Hey y'all lovely people!I am looking for an easy way to get my GSX information up to date after our connection went down for a month or two. It seems that the only filters for PO date and warranty expiration date are (past or before certain date) and (x number of days before or after now) I don't have a way to search for all computers that have PO Date or Warranty expiration date missing. I had thought about creating a search that grabs all computers and run a GSX update on that, but some computers have that info manually entered in and if a GSX update is run that info gets erased.Another option is to get all computers filter those who have this data missing and add them to a static group, but then I have to erase that static group possibly at the start (not sure if I can) then also manually run GSX update after the script runs, not ideal, but possible.With that I would like to have a smart group of all devices that have GSX info missing and then run a mass action on that to

Installing Jamf Pro Current Version 10.33.0 on macOS Monterey Version 12.1, mysql 8.0.27. I keep getting "No database connection" when trying to access locally on port 8443. I've worked through "Troubleshooting Database Connectivity from the Jamf Pro Server" a few times, and double checked the DataBase.xml file. Any suggestions would be greatly appreciated. In the meantime I'll try on another Mac with a released version.

How can i remove/delete a computer from a smart group? this computer had a policy cached, was populated in a smart group, then via self service installed the cached application. the computer has been removed from the policy that caches, but the smart group still lists the computer has having the application cached, thus the self service policy still has the application available. how do i get this computer out of the smart group?smart group --> ACTION --> DELETE COMPUTERS, will this delete ALL the computers in the smart group?

Hi all, Has anyone figured out how to auto-configure for exchange 2016? I'm trying to avoid the steps that- once my network users luanch outlook 2016 - they have to input 'their email' , then they choose 'Exchange', then they have to input thier 'username', 'password', and 'server'. Is there a way to automate this to the whom ever network user is login in?

Where does one locate "My Assets" in Jamf Nation?

I wanted to block our users from installing Monterey until we get a chance to test it in our environment.So I downloaded and launched the installer, then opened Activity Monitor to get the process name.The installer showed up as:Install macOS Monterey But when I tried blocking that process (with Restrict exact process name checked), it didn't work.On a hunch I changed it to this: Install macOS Monterey.app That worked.I'm not sure why this is the case, because there's definitely no .app in the process name.

My Google-foo is failing me today. I'm outside of my wheelhouse trying to convert our distribution points from SMB to HTTP. I've got my clients connecting successfully, but every policy is failing with Error: Package was not successfully downloaded. -1001 I can't find anything on error 1001. Does anyone have any insight?

The teams app appears to be problematic whenever multiple users share an iPad. The problem is, the one user may sign out, but if another user has a profile on the same ipad and clicks theirs to sign into teams, it will bypass all security and open up in the previous user's account who just signed out. Obviously, quite a real privacy issue. here is a link to the situation as observed by others. https://techcommunity.microsoft.com/t5/microsoft-teams/issue-in-microsoft-teams-app-in-ipad/m-p/107695 The only way around this at present is to go into settings and clear the app data. The toggle appears as a switch, suggesting this is a one-time setting change, but it is not. Is there any way to install teams for iPad where exiting the program automatically clears the app's data?

I've followed the steps in Jamf pro help topic 109994 to create a report of all the applications in my environment, but when I look at the generated csv file, there are many lines that appear to be missing the application name, i.e. ",,User’s MacBook Pro" rather than "some_application.app,3.6.1,User’s MacBook Pro"I can view an individual's computer's applications in the console, and many of these applications do now show up in the application report. I infer that these missing applications are the lines that are lacking the application name. Has anyone found a solution to this problem?

Hello AllI am having an issue where our local usernames are being setup as "first.last" and this is causing issues down the provisioning road. We are using OneLogin with JAMF Connect and have the LDAP attributes pulling as well, below are the attrbitutes currently mappedUserID - uSNCreatedUSername- sAMAccountnameRealName - GivenNameusersUUID - uidNumber I changed these attributes and it seems this could be the cause but im not sure. Attributes that were in Attribute mappings before the change when the names came in as "firstlast" correct formatUserID - not mappedusername - cnreal name - givennameusersUUID - UidNumber Just wanted to get some advice on what could be causing this, these are the only things ive changed lately

I would like to ask if anybody might have performance and overall reliability comparisons of running the JSS and Distribution points on macOS vs VMs?My existing hardware is:JSS and primary distribution pointMacPro Late 2013, 6 core 3.5 GHz Intel Xeon E5, 32 GB RAMMacPro Late 2013, 6 core 3.5 GHz Intel Xeon E5, 32 GB RAM Additional Distribution pointsMacPro Late 2013, quad core 3.7 Ghz Intel Xeon E5, 32 GB RAM

Hi, Just wondering if anyone knows whether there is some sort of log on Mac's that shows what is happening during 802.1x connections and disconnections etc for wired 802.1x not wireless?I can see in Console under the Machine name (devices) a bunch of things for eapolclient  in the All Messages pane but can't see this info in any logs 

Hi all, Due to 'reasons' such not able to check VM's being hosted within Parallels Desktop, my company has decided to restrict Parallels Desktop from running within macOS for everyone. I am currently setting up a Restricted Software for Parallels.- I have setup various Process Name such as Parallels, "Parallels Desktop", Parallels D*, etc, with and without " quotes.- I have turned off or on Restrict exact process name- I have turned on Kill Process But no matter the combinations I tried for Process Name or Restrict Exact Process Name, I either get:- When Restrict exact process name = on, the restriction does not work at all. I can still start Parallels Desktop, no matter what name I put in.- When Restrict exact process name = off, the restriction works too well. Even when I have Parallels not running, it kill message pops up every 15 minutes, asking the user to stop using Parallels. Does anyone else know how to restrict Parallels Desktop proper

WIth nomad it seems to go to login screen between the upgrade of OS so it doesn't complete upgrade till login then it shows the remaining minutes then the upgrade will be complete. Is their a way around this or did I miss something in my settings or in settings that needs to be there for the upgrades to be auto? Thanks for helping.

I had a curious question about something I noticed while auditing our managed apps in our JamF Pro instance. I think a few of our apps have shown this same message, but I wanted to focus on this one because of the unique situation.The app in question is called Audio Exam Player. The app is designed for dyslexic students to read of a recording of a test or quiz a teacher has set up and the student can listen to the questions and answers (there is an Audio Exam Creator that goes with it). I noticed today that in our JamF Pro that the following error messages came up when I viewed the app settings.This app is disabled. It is not deployed to users or devices and is no longer available from Self Service.Complete information about this app is currently unavailable, or the app may be unavailable from the App Store.I also have a screenshot of the app settings attached. I did see that the app is still listed in the App Store as well as Apple School Manager, so I am not sure why I am getting thi

So have a bunch is kids just downloading and running the jar file! Is there a way to black list jar files with jar launcher?

The company I work for has rolled out Mac Minis as Zoom Rooms in several of our conference rooms. Some of those rooms have A/V racks that connect ceiling mounted microphones and speakers to the computer through an external audio card on the Mac (currently the external audio card is a crappy logitech headset adapter, but audio quality doesn't seem to be an issue). The problem is, the mic and speakers feed back if the mic gain is turned up too high unless the "Thru" checkbox is unchecked in Audio-MIDI setup (which makes sense). I can uncheck the box manually, but Audio-MIDI setup resets itself and re-checks the box after the computer reboots, which is scheduled once a week since the computer is a Zoom Room device. I haven't been able to find anything (aside from Applescript UI scripting, which I would prefer to not use if possible) to un-check that box via a script. The most promising thing I've found so far is: /Library/Preferences/Audio/com.apple.audio.DeviceSettings.plist Th

Hey folks,Our machine naming convention is 11 characters long. The first 4 characters are:m = macd/p = desktop/portable21 = deployment year...then the last 7 characters of that machine's serial number.We can't change this naming convention operationally/culturally (eg use the full serial). It has to be the way it is.Currently at enrollment, we display the full serial number on the screen, and the person imaging it will count 7 characters back, and manually type/paste that in. This lends itself to errors, that don't always get caught in time.We can sort out automating the first 4 characters, but does anyone have a clever idea about how we could automatically put the last 7 of the serial into the name? 

I believe I have a slightly different situation here than what I've found online so far regarding resetting passwords.  In our situation we have a bunch of laptops that went out to Teachers that were not included in our pre-stage enrollment.  Since then, a local user account has been created (admin with secure token) and now we want to send out enrollment invites to get these devices logged into the system.  So far I've been able to do so quite easily on a test machine, and can even create a hidden admin account with password that we can use to backdoor into the device if needed.  One purpose of doing this would be to reset a forgotten password.  However, I'm beginning to realize that this may not be possible because the first account created (501) has a secure token and the second account (502) does not.  At this time I am unable to reset the password of the original account.  I should say that we are primarily using macOS Catalina and Big Sur. 

HiI’m trying to set up a BYOD environment besides our company owned devices. As shown here           With PreStage Enrollments it works like a charm but on the personally owned devices it doesn’t install at all. I followed this manual but it doesn’t work. All I got is an error, shown hereWhat is going wrong here? Thanks

Oooh, badges!  (Come on, somebody had to set up the inevitable follow-up.)

Hi folks,Newbie here.I'm trying to configure jamf connect, and I'm unclear if I have to have a hybrid setup.Users are in AWS Directory Services (which is just managed AD).This  is connected to Azure AD via Azure AD connect using password passthru.Where I am stuck is the ROPG settings in the plist file. I'm not sure how to find the ROPGID Client ID or discovery url.Any clues?Thanks!

This might be a simple thing but for the life of me im at a loss. We have some seriously locked down iPads for inmates and know how to restrict safari to a specific website and all that but how do i push/create a bookmark icon onto the home screen so its easier to get to?

Using The MUT v5.0.3 on Jamf Pro 10.7.1. Have a .CSV file of just S/N. In MUT I select Computer Static Group, Add to Static Group, My GroupID for this is 168. Pre-Flight tells me Looks good! I click Submit Updates. I then in the MUT.log file I get this error-Failed PUT. 409Error: Unable to match computer I created a fresh static group and that group gave me the same error.

I had a question about Enrollment policies. If I have policies set for just Enrollment does it only work once when it's a new device and being setup? Or does it run those policies if the device has been wiped and reinstalled OS which would make the Enrollment policies run. Not understanding the Enrollment policies. I've just saw Jamfs video on auto enrollment with using this script https://gist.github.com/e1848e3b410395f05c9fcd9ed78386a5. I was curious on creating a policy that says Enrollment Complete would it just install once on first setup of device or if device is wiped and reinstalled OS.