Hello,My company just recently switched over to Jamf and we have a mix of Intel Macs and M1 Macs.  We are having an issue with the Externel Kernel for Crowdstrike installing on our M1 machines.  They install perfectly fine on our Intel Macs just not on the M1s.  Does anyone have any experience with this issue?  

Hi,I have a custom type access level for Jamf Pro and I would like to know how Can I access the personal Recovery key on a work station as the option is not available in the Inventory - > Disk encryption section. That option is available for our Jamf Admin and We are Trying to figure out if this is available for custom access for jamf. If it is possible, what access should our Jamf admin add on my profile?Thanks in advance guys!

Good day Jamf professionals! I pushed out the latest OS update to computers with old versions of Monterey. I sent a mass remote command to a simple search group and checked download and allow user to install later. However when we go into system preferences on the Macbooks the software update just spins forever and never completes. Is there an issue with remote commands I am unaware of? Is there anyway to unfreeze the software update in System Preferences? Thank you in advance! 

We recently started deleting out old unused Sites in our Jamf instance as part of a routine cleanup. One of these sites happened to have set up some Managed Preference files back in the 10.9 days and deployed them to All Computers in the site. Once that site was deleted, the Managed Preferences Jamf stopped displaying 40 releases ago got dropped into the top level and kept its scope of "All Computers".We've unscoped the Managed Preferences using the API, but it looks like they're still applying to end user's machines. Does anyone have a good method for forcibly removing Managed Preferences from machines without affecting Configuration Profiles? The best thing I can come up with is runningrm -rf /Library/Managed Preferencesdscl . -delete /Computers/localhostdscl . -delete /Users/<<USERNAME HERE>> dsAttrTypeStandard:MCXSettingsand rebooting. This seems to work, but I'm not sure if this is the ideal way to handle this.  For one, it requires the end user to reboot to take

Migrating from SimpleMDM.  This was easy to setup with a config profile. <key>LoginwindowText</key><string>Serial Number {{serial_number}} - Device Name {{device_name}}</string>Is there an equivalent in JAMF config profiles ?

We are using PreStage Enrollment and want to skip setup and have the first login to be Autologin with the created user during PreStage Enrollment so the rest of the Jamf policies can finish before the first Network user logs in.Has anyone done this before and can help with what has worked and how to do it. any help would be appreciated.

Working on deploying and updating Jamf Connect in our environment.Found out in Jamf Pro I could deploy Jamf Connect and updates in the Jamf Application settings based off my configuration profile. I configured for "Automatically Deploy and Update Jamf Connect" set it to version 2.13.0, and update type set to Maintenance.It successfully deployed to a computer with an extremely old version however on the reset of the test devices that are running 2.1.3 up to 2.12.0 are listed as "Acknowledged" with no logs like I'd normally see. I can't find anything on what this Acknowledged status means.

I’m preparing to register for my first ever JNUC conference and need to know what the refund policy is before I commit. September is still a long way out and lots can change between now and then. I have an email in to JAMF but figured I would ask here in case anyone had a clue. Related to that, wondering about sources for coupons. $1200 is a good chunk of change, especially when you add in airfare and hotel. Thanks!

Hi, as we are experiencing some issues with our Jamf Infrastructure Manager I thought maybe I should set it up from scratch again.My Idea was to set up a new one connect it to Jamf Pro. After successful registration in Jamf Pro, switch the used LDAP Proxy in the LDAP-settings. And after success remove the old.Does anyone know if Jamf Pro supports multiple JIMs? Has anybody done something similar? Kind regards, Matthias

I just inherited a JSS one week after a 650 Macbook Air deploy. In this deploy, no machines have been bound or named, but asset tag info was recorded into the JSS (in the asset_tag field). Each of them has the name "Macbook Air" or "User's Macbook Air". What I need to do: Rename the devices (both in actuality and in the JSS) using data already stored in the asset_tag field of the JSS record for each machine. The names need to be changed to the asset tag with “-MAC” after it. An example is: If my asset tag is 12345, my computer name needs to be “12345-MAC”. I need to be able to run this script in a policy, once against each machine to change its name. Only after this is done can I move forward and begin to bind machines to active directory. Any assistance would be great, and thanks in advance!

I'm testing a Jamf connect login profile. When I log into a Mac using my credentials I'm always required to "Allow" the app to connect to my Google Account. Is there a way to reduce the amount of times the consent window pop up? It currently pops up every time after a successful login. Any helps appreciated! Thanks!

We'll soon be deploying Jamf Protect to our endpoints and are using the built-in integration between Jamf Protect and Jamf Pro to do the initial PKG and config profile installs. In our environment, most users are admins on their machines and one thing we discovered during testing was that someone could easily throw away the Jamf Protect app and be unprotected. To remedy this, we've created an EA that tracks the installed version of the Jamf Protect binary (or returns "Protect binary not found") and populates a smart group if the binary isn't present. A policy then re-installs Jamf Protect on any computer in that smart group.The one downside we've noted to this approach is that the EA only gets updated once daily on inventory collection, so it's possible for a computer to go up to 24 hours without Jamf Protect. Any ideas on how to accelerate the re-install in this situation? 

We are attempting to use VPP. we only have 3. 1 was added over a year ago and  is still working. Two were added just this week and those two are not working. When we click install a message in self service shows up saying Cannot each Jamf MDM Server. Then it opens the app store to the application page. The issue with this is that not all our mac users have an app store account. Which just makes things more complicated for me. 

Since we updated our Jamf Pro server to 10.37, any manually enrolled device is shown in Jamf as "unmanaged" . Appears that Jamf Binary is not downloaded to device --    /usr/local/jamf  is never createdThis happens on latest Macs with M1 and macOS Monterey, and older machines with an older macOS. Any one see this before?I see there were other posts about something similar where it was suggested that Rosetta needed to be installed - but in my case it is happening on machines with Intel Macs with macOS or earlierAny info appreciated 

We use DEPNotify as part of our deployment process so we can see which stage the process has got to.As part of this, we use defaults write to set up the .plist needed to allow DEPNotify to show a "registration" dialog that lets us specify the name and role (staff/student) of the Mac.On Monterey (12.2.1) on brand new Apple Silicon M1 iMacs, this seems to be failing for some reason.In the logs we can see:  2022-07-26 10:12:08.279056+0100 0x69fea Activity 0x5e290 10301 0 defaults: (CoreFoundation) Loading Preferences From System CFPrefsD 2022-07-26 10:12:08.297138+0100 0x69fff Activity 0x5e2c0 10311 0 defaults: (libsystem_info.dylib) Retrieve User by ID 2022-07-26 10:12:08.306905+0100 0x69fff Error 0x0 10311 0 defaults: (CoreFoundation) [com.apple.defaults:User Defaults] Couldn't write values for keys ( registrationMainTitle ) in CFPrefsPlistSource<0x600001394500> (Domain: menu.nomad.DEPNo

Trying to export the version of an install (security) application that does not use the standard .App format.When I run the command /usr/local/agent/agent --version 2>&1  | awk '/Agent/ {print $NF}' in Terminal, it outputs the correct information.When I try to use it in a variable AgentVer=( /usr/local/agent/agent --version 2>&1  | awk '/Agent/ {print $NF}' ) (for EA) I get error "-sh: syntax error near unexpected token `2'" so I know it has to do with the special characters but don't know how to allow them.

I could use a little helpI am trying to make EA to report back when a user has signed into Kerberos SSO.The way I am trying to go about is the read the SSO log file and scan for the word "Principal"If Principal is in the log then the user signed in.This is the EA I tried to make that is not working.Thanks for any help #!/bin/bashloggedInUser=$( /usr/bin/who | /usr/bin/awk '/console/{ print $1 }' )KSSOUSERID="$( /Users/$loggedInUser/Library/Logs/Kerberos_SSO.log | grep Principal | cut -d '=' -f2 | xargs)"if [[ "${KSSOUSERID}" == "" ]] ;then/bin/echo "<result>Not Signed-In</result>"else/bin/echo "<result>Sign-In Complete</result>"fiexit 0

Hi,Does anyone have a workflow on how to deploy the chrome LastPass extension? Is there any other way than packaging a custom chrome?

Hello Jamf Nation! I am trying to update all of our Macbook OS to the latest version. We run a 24/7 operation so I don`t have a set time that I can push this out and not disrupt our business. So I send a remote mass command to a saved search with all the users that have outdated OS. I selected "download for user to install" so our users can update at their convenience. I am wondering once the OS is downloaded where do our users go to initiate the update? It might be a dumb question but a definitive answer would help a bunch. Thanks everyone!

Hi All,We have a iMac mac lab for students.  Computers are running Monterey.  Is there a way I can allow plugging in an iPod with admin rights?  How bad could it be?

I'm trying to install Barracuda Backup Agent via JAMF to my macs, but the only installation Barracuda provides is an .app file within a .dmg.  In the past, I'd just capture the installation in Composer and deploy. But now with the wonderful Read Only System volume, I get the error that the package is attempting to install content to the system volume.The installer places the app in the Applications folder, as well as some config settings in /Library/Application Support and a plist in LaunchDaemons.  I've tried modifying the permissions within Composer so they are all root/wheel and applying it to all enclosed items, but it still doesn't help.  Even manually running the package it creates gives the same error.  This is going to be a pain moving forward.  Does anyone have a solution?

 I'm completely lost here, I have tried PPPC utility  (downloaded from jamf github), manually creating PPPC in other tools and jamfcloud console, and even tried to edit tcc.db in /Library/Application Support/com.apple.TCC/TCC.db .I tested few apps among many packages i need to install with jamf, and had no luck with any of them. Any suggestions? Here's one thing i tried for Symantec Endpoint Protection    

I have done my due diligence to find an answer to this across this forum and the internet as a whole and I am stumped. Basically, I want an out-of-box experience for the end user, and that's all working great. The problem is, since the user enables FileVault when they sign in, the local admin account is not FileVault enabled, meaning if a machine is powered off, I can't log in without the user being there to sign in. I know I could use the recovery key to get in, but I'd rather avoid that if possible.I considered using fdesetup, but given that it will be a different user setting up FileVault every time, there's no way to automate adding our local admin account as a FileVault approved user since fdesetup requires the password of an account that already has FileVault access.Basically, my end goal is 1. User logs in for the first time2. User is prompted to enable FileVault, and does so.3. Using current logged in user, add local admin as a FV2 enabled user Is this possible in any

Is there a way to swap one configuration for another, depending on if a user is signed in or not?We have some laptops, and really want to set them up as multi user devices, which for us will mean signing in using NoMad. For this to work, we will need a WiFi configuration to give access to our network, so that the NoMad system can authenticate and log in the user account.Once the user is signed in, we want the WiFi configuration to switch over to using our main WiFi network. Then when the user logs out, we want the WiFi to switch back to the previous one, totally forgetting the user credentials.I guess a way to create a smart group based on if there is an account logged in or not will be a good place to start. Then all I would need to do is create the 2 configurations and set them to apply or exclude as required.But this would need to be done as the user logs in, or as they log out. And the configuration doesnt want to get caught in the middle - One WiFi configuration removed before the

In my config,Device Restriction Profile Payload- Apple store is enabled but device it gives and Error on device that Apple Store is not available. From profile deployment status it does say that profile is applied to device. Before the apple store was blocked & now I want to enable it? Any idea? Thanks