The Mac sometimes cannot connect to a wifi network even though there is no profile showing for that particular network.  A search on the web seems to suggest that the following files need to be deleted from /Library/Preferences/SystemConfiguration/:com.apple.airport.preferences.plistcom.apple.network.eapolclient.configuration.plistcom.apple.wifi.message-tracer.plistNetworkInterfaces.plistpreferences.plistI just wonder if there could be a script to do this.  I tried using a bash script but always has "no such directory"  "no permission" etc errors.Any help would be appreciated.

Looks like our fix for jamf for our previous issue was not complete.https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45046https://logging.apache.org/log4j/2.x/security.html 

Hi All, I'm new to the API and newish with scripting, so please bear with me.My end goal is: have a list of all the Mobile Device Applications and what they are scoped to. I've tried this for loop:#!/bin/bash IDs=$(curl -sku myusername:mypassword -H "content-type: text/xml" https://myinstance:8443/JSSResource/mobiledeviceapplications | xmllint --format - | awk -F '[<>]' '/<id>/{print $3}') for idNumber in $IDs do curl -sku myusername:mypassword -X GET -H "Accept: application/xml" https://myinstance:8443/JSSResource/mobiledeviceapplications | xmllint --xpath "/mobile_device_application/scope/text()" - done Though it tells me that the "Xpath is empty".Is there a way for me to reiterate through the Application IDs I find using curl, and show me the scope for each and all of them? Thank you

I have an admin account created with our DEP Profile "Staff admin". We manually create a second admin account "Tech admin" when provisioning and finishing touches for distribution. I want to get rid of that Staff Admin account, both moving forward for newly provisioned devices, and for existing devices in the fleet.For the first, all I need to do is replace the info in the DEP Profile, is that right?For existing accounts, how can I achieve this? My concern is with the secure boot tokens and ensuring that Jamf can still perform tasks administratively for both new and existing devices without issue. I don't have a full grasp on how Jamf performs elevated tasks and don't want to screw it up!Unless I'm missing something I don't see a payload to do this in the documentation. As a scripted solution, any known templates that have been used or might be useful here? Thanks in advance!

Forgive me if this has been addressed already.  I was unable to find anything quite like what I am after. I need to export our inventory and for that export to include specific attributes about the individual machines. If I were to export all computer inventory I just get a few options for how to base the search like computer name, applications, etc. Doing this will only display that search criteria, like a list of just computer names.What I am looking for is a way to pull the full inventory list and have it also display some of the info I would find when drilling down into the machine properties. For example could I export all the machines with their respective Serials, Reported IP Addresses, and Site? Or Computer name, User, and Building? Something like that. 

I have Created the Config profile for this in Jamf and it does not seem to be working.Process starts with:Checking for expected bundle ID: /usr/bin/defaults read "/Applications/iTerm.app/Contents/Info.plist" CFBundleIdentifier Results: com.googlecode.iterm2 Create a Configuration Profile with the appropriate settings including the bundle ID and no love.

Hi I can't seem to find how to see the number of JAMF device licenses consumed and remaining?I'd like to add that to my dashboard. There is an explanation of managing other software licensing but can't find anything for JAMF?? Sorry if this is a noob question. cheers,Andrew

hello,when we get the 10.34.1 patch? our managed jamf pro server is still on 10.34 😞thanks!

Hello All,I'm pretty new with Jamf and I need some help. Strange things are happening when the computers check-in with Jamf. When the Macs check-in they will blink, which I assume is normal behavior. When this blink happens users are reporting that if they have any application windows minimized in the dock they will maximize on their own. The other, more troubling issue is that if the check-in happens while they happen to be in a video call both incoming and outgoing audio will drop out and the users have to leave the meeting and come back. The first issue is an annoyance but the second one is a real problem. I have the check-in set to the maximum 60 minutes but these issues still happen. Is there anything I can do to make the check-in less intrusive. Is there a setting where I can make it check in once per day unless I force it, for example. Any help would be appreciated.

Hi everyone,I work for a High School and I'm having a hard time figuring out the root of this issue. They authenticate via Google, then type their local password, to get an error message saying  "You are not allowed to log in at this time". Though, this is working on a few users of the same groups and all, so the inconsistency is throwing me for a loop. When I call for JamfConnectLogin.log, I get: authorizationhosthelper.x86_64[4394:7709] [com.jamf.connect.login:KeychainAdd] Tried to get the login name but couldn't find it. macOS Version: 11.6.0JamfConnect 2.6 Anyone have any ideas? Would be much appreciated.

Hi all We are going to upgrade our users from from ElCapitan to High Sierra. As part of this we will need to uninstall SEP, and then install SCEP, preferably using a single policy/script. I am new to this so and advice/suggestions would be greatly appreciated. Has anyone already done a script for this? Many thanksStruan

Hey all, Got a machine here to enroll, download the QuickAdd.pkg, everything appears to work as expected. Starting up Self Service the first time gives the popup about approving the MDM profile in System Preferences, but when I click the button to go over into Sys Pref, there's no profile there to approve. Totally blank. Is there an extra step or a different method now? Thanks!

Getting this message when trying to apply a second configuration profile to an ipad. Tried on a few devices, all have the same message.  Could it be because both profiles work on different aspects in the "notifications" category? in one case, i allow a notification from JAMF app, and push that out to all ipads. In the second case, i want to limit an application (in this case CLOCK notifications). because they act on the same "group" i cant do it? well that sucks, because i dont want to limit clock notifications on every device in the company, and i want to have jamf notifications showing up how i want them.... can someone confirm? thanks   

Hello, I would like to push a policy to unbind machines and convert them to local ones.  I am wondering what can goes wrong!1) Doe the user should retype his password?2)will Filevault still synching ?3) Should the user backup his data before running the job?4) Will the asset keep same ID in Jamf Pro? "must still be managed by the MDM".5) Is the user going to loose his preferences?I make some attempts ending by affecting some of these fonctionalities.Any way to make it happen with respect for these requirments? P.S: we do not use Nomad.

Hello Everyone, i was wondering if there is a way to restore gui access to a server that i limited to computers and mobile devices only ? ( not full access ). i forgot to turn on clustering on that server and i need gui access. tried accessing it locally (127.0.0.1) didnt help, im also wondering how should i update it if i dont have GUI access ? thanks for everyone that can help,

Hey All, Hoping someone can help clarify something for me. Wondering if it is possible to deploy an app/pkg to a computer on a non recurring basis after Enrollment. Example: I create a report of computers that don't have our in-house VPN App for one reason or another. Can I then target those machines on the report and install the app via a Policy one time?  Giving the user the option to pull it via Self Service with email communications on a deadline the app has to be installed by, has still resulted in some users still not installing the app manually, so I am wondering if I am able to do a one time push or if there is a better way to complete this task?

Has anyone gotten the native MacOS VPN client to work with IPsec using a Configuration Profile? I am trying to get it to work with our Fortigate firewall but it keeps complaining that the server is not responding but I can successfully connect to it using a Windows machine. On the server (Fortigate) side, I am seeing the error message that Phase 1 negotiation has failed (Peer SA proposal does not match local policy). I can't find any other fields that I could edit to change the algorithms and the DHgroup as advised. Should I just go with using a Profile that contains a script to do this?

We had an unmanaged macbook (at the time) go missing earlier this year. When we moved to JAMF the device was added as a managed device in Apple Business Manager.The missing macbook showed up in JAMF a couple days ago. My understanding is that someone needed to reset the macbook in order for it to enroll to JAMF automatically. Are there other ways the enrollment process could be triggered other then a reset?The Enrollment Method does have "PreStage enrollment: Apple Business Manager" so we know it was ADE. The IP address for the enrollment happens to be an existing employee so we want to make sure we understand how the enrollment happened.

Cannot connect to my account to download the new JamfConnect.  account.jamf.com not working?  Anyone else experiencing this issue?  Is there an ETTR?

Is anyone else having issues today? I'm getting "A connection error occurred while attempting to download software titles from this source." and https://jamf-patch.jamfcloud.com/v1/ gives a 504 Gateway Time-out. 

Hello,I know this is an issue because I manage multiple Jamf environments, most with Jamf Protect & I cannot log in to any of the dashboards. I have separate emails/jamf ids for the clients as well. I understand AWS is down. Is anyone else experiencing this issue? Thank you. 

I've been trying to figure it out but is there a way to show a progress bar with precentage (most likely using CocoaDialog) to show the download progress of a cached package? We are kicking off a cached package policy via self service and our users have requested more feedback on the progress of the cached package download. I imagine this can be done through CocoaDialog but can't place it. Any help would be appreciated.

I'm having issues with enabling Passthrough Authentication for Microsoft Azure ADAfter logging in with an Azure AD Account entering password I get the following error;"Invalid request: Invalid request:"Create a Separate Local Password = false (When changing this to True user can login)Use Passthrough Authentication = truehttps://community.jamf.com/t5/jamf-connect/jamf-connect-2-6-0-release/td-p/250560https://community.jamf.com/t5/jamf-pro/jamf-connect-invalid-request/td-p/250753 Any have any ideas what the issue could be?

The installation fails when run via the jamf agent. When I run it via root, or sudo, it succeeds. Seems specific to bigsur as I don't have this problem on 10.14.x.  Any suggestions?Log:Installing McAfee EPO bit-64 mktemp: mkdtemp failed on mferFT4AZ: Read-only file system mkdir: : No such file or directory Jul 14 11:00:37 installer[74913] <Critical>: PFPkg: No file found at path: /ma.pkg Jul 14 11:00:37 installer[74913] <Critical>: PFPackage::packageWithURL - can't instantiate package: /ma.pkg installer: Error - the package path specified was invalid: 'ma.pkg'. hdiutil: detach failed - No such file or directory /usr/local/bin/mcafeeEPOinstall.sh: line 76: cd: HOME not set installing client extension from : / Install script:#!/bin/bash if [ -e /Library/McAfee/cma/scripts/uninstall.sh ]; then echo Uninstalling old McAfee EPO /Library/McAfee/cma/scripts/uninstall.sh fi echo Installing McAfee EPO /usr/local/bin/mcafeeEPOinstall.sh -i 

In a Jamf policy, I think it would be great to be able to have the category heading clickable where it would then sort all of the packages by their category.  I also think a filter box to only show matching results would be helpful.  Does anyone know of a way to accomplish this or feel this would be helpful?