I have one student out of two thousand whose iPad has decided to delete Self Service and several other apps from the iPad randomly. When I check the history of the iPad there is no record of the apps being deleted. I have switched the student to a different iPad and have the same problem. Now, I know what you are thinking. The student must be deleting the apps herself. I haven't ruled that out, but she and the teacher both swear that she is not deleting the apps. If she was deleting them, wouldn't that should up in the history in Jamf Pro? I have also prevented app deletion on her iPad. Yet the apps keep disappearing. It seems that they reinstall when the iPad checks in. The iPad is a 7th gen iPad running iOS 14.3. iPads are tied to users through LDAP and we use Smart Groups to determine app scopes. Self Service is assigned to all users and devices. I have never run into this issue before and not being able to solve is driving me insane.

Hello All,We attempted blocking Monterey via a software restriction for the exact process name, "install macOS Monterey.app", which we're having mixed results on it actually working within the organization. One of the major issues is that it appears this process name is different based off the lanuage preference set for the machine. One example would be the german process, "macOS Monterey installieren" is not restricted when attempting to restrict the exact process listed above.In attempt to have a catch all I configured an addition restriction where we're not checking for the exact process name, and just "macOS Monterey".Anyone seen this issue and been able to come up with a catch all?

We bought a batch of about 30 Macs a couple months ago and made sure they were all enrolled in DEP at the time of purchase (verified through ABM). I also verified that the PreStage Enrollment listed all the Macs we bought. I've deployed about 10 Macs from that big purchase so far and they have all enrolled and pulled down all the MDM profiles as expected... until recently. We got to a point in the stack where we're starting to see a few Macs (3 so far) that have no idea that they are supposed to be managed. We take the Macs out of the box, plug them in for power and ethernet, then we turn them on. We pick the language and country etc, tell them to use ethernet, then they completely skip over this Remote Management screen that they are supposed to see:It goes straight into privacy and the rest of the non-DEP setup screens. I've had my techs stop the process as soon as they identify that the Remote Management screen doesn't come up. I still have a bunch more Macs that I need to setup

Hi Jamf Nation and happy JNUC 2021! Today we released Jamf Pro 10.33 which includes support for Account-driven user enrollment for iOS/iPadOS. This workflow streamlines the user enrollment onboarding process and focuses on providing corporate access to BYO users while maintaining user privacy on their personal device. We are also excited to announce Unified Endpoint Management Connector (UEMC) which is an integration between Jamf Threat Defense, Jamf Private Access, Jamf Data Policy and Jamf Pro for iOS/iPadOS. To learn more, please check out the Jamf blog post here. This release also includes improvements to the Azure Active Directory integration within Jamf Pro, Recovery Lock password rotation, and a patch title filter option.NOTE: Support for Jamf Imaging has been discontinued. With Jamf Pro 10.33, Jamf will no longer distribute Jamf Imaging as part of the Jamf Pro .dmg file. Please read full release notes here.Kaylee Cloud Upgrade ScheduleYour Jamf Pro serv

Hi all,we use Jamf School for several months now and are pretty happy with it. Today we created a second "System Administrator" in Jamf School for personell redundancy.Since then the old (first) admin cannot login anymore and is presented a "401 Unauthorized Access" error (please see attached screenshot).The new (second) admin is not shown an account and therefore cannot admin Jamf School neither (2nd screenshot).Does anyone has a glue what has happened? Any hints would be really appreciated.Thank you!Johann

Hello All Is there a way to push wallpaper and lock screen images to the Iphones in JAMF? I know its possible under the management tab as a command but is there a way for a config profile or something else so that I dont need to do it manually before shipping it out 

Hi All, So, with Big Sur being OS 11.x, has anyone come up with a good option for not having that collide with 10.11.x? Say you have a smart group, and you say "OS Version -like 11.". That matches both 11. and 10.11. Sure, you could also say AND "OS Version greater than 10.15" or something, but it's still something we're going to have to deal with until Apple gets to macOS 17... (since it appears Big Sur updates are going to be 11.x, so the next major release will be macOS 12). Thoughts? Am I missing something obvious? Should we just ask for regex for OS version and call it a day?

Does any one know of a way to get notifications when a new version of JAMF is available?

Hello, everyone. I'm working on a policy to execute a shell script from a vendor that installs a piece of software. It's a rather large .sh file (24mb) and, if I'm reading it right, it looks like the majority of the file is the raw contents of a .tar that get expanded into a couple of files when it executes. I've uploaded the script and added it to a profile with the two parameters that it needs to run and, of course, it fails. Is there a log file somewhere on a client that will give me the output of the execution attempt? I'm hoping to get some clues about what's going on here other than the generic error message that pops up in Self Service.

Hello !I have a script that runs fine when I execute it from self service, but it fails when I try to push it with a policy. The problem resides when I want to open the app with the command: osascript -e 'open app "application name"' I have an error type -10822 when run from the policy but works fine in self service. I also tried to execute that command with sudo -u $loggedInUser osascript -e 'open app "application name"' or with su $loggedInUser osascript -e 'open app "application name"' but no way. If I make a script locally to use the open command, it's fine when run as the logged user but if I run as root and use the $loggedInUser variable in the script, it fails.Any idea to help me to resolve this ?  It's on a Big Sur mac with Apple M1 chipset.

We bind our devices to AD during the DEP setup.We get our users to log into their dvices using their AD credentials, usually no issues at all with the mobile account setup and the users AD account is recognised.I have come across a device that for the first time is giving me grief with an error that simply statesUnable to create mobile accountThere was an issue creating the mobile accountIts quite a 2017 iMac with Filevault enabled and I can log in with the local account that we auto setup with no issues.I have tried reinstalling Catalina via Restore which didn't help.Unbind rebind didn't help.Checked directory and OU structure in AD and that all looks good.The settings in Computer Management > Directory Bindings are correct and have not changed.Kind of running out of things to point at that could be causing this.At this point I am heading towards a complete wipe and restart but wondering if this could be a hardware or Filevault related issue.I am going through the console logs now

We have a few printers that we have pushed out directly to MacBooks and those all seemed to install fine, but I just went through and added the majority of our printers to Self Service (rather than figuring out who needs what). The printers show up in Self Service, but when I click "Install" I get the message "This item is no longer available" and the printer doesn't show up in my printer list. The policy is enabled, the printer is added to it, I'm not sure what's wrong.

Has anyone successfully uploaded the Monterey 12.0.1 installer to jamf cloud?  I tried as a DMG and as a pkg created using the MegaPKG script. It uploads up to 40% and hangs in Safari then up to 100% in Chrome then it just hangs. File size is about 12gigs. Logged a call with support.  

Hi,We are using LAPSforMac/LAPS.sh at master · caffine247/LAPSforMac · GitHub for LAPS rotation however this script is not working on macOS Big Sur or Monterey.Here is the error message:Just wondering if someone has an alternative or fix for this ?Thanks!

Just wondering if anyone has some pointers or ideas on how you install R packages for lab use? Most of of what I see describes installing via the R console I’m also wondering if there is a way to install directly from the repositories What I really want to do is script it so that I can just deploy using Jamf Pro

Hello, I'm trying to fetch some informations about a given device with thhe API and I can't get it to work, can someone enlight me ?Here's my stylesheet definition:cat << EOF > /tmp/computer.xslt <?xml version="1.0" encoding="UTF-8"?> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="text"/> <xsl:template match="/"> <xsl:for-each select="computer/general"> <xsl:value-of select="name"/> <xsl:text>,</xsl:text> <xsl:value-of select="serial_number"/> <xsl:text>,</xsl:text> <xsl:value-of select="site/name"/> <xsl:text>
</xsl:text> </xsl:for-each> </xsl:template> </xsl:stylesheet> EOF And here's how I run it:fetchDetails=$(curl -sk 'authorization: Basic HIDDEN' -H "Accept: application/xml" https://HIDDEN/JSSResource/computers/id/$jamfID | xsltproc /tmp/computer.xslt -) echo "$fetchDetails" And how

When trying to run an uninstall script for our content filter (iBoss), it fails when running via Policy. However, if you login with a local administrator account and run the script on the machine itself... it works fine. Here is the error: If I echo out the majority of the commands, I narrowed the failure down to the certificate removal. Here is the content of the script: #!/bin/bash # ********************************************************************** # * # * Filename: uninstall.sh # * # * Description: # * # * Notes: # * # * # * # * # * Copyright (c) 2018 iboss, Inc. All rights reserved. # * This software may not be published, distributed or reproduced in any # * manner for any purpose without the express written consent of # * iboss, Inc. # **********************************************************************/ mkdir /tmp/uninstallLogs 2>/dev/null exec &> >(tee -a /tmp/uninstallLogs/$(basename $0).log) date isAws2018=$(uname -r | grep 4.14 | grep amzn1) isA

Hello Community, after reading a lot of posts about how to set a wallpaper for the desktop, I still have not found the solution for my problem: I created a package wich contains a picture.jpg. This package (picture) should be installed to the directory "/Library/Desktop Pictures". After running the policy to install the picture, the result in the logfile sounds: "Installation failed. The installer reported: installer: Error trying to locate volume at /Library/Desktop Pictures". When I open a terminal at the target client, and look for the directory, I only can find it at "/Volumes/Macintosh HD/System/Library/Desktop Pictures" If I paste the complete path as a target to install the picture inside, I get the same response in the logfile. Can anyone help me to solve this problem ?Thank you very much for answering and stay health!

Is there a way to remove a configuration profile that has a wifi configuration without forcibly removing the device from that network? We're a school district, and each teacher has a MacBook Air, so they're all over the place, making physical access difficult. I'm breaking a configuration profile down into its parts to make it more modular. One of these new parts is a wifi profile, which I've deployed to a guinea pig while I was there in person. I added that device to the wifi profile's scope and made sure it applied. However, upon removing the old profile, the device was kicked off of wifi and didn't reconnect. Restarting the wifi doesn't fix it, and neither does restarting the computer, despite the new wifi profile's presence. I could easily physically enter the wifi password, but these devices are everywhere, literally miles apart. It seems odd to me that Jamf forcibly removes the credentials for the wifi when the configuration profile is di

In previous versions, you can go to /opt/cisco/anyconnect/profile and edit an xml file. In this version, it looks like this is now controlled by a .anyconnect file in the users folder. I'm looking for a way to automate this workflow for new hires. How are some of you guys doing this? (I'm also using DeployStudio for imaging)

Hi all! I'm testing some things with the new Apple M1 Macbook Pro in combination with Jamf. The problem I'm currently struggling with, is that when you perform a wipe on the device initiated by Jamf is that you can't install new clean system again. After the wipe has been done, I boot from recovery mode to start a clean install.First you have to open disk utility to erase the SSD and create a volume to install on. But then I get the following attached error message. Did anyone else test this also and are you having the same issue? The only option to get the Mac working now, is by attaching it to another Mac and revive it with Apple Configurator 2.

Has anyone come up with a way to delete users that have logged into carts with a script for summer maintenance? Want to only leave the admin accounts on it. Thanks

I have LDAP set-up to pull in Room from AD. To make it apply, I have to go to inventory>Details>Location>Click the ellipsis>Click the blue magnifying glass, and then the attribute are populated, Save, for each record. Can this be achieved automatically? I use this room info for smart groups, and if it were automatic, it would save a hemp of manually clicking. Thanks, Matt

I'm looking at the various endpoints related to mobile devices and mobile device applications, and I'm not seeing any obvious way to get the Bundle Size (displayed on the device's Inventory > Apps page via the API:Am I missing something?Thanks for any pointers!

Hi there.  My school has a pool of 40 2017 MacBook Airs running Mojave that the kids use.  They are not assigned 1 to 1, rather they are in a couple of carts and the kids pull from the pool randomly.One or more of our kids are quite savvy and have figured out how to boot into Recovery Mode and change passwords, and wreak other havoks.  What is the recommended method for preventing students from entering recovery mode, single user mode, booting to installer thumb drives, etc.?