I use Jamf patch management definitions to help with our patching process, as it makes it easy to build the correct Smart Computer Groups using the criteria.I just noticed that the current version of Microsoft Teams (standalone) that can be downloaded from macadmins.software is showing version 1.6.00.11156, or "61156" as the CFBundleVersion displays it. I confirmed this right now by downloading the latest version linked there and examining the pkg in Suspicious Package.Yet, in Jamf's Patch Management, I'm seeing this for versions of Microsoft Teams.There is no version "611156" listed in the patch definition. Am I just missing something or did Jamf miss one of the versions for this title? Maybe 611159 it was supposed to be 611156?This is the first time I've run into a missing version in patch management that I can actually verify is a version I can obtain from the vendor.

I am not sure if it is a coincidence or not, but we have seen the following problem happen on devices after updating to iOS 16.4 +.We have web clips on our devices that point to MS forms pages on our SharePoint environment. They will load once, but any other reloads bring up a blank page. All other web clips (non-Microsoft) work fine. These devices do have a Content Filter Configuration Profile installed on them. When we remove it, the SharePoint web clips work as expected. So the problem is with the filtering. I am hoping someone has had a similar issue and was able to determine the additional site that need to be added for Forms in SharePoint to load properly. I really do not want to enter in the long list of servers that Microsoft has, in the link below. We did test it on Edge, thinking it might be Microsoft being Microsoft, but unfortunately with the same resultsMicrosofts Listing of Servers Did try diagnosing with Charles Proxy and WireShark, but the sites we got th

Hey all,We found that some of the parental controls from screen time on our MacBooks cause issues with test loading in TestNav and we have to disable them.  Im now trying to create an extension attribute to show if the user has screen time enabled so we can send a message to these specific students and parents.During covid we provided instructions for parents to enable screen time on their kids devices, but now have to send messaging out to have them disable it for the tests.Anyone have any suggestions?

I have created and configured a lot of Jamf Pro servers over the years. While creating a new one today to use for testing, I ran into an issue I have never seen before. While following the steps for installing Jamf Pro on Ubuntu I am not prompted to create a root user password during the MySQL install process. I'm also not prompted to use legacy authentication. The Jamf article I am using is here:https://learn.jamf.com/bundle/technical-articles/page/Installing_Java_and_MySQL_on_Ubuntu_for_Jamf_Pro_10-14-0_or_Later.html#concept-5140What, if anything, could I be doing wrong? MySQL installs. I'm just not being prompted. Even though I have followed this process many times I always pull up the instructions published by Jamf to ensure that I complete all steps and catch any new or modified steps. Fortunately I have a snapshot of my server so I can revert back to the base install of Ubuntu quickly.

I'm trying to authenticate against the JSS API URL with a valid login credentials and it seems to constantly fail, e.g. ../JSSResource/accounts with error 401, not authorized. The user has full admin privileges, but continue to fail on the basic auth. I've even tried cURL to see if the behavior is different: $ curl -kvu "jss:****************" -H "Content-type: text/xml" https://jss.*********/JSSResource/accounts * Trying *.*.*.*... * TCP_NODELAY set * Connected to jss.**** (*.*.*.*) port 443 (#0) * ALPN, offering h2 * ALPN, offering http/1.1 * Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH * successfully set certificate verify locations: * CAfile: /etc/ssl/cert.pem CApath: none * TLSv1.2 (OUT), TLS handshake, Client hello (1): * TLSv1.2 (IN), TLS handshake, Server hello (2): * TLSv1.2 (IN), TLS handshake, Certificate (11): * TLSv1.2 (IN), TLS handshake, Server key exchange (12): * TLSv1.2 (IN), TLS handshake, Server finished (14): * TLSv1.2 (OUT),

Having a little trouble finding the correct operations to pull the Warranty info from the API. Im not even sure if it is possible. The reason to do this is to have a popup on a computer, which is coming up to warranty end, to inform the end user to prepare their machine for replacement. If there is a better way to do this please let me know.

 Hi All, I completed my Jamf 200 on July 2020, I didn't take a copy of it. Now I am unable to find it. Can anyone help me where to find it.

Hi!we are facing an issue with ARD that started some months ago, in details:- No issue with ARD MDM command to enable it- Admin login authentication go through- Observe and Control doesn't work, it loads a while and the following error appears: " Make sure the remote computer is available and the firewall is not blocking screen sharing"- In ARD app on "current application" I can see that it shows the APP in use- TCP/UDP ports are all opened. From networks logs we can see that target device is not responding- ARD app release is the latest one 3.9.6- ARD agent is 3.9.8 - Tested on Ventura 13.2.1 / 13.3 / 13.3.1 Does anyone facing the same issue? Any workaround? Thanks! Daniele 

We are an MSP that specializes in macOS and iOS, with macOS devices making up about 50% of total computers we support. Many are in Jamf Pro (separate cloud instances), and of those, the majority are ADE (vs. manually enrolled). All computers have an RMM agent installed, and we are looking to move to a different RMM platform. It would be helpful to know which computers have Jamf via ADE and which do not so we can anticipate which users will have permissions issues due to lack of profile-based PPPC control. Does anyone know of an option within the Profiles command that can identify the presence of the non-removable Jamf "MDM Profile" on a Mac? When I run the "sudo profiles -P" command, I can see all installed profiles. Some have human readable names, while others are just named with GUIDs. Nothing jumps out as the profile I need to verify. If one of the GUID entries is indeed the "MDM Profile" profile, then I'm going to assume the GUID is unique to each Jamf instance.I'm trying to a

Hello, After enrolling the device in pre-stage the username & email are remaining blank.We are using google cloud identity LDAP.Looking forward to feedback. Best Regards,Makarand

Been looking for an EA to pull the last 5 reasons given by a user for account elevation from /private/var/log/privileges.log for awhile, didn't quite have the bash savvy to get exactly what I wanted. Last night I decided to give ChatGPT a shot. First I gave it a summary of what I wanted and told it to hold so I could give it more specific info. I fed it the documentation link for Extension Attributes in the Jamf Pro Admin guide, then provided a sample privileges.log file. After a bit of messing around with the results given by ChatGPT and prompting it to refine its response further it spit out something workable. Here's the final result in Jamf, along with the Extension Attribute script (in zsh).    #!/bin/zsh # ########################################################## # # Jamf Pro Extension Attribute # Last 5 Privileges.app requests.sh # Version 1.0 # 3.29.2023 # # This script records the last 5 reasons an end user needs to request local admin right

I have a "1 Extension Attribute Error" error on Google Drive File Stream patch management template, a bit like this error.I'm not sure what is going wrong, I see no logs.But I do have one laptop which has the latest version installed. In patch management, it is reported as Unknown. But when I run the script manually, it reports the correct version. Other patch management items have no problems.Now I noticed it has the old name (with File Stream). So I wanted to add the package "Google Drive", but when I press on the (+) button, I get a "404 Page Not Found" error. When I want to add another package (for example "Textmate"), it just works.What is the problem? Do I first have to remove the "Google Drive File Stream" package, before adding the new one? I'm afraid it will still fail... Also, how can I see what's going on. It seems very magical to me right now...  

I am trying to add JAMF script variables to my script, the scripts function is to check user home folders and if it had not been modified in an X amount of days it will delete the folder. I want to be able to change the amount of days depending on the deployment location. Would I simply just need to add $4 to the area where the variable would be input?#!/bin/bash# Set the number of days to 90days=90 (<----- This would just change to days=$4, then in JAMF I would set the amount of days in the first variable section. # Set the excluded usersexcluded_users=("macadmin" "shared" "Shared" "admin")# Get current date in secondsnow=$(date +%s)# Iterate over all users home folderfor dir in /Users/*; do# Check if the folder is a directory and not one of the excluded usersif [ -d "$dir" ] && [[ ! " ${excluded_users[@]} " =~ " $(basename "$dir") " ]]; then# Get the last modified date of the folderlast_modified=$(stat -f "%m" "$dir")# Calculate the difference between the last mo

Hello,I have a user whose computer has "Chrome" and "Slack" listed as separate storage drives. While both Chrome and Slack on running on their machine, Jamf is continuing to list their computer as "unencrypted" since neither the Chrome or Slack "drives" are encrypted. They have also complained that when they update their computer, they have to "reinstall" Chrome and Slack, though I am not sure how relevant that fact is. In any case, this is the only user who has this problem, and we have the same configuration profile running on the same model with different employees without this issue. I'm not even sure how I would recreate this problem on a separate machine, so any advice is appreciated.

Hello!In the Jamf Connect documentation it suggests that some scenarios require scoping a config profile solely during enrollment:Best Practice: Jamf recommends maintaining settings that only should be used during enrollment in a separate configuration profile. This allows you to remove the settings after enrollment without impacting other Jamf Connect settings.My question is this:What's the best way to scope machines into a config profile only during enrollment then immediately remove them from that after? Background: we use prestage enrollments and have an "enrollment only" configuration profile for the Notify Screen to install necessary apps, but that requires resetting the authchanger. We do so in the config profile, but one it's enrolled we no longer want to run the config profile with that authchanger reset. Thank you!

My Big Sur workflow was great.Erase and Reinstall the OS either using Recovery or StartOSInstall, leave it to do it's thing, restart at the end of the build script and users can log in.I tried the same process on Monterey and every time it restarts after installing its config profiles.I had to do:  sudo profiles renew -type enrollment sudo jamf policy  for the EnrolmentComplete triggered policy to kick in.Has anyone got a fix for this?

I have an Extension Attribute that reports back the expiration date of a PIV Authentication certificate on a Yubikey.When inventory runs and a user has their Yubikey inserted it reports <result>YYYY-MM-DD</result>.This works very well. If the user does not have a Yubikey inserted when inventory runs the EA does not report any result back to the server.My issue is the EA then ends up being blank. I would prefer it to keep the old results if no result was reported.Is this the expected behavior?

Jamf Cloud: I deleted the ipad object out of Jamf but the actual ipad still has mdm profiles on it. How do I add it back to Jamf? I don't know the activation code so I don't want to wipe it.

Hello all,Question, Has anyone come across JAMF Pro blocking some system settings options such as User Groups, Network etc? If so, how do I remove it and still have MDM installed? Once I removed JAMFcompletely from the PROFILES option in System Settings, everything comes back normally. Here's a screenshot of the block. - Thanks.

Hi all,For a bit now our users have noticed that if they use chrome, they get prompted to sign into our various O365 logins over and over if they close their tab or window.   This doesnt happen if they "sign into google" and turn on syncing.  However anyone using a guest or unnamed profile in google loses their authentication once the window is closed.   We are in the process of requiring MFA for all our staff however anyone with google is getting prompted over and over to sign in and get their phone pin, since each time they close their window it requires re logging in. This does not happen in Safari or Firefox, where once signed in, and you close a window, it remembers that you signed in. I started playing with plists for chrome to see if we could get this to work as it used to and figured it was something with cookies or related to guest browsing and I have yet to find the right plist to make this work. Anyone else seeing this?

Hey everyone!We are relatively new to Jamf School and iPads in general for our district!We come from a Chrome environment so of course there are some abilities we had with GAC that we would like to emulate with Jamf School! Are we are to lock Chrome or Safari to only sign-in/authenticate with our @Domain accounts? Our fear is that students will just be able to login to any personal account and message/interact with each other that way (our admin is very pro-restricting student's virtual communication platforms).I appreciate any and all help!Thanks all,

I know you can skip different setup assistant windows, but we still get an Analytics window that we'd like to hide.https://developer.apple.com/documentation/devicemanagement/setupassistantHas anyone come up with a way to hide the Analytics window?

Oops!  I deleted a computer from Jamf Pro by mistake.  The computer is still being used (I thought it was out of service).  What do I do to get it back into Jamf and managed?  I tried to manually enroll it but the MDM Profile that gets downloaded to the machine isn't fails to install ("New profile does not meet criteria to replace existing profile.")Help!Thanks! --Jeff

Hey all. I'm still fairly new to all this. I've been trying this for a couple of days now, and I cannot seem to get the proper permissions for AdminByRequest to work. Per this article, I need to allow SystemFilesAllAccess for ABR. I've been using PPPC Utility to created the profile, and I have tried a few different combinations of settings, but none of them have worked. I know it will not show in the Security settings on the Mac, but in profiles, my PPPC is there, and it still not working. I've uninstalled and reinstalled the app with the profile applied, still nothing.Has anyone had any experience like this, whether with ABR specifically, or another app, that could give me some pointers? This has all been on a singular test computer on Monterey, and I need to try to deploy this PPPC to about 80 or so machines, so the manual route is not really an option. Thanks,C

We are trying to deploy the Forescout connector on a Mac machine through a Jamf policy, which requires us to deploy a .pkg file, a script, and most importantly, the folder containing the Forescout agent on the desktop. This folder includes the launch daemon and a few other commands. However, we are encountering errors and are not able to successfully deploy the folder. Can you advise us on how to proceed?