Hi,I work at a private K-12 school with students that can be forgetful. Every now and then we need to change a user's password via the Google Admin console (user forgot, info leak, etc)We rolled out Jamf Connect this school year, and we're realizing that when we change the password via Google Admin console, Jamf Connect no longer works. If we try to have the user sign in with the Jamf Connect google window, it will try to open a verification window that refuses to accept the new password.Our fix is to use the local admin account, sign in that way, then use the local admin to change the user's account password to the new password. Is there any Jamf setting that would allow the Jamf Connect feature to change account passwords upon sign in? Or am I doing this the correct way?

Hello AllWe are runnning into an issue with laptops trying to update OS and being met with an error that states "you need to be an owner to install". Some machines the workaround of "sudo softwareupdate -i -a -R", will install the update but this isnt ideal. All machines are M1 machines, DEP enrolled and going through the same prestage. It seems like its related to SecureToken missing (which might also be causing some FV2 issues) for the user, at least thats what my google fu leads me to.  I kind of remember there being a script out there that could be used to assign a securetoken, we used it at my last place but I cant seem to find it. Any help is appreciated!!!!

Hello, I am new to jamf and our client is requesting that we automate turning off of Natural Scrolling. I have found a script that when run in terminal works perfect and does not prompt the user for anything. Currently this is what I am using:#!bin\\bashdefaults write NSGlobalDomain com.apple.swipescrolldirection -bool falseWhen I go to run this through jamf it just fails and does nothing. I'm sure I am missing something but have racked my brain and cannot figure it out. Thanks in advance for the help.

I have Ongoing policy with Recurring Check-in and Custom Trigger. Frequency is set to "Ongoing". Device is scoped to policy   sudo jamf policy sudo jamf policy -id <xxx> sudo jamf policy -trigger zoom_update sudo jamf policy -event zoom_update   Any of the above commands does not trigger the policy. It shows "No policies were found for the "zoom_update" trigger."  Any suggestions? Thank you

Hello, I downloaded and got the Big Sur installer which is 12.21 GB.When I try to package it with Composer, the pkg is only 15.6MB and damaged. I tried with Composer versions 10.25.1 and 10.26 beta. Do you have the same problem ? Thank you for your help

What is the best way to release a device when it's no longer in your organization? You are able to do it through Jamf School or Apple School Manager, which option should you use?Thanks!

Is there a way, on User enrolled devices, to take away admin privileges to be as close to a Pre-Stage enrollment as possible? Just starting to integrate Jamf in with our creative Team , they use Adobe with a lot of plug-ins and file transfer services, I sent out one pre-stage enrolled device and got alot of backlash in blocking the users workflow.That being said, I want to be able to test with a user that I can work closer with but is User enrolled so the circumstances are a little different. Let me know any suggestions , Thanks 

I'm trying to add a mac with macOS Sonoma via BYOD enrollment. iOS devices are set up correctly and already do work, but when I'm trying to login via Settings -> Privacy and Security -> Profiles -> Work or School account, I'm getting the following error:Did not receive an enrolment profile from your MDM server. Contact your administrator.

Greetings,Curious if anyone has run into this scenario;We are using JSS cloud, devices enrolled in Apple School Manager and assigned to the JSS, scoped to a Prestage Configuration that bypasses all steps in Apple Setup except Location Services, Registration & FileVault.  We're also using an Enrollment Customization Configuration.  We do not create a local admin account in our PrestageThis Prestage is the only one in use and has not changed in years. While setting up a new or freshly-erased-with-new-os Mac:Start the computer, which initiates Apple Setup.Step through the screens to the Remote Management screen.Let the JSS enrollment complete.At the Account Setup screen, Shut the computer off.The scenario here is that a setup tech could finish up for the day and rather than continue setup, shut the computer down, or let it go to sleep.  I've only been able to replicate if the computer is shut down.Restart the computer.At this point, the computer boots to a log

Hi there, I'm working on a policy that should be able to deploy a launchdaemon plist to all machines. The below script I found here https://communithttps://community.jamf.com/t5/jamf-pro/remote-management-active-extension-attempt/m-p/119717y.jamf.com/t5/jamf-pro/remote-management-active-extension-attempt/m-p/119717    #!/bin/bash cat << 'EOF' > /Library/Scripts/jamf-Restart.sh #!/bin/bash sudo killall jamf sleep 10 sudo jamf policy EOF chmod 644 /Library/Scripts/jamf-Restart.sh chown root:wheel /Library/Scripts/jamf-Restart.sh cat << EOF > /Library/LaunchDaemons/jamf-Restart.plist <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Label</key> <string>jamf.restart</string> <key>ProgramArguments</key> <array> <string>sh</string> <string&

We've decided to move our scoped policies and conf. profiles to smartgroups, as we realized this will save a lot of work in the long run. I don't seem to find an efficient way to do this, at the moment i have to go through every single policy and conf profile and change the scope manually, which isn't even the bad part, the worse is that i can't find a way to list all the policies scoped to one department.When the policy is scoped to a few departments, it can't be found anymore in the search, it shows "2 computer groups, 2 departments" or something like that and that excludes the keyword from the search.Any help/ideas would be highly appreciated.

Found the solution to my problem - How to lock classroom pane/options with a custom profile in JAMF explained in first comment We are looking into deploying Classroom for our teachers and students next year. We would be doing Teacher Managed classes. (macOS devices, teacher and student). By default, students can change settings that include them being able to leave the class, and requires student approval to lock etc... Which is never going to work. JAMF has a couple wonderful configuration profile setting under Restrictions - Functionality. However they ONLY work with Prestage Enrolled devices, not those enrolled via QuickAdd. I have tested and confirmed that with a clean install of 10.14.4 and QuickAdd that the configuration indeed does nothing. Students can still change settings and require permissions etc. Allow Classroom to perform AirPlay and View Screen without prompting, Allow Classroom to lock the device without prompting,Require teacher permission to leave Classroom unm

Hi, Totally fed up with the constant updates of Flash player plug in. Does anyone have a deployable method to remove it from my lab Macs? I know there is the manager in the Utilities folder, and you can uninstall it with that. But this does not look scriptable to me. And I need a deployable method as there are about 300 Macs with it on. As usual, any help will be greatly appreciated.

Pretty new to Jamf and Mac management. Have been looking at the patch management process and focusing on browser updates, although what I'm discussing is applicable to any application update, not just browsers.What I'm seeing is some confusion among our users regarding the patching process. For example, user gets notified that there's an update available for Microsoft Edge. User initiates the install process. Browser closes, update begins.My question is: how does the user know the update has finished applying and they can safely re-open the browser? Is there a way to tell the application to restart after an update has applied? Curious to know how other admins/organizations are handling this. Thanks!

Hey,I'm trying to create a Smart Search, which lists devices with any Software title by Oracle installed. Is there an easier/better/future proof way than just adding every Application made by them? I found "Vendor" as an attribute, but does not yield any results.Any ideas?

Hi all,Just wondering what you're doing in terms of macOS and iOS updates? Our Windows workflow is fully automated with a 7-day grace period before the computer will automatically restart to install updates. We really want to have something similar in place for our Macs but also iPhones/iPads if possible as they're lagging behind everytime a new update is released.Right now what we're doing is trying to educate personnel and push them to update their devices which is not ideal to say the least...Is there a way to force them to update without interrupting their work by giving them a grace period? Does anyone have any suggestions or workflows they currently use for this that they'd like to share?Thanks in advance!

We've got a couple devices that after installing the latest updates of Sonoma are still showing RSR version (i.e. 14.1.2 (a)).  Does anyone know of a way to get this back to showing a true version of the OS that is running on the device?

I had a Mac that lost its connection with JAMF. I ran the following command on the machine, sudo Jamf enroll -prompt, and the machine started reporting into JAMF. The issue is that it will not push down any new Configuration Profiles and the "Management Commands" option is missing. I have tried to run the following commands to see if I could resolve any of these issues but nothing helped.sudo jamf -removeFrameworksudo jamf reenroll -promptsudo profiles renew -type enrollmentI also tried to do a manual enrollment but since the old "MDM Profile" is still on the machine it will not install a new one and I can't remove the old "MDM Profile" since it was enrolled with DEP. Is the only option I have is wipe the device?

Hi folks,I was looking through the logs on several iPhones in Jamf Pro today and noticed a pattern in many devices. I see a long list of apps installing themselves on established iPhones. Then I look back a few days and see the same list of apps installing themselves. These are the same apps and app versions, installing themselves over and over again. Of course during those times, the user has several icons on their home screens that are busy reinstalling, and that could make some unavailable for quite a while if outside WIFI range.Any thoughts on why this would be happening? I checked multiple department affiliations, so it isn't just one department profile. It's almost as if the device is not acknowledging the installed app list and thinks it needs to keep installing apps repeatedly.Thanks in advance for any ideas,Rob

Anyone gotta script that will automatically download the latest version of Dropbox? As the app is constantly updated, I'd like to have self service and enrollment policy that will always grab the latest version, but their download link does not lead to a specific DMG or package. With other apps I do this via CURL, but that doesn't seem to be an option here. https://www.dropbox.com/download?os=mac

This is my script I run for new installs:#!/bin/shsudo echo $4 > "/Library/Application Support/JAMF/Waiting Room/com.sentinelone.registration-token"sudo /usr/sbin/installer -pkg "/Library/Application Support/JAMF/Waiting Room/Sentinel-Release-23-1-3-6816_macos_v23_1_3_6816.pkg" -target /This is my script I run for upgrades:#!/bin/bashsudo echo $4 > "/Library/Application Support/JAMF/Waiting Room/com.sentinelone.registration-token"sudo sentinelctl upgrade-pkg "/Library/Application Support/JAMF/Waiting Room/Sentinel-Release-23-1-3-6816_macos_v23_1_3_6816.pkg"I have two policies.  One that is Cache.  One that is installed Cached.  That is for both scenarios above.  I am getting nothing but failure.Is that something wrong with the scripts?  I don't have my error messages because I keep flushing them, but the cache one fails but I see where the file fully downloads.  That's all it's supposed to do.  The second script is supposed to install that file.

Hi, We've recently moved from an on-premises server to the cloud.  We are using on-premises Active Directory for LDAP services and were hoping to move To Azure AD at some point.  We brought this up during the migration to the cloud and the JAMF tech who was assisting with the migration said that there was no path to upgrade from where we were with on-premises AD to where we wanted to be with Azure at that time. Since then, I've been looking around the forums trying to get more information.  In the older documentation (up to v10.29), I can see a blurb that says "To ensure your existing LDAP workflows (e.g., scoping or user accounts and groups) continue to work correctly, you will need to migrate your configuration when the migration assistant is available in a future release of Jamf Pro. Adding the Azure AD integration prior to migration may break your environment." This warning doesn't appear in the documentation after v10.30.  We're in the cloud on v

Computers will not enroll today, when we enter any username and its password (Active Directory) it gets stuck 'retrieving enrollment profile' then returns to the login screen as if the username and password are incorrect, no errors. We verified usernames and passwords (including reseting passwords in Active Directory) and used multiple accounts with the same results. We do not recall any notifications for service interruption or have seen any outage reports as of today 11/29/23.The last time we were successfully able to enroll a laptop was 11/20/23

I have a test JSS server that was running 9.22 and installing the Wireless configuration profiles so I could start testing my profiles and policies to make sure everything would be working when we upgraded our main server to version 9. Everything was working fine until I upgraded my test JSS server to 9.23 then the wireless configuration profiles would fail saying "Some required information in the profile is missing." I've recreated the JSS certificate, un-enrolled and re-enrolled the computer, tried different fresh installs of the OS, I also downloaded the profile to install it and it still came up with the same error. This configuration is scoped to all computers. I'm testing a user initiated enrollment, so once the enrollment is finished the computer can then access our wireless. The machines I've tested this on are a MacBook Air (11-inch Mid 2013), an iMac (21.5-inch, Late 2012), and an iMac (Late 2009). The MacBook Air is running 10.8.5 and the iM

Hello everyone,I'm currently encountering a difficulty and would be grateful for your assistance. I'm attempting to determine which clients have iCloud Drive activated, particularly with the synchronization of desktop and documents.I've conducted thorough research online and within this forum, but it seems that the solutions provided are not applicable to the newer versions of macOS.Could anyone offer guidance or suggest an effective method for the latest macOS versions (Ventura, Sonoma)?Any help would be highly appreciated.