We are experiencing an odd issue in Jamf where it is reporting both 13.5 and 13.5.0. I have confirmed that 13.5.0 is not a beta version since the build number is the same across these 2 versions. I have also already tested on a Mac that is reporting in Jamf as 13.5.0 that sw_vers -productversion displays 13.5.Has anyone else been experiencing this issue?

I am in the process of writing a new "make me an admin" script. I know there are others that are available but I wanted to do this myself. Yesterday, I got a version of the script working. It promotes the user to admin, then launches Jamf Helper with a countdown. When the countdown is finished, it reverts the user back to a standard account. That part works perfectly. The next step is to add a function to check if the user is already an admin user. That's where I'm having trouble. If I run this part of the script through CodeRunner, it displays the Jamf Helper with a "Done" button. Obviously, the variables defined are working. My Jamf Helper syntax is correct. The if statement that contains the Jamf Helper configuration works. What will be added later is an "else" to elevate the standard user to admin, then launch Jamf Helper with a countdown. When I have these two steps working, I will go back and add in the ability to demote any additional admin accounts that the user may have added

Hi everyone,I created a policy to install Google Chrome using the Installomator script and accidentally scoped it to all computers instead of just newly enrolled devices. Some of my staff report Chrome installing fine and no other issues. Others are saying they get the prompt that Chrome is installing, it closes Chrome, and then says it updated... 30 minutes later, they get the prompt again and it closes Chrome, etc.Is there a way to kill the process so it stops trying to install Chrome?Let me know if you need any information from the script I am using or the policy I created, etc.  

Hi! We are looking for a way to enable our user to enroll new macs onsite with our corporate wifi.WiFi is a SSID Hidden WPA2-Enterprise, so users have to use their AD credentials to connect.During Zero-Touch-Setup when the mac setup is prompting the user to connect to a wifi, majority of them are not able to connect a hidden ssid wifi with ad login on top, macOS prompts for the password which user have to leave blank, press enter and then gets asked for their AD Credentials.Or we have issues with the wifi after Initial deployment when the user made it to the wifi and the macs are terminating the connection right before Jamf Connect. How do you guys handle this? A separate "Setup Wifi" and pushing the right corporate wifi after setup with an config profile? Seems not ideal, so we are open for inspiration :) 

Hi I want to add an App but it is not listed in the Jamf list. Is there a way to do this? it about this application https://www.papersapp.com/Thanks 

I have a script I am using for creating website shortcuts on the desktop. My manager doesn't like that they all end in .webloc and asked if I can hide the extension, which can be done in the Finder. The only way I found to do this is using AppleScript command set extension hidden. I have no problem running the following script as myself (removing the sudo -u $logged_in_user). It creates the shortcut and hides the webloc extension. But no matter what I cannot figure out how to get this to work when running the script as root. Since the script will run from JAMF it will always run as root. Any help with this would be appreciated.    #!/bin/zsh logged_in_user=$(/usr/sbin/scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ {print $3}') webloc_filename="Apple" webloc_address="https://www.apple.com/" shortcutPath="/Users/${logged_in_user}/Desktop/${webloc_filename}.webloc" webloc_data='<?xml version="1.0" encoding="UTF-8"?

Hi everyone,Combing over articles, including this one: http://www.cainehorr.com/jamf-workflow-for-tenable-nessus-agent/.Is anyone using an extension attribute that tells you what host the Nessus Agent is currently linked to? This way we can see if it's incorrectly linked to the wrong host in the EA, then send a policy to re-link the Macs to the right host.Currently using the EAs below ok:• Nessus Agent Installation Status• Nessus Agent Service Status• Nessus Agent versionThank you!

How would I remove a user associated to a laptop? They just received a new laptop, and I'd like to remove them from the current laptop so It can be redeployed. Additionally, whenever I try to make changes to the laptop (like renaming it) I receive a prompt stating the user will be added to a group or other changes could be made to the user.  

Our cloud asset was recently upgraded to 10.27There are new Patch Policies available and a handful of "Legacy" and "Deprecated" Software Titles. I'm seeing EA errors for the Patch Management of Microsoft AutoUpdate and for Mozilla Firefox. I'm no EA wizard, but I don't see anything obvious in the EA provided by the Patch Management. Anyone else seeing this?

When migrating from jamf on-prem to cloud, devices are first unenrolled from on-prem.  Which means they loose every Configuration Profile for system extensions, PPPC, 802.1X etc.  Users get the notification prompt to enroll into jamf cloud and if they click through that it does migrate them successfully.  But is anyone aware of a process to make this smoother so users don't see dozens of other notifications/prompts while they're in the "limbo" state? I saw Rocketman Tech had a workflow using DEPNotify that made things a bit smoother.  It did look like it was able to hide all of those notifications (at least during the demo https://youtu.be/ZTbv5ZvI3pI).  But on current versions of macOS there isn't a way to stage profiles that remain after unenrollment as far as i know.  So the only option i see to help with all the prompts would be to use AppleScript to close out the undesired notifications.  I don't know how well that would work since that

Hi all,I’m having an issue trying to get a machine to register to my intune. This issue is only happening to one computer and all of the others are working fine which leads me to believe that the issue is within Intune. Please kindly share your thoughts on this issue on where to check in intune or Jamf. (See screenshot) Thanks. 

Ex.A user brings their device (BYOD) -- They log into the MacBook that's under our JAMF control, and it automatically adjusts settings they may have set for things. Semi-new JAMF user here.

Hey, I am searching for a method how to use patch management with Cisco Anyconnect VPN. Since it is not available in the standard jamf catalogue. I know you can create your own patches with the Title editor.But therefore I would either need an external source or a json file with the settings since I never created this before.If someone maybe has some information or hints I would really appreciate that

If I write a script using an if statement, and use "then exit 0", what would I enter after "else" to make the script continue running if the result of the if statement is a different value? I thought I knew how to do this but I can't think of it. 

- 2020 MBP 13" 4x Thunderbolt ports- Active Directory bound- Enterprise Connect for password sync- FileVault 2 configured (via mobileconfig profile)1. User was prompted to update AD password2. User set new password with Enterprise Connect, as instructed.3. FileVault unlock screen does not recognize new password, only the recovery key (escrowed in Jamf), and the user has immediately forgotten their old password, so I can't test if that would still have worked.4. Thinking this is some kind of AD/Keychain disconnect, I nuke the user's keychain.5. This doesn't resolve the issue, so I unbind & rebind to AD.6. This doesn't resolve the issue, so I create an exception and remove the FV mobileconfig profile, and manually turn off/decrypt FileVault, reboot, log in, remove the exception in Jamf Pro and re-enable FV. A new recovery key is escrowed.7. User's current password still doesn't unlock the volume on reboot. New recovery key works.8. I exchange the laptop to get the user up to speed, a

I noticed Adobe CC no longer being readily available in Launchpad for our end users after re-imaging to Ventura. Adobe says it's an Apple issue, which makes sense since that is the only thing that has changed, and was my original guess. I can manually create a new shortcut based off the actual application deep in the Utilities folder, but that's not a feasible solution for several hundreds of devices. I've triple checked to confirm Adobe installs correctly and with the most updated version, but Launchpad doesn't see the Adobe CC shortcut that is made in the "Adobe Creative Cloud" folder (also contains the uninstaller shortcut) at time of installation. Instead simply using the Launchpad, it has to be Launched from inside the Applications folder. Our users will give us some blow back at us for not having it exactly the same as last year and for it being "more difficult" for the students.Anyone else experience this and come up with a solution, or have a script to create a shortcut in

I am working on an extension attribute to check if Aternity is installed, running, and its version. I have to write it this way to take into account the two possible install paths for the agent while we roll out the newer version. I keep running into an error "CFBundleShortVersionString", Does Not Exist". This is being generated from the version check in my script. I have visually confirmed that "CFBundleShortVersionString" DOES EXIST!!! I can run the command in Terminal: version=$(/usr/libexec/PlistBuddy -c 'Print :CFBundleShortVersionString' /Applications/AternityAgent.app/Contents/Info.plist)When I type echo $version, I get the correct result.Only when I run the whole script in either Terminal or CodeRunner does it give me that error. Here's my EA. What am I doing wrong? #!/bin/zsh # Is Aternity installed? Is it the older version or the newer version? agentOld=(/Library/Aternity/Agent) agentNew=(/Applications/AternityAgent.app) if [[ -d $agentOld ]] || [[ -d $agentNew ]

Is there a way to remove or trigger the 'forget this network' command on a certain SSID with a policy? I deleted and recreated one of my configuration profiles for a wireless network thinking it wouldn't be removed from the current devices, but it was. Until the profile is installed again on the iPads I have been connecting them to a different SSID so I am hoping to be able to remove this via JSS after the profile is installed.

Can anyone help me out in figuring out how to Cisco Umbrella Root Certificate via JAMF.  The link from Cisco only shows how to deploy the certificate on a single machine.Install the Cisco Umbrella Root CertificateAny help would be really helpful. Thanks

Is it possible to add some basic logic to the Jamf Notify script? In my scenario, I'm using it as a first boot installation of a few basic apps and one of those is Zoom. Infamously Zoom doesn't have a universal installer so depending on the architecture it'll need one of two saved packages installed from Jamf Pro.Is it possible to read the processor type in the script and add an if/else section to install the correct pkg? I had messed around with it some but it was failing and I wasn't sure why, but it was my first time testing with the Notify Screen so I wasn't sure what I was doing. Thanks everyone!

Hey Community, Has anybody put in place a script that is used in a policy so it can display computer info and this through Jam's self service?  Any input is much appreciated! Thanks. 

Hello, I searched Jamf Nation for a similar issue and came up short, if I missed a post that would provide info please let me know.  My networking lead has brought it to my attention that a 3rd party company that does occasional network scans on our network to keep us compliant in things like, number of O365 licenses, Oracle licenses, etc has spotted an issue with our Mac's.  At first they mentioned there was a feature in Jamf that was simply a check box that would allow SSH commands to be let through, which are blocked by default in Jamf.  But the tech claims the console has changed a bit since he last worked with Jamf and isn't sure where to go, I Googled it, ran it through GPT4, and can't seem to find an answer.  Is there a simple way to open Port22 or SSH for network scanning to be performed on our Mac's that are currently enrolled in Jamf?Thanks a ton!Kerry

This only affecting one user, but thought I would see if anybody has seen this. The user is 16.74 and has been for over a month and last week he started having an issue after creating a new email, his signature would be really small to the left and when he would open an email and hit reply, the body of the email does the same thing.  

Hi, we are facing a problem when we install or upgrade the BeyondTrust PMC agent, the splash window (the JamfConnect login window) is not loading after the restart. is there anyone that experiences this issue? also, we tried to run this command after the installation - "/usr/local/bin/authchanger -reset -jamfconnect"but it's not working every time.  

Hello everyone - I have created an interactive Apple Script that prompts a user to input their username and it works w/o issue in terminal, but when I have it in Self Service the GUI doesn't come up unless I hit cancel, but it still works which is a plus, but I rather it work like it should and not be a happy little accident. Also this same script when setting it to run after enrollment completes I get an error of "Script result: 95:158: execution error: No user interaction allowed. (-1713)" Which I believe is because the script is being ran as root? Here is the script in its entirety. I appreciate you all.#!/bin/bash# Prompt the user to enter the new computer nameIFS= read -r -p "Enter the new computer name using department abbreviation and asset tag (Ex:DEPT-123456): " newComputerName# Execute the AppleScript using osascriptosascript <<-EOF-- Prompt the user to enter the new computer nameset newComputerName to text returned of (display dialog "Enter the new computer n