Hi folks,We have a policy for our Core Apps that is set to execute once per computer each day and is triggered by a check-in. This is to ensure that users don't delete apps that they shouldn't delete, and if they do then running this policy should re-install any apps. There are multiple apps that use this same event trigger "Core-Apps".I'm currently in the process of developing a new enrolment procedure, however in testing it appears that a recurring check-in is occurring and when this happens, the enrolment process halts until the Core Apps policy has complete. As you can imagine this increases the time it takes to perform the enrolment. The Jamf.log states the following:"Checking for policies triggered by "recurring check-in" for user..."Previously, we have used this trigger to install all the core apps during enrolment, however this doesn't provide very good on-screen feedback, so instead of this I've created separate enrolment policies for each app so that better feedback can be sh

We have an iPad that has been sitting unused since November while the employee it was assigned to was laid off for the winter (we are a construction company and have a lot of seasonal layoffs).  The user is ready to start back up for this season but can't remember his passcode.  We issued the clear passcode command but there are several commands including the clear passcode that are stuck in pending.  The iPad is on LTE with Verizon.  The only WiFi it was ever connected to had it's password changed a while ago and one of the pending commands is the one to push the new WiFi information out to it so connecting it to WiFi appears to not be an option.  We have tried several incorrect passcodes and have been locked out several times, 1 minute, 5 minutes, 15 minutes and now 1 hour.  Has anyone had this happen or have any suggestions on what to do?  We don't care if it resets itself and we can start from scratch but it seems it needs to get it unlocked to ha

The Cisco anyconnect uninstaller ( from gui or running uninstaller from command line) has popup box that has two options, 'uninstall' or 'quit'. Is it possible via command line to have it choose 'uninstall'? I have a simple script to uninstall, but in testing the script I get the popup box, so I'm assuming running the script via Casper it will not work due to the popup box.

We have noticed that iOS MS Edge has forced the Sync accounts startup screen on Edge.  This was introduced in version 98.1108.56.  I put the following in the Edge app config section in Jamf, but it did not work.  Maybe these values are only good for Intune?!?!?<dict><key>com.microsoft.intune.mam.managedbrowser.account.syncDisabled</key><true/></dict>https://docs.microsoft.com/en-us/mem/intune/apps/manage-microsoft-edge  Wondering if there's any App Config that would disable this feature or how do people control MS Edge on iOS devices.

Hi there, Has anyone figured out a way to make the local admin account created in prestage into volume owner (post prestage)? The behaviour I've see so far lines up with Apple's documentation on this topic which is that the first user signed in gets the bootstrap token.I know it's possible to manually grant the local account volume owner status but that requires the current volume owner account details which in our environment is the local accounts created by Jamf Connect all as unique usernames and passwords so this cant be scripted and automated directly.

I am getting the message saying "Self Service is a component of Jamf Pro, developed by Jamf. This app must be associated with a Jamf Pro Server. Contact your IT administrator for more information." We use automated device enrollment and the iPads experiencing this issue are enrolled into our Jamf instance. Our Self Service app is set to be installed manually to avoid Apple IDs. I have already set up the app configuration as seen on the Jamf Pro documentation. Is there anything else that I am missing? Thank you!

Hi All,I need to find a way to set MacOS to use Microsoft Edge as the default browser.  Either by script or config profile.  Alot of auth/token services do not work with Safari on Monterey so would like to avoid using it altogether.  We would also like to give users the option to move to a MacOS device and a good attraction is the ability to sign into Edge (which they used on their Windows machines) and have their favourites, browsing history and cookies appear on the MacOS version of Edge. Any help would be greatly appreciated. Gavin

I am trying to create a smart group that will show me Macs that have been booted for more than 7 days. Many times, my team gets support tickets from users that would not have been necessary if they had rebooted their Macs at least once a week. I love that Macs can stay booted for a really long time. My record is 92 days, but to get there, I had to put up with some quirks and minor issues. I just wanted to see how long I could go between reboots. I don't want my users doing this, so I want to create a smart group for Macs that are booted up longer than 7 days, and then display a message asking them to please reboot soon. I have found extension attributes that will show me the up time, or last reboot, but when I go to create the smart group, the operator shows only is, is not, like, and not like. What I need it to show is something like "more than X days ago". Does anyone know how I get this? Maybe I'm using the wrong extension attributes?

hi all, i need some advise input from anyone about my environment. we just recently build a new NDES Cert server and we use Azure App proxy pointing to our NDES to deploy 802.1x certificate to allow our azure joined windows devices access to our wifi (we use Cisco ISE for authentication and authorization). We currently have our macs bound to the domain to allow cert request (so it can request cert from the old CA if its in office). We recently got our Jamf Connect setup and have no reason to bind to domain anymore. I want to ask anyone advise of what is the best practice for us to deploy our 802.1x cert to our mac that will be Jamf Connect only? is it possible to integrate our Jamf cloud with our Azure app proxy for certificate deployment (just like intune - windows)?Or do i need to go with Jamf AD CS Connector? or do i go with setup Jamf SCEP so it can point to my NDES server (on prem)? i prefer not to do this as I want to limit the amount of network connection between my NDES servers

Hello everyone,I'm looking for help deploying AppleScript through Jamf Pro. I know the basics of bash scripts but almost nothing about AppleScript. I got the following AppleScript from one of our network administrators:tell application "System Events"set macUser to name of current userend telltryset FortiDir to POSIX file "/Users/Shared/Fortinet/Forticlient"set ztnaConfig to POSIX file "/Users/Shared/Fortinet/Forticlient/ztnaconfig.json"set FortiDir to POSIX path of the file FortiDirset ztnaConfig to POSIX path of the file ztnaConfigdo shell script "chown -R " & macUser & " " & FortiDir with administrator privilegesdo shell script "chmod 755 " & FortiDir with administrator privilegesdo shell script "chmod 644 " & ztnaConfig with administrator privilegesdisplay dialog "BW FortiClient permissions patch successful"on error theErrdisplay dialog "File permissions update failed for " & FortiDirend tryI tried to deploy it as a shell script in Jamf like this:#!/bin/bash

I feel like I'm just missing this somewhere, but is it possible to query the api to find the Jamf pro management ID? I know where it lives in the console but I would like to programmatically send a wipe computer command to device through this endpoint: https://yourserver.jamfcloud.com/api/v2/mdm/commands and that requires the Jamf pro management ID. If there's a better way to wipe a device other than this endpoint, I would also like to know. Thanks!

Not directly related to Jamf, but for those of you working in Colleges and Universities, what are the benefits of managed Apple IDs for your users?  This is via SSO/Federation in Apple School Manager.

I'm looking for the best way to prevent all Mac users with local admin privileges from removing a wireless/wired profile and SSID configuration for a specific wireless/wired network.The goal is to ensure that the wireless network settings are enforced and cannot be modified or removed by the end-users, even if they have admin access on their Macs.Is this possible?

Hi there, I've been trying to find a way to get an extension attribute in Jamf to look at "/Library/Management/super/super.log" for a line: Parameter Error: You can not use both the --deadline-count-soft and --deadline-count-hard options at the same time. You must pick one deadline count behavior. And report the result of true/false. I have a policy setup to uninstall and reinstall super from there.

Hi there, We're currently using Installomator/swiftDialog scripts to handle patch management in our environment on Jamf Pro. We noticed some behaviour from the end-users, specifically how they tend to ignore the prompts for most application updates. There are some key applications that when we push updates to, must get updated as soon as possible. What solutions do you use for this? What I had in mind was a means to "nudge" end-users to update followed by a separate workflow to kill app process and update.

Hello All,Please help me a payload to upload in jamf pro to grey out "Launch Automatically after login" option under DisplayLink.Thank you. 

Got this message in Jamf pro server tools in the Tomcat tab after upgrading to 11.4.1: Error: failed to start the server: could not find the service named "Tomcat8". But the Apache Tomcat 9.0 service is running. Is this a "cosmetic" error. Gui version 3.1.1.Everything seems to work despite this error message. 

Hi,I have a problem with my patch management. Most of the software that I am patching via the management has only under 10% of the computers on the latest version with most of them scattered across many different versions. How can I remedy this? My current settings for the Patch Policies are:Distribution method: Make available in SelfServiceUpdates deadline: 7 daysGrace period: 15 minutesShould I use different settings or is the problem somewhere else. Some of the Software is installed on hundreds of Macs.

I am trying to create a PLIST file that has nested Keys.  I have tried to use Default Writes, PUtil and Plistbuddy.  Below is what I am trying to accomplish in the plist file. Can someone please assist in the command to get this to work. <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN""http://www.apple.com/DTDs/PropertyList-1.0.dtd">‹plist version="1.0">‹dict>           <key>DC</key>            ‹dict>                           <key>FeatureLockdown</key>                           ‹dict>                                            <key>bEnableGentech</key>   

I thought one of the benefits the Jamf Cloud Services Connection was supposed to provide was the ability to finally manage the icons we've uploaded for self service. If it's there, I'm not seeing a way to do that. If it's not there, is that ever going to be a thing? 

Hi everyone! I am the IT responsive person at a primary/secondary school at Spain. We have 100 managed iPADs.I've recently moved from Cisco Meraki to Jamf School.I'm experiencing a problem with certain Apps automatic installation.For example, Bee-Bot and Blue-Bot Apps.Bee-Bot was added to the JAMF account and installed without any problem, but when I try to install Blue-Bot for all the iPADs, an error message is displayed at the iPADs screen. It says: "This Apple ID is not valid to purchase content". I don't know how is the exact translation to english since we received the error message in spanish.So the App is not being installed.I tried adding 200 licenses of Blue-Bot first at Apple Shool Manager, but nothing changed.Please, any idea that could help? Thank you!Jose

Running a managed MBP and iMac and was wondering what a simple solution would be to backup my machines. I realize most of my data is in iCloud (and the cloud) but as of late I've had to reinstall my apps and it's a royal pain - even though some of then were on the App Store some were not and one has to hunt down old serial numbers and find the actual place where you can download the software. I know there is the update feature using firewire cable but I will need to do a fresh install as it's a new MAC.I'm thinking a simple TimeMachine backup may be ok, was wondering if superduper  (I don't really need a notable backup) would be ok too as I've used that before. I know these backup solutions work great but was wondering how adding the whole managed computer / Jamf thing into the mix would effect these backup strategies?  

Hi,I'm preparing deployment of the admin-by-request tool Privileges (https://github.com/SAP/macOS-enterprise-privileges), but I've run into a snag when I try to install it via Jamf.So, the package that I've made has the .app, the LaunchDaemon and the PrivilegedHelperTool, all according to the documentation, and they all install fine. But when I run it the first time, I get the following prompt asking me for adminstrator credentials to install the PrivilegedHelperTool again: If I enter them, it works as expected, but the problem is that I want a standard user to be able to install this without entering any admin credentials.Has anyone encountered this problem? I don't understand why it wants to install it when I've already pre-installed it via my package.

Hi Everyone, Today's crisis is related to VMware Fusion. We have version 8.5 installed, however, we are finding out the license we used to install it is expiring in 5 days. We are working directly with VMware to acquire a new license to use on our Macs. The question is, does anyone know of an easy way to package up or push out the new license without the need of repackaging Fusion? Thankfully, this is only affecting a handful of our Macs. Thanks in advance.

We are pretty new to Jamf and still trying to understand the scripting.  We have a renamecomputer script that we got as part of our onboarding for computers.  Was working great till we started sending in the department on the user from Okta.  So now the naming is off.  I am pretty good at Powershell and C#, but bash scripts I am struggling with.  Is there way in a bash script to look up a department value in like a switch statement?example if the department is "IT", then can you do something like this?switch (department)case "irs":     value = 123case "IT":     value = 987Any help or pointers to reference links would be great.  I am not sure what the bash term would be to do that so if I can get someone to help with that, might be able to get this figured out.