A couple of my users have experienced apps such as Chrome and FireFox deleting themselves after the migration from our previous MDM to Jamf.- We are using the migration tools from Jamf that were given to us after our migration meeting.- The only policies we have are for basic applications such as m365, OpenVPN, and Adobe.- Users retain their admin rights if they had them.- Chrome and Firefox are in our Self Service portal. I would like to find a solution to why this is happening. I keep going over our policies, our configuration profiles, and our prestage but I can't find a solution. We have zero uninstall policies and the only configurations that work on our computers are the initial Jamf Connect configurations and Windows Defender settings.When Jamf first enrolls or migrates, does it uninstall anything not in the provisioning script? Does it uninstall apps that are available in Self Service?

I'm working on moving users away from using the App Store to install apps and instead using Self Service. To make this transition easier, I want users to be able to open and browse the App Store, but not install anything. That way, if the user needs an app, it's simply a matter of the user getting a screenshot of what they need and submitting a ticket with the request, and I will then add it as a Self Service app.The most straightforward way of doing this seems to be to just prevent users from logging on to the App Store, but I'm not sure how to do this. We are not currently using managed Apple IDs.A similar question to this has been asked several times, but it looks like no one has presented the solution I am looking for:https://community.jamf.com/t5/jamf-pro/disabling-app-store-access/td-p/46605https://community.jamf.com/t5/jamf-pro/config-profile-restrict-app-store-and-restrict-app-store-to-mdm/td-p/180089https://community.jamf.com/t5/jamf-pro/restrict-app-store-apps/td-p/219061http

Hello - last post on this topic I could find was from 2015. Any way (Mojave and Higher) to disallow the "Reopen Windows When Logging Back In" across all Macs in a fleet? I know the way this is controlled behind the scenes has changed over the years. Thanks all!

I am new to Jamf Pro API and I am diving into more and more automations.  Can someone help me with how i would go about to updating multiple computer assignments for a static group by using computer names. If you have a working script, please assist. maybe via csv file?

Is there a way to send a pop up message to all Staff computers to notify them that there is an email problem?

Hi, I am trying to add Microsoft Offic 365 packages (Word, Excel, powerpoint etc..) to Dock but I got only ? mark. Obviously path is not correct.I have tried the below paths, none worked. Any help apreciated, please./Applications/Microsoft Wod.app/System/Applications/Microsoft Word.appfile:///Applications/Microsoft  Word.appfile:///Applications/Microsoft%20Word.app/Applications/Microsoft%20Word.app Thanks 

The remote command Update OS Versions on supervised devices is no longer available to run on the Devices tab. The 'Next' button is greyed out. There is a box saying You can now use Software Updates to manage OS updates but I do not want to do that, I want to run the OS update remote command. How do we get this option back?  Thanks!

Reports have been coming in about macs on the corporate network getting "poor network stability" messages periodically and my networking team has confirmed that systems are jumping from 5ghz network to the 2.4ghz network, or having a hard time moving from AP to AP based on proximity.  After doing some digging I have noticed some articles with similar issues referring to AWDL (Apple Wireless Direct Link).  https://www.meter.com/mac-osx-awdl-psa Mainly to disable this feature on systems to avoid future issues.    This article mentions that the issue should have been resolved in the recent updates to macOS, but systems with the latest OS are still reporting issues. Have others seen similar issues and implemented this practice of disabling the AWDL? 

Hi,I'm having an issue with a specific User-initiated enrollment does not complete fully on a MacBook Air.After enrollment the MacBook's serial number shows up in Jamf Pro console, but does not have any associated data/reports. For example, OS has null value, last Update has null value, etc.Running "sudo jamf recon" or "sudo jamf policy" on the client returns:The file /Library/Preferences/com.jamfsoftware.jamf.plist does not exist. Use the createConf verb to create it.I have tried creating the com.jamfsoftware.jamf.plist file successfully but then get further errors relating to security.This Mac was previously successfully enrolled with Ventura, 13.5 installed. The drive has been wiped (twice) and the record was deleted from Jamf Pro before re-enrollemnt.The model is MacBook Air Intel, Retina running Mojave. 10.14 has been re-installed (twice), with same results both times.Thanks for any guidance.

Hello,II have renewed the push certificate MDM on Jamf but when I send a mass command to renew the MDM profile on all the computers in my smart group and I look at the computers, the command still pending on all computers. If anyone has any idea where this might be coming from.

Has anyone been able to get mice to have right-click enabled by default? We are running lab machines with new users logging in all the time and would prefer they not have to enable that for themselves each time. I have seen (and tried) various solutions here on Jamf (scripts run in a policy) but have not been able to get it to work. I am interested if anyone has had any success while running Monterey.Thanks-

Hey all,We have some users that don't get added to our Prestage Enrollment (ABM problem, not a Jamf issue), so they create local accounts then need to manually enroll via the url.After the manual enrollment we have their machine install Jamf Connect but on their next reboot we'd like them to log in with Jamf Connect and force them to create a new user without the option to migrate the user they've already been using. (Yes, this will create an additional account on the machine but it's much easier for us to have them use their Okta account rather than their personal account.)Unfortunately no matter what settings we use in the Config Profile, the option always opens for them to Migrate their local account:<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>OIDCProvider</key> <string>Okta</string> <key&

We have around 10 smart groups we use for our 3rd party updates. All the smart groups are set to use the Criteria "Patch Reporting Software Title" then we point it to the Patch Management we have setup for that specific software and we use "Less Than" and pick our version. For some reason our Adobe Reader group isn't reading the devices correctly. We're currently deploying version 23.003.20269, but this smart is listing devices that have already been updated to 23.003.20269. None of the other smart groups are doing this. Not sure what's going on.  

Hello, What would be the best way to prevent users from downloading software/applications from the internet. We have the appstore blocked in the restricted software section but I am worried they can download some software/apps from Chrome or Safari with DMG files?What would be the best practice to prevent this?Thanks 

Does anyone have a working Extension Attribute to read if the Root account is enabled? The one I was using does not appear to work anymore, and none of the commands I am seeing on the internet are working either. This is what I was using.  #!/bin/bash rootCheck=$(dscl . read /Users/root | grep AuthenticationAuthority > /dev/null 2>&1 ; echo $?) if [ "${rootCheck}" == 1 ]; then echo "<result>Disabled</result>" else echo "<result>Enabled</result>"\\ fi   

Hello,I'm new to managing devices (iOS) in Jamf Pro. I'm looking for a set of best practices when it comes to setting up devices, including restrictions, settings etc. We have just a few iPhones in the company but I want to make sure they are properly secured and managed. Any advice is much appreciated! Thanks. 

Hi Folks,I'm trying to find a way to update our extension attribute every 5 minutes, but only one specific, so i don't want to mess with the inventory collection.I figured my best bet is to create a script that does the same as it does now for the EA, but instead of just doing a <results> echo, writing it directly using the APII still need to redo my JAMF 400 since i found the whole API thing so confusing, but i think i have the idea down.would this be effective/would you do it differently?-credentials-grab serial number from system profiler-use serial to grab the computer ID using the API (so "https://***.jamfcloud.com/JSSResource/computers/serialnumber/$serial_number")-execute the script (in this case, it checks the IP for a specific interface)-writes the value using the API by using the previously fetched ID (i think this should go via the computer then, not clear if there's a better way?)as you might be able to tell, i kind of know what to do but still feel lost, tips/hi

Does anyone have recommendations for installing Jamf Infrastructure Manager? I am receiving the attached rollback error after initiating the installation and entering the verified parameters. I used the following as resources: https://hcsonline.com/support/white-papers/installing-jamf-infrastructure-manager-on-a-windows-server https://docs.jamf.com/infrastructure-manager/2.1.0/Installing_a_Jamf_Infrastructure_Manager_Instance.html The system settings are as follows: Windows Server 2016 x64 VM (patched, latest build).4 GB RAM80 GB HD w/ plenty of disk space availableJava 11 w/ path configured I currently have a ticket open with Jamf but so far the troubleshooting suggestions have been fairly basic steps that I had already taken like ensuring the FQDN is used for hostname and installing from an elevated command prompt session. The login credentials for the API user are also valid. The installation log is extremely verbose but I parsed every single line. There is a single 1603 error

Hello Folks,We have an interesting request that came through recently and are looking for some guidance.There are a handful of employees using Apple Notes and they would like to backup this content to iCloud. We have Apple Business but are not actively provisioning accounts for employees. As a matter of fact, we are just blocking iCloud across our environment. We are governed by HITRUST and have to be mindful about what content is stored, especially on personal accounts.  We are just trying to find a way to protect against data loss for these individuals. Is is possible to force iCloud logins only to company-owned accounts? We really don't want to deal with activation locks, etc. in addition to the aforementioned DLP concerns. Thanks!

We have Microsoft Intune configuration configured for device compliance. There is an app in SelfService for them to Register with the Company portal.What I would like is a prompt or notification to the user that they need to register and if they don't it nags them again.

Hi everyone, I'm sure that this subject has been talked about, but I haven't been able to find it. My question is: Can you run two MDM solutions at the same time? I have both MS Intune and JamF available to me and I was wondering if it was possible? I don't think it is, but I want to make sure. - Thanks

Not sure what's going on but I've setup the JAMF DEP automated enrollment.I've been able to successfully enroll 20+ macs in the last week, but all of the sudden today, my device is not enrolling correctly. All devices that are being enrolled are showing "Unmanaged" and the JAMF binary is missing from the /usr/local/JAMF folder is missing. Oddly enough though, the base MDM profiles are coming down as well as JAMF Connect package.  

I have run into an odd issue where on some machines complete the S1 upgrade and some machine fail it after the agent is installed (hence the S1 console sees them online and on the correct version).  It seems like a permissions issue that I don't know how to tackle.This is the install script - This is the one I decided on using.This is the upgrade script - Alternate scriptWIth the install script, I got 3 Macs that Completed and 11 that failed.Successful. Not successful. This is the error:Script result: installer: Package name is SentinelOne installer: Upgrading at base path /installer: The upgrade failed. (The Installer encountered an error that caus installation to fail. Contact the software manufacturer for assistance. An ur error occurred while moving files to the final destination.)I guess I'm confused as to why it completed on 3 Macs but failed on 11 Macs.  Same script.  Same everything...Any help would be appreciated.    

I have about 30 mac mini's in asm that's pointed to jamf server, but these are not in jamf pro - we did go over our device count license in jamf pro but since our rep has added some, wondering how i can get them in jamf now, will i have to unbox them and reinstall the OS

Hi all, been looking around the past few weeks on some information on getting Tableau and JAMF to play nice so I can make use of Tableau's nice visual reporting for our environment. Haven't really found anything substantial. I did find a JAMF Marketplace post (https://marketplace.jamf.com/details/jamf-tableau-integration/) but all the links seem broken, and it looks to be catered more towards On-Prem environments anyway. Wondering if anyone has had experience on using the two together? Thank you!