Our school purchased 40 new iPads for an elementary class. (Generation 9) I noticed that students have the option to delete the app. I have checked the config file and they should not be able to do this. I also went into a few apps and made sure they couldn't delete it there also. Is it a gen 9 iPad issue? I wouldn't think so but is anyone else seeing this? Not sure what I am doing wrong. Kirk

Hi Everyone, I updated my MySQL database from 5.7 to 8.0 on my Jamf Server. After this, I cannot open the Jamf dashboard page anymore. It shows an error "Database Connection Error, the following error was encountered, no database connection" However, on the Jamf&database server, the Server Tools says that the connection is successful though, I just can't open the page. I have followed all the troubleshooting on Jamf article here: Troubleshooting Database Connectivity from the Jamf Pro Server - Technical Articles | Jamf, but no lucks. Please help. Thank you very much! My environment:Windows server 2019Jamf Pro 10.39.0 

Hi guys, I'm a noob here just starting to learn how to use Jamf pro as managing our workstations. I would like to know if there is a way to Change the personal recovery key  of a station after providing it and using it with an end user?

Greetings! We're trying to come to a "happy medium" for our users to prevent them from grabbing software willy-nilly. Our environment is:Utilizing PreStage EnrollmentMonterey with some Big Sur leftovers, moving soon to Monterey and upUsers are adminsI've been able to come up with countermeasures to most of the truly problematic stuff users can do as admin but I'm getting stuck on blocking disk image. The restriction was dropped in Catalina, and I found some posts suggesting blocking the DiskImageMounter app. This seems to work; the app is blocked and the warning pops up.But the image is mounted anyway.Is this a speed thing? Mounting the image is happening quicker than the "kill process" feature works?Has anyone had any success blocking this in Big Sur and up? Thanks!

Hello all, we are currently working on getting Jamf Connect up and running in our higher ed ecosystem using Azure AD. We have pretty much everything successfully running, however we have quite a puzzler: we have users that require admin access to their specific computer, however the way Azure AD works, a user can only be assigned as a Standard or Admin user. The issue with that is, if we assign an account as Admin, it will allow them to administer every computer in our Jamf ecosystem. Does anybody happen to know of any way to automate local admin accounts to be device specific? Any help is appreciated!

I have a package named PreSonus-Studio-One-5.3.0.dmg - I ended up doing a capture because the app wants to grab about 20 gigs of sample files 😞 - its a large package at around 26 gigs.During install I get this error:Error: An error occurred attempting to mount the package "PreSonus-Studio-One-5.3.0.dmg".If I just double click on the dmg the OS validates the dmg and mounts it no problem.I'm using JAMF Pro 10.31.0 and I'm testing on 11.x (I've tested this problem on 3 separate machines - including physical machines).Anyone run into this and have a solution?Edit: I ran the policy in debug mode:Downloading https://edu/JamfShareDAV/Packages/PreSonus-Studio-One-5.3.0.dmg...Verifying DMG...Verifying package integrity...verbose: Determining package type...verbose: This is a standard DMG package...Installing PreSonus-Studio-One-5.3.0.dmg...verbose: Mounting DMG PreSonus-Studio-One-5.3.0.dmg as Shadow file...verbose: Result of hdiutil mount: hdiutil: mount failed - File to

I am having a hard time configuring the settings for iOffice Visitor for iPad distribution. I have reached out to their tech support, but they have no idea what I'm talking about even though their website explicitly says appconfig can be applied to their app. (they also seem to have never heard of Jamf)  https://support.iofficecorp.com/iOFFICE/Integration/MDM%2F%2FEMM_Integration tells me the key, type, and value I need. I started off by manually adding the following text in the AppConfig field for the app in JamfPro<dict> <key>ioffice.url</key> <string>mycompany.iofficeconnect.com</string> </dict>It is a very similar format that I successfully use for configuring Zoom, but this does not work for iOffice. When the app installs, it still prompts us to enter the site url.  When I told tech support that it doesn't work, they sent me to https://www.appconfig.org/www/appconfigspeccreator/ and told me to enter the BundleID as&nb

Hello,My company just recently switched over to Jamf and we have a mix of Intel Macs and M1 Macs.  We are having an issue with the Externel Kernel for Crowdstrike installing on our M1 machines.  They install perfectly fine on our Intel Macs just not on the M1s.  Does anyone have any experience with this issue?  

Hi,I have a custom type access level for Jamf Pro and I would like to know how Can I access the personal Recovery key on a work station as the option is not available in the Inventory - > Disk encryption section. That option is available for our Jamf Admin and We are Trying to figure out if this is available for custom access for jamf. If it is possible, what access should our Jamf admin add on my profile?Thanks in advance guys!

Good day Jamf professionals! I pushed out the latest OS update to computers with old versions of Monterey. I sent a mass remote command to a simple search group and checked download and allow user to install later. However when we go into system preferences on the Macbooks the software update just spins forever and never completes. Is there an issue with remote commands I am unaware of? Is there anyway to unfreeze the software update in System Preferences? Thank you in advance! 

We recently started deleting out old unused Sites in our Jamf instance as part of a routine cleanup. One of these sites happened to have set up some Managed Preference files back in the 10.9 days and deployed them to All Computers in the site. Once that site was deleted, the Managed Preferences Jamf stopped displaying 40 releases ago got dropped into the top level and kept its scope of "All Computers".We've unscoped the Managed Preferences using the API, but it looks like they're still applying to end user's machines. Does anyone have a good method for forcibly removing Managed Preferences from machines without affecting Configuration Profiles? The best thing I can come up with is runningrm -rf /Library/Managed Preferencesdscl . -delete /Computers/localhostdscl . -delete /Users/<<USERNAME HERE>> dsAttrTypeStandard:MCXSettingsand rebooting. This seems to work, but I'm not sure if this is the ideal way to handle this.  For one, it requires the end user to reboot to take

Migrating from SimpleMDM.  This was easy to setup with a config profile. <key>LoginwindowText</key><string>Serial Number {{serial_number}} - Device Name {{device_name}}</string>Is there an equivalent in JAMF config profiles ?

We are using PreStage Enrollment and want to skip setup and have the first login to be Autologin with the created user during PreStage Enrollment so the rest of the Jamf policies can finish before the first Network user logs in.Has anyone done this before and can help with what has worked and how to do it. any help would be appreciated.

Working on deploying and updating Jamf Connect in our environment.Found out in Jamf Pro I could deploy Jamf Connect and updates in the Jamf Application settings based off my configuration profile. I configured for "Automatically Deploy and Update Jamf Connect" set it to version 2.13.0, and update type set to Maintenance.It successfully deployed to a computer with an extremely old version however on the reset of the test devices that are running 2.1.3 up to 2.12.0 are listed as "Acknowledged" with no logs like I'd normally see. I can't find anything on what this Acknowledged status means.

I’m preparing to register for my first ever JNUC conference and need to know what the refund policy is before I commit. September is still a long way out and lots can change between now and then. I have an email in to JAMF but figured I would ask here in case anyone had a clue. Related to that, wondering about sources for coupons. $1200 is a good chunk of change, especially when you add in airfare and hotel. Thanks!

Hi, as we are experiencing some issues with our Jamf Infrastructure Manager I thought maybe I should set it up from scratch again.My Idea was to set up a new one connect it to Jamf Pro. After successful registration in Jamf Pro, switch the used LDAP Proxy in the LDAP-settings. And after success remove the old.Does anyone know if Jamf Pro supports multiple JIMs? Has anybody done something similar? Kind regards, Matthias

I just inherited a JSS one week after a 650 Macbook Air deploy. In this deploy, no machines have been bound or named, but asset tag info was recorded into the JSS (in the asset_tag field). Each of them has the name "Macbook Air" or "User's Macbook Air". What I need to do: Rename the devices (both in actuality and in the JSS) using data already stored in the asset_tag field of the JSS record for each machine. The names need to be changed to the asset tag with “-MAC” after it. An example is: If my asset tag is 12345, my computer name needs to be “12345-MAC”. I need to be able to run this script in a policy, once against each machine to change its name. Only after this is done can I move forward and begin to bind machines to active directory. Any assistance would be great, and thanks in advance!

I'm testing a Jamf connect login profile. When I log into a Mac using my credentials I'm always required to "Allow" the app to connect to my Google Account. Is there a way to reduce the amount of times the consent window pop up? It currently pops up every time after a successful login. Any helps appreciated! Thanks!

We'll soon be deploying Jamf Protect to our endpoints and are using the built-in integration between Jamf Protect and Jamf Pro to do the initial PKG and config profile installs. In our environment, most users are admins on their machines and one thing we discovered during testing was that someone could easily throw away the Jamf Protect app and be unprotected. To remedy this, we've created an EA that tracks the installed version of the Jamf Protect binary (or returns "Protect binary not found") and populates a smart group if the binary isn't present. A policy then re-installs Jamf Protect on any computer in that smart group.The one downside we've noted to this approach is that the EA only gets updated once daily on inventory collection, so it's possible for a computer to go up to 24 hours without Jamf Protect. Any ideas on how to accelerate the re-install in this situation? 

We are attempting to use VPP. we only have 3. 1 was added over a year ago and  is still working. Two were added just this week and those two are not working. When we click install a message in self service shows up saying Cannot each Jamf MDM Server. Then it opens the app store to the application page. The issue with this is that not all our mac users have an app store account. Which just makes things more complicated for me. 

Since we updated our Jamf Pro server to 10.37, any manually enrolled device is shown in Jamf as "unmanaged" . Appears that Jamf Binary is not downloaded to device --    /usr/local/jamf  is never createdThis happens on latest Macs with M1 and macOS Monterey, and older machines with an older macOS. Any one see this before?I see there were other posts about something similar where it was suggested that Rosetta needed to be installed - but in my case it is happening on machines with Intel Macs with macOS or earlierAny info appreciated 

We use DEPNotify as part of our deployment process so we can see which stage the process has got to.As part of this, we use defaults write to set up the .plist needed to allow DEPNotify to show a "registration" dialog that lets us specify the name and role (staff/student) of the Mac.On Monterey (12.2.1) on brand new Apple Silicon M1 iMacs, this seems to be failing for some reason.In the logs we can see:  2022-07-26 10:12:08.279056+0100 0x69fea Activity 0x5e290 10301 0 defaults: (CoreFoundation) Loading Preferences From System CFPrefsD 2022-07-26 10:12:08.297138+0100 0x69fff Activity 0x5e2c0 10311 0 defaults: (libsystem_info.dylib) Retrieve User by ID 2022-07-26 10:12:08.306905+0100 0x69fff Error 0x0 10311 0 defaults: (CoreFoundation) [com.apple.defaults:User Defaults] Couldn't write values for keys ( registrationMainTitle ) in CFPrefsPlistSource<0x600001394500> (Domain: menu.nomad.DEPNo

Trying to export the version of an install (security) application that does not use the standard .App format.When I run the command /usr/local/agent/agent --version 2>&1  | awk '/Agent/ {print $NF}' in Terminal, it outputs the correct information.When I try to use it in a variable AgentVer=( /usr/local/agent/agent --version 2>&1  | awk '/Agent/ {print $NF}' ) (for EA) I get error "-sh: syntax error near unexpected token `2'" so I know it has to do with the special characters but don't know how to allow them.

I could use a little helpI am trying to make EA to report back when a user has signed into Kerberos SSO.The way I am trying to go about is the read the SSO log file and scan for the word "Principal"If Principal is in the log then the user signed in.This is the EA I tried to make that is not working.Thanks for any help #!/bin/bashloggedInUser=$( /usr/bin/who | /usr/bin/awk '/console/{ print $1 }' )KSSOUSERID="$( /Users/$loggedInUser/Library/Logs/Kerberos_SSO.log | grep Principal | cut -d '=' -f2 | xargs)"if [[ "${KSSOUSERID}" == "" ]] ;then/bin/echo "<result>Not Signed-In</result>"else/bin/echo "<result>Sign-In Complete</result>"fiexit 0

Hi,Does anyone have a workflow on how to deploy the chrome LastPass extension? Is there any other way than packaging a custom chrome?