Networks to use one public IP addressWhat am I doing wrong?Here is my Configurations settings 

Hi everyone,Hope someone can help me with the below issues I am having;I am trying to install a custom app which I got from a vendor in a .dmg format.  Within the dmg there is a .pkg file and then two script files called install.tool and uninstall.toolAs per guidance by the vendor I need to run a command to call the "install.tool" via a command and then add a parameter to point it to a server which we have running in our environment.  This all needs to happen before the actual installation takes place i.e. while the .dmg file is mounted and I think this is where I am going wrong or having difficulty to run the above script via command before the actual installation takes place.I have come across a few threads on here to use composer which I have done but I have not had any particular success deploying it via JamfPro. It seems weird, as if I run the .pkg file (which I got from composer) on the test I have Mac, the program installs fine but not via JamfProSorry my Mac

Hello very new to Jamf. Have set up in prestage enrollment a local admin account (with admin permissions) and was hoping to use that local account as the one required to make any changes.Also, have the box checked in the policy to require admin when installing/deleting apps However - when the macs go through enrollment and first user is prompted to create an account, it is set up as administrator. It can uninstall apps, send things to trash (after using creds) etc. I want this to be a standard account What am I missing?

Hi everyone, I just finished setting up Jamf Connect with my Jumpstart call and afterwards I discovered my users have to log in twice. We are using Okta as our SSO and that is setup and connected. But when I restarted the computer, I get the Mac login screen with my user name and my password works and I immediately have to login in with my SSO credentials again. Is this normal or can I get one of these screens eliminated? 

I am writing a quick script to delete a file from our users computers. We have Jamf Connect on all computers currently.I'm using this script to get the logged in user:loggedInUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' )This used to work for us but now that we are on Jamf Connect it just shows the IDP user, not the local user. I need the local user in the variable because that is actually where Documents are stored for the user.Any way to extract the actual Local account that the user is logged into and avoid the IDP user?

We've replaced our lab computers with M2 MacMinis running Ventura and the package I set up to install the desktop background for the old computers is installing, but the config policy is not applying the image.  Do I need to replace the spaces with %20?  I didn't before.

When you change a config profile in Jamf and tell it to distribute to all what is the process that happens on the MDM side? Does it send a command to remove the original profile and then download and install the changed profile? or does it download the changed profile first, remove the original profile and install the changed profile? I am asking because the MDM profile I am changing effects the network settings (VPN) and most likely the network connection will be disrupted. If the changed profile is not first downloaded before the original is removed then I cant see how it will get the changed profile.