I need to install Jamf Protect on some Macs owned by staff and not on our MDM. When we evaluated Jamf Protect I had instructions for installing Jamf Protect without a MDM but I do not see them any more. Does anyone have a link to the instructions?

I need help looking for a way to limit Jamf users' access to information under the Inventory tab when viewing a device. Specifically is there a way to hide things like hardware and purchasing? I have extension attributes set up as pop-ups and I want to limit certain groups' access to specific ones in my organization.

We deployed a Configuration Profile with a VPN payload ever since we started using Jamf Pro to M1 Macbook Airs running MacOS 12.5 at the time the CP was deployed.  Everything worked fine. Recently, we needed to add a new M2 Macbook Pro running MacOS 13.6 and suddenly the VPN profile would not work and only display "An unexpected error occurred". What's weird is that if we create a new Configuration Profile with the EXACT same payload settings and deploy it AFTER the entire provisioning process is complete, then that new Configuration Profile allows the user to connect to the VPN. Thinking it may just be a fluke, we re-provisioned the Macbook and assigned the new CP to it and it still breaks with the same error message. And once again, if I create either a new CP in Jamf Pro or manually create the VPN under Settings, it works just fine. I've been trying to locate the log file for the VPN but there is no /var/log/ppp and I've also tried to use Console to look at logs but can't

Anyone have experience using the Web Content Filter in JAMF School to block URLs? We have some websites they want blocked while Mac's are outside our network and the profile is very different from the iOS one. 

Hi everyone, we are currently working on enabling a Safari extension. However, we've encountered issues creating the Plist. Do you have any suggestions on enabling extensions for Safari? Are there any recommended Config Profiles? 

Hi, I've had one user machine and one test machine failing to reinstall after an erase and reinstall in Sonoma 14.0 and I fully expected coming in here and realizing everyone was having it, but apparently not. We're on Jamf Pro, using Jamf Connect to create user accounts and twice now, erased and reinstalled computers have become stuck on a black screen during first time setup. It may be relevant that I had only pushed Jamf Connect 2.20 and only now updated to 2.27. Has anyone else had this? 

Are there any gotchas to look out for when switching an app (e.g. Chrome or Office365) from a package install via Policies to using App Installers? We're thinking of doing it so that we can enjoy the ease of updating that App Installers provide.

I'm new to Jamf.  We have 1 computer that went through the prestage enrollement.  I can see the MDM profiles on the device and it states that this mac is supervised and managed but in Jamf it shows as unmanaged, enrolled via automated enrollment =yes, it  has not checked in since the device was wiped. Can someone point me in the right direction.  

Hi, I've built a configuration profile with the above preference set on one of our Macs, then uploaded the launcservices plist from it into the profile payload (omitting anything unrelated to Adobe) and deployed that to another test Mac to confirm it works - but PDFs still open in Preview. I've checked and re-checked the plist, and it matches the Mac that does open them in Acrobat Reader DC where relevant. Is there a way to achieve this, besides using Duti (the current build of which I believe doesn't even work under Mojave)?

According to this article the device_aad_information is written to the Jamf database, how can I use this to create a smart group or at least show in Jamf if it is registered with  Azure AD https://learn.jamf.com/bundle/technical-paper-microsoft-intune-current/page/Computer_Regisration_for_End_Users.html 

This is what I have now, just looking for guidance on making this work #!/bin/sh username=`ls -l /dev/console | cut -d " " -f 4` scutil --set ComputerName "$4""$username" scutil --set HostName "$4""$username".domain scutil --set LocalHostName "$4""$username" jamf recon If I execute this script from terminal following results: SCPreferencesSetLocalHostName() failed: Invalid argument I can run following lines, line by line fine all is good. scutil --set ComputerName whateverUsername scutil --set HostName whateverUsername.domain scutil --set LocalHostName whateverUsername Any suggestions?

I work in an education environment and some of the new features in Ventura have prevented our students from using the programs in the way they used to.For example, they have limited access to Garage Band and aren't able to make their own changes or add their own files. Is there some way to give "full access" to applications through Jamf?

I created a script that will tell you what the latest available macOS is that you can install on your hardware but will not run as an extension attribute, it shows blank but if I run it manually it will show the macOS version.Does anyone know how I can fix the script to make it work for an extension attribute?Thanks in advance,#!/bin/bash # All models, model indentifiers, and macOS compatibility provided by Apple. # List will need to be updated when new model come out. # MacBook Pro - https://support.apple.com/en-us/HT201300 # MacBook Air - https://support.apple.com/en-us/HT201862 # iMac - https://support.apple.com/en-us/HT201634 # Mac Mini - https://support.apple.com/en-us/HT201894 # Mac Pro - https://support.apple.com/en-us/HT202888 # Mac Studio - https://support.apple.com/en-us/HT213073 # Read system profile and extract the model identifier system_profile=$(system_profiler SPHardwareDataType) model_identifier=$(echo "$system_profile" | awk -F': ' '/Model Identifier/ {print $2}'

We're trying to setup a few loaner devices at our schools in the event a kid forgets their iPad.I setup two iPad 9th gens for testing, setup the ADEP profile for a shared device, all users are setup in ASM.I logged in as a user and was prompted to create a passcode, great. Then I logged out and logged in with another user and it worked the same.The problem is now when you go to the other iPad to sign in it takes the shared iPad passcode, logs in for about 10-15 seconds, the automatically logs the user out stating "Login failed please try again"I've been messing with them for about a day and just can't find any reason for this to be happening. Has anyone else ever seen this issue? 

Hello all! This is my first post on Jamf Nation - I'm a newcomer to Jamf and Apple in general, having taken over for my organization's previous Jamf admin.Some backstory:Currently, we install macOS updates by downloading the OS .app, packaging it in Composer as a .dmg, staging the update package on our endpoints via policy, and then using a second policy to initiate the installation with the following command:  echo '<localAdminPassword>' | '/Applications/Install macOS Ventura.app/Contents/Resources/startosinstall' --agreetolicense --forcequitapps --nointeraction --user <localAdminUsername> --stdinpass  This works great for initiating after-hours installs. However, my leadership has indicated they'd like an option for users to kick off updates from Self Service. While I can make this available in Self Service as-is, the problem is that this doesn't allow the user to control when the endpoint reboots; it doesn't even notify them a reboot is incoming.

From time to time I encounter policies that get stuck in pending and I don't know how to resolve the issue.Example, today a new system was setup for a user and enrollment complete fine. I have an enrollment trigger set for a provisioning package that installs all of our basic applications. This is the first time it didn't function - I can see the trigger is active and the logs show pending, but nothing happened after 20 minutes and a restart.In order to get the policy to run I had to scope it to self service to be run manually, which worked, but now the original enrollment provision is still sitting in pending with no failure or option to cancel.How do you resolve this? Both to get a pending to run and to cancel a no longer needed policy sitting in pending.

Using this json from  https://github.com/macadmins/nudge/blob/main/Schema/jamf/com.github.macadmins.Nudge.json  I am unable to get the mainHeader, subHeader and other elements customized with the text that I want. After I make a change in the configuration profile I see that the changes I made show up in /Library/Managed Preferences/com.github.macadmins.Nudge.plist but the Nudge app does not show these changes. What did work was changing the icon paths for light and dark modes. Does anyone have some tips on how to get this text to change? I have been quitting Nudge and relaunching it after each change I make. Nudge seems to be working well otherwise. Thanks!

I'm trying to complete a script run by a launchdaemon to delete a specific account if it is over X hours old. I started with Sean Rabbit's similar script here. But drifted away as I didn't need all that.I've tried "dscl -delete" and "sysadminctl -deleteUser" but they just convert the account to a standard user.I'm now trying to use "jamf deleteAccount" but it doesn't even seem to run (log created, but nothing in it).In all three cases the script works fine when run with sudo, and it's my understanding that /Library/LaunchDaemons/ are run as root? #!/bin/bash # Some Variables jamfBinary="/usr/local/bin/jamf" user="eucadmin" ageLimit=5 #in minutes ageLimit=$((ageLimit * 60)) currentTime=$(date +%s) #list users and if our target is on the machine check its admin and then if it's too old delete it users=$(/usr/bin/dscl . list /Users) if echo "$users" | /usr/bin/grep -wq "$user" && groups eucadmin | grep -qw admin;then userCreateTime=$(/usr/bin/dscl . -readpl

Hello, We have several computers and devices that have not communicated with Jamf for several months.I wanted to know if it was possible to send an MDM Lock or Wipe command and then unmanage them.Will these MDM commands still be deployed if the computer or the device is unmanaged but a check-in is done again? Thank you

We are trying to set up a site in Apple Business Manager as we are building out a new process and want to start testing. I have run into an error when I am trying to upload the token from Apple business manager to the Jamf site.I will add the file then click upload it will say "Unable to handle file upload." I've tried multiple browsers and computers and still no luck.I have uploaded a new public key to Apple Business Manager, then I downloaded a new token and I've attempted this multiple times.

Description: I have encountered a persistent issue with Jamf Pro version 10.49. When attempting to edit a 'Distribution Point', upon clicking the 'Edit' button, I am faced with a continuous loading spinner, preventing any further actions. The expected behavior would be for the edit options to appear without any delay or persistent spinning.Additional Information:Browser version: Chrome, Safari, Firefox in normal and private window.Operating System of Distribution Point : 13.5Network conditions: No conditionsQuestion: Do you have any idea what might be causing this issue or any suggestions for potential solutions?

With the advent of new JC versions coming out , what is the best and easiest way to clone a Jamf Connect Configuration Profile without having to manually cut and paste all of the variables from one to another? I tried cloning then changing the JC version and I get this message:  

Our config profile for blocking sharing works fine on macOS 12, but 13 you can edit the computer name in General / About just by clicking on name, Restricting the General prefs is not blocking About, but all other General settings.What have I missed?

Hi all,Is there a way to hide apps from the homescreen in iOS without removing them entirely from the phone? I know how to do it manually on my phone, but I'm not sure I've found anything that works within Jamf. We have a content filter application that needs to be installed to function, but the app itself only contains text and so it seems to confuse our users if it's visible on the home screen. Thanks in advance for any suggestions!

Since 10.50 (Cloud)When I click on a smart group on the dashboard (the value) I'm redirected to the page.. there is some blue-whirling.. and a blank page.. no results are displayed. Not every time, but more often than not.I now need to click on the smart group name, then results. Chromium browsers  (no I can't use a different browser) Anyone else? Was all working fine in 10.49