Hi guys, I am in the process of setting up DEP with ABM for my company. I was reading multiple JAMF Nation posts and videos regarding how to set up DEP with ABM and going forward with doing PreStage enrollment for initial setup. My question is: is it possible to have multiple PreStage Enrollment option. My goal is to have MacBooks follow a different setup path than lets say a MacMini for a conference room. 

I'm trying to add a warning to our Big Sur installer in Self Serve. I have the policy set to make sure users have to view the description, but that doesn't seem to be enough.I've made a script with jamfHelper. It's a simple warning message to back up important files to our Google Drive before continuing, with a button to cancel and a button to continue.In the policy, this warning is set to run "Before". The policy is working correctly, giving me the warning before trying to run the erase-install (grahampugh) script. However, I can't seem to get the Cancel button to actually halt the policy execution.. Can this be done? This is what I have so far.RESULT=$("$jamfHelper" -windowType hud -title "Before you continue... Warning from the HelpDesk" -icon "$jamfIcon" -heading "$heading" -description "$description" -button1 "Cancel" -button2 "I understand." -defaultButton 1 -lockHUD -iconSize 200)if [ "$RESULT" == 0 ]; then# do button1 stuffecho "Cancel was pressed!"echo "error: script fail

Hello,suddenly the Option/Settings are not showing on the right side of the screen in the Safari Browser (iOS and MacOS) when opening the Profiles in Jamf for School. All works fine when using Google Chrome. I've tried all the settings in Safari, but couldn't get them to show. Anyone else having this problem or is it only me? Any suggestions would be helpful, thanks in advance.Kai 

SOLVED: - PEBCAK issue... Hi there,Since a week ago, Office365 no longer installs using DepNotify.  This used to work fine.The process of installing Office365 takes a few minutes and DepNotify continues, however when checking my apps, Office365 did not install.When installing the same pkg manually, it works fine, so it seems to be only doing this behavior when downloading it using sudo jamf policy -event In Jamf it says pending after DepNotify, but won't trigger again as it's only part of DepNotify. The only thing I can think of is the fact that I already re-installed this device over 80 times. Does Jamf have any kind of throttling or data limit? Are there any logs I can check?Thanks! 

We received some iPads for the teachers. The only option they have when holding the finger on the homescreen is sharing the app. There are no other options like removing or modifying. In Restrictions "Allow removing apps" is chosen. There is a layout pushed to the devices, though. Could that be the problem? Thanks for the help.

Hey folks, I'm looking for the best way to get an outlook add-in deployed/installed on all our macs. Any suggestions would be greatly appreciated. 

Restart the Mac and hold CMD + R to launch Recovery Mode Launch Terminal from Recovery Mode Run the following command to ensure “.AppleSetupDone” file is listed: ls -la "/Volumes/Macintosh HD - Data/private/var/db" Run the following command to remove “.AppleSetupDone”: rm "/Volumes/Macintosh HD - Data/private/var/db/.AppleSetupDone" Run the command on step three again to ensure that the file was removed and is not listed in the directory Reboot the Mac to Prestage Enroll with all of its glory.

Hi Everyone, I just recently learned about Custom Triggers and I think they are great. I have a question about how I can get this done though. Policy 1: (made to be fast)-install essential software-force restart in 2 minutes-next login enable FileVault 2 Policy 2:-install supplemental software-install printers-install etc How can i trigger Policy 2 to run after that restart?

We are an MSP that supports about 20 unique Mac clients. I've been in the process of moving many of our clients' management functions from Datto RMM to Jamf MDM over the last year or so (with an increased urgency after the recent Kaseya RMM exploit this summer). As such, I've been porting over many BASH scripts that will download and run PKG- and DMG-based installers on the managed Macs. The preference is to download the most current installer directly from the developer site, and we host the installers in our own repo when that isn't a practical option (behind a login, no direct DL link, etc). Things are working great. Obviously we start running into limitations when talking about apps like Adobe CC, but aside from those, are there any other benefits to building custom packages for Jamf (Composer, AutoPKG, PKGmaker, etc) instead of continuing to use my current scripting methods? Just seems like a lot of extra work to go the custom pkg route...Thanks in advance for the feedback

Hey AllI am looking to have a policy get called while I have a JamfHelper window up doing a 12minute countdown. This is all happening once a machine is enrolled  and keeps the techs from clicking ahead before the installs of all the software are complete.  So far I'm able to get the countdown timer going using the enrollment complete trigger, but unfortunately all the other enrollment complete triggers are waiting for the jamf helper countdown to complete before they run.  #!/bin/sh /Library/Application\\ Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper -windowType utility -lockHUD -icon /Library/Desktop\\ Pictures/PPSLogo.jpg -title "Tech Office" -heading "Please wait for install to complete..." -description "Installing all needed software..." -countdown -timeout 720 -alignCountdown right  I'm wondering if I just add a&to the end of a policy trigger before the caffeinate command, will that then run the install policy in the background?Li

Does anyone have a download link to the Security Update 2022-002 Catalina pkg? I like to wrap it up into my MDS workflow so I don't have to run SU after its done doing its thing.Thanks! 

Hey All -  I'm running into a weird issue where during testing, I had my upgrade workflow to get our computers upgraded to the newest version of Monterey via a pkg file. All went perfectly during testing. However, when I pushed it live this morning, all users received this error that the process was killed when it attempts to call startosinstall: "/Library/Application Support/JAMF/tmp/upgradeRebootWarning.sh: line 20: 60521 Killed: 9 /Applications/Install\\ macOS\\ Monterey.app/Contents/Resources/startosinstall --agreetolicense --nointeraction Error running script: return code was 137." For reference, this is all the script is doing: #!/bin/bash #get logged in user info loggedInUser=`/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }'` loggedInUserUID=$(id -u "$loggedInUser") echo "The current logged in user is $loggedInUser and their UID is $loggedInUserUID" #create applescript string userPopup="display dialog \\ \\"Your machine has finished the download a

hey there,in the config profiles there is the option to activate the screensaver after x minutes. however, is there also the option that the user is then no longer able to change the time until the screensaver is activated? in my tests it is now the case that the screensaver is active, but the user can still change the 5 minutes, for example, as he wishes. this should be blocked. how can i change this? 

Not sure if anybody have seen, but with the 10.35.0 Jamf Pro version, it seems like classic API can be used with the bearer token authentication: https://developer.jamf.com/jamf-pro/docs/classic-api-authentication-changes  When I am trying to use the code samples to simply get all sites from JSS with a simple curl command:apiURL="JSSURL" username="USERNAME" password="PASSWORD" # created base64-encoded credentials encodedCredentials=$( printf "$username:$password" | iconv -t ISO-8859-1 | base64 -i - ) allSiteData=`curl -X GET \\ $apiURL/JSSResource/sites/ \\ --header 'authorization: Basic $encodedCredentials'` echo "AllsiteData is: $allSiteData" I get:% Total % Received % Xferd Average Speed Time Time Time CurrentDload Upload Total Spent Left Speed100 422 100 422 0 0 2562 0 --:--:-- --:--:-- --:--:-- 2740AllsiteData is: <html><head><title>Status page</title></head><body style="font-family: sans-serif;"><p style="font-size: 1.2em

I am working with the api to create users and query or update device info. Now i am trying to perform dep endpoint actions, but i get a 404 Not Found error.If the payload is malformed i get a 500. The endpoints for devices and users works with post and get requests as (mostly) expected. this is related to the "teacher endpoint not working" thread https://community.jamf.com/t5/jamf-school/jamf-api-the-endpoint-teacher-is-not-usable/m-p/255375#M652 

I've got a PKG Big Sur installer, and I've started caching it on devices needing it.I'm wondering if there's a way that I can run the cached installer with the --agreetolicense --nointeraction flags or if running the package Install Cached removes any way we'd be able to do this.We have the script from https://github.com/kc9wwh/macOSUpgrade but it was implemented by someone who is no longer with us. I'm trying to work with it but I want to make sure I have a backup plan, as it wasn't working (or at least installations were failing) when they left us.

I have a local admin account on several machines that are also the management account on those machines as well. Is there a way after the fact that I can go back in and hide them? I can't seem to find a policy setting or script that will do that. We need to hide the current already created ones. I did create a quick add package that will create that user and hide it on any further machines but not sure if there is easy way to hide the already existing one. Hope that makes sense.

Hi, New to Scripting still but trying to learn.My goal is to deploy around 15 Mac Mini within a course of about 2 weeks. My goal is to try to create a policy and/or configuration profile if I can do Teamviewer Host in a silent install without "any input effort by me or a user."  I integrated our Teamviewer token to Remote Administration, after that I am lost on how to proceed. I know I need to push the host .PKG into the account on the Mac minis so it can install but how can I customize the setting up either Easy Access by pulling the name of the computer and setting up other customizable features Teamviewer offers as well so it can show up in our Management Console. 

I'm working on home screen layout for our sales ipads.  [Devices > Configuration Profiles > Home Screen Layout]I didn't have any issues adding the well known apps thanks to JAMF's search feature but I have a couple of lesser known ones, for example, Service Finance Dealer App.  https://apps.apple.com/us/app/service-finance-dealer-app/id962933342 Can anyone help me by telling me how to find this information?TIA,Brandon

Hi AllMy first post, please excuse my knoweldge in Jamf, hardly been playing with it for a month.Ive started supporting an existing Jamf implementation and have a couple of requests to reset passwords on Macs where users have left the Org. I thought it would be just the matter of creating new local admininstrator account policy or even issueing a wipe command so device can reset and start again. Unfortunately its on login screen and doesnt have a wifi connection option (which I understand is due to FV2 being enabled??)The end user told me that he tried to reset the device and it keeps asking for a recovery key.I have since enabled the "startup scripts" option so policies can be triggered on System Startup but sounds like it only applies once the policy refreshes, ie, after logging in with any account.My questions1) How do I reset a Mac that is stuck in this situation, can I use any capabilities Jamf has?2) How do I obtain the recovery key the user is referring to?3) Are there any such

Hi JAMF nation,The Cert: CN=JSS Built-In Signing Certificate, OU=FILEVAULT2COMM expired in my paternity leave and when i try to renew it i have only the possibility to revoke it in Settings -> Global Management -> PKI Certificate -> Jamf Pro Built-in CA. Do i have a chance to renew that? Or do I have to create a new one, but that means to recreate all Recovery Keys, right? Thank you very much.BRDaniel

After our server was updated to 10.31 the unknown keys feature is presenting itself in a number of profiles. At first all unknown keys were "payloadenabled" which per the release notes can be safely removed.However, now a number of the profiles have more keys showing as unknown, and I can't find any documentation on what they are or whether they can be removed or not.All of these profiles are standard Jamf profiles created within JSS.Keys include:1. allowKeyboardActivityContinuation in Mobile Device Restrictions profile2. com.apple.MCX.FileVault2:UseKeychainUserEntersMissingInfo in Computer Security & Privacy profileIs anyone familiar with what these keys do, and if they can be removed without affecting the profile? No changes have been made to these profiles, and they were all created in Jamf. Thank you   

We found a pocket of several hundred Macs in one of the environments we support. We want to get these Macs into JSS so we can get them into a Static Group. Is there a way to import a tab delimited or csv text file that contains only MAC Address, Serial Number and Computer Name? I'm hoping to avoid manually inputting these. Thanks,Don

Is it possible to use Jamf Pro to remote onto a enrolled Macbook? and if so how? 

Upgraded a test machine to Monterey from Big Sur and it wants the user to approve the system extensions for Microsoft Defender and Cisco AMP that were working fine before and approved with Configuration Profiles.For Defender, I've tried unscoping and rescoping the Configuration profile as well as uninstalling and reinstalling DefenderStill trying to understand it but has anyone else hit this issue and found a way through the problem?