Hi all, I'm trying to make our cofiguration profile work for our macbooks. I'm noticing for new Macbooks to be enrolled, I get MDM Capability = No. Verify MDM Enrollment = Enrolled. With MDM Capability = No, it mean none of the Configuration Profile would be pushed to them. I've read on past JAMF Nation discussionshttps://jamfnation.jamfsoftware.com/discussion.html?id=19266https://jamfnation.jamfsoftware.com/discussion.html?id=11948 that this push MDM actually is dependent on Apple, and running sudo jamf mdm may trigger it to work. But when I do run /usr/local/bin/jamf removeMdmProfile/usr/local/bin/jamf manage/usr/local/bin/jamf mdm all I get is Verify MDM Enrollment = Enrolled. Any other ideas on how to activate this MDM? Right now half our Macbooks have MDM, but the other half have this turned off. I'm puzzled as to what is required.

Hi, very new at supporting Jamf and we have a small issue (more an inconvienience for our users) Two issues really:On login our users, when signing in using their azure creds and authenticator app are then prompted for their AzureV2 password rather than just letting them continue the sign in. Is this behaviour expected or are we looking at how our access rules are configured in Azure? Interested if anyone else has seen this behaviour before?

Hi all,I am trying to deploy Cynet on several macOS machines with pkg and then grant full disk access on each machine remotely using Jamf pro.Can you please help me on how to do it? Thanks! Ben.

Still trying to wrap my head around how this works.  I have an enrollment process in place where I can send a user new in the box mac and it pretty much sets up itself, we have to have FileVault encryption and we are using Azure with MFA.  After everything is completed if the user reboots they are presented with the FileVault login, then it brings up the Jamf Connect login to Azure which will prompt for MFA.  Is that the expected behavior?  

Hi All,We currently are using McAfee Endpoint Protection and we would like to at least have it update automatically.Able to know if there is a script that we can use to do just that?Sorry as I am literally new in scripting.

Hello everyone,We have standard Intel/M1 accounts (non-admin) (OS: 10.14.6 to 12.6.1).Could you advise how best I can grant them admin access to make the upgrade ?Thank you.

Hello There, I want a policy on JAMF that all Mac users' laptops will auto-restart after 25 days.If anybody has it please do post.Thanks

I am wanting to create a smart group that will show me all the Macs that are capable of running Big Sur, not actually on Big Sur, but could upgrade to it. Is there a way to create a smart group that I can filter out the most recent version of macOS the device is capable of running?  Thank you

Hi All, Looking for a way to sign our users out of the AppStore and iCloud as we plan on restricting those going forward. Found a few discussions like This Post but it doesn't seem to be working on El Capitan. We've noticed the ~/Library/Preferences/com.apple.storeagent.plist file doesnt seem to exist anymore as well. Has anyone had any success doing this?

I recently setup JC/Okta and have been testing this setup in a Jamf sandbox environment.  When test users login to their Macs we are seeing the Okta login screen, which we can use for successful authentication,  but its not allowing us to use any type of two factor authentication for Okta. We typically use Okta Verify app for two factor and I have configured Jamf Connect in Okta via Admin>Authentication Policies>"Any Two Factors".Am I missing something here? 

After 2 weeks now of "remote learning," I still have 1 issue that requires the family to drop the ipad off. Kids are disabling the ipad by entering the screen lock password wrong too many times. Actually, the last 2 it was a sibling that did it on purpose! I just wanted to see if I was missing a way to get the ipad going again from home instead of having to have the ipad dropped off at the school and wiped and re-setup?We have JAMF Pro and these are fully Supervised iPads.

As per the title - if we have a random Recovery Key set and someone accidentally deletes a laptop out of JAMF (and thus removing the option to wipe it and to see the recovery key), how do we wipe and re-build the machine?Without knowing the recovery key we can't boot into recovery options and wipe the disk.

I've been tasked with implementing this change on some remote users. I've had a quick scout around and can't see an easy way of doing this. Anyone got any ideas?

Hello all,I have a JamfPro instance with about 40 Macbooks. Of those, I have 10 devices that are not accepting any management commands. To clarify, all of the management commands and configuration profiles are stuck in pending and nothing that I have done so far appears to have any effect. I have attempted the following in an attempt to fix:Canceling all pending commandsSending a blank pushRenew MDM profileIssuing the command sudo profiles renew -type enrollment via script and scoped into policy in Jamf. Results in  Script result: Error: Renewing DEP enrollment failed: (null) ((null):0)Has anyone else run into this where specific devices are not accepting management commands? Is there any way to fix this without having to physically visit all 10 devices? 

Hey all, I've pieced together what I think are all the steps for using a Notify Screen along with our basic Jamf Connect setup, but it's been mostly a copy-paste from the JC documentation so I'm not confident it's as smart as it could be. We run a very general Jamf Connect login with Okta and are adding a Notify screen to newly enrolled computers to install basic apps on first setup. Some questions I am confused about:Is it smart to have two different Jamf Connect config profiles? One for the initial setup and one for ongoing use?The reason I ask is we have a single Jamf Connect config profile that contains all the login info in: "Jamf Applications" com.jamf.connect.login as well as "Upload" com.jamf.connect for the JC app properties but we ALSO have "Upload" com.jamf.connect.authchanger which contains the default strings of -reset, -jamfconnect, and -notifyWould it be smarter to have one 'enrollment only' config profile that has all 3, then an 'ongoi

Hello Community, Hoping someone might be able to help me figure out how a user was able to upgrade their Mac to macOS Ventura when I have the installer being blocked using Restricted Software. Is there a log or something that will tell me what triggered the upgrade? I have seen two users do this now. Thoughts?

Hi engineers,  I am configuring "Cloud Services Conection" but, when i enter my credentials and clic on "Save" message "No assets found for this account" appears. How do I solve it ?? Thanks. 

I am trying to figure out (in detail) how to connect the two. Fortunately all of our computers are listed in ABM but I am not sure how to connect the two systems.In ABM all computers and devices say No MDM Server and Edit MDM Server is grayed out. I can select All Devices and Edit MDM Server but the only option available is to Unassign from the current MDM.Based on what I am seeing is the only option to unassign all computers and devices and then re-enroll them? If so what enrollment option is correct?It is obvious I have not been down this path before so I would appreciate any guidance in connecting Jamf Pro and ABM and getting all existing computers properly configured.

Hi Community/Hi Jamf AdminsWhen you lock apps in the Teacher app, they visually disappear from the iPad. However, they are brought back to the iPad in an arbitrary order when you unlock the apps again. So the order created by the kids is always goneand created folders etc. disappear.Is there any way to change this? Jamf Feature Request ?Thanks for feedback and suggestions.Peter

Hi AllHave anyone updated their JAMF pro from 10.14 to the latest? I know we are way back in pastDue to the end of support for Windows sever 2012R2 have to update the server OS to Windows sever 2019 and need to update the JAAMF as well.have anyone done this before if so Can we directly jump from  10.14.x to 10.44.x without the Incremental Upgrade?What are the important things that I should consider before updating?Thanks

I get many error messages on all computers under Management commands. We do not have nor did we ever have Jamf Protect.  I searched just about everywhere in Configuration Profiles & Settings to no avail. We have a cloud server, not on prem.  I thought I would reach out before opening a ticket. Any way to stop these messages from happening? As far as I know it isn't affecting anything, so is low priority. Remove Jamf Protect PPPC and System ExtensionProfile with identifier 'com.jamf.protect.daemon.pppc' not found. <MDMClientError:89>

I found this thread for an Intune EA, but am getting conflicting information. I check if a user is enrolled in Jamf by navigating to their computer, clicking the History tab, then navigating to macOS Intune Integration Logs. The extension attribute will return "None" despite the user being enrolled with Intune (see screenshots attached).   I have tried to find documentation on creating a smart group based upon the Intune Integration reporting Jamf already has, but have not been able to find any. I also quickly glanced through the Jamf Pro API reference and documentation to see if this could be accomplished via the API but was unsuccessful. Any help would be appreciated! Thank you for your time! 

I'm looking to set up a sandbox instance of Jamf Cloud. Does anyone know how many certificates the APNS portal supports? I'm a little nervous in selecting "Create new certificate" when I have a production instance and certificate deployed. I'm "assuming" that the "Create new certificate" wouldn't impact my current & valid production certificate, but rather be safe than sorry and ask the group. Any impacts to currently deployed certificates when creating a new one in the APNS portal? 

Hello,Could you please advise me on the following?I have Jamf Connect deployed via Jamf Pro (with Azure AD) anf FileVault enabled via a Configuration Profile.At the booting and restarting, macOS login window first appears to ask for Password and then presents the Jamf Connect Window where I supply the Azure Credentials.At the logout, it presents the Jamf Connect window.is it the way it should appear? Since FV enabled, it requires to be unlocked first and then JC login window appears there.if there is no FV, it straightaway presents the Jamf Connect Login Window.(User Migration has been chosen with Jamf Connect Configuration.) Thank you,Arun

Hi everyone,today I came across an error where the user can't login in the SelfService anymore. The authentication in the MacOS SelfService does work.It is strange to see that the logs mentioned further down are basically saying that the login successfully failed.We tested the LDAP connection without any error.    JAMF Pro Version: 10.43.1-t1674743888SelfService Version: 11.1.0 JSSAccess.log:username=xxxxxx, status=Successful Login, ipAddress=xxx.xxx.xxx.xxx, entryPoint=Casper Suite Application JAMFSoftwareServer.log:[ERROR] [Thread-2 ] [lientCommunicationServlet] - Error processing communication content - com.jamfsoftware.jss.exceptions.authentication.AuthenticationException: An authentication error has occurred. I hope someone can help. Kind regards.