So the good one I think was upgraded to Big Sur while the bad one had Big Sur installed from Apple Internet Recovery,  Haven't found any way to "enable".

I seem to recall in my previous Jamf administrator life that I could add ~/Applications/ for software inventory collection on Macs. I'm trying to add that path now but when I click Save, I get: "An error occurred while saving changes." I also tried /Users/*/Applications/ with the same result.  Is searching users' home folders for apps no longer a thing?

We currently have a standard JSS group that contains our support staff who have been added to the standard group as LDAP users. In the privileges section of the group under the "Jamf Pro Server objects", the "Read" section for "Scripts" has been selected. The support staff can access the "Scripts" section under Computer Management and can see the list of scripts we use for our policies, but when selecting to view the contents of any of the scripts they are met with an "Access Denied 403" message. I know they certainly used to have access to view the scripts, so I'm wondering if there's been an update that might have caused this, although I couldn't say how long the scripts have been inaccessible for. I've tried removing the permissions and re-adding them. Creating another test group with the same privileges and also granting them "Update" and "Create" access rights. Bizarrely this didn't make any difference, they still had no access. Does anyone have any ideas on how we can let t

Hello everyone, I'm wondering what best practices is to map printers to be installed either via policy or via self service. According to the JAMF documentation it says to use URI or IP based mapping, however, I'm assuming that this isn't taking into consideration that you may have print servers available. We are revamping our print servers this summer, before next school year, and I'm thinking that I should create new printer packages for self service as well, since we are switching to Sierra. I have been with my district, and JAMF, for about a year now and I've been creating all printer packages with mapping that used the print servers. However, I noticed that most of the printers installed before me were installed with IP's. We haven't really noticed an issue, however, I assume that it would help to have the print server take care of queuing the print jobs to prevent issue. So, utilize print servers or map straight to IP's? That is the question.

Hey all,We currently use WebHelpDesk by solar winds and for reasons both obvious and not, we are looking at alternatives.  I was wondering what other help desk systems other Jamf Admins were using and liking? We have demos set up with zendesk, FreshDesk, and Incident IQ (which we are leaning toward). Thanks for any feedback you can provide!

I'm trying to make Panopto 7.0.0 available on Self Service, however, it always seems to error out at the very end. After digging through some logs, I found that the installer should prompt the user with the message in the title (due to Mojave's "enhanced" security) and that is were Jamf is calling the error. Is there a way to get this to work through Self Service? I have tried to script a better installation for the Panopto package but I can't seem to get it to actually function correctly afterwards (in-app upload always breaks). Any help would be much appreciated.

I'm trying to deploy a new configuration profile that contains settings for kernel extensions, system extensions and privacy policy. When it attempts to push out JAMF results in an error:-[__NSCFConstantString objectForKeyedSubscript:]: unrecognized selector sent to instance 0x7fff8adf40e0This is an on-premise JAMF instance version 10.32.2 Has anybody else experienced this or something similar? 

Hi All - Does anyone know of a way to see if a user is / has been running a time machine backup from their mac? I know I can get various info using tmutil, but to my knowledge all I'm getting from that is when it's actively backing up, and would just show client ID and running = 0 when it's not actively running a backup. Any ideas?

IT pros will be able to delay Apple updates for 90 days with iOS 11.3, macOS 10.13.4 YAY!

Is there a trick to making the restricted apps payload not nuke users web clips? Thanks!

Hi all,  First off, thank you all for helping me so far with basic questions, I finally got access to the Composer app and it's been so much easier to deploy packages and whatnot. 🙂 I'm trying to use the built in policy option for creating a local account for backdoor access, to have users be able to access their machine in case of a password issue, etc. Two accounts get created, CompanyUser (for the user to be able to access) and CompanyAdmin (which I have forgotten the password to). I have a script that hides the account in the /private/var/CompanyUser (or /private/var/CompanyAdmin respectively) and that works fine, but when running this script it gives and error on the part when it goes to create the users: Error creating user: An account with the user name CompanyAdmin already exists.. When I go to the /private/var/ folder, no such user directories are present. Hmm. Odd. I try logging in to the users from the login screen (I only currently know the passw

Hi, friends! One of our Jamf Heroes, @rastogisagar123, just reminded me that everyone may not know you can explore the historical JNUC magic through a number of videos we have on file at jamf.com. That's right! They're available RIGHT NOW if you wanted to see what we spoke about in past years. Just head on over to: https://www.jamf.com/resources/search/?filters=Videos%2CJamf+Nation+User+Conference+2020%2CJamf+Nation+User+Conference+2019%2CJamf+Nation+User+Conference+2018%2CJamf+Nation+User+Conference+2016%2CJamf+Nation+User+Conference+2015%2CJamf+Nation+User+Conference+2014   See a historical session you especially love? Mention it in a comment! I'll start with mine. I LOVED being able to share the Rituals story during a Day 2 Keynote with @jzwaan and then introducing Jamf Heroes for the first time! Check it out at https://youtu.be/ljfiUD-eTFg?t=5061  

Hello, At the moment I'm facing some troubles with a script. I want to uninstall the EndPointProtector from CoSoSys. They provide a remove script, which I want to start from a JSS script. The problem: you have to enter a pre-defined uninstall password. How could I pass this from my script to the other script? I already tried something like this: #The uninstall password unpw="xxxxxx" #This calls the EPP uninstaller script cd /Library/CoSoSys/EndpointProtector/ echo "$unpw " | ./remove-epp But it didn't worked. I guess the problem is "remove-epp" is no command but an other script, so basically my script hands over the string to the launch command of the other script but not to the input method inside this remove-eps script... Any ideas how I could solve this? It causes a lot of troubles right now for us....

We recently learned that our student population somehow got the jamf mgmt account password. We want to switch to randomized passwords but we also use the mgmt account for working on the machine when admin priv is required. So obviously that will no longer be an option. What are other people doing for local admin rights on managed computers? We could use domain credentials but in my experience it's not uncommon for Macs to lose their domain bind, and I see in the official docs that JAMF recommends a local account in case of domain disconnect.  So then I thought about making a hidden local admin account but then we're back to having one universal set of credentials and risk the students somehow getting this password. Any thoughts are appreciated.

Got my certs uploaded, but when I run a test I get: org.apache.http.conn.HttpHostConnectException: Connect to gsxapi.apple.com:443 [gsxapi.apple.com/17.151.129.22] failed: Connection timed out: connect How do I know if this is on my end and I need to open something up internally, or if this is on Apple's end and they haven't whitelisted my IP yet? Do they send an email specifically announcing the whitelist? I haven't received anything mentioning it yet.

Dear All, Need help on executing a bash script: How to run this via bash script? sudo defaults write ~/Library/Preferences/ByHost/com.apple.controlcenter.plist Sound -int 18 sudo defaults write ~/Library/Preferences/ByHost/com.apple.controlcenter.plist Screen\\Mirroring -int 18 sudo defaults write ~/Library/Preferences/ByHost/com.apple.controlcenter.plist Bluetooth -int 18  Thanks!Raj.  

Hi all Since iOS 14.2 we have a problem with the in camera QR code scanner. The square shows up but the pop up with the link does not. Also the scanner is not available in settings>control centre so we cannot add it to the control centre as an icon. I think both problems are related and I am pretty sure it has something to do with our Jamf School environment as I have no problems with my personal (Identical type) iPad. Unfortunately I can't find anything in the restricions and there does not seem to be an QR code build in application which needs to be added to the whitelist. Nonethless it seems blocked somehow. Is there anybody who can shed some light on this issue?Thanks muchFrederic

I have an .app bundle contained in a .dmg that I am trying to package to deploy to our fleet of machines to the /Applications directory. When I package this via composer utilizing either drag and drop from /Applications to Composer, or via normal snapshot and drag from the .dmg to /Applications I get a usable package that installs fine on 10.15.7 machines. However, when this same package is run(manually or via policy in Jamf Pro) on a macOS 11.x machine the installation to /Applications is literally zero KB and is an unusable "shell" of the .app bundle. The icon is greyed out with a crossed out circle in it(indicating nothing is there). I'm racking my brain trying to figure out why, has anyone else experienced this/know a fix/workaround?

We have a few machines that did not update their FV recovery key, so I created a policy that will be scoped to a smart group. I did not create the smart group yet so I have the policy scoped to Specific Machines and Specific users, with nobody added; no targets. It is also set to run once per machine and only attempt 3 times. However, despite these settings it did still push out to all our machines and was attempting on failed machines indefinitely. I have it disabled currently but can find no reason why it pushed out to anybody. has anyone encountered this before and if so, was there a fix for it?

Howdy!Is there any way in Jamf Pro to customize email notifications to have more information in the message body?For example, I've set up a recent smart group to notify me of machines that JSS hasn't seen in over 1 week.  It tells me the machine name, and gives a link into Jamf.  Machine names aren't super detailed, and I'd rather have the information I care about in the message body rather than having to log into Jamf to see what I need. Any way to make it include things like the assigned user right in the message body? Thanks!

How heavily do most of you leverage extension attributes to track the state of a laptop, such as in-service, out-of-service, damaged, out for repair or slated for return to the IT team because a staff member has departed/been terminated?We don't have a separate IT asset management system at this time and use JAMF as our system of record for all laptops, desktops, and iPads. We have been using a spreadsheet as a tracker for these items, but being able to build smart groups and run reports using extension attributes that indicate the state of the laptop would be more appealing.Any tips or best practices for those that do leverage extension attributes for this? Good idea, bad idea?Thanks!

Hi Jamf nation, Since we updated to 10.32 (from 10.26) all configuration profiles are failing with "This profile no longer exists or contains invalid payload data" (already enrolled Device) or "The profile is either missing some required information or contains information in an invalid format." (newly enrolled Device)Any suggestion? Thank youBRDaniel

Hi all,I am trying to install a network profile for the corporate wifi and it failed to install it on the station.The error that appears in Jamf under Failed Commands is : ״The ‘Wi-Fi Network’ payload could not be installed. The 802.1X service could not be updated.״Appreciate your help.

Wondering if anyone else has seen the following behaviour and has a solution. I am requesting a system certificate from a Microsoft CA using the 'AD Certificate' payload within a configuration profile. The Mac is bound to AD and has the appropriate root trust certificates installed for the CA, however the request fails with the following error. This same profile works fine on our Mountain Lion clients so I am wondering is this a feature in Mavericks. Dec 10 10:33:03[2580:1]:ADCertificatePayloadPlugin.credentialsForDomain domainname = ETF; username = <deleted>$Dec 10 10:33:03[2580:1]:+ADCertificatePayloadPlugin.getCertificateFromServerDec 10 10:33:03[2580:1]:+GetCertificateFromCAServer credentials username = <deleted>$Dec 10 10:33:04[2580:1]:+GetCertificateFromCAServer gss_aapl_initial_cred status = 0Dec 10 10:33:04[2580:1]:+GetCertificateFromCAServer running as euid = 0Dec 10 10:33:04[2580:1]:+GetCertificateFromCAServer ca_name = <deleted>Dec 10 10:33:04[25

So, I have modified the classic LAPS API script to work over the new Jamf Pro UAPI (you can check it out it here: JAMF UAPI LAPS script ), did not realizing it will only work if jq binary is installed and working on the mac, so I am trying to put together a policy to install jq at enrollment complete and to push it to all the macs which don't have it currently installed. What I have tried:Package the jr binary from my work mac, where jq is installed and working from /usr/local/bin/ using ComposerTo make sure it will be executable, I added "Execute Command" to the policy: chmod +x /usr/local/bin/jq​  But if I check for it via: which -a jq or try running curl with jq pipe - it can't find it...I thought maybe $PATH is set incorrectly, but it looks alright to me:    akamenev@MacBook-Pro bin % ls -lh total 0 lrwxr-xr-x 1 root wheel 89B Sep 22 17:41 authchanger -> /Library/Security/SecurityAgentPlugins/JamfConnectLogin.bundle/Contents/MacOS/authcha