Hi. We need to create a special "sharing only" account on some of our computer. Users should be able to share the screen using that account – but not to login to that same local account (they are supposed to used their AD logins instead).Creating a local account with a Jamf policy doesn't give me the option to create  "sharing only" account as in System preferences. So how do I create one with Jamf?

Hey all,I’m wanting to install the creative cloud desktop app as a prestage package, however Adobe seems to continue to suck at making things. Without breaking their bizarre installer, I believe their “pkg” needs to be flat and also needs to be signed to be used as a prestage enrollment package. Im able to sign it no problem, but to get it to act like an actual package (meaning it doesn’t try to zip itself when dumped into our cloud distribution point) is my current problem. Anyone else figure out a way to utilize the Adobe installer as a prestage package?

Hey everyone - I'm very much a newbie here but would love some advice - at the moment I am uninstalling Symantec from all our macs and installing Windows Defender. I'm using the command script from here to uninstall Symantec - https://knowledge.broadcom.com/external/article?legacyId=TECH103489My policy places the command file at a local location on each mac and then runs it from there, however on my test mac I've found I'm still being prompted if I want to uninstall Symantec and  1 or 2 other prompts that I have to click on before it runs...is there anyway to make it fully silent without any interaction from a user?

I know this properly very easy to do, but i pretty new on the jamf . if anyone can assist that would be very appreciated!we have patch management setup by jamf trainer that we setup earlier, it shows below and remind me to update the package. I have downloaded the latest dmg form jamf account , i mount it and put the "jamf connect configuration.app" to the application folder .  one of the jamf connect updated, but the other still 2.12. same with the patch management too. please advise.       

At the end of November 2021, our administration team received the announcement that with Jamf School, we are able to manage the browsing experience (set bookmarks, restrict content, ...) in the browser Chrome on iPads.Currently, we have roughly 300 student devices that are managed by us via Jamf School. During breaks, students use their iPads to play online games a lot. We would like to restrict their usage of the browser Chrome and got hope with the post in the November 2021 newsletter.We followed directions to link our iPad devices with our Google Workspace for Education Plus. In the admin console, under devices - Chrome - managed browsers, we created a token. In the Jamf admin console, we put in the token under Apps - Chrome - Managed Configuration.Unfortunately, the iPads don't show up in the Google Admin console.Any helps and hints are very welcome.Thank you.

Most of my scripting experience is in Powershell and not shell scripting. I'm trying to create an extension attribute in JAMF Pro that checks if the Jamf Connect user is logged into a device. I can get the script to work in Terminal and spit out the information I want. However, after waiting a day, it's still not populating the results in Jamf Pro under the computer record. I'm sure I'm missing some command that sends the data to Jamf, but not sure what that would be. jamfConnectStateLocation=/Users/$currentUser/Library/Preferences/com.jamf.connect.state.plist CurrentPassword=$(defaults read com.jamf.connect.state PasswordCurrent) if [[ $CurrentPassword == 1 ]]; then echo “User is logged in” elif [[ $CurrentPassword == 0 ]]; then echo “User is not logged in” fiThe above is the script that works in terminal. I've tried adding echo "<result>$CurrentPassword</result>" on the end, but that spits back an error that result is not a recognized command. I've also

Is there a way to block older operating systems from enrolling? For instance, I'd like to set a policy that devices must be running Mojave or higher in order to be permitted to enroll. I couldn't find a setting for this, but was wondering if someone had a script that could be run at enrollment to effectively check, un-enroll if necessary, and display a message to the user to upgrade first?

Hi All Im having some issues with SecureToken not being assigned, therefore FileVault is never enabled. I created a policy users can run and that will use the admin account and assign a securetoken to the new user. This has been working just fine but now I have a user with a machine that has changed the login process since assigning the securetoken Old workflow:boot up, jamf connect appears, enter email and password, then verify network password and your inNew workflow:reboots, asked to select admin or his account , selects his account, is prompted for network password then jamf connect appears I havent changed anything in the process of workflow since creating the policy months back

I am fairly new in scripting and I am having trouble modifying a script that will successfully change the status tag of computers in a certain smart group.The status tag which is in the General and you have multiple drop down option (like Active, Retired, disposable, etc) options is created in EA.I can manually change it by going in the computer in general press edit and from the Status drop menu select what is the new status. I need to make the script do this for me.  #!/bin/bash # ——————————— Changes Site ——————————— apiURL="https://domain.jamfcloud.com" apiUser="user" apiPass="password" newStatus="Disposed" # ——————————— Getting the serial ——————————— computerserial="$(system_profiler SPHardwareDataType | grep 'Serial Number (system)' | awk '{print $NF}')" #Change the Site echo "<computer><general><status><value>$newStatus</value></status></general></computer>" | curl -X PUT -fku $apiUser:$apiPass -d @- $apiURL/JSSResource

My current environment is currently set up so the end users are local admins and the Administrator account is hidden. I am testing our Jamf Connect deployment and demoting my users to standard. I have come across an issue that If I am working on a standard users machine I can't run sudo commands in terminal. Is there a workaround for this??

Can we add a "Guest" account to about 150 Macbooks remotely? Looking for a way to not touch all of them to be able to do this? If so, what's the workflow? Thanks!

Hello, Anyone a clue why my icons are not loading in Self-Service from all the optional apps?Regards FJeroen

Hello All!I am having an issue where any new files I upload to Jamf Admin and then attempt to sync/replicate to the cloud, it acts like it's replicating and when the loading bar completes, it starts the copy over. It does this about 3 or 4 times before calculating checksum and moving on. This is happening to all the recent new files I uploaded to the cloud. If I add a new one, it still copies all previously uploaded ones, EVEN if they are already in the cloud. Although not a big deal and I can be patient because it appears to work/upload, however, when it gets to larger files (Office Suite), it's painful to wait for them to copy 3 - 4 times. I have been a quite a few different versions where this is still an issue. I found stopping on 10.34.2 worked the best for a while but now it's the same thing. I am on 10.38.0 now and it's still happening... This also happens on multiple different machines. Things I have tried:Different Jamf Pro App versionsRemoved new packages

I know there have been many questions about permissions, but I promise this one is different.  I have a media teacher who saves video to a file share and has her students access them from there.  She is requesting a much more detailed permissions setting than just R+W, read, none.  Here's an excerpt from her request:I need EVERYONE who has access to the (secret name) drive to be able to see & download & ADD TO ALL THE SUBFOLDERS within. They should be able to edit and delete (secret folder name). They should not be able to delete (different secret folder name), but should be able to see and download from it.Here's the issue.  If I understand correctly, R+W will also give delete permissions. Read only won't allow copying or editing. How do I handle this? 

Hi,Users on macOS 12 clients are unable to change their passwords. The 'Change Password...' buttons in the following locations are grayed out: System Prefs > Security & Privacy > General > Change PasswordSystem Prefs > Users & Groups > User > Change Password The buttons stay gray even when the padlocked is unlocked.This is for local and mobile clients.My 10.14 clients do not have this problem... is it expected?Thanks,David. 

Looking for a way to get an email when a new device comes over during a sync with Apple Business Manager. The device might not be online yet, so I doubt there would be a way to create a smart group. Does anyone have any ideas about how to get this done (other than waiting for the email that Apple sends...this is not always the best option for us).

We have a Mac mini (M1, 2020) model that we primarily remote into. Some of these macs are having an issue with the mouse pointer ghosting/lagging on the remote client mouse significantly.These are headless machines. We've setup mini's like this for years with no issue, but the new macs on Operating System Version: 12.3.1 are experiencing this issue.  Any ideas on what we can do to fix this? this is a link to a video of the issue:video of the mouse lag  edit to fix a typo

Good Morning Jamf Nation! I am working on getting ready for a summer project. I have several iPads that were manually setup with an Enrollment Profile. I'd like to move those to a Prestage Enrollment instead. However, when I try to assign the serial number to the appropriate Prestage, I get a notification 'No matching Records found'. Is there a way to get this set up in advance without having to manually touch those devices and wipe them?

We are seeing this with chrome. From one of our users:Self Service is forcing an "update" of Chrome on my Mac to an older version every day or two. After Self Service reinstalls Chrome at an older version, Chrome auto-updates to the latest version. Then the cycle starts over again with Self Service thinking that Chrome needs an update. Note: I've updated the version to stop the bleeding.

Our JSS is on prem.  After I installed Jamf 10.38, the Jamf Pro App Catalogue preview disappeared.   I looked at the product requirements, and see that a requirement is listed for Jamf Pro Instance hosted in Jamf Cloud.  It was working great on prem in 10.37, is this service really restricted to Cloud only now? Thanks for any info. 

In PreStage Enrollments, I configured an enrollment package to install Rosetta with the script someone shared on this forum. The script is packaged with Composer: #!/bin/bash arch=$(/usr/bin/arch) if [ "$arch" == "arm64" ]; then echo "Apple Silicon - Installing Rosetta" /usr/sbin/softwareupdate --install-rosetta --agree-to-license elif [ "$arch" == "i386" ]; then echo "Intel - Skipping Rosetta" else echo "Unknown Architecture" fi Yet when I set up an M1 computer, many configurations are not getting installed and the logs show: Installation failed. The installer reported: installer: This package requires Rosetta 2 to be installed. Please install Rosetta 2 and then try again. sudo softwareupdate --install-rosetta installer: Error - Microsoft Teams can’t be installed on this computer. Installation failed. The installer reported: installer: This package requires Rosetta 2 to be installed. Please install Rosetta 2 and

We have several M1 chip MacBooks that we want to deploy. How can we push and ensure the Rosetta policy to install (softwareupdate --install-rosetta) gets installed before all the other policies (i.e. Office, TeamViewer, etc.) ? If not, the other installs will fail. I can create a separate policy for each application that has a different scope but that becomes a pain.

Hello.When I attempt to migrate around 100 machines from one jamf cloud instance to another the computers are move from the old jamf to the new one but the MDM profile for the new jamf pro is not being installed and when I open Self Service I'm prompted to approve the MDM but once I click the button there is no profile to be approved

We are running into this issue that we can't package with an error, unless something went, checking status if something is down.  

Hello everyone,I have a problem with my deployment of ESET via Jamf. I'm following their guide [KB8248] and I'm getting the software installed on the target machine, but the settings for Full Disk Access doesn't get pushed to the computer correctly. I can see the different components listed in the preference pane, but they are all unchecked, so ESET doesn't work.During the installation the user gets asked for admin credentials ("macOS wants to make changes"), but no matter if I type them in or not the problem persists (nevertheless I'd rather get rid of that dialogue completely, because my users obviously don't run as admins).Which additional information do you need to help me with this?