Hello friends,I need to uninstall Carbon Black on all company devices. The app bundle includes a shell script to uninstall it, so I thought I could run a command with the Files & Processes payload of a policy. It looks like this:sh /Applications/VMware\\ Carbon\\ Black\\ EDR.app/Contents/Resources/sensoruninst.shIt works, but the user gets prompted to approve deleting the system extensions.  I tried copying the sensoruninst.sh and pasting it into a script in Jamf, then adding the script to a policy. That does not work, returning this message:VMware Carbon Black EDR Uninstaller Copyright 2016-2021 VMware, Inc. All rights reserved Uninstalls the VMware Carbon Black EDR sensor. Must be run as root. Options: -d [ d ] Keep local sensor data. Maybe what I want to do is not possible but I thought I'd check here. Do any of you know if it's possible to uninstall this thing without user intervention? Any insight and suggestions are welcome.  Thank you 

I'm trying to deploy Maple 2021 to MacOS Big Sur.  The software actually installs fine if I watch the application folder in Finder.  However, as far as self-service is concerned, it just keeps spinning in process indefinately.My policy caches my pkg to a temp folder.  I then run the post install script:#!/bin/shcd /users/shared/Temp/Maple2021.1MacInstaller.app/Contents/Macos./installbuilder.sh --unattendedmodeui minimal --mode unattended --licenseType network --serverName REDACTED --portNumber 27003 --enableUpdates 0 --checkForUpdatesNow 0 After this, another script to remove the installer runs:#!/bin/shrm -rf /users/shared/Temp Any suggestions?  I'm a MacOS and Jamf novice, so I'm assuming I'm doing something incorrectly

Hello everyone,Hope everyone is having a good week.I have a simple question to ask. I'm trying to install an application called Gytpol on a Mac and I'm getting this error. (See screenshot 1) - When I click on: "Open Anyway" the same error still appears. I checked the GateKeeper settings and the options needed to bypass this error have been enabled - (See screenshot 2). I was wondering if there's another setting that I need in order to get this processed? Obviously, I don't want to bypass Gatekeeper with the spctl --MASTER-DISABLE command and disable GK since this install is going to be added onto other users. Thanks team.

iOS 14 reached EOL almost two years ago but Jamf Pro still supports it. My InfoSec team has asked that we prevent our older iPads on version 14 from enrolling. I figured it would be in the pre-stage enrollment settings but alas, have not found it. Is it located somewhere else or simply not possible?

Hi,The title almost points out the complete issue... When adding an App through "Mac Apps > Jamf App Catalog >"  I don't get the option "Distribution Method". Also I don't have the tab 'Self Service'. The only tabs I see are "Configuration settings" and "User notifications":So I am not able to offer App installers through Self Service.Any ideas?

Hi, Has anyone ever tried to pull the expiry date of any Certificate? I can see it is in my Keychain and also can see the last date there. But I need to find a way to pull report from all Macs and send out notification based on expiry date.Unable to pull this info. Any ideas?

I use macOS VMs a lot for testing. For general policy testing, macOS VMs running in the Apple Silicon version of Parallels work great. One huge limitation of Parallels on Apple Silicon is that there doesn't appear to be a way of creating a macOS VM that is running an earlier version of macOS. On the Intel version of Parallels, I can download the installer app for the version of macOS I want such as 13.3.1 using either the Download Full Installer app or the "softwareupdate --fetch-full-installer --full-installer-version" command, and then use Parallels to select that older macOS installer for my VM. The Apple Silicon version does not appear to allow this. Does anyone have process for this? I have kept older macOS VMs that I made a few months ago saved so I can use them for testing software update policies and workflows, but this is getting annoying. There are many limitations in Parallels for Apple Silicon that don't seem to be getting fixed any time soon. I have tried VMware Fusion on

How do you guys rotate your FV 2 recovery keys?! any ideas?

The current Jamf-managed Firefox ESR patch management definition is missing Firefox ESR 115.0 and 115.0.1. These were released nearly a week ago. I put in a support request but the ESR patch management definition has still not been updated. I was trying to avoid creating my own definition just to push these versions but it may be necessary at this point. Should I go ahead with creating my own or is there a reason these are delayed?

Hi,  I created a smart group to get the list of devices inactive > 180 days, but then there lot of devices ready for deployment and after exclusion we identified 150 devices whose license we can safely removeBut the issue is to how to create a smart group or static group by importing the data from excel ?

Hi, we're currently running our mac's with automatic install scripts via jamf.Our users don't have admin privilegues. When they update Slack (which is simply a new installation of the most recent client), it always shows the dialogue mentioned in the subject or attached screenshot on every app start, until someone types in admin creds.If you click on cancel, the app still starts. But the pop-up on every start is still anoying. I do get an output from terminal saying: May 10 11:58:30 Slack[21065]: DEPRECATED USE in libdispatch client: dispatch source activated with no event handler set; set a breakpoint on _dispatch_bug_deprecated to debug May 10 11:58:30 SecurityAgent[21094]: objc[21094]: Class TKTokenRefImpl is implemented in both /System/Library/Frameworks/Security.framework/Versions/A/Security (0x7fff9712afa8) and /System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent (0x10522fce8). One of the two will be used. Whi

My organization sometimes has users open up tickets whenever I a new minimum OS version in our Nudge configuration profile due to the software update window never loading its contents, thus not allowing users to update and badgering them with Nudge notifications. I've created a kickstart policy that runs sudo launchctl kickstart -k system/com.apple.softwareupdated; softwareupdate -l This has fixed the issue of software update not loading its contents, but I was wondering if it was possible to trigger this policy whenever I make changes to the Nudge configuration profile. This way the kickstart command would run after changes are saved in the configuration profile.

Hey everyone,  Is there a way to disable the Profiles pane in Ventura macOS? I don't want non-DEP Mac users to mess around with it and remove the MDM profile.Thoughts?  

Hi all,  Referring to this macOS installer script.macOSUpgrade/macOSUpgrade.sh at master · kc9wwh/macOSUpgrade · GitHub  This script works fine for Intel Macbook upgrading to macOS Monterey 12.0.1.  But it does not work with Apple Silicon Macbook 😞  When attempting, I get the following error:Error: failed to authorize for installation. Provide a password with --stdinpass or --passprompt.By using the agreetolicense option, you are agreeing that you have run this tool with the license only option and have read and agreed to the terms.If you do not agree, press CTRL-C and cancel this process immediately.Investigating further, I run the following in a M1 Mabook's terminal./Applications/Install\\ macOS\\ Monterey.app/Contents/Resources/startosinstall --agreetolicense --nointeraction --forcequitappsError: A method of password entry is required.Usage: startosinstall.....The error suggests I need to supply admin username and password via --user, an admin user t

5.4.1 (58698.1027) was released yesterday (28 Oct 20). Patch Management for our JAMF instance doesn't show this. It only shows the 5.4.0 update which was released on the 26th. It says that's the latest version. That's wrong. 5.4.1 is the latest version. 5.4.1 is installed on 60 machines and right now those are being reported as Unknown versions. What's up with that? How does JAMF update their patch management for latest versions?

During setup of a new mobile IOS device, I am prompted for the region or country. The answer is always the same- United States for us. Is there any way to set a default country or region instead of scrolling through 10 pages of options? I've looked through the pre stage enrollment settings and didn't see anything. Thanks in advance,Robert

Hello, I went and looked through all similar threads but didn't find any experiencing my issue.  I tested the 'Wipe" feature on my Macbook before performing the command on a user who locked himself out of his Mac and forgot his password and had some questions about the process.  When you hit Wipe, it prompts to enter a remote wipe passcode, and there is a box above that says "Clear Activation Lock".  I left that box unchecked and just entered 123456 for the PIN.  But when I sent the command it just nuked my machine and reset/reformatted my Mac, it didnt ask for a PIN code or display any message.  Is this PIN not needed when you do not check the Clear Activation Lock box?  And also, should I be checking the Clear Activation Lock?  And my last question is after the factory reset, the device now shows 'unmanaged' in Jamf Pro but on Jamf Pro's website it claims that the Wipe will not unenroll the device.  So theoretically if I had done this on a

I use Apple Configurator and Imazing Profile Editor to create configuration profiles.If a configuration profile was pushed out with "Prevent users from removing this profile" as true, can JAMF still remove this profile?  Isn't this just so users can't remove it locally on the workstation but the MDM server still can ?Also If pushing out the same configuration profile with same Payload ID to a workstation that already has it, won't the profile just be overwritten with the newer one?   Or do I need to remove it first and then push it out again if I make changes.I know I can just push out another restrictive profile but I like to keep the profiles to a minimum.Just curious on what exactly would happen.  Appreciate any feedback.

I am trying create a policy to uninstall Citrix Receiver on my macs. Unable to add uninstall.app into jamf admin due to error message "not being support in Jamf Admin". I little experience creating scripts. Trying to create script but unable get script to run. Wondering if anyone has script for uninstall citrix receiver

Hi Jamf folks, is anyone doing change control across their jamf policies? We are looking to ensure that there's no unauthorized changes to our critical policies, and that they could be audited periodically.If anyone is doing this and could point me in the right direction I'd greatly appreciate it!

Hoping someone can help me out with this - I need to drop a file in ~/Downloads when deploying software during our automated enrollment. We use Slack for internal messaging, and there is a preconfigured Slack token that will populate our Workspace URL - in order for Slack to read this file, it has to be in the ~/Downloads folder. I've set up a config profile, and given Slack access to the folder, and created one as well for com.jamf.management.Jamf to have access to the folder. It doesnt look like I have the profile for Jamf set up correctly - I can watch the Console logs and see that the package is being deployed, however, its never written to the folder. If I manually place the file there, then open Slack, it reads the token and launches the app appropriately. Any ideas on where I went wrong?

So we have been running the same JAMF instance for 9 years and 51 weeks, and it turns out that the JAMF CA itself has to be renewed after 10 years, so I've got a week to sort out the problem I'm about to describe.My problem is, we are still using a self-signed certificate, so JAMF support has told me that if I renew the CA, all my clients will no longer trust it and will have to be reenrolled. But I already know, from experimenting on my test instance over the winter, that switching over to a publicly-signed certificate *also* drops all my clients.As far as I can tell, there is no way to migrate from a self-signed certificate to a publicly-signed certificate without dropping all your clients. I have googled and I cannot find any documentation anywhere discussing any such process. My JAMF support case seems to be languishing with people scratching their heads.Can anyone point me to steps for migrating to a public certificate without dropping all my clients?(Live JAMF instance is still 1

Does anyone know? I always assumed it meant "just another Mac fanboy", but I have heard several other... creative interpretations. Apparently there is some connection with a book called "Gravity's Rainbow"?

Xcode 14 on Ventura seems to have a different setup than in the past.  When it’s first opened it presents this  and if I click the Install button it promos for admin credentials.  Does anyone know how to preinstall the platform items?       

UPDATE: I have added this script to my gitHub repo. You can find the freshest of the fresh here... Hey everyone! It's been awhile since I've contributed anything to Jamf Nation. I have a script / workflow that I've been sitting on since 2019 that I am finally ready to share... I'm certain many of you use jamfHelper and for the most part, the jamfHelperGUI app is all but a dinosaur sitting on a couple of forked gitHubs out on the interwebs. That being said, I got tired of writing jamfHelper pop-up windows for every workflow that needed one. I wanted something a bit more cookie-cutter... something I could drop into my Jamf Pro Scripts repository and call from within a policy by leveraging Jamf Pro's Scripts "Options" features. So I set out to write a one-size fits all script to assist with the daily grind of pop-up communications. So without further ado, I give you my latest iteration of jamfMessenger... version 3.x... oooh! shiny!    &nb