Hi,I'm seeing an issue with NVivo 20.7.0 and even the previous version that I packaged - 20.6.2. The issue is that when I try and start NVivo it says:NVivo needs permission to access data on your computer before it can run.Click the button below to open your computers Security & Privacy preferences, give NVivo Full Disk Access, then restart NVivo- I use a Configuration Profile to give NVivo full disk access.- I only get this pop-up on M1 machines - not Intel ones- For Intel machines, I've tested on Mac OS 11 and 12 - no issue. On Apple Silicon (M1) computers I've tested with Mac OS 12 and get the pop up.- I tried unscoping the problem machines from the Configuration Profile and adding NVivo manually for Full Disk Access in System Preferences > Security & Privacey > Full Disk Access but no change and can't get NVivo to start- I read this post https://forums.nvivobyqsr.com/topic/10209-i-have-given-nvivo-full-disk-access-but-it-still-will-not-open/ in the QSR User Forum and

Is anyone else having issues loading the Azure AD Integration docs link?  https://learn.jamf.com/bundle/jamf-pro-documentation-current/page/Azure_AD_Integration.html. Whenever I try and click on link to it, i get a little backwards progress bar that says "Network Error".Also anyone that is using Azure AD under the Cloud Identity Provider, are you able to access create tokens for API access via command line tools or the GUI on server.com/api?

I have a simple dock addition policy, it completed successfully but does not show the self service app on the dock afterward. the after policy user interaction pops up as well I tried killall Dock as well and nothing changed I added the Dock item via Jamf Admin and then pointed to it for the Dock Items attribute of the policy

I am currently trying to test the new features of JC with the 2.25 release and Okta OIDC.  We have successfully been using the "old way" with JC and "Okta Classic" via Authentication API.  In Jamf Connect Configuration app under "Identity Provider" I have selected Okta (OIDC) and filled out the appropriate fields:OIDC client ID:ROPG client ID:Tenant: Can I just put the Tenant ID here or does it need to be a URL/TenantID? I have tried both ways and still getting an error I am getting a connection error when testing the new OIDC connection prob because I have not properly configured something correctly. I have not filled out anything in the "Advanced OIDC" section of the Configuration app. I have Jamf Connect configured in our Okta environment via OIDC configurations and as mentioned above we have been using it successfully via the Okta API Authentication previously. 

Hello Jamf NationMy boss lost their Mac book Pro and is asking if our MDM Jamf Pro 10.47 can find itThe pre-stage enrolment does require location services be enabled but I do not see anywhere to look for the laptop from Jamf ProIs this a function of Jamf Pro or can this only be done iCloud > Find My app?I don’t believe they set up iCloud

I am using Composer 10.38.3 to make an installer of Karabiner - Elements, but I keep getting prompted for "System software from application 'Karabiner-VirtualHIDDevice-Manager' was blocked from loading". I am using the snapshot method to capture the installation which I am allowing said software to install. Also I have modified the owner/group to root/admin and applied to all sub folders and files. However, whenever I run the Self Service install, I still get prompted for the "Allow". The software does require Security & Privacy Input Monitoring which I have created a configuration profile for. I still think this is a permissions issue.

Hello, I am attempting to upload two different .pkg files into Jamf School for distribution to the macOS devices in my environment. While uploading the packages i am receiving the following error "Error: This is not a product archive, parsing component packages is not yet supported" I have tried different version of the file and I also used pkgbuild to build a .pkg from a .dmg mount. Any help is greatly appreciated!!

I've setup our JIM and LDAP Proxy on an AD box with an external IP address and an externally resolving DNS but Jamf keeps saying it's unable to connect to the LDAP server when using the Test button. This JIM has one IP but dual DNS since our AD does not resolve externally. I use our InfoBlox DNS which can resolve externally to provide an externally resolvable DNS. The DNS are something like jimmy.ad.company.com and jimmy.company.com respectively. When I do a reverse lookup of the IP from the JIM itself it provides the externally resolvable DNS of jimmy.company.com This DNS name is what shows up on the Jamf side and it checks in about every minute. Below is the log from Jamf Pro (we have a cloud instance). Any ideas? Thanks. 2019-09-06 19:16:42,851 [ERROR] [ina-exec-17] [LdapDirContextFactory ] - javax.naming.CommunicationException: jim.rice.edu:8389 [Root exception is javax.net.ssl.SSLException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnch

Hi all. I can easily create a smart group to determine which Macs are running 13.4.1, but what about 13.4.1 (c)? Is there a way to tell which Macs have that update installed? Thanks

I'm trying to put together an Extension Attribute that will alert me to whether zscaler is logged in or not.This is what I've come up with.  It works when run locally, and I thought it was working when run through Jamf but I'm noticing that machines are now reporting back as "No" when I have checked and zscaler is correctly logged in.  Just wondering if anyone else has an EA that they use or could tell me what's happening.Thanks#!/bin/bash currentUser=`ls -l /dev/console | awk '{print $3}'` if (security find-generic-password -l 'com.zscaler.tray'); then echo "<result>Yes</result>" else echo "<result>No</result>" fi exit 0

Hello friends,I need to uninstall Carbon Black on all company devices. The app bundle includes a shell script to uninstall it, so I thought I could run a command with the Files & Processes payload of a policy. It looks like this:sh /Applications/VMware\\ Carbon\\ Black\\ EDR.app/Contents/Resources/sensoruninst.shIt works, but the user gets prompted to approve deleting the system extensions.  I tried copying the sensoruninst.sh and pasting it into a script in Jamf, then adding the script to a policy. That does not work, returning this message:VMware Carbon Black EDR Uninstaller Copyright 2016-2021 VMware, Inc. All rights reserved Uninstalls the VMware Carbon Black EDR sensor. Must be run as root. Options: -d [ d ] Keep local sensor data. Maybe what I want to do is not possible but I thought I'd check here. Do any of you know if it's possible to uninstall this thing without user intervention? Any insight and suggestions are welcome.  Thank you 

I'm trying to deploy Maple 2021 to MacOS Big Sur.  The software actually installs fine if I watch the application folder in Finder.  However, as far as self-service is concerned, it just keeps spinning in process indefinately.My policy caches my pkg to a temp folder.  I then run the post install script:#!/bin/shcd /users/shared/Temp/Maple2021.1MacInstaller.app/Contents/Macos./installbuilder.sh --unattendedmodeui minimal --mode unattended --licenseType network --serverName REDACTED --portNumber 27003 --enableUpdates 0 --checkForUpdatesNow 0 After this, another script to remove the installer runs:#!/bin/shrm -rf /users/shared/Temp Any suggestions?  I'm a MacOS and Jamf novice, so I'm assuming I'm doing something incorrectly

Hello everyone,Hope everyone is having a good week.I have a simple question to ask. I'm trying to install an application called Gytpol on a Mac and I'm getting this error. (See screenshot 1) - When I click on: "Open Anyway" the same error still appears. I checked the GateKeeper settings and the options needed to bypass this error have been enabled - (See screenshot 2). I was wondering if there's another setting that I need in order to get this processed? Obviously, I don't want to bypass Gatekeeper with the spctl --MASTER-DISABLE command and disable GK since this install is going to be added onto other users. Thanks team.

iOS 14 reached EOL almost two years ago but Jamf Pro still supports it. My InfoSec team has asked that we prevent our older iPads on version 14 from enrolling. I figured it would be in the pre-stage enrollment settings but alas, have not found it. Is it located somewhere else or simply not possible?

Hi,The title almost points out the complete issue... When adding an App through "Mac Apps > Jamf App Catalog >"  I don't get the option "Distribution Method". Also I don't have the tab 'Self Service'. The only tabs I see are "Configuration settings" and "User notifications":So I am not able to offer App installers through Self Service.Any ideas?

Hi, Has anyone ever tried to pull the expiry date of any Certificate? I can see it is in my Keychain and also can see the last date there. But I need to find a way to pull report from all Macs and send out notification based on expiry date.Unable to pull this info. Any ideas?

I use macOS VMs a lot for testing. For general policy testing, macOS VMs running in the Apple Silicon version of Parallels work great. One huge limitation of Parallels on Apple Silicon is that there doesn't appear to be a way of creating a macOS VM that is running an earlier version of macOS. On the Intel version of Parallels, I can download the installer app for the version of macOS I want such as 13.3.1 using either the Download Full Installer app or the "softwareupdate --fetch-full-installer --full-installer-version" command, and then use Parallels to select that older macOS installer for my VM. The Apple Silicon version does not appear to allow this. Does anyone have process for this? I have kept older macOS VMs that I made a few months ago saved so I can use them for testing software update policies and workflows, but this is getting annoying. There are many limitations in Parallels for Apple Silicon that don't seem to be getting fixed any time soon. I have tried VMware Fusion on

How do you guys rotate your FV 2 recovery keys?! any ideas?

The current Jamf-managed Firefox ESR patch management definition is missing Firefox ESR 115.0 and 115.0.1. These were released nearly a week ago. I put in a support request but the ESR patch management definition has still not been updated. I was trying to avoid creating my own definition just to push these versions but it may be necessary at this point. Should I go ahead with creating my own or is there a reason these are delayed?

Hi,  I created a smart group to get the list of devices inactive > 180 days, but then there lot of devices ready for deployment and after exclusion we identified 150 devices whose license we can safely removeBut the issue is to how to create a smart group or static group by importing the data from excel ?

Hi, we're currently running our mac's with automatic install scripts via jamf.Our users don't have admin privilegues. When they update Slack (which is simply a new installation of the most recent client), it always shows the dialogue mentioned in the subject or attached screenshot on every app start, until someone types in admin creds.If you click on cancel, the app still starts. But the pop-up on every start is still anoying. I do get an output from terminal saying: May 10 11:58:30 Slack[21065]: DEPRECATED USE in libdispatch client: dispatch source activated with no event handler set; set a breakpoint on _dispatch_bug_deprecated to debug May 10 11:58:30 SecurityAgent[21094]: objc[21094]: Class TKTokenRefImpl is implemented in both /System/Library/Frameworks/Security.framework/Versions/A/Security (0x7fff9712afa8) and /System/Library/Frameworks/Security.framework/Versions/A/MachServices/SecurityAgent.bundle/Contents/MacOS/SecurityAgent (0x10522fce8). One of the two will be used. Whi

My organization sometimes has users open up tickets whenever I a new minimum OS version in our Nudge configuration profile due to the software update window never loading its contents, thus not allowing users to update and badgering them with Nudge notifications. I've created a kickstart policy that runs sudo launchctl kickstart -k system/com.apple.softwareupdated; softwareupdate -l This has fixed the issue of software update not loading its contents, but I was wondering if it was possible to trigger this policy whenever I make changes to the Nudge configuration profile. This way the kickstart command would run after changes are saved in the configuration profile.

Hey everyone,  Is there a way to disable the Profiles pane in Ventura macOS? I don't want non-DEP Mac users to mess around with it and remove the MDM profile.Thoughts?  

Hi all,  Referring to this macOS installer script.macOSUpgrade/macOSUpgrade.sh at master · kc9wwh/macOSUpgrade · GitHub  This script works fine for Intel Macbook upgrading to macOS Monterey 12.0.1.  But it does not work with Apple Silicon Macbook 😞  When attempting, I get the following error:Error: failed to authorize for installation. Provide a password with --stdinpass or --passprompt.By using the agreetolicense option, you are agreeing that you have run this tool with the license only option and have read and agreed to the terms.If you do not agree, press CTRL-C and cancel this process immediately.Investigating further, I run the following in a M1 Mabook's terminal./Applications/Install\\ macOS\\ Monterey.app/Contents/Resources/startosinstall --agreetolicense --nointeraction --forcequitappsError: A method of password entry is required.Usage: startosinstall.....The error suggests I need to supply admin username and password via --user, an admin user t

5.4.1 (58698.1027) was released yesterday (28 Oct 20). Patch Management for our JAMF instance doesn't show this. It only shows the 5.4.0 update which was released on the 26th. It says that's the latest version. That's wrong. 5.4.1 is the latest version. 5.4.1 is installed on 60 machines and right now those are being reported as Unknown versions. What's up with that? How does JAMF update their patch management for latest versions?