Hey guys,I've been working on a computer lab and I have some time to troubleshoot. I had to upgrade the lab from Ventura and 2022 Adobe apps to Sonoma and Adobe 2024 apps.Previously for the Adobe 2022 apps I would run them though Composer and I had no problem pushing them out and they would install successfully on my lab computers.However, this time round the installations fail about 90% of the time, a few would work but most of the time they would fail. I have Photoshop, Illustrator, Acrobat, etc and package them individually.I came across this: https://community.jamf.com/t5/jamf-pro/adobe-product-package-fails-to-install/m-p/301627I was going to try that when I also read to check the \\var\\log\\install.logI had it open when I was using Composer to create a new snap shot and I could see a bunch of failed messages. Mostly saying Install failed: The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. Then when the Insta

Hi, i am trying to script the final step in our onboarding process, where the user is presented with a list of Locations to chose, and once selected, the script will pull the serial number and rename the machine the location-serialnumberI'm 90% sure I have it right but i am getting echo errors when testing in CodeRunner... and i'd appreciate some extra eyes / advice....  #!/bin/bash #/usr/local/bin/dialog # Pull device serial number for lookup serialNumber=$(ioreg -c IOPlatformExpertDevice -d 2 | awk -F\\" '/IOPlatformSerialNumber/{print $(NF-1)}') nserialNumber=${serialNumber} #Specify variables for swiftDialog dialogInstalled="/usr/local/bin/dialog" downloadDialog="https://github.com/swiftDialog/swiftDialog/releases/download/v2.5.1/dialog-2.5.1-4775.pkg" pathToDownload="/usr/local/dialog" pathToPackage="/usr/local/dialog/dialog-2.5.1-4775.pkg" #Check if swiftDialog is installed if [ -e "$dialogInstalled" ];then   echo "Dialog Is installed" else   echo "Dialog is no

Hello everyone not really a reach out for help but more informational.Our company ticketing system has been getting a lot of reports once upgrading to 14.6 & 14.6.1 that their macs are slow to lock and their touchid no longer work or theres a huge delay. I myself upgraded and was affected.Reading through some apple forums someone identified that the issue was with a configuration profile that sets the local device password policy. It uses the com.apple.mobiledevice.passwordpolicy payload type.I went looking into our jamf instance and found a password policy configuration group and unscope my machine from it. I then locked my mac and both lock and touchid were back to instantly working. I rescoped the same policy back to my mac and boom delays again.This is where things get complicated for our environment, we have conditional access policies set by intune that our macs register to for access to certain apps. Those conditional access policies are tied to our jamf  password

Hello Everyone,We’re expanding our student loaner program to include Mac laptops. Each semester, students will check out these laptops for their coursework, and at the end of the term, the devices are returned to be reset and reissued.Here are the key issues we’re facing:Active Directory Binding: All devices must be bound to AD, and there’s no workaround at the moment. We’re looking into Jamf Connect or an alternative, but those options won’t be ready in the near future.Data Removal: We need a reliable way to remove user data at the end of each loan period.External Resetting: The entity handling the checkout process (not internal IT) will need to complete the reset. This means the "Wipe" command isn't viable since we can't ensure consistent internet access or the ability to follow a complex process.We currently have a Self Service item that successfully removes user profiles. It works great for us. However, the biggest challenge is managing applications. We need to find a way to remove

Only works under Catalina. Why is Apple making it so difficult to automate OS replacement/updates?

We found few apps in Jamf School Apps->Update have new version.But it seems not automatic push update version to iPad. I need manuallyclick "Update all devices" in each Apps.

I am working on a remediation policy for Self Service that will trigger the uninstall and then reinstall of a profile. Doing this is easy to do. I created a smart group then excluded the smart group from the profile I was testing with. Once the policy causes the Mac to be added to the smart group, the profile gets removed. When the Mac is removed from the smart group the profile is installed again. But there's a problem... I wanted to have a step that would verify the the profile did get reinstalled. To do that, I used this command: profiles show -o stdout | grep "ProfileDisplayName = "ProfileName"" | /usr/bin/awk '{print $3}' | sed 's/[[:punct:]]//g') When I was testing this on my own Mac and a test Mac, I was testing removing a profile we have for Zoom. The profile is simply named "Zoom". The command above works perfectly for a profile named with just one word. If the profile is named something like "Zoom Profile" the command will output "no such file or directory". I have tried

What would cause a brand new computer to skip user creation right after an internet network is chosen? We have a few recent computers that went out and some of the computers in that shipment, seemingly upon choosing a network, enrolls the computer and the management user then goes straight to the login screen. Mind you that other computers from the same shipment worked/enrolled normally.

Hello! We are running macOS 14.6.1 on a fleet of iMac's and Macbook Pros. The Mac's can AirDrop to other devices (EG it can see my phone and sends files successfully to it) but the Mac itself doesn't appear to AirDrop too. (So I cannot AirDrop from my phone to the Mac). We've different various devices (Managed and non managed) and the Mac doesn't appear as an AirDrop destination of any of them. These devices are new so we can't test with other versions of macOS (So we don't know if it's a new thing or always been like this!). The Mac's are all MDM managed and we have tried being on the same WiFi network (And also not being on the same WiFi network). They have WiFi and Bluetooth enabled. We tried the solution here but it didn't make any difference (We checked, the command does the value correctly). Has anyone else seen this or have any ideas on how to fix it?! Thank you in advance 

I am trying to setup managed favorites in Microsoft edge. can someone share a working plist for managed browsers in edge?My basic requirement is to have few URLs in managed favorites and then few URLs in folders structure something like this:url-Microsoft.comurl-Intune.microsoft.comJamf(folder)            url-id.jamf.com             url-jamfcloud.comInternal(folder)            url-abc.com Appreciate your help in advanced.

We use Solarwinds for asset tracking and internal support. The installation instructions have you running a command to silently install. How would that be done? I'm used to Intune allowing your to run an install command but not sure where to do that here. Thanks.

Hi Jamfers!Is there a way I can use authchanger to force Jamf Connect to display the 'local login' screen by default as opposed to the 'Azure Login' (or whichever IdP screen you might use)I've managed to use 'sudo authchanger -reset' to switch the Jamf Connect login window off, and 'sudo authchanger -reset -JamfConnect' to turn it back on, but I'd like our users to have easy access to the Azure login option should they require it. The reason: our on-prem WiFi uses 802.1x security and doesn't play nice with Jamf Connect, so users will have to switch to local login when on-site anyway. I'd just like to save them all one less click in the morning :-)We've looked into workarounds for the WiFi security but local login seems like it is going to be our best course of action as the alternatives would be more hassle than it is worth. Thanks for your help and time! Steve.

Hello together,I am currently looking for a solution to automatically create tickets when a device becomes uncompliant. We check the compliants with JAMF.I can have emails sent automatically with Smart Groups, but only to my user.Would I have to create a service user for this or is there another way?Many thanks in advance!Regards,Jonas

Is there a way to block specific sudo commands from being ran? Two specific commands that I have in mind are: sudo jamf removeFramework or sudo /usr/local/jamf/bin/jamf removeFramework sudo -s We don't want users with admin rights to be able to remove the Jamf framework, and we don't want them to be able to elevate their Terminal session to root. We use CyberArk EPM to allow non-admin users to run sudo commands that they need to run as part of their jobs. I recently discovered that non-admin users can run both of these commands with CyberArk installed. Both are very dangerous. We want to be able to allow legitimate admins to be able to run these commands. I sometimes have to run removeFramework to clear out issues with the Jamf agent or Jamf keychain issues. I also frequently elevate terminal sessions to root to be able to view the contents of certain directories where a normal sudo command won't do it. We just want our regular users to not be allowed to run these commands. I can't thi

I've been trying to script a plist change to com.Safari.plist that sets the value for the favorites toolbar show to true. Here is what i'm running, and what it returns: #!/bin/sh defaults write /Users/$3/Library/Preferences/com.apple.Safari.plist ShowFavoritesBar-v2 -bool true defaults read com.apple.Safari exit 0 Script result: {"ShowFavoritesBar-v2" = 1;} I think I'm missing that step that tells the OS to ignore the cashed version of this file and use the modified one. Gabe ShackneyPrinceton Public Schools

Hello to all, Sometimes I remotely wipe my test macs for various reasons. Is the best practice that after the wipe command is sent, and it begins to wipe, should I also delete the device from JAMF inventory or leave it in JAMF inventory? 

I wanted to monitor if our Macs are doing their Microsoft Defender Full and Quick Scans  properly in Jamf.As I couldn't find any solution out-of-the-box I came up with a custom script, in case anybody got the same need.The problem I faced, was that the Mac only saves the state of the last 7 scans (Quick and Full Scans are combined). So let's say you schedule your Quick Scans once per day and your full scans once per week and the user is on vacation only on the "Full-Scan-Day", you have no chance to see, if a full scan never ran or just the week before, but was overwritten by Quick Scans.That's why I came up with two different timestamps for the full scans, that one timestamp will always be in Jamf, to see when the last full scan ran, the second one might not really be needed, as it only checks the Full Scan within the last 7 scans.The script might be a bit fragile as it relies on Microsoft to keep the same format for the "mdatp scan list" command, but for now it works :)You will a

It's extremely annoying that Jamf have decided to prevent Jamf Pro cloud instances from being upgraded before 14th September to v11.9.0, after already bumping v11.8.0 of Jamf Pro.It does not seem fair that we are still waiting for key features to be made available in Jamf Pro, which should have already been released months ago.Why Jamf are you making life so difficult with getting new key new features made available to Jamf Pro customers?

We are a school housed on a church campus which means there is often foot traffic in our rooms outside of school hours for church activities. We have our wifi ssids and the church has theirs, not tumultuous - we just have different needs to accommodate. We largely don't have an issue allowing the use of our technology, but recently noticed our Apple TVs connecting to the church's guest network. We obviously want to keep our devices on our network.Is it possible in Jamf School to restrict the ability to change Wi-Fi networks on TVos? 

what are you guys/gals doing with the 'secure token' popup ? I don't have FV2 enabled and AD users are getting the popup, so we have them select 'bypass'. i created a configuration profile, using the custom settings payload i added this .plist file (com.apple.MCX as preference domain) <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <key>cachedaccounts.askForSecureTokenAuthBypass</key> <true/></dict></plist>

I received notice that my SSO cert is expiring in a few weeks and I can not find anything on what the process is to update it. I talked to the person that runs our AD side and he doesn't remember ever doing this so he wasn't sure if this autoupdates automatically. Any advice on where to start would be much appreciated! Thanks! 

There's an ongoing bug with composer that is hit or miss between composer versions 11.3.0 to 11.5.0 where the file/folder view portion of composer doesn't actually show any of the files/folders of your source or package. Its there if you kind of know where the folders would be if you just randomly click around the screen but everything in that section is like hidden. I'm tried this version of composer on two separate machines (M2 and intel chip) with the issue. Some of the threads of those with the same issue said Composer 11.4.0 appears to be the most stable working. Only Composer 11.5.0 is available for me to download through my profile. Does anyone have the Composter 11.4.0 or an older version installer package for me to use? 

 Here is the translation:Hi!We are currently setting up several hundred Macs, and we are experiencing that more and more of them are having issues downloading applications.Inside the managed apps list on the devices, we see the error "Duplicate request," and in the activity log on the device, the error "connection to service with pid 1706 named com.apple.appstored.xpc" also appears.I also notice that all the apps, at least at one of the locations (I haven't checked them all), are marked with the yellow tag "shared app."Any tips on how we can get all the apps through? It's starting to wear on the users.

Hi all!I got a question from someone who couldn't sync their Jamf School users to Apple School Manager. Looking in his Jamf School portal, I saw the following error 'The user ** cannot be synched because the user was created manually in Jamf School or from an SIS'. Is it not possible to sync/upload Jamf created users from Jamf to ASM? Or am I missing something in the configuration or does it need to be done in a different way?Thanks :)

We have various shell scripts in which we open or directly execute a policy in the self service as follows:  open "jamfselfservice://content?entity=policy&id=10&action=view"  Since the update from 11.4.1 to 11.7.1, we have noticed the problem that the following error message appears when we open / execute such a policy (unfortunately I can't insert a screenshot, I don't seem to have any permissions):Self Service quit unexpectedly.Click Reopen to open the application again.Click Report to see more detailed information and send a report to Apple. if you first open the Self Service app and then execute the command, it works.Does anyone else have this problem?Our workaround is now to open self Serivce first, and then wait with a sleep 5 until hopefully the app is started, so that the URL command can be executed afterwards.  open "/Applications/Self Service.app" sleep 5 open "jamfselfservice://content?entity=policy&id=54&action=view" &