Help! We're migrating to Jamf Connect from AD, and we've done successful testing and migrations and I've been setting up user accounts with no issues. But all of a sudden today when I went to change someone's password using the menu bar agent, I got this error: "Unable to reach any KDC in realm xxxxxxx, tried 10 KDCs"Nothing has changed in our infrastructure that I am aware of; does anyone know what would cause this? I am freaking out a little.

hi all,anyone found a way to disable/lock itunes or parts of it? especially files transfer.

One of our App dev teams is looking to use AWS EC2 mac for their pipeline.  Our security department wants this managed like any other Mac in our environment.  I know very little about AWS and these instances.  Anyone got step by step guide or suggestions?

I have a requirement were wanted to hide or uninstall below MacOS default application i.e. (Freeform, Mail, Messages, Music, TV, Stocks, Chess)Is there any way I can achieve this?

Does anyone have a good method to pull al list of all applications across all machines? We have Jamf Cloud so I am not sure if I can run SQL queries directly against the DB. Preferably something I can get to Excel so I can filter out all the Windows applications on VMs.

Hello,I am running into a strange issue with the wipe computer management command on what seems to be specific 22" iMac models. The issue I am running into is that when I initiate the wipe command on the selected machine, the command goes through at first but when the machine reboots, it results in the "no boot disk found" error screen. I have tested this on several 22" 2019 Intel iMacs and they've all resulted in the same behavior. I have then had to manually restore the Mac via USB drive because the wiping process reverts the machines back to the original base OS. A retrace of my steps:Select Mac to be wiped > start wipe computer command > type in 6-digit wipe pin > observe command going to the Mac > type the same pin into the Mac > allow the Mac to reboot > Mac displays "no boot disk" errorHowever, I have had a 100% success rate with wiping 27" 2020 Intel iMacs. One thing I've noticed that is different about the 2020 iMacs is that they do not ask for the 6-dig

I’m new to Jamf development and have been learning a bit from our senior Jamf developer, who said one of our biggest complaints from end users was not knowing when an application had finished updating because it would never relaunch.So that’s what I set out to explore. My goal was to create and deploy a browser package that would automatically relaunch the browser post-update.Someone on the forums suggested using Jamf Pro > Computers > Content Management > Mac Apps > Jamf App Catalog, since there I would have the ability to select the option “Automatically open app after update.”Should mention here that this is different from the Packaging process we are using, which can be described as:Create a new Package when a new version of an app becomes availableUpdate the existing Patch Management policy to reflect the new version of the appDeploy to whatever groups we’ve scoped in the Patch Management policyFor my test:I created a Smart Group that contains just one of my test Macs.

Good afternoon.I am trying to set up Kerboros SSO in place of binding MacBooks to active directory and using mobile network accounts. This will be on laptops that only have a single user.  The only thing I want Kerboros to manage is to sync local account passwords to match a users active directory password. I got things working to the point where the passwords sync and it works pretty slick.The problem I am having is that window to sync their mac password and their Active directory password comes up on every login.  The user can cancel out of the window our type their two passwords again, but its a bit annoying that it comes up on every login. Is there a way to have this password sync check pop up maybe only monthly? Thank you, Doug

Is Jamf capable of reporting what monitors and external devices are connected to Macs? If not, is there a 3rd party app that is capable of this? Thanks!

Hi, communnity!I have a problem regarding app branding. I have set an icon for testing in my DEV instance to check that both app icon and self service banner were working fine. The issue has arrived after having implemented in PROD when we've noticed that Self Service app is not retrieving nor app icon or banner from Jamf Pro/ Settings/ Branding/ MacOS. After that we've been testing in DEV to change to a different icon to check if changes will applied but it's applying the old icon image who's been removed from settings. It's like the old image remain cached.Any clue on that?Thanks in advance,

I’ve passed the JAMF 200 and have been learning about JAMF from Jamf Catalog and also trying to get more hands on experience at work.I'm keen to learn more and aim to do JAMF 300 in 6 months time. Are there any good books for new Mac Admins? I’m keen to learn more about scripting and macOS so maybe a book on AppleScript? I’m open to any suggestions that may have helped others in their Mac Admin careers.

I've used command sudo jamf removemdmprofile and  sudo jamf removeframework to fix certificate expired issue, After that I renerolled my mac with Jamf with web. My mac received all configuration profiles, but self service applicaton and jamf binary can not be pushed on my mac. Anyone knows how to install that manually?

Hello all, Would anyone out there be able to provide me with a Script that on execution would delete all Users and/or User's home folder's with the exception of the user that is logged in and an option to specify specific (admin) users that need to stay on there? It is likely that my Macs have a User Home folders that don't have a local user. So if the Local user doesn't exist, it still should wipe the Home folders of anyone but the current logged in user (and the specified admin user(s). I would be tremendously gratefull!

Hi allSince iOS 17, students can change the background with the new "Focus" function. When will this be integrated into the Jamf restrictions?Thank and best RegardsPeter

Hi all, how would I change the password of the managed devices inside of Jamf, I know how to instruct them to change it from their end but im not sure how to change it from our end, how would I do this?

I've been trying to figure out a way to utilize this new service across our mac devices that still require LDAP user authentication. Has anyone else successfully got this to work?Right off the bat I cannot figure a simple solution of injecting the certificates Google requires to a client and authenticate directly. So I started digging into the idea of running open directory and using stunnel. I ran into some road blocks configuring the .conf file and getting it to communicate to google. Is this the way to go? Or is there is better solution I am not able to find online?

I am using a pretty generic version of the DEPNotify script, but I would like to be able to have it display a visual log of what applications have installed/failed all on the screen while the DEP enrollment is running so that techs have an easy way to verify all required apps have installed, without checking them one by one.  Does anyone have any advice or tips on how to best get started?  Scripting isn't my strongest area, but I generally can get by but this one has me scratching my head

Greetings!We have received a notice from campus network security team, saying that in coming months, internet inbound network traffic, where network traffic originated from public internet and to be received within campus networks, will be denied as default, but the outbound to the internet is allowedI am concerned the connection of our 60 iPads to JamfPro cloud, I read the document at https://learn.jamf.com/en-US/bundle/technical-articles/page/Permitting_InboundOutbound_Traffic_with_Jamf_Cloud.html . I'd like to clarify whether I need to ask the campus network team to add the IPs of "ap-northeast-1" under "Outbound Traffic from Jamf Cloud" onto their whitelists.Regards.Simon  

Hello everyone. We are no longer using Nudge and would like to uninstall it. Anyone have an idea on how to do this? I do not see an uninstall in the download of the apps. This needs to be pushed out via JAMF. 

Hi all,I have an issue where staff are taking student-configured laptops out of the carts and using them as their own teacher MacBooks. Student laptops aren't configured in the same way as staff laptops and I'd like to prevent this from happening.While I can limit who can sign in to the actual Jamf Connect app by OU, I can't figure out how to limit who can log in to the Connect OAuth login screen. Does anyone know how to do this?The only limit I can find in Google Cloud Console is domains, not groups, subdomains, or OUs.Thanks!

Hi-We currently have a pretty small library of apps provisioned from our purchasing volume that are meant to be scoped to specific computers. I have most of those apps configured to install automatically rather than via self service because each app is supposed to be installed on specific machines that really shouldn't ever be without them. The apps are scoped to the specific machines they are meant to appear on via static computer groups, but for some reason each machine in my fleet is being pestered with "App Install - [Mac App]" MDM commands that are marked "Pending - All licenses are in use or the license is not assigned yet." Obviously, it's not a huge deal since only the scoped machines appear to be getting the license from the VPP and installing the app, but I am confused why these commands are being sent to machines that are out of scope for the app? Is there anything I need to do other than make sure the scope is correct for each Mac App?

hello, I am looking for a scrip to help me remove objects for inactivity of more than 90 days, however I have not achieved.I’m not that good at programming or command lines.I have researched and searched several forums however I have not found a script to help me run what I am looking for.someone from the community can guide me. I am new to the JAMF tool and my knowledge is very poor. 

Hey everyone, I am in the home stretch of an application deployment but have one user experience issue I would like to resolve if possible. I have a new working Sophos deployment, however I get the attached pop up any time the policy runs for install. It must be accepted to install the software and bypassing that for our end users would be excellent. So far i have tried xattr -d com.apple.quarantine /var/tmp/SophosInstall/Contents/Helpers/SophosCBR.bundle before the install kicks off with no success. Any input would be greatly appreciated on if this is even possible to prevent.

System Preferences -> Security & Privacy -> Privacy -> Advertising Does anyone know of a way to enable this via plist or conf profile?

Hi there, We use the "Restrict the App Store" option in Jamf Pro Profile Config but this seems to not do anything to stop a user from signing in with their own Apple ID into the App Store on their MacBook. Does anyone know how to block signins to App Store?