Hi Everyone,Bit of a niche question here.  We are currently using DEPNotify to pre install applications and settings to Mac's which are company owned, as well as improve the end user onboarding experience. We currently also use Jamf Connect which gets the user to sign in using their AzureAD creds and sync a local password to the Mac.  Directly after that, DEPNotify kicks in and begins installing software, plists and configs.  The user is not prompted, to setup their Touch ID, or their iCloud account. Is there a way of getting DEPNotify to invoke this from Setup Assistant?  Or maybe doing a partial Setup Assistant with certain screens like the Touch ID, iCloud Setup, Apple Pay etc?  

.

Hello all,I currently have a support call open with JAMF about this and thought I'd put the feelers out to see if anyone else has encountered this problem.Essentially, after a period of time, part of our iMac fleet started falling out of touch with the JSS. I noticed that 'Inventory update' and the 'JAMF recon' commands were failing with an 'unknown error'. Further inspection of affected devices show that there's been some recursive duplication of 'services' and the device breaks connection with the server.To give you an idea, normally a device has around 300-400 services listed. I have devices with between 15000-20000 at their last point of communication.Curiously, running 'launchctl list' on affected device doesn't show the large list found on the JSS (maybe this isn't related). I haven't been able to catch a device as it's spiralling out of control.Anyone encountered this issue before?So far I've only witnessed it on Big Sur 11.4.0 - 11.6.1.Currently have a metric butt-tonne of uniq

 Hello to all ;)I hope, someone can help me to find a solution for my question:We use an app, based on Java®. There are some settings for this app configured at ~/Library/Preferences/com.apple.java.util.prefs.plist.Now, we have to modify some settings. To do this, I wrote a small script, that works very well. The file is modified and stored with the new entries. BUT: If I start the app, the file will be reset to the old values.I have no idea, where the "old version" comes from. I guess, that there is a backup version somewhere, maybe in a cache and a system process restores the original version of the plist.Does anyone have an idea, how I could fix this?

We have about 15 computers currently in JAMF Pro, we added JAMF Protect and set up a policy to push it out to the endpoints. That was a few days ago and pretty quickly 7 machines showed up in the JAMF protect portal.... but now a few days later its still just those 7, the others are not showing up. I looked at the logs in JAMF Pro and 14 out of the 15 show completed, and just one shows pending. Not sure where to go next as far as testing this and getting the others to show up. 

Hi All, I am trying to build a dmg package using Jamf Composer 10.36 on an Apple M1 Silicon device with a normal snapshot. The macOS version is Monterey 12.2.1. Snapshot B has the correct changes, however when I click "Build dmg package" the application crashes.Is anyone else experiencing this issue?

Hello, I have 2 questions regarding JAMF Connect Unlock. Does the iOS device running the Unlock App count against your licensed device count for Jamf Connect?Is there a way with JAMF Pro to allow the Jamf Connect pairing with a standard account? I've been unable to resolve how to do this, and would like to know if its possible. I receive this prompt and am unable to use the app unless my account is a local administrator. Thanks for any help!

If I've uploaded a pkg or dmg file to Settings > Computer Management > Packages, then change the display name of that item, will it cause a script that references the original name of the pkg or dmg to fail?  In other words does the original file name remain somewhere, or will my script need to be updated along with the pkg or dmg display name?

Hi all,I'm new to JAMF Pro and just wanted to confirm what I think I am seeing.That  there is no api for creating smart mobile device groups, only static. Can anyone confirm that my understanding is correct. ThanksSteven

I'm new to Jamf, and I've recently inherited a Jamf network of about 200 Macs. My current task is to get Zero Touch Deployment fully functional, so we don't have to do any manual staging on Macs before they are handed to the users. (We are part of Apple's DEP/VPP, and that much works fine.) tldr; What is the best way to enable FileVault 2 so it deploys automatically, as silently as possible, as soon after initial enrollment as possible? My goal is to have all of the Macs have FileVault 2 enabled, with the individual encryption recover keys redirected to Jamf server. I've experimented with both a Configuration Profile, assigned to the PreStage Enrollment, and with a Policy, and both have rough edges that I'm not sure how to smooth out. There are two specific things that I'd like to remedy: 1) It always pops up and tells the user their recovery key, and cautions them to keep it in a safe place. Is there any way to hide this without resorting to an Institutional Recovery Key? I don

Good morning allI'm newish to Jamf so bare with me if this is obvious.  Today I started prepping 2 new computers, one was pre-enrolled brand new out of the box and the other was an older MBA that I used a manual invite.Most of the usual policies applied except for 3, the same 3 on both systems.  When I check Inventory -> Management for the devices, they appear in the "Failed Commands"  section with an "Invalid Status Code" listed as the status.  I have tried removing these computer from the policy scopes, cancelling the commands and then re-adding them to the scopes.  Same result. Does anyone have any suggestions?  I don't know why all of sudden these are 3 (specifically) are failing.  They have worked for months, and I have not made any changes to them.Thanks 

Did something change in a recent version that the devices enrolled via DEM and pre-stage enrollment are not getting the Jamf management account (with randomized password) ? My devices are coming out of DEP as "unmanaged", I know how to then set the local admin account but was wondering if there was either a change that requires an additional setting or perhaps an issue. I do not actually do much in my pre-stage enrollment since we are not attempting an OOBE for our end use, and have not changed anything in quite a while. 

We're in the process of setting up our 3rd party patching. We're using Installomator to update the applications. I did see an older post where somebody had Recurring checked, Once per computer and then had a time set in client-side, so I thought the same process would work. The update is running at the 5min check-in and not the time listed in the server. I also tried unchecking recurring and checked custom with a trigger to see if that would work.

Hi all, I have the following script which I would like to deploy via Jamf Pro at Enrolment: #!/bin/shrm -rf "/Users/$USER/Templates/PPT"curl "https://xxx.blob.core.windows.net/XXXX/XXX-PPT-Templates.zip" --create-dirs -o "/Users/$USER/Templates/PPT/XXX-PPT-Templates.zip"echo "Unpacking..."tar xvf "/Users/$USER/Templates/PPT/XXX-PPT-Templates.zip" -C "/Users/$USER/Templates/PPT/"echo "Cleaning..."rm "/Users/$USER/Templates/PPT/ADL-PPT-Templates.zip"The purpose of the script is to deploy Microsoft Office templates to end users Mac's.  For the Windows estate we have a tool called Upslide which works well however they dont have a MacOS version just yet.  This is why we would like to distribute them in this way.  Unless there is a better option out there in Jamf Pro? We are using DepNotify and are calling this script at Enrolment time using a custom trigger.  When the script runs I see the "Templates" folder is created in the /Users/root directory.  T

I'm new at this software and i'm lost in this mountaim of information, how can I add new computers or any device at JAMF PROTECT?

Hello Jamf Nation, Not sure if there is a fix for this or not.  It seems as if JAMF is reporting incorrect, or different version numbers for a few applications in different areas. For example, Google Drive is reporting in JAMF Patch Management as 5.9.03 but when you check a computer's Application inventory it's reporting as 59.0.Is this a bug? Any way to correct it? 

Hi,When we reimage a MacBook, it then goes through pre-stage enrollment where it joins our Active directory domain.  After that initial setup continues and we're asked to create a local account.Is there a way to skip the creating of a local account and log in with an AD account?

Hello all, Does anyone know of a way to assign an LDAP user to multiple devices via the API or GUI?  I need a add a service account to a bunch of Apple TV, so that I can get them connected to wireless via radius auth.Thanks in advance!

Hey everyone - I'm very much a beginner when it comes to coding and I'm very confused as to how to utilise any that people have posted as answers to questions in Github? Most of the time someone posts a comment that has a nice script in it, but if I copy and paste that script into a notepad, save it as a .bash - do I still need to chmod it? Does doing that do something to the file itself? Previously I just pasted the code into a notepad ++, did an EOL conversion to mac and saved it but it still failed to run as a script in JAMF. Wondering if I still need to chmod the file?

Hi All, I am trying to update the new server address of Global Protect VPN. I have created a new plist with updated VPN address and uploaded it into a new configuration profile. Scoped it to my machine only. In logs, it says completed but I still see the old server address in the plist. Any suggestion?

Hey all,We've built a workflow to upgrade our Catalina Macs to Monterey which is running pretty smoothly apart from 1 step, after a reboot that is part of the upgrade we're seeing the password prompt, which I assume is to unlock the FV disk, but it is filling the username field with System Administrator and prompting for a password reset. The command our script is running is a pretty straightforward one - /Applications/Install macOS Monterey.app/Contents/Resources/startosinstall --agreetolicense --forcequitappsI think the reason we're seeing the System Administrator thing is because the script is running as root  but does anyone have any suggestion about how we get round it (without enabling the root account for login)?

I've been playing around with deploying a eduroam profile for our university wireless network. I've downloaded our university profile from here: https://cat.eduroam.org and then uploaded it to jamf. The profile contains settings for the wireless network and some certificates. I've had luck deploying the profile as a computer level configuration profile. The user can then simply connect to the wireless network, and is then prompted for their credentials. Now is there any downside for deploying the profile as a computer level or should I opt for user level instead?

First, Sorry for the long post.  I have been working on this with Engineers for a few days:I wanted to document an issue I am experiencing currently with my Jamf Pro Cloud instance.  At the time of writing this I am working with Jamf Engineers and we have not yet come to a solution, but I wanted to get information out there in case anyone in the community has seen this issue before, and (if/when) I get my problem resolved I would like to be able to provide a solution for both jamf engineers and the community to look back on.  We are currently running Jamf Pro Cloud 10.38.3 and starting experiencing issues that I noticed Monday with our LDAP connection to OneLogin.  We started to get the ERROR CALCULATING POLICIES IN SCOPE for both Policies and Configuration Profiles for all users.   It is effecting almost all staff members at this point in one way or another, mostly in not being able receive configuration profiles that should automatically a

I'm hoping someone here has encountered this issue and solved it. I'm at a loss for how to fix this.One of my users has an issue with joining Teams meetings from within Teams. When he clicks join, his default browser opens. If he has Chrome set to be the default browser, he can click the option to open Teams and continue joining his meeting. If Safari is set to the default browser, he can't join the meeting. Obviously we want for Teams to not trigger a browser to open. It should just join the meeting from within the app.Here are the things I have tried to solve this: 1. Log out his account and the log back in.2. Use the Teams reset tool from Microsoft.3. Completely remove Teams using a tool called AppCleaner which will find all of the settings, caches and other miscellaneous files associated with Teams and delete them along with the app. Reinstalled Teams after this.I have searched for this issue in the Microsoft support community but all I have found are a lot of me too posts and

When trying to use Change password option within Jamf Connect Menu App, the following message comes up, Configuration file does not specify default realm. The realm is configured in the Configuration Policy for Jamf Connect, but it seems it's not able to read it.