I am still fairly new with Jamf and I am trying to figure out the various recovery options and when to use them.Currently I am seeing the following four: ConditionUnlock/Recovery OptionUser activates Find My and does not turn it off before returning the device. Activation lock is enabled.Use Activation Lock  Bypass to turn off Activation Lock?Jamf > Computer > Inventory > Local User Accounts > scroll to the far right > Manage > Unlock accountPersonal Recovery Key required to reset passwordJamf > Computer > Inventory> Disk Encryption > Personal Recovery Key ?Jamf > Computer > Security > Recovery Lock Password I am not sure these are all of the unlock/recovery options but I would really like to know the options and the conditions that require them.Thank you.

I started using the new API. For now I'm using basic authentication (with my personal acount) with /v1/auth/token to get a Bearer token. Works like a charm.However, I really want a seperate account, because the scripts run on a seperate VM.However, I just can seem to find an account manager for Jamf Pro. So my questions are:Where do I find the account manager to manage the users which can login to our Jamf Pro instance (xxx.jamfcloud.com)Is the basic authentication + auth-token a good way to authenticate on a standalone VM? 

Howdy!We have Jamf Pro hosted in Jamf Cloud. I am not sure when this started, as this matter was brought to my attention by another team member. However, our Change Management logs are flooded with entries from our VPP Account supposedly editing our VPP object. Screenshot:I did some searches but I could not find a similar issue. The problem is that each of these entries, if I click on the Details button, show the exact same data. Seen here: This entry appears every minute. It is making auditing nearly impossible because it is flushing out previous entries that are actually team members making changes.How can we fix this?Thank you.

Does anyone know what flavor of regex is used by Jamf Pro? I've been using PCRE for my patterns, and haven't had any problems (that I know of,) but would like to get official confirmation just to be sure.

Scenario: Large school with students using mainly macbooks, work is saved to OneDrive. Students are often breaking their OneDrive syncing by using illegal windows characters in file names (word docs ect) causing sync errors and are then requiring a manual fix by IT Staff renaming the files/resolving onedrive syncing. All devices are MDM enrolled, is it possible with Jamf Pro to disable the ability to use special/specific characters when naming files. I did see the following post: Solved: Any way to create a policy to prevent users from u... - Jamf Nation Community - 108934 that hinted it wasn't possible, but this is now several years old and things may have changed. Thanks a lot,JM 

Does anyone know how to create a configuration profile to make sure users are have the preference setting to load CCD on Logon ?  We have users that have unchecked the preference and need to make sure the CCD app loads on logon in order to do the updates. This is especially important on Ventura.Thank you for any advice 

Does the partner device management connector token in in tune also apply to iOS devices, i only hear macOS, but most of my fleet is iOS, in the device compliance in jamf pro it does have iOS and iPadOS.

Before we were able to roll out a profile that prevents students from turning on "Find My Mac", it looks like we have some students that turned this on. I have 2 computers from students who recently left the school and I can't erase the hard drive. I tried from recovery mode and entered the bypass code stored in Jamf, doesn't work. Also tried to send a command from the Jamf pro server but get an error. Will attach the error messages if anyone can advise? 

Hey all!What are the implications, if any, of moving an imaged and in-use machine from one Prestage Enrollment to another? Our scenario:We have ~900 laptops all built with one of three prestage enrollments. Each new PE was setup over time with slightly more settings for our environment and only net-new machines were ever enrolled in the latest PE, so we have have a large mixture of each in our company. We have now built a 4th and if we reimage a machine the biggest pain is going into the PE scopes, unchecking it's old PE, then rechecking it in the new PE. We reimage 4-5 laptops per day so searching for the serial and doing this for each one would get tedious.Our hope is that we could uncheck all machines from the scopes in the three old PE's and just check all machines in the new one. That way they whenever we reimage them (either tomorrow or two years from now) they will image with the newest PE. Will unchecking those machines and rechecking them in the new one do anything?

Seeing an odd issue with one device in the JSS. This device in our JSS that has two entries. One is current, the other has not 'checked in' since March. I can select and delete the currently active device through the console no problem. However, the older entry, when I click on the device name, goes to a new page and says "The page you requested could not be found". I need to be able to delete both entries. Anyone know of a way to delete this stale, false record? Perhaps a MySQL command or similar?

Hi Team,Hope everyone had a great weekend.I have a question related to Patch Management. So I was able add my current package (Ver.108.0.1) to the Definition tab as well as I was able to add some machines to my scope as a 'TEST' along with the target version of the program that I want installed. I was wondering if there's anything else that I need in order to get these machines updated or do I just give them time and they will populate on their own? Here are some screenshots of what I've done so far. - I'm sure there's an answer somewhere on here, but I can't seem to find it. - Thanks. 

Hey y'all! I haven't been able to find a KB article on this so I'm unsure if it's possible.  Is it possible to uninstall remotely iOS apps that were installed via JAMF? If so, could the uninstall also be done in bulk?For example, I have a group of iPads that I don't necessarily want to wipe, but they have some currently unnecessary apps on. I would like to be able to uninstall the unnecessary apps remotely. These apps are not default apps from Apple. 

Hello, I'm fairly new to JAMF so sorry if my question seems redundant. We're currently prepping iPads to be surveyed out, since they have student data our procedure involves wiping the devices (either via Apple Configurator or JAMF Wipe). Is there a way to scan the serial numbers of the devices we plan to restore into a spreadsheet and have them uploaded to JAMF Pro to then be remotely wiped?  The process we have currently works but I was just looking to see if there were any tips to make it go by faster. Thanks! 

I was wondering if there's a way to install the adobe creative suite into the ~/Applications folders to help our non-admin creative users update / install fonts.  I know a lot of efforts can be handled via the creative cloud apps, but they are still finding issues with fonts and 3rd party plugins. 

This is our first JAMF Pro instance being hosted in the cloud by JAMF and we've been hitting roadblocks while getting it set up for the first time using our on-prem Microsoft AD LDAP server. The first block was a firewall issue where it wouldn't proceed past the "Enter Server Info" step using the LDAP Server Assistant. We've got that sorted and it proceeds to the next step of "Enter Credentials," but that is where we are currently stuck and support emails haven't provided much insight and it seems this step isn't a big enough trouble point to be online on forums. We're using SSL with a cert generated from Digicert(also attempted a self signed cert from the server, but can try again if better instructions are found). I've created an AD Service Account just for this connection and have confirmed it exists. I've also tried my personal AD account and it still states "Could not find user." What are we missing here and how can we determine the point of failure?

Hello,I'm fairly new to jamf pro / protect and just took over partial responsibility for a tenant. I noticed, that lots of devices do not have the most recent Protect version, even with "automatic updates" enabled. (Most of them on os 12+)They check-in daily and I can see them as "connected" in Jamf Protect. Do I have to push the updates manually or is there something else at fault I haven't thought of?Thanks,Georg

We are having an issue with all new enrolled IOS devices. The device is being enrolled correctly, but when we attempt to open self service we get this error. I have verified that we have enough licenses from the VPP. Self service is running properly on our computers just not on IOS devices.

We have SSO enabled which works great. However, I need to create a local account that will use the ?failover url. This is an account for an intern so I can't make it an admin account. I created a custom account with the desired privileges but every time we try to use the ?failover url, we get a access denied. Our backup admin account for the ?failover url works as expected. What am I missing?

We installed Slack using the Mac Apps with the 'Install supporting configuration profiles' option selected. This led to the Alert configuration issue reported here https://community.jamf.com/t5/jamf-pro/jamf-app-installers-user-notifications/m-p/287342Recently, I noticed we now had two Profiles on our devices with the same name "App Installers - Slack". One profile had 2 settings (no update and Alert config) and the other had 1 setting (no update). I tried updating our Mac App configuration by unchecking 'Install supporting configuration profiles' option and this successfully removed the "App Installers - Slack" with the single setting, but the 2 setting Profile is still there. I have tried disabling the deploy and that did not remove the legacy profile.I have looked at other options to try and remove this profile but nothing is working since this is a signed JAMF Software profile and not one of ours. This is causing a lot of complaints from our user base since they want

Does anyone grab the Office VL installers from the following site = https://macadmins.software/based on what i see Office 2019/2021 use the same installer 16.57.0 ?but different Volume License serializer depending on what version you are licensing? so if i install 16.57.0 and run the LTSC 2021 License serializer it will be running Office 2021?does this have different features than if i ran the 2019 License serializer?    

Having some issues with Company portal registration and receiving a generic error message which has no proper logs to dive into unfortunately. Deploying company portal via mac apps and targetting all managed clients Afterwards I created a smart group to locate any devices that have company portal installed and targetted a policy to trigger Microsoft Device Compliance.This triggers the policy once the device recognizes that Intune Company portal has been installed.It launches flawlessly, but unfortunately during the registration portion, I do the following and receive a generic error. Company portal launches on its own with the policyI login w/ my corporate credentials and provide my username/password and then authenticate with 2fa.I then receive this generic error below.If I try to force quit company portal, i'm prompted with JAMFAAD wants to use microsoft to sign in .But, upon going through the process and logging in with my corporate credentials again, I am prompted to

I gave deploying printers via the Configuration Profile payload a try. Most of the printers had no issue deploying, but I ran into issues with deploying our more complicated printers.We run Ricoh C6502 MFCs for our follow-me printing and these by standard have a large capacity tray and finisher. We print from the Macs via PostScript.When uploading via Jamf Admin and deploying via Policies, the large capacity tray and finisher options are preserved.When attempting to deploy these printers via Configuration Profile, the tray and finisher settings are not preserved, which causes options for trays, stapling, and other finishing operations to not be present.Wondering if anyone else came across this in their testing or if my printer settings in question have issues. I tried this across Ventura 13.4 and Sonoma 14 Beta 4 and submitted feedback on the latter version.Looking in the /etc/cups/printers.conf, does not appear to be a difference between the Policies and Configuration Profiles install

Is their a way i can configure notification emails to alert token expiration dates?

In the process of removing admin from our users. I want to create configuration profiles for any software app permissions that are devs use that I'm not aware of yet. I can pull applications installed and from that try to find code requirements / team identifiers but that doesn't help without knowing what permissions to give it. This will be a process to research each software. Is there a way I can pull this information at least for the Privacy & Security tab? Checking System Report or these locations I am not finding the info I am looking for exactly. /Library/Preferences//Library/PreferencePanes/System/Library/Preferences/System/Library/PreferencePanes Ideally, I would have a script run in JAMF to collect this data combine it if possible. Thanks for any and all help or thoughts!  

Hi there, So when jamf notified us for APNS renewal, Instead of using the apple id assigned to renew the current certificate on the one on APNS. We have accidentally used a different apple ip and created a new certificate in APNS causing jamf to produce a new certificate on Jamf with a new topic. This has caused the managed laptops and phones enrolled on the previous certificate to lose the functionality to get any remote commands from jamf. The laptops still checking in and working fine, but the remote commands functonality has been lost. We have found the original apple id which was used to renew the certificate now.  My question is if we renew mdm again on jamf with the certificate that was originally used in apns, will it make those devices receive the remote commands again or will it break the entire devices to be unmanaged?  Hope this makes sense, any recommendation will be greatly appreciated.