Ex.A user brings their device (BYOD) -- They log into the MacBook that's under our JAMF control, and it automatically adjusts settings they may have set for things. Semi-new JAMF user here.

Hey, I am searching for a method how to use patch management with Cisco Anyconnect VPN. Since it is not available in the standard jamf catalogue. I know you can create your own patches with the Title editor.But therefore I would either need an external source or a json file with the settings since I never created this before.If someone maybe has some information or hints I would really appreciate that

If I write a script using an if statement, and use "then exit 0", what would I enter after "else" to make the script continue running if the result of the if statement is a different value? I thought I knew how to do this but I can't think of it. 

- 2020 MBP 13" 4x Thunderbolt ports- Active Directory bound- Enterprise Connect for password sync- FileVault 2 configured (via mobileconfig profile)1. User was prompted to update AD password2. User set new password with Enterprise Connect, as instructed.3. FileVault unlock screen does not recognize new password, only the recovery key (escrowed in Jamf), and the user has immediately forgotten their old password, so I can't test if that would still have worked.4. Thinking this is some kind of AD/Keychain disconnect, I nuke the user's keychain.5. This doesn't resolve the issue, so I unbind & rebind to AD.6. This doesn't resolve the issue, so I create an exception and remove the FV mobileconfig profile, and manually turn off/decrypt FileVault, reboot, log in, remove the exception in Jamf Pro and re-enable FV. A new recovery key is escrowed.7. User's current password still doesn't unlock the volume on reboot. New recovery key works.8. I exchange the laptop to get the user up to speed, a

I noticed Adobe CC no longer being readily available in Launchpad for our end users after re-imaging to Ventura. Adobe says it's an Apple issue, which makes sense since that is the only thing that has changed, and was my original guess. I can manually create a new shortcut based off the actual application deep in the Utilities folder, but that's not a feasible solution for several hundreds of devices. I've triple checked to confirm Adobe installs correctly and with the most updated version, but Launchpad doesn't see the Adobe CC shortcut that is made in the "Adobe Creative Cloud" folder (also contains the uninstaller shortcut) at time of installation. Instead simply using the Launchpad, it has to be Launched from inside the Applications folder. Our users will give us some blow back at us for not having it exactly the same as last year and for it being "more difficult" for the students.Anyone else experience this and come up with a solution, or have a script to create a shortcut in

I am working on an extension attribute to check if Aternity is installed, running, and its version. I have to write it this way to take into account the two possible install paths for the agent while we roll out the newer version. I keep running into an error "CFBundleShortVersionString", Does Not Exist". This is being generated from the version check in my script. I have visually confirmed that "CFBundleShortVersionString" DOES EXIST!!! I can run the command in Terminal: version=$(/usr/libexec/PlistBuddy -c 'Print :CFBundleShortVersionString' /Applications/AternityAgent.app/Contents/Info.plist)When I type echo $version, I get the correct result.Only when I run the whole script in either Terminal or CodeRunner does it give me that error. Here's my EA. What am I doing wrong? #!/bin/zsh # Is Aternity installed? Is it the older version or the newer version? agentOld=(/Library/Aternity/Agent) agentNew=(/Applications/AternityAgent.app) if [[ -d $agentOld ]] || [[ -d $agentNew ]

Is there a way to remove or trigger the 'forget this network' command on a certain SSID with a policy? I deleted and recreated one of my configuration profiles for a wireless network thinking it wouldn't be removed from the current devices, but it was. Until the profile is installed again on the iPads I have been connecting them to a different SSID so I am hoping to be able to remove this via JSS after the profile is installed.

Can anyone help me out in figuring out how to Cisco Umbrella Root Certificate via JAMF.  The link from Cisco only shows how to deploy the certificate on a single machine.Install the Cisco Umbrella Root CertificateAny help would be really helpful. Thanks

Is it possible to add some basic logic to the Jamf Notify script? In my scenario, I'm using it as a first boot installation of a few basic apps and one of those is Zoom. Infamously Zoom doesn't have a universal installer so depending on the architecture it'll need one of two saved packages installed from Jamf Pro.Is it possible to read the processor type in the script and add an if/else section to install the correct pkg? I had messed around with it some but it was failing and I wasn't sure why, but it was my first time testing with the Notify Screen so I wasn't sure what I was doing. Thanks everyone!

Hey Community, Has anybody put in place a script that is used in a policy so it can display computer info and this through Jam's self service?  Any input is much appreciated! Thanks. 

Hello, I searched Jamf Nation for a similar issue and came up short, if I missed a post that would provide info please let me know.  My networking lead has brought it to my attention that a 3rd party company that does occasional network scans on our network to keep us compliant in things like, number of O365 licenses, Oracle licenses, etc has spotted an issue with our Mac's.  At first they mentioned there was a feature in Jamf that was simply a check box that would allow SSH commands to be let through, which are blocked by default in Jamf.  But the tech claims the console has changed a bit since he last worked with Jamf and isn't sure where to go, I Googled it, ran it through GPT4, and can't seem to find an answer.  Is there a simple way to open Port22 or SSH for network scanning to be performed on our Mac's that are currently enrolled in Jamf?Thanks a ton!Kerry

This only affecting one user, but thought I would see if anybody has seen this. The user is 16.74 and has been for over a month and last week he started having an issue after creating a new email, his signature would be really small to the left and when he would open an email and hit reply, the body of the email does the same thing.  

Hi, we are facing a problem when we install or upgrade the BeyondTrust PMC agent, the splash window (the JamfConnect login window) is not loading after the restart. is there anyone that experiences this issue? also, we tried to run this command after the installation - "/usr/local/bin/authchanger -reset -jamfconnect"but it's not working every time.  

Hello everyone - I have created an interactive Apple Script that prompts a user to input their username and it works w/o issue in terminal, but when I have it in Self Service the GUI doesn't come up unless I hit cancel, but it still works which is a plus, but I rather it work like it should and not be a happy little accident. Also this same script when setting it to run after enrollment completes I get an error of "Script result: 95:158: execution error: No user interaction allowed. (-1713)" Which I believe is because the script is being ran as root? Here is the script in its entirety. I appreciate you all.#!/bin/bash# Prompt the user to enter the new computer nameIFS= read -r -p "Enter the new computer name using department abbreviation and asset tag (Ex:DEPT-123456): " newComputerName# Execute the AppleScript using osascriptosascript <<-EOF-- Prompt the user to enter the new computer nameset newComputerName to text returned of (display dialog "Enter the new computer n

Hi,I'm seeing an issue with NVivo 20.7.0 and even the previous version that I packaged - 20.6.2. The issue is that when I try and start NVivo it says:NVivo needs permission to access data on your computer before it can run.Click the button below to open your computers Security & Privacy preferences, give NVivo Full Disk Access, then restart NVivo- I use a Configuration Profile to give NVivo full disk access.- I only get this pop-up on M1 machines - not Intel ones- For Intel machines, I've tested on Mac OS 11 and 12 - no issue. On Apple Silicon (M1) computers I've tested with Mac OS 12 and get the pop up.- I tried unscoping the problem machines from the Configuration Profile and adding NVivo manually for Full Disk Access in System Preferences > Security & Privacey > Full Disk Access but no change and can't get NVivo to start- I read this post https://forums.nvivobyqsr.com/topic/10209-i-have-given-nvivo-full-disk-access-but-it-still-will-not-open/ in the QSR User Forum and

Is anyone else having issues loading the Azure AD Integration docs link?  https://learn.jamf.com/bundle/jamf-pro-documentation-current/page/Azure_AD_Integration.html. Whenever I try and click on link to it, i get a little backwards progress bar that says "Network Error".Also anyone that is using Azure AD under the Cloud Identity Provider, are you able to access create tokens for API access via command line tools or the GUI on server.com/api?

I have a simple dock addition policy, it completed successfully but does not show the self service app on the dock afterward. the after policy user interaction pops up as well I tried killall Dock as well and nothing changed I added the Dock item via Jamf Admin and then pointed to it for the Dock Items attribute of the policy

I am currently trying to test the new features of JC with the 2.25 release and Okta OIDC.  We have successfully been using the "old way" with JC and "Okta Classic" via Authentication API.  In Jamf Connect Configuration app under "Identity Provider" I have selected Okta (OIDC) and filled out the appropriate fields:OIDC client ID:ROPG client ID:Tenant: Can I just put the Tenant ID here or does it need to be a URL/TenantID? I have tried both ways and still getting an error I am getting a connection error when testing the new OIDC connection prob because I have not properly configured something correctly. I have not filled out anything in the "Advanced OIDC" section of the Configuration app. I have Jamf Connect configured in our Okta environment via OIDC configurations and as mentioned above we have been using it successfully via the Okta API Authentication previously. 

Hello Jamf NationMy boss lost their Mac book Pro and is asking if our MDM Jamf Pro 10.47 can find itThe pre-stage enrolment does require location services be enabled but I do not see anywhere to look for the laptop from Jamf ProIs this a function of Jamf Pro or can this only be done iCloud > Find My app?I don’t believe they set up iCloud

I am using Composer 10.38.3 to make an installer of Karabiner - Elements, but I keep getting prompted for "System software from application 'Karabiner-VirtualHIDDevice-Manager' was blocked from loading". I am using the snapshot method to capture the installation which I am allowing said software to install. Also I have modified the owner/group to root/admin and applied to all sub folders and files. However, whenever I run the Self Service install, I still get prompted for the "Allow". The software does require Security & Privacy Input Monitoring which I have created a configuration profile for. I still think this is a permissions issue.

Hello, I am attempting to upload two different .pkg files into Jamf School for distribution to the macOS devices in my environment. While uploading the packages i am receiving the following error "Error: This is not a product archive, parsing component packages is not yet supported" I have tried different version of the file and I also used pkgbuild to build a .pkg from a .dmg mount. Any help is greatly appreciated!!

I've setup our JIM and LDAP Proxy on an AD box with an external IP address and an externally resolving DNS but Jamf keeps saying it's unable to connect to the LDAP server when using the Test button. This JIM has one IP but dual DNS since our AD does not resolve externally. I use our InfoBlox DNS which can resolve externally to provide an externally resolvable DNS. The DNS are something like jimmy.ad.company.com and jimmy.company.com respectively. When I do a reverse lookup of the IP from the JIM itself it provides the externally resolvable DNS of jimmy.company.com This DNS name is what shows up on the Jamf side and it checks in about every minute. Below is the log from Jamf Pro (we have a cloud instance). Any ideas? Thanks. 2019-09-06 19:16:42,851 [ERROR] [ina-exec-17] [LdapDirContextFactory ] - javax.naming.CommunicationException: jim.rice.edu:8389 [Root exception is javax.net.ssl.SSLException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnch

Hi all. I can easily create a smart group to determine which Macs are running 13.4.1, but what about 13.4.1 (c)? Is there a way to tell which Macs have that update installed? Thanks

I'm trying to setup a Custom Menubar Icon for Jamf Connect by following the instructions here:https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/Menu_Bar_App_Preferences.htmlI created a 16x16 png file and saved it as /user/local/icon.png Then I added these lines to the Profile, <key>MenubarIcon</key <string>/usr/local/icon.png</string> I quit Jamf Connect and when it relaunches, I just get a white square where the icon should be. The details of the image are not there. So it is trying to display it, but it just can't parse the file? When I click on About Jamf Connect, it also displays a small white square where the icon should be. I made sure the file had 755 permissions on it.  Is there a particular DPI or color pallet I need to set on the image? Is there something I'm missing?

I'm trying to put together an Extension Attribute that will alert me to whether zscaler is logged in or not.This is what I've come up with.  It works when run locally, and I thought it was working when run through Jamf but I'm noticing that machines are now reporting back as "No" when I have checked and zscaler is correctly logged in.  Just wondering if anyone else has an EA that they use or could tell me what's happening.Thanks#!/bin/bash currentUser=`ls -l /dev/console | awk '{print $3}'` if (security find-generic-password -l 'com.zscaler.tray'); then echo "<result>Yes</result>" else echo "<result>No</result>" fi exit 0