Hi, How do you force an Xprotect version update? Trying: softwareupdate --background-critical outputted the following: softwareupdate[92845]: Triggering background check with forced scan (critical and config-data updates only) ... But running: defaults read /Library/Apple/System/Library/CoreServices/XProtect.bundle/Contents/Info.plist CFBundleShortVersionString shows an older version of XProtect For our labs we updated to 10.15.7 using the Combo and Supplemental PKGs but the Xprotect version remained an old version. We like to control the software update process so we have everything unchecked in Software Update Not sure if that has something to do with Xprotect being unable to update even when running softwareupdate --background-critical from the Terminal.

Hello Folks, I am uploading push certificates on the jamf account, In the process of creating I used csr later on jamf account. Once I signed the csr and got the "JAMFSignedCSR.plist" and used this on identity.apple.com, I got an error "Invalid certificate signing request". Is there any solution to this problem?

How Can I disable mirroring hp screen on macOS ? Displaylink driver is useless. screens are connected usingHi all,Monitor: 2 x HPE27ED G4 QHDConnection: Test 1: Monitors linked to each other by Display Port cable and one of them is linked to Mac using Usb-c cable.Test 2: Monitors linked to Mac using g Usb-c cable each: only one monitor can make displayNo docking station to test.Anyone else struggling :) ?

Hi All,When I try to update the push notification I get this error anyone has any idea why I'm getting this?Didn't change anything in my server except to update the server from 2012 R2 to R2019. That was the only change I did for my server.When I Download the signed CSR from Jamf Nation and upload it to the Apple push certificate portal I get this error. Thanks 

I am having troubles allowing non admin users to change the Date and Time on their Macbooks. There are quite a few teachers who let their Macbooks battery drain over the holiday break and when they got back in district their date and time were wrong and they could no longer connect to WiFi. We had previously enable Non Admins to change their date and time settings with the following command: #Allow Date/Time Change security authorizationdb write system.preferences.datetime allow This unlocks the date and time section within system preferences for non admin users but for some reason when users try to change their date and/or time it reverts back once they click save. For example if the year says 2018 instead of 2020 the staff member changes it to 2020 and clicks save, then the year will change itself back to 2018. (Settings that set the time automatically have been turned off at this point.) We can successfully change the time when logged in as a local admin account but our users are

just upgraded to 11.1.3 and when i go into a computer details management tab, theres no remote assist button

I use the block USB policy with Jamf protect, but it is still not working. Some USBs are working, and some cannot be used to move data. 

Hello,I hope you are well, I am new using jamf pro, we want to launch a policy with a script to uninstall Malwarebytes from all Macs, I found the following script  https://github.com/eth-its/autopkg-mac-recipes-yaml/blob/main/Scripts_for_Uninstallers/Application-uninstall.shWe ran it on some laptops as a test, and it does remove the Malwarebytes application from Applications, but the icon still appears in the top bar, and if I click on it, it asks me if I want to restore or uninstall Malwarebytes.Can you please help me to supplement the script to make the uninstallation completely and not give users a chance to restore malwarebytes.

Hello and thank you for taking a moment to look at this. I will try and keep it short and sweet! I am running Jamf 10.4 and am having issues getting Patch Management to display any software titles. When I go into Patch Management > New I get the following error...(A connection error occurred while attempting to download software titles from this source.) Everything else is working as far s I can tell. However, I have not used this feature before, only glanced once or twice in the past and the software at one point did populate. Am I missing something easy here or has anyone seen this before at all? I appreciate any and all suggestions, thank you!

Hi all,i wanted to remove MDM Profiles from a client and used sudo jamf removeFramework instead removeMDMProfile. So now i have a problem..i can´t enroll this device because the profiles are still there and cannot be deleted.How can install jamf on a mac manually und do sudoremoveMDMProfileThe easiest solution would be to remove the old profiles on a mac but they are not removable. I cannot remove them as admin.Any ideas?greetz Frank 

FYI: This is for newly imaged/enrolled machines only. I'm not attempting this with machines currently deployed.  Is it possible to force Filevault to enable with 0 interaction from the end-user? Currently we have it auto-enable during enrollment but there is a small window that pops up that says "Turn on" or "Cancel" and they are unable to login for the first time without selecting "Turn on", but I'm hoping to skip that altogether. Since they have no option to move forward without enabling it, ideally we can force it in the background. We have: Jamf Pro, Jamf Connect, "Automatically install PPPC" with Jamf management framework and Jamf Connect. We currently have 2 Config Profiles that enable FV (though I'm honestly not sure which does what or if they're redundant):Application and Custom Settings > Jamf Applications > com.jamf.connect.login > Enable Filevault: TrueSecurity & Privacy > Filevault > Enabled Filevault > Enabled (At Login)

I am trying to install a different self-signed cert for each device. Is it possible to do it in JamF Now? I was able to install the same cert for all the devices through a custom profile configuration, but I want to install a unique cert for each device. Is this scenario only supported in JamF Pro?

Is this possibe? Can force install the 2021 license but some users use an O365 license so want to make an smart group that only users with an 2019 license update to 2021 thanks 

We are just rolling out new computers to our staff, the currently have MBPs with local accounts, on the new computers, we are adding them to the AD domain to ease with logins and password across our district. If we let them use Migration Assistant, they will create new users on the computer with their settings and files and not use the new account that we are trying to get them to use. We will assist them in moving their files, bookmarks,images and music over, but don't want them to use Migration Assistant. I have tried to rename / remove the app, I tried to restrict the app, nothing works. Any ideas?

We are trying to setup some of our field iPads to have a passcode, but then restrict the user from being able to change the passcode.  We have a payload that requires a 6 digit passcode on all our iOS devices.  I tried a couple things and have not had the results we are looking for.First tried to set the Restriction->Functionality->Modifying Passcode to Restricted but when new devices enrolled they bypassed the prompt to set a passcode and the won't let the user go into settings to set one.Then I turned that restriction off and had someone put the passcode on one of those devices and then turned the restriction to restricted and they couldn't change it, but that's too manual for each device.Second thing we tried was to setup a smart device group for any device where the passcode compliance with profile was compliant hoping that a new device being enrolled wouldn't pop into this smart group until the passcode was set; set the Restriction->Functionality->Modify

How can you export the Outlook 365 My Computer Archive files? I have a user that is migrating to a new Mac and wants to transfer these files from Outlook 365 on his old Mac to Outlook 365 on the new, but I do not see a way to export the My Computer archived files. In Outlook 2011 you can export and create a .OLM file but in the new Outlook i do not see it. Thanks

Just seeing if anyone has had success in deplying through Jamf Now a blueprint with a Custom Profile that has a DNS Setting payload.The Profile works find when installed manually but when it's deployed via Jamf Now isn't being enabled.

I know some of this has been covered once or twice before, but I'm VERY new to Jamf. I just recently started with this company and saw Jamf for the first time. Now, I'm basically the admin for an app I've only recently become acquainted with that manages computers running operating systems I've never supported in my short IT career. As you might imagine, I have a million questions, but I'll start with Mass Action commands.After a bunch of attempts, I finally got 2 machines to update from 12.6.0 to 12.6.1, but when I try and get them to Ventura, I get this in Jamf: Unsupported InstallAction for majorOS updateIt doesn't matter whether I've checked the option for majorOS update or not.I always choose the option to defer as I was tasked to do.When I run the mass action command, I see nothing on the target computers (no notifications etc) and after 5 minutes or so I get the failure result in Jamf. It's frustrating to say the least.This happens on an iMac and a MacBook.I have a third Ma

Hi, A couple years prior to joining my current organization, they moved their On-Prem Jamf Pro to the cloud. While the JCDS is setup, it isn't the Master DP, with the master being an on-prem smb server shared between our two campuses. I plan on doing a replication and then making the JDCS the master. My question is, does it make sense to keep an on-prem distribution point? 

I've had some free and paid Mac Store Apps setup for distribution for a long time and for a long time they have worked just fine. Now, all of a sudden, they're not always installing on a newly enrolled iMac. Is there any way to trigger an automatic install of Mac Store Apps?

We are a school district with staff setup as standard users on their Macbooks. We do not allow the App Store because, by law, we have to approve apps to protect student data. I just found out today that our M1 Macbooks that have been updated to MacOS Sonoma are completely bypassing any "Restricted Software" settings in Jamf. So users that update are able to open terminal, the App store, etc. even though the restrictions are setup and were working on Ventura. We are on Jamf version 10.49.0 so I don't believe the update is the issue. Any suggestions are appreciated!

Hi All, I'm looking at deploying Android Studio through Self Service for non-elevated users. I've uploaded the dmg file, and written a script to move the .app file to /Applications on each users machine. The package is dependent on JVM, so I've also packaged the JDK and have deployed that. My current challenges are: Once deployed, users are prompted with a message that this application was downloaded from the internet. I've tried using the spctl to add a label but to no avail... #!/bin/sh spctl --add --label "Android Studio" "/Applications/Android Studio.app" spctl --enable --label "Android Studio" On the first launch of Android Studio, the application downloads and installed supporting artefacts. One of these requires elevated rights... Has anyone packaged Android Studio and is able to provide any tips? Thanks, Jaems

Hi,Recently, I've been doing some cleanup work with our jamf pro instance and have gotten to printers. We have around 15 Konica Minolta BizHub 554e/754e's that our macs direct print to using LPD. Another admin has one giant AppleScript used to add all applicable printers, but I feel like there has to be a more efficient way. I've played around with Jamf Admin mapping, and it works fine; however, it seems like scripting might be the way to go. Does anyone have any advice or a good script they can share? 

How can I create a Patch Management Rule to distribute Safari for macOS Monterey and for macOS Ventura Clients? The Patch Management Policy does not offer an option for both systems. I created one for the Ventura Clients which is scoped to a Smart Group, but how can I setup a second one for the Monterey Clients?

Hello this is my first posting.I have an issue on one of our iMac, I tried to re-enroll and install MDM profile but says cannot install the profile. tried to remove is using "sudo JAMF removeFramework" but says "command not found!" tried to checked the but no "JAMF" folder exist. MDM profile exist in System Preferences.Is there a way to manually remove the MDM Profiles?