What I want to achieve: Enroll AppleTV 4ks (with only HDMI port) in Jamf School and add them to ASM via Configurator 2. My Steps so far: Followed the Apple documentation: https://support.apple.com/en-au/guide/apple-configurator-2/cada1ba9dab1/mac Renamed my Phone Hotspot to "Apple Store" (no Password) and the Apple TV and my Mac with Configurator are both connected to the network (both devices connected with some data traffic) AppleTV does not show under paired devices This AppleTV is new and has never been configured (Thats why I used the free "Apple Store" Wifi Trick) Other devices, including other Apple TVs with USB Port show under Paired devices in the same Wifi Additional Question: Is it even possible to enroll an AppleTV without a USB Port to ASM + Jamf School.I rechieved a Tipp, that it is only possible when the AppleTV has never been configured. The Wifi Pairing with the older A.TVs only worked, because I went to the settings of the "Test-AppleTVs" and entered a code.

Hi,so in a couple of weeks Google will shut down basic auth for gmail SMTP (Transition from less secure apps to OAuth ).As this is how we (and probably many other Jamf Pro customers) set up our Jamf Pro in the cloud to send us notification mails, we are now strugeling to find a way for the future.Has anyone (without an other mail server besides Google) found a solution jet?Or has anyone heard of OAuth support for Jamf Pro smtp settings?Kind regards, Matthias

We have a little under 200 Departments in Azure AD. I would like a bulk way of adding these to Jamf under Settings - Network - Departments.  Don't tell me I have to add them manually, It is unacceptable in this day and age that you have to add a field one by one. Is this something Jamf Support can import on the back end?  I can't believe there isn't an import button after using Jamf for 6 years now... I see an export button, gee thanks! Jamf is great but this was just forgotten for some reason :-(

Good afternoon,I need to deploy Blender to a couple of computer labs.  Since its a drag and drop application, how do I prep this for deployment without a package?

Hey everyone Since a couple of Sequoia releases the version of Safari is not being updated on our Macbooks !  As example this morning I've updated my (enrolled) machine to Sequoia 18.4 but my Safari remains on version 18.2 (19620.1.16.111.6, 19620). Of 88 devices (all up to date with macOS -> 15.3.2) 77 devices only have Safari in version 18.2 ! softwareupdate -l doesn't show any available updates. Does anyone else have seen this behavior ?

Has anyone else had issues with a very slow to load dashboard with Jamf Pro 11, nothing I seem to do improves the load time as well as information that was present before, like build number etc... are all missing, which is fine, but it does make it give you less information and with slow load times it's just very cumbersome to use now.Any potential fixes for this, cleared cache, incognito, different browsers, no hardware acceleration, different OS, nothing seems to work on load times.

Hello! At the school where I work we are planning to convert the mobile user accounts (connected to AD) to local user accounts, and make them admins.I saw the fantastic script on rtrouton's GitHub. I tested it on a test machine and works like a charm, though the issue I have is that it asks for user input, and trying to push it via policy in Jamf, it simply waits. So the question is: is there a way for me to achieve this via Jamf Pro, without the use of Jamf Connect (we currently don't have it)? Thank you

I created a script that prompts users to run the latest macOS update. The script works perfectly when run through a policy, so there are no issues with the overal functionality of the script. The policy is scoped only to Macs that are not yet running macOS 15.4. We have not decided to allow updates to 15.4.1 just yet. I noticed that the policy ran on a Mac running macOS 15.4. It's likely that this Mac had not yet ran a current inventory that would have put it in the macOS 15.4 smart group, which would have excluded it from running the policy. I decided to add a function to the script to check the current installed macOS and then compare it to the required macOS version. If the Mac is already running 15.4 or higher, I want the script to exit without doing anything. The idea is to run this function before doing anything else. If I fill in "15" for "reqosMajor" and "4" for "reqosMinor", this works perfectly. I put this function into a script by itself to test. Each time the function runs

  Hi everyone,Has anyone recently tried using the softwareupdate --fetch-full-installer --full-installer-version 15.4 command—either directly or through a Jamf policy? This applies to any version, not just 15.4. I tried running it earlier today and consistently got the error: “Install failed with error: Update not found.” I’m not sure if Apple has changed something behind the scenes, but it doesn’t seem to work anymore. I came across this recent discussion where someone else ran into the same issue:https://discussions.apple.com/thread/256042015?sortBy=rank

Hey Jamf Nation, I'm currently trying to uninstall Cortex XDR from company devices, but I'm encountering an error that says "Uninstaller not found." The uninstaller is located in the folder '/Library/Application Support/PaloAltoNetworks/Traps/bin/'. Do you have any recommendations or suggestions? Here is my script for the uninstallation: #!/bin/bash # Set your master key here MASTER_KEY="master-key-here"   # Path to the uninstaller app UNINSTALLER_APP="/Library/Application\\ Support/PaloAltoNetworks/Traps/bin"   # Check if the uninstaller exists if [ ! -d "$UNINSTALLER_APP" ]; then   echo "Uninstaller not found at $UNINSTALLER_APP"   exit 1 fi   # Launch the uninstaller and enter the tamper protection key osascript <<EOF tell application "$UNINSTALLER_APP" activate end tell   delay 2   tell application "System Events" tell process "Cortex XDR Uninstaller" repeat until exists window 1 delay 1 end repeat   set frontmost to true  

Curious if anyone has used Jamf to install the ServiceNow Agent Client Connector for macOS.Per this document, there are 2 installation methods:https://docs.servicenow.com/bundle/tokyo-it-operations-management/page/product/agent-client-collector/concept/acc-install-mac-os.htmlOne is a simple command line install that references back to the SN Server (notably, the SN "mid-server") to get the installation packages and such.The other is a more manual install that requires downloading packages and configuring connections. Has anyone done this?  If so, which method did you use?  Any gotcha's to look out for? Background here is that we are currently using the ServiceNow Service Graph Connector to get data from Jamf to the ServiceNow CMDB, however SGC has been getting more unreliable.  It appears ServiceNow is applying fewer resources to SGC than in the past and the product is not keeping up with Jamf or even other SN products.  ThanksPhil

Hello Everyone,    I am looking for some assistance with an issue that I am wondering if anyone else has ran into. I have JAMF as our MDM for MacOS.  I am moving towards MS Intune for our Windows endpoints. Currently I have JAMF setup as a Proxy to deploy SCEP certs to our Macs. This was done using Entra ID App Proxy with a Private Network connector.  This works great.  Now for the problem...  I want to setup Intune to deploy certs to our Windows endpoints but it fails unless the "PFX Certificate Connector" is installed.  When that gets installed, it highjacks the SCEP URL and blocks everything not coming from Intune.   Essentially I can only have one or the other.  JAMF or Intune.  Has anyone got both of these working at the same time?      Thanks in Advance for any help.

Hello, I am sorry to bother everyone on this matter, but I have been working on an issue for a week and I haven't been able to find a solution to my problem.I can feel I am not far, but there is one last thing in my way which prevent me from moving forward. To make it short, we are about to push Sierra upgrade on all Mac using LANDesk (Ivanti). So far everything works well. I was able to write a script to bypass FV2, I also wrote a script which force quit all the Application in order to prevent a restart. But the last scenario that I am working on and which I am struggling is to Force log out any active user in a Mac except the current user. Using the command line sudo kill <pid> With this command, I was able to force logout an active user of a test Mac, but to do so, I had to find the PID.Now the difficulty is that in my company, we have many users, and I can't find the PID for each user on each computer manually.So I need to write a script which will find the PID of all

Our company is moving to Freshservice. Working on a policy to push the Freshservice agent to all our Macs. The Agnet is a pkg file and that installs fine but I can't figure out how to make it reference the json file for the registration key and account info. I tried using Composer to create a custom pkg but it flat out doesn't work. Any assistance would be appreciated.

Hey everyone, It's been awhile since I have done anything in Jamf Pro and honestly I am more of a sccm/intune engineer.  I say that because I recently deployed a registry key on all windows machines to greyout the option to enable or disable syncing on a onedrive.  My leadership has ask me to force all users to enable syncing their documents, pictures and desktop as seen in the picture.  I have successfully deployed this to all windows workstations.  Does anyone know how to do this on macOS? See the example below. 

⚠️⚠️ Save the date! ⚠️⚠️ We're still finalizing the agenda, but block Wednesday May 7th between 5:00 PM and 9:00 PM in your agenda. Because that's when we're having a Benelux Apple Admins meeting! This time it's taking place at Jamf's new office in Amsterdam, and they're also sponsoring the food and drinks. ps, if you want to present, send me a DM, always looking for speakers!! See you soon!

We have one user with a Macbook Pro M1 Laptop. Big Sur is installed on the machine and the logged in user is a Mobile Account and has admin rights. File vault 2 is also enabled.Deployment was some month ago and everything worked fine. Two days ago the user approached me as he was not able to login with his account credentials at home. He was in the office yesterday and after I logged in with my local admin account everything was fine and he could work. So told him to also to update his Big Sur installation from 11.2.x to the latest version 11.5.2. But as he tried to enter his password the following screen states that Authentication is disabled.I grabbed this screenshot from the internet cause our dialogue is in German.Anybody have seen this? Where does this come from and how can we fix this? I would greatly appreciate your help.Thanks

Our original Jamf Pro URL is mdm.dpmhome.com, but now it's failed to use. BTW, I have to use dpmhome.jamfcloud.com for access after your cloud service going back recovered, please let us know how can I use back mdm.dpmhome.com, thank you

Hi, new Jamf admin and not very knowledgeable about the inner workings of SSO.  I have configured SSO to our Entra ID domain and the web log into Jamf Pro and Account and no issues with log in with my account or a test account. I have been able to have devices enrolled successfully when the device (iOS only) is in ABM and have moved on to set up User Self Enrollment.   When the test user account, goes to register, at: domain.jamfcloud.com/enroll, the user is directed to the Microsoft log in.  After the credential are entered the process fails with the error : "Sorry, but we're having trouble signing you in" message with the AADSTS650056 error.  I've found a few suggestions here on JamfNation, but they haven't resolved the issue. SSO Azure AD - Misconfigured application  Cloud Identity providers has been set up and tested successfully redid the MS Application set up ensured: Jamf Pro > Settings > System > Single Sign On > Enable Singl

This one is for all of those wanting to issue the .p12 certificate to computers via Jamf Pro for Google LDAP Authentication with Jamf Connect. I've recently performed an integration for a customer with Jamf Connect and their G-Suite tenant following the article provided here: https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/Integrating_with_Google_Identity.html and found that when attempting to issue the certificate via a configuration profile, I would get the error "the certificate could not be verified (authentication error)" I ended up going down a long rabbit hole of troubleshooting that ended with having me attempt to install the certificate manually, which lead me to find that the password I created wasn't being accepted within keychain access.This lead me to the following article going over an open issue with OpenSSL 3.x and it's deciphering issues:https://stackoverflow.com/questions/70431528/mac-verification-failed-during-pkcs12-import-w

Hey Everyone, I have been battling this issue for quite some time and have done rigorous testing but have sincerely hit a wall with this issue. My organization is prepping to remove Administrator access from all users on our macOS systems, this requires them all to be converted to a Standard user. (We have a "MakeMeAnAdmin" script in place in JSS we plan to utilize) MacOS: 14.3.1Jamf Connect: 2.32.0 We use Jamf Connect with Azure/EntraID so users can authenticate on login, we have the app roles setup for the app registration in Azure with two groups, MacUserAdmin-Entra & MacUserStandard-Entra with the correct roles tied to each (Administrator & Standard) The Problem:Whenever a user is moved into the group tied to the STANDARD role in Azure and attempts to login to Jamf Connect on one of our Macs they can enter the O365 email, PW, verify 2FA, but then hit a "Yellow Exclamation Point" box with simply an "Okay" button. Once you click "Okay" you are kicked back

Hi, I am trying to find all installed Apps from the Mac App Store which have not been purchased through the VPP/Self Service. This is what I got with the help of an older Script from Craig Lindsey #!/bin/bash # JAMF Extension Attribute that finds any MAS apps # that were NOT purchased through VPP # Based on Script from: Craig Lindsey for Starz 2017-2-10 checkMD=$(mdfind -onlyin /Applications/ 'kMDItemAppStoreReceiptIsVPPLicensed == "0"') #echo "### checkMD - $checkMD" if [ "$checkMD" = "" ] then echo "<result>Not Found</result>" exit 0 fi result="" mdfind -onlyin /Applications/ 'kMDItemAppStoreReceiptIsVPPLicensed == "0"' | while read VPPApp do AppName=$( echo "$VPPApp" | awk -F'/' '{print $NF}' | sed -e 's/^"//' -e 's/"$//') result+="$AppName" echo "### Result - $result" done echo -e "### Result-TEST - $result" #echo -e "<result>$result</result>" exit 0   And this is the Result I get ### Result - Push Diagnostics.app ### Result - Push

Hello,   I am currently having an issue with installing Symantec on any MAC device (does not matter the OS). When running the policy, I get an error message: Installing SEPRemote v.14.3.5055.3000.pkg... Installation failed. The installer reported: installer: Package name is SEPRemote v.14.3.5055.3000installer: Installing at base path / installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An error occurred while running scripts from the package “SEPRemote v.14.3.5055.3000.pkg”.) I assume this has something to do with the package but this just happened out of no where so I am confused on what the issue on/ where to get a new package. Any ideas?

I'm fairly sure this isnt possible but not able to find any documentation backing it up. Is it possible to block the phone app on iPhones? We have no cellular service and I have tried sending a "some apps not allowed" config blocking the phone. But the device remains able to call 911 services. Can the phone app be completely disabled and blocked?

Hi all! recently arrived to Apple management and I've got a task pending to fix: to setup two environment variables necessary for one GUI application.I can setup them over a plist file stored in /Library/LaunchAgents, but same plist file doesn't work loading it as a Configuration Profile from Jamf Pro. If I look for loaded profiles, it appears from Jamf as well as from terminal typing 'profiles list -all', but it doesn't work. Other plist files launched from Jamf are working properly but no for setting environment variables.Could someone to assist on this?Thanks a lot in advance