Hello I was wondering if there was any way to disable the automatic run of safe files in safari using a configuration profile/policy, I can't find a setting for it and need to disable it for compliance reasons.

Hi All, We are working on removing Docker desktop from Macs, tried few scripts for uninstalling through Jamf Pro however we are getting an error stating root access is needed. Wanted to check if anybody knows of a way to remove docker through jamf.The script user#!/bin/bash # Uninstall Script if [ "${USER}" != "root" ]; thenecho "$0 must be run as root!"exit 2fi while true; do  read -p "Remove all Docker Machine VMs? (Y/N): " yn  case $yn in    [Yy]* ) docker-machine rm -f $(docker-machine ls -q); break;;    [Nn]* ) break;;    * ) echo "Please answer yes or no."; exit 1;;  esacdone echo "Removing Applications..."rm -rf /Applications/Docker.app echo "Removing docker binaries..."rm -f /usr/local/bin/dockerrm -f /usr/local/bin/docker-machinerm -r /usr/local/bin/docker-machine-driver*rm -f /usr/local/bin/docker-compose echo "Removing boot2docker.iso"rm -rf /usr/local/share/boot2docker echo "Forget packages

hello,We migrated our JSS from an LDAP connection to Azure AD (Cloud Identity Providers).But we are unable to map certain AzureAD attributes such as 'businessPhone' or extensions such as 'extension_3bf6422528194f1aae559105e4bace82_division'.Have you ever had this type of problem?Thanks for your help

Even though MacOS Ventura 13.6.2 was released over 20 days ago, Patch Management in Jamf Pro says that 13.6.1 is the "latest version" of Apple MacOS Ventura. This is a little annoying as we have different Smart Computer Groups and reports that depend on this "latest version" status to notify users (and us) that their OS is missing security updates. As a workaround, we can change the Criteria of the Smart Computer Group and the reports, but this will be annoying to do every time an update is released.I submitted a ticket with Jamf, and they said they are seeing the same thing on their side. Is everyone else seeing this too? Anyone find a fix for this? We have a managed instance of Jamf Pro, so not much we can do on the back-end side of things.Pardon my naivety--this is my first post--if this question isn't useful to the community in any way, please let me know nicely:)

I'm trying to use the *.jce file I created on my main machine to a test machine so I can run the audit there. I've copied the app, the *.jce file, and the macOS_security-sonoma folder created when I chose my baseline to the same location on my test machine. I've also copied the Jamf Compliance Editor folder from Application Support and even the com.jamf.complience.plist file from ~/Preferences.When I run the audit on my test machine however I don't get a usable result just a result with practically nothing in it and NaN% for the score (which makes sense since there's no number).My custom baseline looks to have been loaded correctly. The modified and disabled rules are all correct. The audit just doesn't work as expected.

We are attempting to configure devices going forward without logging them into Apple IDs and having all contacts come from the outlook contacts sync feature.  However, when we attempt to turn on contact sync in Outlook without being logged into an Apple ID we receive the following error message: "Couldn't Sync Contacts, Try turning on contact syncing on your iPhone from Settings > Your Name > Contacts. If that doesn't work, contact your IT admin as your organization might not allow syncing."I can't imagine the issue being the later because our policies allow this and we are able to do this on devices that are logged into an Apple ID.Microsoft documentation claims "If there is no account connected to the device, then your Outlook contacts will be saved locally but will not be synced to other devices."So according to that we should be able to sync contacts from Outlook to the device without the need for an Apple ID.Has anyone else run into this and come up with a sol

We have an issue where some machines keep prompting the user that their IdP password does not match their local password and are given the option to sync. However, when you hit sync, the login popup is completely greyed out (as shown below).In all cases, we have verified that the password is in fact the same. I'm assuming this is cached somewhere and maybe needs to be cleared? Has anyone seen this?

When a user with a managed iPad starts Self Service, the app complaints it should be linked to a Jamf Pro-server. And you can't do anything with the app. See screenshot (Dutch localization):This is weird, because the iPad is listed between the devices in Jamf Pro.I do notice two pending commands from yesterday and the day before yesterday (inventory update and a time zone settings update).I tried to quit self service and relaunch: did not work. I also switched the iPad off and back on.What could be wrong? Edit: could it have to do with the license? I get this notification now (I'll ask my boss about this):Device count exceeded Purchase additional licenses.

since implementing jamf connect, we keep randomly getting 403 forbidden errors after trying to login (we use azure). has anyone else ever run into this before? we're not sure if it's on the jamf side or the azure side that's causing the issue.

Hello,We have numerous printers that are in Self Service and install correctly. Once the computer has installed the printer the printer disappears from Self Service and is no longer an option for the user to install or reinstall. Currently it is set to "Once per computer".I can see that you can change the frequency of the printer install to once a week, day and so on, but I am not keen on the printers being constantly installed.Is there a way for the printers to still show in Self Service even though the printer has already been installed on the MacBook? I would like to keep the printers there just in case someone deletes it or it needs to be reinstalled. Thanks :-)

We have encountered a situation with a company Mac that a previous user was using, they left the company some time ago. The issue at hand is that the user's Apple ID is still associated with the device. Additionally, it appears that a firmware password has been set on the device, which we do not have access to. This has rendered the Mac unusable.In my current role at Jamf, I am relatively new, so I appreciate your patience if this is a basic question. Is there a method to discover or reset the firmware password? We do have access to the ex-employee's computer account as a local admin.Additionally, how can I prevent such situations in the future? Can Jamf store firmware passwords, if yes, how? The Mac model in question is a MacBook Pro (13-inch, 2020, Two Thunderbolt 3 ports) with an Intel i7 processor.Thank you everyone in advance.

Hello,We have been working on upgrading Sonoma, but we have encountered an issue. We are unable to assign volume ownership to the local users. As a workaround, we are considering making them local admins through silent actions. We are wondering if it is possible to elevate standard users to admin accounts using configuration profiles?Thanks!

We are moving from on prem to Jamf Cloud soon and I would like some sort of infographic that shows the differences between the two and why we are moving. I've looked here and online but haven't found anything. Does such a thing exist? Thank you

Hi Chaps, I have a need to disable the Defender AV socket filter.'mdapt system-extension network-filter disable'The above works fine when i run locally albeit with a Sudo command.Jamf scripts is unable to run this, Is anyone doing anything similar or have any thoughts on this.I've tried to invoke a currently logged in user prior to running the command without any success Thanks,M 

I'm looking for advice on getting homebrew on new employee machines automatically. We have a work flow we would like to keep to as few clicks as possible. I am trying to get the process of pulling down XCode CLI, installing homebrew, adding cask, and then installing third party apps for new employee machines. I have the XCode CLI component down but having problems with installing homebrew and adding cask. Curious if anyone has a working script to make this happen. I am deploying this process through self service.

Hi all,I'm having an issue with an app that just does not want to install. I'm going to try to be SUPER detailed with this post, so please bear with me.The iPads we are using are company owned, and there is no Apple sign-in allowed on the devices. The app is Therap version 23.9, and its description says it's for both iPad and iPhone. It's a medical documentation app. The app works if it is installed on other iPads through the regular App store. I also had a similar problem installing the Zoom app, but I removed it from the blueprint and added it again, and it now works fine.The Jamf Now dashboard shows the app as being installed and managed. It does not fully install on any of the iPads we manage. The app does not show up anywhere on the iPad, even in settings, while other apps do.This happens every time, no matter what troubleshooting steps I have taken: when the device connects and syncs, the Therap icon on the iPad shows as installing (it does the faded icon "circle sweep" thing), t

Hi everybody,An app was broken on my machine, so I deleted it manually (perhaps that was a mistake).Now, if I go this way:Computers > Search Inventory > my MacBook > History > Mac App Store AppsThe app still appears under the list of "installed apps," even though I deleted it. How can I update that list?Best regards,Floh

Hello all I am tasked with seperating our onboarding process for Contractors and Full time employees. We are using Onelogin as an LDAP server just as background info. I would like to use Smart Computer groups to achieve this What workflows or methods does everyone here use to seperate onboardings for employee types.

this morning it seems we cannot log into jamf pro. Even tried our local account and not able to login. I tried on my company  network and on wireless(verizon) network as well and still not able to login. are there any issues logging in? 

Hi,Working with the Jamf Compliance Editor for the first time with Sonoma. Got a dumb question.If we are modifying "ODV" values, do we just need to replace the $ODV entries with the number we want in all the fields?So for example, if we want 10 days for this 1.7 Control, it'd look like this?Mobileconfig com.apple.applicationaccess:enforcedSoftwareUpdateDelay: 10 

As the result of a technical issue with the Global Patch Feed used for the Jamf App Catalog, patch definition updates are unavailable until further notice. Do not attempt to add any new patch definitions to Jamf Pro during this time.Existing patch policies will continue to function as normal, and new patch policies may be assigned to existing patch definitions in Jamf Pro; however, new product versions will be unavailable.We are actively working on a resolution and will share an update as soon as patch definition updates are available. While we cannot give you an exact date, we expect the outage to last a few days.When patch definitions are available all updates will resume as normal.During this time, you may still use App Installers to manage software title updates in your environment. For more information, see App Installers in the Jamf Pro Documentation.

Users that have already properly enrolled into Intune and completed enrollment continue to get pop ups of jamfAAD. I have verified in Intune that the device is enrolled AND the policy was completed successfully in JAMF. This pop up continues to run and request users to continue. This sometimes disrupts end user workflows or presentations while on a zoom call. Is there a setting possible in the profile where I can set the retry option to 0 if already successfully completed. I've tried flushing the logs, delete the device from Intune, then re-enroll the mac back but users still get prompted. Even when I've un-scoped the policy from the user they still get the pop up. Possibly coming form the Intune side? I'm open to any ideas. 

Hi We're trying to deploy the latest version of Jamf Connect 2.29.0 to all of our users who are currently running a much older version of Jamf Connect.  Please excuse the newbie question but how do I convert the Jamf Connect 2.29. DWG file into a PKG file? This guide is very useful if you already have a PKG file, Should I just follow this guide but not include any custom images (we're not bothered about custom branding), you don't need to upload the DWG file within this process so I'm unsure how the Jamf policy will know to install version 2.29.0 of Jamf Connect when I add it as a package?ThanksTom 

Hi Guys, we recently just deploy exclaimer in our business. And I deployed Exclaimer Signature Agent for our macbook users. (our macbook users use outlook). my question is that how do we supress this pop up from exclaimer agent as most of our user keep getting this popup everytime they restart their macbook. 

Hi everybody,Is there a way to automatically re-enroll devices after a wipe command that are not managed by DEP (so no preStage enrollment)? We have some older devices that are not managed by Apple Business Manager (unfortunately) and are enrolled through user invitation.Best regards,Floh