Hello Everyone,    I am looking for some assistance with an issue that I am wondering if anyone else has ran into. I have JAMF as our MDM for MacOS.  I am moving towards MS Intune for our Windows endpoints. Currently I have JAMF setup as a Proxy to deploy SCEP certs to our Macs. This was done using Entra ID App Proxy with a Private Network connector.  This works great.  Now for the problem...  I want to setup Intune to deploy certs to our Windows endpoints but it fails unless the "PFX Certificate Connector" is installed.  When that gets installed, it highjacks the SCEP URL and blocks everything not coming from Intune.   Essentially I can only have one or the other.  JAMF or Intune.  Has anyone got both of these working at the same time?      Thanks in Advance for any help.

Hello, I am sorry to bother everyone on this matter, but I have been working on an issue for a week and I haven't been able to find a solution to my problem.I can feel I am not far, but there is one last thing in my way which prevent me from moving forward. To make it short, we are about to push Sierra upgrade on all Mac using LANDesk (Ivanti). So far everything works well. I was able to write a script to bypass FV2, I also wrote a script which force quit all the Application in order to prevent a restart. But the last scenario that I am working on and which I am struggling is to Force log out any active user in a Mac except the current user. Using the command line sudo kill <pid> With this command, I was able to force logout an active user of a test Mac, but to do so, I had to find the PID.Now the difficulty is that in my company, we have many users, and I can't find the PID for each user on each computer manually.So I need to write a script which will find the PID of all

Our company is moving to Freshservice. Working on a policy to push the Freshservice agent to all our Macs. The Agnet is a pkg file and that installs fine but I can't figure out how to make it reference the json file for the registration key and account info. I tried using Composer to create a custom pkg but it flat out doesn't work. Any assistance would be appreciated.

Hey everyone, It's been awhile since I have done anything in Jamf Pro and honestly I am more of a sccm/intune engineer.  I say that because I recently deployed a registry key on all windows machines to greyout the option to enable or disable syncing on a onedrive.  My leadership has ask me to force all users to enable syncing their documents, pictures and desktop as seen in the picture.  I have successfully deployed this to all windows workstations.  Does anyone know how to do this on macOS? See the example below. 

⚠️⚠️ Save the date! ⚠️⚠️ We're still finalizing the agenda, but block Wednesday May 7th between 5:00 PM and 9:00 PM in your agenda. Because that's when we're having a Benelux Apple Admins meeting! This time it's taking place at Jamf's new office in Amsterdam, and they're also sponsoring the food and drinks. ps, if you want to present, send me a DM, always looking for speakers!! See you soon!

Our original Jamf Pro URL is mdm.dpmhome.com, but now it's failed to use. BTW, I have to use dpmhome.jamfcloud.com for access after your cloud service going back recovered, please let us know how can I use back mdm.dpmhome.com, thank you

Hi, new Jamf admin and not very knowledgeable about the inner workings of SSO.  I have configured SSO to our Entra ID domain and the web log into Jamf Pro and Account and no issues with log in with my account or a test account. I have been able to have devices enrolled successfully when the device (iOS only) is in ABM and have moved on to set up User Self Enrollment.   When the test user account, goes to register, at: domain.jamfcloud.com/enroll, the user is directed to the Microsoft log in.  After the credential are entered the process fails with the error : "Sorry, but we're having trouble signing you in" message with the AADSTS650056 error.  I've found a few suggestions here on JamfNation, but they haven't resolved the issue. SSO Azure AD - Misconfigured application  Cloud Identity providers has been set up and tested successfully redid the MS Application set up ensured: Jamf Pro > Settings > System > Single Sign On > Enable Singl

This one is for all of those wanting to issue the .p12 certificate to computers via Jamf Pro for Google LDAP Authentication with Jamf Connect. I've recently performed an integration for a customer with Jamf Connect and their G-Suite tenant following the article provided here: https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/Integrating_with_Google_Identity.html and found that when attempting to issue the certificate via a configuration profile, I would get the error "the certificate could not be verified (authentication error)" I ended up going down a long rabbit hole of troubleshooting that ended with having me attempt to install the certificate manually, which lead me to find that the password I created wasn't being accepted within keychain access.This lead me to the following article going over an open issue with OpenSSL 3.x and it's deciphering issues:https://stackoverflow.com/questions/70431528/mac-verification-failed-during-pkcs12-import-w

Hi, I am trying to find all installed Apps from the Mac App Store which have not been purchased through the VPP/Self Service. This is what I got with the help of an older Script from Craig Lindsey #!/bin/bash # JAMF Extension Attribute that finds any MAS apps # that were NOT purchased through VPP # Based on Script from: Craig Lindsey for Starz 2017-2-10 checkMD=$(mdfind -onlyin /Applications/ 'kMDItemAppStoreReceiptIsVPPLicensed == "0"') #echo "### checkMD - $checkMD" if [ "$checkMD" = "" ] then echo "<result>Not Found</result>" exit 0 fi result="" mdfind -onlyin /Applications/ 'kMDItemAppStoreReceiptIsVPPLicensed == "0"' | while read VPPApp do AppName=$( echo "$VPPApp" | awk -F'/' '{print $NF}' | sed -e 's/^"//' -e 's/"$//') result+="$AppName" echo "### Result - $result" done echo -e "### Result-TEST - $result" #echo -e "<result>$result</result>" exit 0   And this is the Result I get ### Result - Push Diagnostics.app ### Result - Push

Hello,   I am currently having an issue with installing Symantec on any MAC device (does not matter the OS). When running the policy, I get an error message: Installing SEPRemote v.14.3.5055.3000.pkg... Installation failed. The installer reported: installer: Package name is SEPRemote v.14.3.5055.3000installer: Installing at base path / installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An error occurred while running scripts from the package “SEPRemote v.14.3.5055.3000.pkg”.) I assume this has something to do with the package but this just happened out of no where so I am confused on what the issue on/ where to get a new package. Any ideas?

I'm fairly sure this isnt possible but not able to find any documentation backing it up. Is it possible to block the phone app on iPhones? We have no cellular service and I have tried sending a "some apps not allowed" config blocking the phone. But the device remains able to call 911 services. Can the phone app be completely disabled and blocked?

Hi all! recently arrived to Apple management and I've got a task pending to fix: to setup two environment variables necessary for one GUI application.I can setup them over a plist file stored in /Library/LaunchAgents, but same plist file doesn't work loading it as a Configuration Profile from Jamf Pro. If I look for loaded profiles, it appears from Jamf as well as from terminal typing 'profiles list -all', but it doesn't work. Other plist files launched from Jamf are working properly but no for setting environment variables.Could someone to assist on this?Thanks a lot in advance

Dear Jamf experts,I need your support to get my on-prem Jamf Pro infrastructure correctly setup.I have Two windows 2022 server installed with Tomcat web app  for Jamf Pro as a child node ( cluster ) behind load balancer and one Server with Jamf Pro and Jamf database as a primary server (Tomcat & MySQL ) and one more windows server which has Jamf Pro Database ( mySQL). All three servers are in cluster with memcached installed on ubuntu. On load balancer we have placed child node behind that and I have used public trusted SSL on load balancer to offload encrypted traffic, I have used publicly resolvable DNS name on load balancer ( like mdm.public.com ) but I have used diffenrent Jamf Pro Url on Jamf Pro setting under global setting like (mdm.private.com). and used Jamf Pro CA signed SSL for Primary server with CN Name mdm.private.com My issues are two.1- I am not able to enroll any device no matter I am in public network or private network2- I am not able to login in Jamf Pro co

Managing Labs devices in a university environment. Looking at ways to provide remote support and access devices when I am working offsite.  Does Jamf Remote Assist work? I think I have everything configured correctly, but thus far haven't been able to establish a connection to any devices. Before I go to our cyber/infrastructure team to troubleshoot, does anyone use JRA, and is it stable enough to rely upon as the sole Remote Access system?   

Hey All,Starting a few days ago I was alerted to a communications error from our Jamf Infrastructure Manager instance.  It's been working fine for quite a while (years), and is running JIM 2.4.0 (Windows 2019 server, Java 11.17.x)The JIM Log files clearly show the moment when things went awry April 1 @ 10:06:42, but no indicators as the nature of the issue.  I haven't yet found anything relevant in the Windows server logs.2023-04-01 10:05:52,672 INFO c.j.i.l.LpsTransferThread [JSS->LDAP for [/54.208.14.206:8869](2803)] Transfer thread started2023-04-01 10:05:52,672 INFO c.j.i.l.LpsTransferThread [LDAP->JSS for [/54.208.14.206:8869](2803)] Transfer thread started2023-04-01 10:05:52,809 INFO c.j.i.l.LpsTransferThread [JSS->LDAP for [/54.208.14.206:8869](2803)] Input Socket (JSS), end-of-stream2023-04-01 10:05:52,809 INFO c.j.i.l.LpsProxyConnection [JSS->LDAP for [/54.208.14.206:8869](2803)] Closing Jamf Pro socket2023-04-01 10:05:52,809 INFO c.j.i.l.LpsProxyConnecti

Hello, Has anyone found a way to configure this using a config profile or script now that the airport command has been deprecated? I'm trying to configure this setting:    Thanks!   --Josh  

Does anyone know of a way to modify the built-in extension attribute for a Patch Management title? The issue I'm seeing is that the one for Jamf Protect is pointing to /Library/Application Support but the application is installed in /Applications, meaning the extension attribute is turning up as blank for all the machines. If there's no way to modify, is there at least a way to point the Patch Management version collection to a different place? Any help is appreciated!  

Hi Jamf Nation Community, I’m reaching out to get some advice on using Jamf Pro to manage macOS devices for an upcoming event I’m organizing. I’m hosting a viewing party for the Masters Tournament 2025 (happening from April 10 to April 13 at Augusta National) for my team, and we’ll be streaming the event live on multiple MacBook Airs and iMacs in our office. I’m relatively new to Jamf Pro, and I want to ensure everything runs smoothly during the event. I’d really appreciate your insights on a few challenges I’m facing! Here’s the context: We have about 15 macOS devices (mostly running macOS Ventura and a few on macOS Sonoma) that we’ll be using to stream the Masters 2025 via FuboTV. I’ve already set up a guide for my team on how to stream the event, which I found helpful for planning (you can check it out here if you’re a golf fan: How to Watch the Masters Tournament 2025 Live on FuboTV on my blog at masterstournament2025.wordpress.com). However, I’m running into a few issues with Jamf

Hello There, Can someone give me a suggestion for below configuration profiles and policies.  1- Lock screen wallpaper (screensaver after 5 minutes idle time) 2- MS teams background image 3- A custom PowerPoint templates  4- Custom Outlook Signature 5- Deploy a custom font and set as a default  

Hi Folks,I'm putting this here to try to be a little helpful. We just moved from v5 to v6 for GlobalProtect, and basically, the setup that we had that, installed the stock pkg from paloalto and relied on a config profile to set our default portal stopped working. I also couldn't get the app to stop an endless "connecting" loop. So for anyone who is having the same issue, I hope this is helpful. Long story short, you need to package an XML file that installs the system extension with the app pkg and then run a script to install both.The GP release notes for 6.0.1 speak of a new Simplified and Seamless macOS GP app deployment Using Jamf MDM integration feature. The documentation is helpful but not comprehensive so I'll put it together here. Sources: https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/mobile-endpoint-management/manage-the-globalprotect-app-using-jamf/deploy-the-globalprotect-mobile-app-using-jamfhttps://docs.paloaltonetworks.com/globalp

Good morning, We recently upgraded our MacBook fleet to MacBook M1 Apple Silicon. Our old scripts that allowed us to force bluetooth back on does not work anymore do the restrictions of Apple Silicon. I was checking if any found a to turn bluetooth on using terminal? I found the  /usr/sbin/bluetoolctl in terminal but it only shows if the power is on for bluetooth but nothing else.

I'm seeing some strange behaviour with the login window on devices in one Jamf environment but not in another. All machines have the CIS L1 baseline and some additional lockdown restrictions on them. They should be asking for the username and password at the login window on startup and after a logout. This works fine for devices in one environment but in the other I get the user account(s) listed on startup and only the password is required. It works as expected if you log out though. I wondered if it was something relating to FileVault but, again, the configs between both Jamf environments should be the same. The only difference I can see is that one Mac is Intel (T2) and the other is M1. Here are some examples of what happens on the Mac that isn't working as expected:- Startup: After logout: Some of the settings applied:

We have gotten some feedback from users that are working remotely about our Macs imaged through Jamf Connect. Users are seeing the message on their wifi, "Wi-Fi networks are currently unavailable." Users without hardline options are unable to login to the machines. We are currently using Jamf Connect v. 2.37.0 Has anyone seen this issue before and if so, how did you resolve it? Note: Potentially 16 machines affected as we halted production until we resolve this.

I'm rolling out a 10.9 lab, and my workflow works fine.My machines deploy and configure as expected.Bind to AD works great.The AD bind has "force local home directory" and "Use UNC path..." enabled.I can log in with LDAP/AD users, and profiles/policies work fine.The users get a local home forced. They DON'T show up in the local user list or via a command like: "dscl . list /Users UniqueID"These sorts of users used to automatically show up in 10.7.Since this is my first wide installation of 10.9, I'm not sure where to look to diagnose - any help?

I want to add a file to the Shared directory on users computer, would like use Jamf Pro to deploy this file to the directory, does anyone have any idea on how to action this process?