Hello! Trying to polish up our Jamf Connect configuration, but I notice upon reboot the Jamf Connect screen doesn't pop up, I have Filevault disabled, and I made it so the authchanger script runs every time the computer logs in. This is the plist file:<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>CreateJamfConnectPassword</key><true/><key>CreateNewUserHide</key><true/><key>DemobilizeUsers</key><true/><key>DenyLocal</key><true/><key>DenyLocalExcluded</key><array><string>orgadministrator</string></array><key>EnableFDE</key><false/><key>EnableFDERecoveryKey</key><false/><key>LocalFallback</key><false/><key>LoginWindowMessage</key><string>Welcome to xyz! Please log

Please create a Self Service app/web clip that allows user to update inventory from their device. 

Hello,When our students graduate we offer the option for them to keep the devices. We wipe and delete them from JAMF when they sign them out during the final days of school. Once we do this if they restore from an iCloud Backup, all of our configuration profiles are added back via the backup without the iPad enrolling back into our MDM server. One profile we have is to deny the ability to factory reset the iPad via Settings. This means the graduated students are unable to reset their device that has pulled its old management controls. The only way to wipe them is to put them in DFU mode and use Apple Configurator 2.Is there a better way to release these devices through smart groups or anyone else noticing this.Thanks!

In our Mac fleet are Clients who have Microsft Teams 1.x and 2.x installed. It turned out that "Microsoft Teams (work or school)" in Version 24231.x changed its Name back to "Microsott Teams". Does this mean that it will remove a installed "Microsoft Teams" in Version 1.x ? How does this effect Jamfs Patch Management for Microsoft Teams?  

Hi, I am trying to install Cisco Any Connect through jamf pro and facing a weird situation here , the logs of policies and configuration profiles show successfully installed but the app is not found anywhere on the laptop . i am sharing the install.log here for reference ""./postinstall" in /private/tmp/PKInstallSandbox.GRMsQD/Scripts/anyconnect-4.10.5cspVc2023-11-17 11:08:12-05 MacBook-Pro package_script_service[1309]: PackageKit: Preparing to execute script "postinstall" in /tmp/PKInstallSandbox.GRMsQD/Scripts/anyconnect-4.10.5cspVc2023-11-17 11:08:12-05 MacBook-Pro package_script_service[1309]: Set responsibility to pid: 1174, responsible_path: /System/Applications/Utilities/Terminal.app/Contents/MacOS/Terminal2023-11-17 11:08:12-05 MacBook-Pro package_script_service[1309]: PackageKit: Executing script "postinstall" in /tmp/PKInstallSandbox.GRMsQD/Scripts/anyconnect-4.10.5cspVc2023-11-17 11:08:12-05 MacBook-Pro installer[2294]: PFPkg: No file found at path: /private/tmp/An

We have been trying to track how big of an issue iCPR is (scope-wise), but have not been able to get an extension attribute working properly to show who has it on. How are you all handling this?

Going over Jamf nation posts the past few weeks, and it seems like there is an uptick in posts and comments that look very much to be made by chat bots. I have also seen more people marking their own comments as solutions to their own posts and such. Has anyone else noticed this trend or is it just me? 

This appears to been touched based on in the past, but appears to of died once catcher was put into place for check coverage.apple.com however, I noticed in Monterey and possibly big sur, you can see applcare+ status, under >Apple Logo > About my Mac > SupportAnd was wondering, if this can be added to an extension attribute, as like the ability to get the battery condition of a MacBook, and if so where on earth is the information stored.

I'm working on a new .mobileconfig file to distribute 802.1x settings. I can make this work in a file built by ProfileManager, but when I build what appears to be the same thing on my JSS and load it on a test box, I'm getting "Acquired: cannot prompt for missing user name" from eapolclient in console.app. I want to compare the two mobileconfig files, so I converted the PM file with plutil: >>plutil -convert xml1 PMFile.mobileconfig When I try to convert the JSS-generated file: >>plutil -convert xml1 JSSFile.mobileconfig JSSFile.mobileconfig: Property List error: Unexpected character 0 at line 1 / JSON error: JSON text did not start with array or object and option to allow fragments not set. Is there a way to get a standard Property List file from the JSS? (I can't convert to JSON either).

I am looking to implement CIS Benchmark on macOS Sonoma devices and we have Jamf Pro as an MDM.Can someone help here for scripts and configuration profiles for macOS Sonoma Compatible ?I found the old one which we had used for Catalina https://github.com/jamf/CIS-for-macOS-Catalina-CP is this still eligible for macOS Sonoma ?Thanks & RegardsJaved Khan

HI,I'm currently setting up the configuration profiles for our iPads and am trying to figure out if there is a way to have bookmarks preconfigured on the iPad for regular sites.At this stage I have some webclips set up, but I'm trying to avoid having too many tiles on the iPad and would prefer them in bookmark form in either Chrome or Safari.Any help would be greatly appreciated. 

Hello Jamf Nation!Our Art program recently purchased some Epson SureColor P900 printers.  They have a long history of purchasing Epson 3800, 3880, and P800 printers, so it wasn't surprising they purchased this model to replacing some worn out printers that couldn't be repaired any longer.  All of them had a standard Apple Installer .pkg file available for download from the Epson.com support site.  I go to the Epson site for the P900 drivers and all that's available is a small download - "SCP900_Lite_64NR2_NA.dmg" which inside of it has the "Epson Installer" application.  No package file. I attempted to capture the Epson software and driver install using Jamf Composer, but printing fails on the captured package no matter how I manipulate it - "Software is missing.  Contact the manufacturer for the latest printer software."  Opened a support ticket and the first reply back from them was to go to Epson.com and select the OS and download the driver for the mod

Notability has announced changes to their Education license model, info found Here.I ran into an issue deploying the license key to macOS devices following their instructions Here.The sample XML for macOS deployment file doesn't indicate what the "Preference Domain" should be set when deploying via Configuration Profile in Jamf.You should enter com.gingerlabs.Notability for the Preference Domain field.Here's an example of my PLIST file:<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>com.apple.configuration.managed</key> <dict> <key>License Key</key> <string>YOUR_LICENSE_KEY</string> <key>iCloud Allowed</key> <true/> <key>Link Sharing Allowed</key> <true/> <key>Note Gallery Allowed</key> <true/> <key>GIF Library All

Hey everyone, new to Jamf here. We have a remote desktop app that requires us to allow access via the remote desktop setting in privacy and security (shown below). We have many remote machines and are trying not to have to enable it one by one. Anyone know if it's possible to set this in Jamf? I looked in the PPPC on our config profile but I don't see this "Remote Desktop" setting.   

Hey All,  We have a logi swytch and it needs DisplayLink app to make it work. I'm trying to make DisplayLink available on Self Service. But when I tried to create a configuration policy to allow screen recording for DisplayLink, it doesn't work at all. Anyone has any idea to make it work. Please see my PPPC configuration below  

Hey everyone, It's been awhile since I have done anything in Jamf Pro and honestly I am more of a sccm/intune engineer.  I say that because I recently deployed a registry key on all windows machines to greyout the option to enable or disable syncing on a onedrive.  My leadership has ask me to force all users to enable syncing their documents, pictures and desktop as seen in the picture.  I have successfully deployed this to all windows workstations.  Does anyone know how to do this on macOS? See the example below. 

I am doing some testing with macOS 15 before any widespread deployment.I use Jamf Pro polices and packages to update Jamf Connect to the newest version (currently 2.39).On macOS 13.6.7 and 14.6.1 the policy runs fine without any issues however on macOS 15 it is giving me an integrity error:Verifying package integrity...Installation failed. The package could not be verified.I can install Jamf Connect 2.39 directly via the dmg file and JamfConnect.pkg file on macOS 15, however this is not practical as most of the managed computers are offsite.This seems to be an Apple integrity check issue. Any thoughts on how to work around this issue.Thanks

I am able to successfully build & deploy custom preferences using the Application and Custom Settings on Configuration Profiles. What's not working is just the AllowTenantList setting. I think it's a syntax problem so any help would be greatly appreciated. M$ website to deploy & configure on macOS says: The example for this setting in the .plist file is:<key>AllowTenantList</key><array><dict><key>TenantId1</key><Bool>True</Bool><key>TenantId2</key><Bool>True</Bool></dict></array> We only have the one tenant ID so this looks like:<key>AllowTenantList</key><array><dict><key>My_Company's_Key</key><Bool>True</Bool></dict></array> Before I save the config profile, Jamf shows a summary of the settings. All the boolean keys are showing their correct true/false, but this string just says " AllowTenantList=[{}] " inst

Hello guys,I would like to set a password to pass the prestage enrollement page. I can't find anything on this topic. Do you have any ideas? Thanks.

This happened across our org with no changes in azure or JAMF pro. Unsure of what is causing the issue. We've never had to set up a configuration profile for OneDrive prior to this.Has anyone seen this before?

At present I am facing difficulties in deploying packages using Jamf Pro and I'm unsure of where I might be making mistakes. If anyone has experience with this and could provide some insight, I would greatly appreciate it. 

Hi AllDoes anyone know how I could create a group to filter out and display iPads that do not have an app installed? For example, because one or the other iPad was offline during distribution or does not communicate with the Jamf.Thanks Peter

Can someone explain why the Device Inventory user interface in Jamf School has changed from the previous (legacy) version? I see from this post on Jamf Nation: This change doesn’t just offer a new look but improved speed when loading devices. For schools with large deployments, this means you can manage your Apple devices in an even faster and improved manner with quicker  loading and bulk commands. We manage almost 5200 iPads, and while I’ve noticed more success with bulk operations, the need to constantly deselect before selecting a new set of 500 iPads is time-consuming. I would prefer a slower interface if it meant avoiding accidental bulk operations. For instance, I accidentally erased 20 Apple TVs before fully understanding the new system. There have also been instances where I refreshed unintended devices because I forgot to deselect them. I appreciate that the new interface shows the storage of each iPad, not just the remaining storage (though this feature works inconsiste

HelloI am having an issue getting Nudge to prompt for an update.I have installed the configuration profile & the latest nudge suite via policy to a test mac.The only 2 values i have set are requiredMinimumOSVersion & requiredInstallationDateI've confirmed that nudge can see the profile by running /Applications/Utilities/Nudge.app/Contents/MacOS/Nudge -print-profile-config<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>osVersionRequirements</key><array><dict><key>requiredMinimumOSVersion</key><string>15</string></dict><dict><key>requiredInstallationDate</key><string>2024-09-25T00:00:00Z</string></dict></array></dict></plist>But, if i check library/preferences and look at the nudge plist via xcodeIt does not have the same values

HiI've set up sso connections to connect each time the mac is restarted.In my case, users always connect by sso. But I want users to be able to switch macs easily between each other.Except that once user A lends his Mac to user B, even if I've forced all connections to go through sso. it will ask me for user A password because filevault needs to unlock the disk before proposing a connection by sso.Do you have any idea how I can work filefault and sso together so that user B can connect without requiring user A password?Thanks