Hello everyone, we try to deploy "FortiClient VPN Only" via Jamf Pro. I saw in the forum that there is an existing tutorial for the licensed version of the FortiClient with the install.mpkg file but nothing for the "VPN Only"-Client wich has no install.mpkg.If we try to deploy this version we only get a blank window after starting FortiClient.Is there anybody who is deploying "FortiClient VPN Only"? Best regards,Felix

Anyone know how to return the value of <user_approved_mdm since="10.4.0"> using Powershell?I can get the info in bash using xpath, but I've tried pulling it via powershell (I've got limited knowledge) for one of our teams that only uses Windows.  I know the value is under computer>general>management_status<management_status> <enrolled_via_dep>true</enrolled_via_dep> <user_approved_enrollment deprecated="10.4.0">true</user_approved_enrollment> <user_approved_mdm since="10.4.0">true</user_approved_mdm> </management_status>

Hello All I am having an issue where it seems securetoken is not being enabled on our accounts, thus FV2 enablement window shows up and asks to enable but it doesnt work after entering the users password. We are using jamf connect with OneLogin for user accounts. What process is everyone here using to enable FV2?

Scenario: Some iOS devices that have been set to lost mode, including always enforce lost mode, aren't actually in lost mode. The reason why that has happened seems to be due to the following: 1. An administrator enabled lost mode in JAMF. The device was offline at the time.2. Sometime later, all pending and failed commands are cleared (regular maintenance of JAMF, good to do when you have a large environment with 60k iOS devices, where some are more active than others)3. Sometime later, the device comes online and never receives enable lost mode because the pending command was deleted. Now, JAMF still believes that this device is in lost mode, but it isn't.I understand this is probably due to limitations in the implemented logic in JAMF. For instance, if a configuration profile was never installed because it was cleared when it was still pending, JAMF detects that and reissues the install command for the missing configuration profile on the next inventory update. However, it

So, what is the best way of creating a pkg from the installers that are just drag and drop but dont contain actual pkg files? Edit I am asking as installing the package, and then capturing changes takes about 10 minutes on the machines I use to build, as they have so much other stuff on them

HelloJust unwrapped 2 Ipad and assigned them to JAMF thru Business Manager.Everytime I start them, I'm getting "SCEP Server configuration is not supported". I don't actually use SCEP, all default configurations in JAMF Pro.Do I really need a SCEP Server ? I'm not generating any certificate from another CA server, etc.Thanks

Hi All,Sorry if this has been asked before.I'm using this script with zero modifications except for the parameter changes as shown in screen shots below:https://github.com/kc9wwh/macOSUpgrade/blob/master/macOSUpgrade.shI pulled the installer for 12.6 from Mr. Macintosh. The installer will attempt download from self service but I get this error: We were unable to prepare your Computer for OS Monterey.

Getting fond memories of Sim City 2000, but not necessarily having the best time with Jamf Pro at the moment... So I have the jamf connect metapackage going out and being installed - yes, all the permissions have been set to wheel/root, yes, it is signed, yes, by an apple developer ID cert, and yes, the cert is valid. It contains the jamfconnect PKG, branding assets, postintall script, and the notify script. It is being installed, as booting into the machine we are getting the jamfconnect login screen, which works normally. However, after logging in, at the point where the notify script should be run, I am getting the generic notify screen and the "reticulating splines Again.." status message, to which I have to command +control + X to get past.After the fact I check that the depnotify.log file does indeed exist in /var/tmp/, but it is blank. So it is appearing that the script is not running to update it - hence the splines.I have tried several scripts, thinking that maybe I

Hallo everyoneNeed some help with understanding how the printing works on the macos.Previously I always have set up the printers in our jamf Pro Server and it works all fine. We need only the standard printing(keeping it simple).Now I have to set up a new canon Uniflow printer available in every office with different models. How do I get the printer driver, which can be different for each printer?The Printers in our company are configured on a win print server and the driver used on windows devices is: Canon Generic Plus PCL6. How do I get the driver for the printer?I can access the smb share where the printers are. While configuring the printer, I couldn't figure one which ppd file to choose from the list. So I chose the Generic.ppd.Again the question, which PPD file shoud be chosen for the various printer?I have been digging for Information on how the printing works on macos. really confusing for something very simple.Can someone show me the right path for this?Thanks Best

We're looking for a Jamf Expert to take lead on clients' cloud-hosted Jamf Pro environments. Clients range from schools and non-profits to SMB and Enterprise companies. Work with the best Jamf Engineers on the planet and learn the ropes to managing enterprise clients at this fast growing Apple-based MSP!Responsibilities:You will work as part of a team that creates the best-in-class Jamf environments. Depending on your skillset and passion, you may do any (or all) of the following:ProjectsLead update meetings with client stakeholders about the progress of time sensitive projectsLead whiteboard sessions about the technical aspects of a specific projectCollaborate with our team to build an incredible Jamf Pro server that brings clients to a Rocketman Approved stateImplement change management proceduresMaintenanceProvide Tier 3 support for Jamf ProProvide Escalated Tier 2 support for select clientsCollaborate with the client’s Help Desk to automate solutions and create quick fixes in

Hello,we use Jamf Pro Cloud 10.30 at the moment. With Jamf Pro Tools (Composer 10.31) and even older Composer versions, it is apparently no longer possible for me to include files on the user's desktop in the package, so that I can deploy these files to the user desktops via DMG and fut. The error message as shown in the picture always appears. Does anyone know the problem or has a workaround?Thank you! 

Hello!I am building a package to install FortiClient vpn (the free vpn standalone client) for our users.After several tests, a policy authorizing the security extension is indeed present and allows to avoid blocking it during installation, but a popup asking me to authorize the addition of VPN configuration appears right after the installation.This popup is generated by the "FortiTray" binary and after several tries and I don't know how to authorize it ahead of time so that the installation is totally invisible.It says that ""FortiTray" would like to add VPN configurations"Any idea on how I can authorize this or setup ahead of time ?

When using the API to pull out some policies, I discovered a good amount of policies that don't show in the web front end. They appear to be old policies but all have the naming scheme similar to "2016-07-29 at 9:42 AM | user-name | 1 Computer". If I enter the ID in the policy URL I'm able to view them. They appear in any policy API call, e.g. ../JSSResource/policies. Some of them still have a scope and enabled is checked which is concerning. Has anyone come across this? Is this on purpose for deleted policies? Is my DB messed up? Are they still active?

Hi All , very new to this and really trying to get my head around stuff.it doesnt helping that I get to work on it for 1 day a month. Anyhow, i need to enable ssh for all user, all the computers have ssh enabled but for some reason, it changed to only this users. can someone explain step by step how to create a policy for it to change to all users or to add the local admin account to the list?

Experts, I am new to the Casper and struggling second day with dock util on 10.10.OS. Since that functionality was removed in JAMF casper work around like custom script with dockutil 2.0.2 needs to be enabled. !/bin/bash sudo dockutil --remove 'Launchpad' --allhomessudo dockutil --remove 'Mail' --allhomessudo dockutil --remove 'Contacts' --allhomessudo dockutil --remove 'Calendar' --allhomessudo dockutil --remove 'Notes' --allhomessudo dockutil --remove 'Maps' --allhomessudo dockutil --remove 'FaceTime' --allhomessudo dockutil --remove 'Photo Booth' --allhomessudo dockutil --remove 'iPhoto' --allhomessudo dockutil --remove 'Pages' --allhomessudo dockutil --remove 'Numbers' --allhomessudo dockutil --remove 'Keynote' --allhomessudo dockutil --remove 'iBooks' --allhomessudo dockutil --add /Applications/Firefox.app --after 'Safari' --allhomessudo do

There are a few iPhones that went missing a while back. We've given up trying to find them and decided to just send lock commands and move on.  If I send the lock command and it's in pending status, can I delete the device from JAMF and will it still execute if one day the device is picked up? Or is there a better way to make sure the lost device if found and wiped will not allow the person who found it use it at all and contact us? 

We are implementing 802.1x using Cisco ISE on the back end. Currently, the project is in a testing stage, so we are using very basic configurations on the client side. The protocols used are PEAP and MSCHAPv2. I’ve created a configuration profile that enables PEAP in the login window context and deploys the certificate. When this configuration profile is deployed, the 802.1x connection can be made manually in the Network system preference pane and it works as intended – prompting the user for credentials and placing the connection in the appropriate VLAN. Our Macs are all joined to AD. We would like our users to authenticate to the 802.1x network at the login window. All the guides I found for this seem to imply that this is a basic configuration that should work with the settings I’ve deployed. I’ve tried using ProfileCreator and Jamf to create the configuration profile with both producing the same results. The only thing I’ve really been able to try is adding the

Hello, Does anyone know how to add JNUC 2022 badge to the profile? Please help.Thanks!UPD. and 2021, too 

Hey, there are some machines that have SSH enabled with the following Startup Configuration: Now I am looking for a way to disable it. I found the following script: sudo systemsetup -f -setremotelogin off Will disabling SSH interfere with anything related to JAMF? My common sense tells me it won't but I thought I'd ask anyway. Better safe than sorry :)

Hello Jamf NationWe are using Okta as SSO and LDAP directory. It's working fine for authentication on the prestage pane, but I'm unable to pre-fill a user account during setup assistant. The fields are always empty (and not locked), no matter what kind of authentication I try to use in Prestage Pane (LDAP or SSO). I've tried with the "Device owner's details" and Custom, using $FULLNAME and $EMAIL as variable, but it's not working either.When I test the LDAP, all the mappings seems correct.Is there a place where I could find logs or anything that could help me why the account is not filling ?Thanks for your help !

Filevault was disabled at our organization due to issues with secure tokens. A lot of devices are in student labs, or shared between co-workers. Enabling filevault caused issues when the previous user didn't logout, or the device experienced power failure/random restart. The device was locked until the user came back and signed in. This caused problems when students wouldn't log out. The device was rendered useless. Could not deploy commands to the device. The only solution was to erase and reinstall the OS. We've been told by Jamf support  Filevault is does not work well in environments with multiple users logging into devices. We have intels and M1s sprinkled throughout the company. Our Security departmnets wants this enabled, and I'm not sure where to start.  What is best plan? Just create bootstrap tokens? create institutional keys? Are those two things related?

Hi to all.I'm new here, and new using JAMF Pro.I need to create a report to list all machines without CyberArk installed, and the name of the local admin account existing.My question is: How can I create this report? I know how to create reports, but I'm failing with the criterias.Thank you in advance.

Hi everyone,Has anyone had an issue where during a new computer setup and in the Enrolment Customisation window, after the Okta authentication, a Jamf Pro window pops up, asking the user to select a secure question and answer in order to create an account in Jamf Pro? Getting it for the first time today.Thanks!

...a complete newbie here, please be easy on meI plan to cache a PLIST and a PKG using a policy and use a script to trigger the installation (they have to be in the same directory when installing per the vendor). I am struggling with such a script which I figured would find somewhere in this forum but I could not. Can anyone help?I tried to execute the following command from the File and Processes section, installer -pkg /Applications/Open Client/installer_10.22.pkg -target /but I get this errorResult of command:installer: invalid option Roaming Usage: installer [-help] [-dominfo] [-volinfo] [-pkginfo] [-allowUntrusted] [-dumplog] [-verbose | -verboseR] [-vers] [-config] [-plist] [-file <pathToFile>] [-lang <ISOLanguageCode>] [-listiso] [-showChoicesXML] [-applyChoiceChangesXML <pathToFile>] [-showChoicesAfterApplyingChangesXML <pathtoFile>] -pkg <pathToPackage> -target <[DomainKey|MountPoint]> any help appreciated please, thanks

I see on Wacom's site that they have a fully compatible with Apple Silicon and Big Sur driver for the Cintiq displays (among others). So, that has to mean no more kernel extension, right? From their description of granting permissions during the install, I assume they are still not thinking about us higher education lab supporting folks. Since there is no mention anywhere of them supplying a PPPC file to support their hardware, has anyone already generated a functioning one for Big Sur? I'm trying to think ahead to this summer's builds.