Hi All,I'm new to Jamf pro and heard about the re-enrollment. However, I got a question that if we delete the entry of the device rather than enabled the re-enrollment option. What makes the difference? Kindly help me to understand. Thanks.

Morning!I'm currently trialing Jamf School.  Want to test how to use Google authentication during enrollment.  I believe I have everything set up: Built Google API Console Project, created credentials, added redirect URIs, copy and saved client ID/secret, then added all that into Jamf School under Authentication method.On iPads I'm using for trial, I wiped and reset.  iPad went through enrollment easily enough.  But I expected to come up on a Google sign in page which needed authentication.  But nothing shows up.  Just normal enrollment steps.My questions - What should I be expecting?  How can I use Jamf School and Google in a 1-1 iPad setting? Thanks!- Kevin 

I am starting to use Self Service to push out Office Updates (primary concern), Flash player updates, run RUM to update CS 6 installs...pretty much all updates (even Apple Software Updates soon). I do this by promoting the updates through a series of smart groups. Is there any good way to notify a logged in user that they have new Self Service items waiting? So far I'm having no luck with scripting a decent solution.

I'm attempting to create a Smart Group for "desktop Macs." We have a number of different iMacs and minis in our environment. But it appears I have to choose from predefined models (e.g., "Model IS iMac Intel (21.5-Inch, Late 2015) OR Model IS iMac Intel (21.5-inch, Mid 2017)," etc., in order to start seeing the Smart Group get populated.I was hoping/expecting to be able to construct criteria such as "Model LIKE 'iMac' OR Model LIKE 'Macmini' OR Model Like 'MacPro'" since the official Model Identifiers under the hood all use such strings, and they're unique enough across product lines. That way it wouldn't matter what exact iMac or mini models I've got in our environment, and don't have to add new Model criteria when, say, the M3 minis start showing up at some point.I don't think I'm missing anything obvious, but it wouldn't be the first time something escaped my eye.

I'm trying to get a smart computer group running to check for Java/java version. I can't seem to get it working. I use the script below in an Extension Attribute and have the group set for "is not" Java 8 Update 131 build 11 Any ideas? #!/bin/sh version=`defaults read /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Info CFBundleShortVersionString` echo "$version"

Hi gang,I'm trying to accomplish two things with Self Service. One policy will open Google Drive (this I have working in my script) followed by launching the location in a new Finder window upon clicking (ie: //Users/$loggedInUser/Google\\ Drive/Shared\\ drives/) for when people tell me "they lost their Google Drive." This new finder window is the piece that is not working. My error says location does not exist even though it does. So sounds like a permissions error?For my next trick I want to have a policy that opens a PDF file stored on a shared Google Drive.I have tried lots of ways to script this which all work locally for me fine but not when calling the policy through JAMF. I'm thinking permissions here too. Maybe a PPPC that I need to allowed Files and Folders access to JAMF or something else?Thanks!

Both CIS and Tenable provide a configuration profile method to undo any hot corner set to disable screen saver.CIS uses <≠6>Tenable uses <!=6>Neither seem to work. Anyone have any luck with this?

hi all,Jamf just spin off 1 free dev sandbox for me and i am looking to copy everything from my production jamf pro cloud to this cloud dev sandbox using jamf migrator. I am new to github - so can anyone help me on how to use Jamf Migrator in github (https://github.com/jamf/JamfMigrator)?I download the zip code and extract it but could not find any apps inside

tl;dr: I want to write a script to monitor the log JAMF generates when executing a policy.We are deploying macOS updates by pushing the installer version we want down, then executing "/Applications/Install macOS Monterey.app/Contents/Resources/startosinstall" --agreetolicense in the Files & Processes policy module. The problem with this method is that there is no feedback shown to the user to provide the status/progress. I'm going to write a script to use in combination with Octory & octory-notifier to display the current progress. I'd like to use the policy log output as it is generated, and monitor it with less -f -n0|grep... to trigger whatever update I want in Octory.Is it possible to monitor the policy log as it's generated?

Hello,Can anyone get Google Chrome to install from the Jamf App Catalog? I have three different Macs, and it doesn't work on any of them. I get the error "Unqualified for App Installer" on all three. I am deploying Microsoft Teams the same way, which works perfectly without any issues. I've tried many things and continue to get the same error. Thanks in advance for any help!Steve

In the olden days (Catalina and prior) we used the Software Update option to let users install any Apple software updates available (this doesn't include upgrades like 10.15 to 11.x, but just 10.15.x to 10.15.x+). But obviously this doesn't work now with Monterey (apparently).I'm aware of configuration policies to force updates down onto machines, but we can't do that. We're a 24/7 organization with users in every time zone, and many do not have Silicon Valley quality internet (literally leasing lines from sheep herders in some countries or using mobile satellite terminals with bandwidth measure in KB not MB or GB). So we've trained the users to run the update regularly from our self service portal.I've tried using the Files and Processes with... softwareupdate -iaR...but that doesn't even seem to work for Monterey.Any suggestions? Can't use a caching server, as sometimes these are the only users of ours in a location. Maybe a policy to cache the update and then install but they s

Hello Everyone,We have a department paying for a language interpretation service that comes with a corresponding iOS app (LanguageLine Insight). Currently we have the iOS app set to automatically install on all devices for that department, and if anyone in that department wants to use the app they must contact the department administrator for the authentication (license) code. They chose not to have us configure the auth code into the app during deployment for unknown reasons.Other departments have shown interest in this app so we are now looking at purchasing a site license for everyone to use. In order to facilitate easier billing for each department, the company is going to provide unique authentication codes for each department. The department heads however have shown interest in having the authentication codes pushed out with the app.The app itself does not support this feature. It supports a single authentication code during deployment only. My question is, can I simply add multi

I am setting up Nudge to be deployed via the Jamf App Catalog to facilitate keeping it up to date, but it does not appear to be installing the LaunchAgent even though the listing says it will 1) is this (or should it even be) the intended behavior? 2) Who manages the Jamf App Catalog entries?  Honestly, I think having a separate Nudge Launch Agent in the App Catalog may be better (in order to Balance the ease of Auto-Updates and deployments vs managing the Agent separately if that is also wanted) 

I have been trying to get a script working that will run jamf Helper and if the user agrees to the upgrade it will open Self Service at the policy and either view or install the app. So far I have the below which works. #!/bin/zsh ### msg="$4 $singleApp " singleApp="$5" jamfHelper="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" currentuser=$(stat -f "%Su" /dev/console) policyid="$6" action="$7" timeout="$8" title="Application Update" iconLoc="/private/var/tva/casper/scripts/mickey.png" userResponse=`$jamfHelper -windowType utility -title "$title" -description "$msg" -icon $iconLoc -button1 "Dismiss" -button2 "Upgrade Now" -defaultButton 0 -cancelButton 1 -countdown $timeout -timeout $timeout` #Self Service = 2 #OK = 0 if [[ $userResponse = "2" ]]; then su "$currentuser&

I'm trying to automate our deployment process using Jira webhooks and the Jamf API and webhooks.I want to generate a unique invitation URL when a user is added using our existing Jira workflow.Jira (fully approved) > Webhook to cloud function > Call Jamf API computerinvitations and send to user > Jamf webhook on computer added to site > cloud function to complete user setup. The docs for the computerinvitations endpoint are sparse (https://developer.jamf.com/jamf-pro/reference/computerinvitations). My particular question is related to the XML payload i need to pass in the request body. There is a sample in the docs, however I'm wondering what of this sample is required/mandatory and what is optional?For instance the SSH user/password and some other details are set at the org level in settings in "User-initiated enrollment". Also when setting the site in the XML payload, the invitation info in the portal does not show the site i set in the payload. Any help is appr

Since I migrated Jamf to a Windows 2019 server two weeks ago, I have been troubleshooting the primary distribution point. The distribution point and jamf server are running on the same VM. I have tried and failed with https, probably because of the same root cause... so I am trying to simplify the issue by first troubleshooting the SMB dist point problem.I am able to mount the share both from Windows and Mac clients using the jamf service accounts. I have been able to validate that the accounts work as-should... one read-only, the other read-write. I don't know what the jamf binary and jamf admin do differently to mount the distribution point, but both fail without any helpful messages.I'm wondering if any of you have had a similar experience, and whether you have been able to locate your root cause and resolve. I have a packet capture out to Jamf support right now. I have been working with them for two weeks without resolution. I just re-built my Jamf server a second time with the sam

Hello,I wanted to install Freeform on our iPad, but unfortunately I can't find the app at Apple School Manager.What can I do?Best Regards,Ralph

Hello, recently I've been asked to take over Jamf due to losing our Jamf admin at my work.I already have a little experience with Linux and Bash scripting but the administration of the tool is what I need to learn.Any suggestions on what resources would help me learn Jamf, outside of Jamf themselves?

HelloI want to pass a multiline description as a parameter from the policy to a script.The script is using the jamfHelper app. How can I define a manual line break in the description parameter? btw, is there a way to get the policy name or id to a script? thanks

Hello! I am trying to create a script that would remove certain lines/strings from a .txt file. I have tried: sed "/$String/ d" File.txtBut had no luck, any thoughts or tips? 

Hi, I have an issue with one my macbooks. It is not checking in with Jamf since a week after it was enrolled. I’ve run the following commands on the affected macbook. Sudo Jamf ReconSudo Jamf policySudo Jamf checkJSSConecction   These haven’t fixed the issue. The macbook was enrolled by user-initiated enrolment by going to our server url /enroll Do you know what else I can do to resolve this issue thanks

EDIT: Removing the usual rant, worked with a Wacom dev team contact, verified these settings work with Monterey on Intel and M1:Codesign commands, to gather the info needed for the PPPC configuration profile:$ codesign -dr - /Applications/Wacom\\ Tablet.localized/Wacom\\ Desktop\\ Center.app Executable=/Applications/Wacom Tablet.localized/Wacom Desktop Center.app/Contents/MacOS/Wacom Desktop Centerdesignated => anchor apple generic and identifier "com.wacom.Wacom-Desktop-Center" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EG27766DY7)$ codesign -dr - /Applications/Wacom\\ Tablet.localized/Wacom\\ Display\\ Settings.app/Executable=/Applications/Wacom Tablet.localized/Wacom Display Settings.app/Contents/MacOS/Wacom Display Settingsdesignated => anchor apple generic and identifier "com.wacom.Wacom-Di

I have been using the erase-install.pkg successfully for some time, placing it within Self-Sevice and allowing users to install at their convenience. However, with one user, I have run into an issue where is appears that the step of grabbing the latest installer is failing.Background:This particular user attempted to install Ventura on their own through Software Update within System Preferences. It looks like the installer was downloaded, however they were blocked when they reached the prompt requiring an administrator to allow the installation.I directed them to Self Service where the erase-install.pkg is loaded (28.0). The attempt to install, the progress wheel begins to spin for a bit, stops, and nothing is installed.LogTaking a look at the applications installed on this user's machine, it looks like they have an older version of the installer present (Install macOS Ventura.app 18.0.02) likely from when the first attempted their own update. The script sees a newer version,

I know this has been asked many times, but I can't seem to find a specific script I can use in a policy to demote a specific user from admin to standard.  All our accounts are local accounts.  We have been doing some auditing and see too many admin accounts out there and are targeting specific users on specific remote/off site Macs.  I have seen scripts that target all users except "admin123" and demote everyone else but that admin account.  I need to specifically target a user by account name.  I am not a good at scripting, which I why I am asking for help.  Appreciate any feedback or suggestions.Thank You.

Just checking if anyone might help me find what I am overlooking.We got a new Cloud-instance and the migration is done. I would like to populate/edit the computer name field and has done so with MUT on other JAMF instances. But I´m getting a 401 error. The data loads in MUT and everything looks fine but when submitting the data to Cloud the log shows this and just runs threw the file without any PUT being set.  </html> 2023-02-23 12:36:03 [INFO ]: Submitting a PUT to https://xxx.jamfcloud.com/JSSResource/computers/serialnumber/xxx 2023-02-23 12:36:03 [ERROR ]: Failed PUT. 401. 2023-02-23 12:36:03 [ERROR ]: <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Unauthorized</p> <p>The request requires user authentication</p> <p>You can get technical details <a href="http://www.w3.org/Protocols/rfc2616