At the end of November 2021, our administration team received the announcement that with Jamf School, we are able to manage the browsing experience (set bookmarks, restrict content, ...) in the browser Chrome on iPads.Currently, we have roughly 300 student devices that are managed by us via Jamf School. During breaks, students use their iPads to play online games a lot. We would like to restrict their usage of the browser Chrome and got hope with the post in the November 2021 newsletter.We followed directions to link our iPad devices with our Google Workspace for Education Plus. In the admin console, under devices - Chrome - managed browsers, we created a token. In the Jamf admin console, we put in the token under Apps - Chrome - Managed Configuration.Unfortunately, the iPads don't show up in the Google Admin console.Any helps and hints are very welcome.Thank you.

Most of my scripting experience is in Powershell and not shell scripting. I'm trying to create an extension attribute in JAMF Pro that checks if the Jamf Connect user is logged into a device. I can get the script to work in Terminal and spit out the information I want. However, after waiting a day, it's still not populating the results in Jamf Pro under the computer record. I'm sure I'm missing some command that sends the data to Jamf, but not sure what that would be. jamfConnectStateLocation=/Users/$currentUser/Library/Preferences/com.jamf.connect.state.plist CurrentPassword=$(defaults read com.jamf.connect.state PasswordCurrent) if [[ $CurrentPassword == 1 ]]; then echo “User is logged in” elif [[ $CurrentPassword == 0 ]]; then echo “User is not logged in” fiThe above is the script that works in terminal. I've tried adding echo "<result>$CurrentPassword</result>" on the end, but that spits back an error that result is not a recognized command. I've also

Is there a way to block older operating systems from enrolling? For instance, I'd like to set a policy that devices must be running Mojave or higher in order to be permitted to enroll. I couldn't find a setting for this, but was wondering if someone had a script that could be run at enrollment to effectively check, un-enroll if necessary, and display a message to the user to upgrade first?

Hi All Im having some issues with SecureToken not being assigned, therefore FileVault is never enabled. I created a policy users can run and that will use the admin account and assign a securetoken to the new user. This has been working just fine but now I have a user with a machine that has changed the login process since assigning the securetoken Old workflow:boot up, jamf connect appears, enter email and password, then verify network password and your inNew workflow:reboots, asked to select admin or his account , selects his account, is prompted for network password then jamf connect appears I havent changed anything in the process of workflow since creating the policy months back

I am fairly new in scripting and I am having trouble modifying a script that will successfully change the status tag of computers in a certain smart group.The status tag which is in the General and you have multiple drop down option (like Active, Retired, disposable, etc) options is created in EA.I can manually change it by going in the computer in general press edit and from the Status drop menu select what is the new status. I need to make the script do this for me.  #!/bin/bash # ——————————— Changes Site ——————————— apiURL="https://domain.jamfcloud.com" apiUser="user" apiPass="password" newStatus="Disposed" # ——————————— Getting the serial ——————————— computerserial="$(system_profiler SPHardwareDataType | grep 'Serial Number (system)' | awk '{print $NF}')" #Change the Site echo "<computer><general><status><value>$newStatus</value></status></general></computer>" | curl -X PUT -fku $apiUser:$apiPass -d @- $apiURL/JSSResource

My current environment is currently set up so the end users are local admins and the Administrator account is hidden. I am testing our Jamf Connect deployment and demoting my users to standard. I have come across an issue that If I am working on a standard users machine I can't run sudo commands in terminal. Is there a workaround for this??

Can we add a "Guest" account to about 150 Macbooks remotely? Looking for a way to not touch all of them to be able to do this? If so, what's the workflow? Thanks!

Hello, Anyone a clue why my icons are not loading in Self-Service from all the optional apps?Regards FJeroen

Hello All!I am having an issue where any new files I upload to Jamf Admin and then attempt to sync/replicate to the cloud, it acts like it's replicating and when the loading bar completes, it starts the copy over. It does this about 3 or 4 times before calculating checksum and moving on. This is happening to all the recent new files I uploaded to the cloud. If I add a new one, it still copies all previously uploaded ones, EVEN if they are already in the cloud. Although not a big deal and I can be patient because it appears to work/upload, however, when it gets to larger files (Office Suite), it's painful to wait for them to copy 3 - 4 times. I have been a quite a few different versions where this is still an issue. I found stopping on 10.34.2 worked the best for a while but now it's the same thing. I am on 10.38.0 now and it's still happening... This also happens on multiple different machines. Things I have tried:Different Jamf Pro App versionsRemoved new packages

I know there have been many questions about permissions, but I promise this one is different.  I have a media teacher who saves video to a file share and has her students access them from there.  She is requesting a much more detailed permissions setting than just R+W, read, none.  Here's an excerpt from her request:I need EVERYONE who has access to the (secret name) drive to be able to see & download & ADD TO ALL THE SUBFOLDERS within. They should be able to edit and delete (secret folder name). They should not be able to delete (different secret folder name), but should be able to see and download from it.Here's the issue.  If I understand correctly, R+W will also give delete permissions. Read only won't allow copying or editing. How do I handle this? 

Hi,Users on macOS 12 clients are unable to change their passwords. The 'Change Password...' buttons in the following locations are grayed out: System Prefs > Security & Privacy > General > Change PasswordSystem Prefs > Users & Groups > User > Change Password The buttons stay gray even when the padlocked is unlocked.This is for local and mobile clients.My 10.14 clients do not have this problem... is it expected?Thanks,David. 

Looking for a way to get an email when a new device comes over during a sync with Apple Business Manager. The device might not be online yet, so I doubt there would be a way to create a smart group. Does anyone have any ideas about how to get this done (other than waiting for the email that Apple sends...this is not always the best option for us).

We have a Mac mini (M1, 2020) model that we primarily remote into. Some of these macs are having an issue with the mouse pointer ghosting/lagging on the remote client mouse significantly.These are headless machines. We've setup mini's like this for years with no issue, but the new macs on Operating System Version: 12.3.1 are experiencing this issue.  Any ideas on what we can do to fix this? this is a link to a video of the issue:video of the mouse lag  edit to fix a typo

Good Morning Jamf Nation! I am working on getting ready for a summer project. I have several iPads that were manually setup with an Enrollment Profile. I'd like to move those to a Prestage Enrollment instead. However, when I try to assign the serial number to the appropriate Prestage, I get a notification 'No matching Records found'. Is there a way to get this set up in advance without having to manually touch those devices and wipe them?

We are seeing this with chrome. From one of our users:Self Service is forcing an "update" of Chrome on my Mac to an older version every day or two. After Self Service reinstalls Chrome at an older version, Chrome auto-updates to the latest version. Then the cycle starts over again with Self Service thinking that Chrome needs an update. Note: I've updated the version to stop the bleeding.

Our JSS is on prem.  After I installed Jamf 10.38, the Jamf Pro App Catalogue preview disappeared.   I looked at the product requirements, and see that a requirement is listed for Jamf Pro Instance hosted in Jamf Cloud.  It was working great on prem in 10.37, is this service really restricted to Cloud only now? Thanks for any info. 

In PreStage Enrollments, I configured an enrollment package to install Rosetta with the script someone shared on this forum. The script is packaged with Composer: #!/bin/bash arch=$(/usr/bin/arch) if [ "$arch" == "arm64" ]; then echo "Apple Silicon - Installing Rosetta" /usr/sbin/softwareupdate --install-rosetta --agree-to-license elif [ "$arch" == "i386" ]; then echo "Intel - Skipping Rosetta" else echo "Unknown Architecture" fi Yet when I set up an M1 computer, many configurations are not getting installed and the logs show: Installation failed. The installer reported: installer: This package requires Rosetta 2 to be installed. Please install Rosetta 2 and then try again. sudo softwareupdate --install-rosetta installer: Error - Microsoft Teams can’t be installed on this computer. Installation failed. The installer reported: installer: This package requires Rosetta 2 to be installed. Please install Rosetta 2 and

We have several M1 chip MacBooks that we want to deploy. How can we push and ensure the Rosetta policy to install (softwareupdate --install-rosetta) gets installed before all the other policies (i.e. Office, TeamViewer, etc.) ? If not, the other installs will fail. I can create a separate policy for each application that has a different scope but that becomes a pain.

Hello.When I attempt to migrate around 100 machines from one jamf cloud instance to another the computers are move from the old jamf to the new one but the MDM profile for the new jamf pro is not being installed and when I open Self Service I'm prompted to approve the MDM but once I click the button there is no profile to be approved

We are running into this issue that we can't package with an error, unless something went, checking status if something is down.  

Hello everyone,I have a problem with my deployment of ESET via Jamf. I'm following their guide [KB8248] and I'm getting the software installed on the target machine, but the settings for Full Disk Access doesn't get pushed to the computer correctly. I can see the different components listed in the preference pane, but they are all unchecked, so ESET doesn't work.During the installation the user gets asked for admin credentials ("macOS wants to make changes"), but no matter if I type them in or not the problem persists (nevertheless I'd rather get rid of that dialogue completely, because my users obviously don't run as admins).Which additional information do you need to help me with this?

I have inherited a Jamf instance that was set up and managed by someone who was just learning on the fly. This means there are a ton of configuration profiles, policies and such that are messy and in some cases unnecessary. I have been going through and cleaning up here and there but I am wondering if anyone has had an experience like this?Is it possible to create a new instance that I can build out the way it should be and then migrate the computers and devices from the old instance? One of the things I am looking to accomplish is the removal of some sites that shouldn't be there. But then if I remove the sites, it could break profiles and policies that are assigned to them, no? Any thoughts or ideas here would be appreciated. Thanks in advance! 

Hello all, I'm trying to write a script that allows an end user to set the name of their computer based on a specific naming convention. Unfortunately, my scripting knowledge is lacking and I'm having trouble getting the results I'm looking for. Here's what I've got so far. Any help would be greatly appreciated. I'm sure it's a bit of a hodge-podge so please forgive my hodge-podginess. #!/bin/sh #The user will choose their department from a drop down menu choose from list {"ACAD", "ALUM", "ANES", "BIOC"} with title "Departments" with prompt "Please choose your department" #The user will choose their building from a drop down menu choose from list {"APM", "BRI", "CAIR", "CFAC", "CCC", "CHCB", "CHW", "CRI"} with title "Buildings" with prompt "Please choose your building" #The user wil

We're looking for a Jamf Expert to take lead on clients' cloud-hosted Jamf Pro environments. Clients range from schools and non-profits to SMB and Enterprise companies. Work with the best Jamf Engineers on the planet and learn the ropes to managing enterprise clients at this fast growing Apple-based MSP!ResponsibilitiesProjectsLead update meetings with client stakeholders about the progress of time sensitive projectsLead whiteboard sessions about the technical aspects of a specific projectCollaborate with our team to build an incredible Jamf Pro server that brings clients to a Rocketman Approved stateImplement change management proceduresMaintenanceProvide Tier 3 support for Jamf ProCollaborate with the client’s Help Desk to automate solutions and create quick fixes in Self Service for common user issuesMeet regularly with stakeholders to ensure all their needs are metProactively maintain client’s servers based on macOS and Jamf updatesBuild custom scripts and solutions to aid in

Hi,I was wondering if anyone else out there has run into this issue. We are trying to automate the management of "classes" in jamf pro. We can create a class via the API, but we cannot add a user group to the teacher group or student group of a class (or even a user account to the class) via the API. The API seems to be incomplete and only supports adding shared iPad devices to a class (according to the documentation).It is strange, as the functionality is there in the GUI.if anyone else has had any success with this i'd love to know. Thanks! Elliot