This error window is popping up on all of our Jamf Managed Computers. It started about 3 or 4 weeks ago. Sometimes it pops up during the enrollment process.Has anyone seen this or know what it is? It goes away when you click on it only to return later.

I've looked through jamfnation and the answer has always seemed to be ARD kickstart to enable Screen Sharing. That no longer seems to be viable moving forward starting with 10.14: sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -off -restart -agent -privs -all -allowAccessFor -allUsers Starting... Warning: macos 10.14 and later only allows control if Screen Sharing is enabled through System Preferences. I'm not seeing anything about it here either: https://developer.apple.com/enterprise/documentation/Configuration-Profile-Reference.pdf Am I missing something or is there no way to enable/disable Screen Sharing in 10.14 without having to physically click around on the computer?

Hi, One of my users followed the link in an Enrollment Invitation email.Unfortunately he only installed the CA profile and then quited the browser.When he now follows the same enrollment link to install the MDM profile he gets this error: Deleting the CA profile and do everything again doesn't help. Rebooting doesn't help.When I search Jamf Pro by serial number I cannot find his Mac. What can I do to enrol this machine successfully besides clean install his Mac ;)

Hi All, We have installed NoMAD and this welcome pop up comes up for every logged in user. Is there a custom configuration profile to suppress this behavior? In addition, is it possible to allow an automator custom workflow (saved as a .app) to run automatically with finder permissions. Thanks,Jared

I'd like to start preparing to upgrade our computers to Sierra and one of the major no no's is allowing the user to enable iCloud Desktop & Documents. Currently there is not a way (that I know of) to turn this off, but keep iCloud drive off. While I don't think that many of our users use iCloud Drive, I would like to set up an EA that could tell me how many users currently use it. Because I will be completely turning iCloud Drive off when users upgrade. The Plist that shows this is MobileMeAccounts.plist in ~/Library/Preferences/ The trouble is how to identify that it is enabled via a script. The key that shows if it is enabled is above the string. I can't seem to figure out how to look for it. Or maybe there is an easier way! <dict> <key>Enabled</key> <false/> <key>Name</key> <string>MOBILE_DOCUMENTS</string> <key>ServiceID</key> <string>com

What am I missing? I do this all the time yet I'm not finding my error. I've built a simple smart group.Criteria is ..( "Application title" is "Microsoft Remote Desktop.app" and "Application Version" is "10.3.0" ) I get zero results, yet I know I have clients with that version that have submitted inventory. Anyone have thoughts I where I'm missing it?

We enable Filevault 2 as part of our enrollment process. In order for Filevault to enable, the user needs to log out. We find that users aren't logging out on their own when they receive new machines, therefore recovery keys aren't being sent to Jamf on time. Is there anyway to force a log out once the enrollment is complete? Is there a log out script we can use for this?

Found some JN posts regarding removal of Adobe CS, but nothing specific for CS6 and the tools I have tried from Adobe aren't removing the full suite. Anyone have a script to share that nukes Adobe CS6? I need to deploy the CC version ASAP but CS6 needs to be removed first. Please share out and help ease the pain!

Any one have a good way to get a list of all installed software in my environment? We would like to generate a report on all the installed software we have on all our managed macs, don't care who has it, just need a list. I thought the jss summary could do something like that but it only seems to make the licensed softwares.

Hi, I have a problem with MacOS Mojave when I have 'Login Window' payload with "Show computer's administrators" unchecked. Computers with only administrator accounts can't log in because no login/password fields appears. Have you ever had this bug? MacOS 10.14.2Jamf Pro 10.7.1 (the same with 10.8 in Dev environment) Thanks

I read through the documentation and could not find the PURPOSE of such an installation.I'm assuming, from the name alone, it allows me to deploy root certificates from Active Directory? Is that all it does?

I've been playing with DEP and a teacher ipad with an icloud backup. I could not get the backup to restore and have the ipad in DEP so I gave up on that thought and went to restore it and reenroll manually though the jss enroll site, but now I continue to get the above message. I have wiped this ipad at least 7 times, it has no current profiles installed and now I cannot get it back onto management no matter what I do. The teacher does require the backup to continue with her work.Any ideas?Gabe ShackneyPrinceton Public Schools

A bit late to the game in wrapping my head around pushing out these settings. One question I have: when I create a policy and push it out to our Macs, do those settings show up in System Preferences / Privacy for me to verify the settings were applied? So far I haven't seen anything I have tried show up there. Even settings from mobileconfigs that I have downloaded from manufacturers, so I would assume they were accurate. Before I fall too far down this rabbit hole I wanted to see how I can verify that a setting was applied. Thanks, Tim

What happens if a computer is in use by a person, and you add the computer to a prestage enrollment group? aka they are actually working on the computer, BEFORE it is added to the prestage enrollment group

I'm in the process of migrating from an on prem Jamf instance to a Jamf Cloud hosted instance. One thing I just noticed is that I'm unable to rename any package uploaded to my cloud distribution point. With my on prem infrastructure, I'd often just rename an installer package in Admin to be the same as a newer installer, then upload the newer installer and replace the existing installer. That would make it so the newer installer would automatically replace the older in all existing policies, so no policies needed to be edited. I contacted Jamf about this and they said that's how Jamf Cloud currently works and there's no way to rename a package after uploading it. Has anyone else ran into the same thing and found a workaround?

Hello, I enabled email notifications for VPP applications, when no more licenses available or when an item is removed from the App Store. When I receive the email, we see the HTML tags. Do you have the same formatting issue on body of email notifications for VPP Applications ? I don't have this problem on all other types of notifications sent by our Jamf server. I'm using version 10.14.0 of Jamf Pro Thanks for your help

Hello, Please, do you know if it is possible to customize the message indicating that you have to approve the MDM when the UAMDM is not detected because the original message is not very meaningful for our users and they don't click on "Approve" button. Thank you for your help,

Does any one know how to suppress these two attached messages? Updated some test computers from 2016 to 2019 (16.28.19081202). First one pops up when a user logs in and the other one when a user launches an application... Is there already a config profile that can be pushed out that some one has created?

I haven't touched policies or config profiles in months. Recently we had two Macs, one Macbook Pro and one iMac that went through pre-stage, config and policy. After that's all done our Techs rename the device and add it to our domain. Well for some reason the computer name field has been grayed out and we can only access the computername.local so when they're added to the domain it will be added as "imac" or whatever. What kind of policy or config do I need to enable the computer name field? Both these Macs were running the latest version of Sierra.

Hey all, Apologies in advance if this questions comes across as thick-headed - I'm very new to Jamf and bash scripting in general. We have Visual Studio Code installed on our lab machines, and would like to use Jamf Remote to install some plugins for VScode. To do this, Jamf needs to be able to run code --install-extension foo.vscode.extension We've managed to add code cli commands to the path variable from Jamf remote by writing the following script: #!/bin/sh sudo touch /etc/paths.d/vscode sudo bash -c "echo /Applications/Visual Studio Code.app/Contents/Resources/app/bin > /etc/paths.d/vscode" This can be pushed to our machines and will work once the Macs are restarted, allow us to locally install vscode extensions via command line. The problem comes trying to push the vscode commands via Jamf remote - I don't think that Jamf (as root) can see the path variable to run the vscode commands. I think this will hold true even If I sudo -i into the same user that has the path

Hey folks! I am having an issue deploying a custom configuration profile created via ProfileCreator to Jamf Now. It deployed once to the computer before, and by the looks of it, will now not deploy again after some modifications. I deleted the old profile from Jamf Now and then uploaded the modified one, which is standard procedure. One thing to note is that when trying to install the configuration profile manually, I get a warning message (screenshot attached). Any ideas as to what may be the cause of this? *And if you don't mind, please upvote this feature request: https://www.jamf.com/jamf-nation/feature-requests/8826/ability-to-update-configuration-profiles Thanks, Jayke Here is the contents of the profile:<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <key>PayloadContent</key> <array> <dict&g

I enrolled a MacBook Air in our Jamf Pro instance, and prior to enrollment, the user unlocked the laptop with touch ID. Now, touch ID won't work. In my config profile, the "unlock with touch ID" box is checked. I even excluded the LT from the profile, but it still doesn't work. The user is able to create a new fingerprint through the touch ID panel in system preferences, but at the login screen isn't prompted to use it. This is a 2018 MacBook Air, 10.14.5, and is bound in AD. I know there are other posts about AD bindings breaking the touch ID, but the LT was bound before the Jamf enrollment and touch ID was working. Has anyone else experienced anything like this, or know of a way to fix it?

Hey everyone, I'm trying to mass login into 30 machines via Casper or ARD. The machines are sitting at the login window waiting for a username and password. I'm currently trying this, but it never logs in. Can someone help me with this? osascript -e 'tell application "System Events" to keystroke "LOGIN_NAME"'; osascript -e 'tell application "System Events" to keystroke tab'; osascript -e 'tell application "System Events" to delay 0.5'; osascript -e 'tell application "System Events" to keystroke "PASSWORDHERE"'; osascript -e 'tell application "System Events" to delay 0.5'; osascript -e 'tell application "System Events" to keystroke return' Thank you all very much.

Do you deploy Panopto at your site? Are you able to push the installer to a computer using common events? I used to do this very easily with the custom download from the vendor, but now am only able to get it to work via Self Service. Log files suggest a possible permissions issue with an account generated to manage the install. I'm not sure whether the change is High Sierra, the installer, or other.

I'm trying to perfect our DEP workflow for setting up new and old Macs for our company and things are a bit rocky. My current workflow is using SplashBuddy to show the end user a graphical update on the software that is being installed along with enabling FileVault encryption. This seems to work relatively well. I have a prestage enrollment set up that requires authentication before entering in their account, which pre-populates the new user with their account info. It seems like after upgrading to JAMF 10.7 that now there is no possible way to generate that user as a Mobile User. Or even make them a standard user. Instead, the account that is created is a local admin account. At our company we would ideally like Standard Mobile User accounts. Is that even possible any more with a DEP workflow? How do you guys do it? I have also tried to downgrade the local admin account to a standard account, but as soon as we do, their account is no longer able to log into the computer. We have