Is it possible to search on the existence of a network service? I'm thinking of an extension attribute or smart group or something of the like.We specifically want to track if the Cortex network service called "Cortex XDR Network Filter" is installed.  

We have several app we deleted from our student's iPads. As soon as we removed the students from the scope, the apps disappeared from their iPads. But they are still there, using storage, even though more than a month has passed. There's a fun "Removal Deferred. Will be removed on 10-10-2021" message that mocks us. I could go to the app screen and remove it from each iPad, once a time, but it would take forever.Googling for a solutiona I got to this page:https://docs.jamf.com/jamf-school/deploy-guide-docs/Deferred_Removal_of_Apps_and_Documents.htmlIt says: "or navigate to the app details page and click Delete deferred apps from devices".But I don't see this option. Would anybody be so kind as of taking a screenshot and showing where it is?Thanks in advance. 

Hey everybody,I've seen some stupid things the last time and I wanna know if someone other has the same problem.The Self Service App on macOS only shows a windows, that appears to be a mobile view. I'm not able to fit the size. I already tried to re-enroll a device, but the problem stays the same. If someone has the same problem and has already found a solution for this, let me know!This Problem appears on macOS 11.6 and also on macOS 12 (Developer Beta).Thank you!

Hello, So, I have been trying to obtain a specific data from UAPI, but keep getting 404 errors, which is a response code that it cannot find the data requested... I am able to generate and authenticate with the token fine and I am even able to pull lists, for example pulling the list of all computers via: computerslistall=$(curl -X GET --header "Authorization: Bearer $token" "Accept: application/json" "$jssurl/uapi/preview/computers") Is working fine and if I echo $computerslistall - I get a full list of all computers currently in JSS. However, when I am trying to obtain a specific computer, no matter what I try I get 404... I have tried:$jssurl/uapi/preview/computers/id/XXXX$jssurl/uapi/preview/computers/ComputerOverview/id/XXXX$jssurl/uapi/preview/computers/results/id/XXXX So far I have been unable to find any GET example where a specific data is obtained via UAPI. Would appreciate if anybody has any info/explanation/example on this. Here is a full script code, if anybody needs

Our infrastructure team is decommissioning the Domain controller that we are using for Domain Connection.  I have tried just updating the field in the Jamf Cloud Server, but it did not connect properly. I seem to remember putting the AD controller into the JIM configuration when setting it up, but I can't find a way to update that field.  Is their a guide to updating Domain Controllers for Jamf Cloud using a JIM LDAP Proxy?  All of the guides I see just cover the Jamf Server configurations.

From what I had been reading, I thought it was possible to upgrade a Big Sur 11.3+ client to Monterey via the MDM "Download and Install Updates" command as long as the device was at the login window. In testing, that doesn't appear to be the case. Am I missing something, or am I just wrong?

Good Afternoon all,I have a deployment that I am working on and want to see if others have done something similar. I am deploying iPads to several locations that need to act as Kiosks with a locked down survey for the public, but also allow access to a Web based video translation service when it's needed by the staff.  So I was wondering if there is a way to deploy the configuration profile for each service through Self Service?  That way depending on the use case, the profile can be changed back and forth.If anyone has experience doing this or suggestions for other solutions that you have done, please let me know. 

I'm working on a script that can run to secure screen screen saver corners. The through is I pull the usernames of non system accounts and put the commands below through a forloop.Below is my for loop with variable. I added an echo in my troubleshooting. It looks like my for loop isn’t breaking apart each users in the variable’s array.Anyone run into this or know what I am missing here?=====================adminuser@test-mac ~ % userList=$(dscl /Local/Default -list /Users uid | awk '$2 >= 100 && $0 !~ /^_/ { print $1 }')for u in $userListdoEcho $usersudo -u $u defaults write com.apple.dock wvous-tl-corner -int 0sudo -u $u defaults write com.apple.dock wvous-bl-corner -int 0sudo -u $u defaults write com.apple.dock wvous-tr-corner -int 0sudo -u $u defaults write com.apple.dock wvous-br-corner -int 0donejohn.doeadminusersudo: unknown user: john.doeadminusersudo: error initializing audit plugin sudoers_auditsudo: unknown user: john.doeadminusersudo: error initializing audit plug

Hello,I know there's a discussion about this in another tread (https://community.jamf.com/t5/jamf-pro/deploying-cisco-amp-v-1-9/m-p/213222#M201846) but it is a bit old and perhaps not relevant to this specific issue.I downloaded the AMP agent from our console. It downloads as a .dmg file. I converted it to a .pkg file and attempted to deploy it via Jamf policy. I get this error:Executing Policy AMP for Endpoints v1.16.0.841Downloading amp_BW_Protect_v1.16.0.841.pkg...Downloading https://use1-jcds.services.jamfcloud.com//download/ba805935816b4ce58100361adc837690/amp_BW_Protect_v1.16.0.841.pkg?token=ceff4da85cd4407485a0dc68f74c0df5e89itz2754vxdrj54vfr2r8uom1yic2w...Verifying package integrity...Installing amp_BW_Protect_v1.16.0.841.pkg...Installation failed. The installer reported: installer: Package name is ampmac_connectorinstaller: Upgrading at base path /installer: The upgrade failed. (The Installer encountered an error that caused the installation to fail. Contact the software manuf

Not sure if this is possible. We are rolling out MacBooks to students and are making their account a standard user by default. If a student manages to make their account an administrator, is there a way to check that and change it back? Say they figure out what the JAMF admin account password is. I have one computer I know of where the student has changed their account type, and created a second admin account. Any options here aside from re-imaging?

Hi,I am having a strange issue, where I can find the user account under LDAP > Test feature, but it does not find that same account under Users on JSS... Anybody seen this before?I can find another account in both: LDAP > Test and under Users, which are located in the same OU on the AD, but this particular one I can't, which doesn't make any sense... Appreciate any suggestions on this! 

Hi all, My employer users AnyConnects Always On function which is a nuisance with functions that require graceful shutdowns of macOS like upgrading from Big Sur to Monterey. In the past I have used a script to unload AnyConnects LaunchAgent and kill its PID. The script still works fine if run locally, the script kills AnyConnect and it stays dead.If run from JAMF Pro via policy with a script payload, AnyConnect opens right back up as soon as the policy finishes. Maybe some nuance has changed with JAMF and the space at which it runs scrips? Any ideas?  #!/usr/bin/env bash #* FileName: Cisco-AnyConnect-4-TempDisable.sh #*============================================================================= #* Script Name: Cisco-AnyConnect-4-TempDisable #* Created: [] #* Author: #*============================================================================= #* Purpose: Temporarily diable Cisco AnyConnect in order to prevent OS #* intallations problems, among other uses.

I have turned turned off Apple TV updates but has anyone noticed or have an issue when someones goes to airplay the user gets a message to enter the airplay passcode and then when  then on the projector goes black but the laptop looks like it's projecting. After the user restarts their laptop and/or desktop they are then able to airplay successfully. Is there an easy fix because currently factory resetting the MacOS has done the trick except for one that has a repeated issue. Is this a bug in MacOS or in the TVOS most of the Apple TVS we have are running TVOS 15 and some running older TVOS 14 and one running TVOS 13 I also posted on Apple Community for further information 

Hi Everyone, Wondering if anyone has recently experienced an issue with Apple Kerberos SSO for macOS not recognizing the default realm set in the Jamf config profile? I have been testing this in advance of replacing enterprise connect, and had it set up and working perfectly with our single domain, got everything working how I wanted it, live password testing etc, and had several test users reset their password successfully. Now this week when I went to change my own password, I got the message in the screenshot. Nothing in the config profile has changed, has anyone seen this or have any suggestions?all clients are on Catalina latest version Thanks!

Hi there, I'm trying to understand what version of TLS is used for the 'Simple' authentication type, does anyone have an idea? Hopefully its not TLS v1.1 ? many thanks

Hi Guys Who has GPG suite deployed and can help me with it?There is not much to find on jamfnation, and am not sure if there is a silent installer. thnx in advance

I am periodically having huge issues when trying to deploy apps to iPads in Jamf School.For example, I have 2 iPads refusing to install any managed apps at all at the moment with the error "The license could not be found. Please check the licenses in the app details page."The apps have plenty of space licenses and they're assigned to other iPads just fine.Usually I end up having to wait a week when it suddenly starts working again?Anyone got any ideas what's causing this?

Hi folks I have tinkered with an Apple Script until it successfully "automagically" creates an eMail signature for MS Outlook that pulls some of it's data directly from our Active Directory. When launched manually it works like a charm. Now what I would like to do is to expose this script via SelfService to our users. However it doesn't seem to work as presumably the script will not run in the security context of the local user. Is there an easy way to get the script to run in the context of the local mac user ? Any insight would be appreciated.

After a clean install of Monterey, I enrolled an M1 MacBook Air that is apart of our prestage environment within Apple Business Manager. During the initial account setup we are trying to utilize email address for the account name and on previous versions of MacOS have not had any issues. Whenever I try to edit the account name field the @ disappears and any attempt to replace it yield the same results. I am curious if anyone else has experienced this behavior as well.

Howdy Jamfers! In our previous MDM with computers running Mojave, we were able to push out a Configuration Profile that would set Time Machine to run on AC Power. We copied over this .plist into Jamf in the Application & Custom Settings tab, but it is now seen an "Unknown Keys" for use with Big Sur. See Figure 1. below. Does anyone know if there is an updated Key Value for the Preference Domain com.apple.TimeMachine.plist that will work with Big Sur? Thanks in advance!Aaron Figure 1. 

Hello JN, I am trying to get ready for our fall 2020 semester roll-out here at CU. I am testing the Graham Pugh Erase install script over at Github. My policy fires, downloads the .py script and the specified macOS version 10.15.4. It stop with the following and does not erase and install. My Parameter Flags are: 4 --erase and 5 --version=10.15.4 What am I missing? TIA, /randy Working around a very dumb Apple bug in a package postinstall script that fails to correctly target the Install macOS.app when installed to a volume other than the current boot volume. Please file feedback with Apple! Product downloaded and installed to /Library/Management/erase-install/Install_macOS_10.15.4-19E287.sparseimage [run_installinstallmacos] Mounting sparse disk image to identify installer app./dev/disk3 GUID_partition_scheme /dev/disk3s1 EFI /dev/disk3s2 Apple_HFS

Hello,I upgraded my Jamf Pro server from 10.28.to 10.31 today (it runs on Windows server).  Based on the instructions about the upgrade I checked the Change Management log file path and 1) it exists and 2) Tomcat runs as Local Service and has permissions to the directory.  I also tried changing the permissions on the directory so 'everyone' has modify.  I rebooted the server.  That didn't make any difference.Since running the 10.31 upgrade, the server startup will not get past Initializing Change Management.  I am wondering if anyone else has encountered this and what a solution might be.  I did submit a support request with Jamf but have not heard back yet.Thank you,AJ

I am working on a script that will prep the Application folder for another user. This will remove all the user installed apps. I have been working on this for a bit and am having trouble finding my mistake. Im sure there are there are other ways to do this better and I am all ears. The issue here is that my array seems to not be splitting correctly at the end, causing my end result to be one line instead of multiple looped entries. Thanks for any assistance. #!/bin/bash IFS="," # create an array with all the filer/dir inside ~/myDir array=(/Applications/*) delete=("/Applications/Utilities","/Applications/App Store.app","/Applications/Automator.app","/Applications/Calculator.app","/Applications/Calendar.app","/Applications/Chess.app","/Applications/Contacts.app","/Applications/DVD Player.app","/Applications/Dashboard.app","/Applications/Dictionary.app","/Applications/FaceTime.app","/Applications/Font Book.app","/Applications/Image Capture.app","/Applications/Launchpad.app","/Applica

Hello!!I am trying to understand the client connectivity on our internal network and am curious to know the traffic flow.  I have a JAMF Pro Server, a bunch of Mac clients, and the JAMF Cloud server.   As far as connectivity of the clients, the Mac clients have a JAMF agent, correct?  The Mac clients when sending application usage data, do they connect directly to the cloud?  For example would the traffic flow like: mac_client_jamf_agent --> JAMF Cloud Server --> Internal JAMF Pro Infrastructure server?   Or would traffic from the clients flow like: mac_client_jamf_agent --> Internal JAMF Pro Infrastructure server --> JAMF Cloud Server Does that make sense on what I am asking?Then as far as clients on an external network, would they have to connect back into my internal network to connect to the JAMF Pro Infrastructure server or do they connect directly to the JAMF Cloud Server?  TIA!!! 

Hello everyone! I was wondering if there is any way to do a reinstall of MacOS Big Sur over Monterey via self service. One computer was updated to Monterey and time is a bit of a crunch. Or would the best way to be just boot to USB and then install that way. I want to try to avoid losing data of course, but I am willing to update the client that it is possible that a wipe may be needed