Hi folks, please forgive my lack of knowledge in advance.  I am very new to Jamf Pro and have been slowly making my way through the mountain of training but also need to be able to utilize it dailiy, for my current position.In our environment, which I inherited, We have exactly 5 items available in self service.  2 of which I created, 2 that relate to existing packages and 1 that I cannot find in Policies (or anywhere else for that matter.) I've tried to look up possible package locations, as well as the app itself, to no avail.  I'm trying to figure out what it does...   I'm guessing it's a script of some sort, created by my predecessor, but I'd like to investigate the script, to see what it does, and remove it or update it if necessary.  If you're wondering, yes, I've run it.  It did not give an error message or any other type of message.  It seemed to run through it's process and stop. My question is: How to I locate the package?&nbs

Hi everyone,  i can for the life of me work out how to efficiently deploy updates to my devices. I have been testing with Sonoma 14.0 as a baseline and JAMF 11.2 in the lab.What i want to achieve is deploy an update and allow the end user to defer it by a number of days. I have tested deploying an update and installing immediately and it works. In JAMF, Computers > Software Updates > i can target a group with the option : Download, install, and allow deferraland i can specify a number. Apparently these are the deferrals i can allow the user. How do i specify the days i want the user to be able to defer? Do i need a config profile?Is software updates solely from JAMF really achievable ? I think i am wasting my time here. Will Nudge or any other script help with that? I am at my wits end with how updates work on Macs.Any insights would be appreciated. 

This is kinda complicated, but the Mac is not checking in every 15 minutes.  In fact, it hasn't checked in since Mid-December, but a few management commands have run. Is there a way to remote force a check in without removing in and running the sudo command?  It would seemingly have to be a configuration policy?  Since it is only one user, I should be able (if responsive) to remote in and run it the terminal, but if the user isn't responsive, I still want it to check in since there have been updates that need to be installed.

Do the 'Start Screen Saver after:' and 'Use Screen Saver Module at Path:' settings still function properly for the 'Login Window' configuration profile (JAMF Pro 10.46) in macOS Ventura? We attempted to apply both a custom screen saver and one of the built-in options but are not seeing any of the desired results.Curious if I'm missing something. 

I'm having trouble getting Jamf AD CS connector to work flawlessly, and wondering if anyone else has a similar use case, and if they managed to solve it. Recently procured JamfOn-Prem ADAD CS setup in a different domain, but there is a trust relationship (and it works for other MDMs and bound clients)Using a domain user account, instead of the local user (AdcsProxyAccessUser) created by the .\\deploy.ps1 The domain account has been configured on both the AdcsProxy site configuration, for  oneToOneMappings under system.webServer/security/authentication/iisClientCertificateMappingAuthenticationIt's also been modified to be the Identity for the AdcsProxyPool.  Certs issue successfully, but only if the same user account is a member of the administrators local group on the server.Jamf Support are saying this shouldn't be the case, but cannot get to the bottom of which permission it needs that's granted by Administrators, that it needs to successfully issue cert

Hi Mac Experts,I have an end user who started the Sonoma upgrade and powered their laptop off during the upgrade process. When they powered it back on, it finished the upgrade, but they can't login with their main account.  My tech team was able to login with our admin account. I also was able to create a new account for them on the computer, which works fine. I know I can just migrate their data over from the corrupt account to the new one, but I really want to fix the old one. So here is what happens:They boot their laptop.At the login screen they enter their original username and passwordIt starts loading their profile and they see the new Sonoma desktop background.Then it gets stuck,  nothing else loads, you can't control the computer with either your keyboard or mouse. Their only option is to power cycle the machine and log in as another user.So from a MacOS technical prospective, what items are necessary for a profile to work correctly? What parameters, plists, etc

Hi,After upgrading a suite of iMacs from Big Sur to Sonoma, the dock now has ? instead of applications. They do not work when clicked on.I have read some posts on here but nothing has helped me understand where the problem is.To be upfront I am new to Jamf Pro and this system was already setup before I looked at it.I have gone to Settings, Computer management, Dock items. In there are entries for the dock items. Each one is currently in the same format and here is Google Chrome as an example:file://localhost/Applications/Google%20Chrome.app/ Is this entry correct? Is there something else that controls that Dock that I am missing? Adam

Hi all,I have a question about using both JSS and MS Intune together with Apple Classroom. The (student) iPads will be managed with JSS and the (teacher) MacBooks will be managed with Intune. Will it still be possible to use Classroom? Thanks in advance!J

We have an application, Coginiti Pro, that requires a user to have elevated rights before installing on the Mac, or else the install doesn't work correctly.We use Jamf Pro, and currently I've added some text to the Self-Service installation page telling users they need to elevate their rights before running the install. We use the Privileges app for temporary rights elevation.I was wondering if I could script this. The current Coginiti Pro install we use is a script rather than a PKG. I'd like to add some code to the script that says "check if the current user is running as a standard user". If so, I'd display a message reminding the user to elevate their rights before proceeding.Is something like that possible? 

Am I able to stage a .sh file on my user's computers?This script contains a sudo command but I want to be able to run from the user's account. This will be a break glass script to fix the stupid Sonoma Time/Date bug. What file permissions would I need to assign as well?

Hi All,Does anyone know why the Management Command tab  (See the attached image -02) is missing from some iMacs on the JAMF? Imac is communicating to the JMAF server but I can not push any software or any commands.Help will be much appreciated       

Hi All,I'm trying to install the app using a Self-service on iMac. I can see the app on the Self-service portal but When I click on the install button I get the error  Cannot reach a JAMF MDM serverWhen I check the device on the JAMF server it communicates with the server  This is the error that I get When I click on the install button Help will be much appreciated  

I have an iPad in Lost mode. I am unable to connect the device to our WiFi to get it out of Lost mode. Please help.

Hi,  I know there are some similar posts notably this one here: https://community.jamf.com/t5/jamf-pro/popup-user-notification/m-p/235439/thread-id/223319 but I'm relatively new to jamf pro and just looking for a bit of similar more tailored advice. I want to be able to set up a 'notice for a new user' policy that pops up only once on a Mac for the first time a user logs in, which has an accept button that the user must click for it to disappear.(a bit similar to accept terms and conditions before downloading a new program I guess). If the user does not click accept, then the policy stays on screen/ keeps being presented until accepted. Is it possible to  do something like this, maybe using some of the ideas presented in this thread above?  I'm up to Jamf 200 but not had much experience with creating policies or with scripting  yet, but I'm fairly confident I could  hopefully follow along some tips or any advice given here, thanks.

I'm trying to establish the last time a user actually logged in to their laptop. I have, therefore, created a Computer Extension that runs a simple script that is supposed to display a String result in User and Location:#!/bin/zsh/usr/bin/last -1 -t console | <result>/usr/bin/awk '{print $4, $5, $6}'I added the Computer Extension to the Configuration Profile under ALLOWED EXTENSIONS but nothing ever seems to be displayed. How are Computer Extensions actually meant to work, i.e. how am I meant to actually see the data that is gathered???

Dear all.Is anyone of you aware of a way how to prevent the auto-starting of Teamviewer (and with that, the basic setup assistant) after the installation?I have seen that there are quite a few Launch agents and Launch Daemons included in the installer package, but I don't really know how to manipulate the portions in there to just block the auto start after installation.Any idea? Thanks a million.CheersChris

I'm trying to deploy FortiClient 7.0.2, and I have some questions about order of operations and whether this is going to cause trouble on specific OS versions. I still have some more testing to do but it seems to work on the one I tried, but maybe it was a fluke. I can post configs as necessary, but I suspect that they aren't needed for these questions as it's more about how these functions work.I have a script that grabs the file from our server and installs it. That works. I need to get curl to fail out of the script if the download fails, but I haven't looked into it yet so I'm sure I can find a way.Unfortunately though, FortiClient needs users to make tons of changes to System Prefs. Full Disk Access, requests for VPN connections, and request for System Extensions.I used PPPC to grab those Full Disk Access settings from an install and make a config profile.Will it cause a problem if I deploy those before the policy for the install, when the filepaths and apps don't exist yet? It se

We have noticed a strange bug with iPads running iOS 17. We use a content filtering Configuration Profile on all our student iPads to ensure that they are not able to delete their Safari history. The Clear History option within settings is still greyed out as well as the Delete option with in the History tab. However students are able to slide from right to left over their History to delete it now. Has anyone found another way to block deleting Safari history that would also block students from this method? 

Hi All,So admittedly I am a little new to Jamf Pro, but I have gone through the Jamf Pro 100 course. My question is, I have a few iPads which their MDM certificates had expired, and I had that the only 2 ways to re-enroll them were via web re-enrollment OR having to completely reset and clear all data from the iPads. I tried web re-enrollment and no luck there, so I reset the iPads. And now they have valid MDM certs, so thats good, but now when I try to send management commands, here is my issue -- commands like "enable/disable bluetooth" work just fine, but when I try to send commands like "Update Inventory", it doesn't work. Why do some commands work and others don't reach the iPad?

So I recently updated the server token in jamf pro for our ABM instance as it expired on the 1st.  Both jamf pro and ABM show that they are sync'ed and communicating with each other, however, in jamf pro, when I go to check our existing prestage enrollments, they are all showing 0 devices available.

Is there a possibility to disable the new feature in macOS Sonoma *Video Reaction* by default with a profile?It leads already with us several times to the fact that in an important meeting from the nothing e.g. balloons came. This is not very professional.Would there also be the possibility that the users (if they want it) can activate this feature again?Thanks for any advice on how I can disable this.

Hello to all. My Security Team wants to link Hyperproof Hypersync to our JAMF system. Has anyone heard of this and/or have had success getting this to work? I'm providing the link to HH documentation. https://docs.hyperproof.io/admin/en/hypersyncs/connecting-jamf Thank you for any help with this. 

Hi again,I have solved my previous issue - now just wondering if there is a json or plist file which I can use to force this highlighted setting to be toggled 'On' by default for all users by default. I have looked in the general settings on the configuration profile and not been able to find anything related to this. Many thanks again for any suggestions!

Is it possible to give full disk access to apps like cron, sshd-keygen-wrapper and terminal (other apps as well) through the ssh terminal session of a M1 MAC

We have been running Jamf on our computers since the launch of our company three years ago. From time to time we have computers that need to be removed from our system and I would like to know the best practices. Up to this point all my attention has been on getting computers enrolled.All our computers are in Apple Business Manager (ABM) and they are enrolled in Jamf using PreStage enrollment. This works well.When an employee leaves the company I lock the computer in Jamf before the computer is shipped back.When I receive the returned computer, I use the unlock code from Jamf to unlock the computer. I then release it from ABM. Next I select Remove MDM profile. Once I confirm that the profiles have been removed, I then delete the computer from Jamf.Is this the best, or at least, correct way to do this, or is there a better way?