We've just completed our annual Apple GSX Certificate renewal.We got the new cert, converted it to a .p12, imported into Jamf, clicked 'Test', and got the 'A connection to the GSX Server was successful' result.When we run the GSX Lookup on all devices, though, 100% of our inventory returns as "Serial Numbers Not Found"This worked 2hrs ago on the old cert, so it seems to be a break between the cert and our GSX account.I'm trying to work this with Apple, but getting to anyone with GSX knowledge is pretty difficult.Apple's cert renewal instructions here: ( https://gsxapiut.apple.com/apidocs/ut/html/WSFaq.html ) have been wrong for 2+ years:"...The FQDN is a very important field and it's case sensitive. Please be sure to provide the following value for this field: For test environment CSR : Applecare-APP157-[SoldTo ID].Test.apple.com For production environment CSR : Applecare-APP157-[SoldTo ID].Prod.apple.com For example,if your soldTo is 0000012345, the value should be Applecare-APP157-0

Is there a way to suppress this notification in Patch Management of Jamf Pro?I've noticed this since the new UI update, but haven't gotten around to asking about it until now.It gets in the way of pressing the edit or save button in the bottom right corner.It says "Table preferences have been saved". 

On Friday I had my first new iPhone enroll in Jamf Pro. Friday night the user contacted me saying when he tries to restore his data from iCloud it wipes his phone but then it re-enrolls in Jamf Pro. Everything I have researched says restoring from iCloud or iTunes will wipe the phone. I asked at the Apple store but all they would say is bring in the two phones. Other than Airdrop which they said would not bring over his contacts, does Apple have a solution for selectively bringing data over? I am new to Jamf and Apple and this seems to be an Apple issue but I would imagine this is something the Jamf community has dealt with before. Any help would be appreciated.

Hi Everyone,We are currently having problems with trying to re-enroll older MAC computers using Mojave. We take the computers out of JAMF and Pre- Stage enrollments. We re-enroll the computers, but the policies get stuck. The computers show up in JAMF as the serial numbers but not as the computer name. We are able to see the JAMF certificate and MDM profile but then nothing else loads up, it is like the policies are stuck. Has anyone had issues with this? Thank you so much in advance!Joe

I am new to Jamf school and Apple Macbook. We recently upgraded our printers to Xerox Altalink C8155. I have downloaded the driver from the xerox website and uploaded the pkg to Jamf school. I can see that the app got installed. But the printers are still taking the generic printer driver and this resulted in users not getting the option to print back to back or some other useful features by xerox. Can some one please guide me on how to install the drivers correctly. Thanks

Trying to make the following TeamViewer Host Unsigned.mobileconfig file from the what I assume to be the plist text from the Jamf site: https://learn.jamf.com/bundle/jamf-pro-documentation-current/page/TeamViewer_Integration.htmlOnly the plist text is listed there, how would I copy that and create the .mobileconfig file?

Hello all,in the past weeks I've been looking at making our users MDM Capable on their computers to push user-level profiles. While it's still a work in progress, I've noticed a few weird results that I'd like to hear if the community understands what's going on.First, the user accounts are admins created by Jamf Connect during prestage enrollment. This is the initial reason why the accounts are not MDM Capable and that I'm trying to fix.After reading many threads, it would seem that using sudo /usr/bin/profiles renew -type enrollment is how many solved that. After trying, I find that the computer is no longer Managed by JSS and this happens on every computer I tried. Why does this happen ?Testing other options, I found that the Renew MDM Profile command from Jamf Pro Management also removes the management account. Leaving the Managed field of the computer empty. I don't understand why this happens.In the end, what worked so far is1. sudo /usr/bin/profiles renew -type enrollm

Hoping you can help but please keep it simple for me!!I have a number of iPads bought from a reseller who adds them to our Apple Business Manager (ABM) account and all good - I work with these just fine.Someone at work bought 2 iPads NOT through reseller so I have no option to have them added to ABM. You need to know I DO NOT Have a Mac so cannot use Apple Configurator software either.So what I did:1. On iPad I went to https://OURNAME/jamfcloud.com/enroll2. Logged into Jamf and added MDM Profile and CA Certificate (including going into settings to accept them)At this point the iPad should be fine. I can see it in JAMF Pro but the issue is it remains "Unsupervised" so I cannot push a Configuration Profile to it. It will however accept an App being pushed to it.What am i doing wrong to not have it supervised and configuration profile failing?With many thanks, Alan  

First time posting hear and very new to Jamf Pro.  We are using Jamf Pro in the cloud and I am trying to figure out how to get Ventura 13.3 deployed.  I have created a policy and configured the Software Updates to use Apples Software Update server and does not seem to work.  found another article that says download from Apple, use Composer to create a dmg file.  However it won't upload to Jamf Pro Cloud.  Get to 2% and stops.  I am probably doing something wrong, but thought I would ask for input from folks that have done this before.  We are still learning so will take whatever we can get!Mike

Team, is there a quick and easy way to export all recovery keys? Also, do we have the option to export this from smart group sorted details from Jamf Pro?

Does anyone have a script or something to remove Adobe Air from our Macs? Our past IT guy installed it on everyone's computer but we have no use for it anymore and I'd like to get rid of it. I haven't been able to find a script anywhere to uninstall Adobe Air.

Issue is, right now, prestage enrollment of iPads isn't working. The error I see in our Jamf cloud/Pro server logs is:2023-03-29 16:59:04,484 [ERROR] [duledPool-5] [ileAssignmentSynchronizer] - DeviceEnrollmentProgramException[responseCode=404, responseBody='PROFILE_NOT_FOUND', message='The DEP service reported an error.'] com.jamfsoftware.dep.comm.DeviceEnrollmentProgramException: The DEP service reported an error. at com.jamfsoftware.jss.objects.streamlinedenrollment.service.comm.DeviceEnrollmentProgramRequest.sendOneTime(DeviceEnrollmentProgramRequest.java:65) ~[classes/:?] at com.jamfsoftware.jss.objects.streamlinedenrollment.service.requests.AssignProfileRequest.send(AssignProfileRequest.java:34) ~[classes/:?] at com.jamfsoftware.jss.objects.streamlinedenrollment.service.requests.AssignProfileRequest.send(AssignProfileRequest.java:14) ~[classes/:?] at com.jamfsoftware.jss.objects.streamlinedenrollment.service.comm.DeviceEnrollmentProgramConnection.sendRequest(DeviceEnrollmentP

Hello,I noticed that the EA that Jamf provides for Firefox patch management is probably buggy. Does anyone know how to fix this? Unfortunately, it does not really show what error is here.Thanks in advance!

Hi,I forgot my Jamf Pro login password. How can I forget my password?Thanks,Trinh Tran

So none of our devices are prompting users to sync their passwords after they change it via IdP.  I checked the Jamf Connect configuration profile and it looks to have all the settings correct.  NetworkCheck is set to 15 and we have the Jamf Connect notification profile enabled under Settings>Computer Management>Security.Jamf Support told me it could be hidden behind the time and that i should click on it to look for the notification.  I had a device that updated the password days ago and when i click on the time there is no password notification there.Has anyone seen this?  Any way to force a password sync? EDIT - After messing around on my device right after posting this I have noticed that the Jamf Connect icon is not in my menu bar.  If i launch it and click Connect it then prompts me to sync the password.  Is there a way that I can have this app launch on boot and have it automatically logged into?

I configured the wonderful Support app today, and everything seems to be working the way I want it to, except for the custom logo I'd like to use (our institution's logo). I edited the image size down to 48x48, and put the file in the recommended location (/Library/Application Support/[our institution name]/[image file]), though the image will not appear in the Support menu on my test device. When I edit other features in the config profile, the changes take place almost immediately, but the logo has yet to change. Anybody familiar with deployment of this app have any pointers/ideas?

Lightspeed just released the newest version of filter agent that completely changes how it works based on Apple's system extensions. This is completely different from the way it worked before. If I were to update it via auto update it would give the users a number of permission prompts that they could decline. LS released some documentation for updating these permissions automatically via MDM but frankly the instructions are kind of confusing for a relative newb. Could one of you kind experts perhaps take a look at these instructions and boil down what I need to do? Thanks in advance!

Hi everyone, I am hoping someone might be able to help me out with an issue I just started running into. Also wondering if anyone else is having this problem.We have been using the built in "Software Updates" policy in Jamf for years now, and it has been working great for installing macOS updates for our end users. However, the last couple of months, something has changed where the policy no longer only installs security updates and feature updates for the current OS, but will force the device to upgrade to the latest macOS without any warning or prompts. This is problematic for us, as some of our users have software that has not been made compatible with macOS Ventura yet. The only way to downgrade from Ventura is to wipe the computer, so that becomes extremely time consuming and annoying for our users.Is this a bug with the Software Updates policy or is this now the intended design? If it is the latter, does anyone have a better way to run updates for the current OS the user is on, i

Hi,I try to install VPP apps on an iPad, but the following message appears: Device was busy. Will try again. It is the same with the automatic installation of the Self Service app. iPad : battery :more 90%unlocked, but temporary session onlyconnected on WiFi (Internet access ok) I try : Clear code : Bad requestSend blank notification -> nothing on the iPadRestart : work I don't see the problem. Thanks for your help.

Hello Community, At the moment we have 50 Macs. On all Macy, the user are local admin. On all Devices we have a local account with admin rights, too. Now we want to delete the local admin rights for all user. Only our local account geht local admin rights. My question is: Can every help me to delete the local admin rights with a script? That only our local admin get the admin rights? Many Thanks for help!Christian

Hi All,We suddenly have few Macs, after restart/shutdown, user not able to login to their account.All Macs are Filevault enable and users are default added into Filevault (we use AD – mobile account). Our local admin, is also Filevault user and disk owner. But we can’t even login as our local admin. It just will then show a black screen and then will loop back to the login page.We are able to temporarily fix this by reinstalling macOS (without erasing the disk).Has anyone experienced the same issue?There were no changes to any of our exsiting policies in JAMF.We are also using McAfee as our endpoint security, including the encryption as well.

I am looking for suggestions on the best way to disable the touch ID / fingerprint prompts that come up when a new user logs into a Mac for the first time.  This is specifically on an iMac with the new keyboards with the fingerprint reader, I'm not sure if this differs from the MacBook Pro so I thought I would mention that.

Hi all,  I am new to jamf and still understanding the intricacies with deploying config profiles using smart groups. I have a config profile being deployed to computers via a smart group.  The smart group is defined as computers that dont have the config profile installed.  Its been working well, but due to changes in the way we are installing a particular application,  I no longer want that config profile active in the environment for net new devices but I dont want the profile removed from the computers that already have it.  How would I go about doing this?   thanks

Hi, I'm new to Casper (hi) and I'm a bit confused about the Policy FUT and FEU options. Do I just use Composer to capture user-level preferences etc. from whatever account I'm logged into, then create a DMG from the result, or do I have to place user items in a particular place? Is it possible to mix user files and non-user in the same DMG? Sorry for the silly questions, but this doesn't seem to be covered in the Casper manual. Cheers, a|x

In the midst of testing and we have a Mac at the client site that was not properly assigned to a department when DEP enrollment completed (and the department being blank meant that the computer was out of scope). Since Enrollment is the only trigger, I'm trying to figure out another way to push all of the policies that should have fired under normal circumstances. Due to the lack of mass-editing functionality in Jamf, I'm not really excited about the thought of creating Self-service versions of the same policies or making dupe policies with only that machine in scope. Is there any non-destructive way to make JSS think that the device just completed enrollment so all of these policies will fire?