Hi Jamf Nation Team, We are currently working to deploy the Falcon Sensor in our system, but we need to monitor the sensor's status. Unfortunately, the Extension Attribute I was using is not gathering the necessary information. Could you please help me if you have any that I can use: Sensor Registration: Confirms whether the Falcon Sensor is correctly registered with the CrowdStrike cloud.Sensor Operational Status: Checks if the Falcon Sensor service is running correctly on the endpoint.Sensor Cloud Connectivity: Verifies that the sensor can successfully communicate with CrowdStrike’s cloud infrastructure. Thank you!

Hello All,    We want to use superman to update our MacBook fleet but our higher ups want to make sure that this device is not malicious. Has anyone run into this before and point me to any confirmation that this software is not malicious. I know that many people use this to update MacBook fleet as Jamf built in software updates does not work on OS under 13 and asking users to update their devices never works. 

Hi,we recently acquired a Jamf Pro license and wanted to build a update ring for certain softwares.Since Cisco Anyconnect is not available in Patch Management i thought i'll make a feature request.

Hi folks - working with a new jamf cloud and I've run into a problem trying to have a user follow the steps to make their device Entra compliant.  When they log into the Company Portal app (after starting the registration from Self-Service) the login screen for Entra pops up, accepts their username and password, then goes to a blank window.  We know authentication is happening because the MFA for the user kicks off but the login window is blank and does not show the numbers.     Has anyone seen this before?  I was able to do this on a different machine two days ago.  The OS on this machine is 15.0

Hi everyone, I've been facing an issue with internet connections just after updating to macOS Sequoia. Two devices running Sequoia cannot establish a connection with each other in Docker.   Error response from daemon: Get "https://europe-docker.pkg.dev/v2/": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)   This issue started right after I installed the update, and I've heard about DNS/connection issues related to it. The first thing I wanted to test was turning off the firewall, but I wasn't able to make any changes. I have a policy that was supposed to turn off the firewall with the following command:   defaults write /Library/Preferences/com.apple.alf globalstate -int 0   However, it didn't work on Sequoia, although I tested it on Sonoma and it worked well there. I've tried searching online but haven't found anything that works so far. My question is: Does anyone have any ideas on how to disable the firewal

Hi,  I want to disable OneDrive from the background service, but I don’t know how to do it. Currently, it is enabled, and I want to disable it. On Microsoft’s website, they explain how to enable it, but not the opposite. https://learn.microsoft.com/en-us/sharepoint/deploy-and-configure-on-macos#background-services Would you know how to do it?

Hi ! Can someone suggest me how to set up a custom analytic to get an alarm if a user (yes, they need to have adminrights sadly) removes the MDM profile? I had some cases in the last weeks where all profiles went missing and i do not want to suspect someone falsely.    Thanks !

So we might be learning this lesson the hard way, but we have an Air that a student has locked via his iCloud account and does not know the code. We've been fighting with Apple support and GSX to get it unlocked but in the interim we've begun discussing how to prevent this in the future. Only way I really see would be to disable the iCloud preference pane (configuration profile I assume?), correct? If that is the case, then you are debating the cost benefit of them being able to utilize the iCloud features against locking and wiping a device as well. If we go the route of disabling the iCloud pref pane, a user could still enable this during an OS upgrade to right? Finally, wondering if there is an extension attribute or another way to query all my devices to see who has iCloud enabled on their laptops?

Hi all - really annoying that the option for pointer size is greyed out and our developers need the option to adjust available.  Has anyone seen this and found a workaround via Jamf through a script or profile? All my efforts have failed, many thanks :) 

I have the following in a script on Jamf Pro. When I deploy the script and it runs this I can see on the test Mac it has "Attempt 1 to bootout com.Daemon" in the log file.  However, it fails to continue with the rest of the script. I tried adding || echo "bootout error"  after the bootout command but that didn't help either. When I run the launchctl list | grep "com.Daemon" command I can also see it has successfully booted out the Daemon.  Why won't it continue to then trigger the jamf policy? I've tried /usr/local/bin/jamf policy -event 'Trigger'I've tried with sudo and without. I've also tried to have it trigger the jamf policy first which works but if I put a delay in the policy so I wait until bootout is complete it doesn't progress to attempt bootout (it waits on policy completing). I tried adding & to then end (/usr/local/bin/jamf policy -event 'Trigger' &) and that resulted in bootout command running but jamf policy did not. When I run the s

Hello,I'm testing the Temp user promotion setting:I have set a com.jamf.connect config profile with the below plistIt's showing correctly on the jamf connect menu bar but when I click and select the reason nothing happens and the timer doesn't show in the bar nor the user gets elevated.Hope anyone encoutered the same issueThanks   <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>TemporaryUserPermissions</key> <dict> <key>TemporaryUserPromotion</key> <true/> <key>URLCommandLineElevation</key> <false/> <key>UserPromotionDuration</key> <integer>60</integer> <key>UserPromotionReason</key> <false/> <key>UserPromotionTimer</key> <true/> <key>VerifyUserPromotion</key> <false/> </d

We have the Internet Accounts system preference pane disabled, but our users are still able to add accounts to Internet Accounts. I think this is being done via Safari because IIRC, it will ask you if you want to add a supported account when you sign in to that account through the browser. Does anyone know via the command line how to remove these accounts? Or do we just have to temporarily allow access to the Internet Accounts preference pane in order to remove these?

I have been working on a policy that will create a temporary admin account. A launch daemon gets installed and launched to handle the account deletion. Once the alotted time has elapsed, I see the account and its home folder get deleted. I see that the launchd process is no longer running. Everything works exactly as intended, but the launch daemon does not get deleted. I can manually run a command such as "sudo rm /Library/LaunchDaemons/com.my.launchdaemon.plist" and that works perfectly. The launch daemon triggers another Jamf Pro policy to run that deploys a script that runs the account deletion, deletes the home folder, unloads the launch daemon and then is supposed to delete the launch daemon. A moment ago, I commented out all the steps except the launchdaemon unload and deletion, and watched as the script deleted the launch daemon! Below are all the steps that the script runs. #!/bin/zsh # Delete the Rescue Admin account and its home folder echo "Removing Rescue Admin account" d

Previously the script below from another message made it possible to have custom screensaver files (Photos) that would rotate.  This no longer works in macOS Sonoma.  Does anyone know a new method to have the screensaver call photos from a particular folder in somona via a script or another way.#!/bin/sh## get current useruser=`ls -l /dev/console | cut -d " " -f 4`## get macOS version(s)osMajor=$(/usr/bin/sw_vers -productVersion | /usr/bin/awk -F"." '{print $2}')osMinor=$(/usr/bin/sw_vers -productVersion | /usr/bin/awk -F"." '{print $3}')## set key items for screensaver/usr/bin/sudo -u $user /usr/bin/defaults -currentHost write com.apple.screensaver CleanExit -string "YES"/usr/bin/sudo -u $user /usr/bin/defaults -currentHost write com.apple.screensaver PrefsVersion -int 100/usr/bin/sudo -u $user /usr/bin/defaults -currentHost write com.apple.screensaver showClock -string "NO"/usr/bin/sudo -u $user /usr/bin/defaults -currentHost write com.apple.screensaver idleTime -int 60## c

I watched the presentation given by @chadlawson  and uploaded to the Rocketman Tech channel on YouTube (https://youtu.be/6xVmJqpbEHI) over the weekend. I decided to dive in and change a script that puts a machine into a static group (credit to @sdagley ) but whilst I can see that I'm getting a token, the computer is not going into the Static Group. The reason for changing from Basic Auth to Bearer Token Auth is because Basic Auth is deprecated so I'm trying to get this figured out before there's a panic.Just wondering if anyone can see where I'm going wrong or suggest a better way to do this? The first script below is my working script using Basic Auth and the second longer one is the one using Bearer Token Auth. The second script is mostly using code from Rich Trouton's blog on Bearer Tokens and I do get the Bearer Token but whilst I seem to have no errors, the machine is not added to the static group.#!/bin/sh # AddComputerToStaticGroup.sh # Adds the computer to a stat

Hello guys, I have an IBM ACS software which I need to package and show in Self service. This app doesn't have a regular dmg or an installer. It installs via a script:  Once the script runs, it puts the app in the Applications folder:   This is what the script does: #!/bin/bash # Description: # This script will install IBM i Access Client Solutions in the Applications folder on Mac OS X # # Usage: ./install_acs # args=$@ args_length=$# arg1=$1 prefix_arg1=${arg1:0:9} suffix_arg1=${arg1:9} printhelp="no" default_noparms="no" reset_start_over="no" quiet_mode="no" exclude_functions="no" install_type_shared="no" install_type_preset="no" declare source declare target declare old_target declare source_AcsConfig declare target_AcsConfig declare old_target_AcsConfig function copyProductFiles { echo "Copying product files" >> $HOME/IBM/install_acs_log.txt #Remove the old app so we don't leave cruft laying around. rm -rf "/Applications/IBM i Access C

Hey guys, I have no idea how to get out of this one. Any help is greatly appreciated. I support a High School and a University. The High School started using Jamf a few years ago. This year the University decided to finally get a MDM. They decided to use the High School Instance so I created Sites. This busted my Configuration Profiles. We use a Enterprise WIFI similar to eduroam. When I moved the lab computers to the site it lost the WIFI. I can't connect a Ethernet to USB-C connector because they are running Sonoma and you need to Allow to use Accessories. I can't login, more on that... In addition when I did a erase/install with the laptops last summer Jamf broke my Lab Admin account. It was working at first but then stopped. I created a case with them but they were unable to give me any answers. I thought it was LAPS but I never turned it on and confirmed it is not on. The recommended solution they gave me would be to wipe and re-enroll the computer (and delete the inventory record

Hello All, I am very new to Jamf Pro and Im trying to teach my self how to build packages and deploy them in our test environment.   I am having a problem with an app downloading to my Macbook using Jamf Pro  I have built the package and it shows up in Self Service.  But when I download it, it said Installed but it does not show installed on the MacBook. I checked the policy logs and it show it starts to install the app but then it closes the packages.  I have included the steps from the log [STEP 1 of 4] Executing Policy Steam [STEP 2 of 4] Downloading https://diamond.jamfcloud.com/jcds/downloads/steam.dmg... Verifying DMG... Verifying package integrity... Installing Steam... Closing package...

Hello, We have been doing different things for different packages. But what is the best way to superseed a policy/package? As in if a software releases a new version and you want to update the version you are using right now to the newer version. Mostly we have been creating a new package and policy, and then deleted the old package and policy.

How do you all keep your Mac Clients on the latest MacOS Version? Is there a way to force an Upgrade? Because the "new" Software Updates Option doesnt do anything for us. When we try to trigger updates on the Clients nothing happens. 

Does anyone have an extension attribute that will return the version of Jamf Connect a Mac is running? Our 'Patch Management' tells me we've got various out-dated versions floating around in our environment and I want to gather all of these into an Advanced Search or Policy so I can take action.

I have looked through the policies that are able to be created in JAMF and can't find anything related to what I am trying to do.   We have iMacs in classrooms connected to a projector and the iMac is defaulting to extend and would like for the default to be duplicate. Any suggestions?     

If Jamf Admin is being discontinued, How do we index a package without it for an uninstall?

OK, so I have a smart group that shows Macs that are on Mavericks but have not upgraded to 10.9.4 yet, and I have the Apple 10.9.4 combo updater in Casper Admin, and I have a policy that installs the 10.9.4 combo updater, scoped to the smart group that shows Macs that need the upgrade. This part I love, it's fantastic. The problem is that on an inordinately large number of attempts, the install fails, and the error every time is that the package could not be verified. But more than half the time it works with no verification error. This is an Apple updater, it's checksummed, there should be no verification issue here. So what's up, Doc ? Actual message from the log: Verifying package integrity... Installation failed. The package could not be verified. So why would it work on most machines, but fail on a lot of them? Will I need to disable verification to get it to work consistently? Is there some underlying issue I'm not aware of? Thanks for input.

Hi, Is anyone getting this error with the Jamf Connect Login window? We are Using OKTA and JAMF Cloud. I have logged a ticket with Support and we tried recreating the profiles(login, license, Jamf Connect), scoping and unscoping to specific machines etc. Each time I log off/restart the machine loses the license. Checked /Library/Managed Preferences/ and I can see the Jamf Connect plist(s) with the license keys. Can see my profiles in System Prefs. I know the license file is valid as it will sometimes license at random then 'disappears' after log off.