Hi JAMF Nation,Did anybody here find a fix for the Microsoft 365 problem with JAMF? I tried all the possible combinations, but without turning off security defaults, it just does not work well. How did you guys go about it?I also tried using AWS SES but to no avail, practically a wall at this point. 

Am I right in believing I have to change the setting for "autoDeployEnabled" to true before I will be able to see the password of a local admin? At the moment if doesn't appear to do anything even though it will pop-up a message saying viewing the password will cause the password to rotate in 1 hour.Currently just looking to see what/how this feature actually does. 

Hi Jamf Nation!I have some questions about what happened in a MacBook after it received the WIPE command, rebooted but without the firmware passcode being authenticated? Could the command be cancelled in any way?We have a MacBook Air (Retina, 13-inch, 2019) with Intel chipset running macOS 14.3. WIPE command issued and it is now stuck at the user login -> reboot to firmware lock loops."Clear Activation Lock" option was chosen when attempting the command, but it says activation lock not found, so the WIPE command was issued without. After the command was sent, the MacBook immediately rebooted into the Firmware lock, which then we realized the passcode is unknown. Attempt to boot or reboot the machine will first goes into the user login page, and ended up at firmware lock after user authentication. We did not reach the steps to enter the 6 digits arbitrary passcode.I read this from the previous post:@talkingmoose wrote:If the computer has been protected with a firmware passcode,

Hi! I decided to test using the Inventory Preload option on to PreStage enrollment of one computer. I got the CSV file completed and uploaded it successfully and it shows up as the Active data. After doing the PreStage enrollment (no previous record of this device), I don't see that it applied the preload data. I did only complete the serial number, department, and building fields in the CSV file since those were all I needed. My question is, does anyone know if certain fields (besides serial number) are required for this to work? Has anyone else had this happen or something to try? Thanks!

I am getting an error message "The operation couldn’t be completed. (com.jamfsoftware.task.errors error 5.)" on the logs of a policy for only one endpoint. All that the policy does is to remove the EFI password. How do i fix that?Is there a way to check through jump maybe that error is caused because the endpoint has no EFI password at all?

Reposting this from my personal website to gain some visibility.  UPDATE 1: I'm being told now that this change IS RETROACTIVE. Meaning your dozens/hundreds/thousands of endpoints that have been configured with Prestage enrollment, and an admin account created in that process, will have that password randomized. Which will break Secure Token/Volume Ownership/etc. Maybe you're okay with this, but if you're not, you NEED to reach out to your Jamf Representative and tell them.  I wanted to bring up that a big change is coming to Jamf soon and they (Jamf) seem to think it’ll be well received all around: forced LAPS for Prestage (ADE/DEP) admin accounts (See bullet 2 here, https://learn.jamf.com/bundle/jamf-pro-release-notes-current/page/Deprecations_and_Removals.html, “Functionality to specify the local administrator account for computers in a PreStage enrollment”). And to start with, I applaud Jamf for working on a LAPS solution. All we've ever asked in this whole

I've run into an issue with signing back into a Mac (macos 14.2.1) and I'm not exactly sure if it's related to JamfConnect. Our fully configured Mac is running Jamf Connect 2.29. I'm logging in with an administrator account created during PreStage enrollment. After no input for a while, the Mac goes to sleep or screensaver. If this state remains for too long, the mac won't complete the login. I can enter the credentials but it just give me the thinking circle and never completes the sign in. All input becomes disabled and I have to force reboot it. Afterwards, I can sign in again without issue. Troubleshooting is nearly impossible because I can't get response from the system while it's having the issues. Can anyone point me to logs or files I can reference afterward? Has anyone else seen this with Sonoma?

Can anyone provided details on what this feature does and how to configure it, as I'm not find the documentation very clear. I'm hoping that using it will allow a standard user to enable System Settings > Privacy & Security > Screen Recording & System Audio for Slack, but I can't work out what value is suppose to go in the Code Requirement field.

HiOur Jamf AE is being deliberately unclear on licence requirements when it comes to Jamf Connect.I was under the impression that we only needed one licence to add Jamf Connect to our Jamf Pro environment.He says we may need more but can't say why?!What is required?We have many machines added to our JAMF Connect pre-enrolment scope with no issue.Are licences required for each machine?

Hi, I am currently trying to replace Teamviewer 12 Host with Teamviewer 14 Host.I previously found a script on here and got it to work using Dropbox to host the PKG and Assignment files, as seen in the below script. Teamviewer have now bundled the Assignment file with the installer but trying to call this doesn't seem to work via Jamf. If I run it in Terminal, or from a local script file it will work but neither option works when calling from Jamf. I can continue Installing v12 and then running the v14 installer on top, which will retain the assignment but I'd rather it was installing cleanly on new devices. Run Assignment Tool (trying to run this directly from Jamf) /Applications/TeamViewerHost.app/Contents/Helpers/TeamViewer_Assignment -api-token *******-********************* -group-id g******** -alias "${ComputerName}" -grant-easy-access -wait 10 or creating a PKG to drop the Assign.sh file locally and calling it via the Jamf script sh "/Library/Applic

I have a configuration profile that adds our VPN configuration. I then have a policy that kicks off this simple bash script. open “/System/Library/CoreServices/Menu Extras/vpn.menu” All this does is check the box for "Show VPN status in the menu bar"This is the error that I'm getting.Script result: The files /“/System/Library/CoreServices/Menu and /Extras/vpn.menu” do not exist. When I run the command in the terminal it completes successfully.

I am working on printer deployments and have a question. I can push the HP or Xerox printer drivers to a machine, however the files are usually in .gz format. This is an issue since Casper wants the PPD file. Is there a more direct way to get the ppd sent to the machine? Do I need to script this, or am I making this harder than it needs to be? Thanks for any help!

How do I re-enroll, using Automated Device Enrollment, a MacBook that was factory reset by a user on being issued a new MacBook. Looking to repurpose the device for another user, but when booting it up it goes through the standard user experience rather than MDM.The device is still listed in Apple Business Manager and associated with the MDM server, and in Jamf Pro in the corresponding PreState Enrollment set-up it is listed as being in Scope. Despite this it doesn't appear to be running the PreStage Enrollment.

Hello there! I'm having an issue where items I set to be available in Jamf Self Service are not appearing. It doesn't seem to matter if it's iOS or macOS apps or policies--I check to make them available in Self Service, and if it's a policy I ensure that the Check In is set to Recurring. They do not populate. I tried the Installation URL from the Self Service tab but it results in an error from JSS: "This item is no longer available." As far as I can tell, it definitely is, but clearly I've got something wrong somewhere and I've hit a wall so I thought I'd ask Jamf Nation for help. Any ideas are much appreciated!

Greetings, our company uses Entra ID for IAM. We are trying to get compliant for CMMC and need to use Entra profile credentials to start logging into our macs and need those logins to be traceable. I tried setting up setting up some of the configurations and honestly Ive had to jump from one article to another trying to figure out what needs to be done. Does anyone know of any resources, videos or step by step guides that can help me achieve what I should be doing? We also want to utilize Intune as our MDM platform and use JAMF to trace the identities and their activities on the MACs. any guidance on this would be greatly appreciated. Thanks  

Hello Jamf Nation! I am trying to identify the optimal way to deploy PKGs post-Sonoma update. Apple has gotten very liberal with their permissions pop ups, which for a single user is great, but as an organization is such a headache. Is there a setting or plist or something that can be deployed alongside a PKG that suppresses these popups? Apologies if it is a repeat question. I didn't see anything in a search that related.

Hi all,actually i set the computernames in jamf via api. On inventory update it gets overwritten by the real name of the computer.Can i stop this without forcing the jamf name to the real computer name? In policie settings i only find a way to force the jamf name to be the computer name.Computer itself can be "Adams Macbook". in Jamf it should be/stay "MacBook Pro 12345". 12345 is the id from our hardware database.Greetings FrankGreetings Frank

Hello,I'm searching for a solution to an issue I'm facing with the JAMF Connect Login Process when changing the primary email address.Our identity provider is Azure. If we attempt to change a users primary address from eg.(john@company.com) to something else like (john.jones@company.com) and make (john@company.com) an alias for this account, Jamf Connect login will make a new account for this user as the new primary address does not correspond to the account previously created.Is there a way for this user to keep the same account while undergoing a primary address change?Thank you

Hey all, I'm running into an odd issue that wasn't a problem under macOS Big Sur, but is now under Monterey. I'm not sure if this is a brand new issue with 12.3 or if it was always an issue with older versions of Monterey. I hadn't noticed it before any Monterey systems got upgraded to 12.3.Basically I used to direct end users to enable the "Screen Recording" option in Big Sur in the Privacy tab of the Security & Privacy preference pane, for things like Microsoft Teams, so they can share their screen in the application. This was never an issue like I said. All our users are non-admins and they had access to this option without needing admin rights.Now with Monterey this option is greyed out unless they unlock the Security & Privacy pref pane, which of course they can't do, nor do we want them to be able to do.Has anyone else seen this with 12.3 or any version of Monterey? If so, have you figured out a solution? I was under the impression Apple didn't allow for enabling this opt

Im using Okta authentication on machines in my company. when using Jamf Connect Configuration to create the com.jamf.connect.login.plist, even when I check the box in the image below and reset the authchanger nothing changes on the login screen when I restart. I want to see if the macOS style login would be better for me to use than the standard Okta login screen. Not sure what I'm doing wrong. Every other option in the Jamf Configuration tool works so I know that I have the plist in the right place. I am using the latest version of Jamf Connect & the configuration tool.

Hello Jamf Community! I'm making an extension attribute that basically tracks if a local user is at the Standard level or Admin level. I've ran the script in 2 test macs in our environment where one Mac is a Standard account and the other is an Admin account. For whatever reason, the extension attribute will always resort to "Admin" as the result. I've tried several things to trouble shoot this. Here's what I've done.  Originally the elif statement was an else statement I've switched the if statements where it would be != 'Yes', is_admin would be No. and vice versa. I've ensured these script worked by running the script in terminal for both test macs, and they should work.  Not too sure what is going on and I'm thinking it's just my jamf environment now. Does anybody have suggestions on what might be going on?  #!/bin/bash result='' # Get the current logged-in user current_user=$(whoami) # Check if the current user is an admin is_admin=$(d

Hello!My company is going through the early stages of a merger and we're looking at bringing the other company's Macs into our Jamf environment. This is a little premature since we haven't yet combined our LDAP or ABM but the powers that be are requesting it. I wanted to see if anyone has had any experience with having a second LDAP provider and ABM account connected to their environment or if what we're looking to do is not possible.

One of our users complained that his machine is running slow after Jamf enrollment. "Hi there,Might just be a coincidence, but the performance of my Mac has massively slowed down and become very laggy since the Jamf install. During a call earlier my laptop just restarted." Unfortunately this is not the 1st person to complain about that.  The specs are :  MacBook Pro (14-inch, 2021)Processor Type: Apple M1 ProNumber of Processors: 1Total Number of Cores: 10Apple Silicon: YesArchitecture Type:arm64Operating System Version: 12.1.0Operating System Build: 21C52 As admin are there any troubleshooting steps I could follow and check what is wrong with his machine ? I want to stress that this user hasn't complained at all before the enrolment. 

Hi,We use EntraID for single sign on purposes are my organization. We use JAMF connect to serve our SSO login screen to users when logging into their Macs, and we also use passthrough authentication to streamline the process a bit. In our JAMF Connect config profile, we have OIDCPassthroughAuth set to true and OIDCNewPassword set to false, as per the passthrough auth instructions for EntraID. Here's the issue: we have a password rotation policy in our organization. When the a user's org password rotates, the SSO password they use no longer matches the local account password on their mac, and after the SSO challenge they will have an "incorrect password" error when signing in. Is there a way to make it so that when their organization password rotates, it updates their local account password on their mac? Thank you.

I have noticed that ever since our JamfCloud instance was upgraded to 11.1, scrolling in Jamf Pro frames using 2-finger scrolling or a scroll wheel on a mouse rarely works. It seems to happen at random in some pages, but the one place I can replicate it 100% is Computer record > History > Policy Logs.  I can NEVER scroll down the frame in the page using 2-finger scrolling or a scroll wheel. I have to either manually drag the thumb up and down or I have to use my arrow keys.  I use Safari exclusively, so I don't know if it happens in other browsers. This seems to be too specific to be a system issue. Scrolling works everywhere else in my browser and the OS. Has anyone else noticed this too?