Hello, I'm trying to deploy JAMF Connect as part of my DEP enrollment process, but I have found out that if I send a computer to a new hire that has not set up his/her OKTA verify app it will prompt the user to set it up and after the setup is completed it will stay on the OKTA screen and won't go pass it. 

We are performing an upgrade in place on a big sur mac and on first log in user was prompted to store files in iCloud.This is on a JAMF enrolled mac.We would like to disable this prompt from existing workstations that are being upgraded to Monterey. We do not want to disable iCloud at all, just the first run option to store files there.Can this be disabled?

I have enrolled a computer on osx 11.4 using recon's remote enrollment. The computer now appears in my inventory (yay) and is running some policies (yay) and even launches self service (yay) But self service briefly instructs me to approve the MDM Profile. The message vanishes before I can click on "Open System Preferences." Inside system preferences, there isn't any selection for Profiles. The button just isn't there. I also decided to make the profiles available in self service. After doing that, they show up in self service with the status of "installing" Any thoughts here?

I have tried all solutions from Jamf Pro and other third party app, but none of work, can anyone show me a screenshot of their setting or just provide better details on how to set it up properly? Thanks!

Does anyone know what Microsoft's strategy is going to be for Office 2021 in terms of packages?  Are they going to be forked again like they were with Office 2016?  Will Office 2021 have a license package like 2019 and 2016?Due to situations beyond my control, we're still deploying volume licensed versions of Office 2019 rather than enabling Microsoft 365 licensing with a sign-in.  I just don't want to accidentally break anything on existing systems by deploying the wrong packages.  So far I've checked here:https://support.microsoft.com/en-us/office/upgrade-macos-to-continue-receiving-microsoft-365-and-office-for-mac-updates-16b8414f-08ec-4b24-8c91-10a918f649f8?ui=en-us&rs=en-us&ad=us#ID0EBBF=Office_for_Mac_2021 And here...https://macadmins.software And they seem to be lacking details, other than Office 2021 requiring Catalina, even though the first released build will be support Mojave, but only for that first build (such an odd strategy!!!).My ap

Hey folks...We are not blocking any software updates, yet we have a handful of Monterey Macs running 12.0.1 which are saying they are up to date, and not even giving the option to install 12.1.  Has anyone seem something similar and know how to fix?  Again, we have no config profiles in place that block or defer any software updates.

Greetings,We've installed the TeamViewer integration, and it works well for the couple of admins we already have accessing the JAMF Console, but I'm wondering if there is a way to give our ServiceDesk Tier 1 and Tier 2 admins read-only or restricted access to the console which allows them to also create and view remote desktops using TeamViewer. I went through the custom user rights, and nothing jumped out at me for a set of policies to do this "out of the box".Thanks!

Hi All,We just recently deployed Jamf Pro & Jamf Connect to our organization (to more than 100 Macbooks and iMac).We recently decide to open App Store and let our user to download and install apps that they purchase by themselves. However, we setup the automatic updates in Jamf Pro.Now my question is that we would like to grey out the Automatic Updates button in AppStore preferences (for user) so that User will always get updates and using the latest apps.  is there a way to do this in Jamf?

I need to package and deploy a file to all users on a system.lets call the file 'Awesome.txt'. I need to send that out as a package file and then have 'Awesome.txt' copied to every local users ~/Library directory (to be clear /Users/USERNAME/Library/Awesome.txt)I also need it to overwrite the file if its already there.What is the best way to achieve this result? Thanks in advance to all!

Hello, I'm trying to deploy a package with the installer command and i"m getting some errors. I've tried doing cd /tmp as the other issue suggested but that still wouldn't work. Currently I have a policy that caches the package on the endpoint at a location I assume was /Library/Application Support/JAMF/DownloadsThen a script that copies that to /tmp and tries to run installer on it. Here is the output: Script result: cp: /Library/Application Support/JAMF/Downloads/filename.pkg: No such file or directory Feb 14 12:10:13 installer[4032] <Critical>: PFPkg: No file found at path: /private/tmp/filename.pkg Feb 14 12:10:13 installer[4032] <Critical>: PFPackage::packageWithURL - can't instantiate package: /private/tmp/filenamepkg installer: Error - the package path specified was invalid: 'filename.pkg'.  Firstly, from the output I assume the cache location is wrong, but also why is it looking at /private/tmp instead of /tmp? Here is the script as well:&nb

Hi We are in the process of creating a configuration profile for Google Chrome Bookmarks. We are looking to apply this only to newly enrolled devices as we do not wish to make the change org wide on our pre existing users. One thing we though of was creating a static group with all computers as of right now but we are concerned with the manual work that will come from having to redeploy current machines that would be in that static group. Plus it seems a little janky in general.Thanks in advance

Hello,My users when they turn on their machines, and stay on the login page, get a prompt asking if they forgot their passwords. and to restart the machine it will automatically do recovery mode for them.Well users being users dont read, and restart their machine for some reasons, and it brings them to recovery mode, where they meet a lockpad.Is there a way to turn off that prompt and action?Thank you!Hammy Choi

Hello,I am a novice when it comes to JAMF and am wondering if there is a way I can run a report that gathers all of the installs of "Docker Desktop."  Once discovered, I would like to see if its possible to set the application to auto update 

Hey Everyone! I have new task on enhancing O365 patching in my environment. Currently we are using the old school method of downloading the patches from Macadmins and copy to DP's & then clone the existing polices and Smart groups and distribute to the clients. I proposed MAU - Just to make it a zero touch. So here to understand the basics and become a pro.  

Hello Team, I would like to seek your assistance, as we all know Monterey is in coming and we would like to roll out the upgrade smoothly for end users. However, there's this pop up admin credentials that we have been facing and we just can't give the admin password with end users, question is, is there any script or policy that disable or bypass the admin credential while doing the upgrade? Your response would be a big help from us. Thank you. 

Hi All, I'm trying to install a brew install wget command as the current user and wrap it into a Self Service policy, i have this script but it always fails, the Mac has homebrew installed, any ideas? #!/bin/sh sudo -u $3 'brew install wget' Thanks,

Hello folks,We currently have the problem that when we change the password via jamf connect we do not always get the correct password change window. This is how it should look right:and this is how it feels 50% of all cases.We are currently using jamf connect 2.3.2If I briefly disconnect and reconnect the active network connection in the settings, I get the correct window.Does anyone have any suggestions?Cheers

Hello, not a direct jamf Question but i have sucessfully configured this SSO extension and working fine.However when before using the AD Plugin i was able to run dscl "/Active Directory/domain/all domains" -read /Users/user, to get an output that i required however now i get Data source (/Active Directory/domain/all domains) is not valid.When i type dsclls This no longer lists the Active Directory DomainIs there any key pair values i could add to the configuration profile to get this working by any chance or is it the case i will not be able to ever read all the values i could before using the AD Plugin.ThanksMark

So here is my dilemma. After having Apple M1 Macbooks updated to 11.6 and then restarting, I was greeted with the standard text field for login and passwords and not the FileVault login screen with the provision users circles.This is happening with all Apple M1 MacBooks in my environment after updating to 11.6. I validated that if I wipe and I do not add the JAMF Pro management profiles and enable FileVault manually that I am still presented with the text field for login and password. Now granted in the System Setting > Users > Login Options I did enable the text field to be listed since that helps in differentiating between a FileVault encrypted device and one that has not yet encrypted. JamfPro does list our existing manage devices as FileVault encrypted and also list the provision users. But again on any of these devices the traditional FileVault we are all accustom to seeing is not loading. And I dont see anything that speaks to this here, on Apple site, or on the internet. D

I am allowing Touch ID but the System Preference is still grey, I checked the restriction and its allowed but the System Preference is still greyed out.  What am I missing? 

We got our first M1 Chip laptop and installed Self Service but when the user clicks to install anything. It fails but it works fine on my x86 Machine. Weird issue is when I push the install it works, I am just confused about why self service fails only on M1. Have you guys seen this before?

FOLLOWUP - while the PI indicated does not in fact appear to be related to this issue I can confirm the browser UI now displays unique endpoint information instead of generic parent info again with Jamf Pro 10.36.1. Thank you to all who echoed my sentiment to Jamf Support / Engineering that this needed resolution!Per @AVmcclint suggestion I have submitted a feature request with an unappealing but descriptive and functional a title: Revert/Resolve Jamf Pro UI per PI-010471 - to display specific names in browser window/tab headersIn 10.34 and earlier my tabs looked like this with differentiated headers, that is tab would display the name of the computer / group / policy / profile / script loaded in that tab, such as "Jon's Mac" "Needs Latest macOS Update" "Display Update macOS Dialog" "Restrict macOS Updates" and "checkinaftermacosupdate.sh" : After 10.35 upgrade all the tabs now retain the value of the parent (i.e. just Computer / Smart Group / Policies / Configurati

Hi Guys, We are a school and we have around 500 Macs that we would like to be able to track them offsite.Anyone found a way to set up iCloud Find My Mac through Casper? Regards,MM

I'm having an issue with purchased apps. They are not appearing in Jamf.  I refreshed content and a few of the ones I purchased showed up to deploy but the majority of others have not. I tried rebooting the jamf server as well. Is anyone else experiencing this issue? I saw Jamf had an issue last week, but per their status page, it should be working again.

Middle of 2021 our organization decided we were going to enroll all of our MacBooks in inTune.  We had everything working but as many of your know there a many issues with the inTune integration.  Also getting end users to get their devices enrolled themselves was a chore.  We only managed to get about a 1/4 of our MacBooks enrolled and decided to scrap it.  Only real drive for then intune enrollments was for compliance reporting.  Which we decided Jamf provides all the reporting info that we really need.Occasionally I have a user still getting the JamfADD pop ups when they change their password for some other reason and I end just having them going through the enrollment again.  What is the best we to remove the enrollment for devices that have already enrolled?  Can I just turn off the Conditional Access?  Will that stop devices from getting prompted to re-register?  Haven't turned that off yet because don't want to cause issues with exist