Hey y'all,I can anyone add printers via the Jamf Admin-app on 10.42. I can click the menu-button, but no dialog shows up. If I rapidly click it several times I can see a dialog for a split second, but it disappears almost immediately.I see this on all my machines here, MDM enrolled, not enrolled, profile manager enrolled, virtual machine, everywhere.I'm running Monterey 12.6.1 and 12.6, but it happens also on Ventura.Does anyone else see this and/or have a workaround for me?BestMorgan

I have a number of Mac Apps (Office suite and Google Chrome are among them) configured to install when a new Mac is enrolled in our Jamf Pro system. The install of these apps seems to be pretty inconsistent and I'm not sure where they get hung up.Some times, a handful of the apps will install just fine, while others don't appear within a few hours of enrollment. Other times, nothing will install. I've looked at deployment status and they are often sitting in "In Progress" seemingly indefinitely. I've reset my test MacBook several times through the course of the day with no change. I've pushed our policies as well. This issue is not every time, as very occasionally all apps will install within an hour or two and a couple restarts, but happens more often than not.

Recently had a customer report a lost iPad so I did a search for the device to put it in lost mode. When trying to click into the device details, Jamf just spins endlessly. I was then able to click into several other devices with no issue. Restarted the browser, cleared the cache, restarted the computer etc- no change. This has happened before and is extremely frustrating.

Hey all, Hoping you all can shed some light. Essentially, I'm trying to create an extension attribute to simply pull the agent version and build info.https://community.jamf.com/t5/jamf-pro/extension-attribute-tenable-network-security-nessus/td-p/109007 So I'm following the above article related to its extension attribute setup. Deployment is going well but getting Jamf to acknowledge via the setup of an extension attribute is rough for me. Namely in the Nessus Agent Version and Build info:  I'm going awry somewhere so any help would be appreciated if possible.

I am trying to figure out how to deploy a script to our users that deregisters the O365 suite. On the Microsoft site I have found the following Terminal command:defaults write com.microsoft.Word ResetOneAuthCreds -bool YESThis works like a charm when I run it locally, but when I try to run it through Jamf (selfService) it gives no result. I think this might be because the script through Jamf does not run as the logged in user.This is what I have sofar:#!/bin/bash#Remove all Microsoft usersdefaults write com.microsoft.Word ResetOneAuthCreds -bool YEShoping there is someone that can point me in the right direction here.

With a jamf configuration profile, is it possible for web content filtering to only allow urls starting with for example www.youtube.com but blacklist all other sites?

Hello All,We are new in our setup of Jamf Pro and had to remove the Prestage Enrollments config so we could get a computer to our current config to test enrolls. After removing the Prestage Enrollment config and readding the computers we are testing with will not re-enroll using this https://learn.jamf.com/bundle/jamf-now-documentation/page/Re-enrolling_a_Computer_Using_Automated_Device_Enrollment.html as well as a newly wiped machine that is being activated is not going through the pre-enroll process that is configured. Also we are seeing a pop-up now which was not seen before the removing and readding of the Prestage enroll config which states "Confirm Prestage Account Settings Creastion, Prestage account settings creation may take extended time to save. Do not refresh." Click save and it goes through just fineWe ran through a user driven enroll on the computer in hopes it would fix the pre-stage and re-enroll issues we are seeing, it did not. After user enroll initiated a wipe throu

Hi all,I want to write a scripts to auto select Monterey or Ventura installer.The scripts is here:#!/bin/bash### CHECK AVAILABLE DOWNLOADS GET_OS_UPDATE=$(softwareupdate --list-full-installer | sed -n 3p)sleep 1TRIM_OS_VERSION=${GET_OS_UPDATE#*Version: }echo "$TRIM_OS_VERSION"OS_BUILD=${TRIM_OS_VERSION%%, Size*} ### GET THE MAJOR AND MINOR VERSIONS: majorVersion=$(echo "$OS_BUILD" | cut -d "." -f 1)minorVersion=$(echo "$OS_BUILD" | cut -d "." -f 2) ### GET THE NAME: TRIM_OS_NAME=${GET_OS_UPDATE#*Title: }echo "$TRIM_OS_NAME"OS_NAME=${TRIM_OS_NAME%%, Version:*}InstallerPath="/Applications/Install\\ "$OS_NAME".app/Contents/Resources/startosinstall" osascript -e 'tell app "System Events" to display alert "Downloading '$OS_NAME $OS_BUILD' update"'softwareupdate --fetch-full-installer --full-installer-version $OS_BUILD####Variables # Determine the current usercurrentUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /lo

Hey, guys! I am testing our company's FileVault 2 workflow and I haven't been able to use the Institutional Recovery Key, simulating the scenario in which we don't have access to the enabled user's password nor his/her personal recovery key. We have an encryption configuration with both recovery keys. To test it out, I downloaded from the JSS a RecoveryKey.p12 file and put it into a USB drive. Then, booted the "affected" machine into recovery mode, obtained the logical volume's UUID and then ran the following: diskutil cs unlockVolume UUID-OFTHE-VOLUME -recoveryKeychain /Volumes/USBDrive/RecoveryKey.p12 And the response I get is: Error: -69749: Unable to unlock the Core Storage volume It's worth mentioning that this is a Sierra machine, so the drive is HFS. Is this procedure correct or am I missing something? Thanks for your support!

So I am currently working on some API extension attribute based scripts, for use with extension attributes.I have a script working that will do the following:List the assigned number of Computers to a user and List it as a number, under a computer device as a extension attributeList the assigned number of mobile devices to a user and List it as a number, under a computer device as a extension attribute   # get the number of mobile devices assigned to the user UserXML=$( /usr/bin/curl \\ --header "accept: application/xml" \\ --request GET \\ --silent \\ --header "Authorization: Bearer $token" \\ --url "$jamfProURL/JSSResource/users/name/$strassigneduser") #echo "xml results $UserXML" mobileDevicesCount=$(echo $UserXML | grep -o "<mobile_devices>" | wc -l)# get the number of mobile devices assigned to the user UserXML=$( /usr/bin/curl \\ --header "accept: application/xml" \\ --request GET \\ --silent \\ --header "Authorization: Bearer $token" \\ --url "$jamfProURL/JS

Hello all,   I'm wondering if anyone has had any issues currently/in the past with random large amounts of Apple traffic. Yesterday our network got down to 2 MB/s (usually 200+). After some investigation with our ISP, we saw large amounts of traffic coming from Apple's 17.x.x.x IP range and our Firewall CPU usage reaching well over 80% at times and staying. Our ISP specifically said it was from update servers grabbing Apple Img. files. The weird part is we have an update deferral going to all iPads/Macbooks. We are currently going to be throttling our bandwidth to these ranges, but does anyone have any other suggestions? Thanks!

Anyone got a script for Dockutill on Monterey. Our old Python script doesn't work anymore. We are looking to keep the Self Service app permanently in the dock.  This is the current script. #!/bin/shDOCKUTIL=/usr/local/bin/dockutilsleep 10$DOCKUTIL --add '/Applications/Self Service.app' --replacing 'Self Service' --no-restart /Users/$3killall cfprefsdkillall Dockexit 0

Hi, This may be a stupid question but I am new to Jamf and not much of a Mac user. I downloaded Jamf Composer from my Jamf Product page. Version 10.46.0.I get a .dmg file. I run the file on a test Mac and it pops up saying to drag Composer to your hard drive to start building packages. It didn't install anything. So I drag the .dmg file to my Applications folder and run it again. Same message. I plug in an external storage device same thing. USB drive, same thing.I was planning to use Composer to build a .pkg file for Figma as so Figma can be deployed using Jamf.Let me know if maybe I am dragging the Composer .dmg file to the wrong place or maybe it is a bug with Composer.Thanks.

Hi Jamf Community,  Has anyone ever been asked to report on the number of systems that have Touch ID fingerprints setup? I've been attempting to write an EA as I have not found anything online. There are no Jamf Template EAs for TouchID, maybe this is a feature request. I know we can restrict the use (allow touch ID unlock, etc.) but we are unable to restrict our users ability to add a fingerprint into touch ID.  If anyone has some suggestions on how to accomplish this, I would be grateful. Thanks,JR

Has anyone been successfully able to update Splashtop Streamer via Jamf policy? I see that they have a guide for creating a package on their website (Splashtop), but I am unsure of what the "deployment code" is referring to. 

Hey folks, I have a weird one. We use dockutil to manage Dock. Dockutil installation + sorting out the Dock is set as a policy after enrollment. Policy deploys fine, installs Dockutil, adds the required icons but doesn't remove any of them with error 'Remove failed for xxx in /User/Username/Library/Preferences/com.apple.dock.plist'. Although, same script is added to our SelfService and when its run from there, it works as a charm.  #!/bin/bash echo "running dockutil" DOCKUTIL=/usr/local/bin/dockutil $DOCKUTIL --remove 'Safari' --allhomes $DOCKUTIL --remove 'Mail' --allhomes $DOCKUTIL --remove 'Contacts' --allhomes $DOCKUTIL --remove 'Calendar' --allhomes $DOCKUTIL --remove 'Photos' --allhomes $DOCKUTIL --remove 'Messages' --allhomes $DOCKUTIL --remove 'FaceTime' --allhomes $DOCKUTIL --remove 'iTunes' --allhomes $DOCKUTIL --remove 'iBooks' --allhomes $DOCKUTIL --remove 'Maps' --allhomes $DOCKUTIL --remove 'TV' --allhomes $DOCKUTIL --remove 'Music' --allhomes $

Greetings,We are starting our setup for Jamf Connect and so far the login window is working, though on one M1 Mac Studio, it keeps asking for password verification each login. I read in another thread that is firmware issue?My main question is that we are having issues with the Connect App not loading. It seems to work sometimes but most times it loads we get the attached image. App with empty menu items.I can upload the plist from the config file if needed. But I'm at a loss for how to fix the issue.

There has been a request to create a restriction on certain students' iPads to prevent them from disrupting the class. This looks, to me, like a student behavior issue and not a technology problem. Even so, I will like to see if this is possible. The teacher setup is as follows: Teachers connect their MacBooks to the projector via HDMI to teach the class. Here is the issue: students can start "Screen Mirroring" (to the teacher's MacBook) from their iPads triggering the "Join" code to overtake the class screen and interrupt the class. I will assume that if something can be done it will take a "Configuration Profile" scoped to the incurring student's iPads in order to block the Screen Mirroring from being available on the iPad. I have only found some restrictions for "Airplay incoming requests" and "AirDrop", but, none do the trick. Let me know your thoughts!

Hello - I'm sending remote commands to 7000 iPads to update iPadOS on supervised devices>Latest version>Download, install and restart. None of the iPads were updated to 16.5(going on the 14th hour mark since commands were sent). Under Devices>History>Completed Commands, I see 'AvailableOSUpdates' on all the iPads. I am currently on JAMFPro version 10.45. There's no iPadOS defer in place. I've been pushing iPadOS updates throughout the year with no issues until now. Any suggestions? Thank you!

How can I pull the specific insight's non-compliant system list as a csv file or as report in Jamf Protect? is there any options available for this?

Hello,With the new certificate renewal procedure I had to reconnect directly to the Apple site which manages the certificates.The problem is that the specific Apple ID we used for this when originally installing the product, is now asking me for answers to the passphrases we lost. And therefore I cannot access the certificate management.To work around this I used another Apple ID from our company to generate a new certificate.But after installing it in our Jamf server, I notice that the push no longer works: In view of the logs, it comes from the certificate.Is there a way to force Jamf and associated devices to use the new certificate from another Apple account?If not, what is the procedure with Apple to recover the original account that managed the push certificate for our Jamf server?Thanks in advance for your suggestions.Regard's Stéphane

Can anyone explain the Activation code and Licensing? We are licensed for 195 and we are at 195 active computers.  I just received an Activation code for 215 which I added to Jamf Pro in Settings - Activation code.Do I have to update the license configuration file again to have computers update to the 215 licenses?  Is there a document referencing when we get a new activation code and what has to be done for licensing?  

Hi A question: How can I deploy to turn on automatic login for a local user. I found in a other discussion this script but I cant get this working: http://www.brock-family.org/gavin/perl/kcpassword.html What do I have to do to enable the automatic login? I'm a bit confused with this script. Thank you!

What is the best way to identify endpoints with removable MDM profiles? I suspect that some computers in my environment may have been deployed that way before I was hired.

Hello All,Am testing my installation of Jamf Connect. The scripts open an Applescript and the user select Accept to trigger the policy to install Jamf Connect. The log below appears randomly when testing. Could I be missing something in the script to avoid the error?  #!/bin/bash ## This will display a pop up window and freeze Finder. The user will have to click Accept to start the next line 'Start the policy' button=$(/usr/bin/osascript << EOF tell application "Finder" activate display dialog "Jamf Connect is here! Please save your work and click Accept." buttons {"Accept"} with icon POSIX file "/Library/Application Support/SunPower/brandingimage.icns" with title "Important!" end tell EOF) sleep 5 # run policy with returned value /usr/local/bin/jamf policy -event "$button"