Hello,I am very stupid because this topic has been talked earlier, but I haven't been able to find it. My question is: Can you run two MDM solutions at the same time? I have both MS Intune and JamF available to me and I was wondering if it was possible? I don't think it is, but I want to make sure. TellCulvers

Happy Friday everyone! I'm sure that I'm probably missing something very obvious to the right person... My experience with bash is currently limited (hopefully not for too long!). I'm trying to mount an SMB share using the below script, there is more to the script, however I've removed it as I know the issue lies in this part.If I run the below locally on my machine replacing $3 with $USER the script works perfectly and the Apps share maps straight away. #!/bin/bash mkdir /Users/$3/Apps mount -t smbfs //userName:userPassword@myServer/Apps /Users/$3/Apps As soon as I deploy the above from the JSS and perform Sudo Jamf Policy on the targeted machine it creates the directory Apps and somewhat mounts the drive. The directory stays as just a folder and does not change to the intended SMB share, as soon as you click in it the folder then disappears and takes you up a level. If I run df in terminal you can see the SMB share is mapped to the folder created, run ls and you se

I have a new field tech whose LDAP account I need to add to several policy scopes.  The policies are scoped using Static User Groups, and up until today have never had any issues.I can add the tech's LDAP account to the JSS console (Settings/User accounts and groups) without issue, so I know the LDAP lookups are working as expected.  The tech has the same privilege set as all of my other field techs.I watched the tech log into the JSS console and self service app, so the LDAP account is active, they know their password and the login works.Our JSS is hosted in the cloud w/ Jamf Infrastructure Manager, which passes all communications tests, and we are using SSO with external 2fa, all of which works fine.What I cannot do, in any way, shape or form, is add the tech's LDAP account to a scope or a static group.When I try to add to a Static user group, I edit the group, go to "Assignments" tab, where I see a list of all users that can be added, enter their LDAP account to the search

I've created this script in an Extension attribute but it's not showing.#!/bin/bashecho "<result>$(system_profiler SPPowerDataType | grep "Maximum Capacity:" | sed 's/.*Maximum Capacity: //')</result>"exit 0Could someone see what's the issue?

Is it possible to deploy the youtube app but restrict its contents to certain channels. Would this be possible via plist? If so, anyone knows of Youtube's plist syntax?Tried the content filtering using safari. But even though I input a specific URL video link, I am still able to access the whole of youtube.com

Hello,I'd like to show the Data Disk Used in percentage on an EA so that I can extract a report with all my computers and how much percentage of our users are using their disk drive. I just can't find it in EA templates and the boot percentage is not what I want. Thanks

Good morning!I am trying to open up to view the contents (not install) of a pkg that is a part of the DEP process at my school. I downloaded the pkg (and cached it) from Jamf and I tried to Convert to Source using Composer but it fails. I have also tried using terminal using the 'pkgutil --expand' command and that fails as well. I also tried SuspiciousPackage app and that failed as well (The document “depnotify-with-installers.pkg” could not be opened. The item “depnotify-with-installers.pkg” is not a macOS Installer package, or has been corrupted or modified.).Any advice on how to view the contents would be great. I'm a semi-new Jamf Admin (6 months in this role) and I want to figure out what is being installed (this way I can edit it if need be).*I will add that I normally find cached pkgs in the Waiting Room folder and this time around I found it in Receipts (not sure if that matters).Thanks!  

Hi Community members,I am the IT and Apple Support Specialist for a high school with just under 900 students and have 300 classes in Apple School manager / Jamf School.Has anyone come across a way for me to view which teachers enabled restrictions on a particular student? Say a log of some sort like we have an audit log for changes made in Jamf School. Perhaps there is a way to do it through the API?I say this because there is often a case where several students come to me and says their apps are missing, so I remove teacher restrictions and they are back. This often occurs when a teacher forgets to leave a class and clear restrictions on either Jamf Teacher or Apple Classroom after their lesson ends. I need to check the logs and see whether it is any specific teacher that does this.

My company has been using Jamf Pro Cloud version since 2021 and I heard that every Jamf Pro Cloud version are entitle for 1 free sandbox environment.Is this true? If so, what is the process to set this one up?

Hi all,Is anyone know if we can retrieve the "enforcedSoftwareUpdateMinorOSDeferredInstallDelay" from the com.apple.applicationaccess? 

Hey y'all, a query for the hive mind. We've been running into users installing Awesome Screenshots (horrible name), which beacons out to websites tens of thousands of times a day. As you can imagine, InfoSec is not happy about it. I'm trying to find a way to do reporting to find out what extensions are installed on machines. I found that the extensions are all stored in the same folder: ~/Library/Application Support/Google/Chrome/Default/Extensions/ But the names of the folders with are just random strings of letters and numbers:external image link Within the folder is a manifest.json file, which does have the app name in it:external image link So I'm assuming there is some way to grab that and throw it into an extension attribute or something. I think the main problem would be navigating through those extension folders, or at least finding a way to translate those folders into extension names. Has anyone found a way to successfully report installed extension

Hi All,  I am trying to remove the phone icon and nothing is working.  This device does not have a SIM card, it uses Wifi only.  I have tried adding it to a Restrictions profile where I am removing all other system apps and it's the only icon that is not being hidden.  I am also applying a Home Screen layout and this icon is not one of the icons I wish to display in that policy.  What am I missing?Appreciate the help! 

I've been out of the Jamf loop for a little while in a company migration to Windows. Our parent company though wants to use our Jamf cloud to manage some Macs not setup in our DEP. It's about 150 machines and I know recently the Recon app was killed. So no QuickAdd packages or network scanners anymore from what I can tell. So I guess what I'm asking is, is the enrollment URL really the only way for Non-DEP machines to get enrolled? I'm sure I'm asking a dead horse question but couldn't find any comments in the forums. Thanks in advance for any ideas to make this more efficient than relying on users to enroll or bring in their machines one by one. 

Hello all, We have been having huge issues with the standard account; cannot update software(Chrome), cannot add personal network printers, cannot add WiFi, etc. So it was the consensus to promote the standard account to an Admin account. I am hoping there is an script to perform this very act, because updating 900+ devices is a little daunting. I see there is a script to demote and we have it in the wings for deployment should this entire Admin rights thing go South. I am no scripter, but know enough to follow through what will happen when things are run. So any and all help is appreciated.

I’m trying to enable lost mode and play sound on a group of iPads. I’ve found a way to enable lost mode, but I can’t figure out how to also send play sound command. xmlData="<mobile_device_command> <general> <command>EnableLostMode</command> <lost_mode_message>$lostModeMsg</lost_mode_message> <lost_mode_phone>$lostModePhone</lost_mode_phone> </general> <mobile_devices> <mobile_device> <id>$i</id> </mobile_device> </mobile_devices> </mobile_device_command> See here for full script: https://gist.github.com/talkingmoose/f44d0d87d08b48daa0e887a6239c1766

After consulting with Eset, I've written the below Extension Attribute to spit out the version of Eset Security installed. When I try that script in terminal I get the result: 6.7.654. When I create a smart group in Jamf with operator is and value 6.7.654 I don't see any results in the group. In Extension Attribute I've chosen: Data Type: String and Input Type: ScriptIn short, the script does work but Jamf doesn't like it as Extension Attribute. Any idea? The script is: !/bin/bash esets_scan="/Applications/ESET Endpoint Security.app/Contents/MacOS/esets_scan" if [[ -e "$esets_scan" ]]; then esetversion=$("$esets_scan" -v | awk '{ print $5 }') echo $esetversion exit 0else echo "Not Installed"fi exit 0

Is there a way we can query a computer for its locked or unlocked state? I'm familiar with endpoints to get the command status.../JSSResource/computerhistory/id/{id}/subset/commands/JSSResource/computercommands/name/DeviceLock...but neither of these tell me if the device has been unlocked after it was successfully locked

Hi All, Is anyone seeing issues with macOS Software Updates since 11.5? Specifically updates showing as not available when no deferral set and when showing available fail with "An error occurred while downloading the selected updates. Please check your internet connection and try again", in this instance only booting into safe mode resolves it. Thanks,Andy

I can see my managed preferences being targeted to the computers in their management tab but I can't find the preferences themselves anymore.

Hi all! We are looking for a way to reduce the sudo timeout period as recommended by the Center for Internet Security. The only solution we can find online is to manually edit with visudo and add: Defaults timestamp_timeout=0 However, we were hoping to script this task and not disable SIP if possible. Has anyone accomplished something like this or am I asking the impossible? Thanks,Jim

Hello friends, So we are a very small team and I am very new to this admin role and we are realizing that we should have done this a few months back, but didn't do enough research at the time. So, excuses aside, here is the issue. We had our users upgraded to Monterey prior to Ventura releasing. We've deferred the updates for Ventura (per the following posts) as we haven't had the time to properly test things in our infrastructure. We also had turned off our forced system update policy that ran updates weekly.https://community.jamf.com/t5/jamf-pro/ventura-will-be-released-as-a-quot-minor-quot-update-bug/td-p/276218https://community.jamf.com/t5/jamf-pro/macos-ventura-update-major-amp-minor-update-deferrals-oh-my/td-p/276347We're still not ready for Ventura (getting a few things resolved, but have only had a couple accidental test cases).So we are sitting at a place where most users are running Monterey between 12.3 and 12.6, so if we turn the updates back on, majority of them

I am piloting Jamf Connect with Google as our IdP for some students in K-12. (with the hope of also doing staff)Currently if they forget their password, we need to reset their Google password, and then, as admin reset the local password on their computer.This requires physically having access to their computers. There's almost no point to have Jamf Connect if a password reset requires local login to finalize. (Further, after this process, it always requires the "verify" step... I think that's a different issue, but now some students have to type their PWs twice to get in.)Is this everyone else's experience too?  Seems pretty untenable. What would people do with a globally disperse workforce where IT can't physically have access to the machine?)Would Azure or another IdP handle this better?

I feel like I'm missing something fundamental about plist files and I could use a little education. I understand plist files are basically settings files with key value pairs so you can save/push configurations for the system and apps. What I don't really understand is how you would determine what settings are supported? For example, if I want to allow Microsoft Teams access to screen recording for all users; how would I know what key:value pairs are? I found JAMF's privacy preferences control utility, but is that showing me every option? Is it up to an individual app to publish it's settings somewhere? Does Apple publish there's for Screen Recording for example? I can find lots of how-to's on creating/editing plist files, but I think I must be missing something fundamental.

Hey guys, I'm in the process of testing Jamf Connect, I noticed this as a sign-in option Would it be possible to remove it since no one will use it to sign in to their Mac!!? I couldn't find any related settings in our Azure AD. Thanks in advance 

HEy jamfnation we are having a major issue with clients not being able to mount the share 4 out of 5 times. I have been working with JAMF support and they thought it may be related to a patch but I removed that patch and I am still having issues. The system log on the client shows: Sep 18 11:03:40 ARNC02P904PFVH7 kernel[0]: smb2fs_smb_validate_neg_info: Server capabilities do not match Sep 18 11:03:40 ARNC02P904PFVH7 kernel[0]: smbfs_mount: smb2fs_smb_validate_neg_info failed 80 Sep 18 11:03:40 ARNC02P904PFVH7 mount_smbfs[81969]: smb_mount: mount failed to 10.40.34.26/CasperShareNBK, syserr = Authentication error Has anyone else run into this?