I must be missing something but where do you find the Apple Customer Number so I can have purchased from Apple.com get enrolled in DEP? All I can find is posts saying contact my purchasing department and well that's me.

Hi Jamf Nation, We're excited to announce that the latest version of the Jamf Pro 10 series - Jamf Pro 10.14 - is now available! This is a significant release for us and delivers some new functionality that we know you'll love, like:- Jamf Parent: A free iOS app that empowers parents to better oversee and manage their child's institutionally-owned device(s).- App Request: A streamlined workflow that allows teachers to quickly request needed iPad apps directly from Self Service.- Search and build Smart Groups based on certificate issuer- Skip additional steps during setup- Restricted software enforcement is more consistent and reliable Read the full release notes here. Garrett Please Note: Standard Cloud UpgradesBecause Jamf Pro 10.14 requires an upgrade to your Java version, all standard cloud customers will be upgraded together during the mass upgrade plan outlined below. This means that standard cloud customers cannot request an early upgrade for this specific r

Currently on JAMF Pro 10.4.0&JAMF Pro 10.8.0&JAMF Pro 10.10.0 All our JSS's have an issue with what appears to be a Google Chrome issue. Whenever we edit or create a policy and add/remove packages, we either get erratic behavior. Adding packages to policies don't add and end in a spinning circle forever (see attached). We narrowed it down to this version of Google Chrome on both Mac and Windows.Version 75.0.3770.90 Logging.html returns a strange issue (see attached)

Hey, I am currently cleaning up our JAMF Pro and freeing some licenses. For this, I was checking for devices that have not updated in the last 30 days. I figured some of the devices that were offline for a long time are used as backup devices - that means it's fine that they're not turned on. I was wondering if it is possible to add this information as a description to those devices - so no one is wondering about them anymore. Is there any way to add descriptions to devices in JAMF? The only way I figured is changing the hostname - and that's not possible in my environment. Best,

Hi All, Is there a jamf command that will automatically scope a machine to a certain policy? Thanks in advance.

We are a vocational school which uses a couple of Mac multimedia labs equipped with Adobe Creative Cloud. Now our Adobe licensing is changing as well as version updates. Plus I need to get everyone on Mojave and this is consistent with our departments process of summer computer upgrades. So last summer's plan to reimage our mac labs failed disastrously with High Sierra, which prompted us to proceed with Jamf as an MDM solution after hearing that it is the best choice. So my macs are enrolled in jamf and AFTER that I have the newest macs enrolled in Apple's DEP. So I am able to do policies and all that, but I'm having a devil of a time with the Mojave install. I've picked up a few things here and there scattered throughout Jamf Nation and Jamf Success, but nothing that really sets a clear path from start to finish. I've tried a couple of steps to get that "Zero Touch" magic that I keep hearing about, but it's not coming to life. FIrst, these are lab computers and students are

Hey Guys and Gals, So I'm tasked with procuring equipment for our Zoom conference rooms and my company wants an Apple TV and a Mac Mini in each room. The main use cases are Zoom meetings and being able to AirPlay to the TV in the rooms but does having both seem redundant? Can the Mac Mini suffice and thus we don't need the Apple TV's in these rooms or is there something else to it? My manager wants the Mac Minis for more "computer" use in these rooms so those will probably need to happen over the Apple TV option. Thanks all!

Hi, If we go with the JAMF Pro Cloud option does the SCCM Proxy Server component live on the cloud as well or is that component installed somewhere on premise?

Hi, I have a script:- #!/bin/sh /usr/local/jamf/bin/jamf policy -event soe (nb: also tried -trigger) This script is attached to a Policy that is available in Self Service. I can launch it from Self Service and I see in the logs "Checking for policy ID XXX..." but nothing actually gets fired off. If I run the command manually on the machine, it works just fine, just doesn't seem to work via script/self service.

Are the presentation slides for this event available anywhere?

Noob question Hello, we have LDAP integration in our Jamf instance. If I delete a user in AD assuming that there's paid apps/configurations scoped out to this user. Will this un-scope everything assigned to the said user? Thanks

I have no idea what this is or why it is a problem now. I am hoping that someone here may have seen this before. here are the results of recon scanMacBook-Pro-2:~ administrator$ sudo jamf recon -verbose verbose: Timeout: 10 verbose: Checking availability of <I removed this for privacy> verbose: The JSS is available.Retrieving inventory preferences from <I removed this for privacy>...Locating applications...Searching path: /ApplicationsLocating hard drive information...Finding extension attributes... verbose: Running script for the extension attribute Active Directory OULocating accounts...Locating package receipts... verbose: Found app: /Applications/Siri.appLocating software updates...Locating printers... verbose: Locating running services... verbose: Gathering auto login user verbose: Found app: /Applications/QuickTime Player.app verbose: Found app: /Applications/Chess.app verbose: Found app: /Applications/Photo Booth.app verbose: Found app: /Applications/Boo

Good morning everyone, I was wondering how everyone is handling setting up screen sharing remotely / by script on device enrollment. We used to run a script that would add our local admin account to the System Preferences > Sharing settings. It appears that starting in 10.14 (maybe 10.13) this ability was removed from the OS and we have been smacking our head against the wall trying to fix it. Is there a script or configuration profile that we should be using to add this account for screen sharing purposes? Based on my understanding, we can no longer use the kickstart resource to initiate this configuration change.

Last week we updated our JSS from 8.62 to 8.71. Since then, any Macs we image (Casper Imaging) fail to have the root account enabled. Enabling root as part of a configuration has been working for the past year or more. We use the command: /usr/sbin/dsenableroot -u admin -p password -r root-password in a script that runs "at reboot". Obviously password and root-password are not in the command line… Could be coincidence that it magically stopped working when we upgraded, but I am not a big fan of coincidence… On the other hand, how could the JSS version (and consequently the version of Casper Imaging we are using) cause this issue?Ideas?

Just received this email from Jamf about forthcoming changes to LDAPS in 10.11. We have serious concerns about how this change would impact our Jamf Pro cloud instance: Additionally, any LDAP server connections using LDAPS will require that the hostname of the LDAP server match the Common Name (CN) on the certificate that is uploaded to the Jamf Pro Server. A mismatch will prevent communication between the LDAP server and Jamf Pro Server. Posting what I replied to Jamf with, hope others may face the same issue and also voice concerns back to Jamf (and upvote Feature Requests related to SAML and SCIM)! Our internal domain that LDAPS binds against is a .local domain (over 20 years old AD!). This is not internet routable so there is no way for the hostname we give you on the Internet to match the common name. We can’t be the only ones that will face this issue! If you can match based on a SAN, we can probably make that work by adjusting our ADCS certificate template on our DCs that

Hi everyone, I am having trouble finding a way to do this via script, I would also like to stay away from Config Profile if I could. Is there a defaults command that can change the Login Window setting to be List of Users rather than Name and Password?

Hello nice people! I'm currently testing deploying printers using Casper, but I'm having a couple of issues. Deploying printers added by Casper Admin = "Hold for Authentication" Using the command line = "Printer Paused" Error logs shows: E [14/May/2015:10:23:35 -0500] [Job 5] Connection refused) Command I'm using: /usr/sbin/lpadmin -p "name of printer" -E -v smb://printerserver-forIT.mydomain.com -P /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Resources/Generic.ppd and /usr/sbin/lpadmin -p "nameof-IT printer" -E -v smb://printserver-namehere -P /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Resources/Generic.ppd These are network printers hosted on Windows Server 2012R2. Can someone shed some light on what I'm doing wrong?

When I am adding pkgs uploaded from Jamf Admin (local network distribution point) I then go to add the application to a policy, but for some reason the application will add twice sometimes or the interface will freeze. Any suggestions?

Hi there! Does anyone else out there track serial numbers of Apple keyboard/mice/trackpads? Is this something the inventory tracking in Jamf capable of? Thanks everyone!

I have users that have installed the Browsec VPN extension on the Chrome browser. This is allowing them to get around our filtering and monitoring software. Does any know if there is a way to block Chrome extensions. I have tried setting it as a restricted software using the app id name, but that has not worked. Any suggestions are greatly appreciated.

There is a handy program called Platypus that takes scripts (bash, perl, etc) and converts it into a working .app I have a bash script I wrote, imported into Platypus, and created an .app file. I've downloaded the PPPC Utility and attempted to import the custom .app file into the PPPC Utility but it will not accept it. I'm not sure why? Does anyone have any insight? I would appreciate it very much. Thank you in advance.

Someone had a script on here not too long ago and I can't find it now. Basically what it did was check to see if a specific wifi network was available it would switch to it. I'm looking to deploy this at my school to prevent students from switching over to our teacher network. Someone had some loose lips and the password spread. There was also a section of the script where if there was not network named "student" or whatever it would then do nothing instead. I.E. if the student is at home.

I am working on installing the DMG from https://download01.logi.com/web/ftp/pub/techsupport/cameras/Conference%20cam/FWUpdateRallyCamera_1.2.4.dmg. using Jamf Pro My question is simple, to run the installer I need to actually run a command line that calls something in the .app. Specifically I need to run the .app with an option --silentinstall. I am just stuck on how to do that, even with composer. I cannot find a "run this command" type setting I looked at: https://www.jamf.com/jamf-nation/discussions/25530/help-with-scripting-install-a-package-within-a-dmg but I just don't get it. More history on this: If I double click on the package it opens up the camerasettings.app that I then run. It creates a log file at ~librarylogslogitechdfu with a subfile of the install log. If I take the DMG and push it through JAMF pro, it shows that the file has been installed. However, if I look for the log file, it is not created (nor is the firmware updated on the device). If I add the .app

Hi Nation, I am a bit confused by the use of user smart groups within scoping.Some of our apps are made available in self service and only targeted to user smart groups. So the app appears in the self service on a device with a targeted user assigned to it but it isn't downloadable. No error message appear, it just doesn't do anything. The download is only possible when we set the targeting to all mobile devices, a single device or a device group.This happens with VPP-Apps, in-house Apps and configuration profiles as well. Did I do something wrong by only targeting to users?

Hi, Jamf user of 2 days, sorry if this is a simple one. Looking for advice on the best way to deploy a package. We have a policy to install a package to a smart group scope filtered on department. I'de also like to offer this to all computers in self service would i: Create 2 policies one to install to computers in the smart group and one to offer in self service OR Is there something clever that i can do in the one policy where it install to the smart group but only offers in self service to other computers? Thanks