Dear Jamf experts,I need your support to get my on-prem Jamf Pro infrastructure correctly setup.I have Two windows 2022 server installed with Tomcat web app  for Jamf Pro as a child node ( cluster ) behind load balancer and one Server with Jamf Pro and Jamf database as a primary server (Tomcat & MySQL ) and one more windows server which has Jamf Pro Database ( mySQL). All three servers are in cluster with memcached installed on ubuntu. On load balancer we have placed child node behind that and I have used public trusted SSL on load balancer to offload encrypted traffic, I have used publicly resolvable DNS name on load balancer ( like mdm.public.com ) but I have used diffenrent Jamf Pro Url on Jamf Pro setting under global setting like (mdm.private.com). and used Jamf Pro CA signed SSL for Primary server with CN Name mdm.private.com My issues are two.1- I am not able to enroll any device no matter I am in public network or private network2- I am not able to login in Jamf Pro co

Managing Labs devices in a university environment. Looking at ways to provide remote support and access devices when I am working offsite.  Does Jamf Remote Assist work? I think I have everything configured correctly, but thus far haven't been able to establish a connection to any devices. Before I go to our cyber/infrastructure team to troubleshoot, does anyone use JRA, and is it stable enough to rely upon as the sole Remote Access system?   

Hey All,Starting a few days ago I was alerted to a communications error from our Jamf Infrastructure Manager instance.  It's been working fine for quite a while (years), and is running JIM 2.4.0 (Windows 2019 server, Java 11.17.x)The JIM Log files clearly show the moment when things went awry April 1 @ 10:06:42, but no indicators as the nature of the issue.  I haven't yet found anything relevant in the Windows server logs.2023-04-01 10:05:52,672 INFO c.j.i.l.LpsTransferThread [JSS->LDAP for [/54.208.14.206:8869](2803)] Transfer thread started2023-04-01 10:05:52,672 INFO c.j.i.l.LpsTransferThread [LDAP->JSS for [/54.208.14.206:8869](2803)] Transfer thread started2023-04-01 10:05:52,809 INFO c.j.i.l.LpsTransferThread [JSS->LDAP for [/54.208.14.206:8869](2803)] Input Socket (JSS), end-of-stream2023-04-01 10:05:52,809 INFO c.j.i.l.LpsProxyConnection [JSS->LDAP for [/54.208.14.206:8869](2803)] Closing Jamf Pro socket2023-04-01 10:05:52,809 INFO c.j.i.l.LpsProxyConnecti

Hello, Has anyone found a way to configure this using a config profile or script now that the airport command has been deprecated? I'm trying to configure this setting:    Thanks!   --Josh  

Does anyone know of a way to modify the built-in extension attribute for a Patch Management title? The issue I'm seeing is that the one for Jamf Protect is pointing to /Library/Application Support but the application is installed in /Applications, meaning the extension attribute is turning up as blank for all the machines. If there's no way to modify, is there at least a way to point the Patch Management version collection to a different place? Any help is appreciated!  

Hi Jamf Nation Community, I’m reaching out to get some advice on using Jamf Pro to manage macOS devices for an upcoming event I’m organizing. I’m hosting a viewing party for the Masters Tournament 2025 (happening from April 10 to April 13 at Augusta National) for my team, and we’ll be streaming the event live on multiple MacBook Airs and iMacs in our office. I’m relatively new to Jamf Pro, and I want to ensure everything runs smoothly during the event. I’d really appreciate your insights on a few challenges I’m facing! Here’s the context: We have about 15 macOS devices (mostly running macOS Ventura and a few on macOS Sonoma) that we’ll be using to stream the Masters 2025 via FuboTV. I’ve already set up a guide for my team on how to stream the event, which I found helpful for planning (you can check it out here if you’re a golf fan: How to Watch the Masters Tournament 2025 Live on FuboTV on my blog at masterstournament2025.wordpress.com). However, I’m running into a few issues with Jamf

Hello There, Can someone give me a suggestion for below configuration profiles and policies.  1- Lock screen wallpaper (screensaver after 5 minutes idle time) 2- MS teams background image 3- A custom PowerPoint templates  4- Custom Outlook Signature 5- Deploy a custom font and set as a default  

Hi Folks,I'm putting this here to try to be a little helpful. We just moved from v5 to v6 for GlobalProtect, and basically, the setup that we had that, installed the stock pkg from paloalto and relied on a config profile to set our default portal stopped working. I also couldn't get the app to stop an endless "connecting" loop. So for anyone who is having the same issue, I hope this is helpful. Long story short, you need to package an XML file that installs the system extension with the app pkg and then run a script to install both.The GP release notes for 6.0.1 speak of a new Simplified and Seamless macOS GP app deployment Using Jamf MDM integration feature. The documentation is helpful but not comprehensive so I'll put it together here. Sources: https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/mobile-endpoint-management/manage-the-globalprotect-app-using-jamf/deploy-the-globalprotect-mobile-app-using-jamfhttps://docs.paloaltonetworks.com/globalp

Good morning, We recently upgraded our MacBook fleet to MacBook M1 Apple Silicon. Our old scripts that allowed us to force bluetooth back on does not work anymore do the restrictions of Apple Silicon. I was checking if any found a to turn bluetooth on using terminal? I found the  /usr/sbin/bluetoolctl in terminal but it only shows if the power is on for bluetooth but nothing else.

I'm seeing some strange behaviour with the login window on devices in one Jamf environment but not in another. All machines have the CIS L1 baseline and some additional lockdown restrictions on them. They should be asking for the username and password at the login window on startup and after a logout. This works fine for devices in one environment but in the other I get the user account(s) listed on startup and only the password is required. It works as expected if you log out though. I wondered if it was something relating to FileVault but, again, the configs between both Jamf environments should be the same. The only difference I can see is that one Mac is Intel (T2) and the other is M1. Here are some examples of what happens on the Mac that isn't working as expected:- Startup: After logout: Some of the settings applied:

We have gotten some feedback from users that are working remotely about our Macs imaged through Jamf Connect. Users are seeing the message on their wifi, "Wi-Fi networks are currently unavailable." Users without hardline options are unable to login to the machines. We are currently using Jamf Connect v. 2.37.0 Has anyone seen this issue before and if so, how did you resolve it? Note: Potentially 16 machines affected as we halted production until we resolve this.

I'm rolling out a 10.9 lab, and my workflow works fine.My machines deploy and configure as expected.Bind to AD works great.The AD bind has "force local home directory" and "Use UNC path..." enabled.I can log in with LDAP/AD users, and profiles/policies work fine.The users get a local home forced. They DON'T show up in the local user list or via a command like: "dscl . list /Users UniqueID"These sorts of users used to automatically show up in 10.7.Since this is my first wide installation of 10.9, I'm not sure where to look to diagnose - any help?

I want to add a file to the Shared directory on users computer, would like use Jamf Pro to deploy this file to the directory, does anyone have any idea on how to action this process?

Hi, We have Netskope deployed in our environment which was running fine until a week ago. Whenever the installtion is run, a pop up appears saying Terminal need access to control installer. We have PPPC configured, where Netskope have access to system all files, accessibliity, and FileProviderPresence. Anyone have same issue or can lead to solutions. We have tried everything we could, but still unable to fix.

I am trying to change the /etc/krb5.conf file. I have specific settings that I can't share... what I did was create a policy, under files and processes I put vi /etc/krb5.conf and the bash script I need run to change these settings. Did I do this right?

I'm trying to find a way to force a User Profile picture for all users via Jamf Pro. I have spent a day now reading posts about it and they all seem to assume that I already know what the User profile name is and that it is going to be the same on all computer or the scripts are not working/ erroring out or they say to set it up to be done before the user profile is created. none of these solutions work for my needs. I need to be able to force change the picture on all existing profiles with out already knowing what the profile name is.All the computers are running Monterey or newer.Is there anyway to do this?

Hey All, This year Autodesk decided to change the installer for AutoCAD, Maya and Mudbox. Here's how I got AutoCAD to install silently since the new silent installer option is broken. You will want a policy to copy the app from the dmg to a temp directory. I used /tmp EDIT: You only want to change the license server address in the script below. Nothing else. #!/bin/sh year="2021" pkgpath="/tmp/Install Autodesk AutoCAD ${year} for Mac.app" pkgPath1="/tmp/Install Autodesk AutoCAD ${year} for Mac.app/Contents/Helper/ObjToInstall/lib.pkg" pkgPath2="/tmp/Install Autodesk AutoCAD ${year} for Mac.app/Contents/Helper/Packages/AdSSO/AdSSO-v2.pkg" pkgPath3="/tmp/Install Autodesk AutoCAD ${year} for Mac.app/Contents/Helper/Packages/Licensing/AdskLicensing-10.1.0.3194-mac-installer.pkg" pkgPath4="/tmp/Install Autodesk AutoCAD ${year} for Mac.app/Contents/Helper/ObjToInstall/licreg.pkg" pkgPath5="/tmp/Install Autodesk AutoCAD

Hello All,    Just wanted to see if anyone else is experiencing this or has experienced this in the past. Our ABM is showing that it has not synced with Jamf since this update on March 18th. Since then we have not been able to automatically enroll any devices and due to this all of our purchased machines are not being enrolled at all and only show up in ABM. They are not showing up in Jamf despite them showing that they are connected to the Jamf server in ABM. Has anyone experienced this and does anyone know of a fix?

HiWe use Mac and Windows with Outlook in our schoolIn the group policy I can configure default fonts for Windows How can I configure Default Fonts for Mac for all the users in the organization Kind regards,

Need to disable Hand-Driven Reactions on MacOS (Thumbs up and 2 fingers on a meeting on MacOS can trigger fireworks, balloons, etc.) We are managing MAC devices from Mosyle tool (Alternate of JAMF) I want to disable this reaction feature for all the devices centrally on all the apps as this is Mac OS feature want to disable this feature on Mac centrally using a script. I know we can disable it by clicking on Green symbol and click on reactions when an app id open, but we want to disable this from Mosyle portal the reason we need a Script. Can someone help me with this.

It's taking forever to repair the Database Tables, and I'm not certain the process continues after I'm timed out of the web interface. Is it possible to repair the database tables from the command line?

Hi there,  This option was working till macOS Sequoia.  sudo defaults write /Library/Preferences/com.apple.loginwindow AdminHostInfo HostName This is working with a profile but now with macOS Sequoia it stops working.  Anyone see the same problem and is there a solution? Thanks

I'm having serious performance issues with the 11.9.1 update (Jamf Pro Cloud). Any time I edit the scope of a profile the interface slows to a crawl and I get the dreaded "Poor network connection" pop-ups. It can take up to 30 seconds or more just to register keystrokes when filtering the list of computers and another 10 seconds or longer to select/add something. It was always slow/laggy working with profiles, but not like this. Anyone else?

Hello again. I'm seeing a lot of older posts about this that are not relevant to Sonoma; most posts are from years ago. This is a 2 part question: I want to upload a Corporate image to be used for Desktop Wallpaper. I'll need this to be built into the "image" we use for MacBooks.2nd question, once picture is installed in the right folder, all I need to do is use the the "Lock Desktop Picture" setting in Restrictions and add the file path, correct? Any help is greatly appreciated. JAMF ProSonoma 14.4.1MacBook Pro 

Hi- does anyone have a source for the Bluebook Exams installer package?  I can only seem to get it from the App store, and trying to build a package using Composer constantly fails.  (Building works, but the package doesn't work) Have to deploy to a student testing lab...   Thanks!