During setup of a new mobile IOS device, I am prompted for the region or country. The answer is always the same- United States for us. Is there any way to set a default country or region instead of scrolling through 10 pages of options? I've looked through the pre stage enrollment settings and didn't see anything. Thanks in advance,Robert

Hello, I went and looked through all similar threads but didn't find any experiencing my issue.  I tested the 'Wipe" feature on my Macbook before performing the command on a user who locked himself out of his Mac and forgot his password and had some questions about the process.  When you hit Wipe, it prompts to enter a remote wipe passcode, and there is a box above that says "Clear Activation Lock".  I left that box unchecked and just entered 123456 for the PIN.  But when I sent the command it just nuked my machine and reset/reformatted my Mac, it didnt ask for a PIN code or display any message.  Is this PIN not needed when you do not check the Clear Activation Lock box?  And also, should I be checking the Clear Activation Lock?  And my last question is after the factory reset, the device now shows 'unmanaged' in Jamf Pro but on Jamf Pro's website it claims that the Wipe will not unenroll the device.  So theoretically if I had done this on a

I use Apple Configurator and Imazing Profile Editor to create configuration profiles.If a configuration profile was pushed out with "Prevent users from removing this profile" as true, can JAMF still remove this profile?  Isn't this just so users can't remove it locally on the workstation but the MDM server still can ?Also If pushing out the same configuration profile with same Payload ID to a workstation that already has it, won't the profile just be overwritten with the newer one?   Or do I need to remove it first and then push it out again if I make changes.I know I can just push out another restrictive profile but I like to keep the profiles to a minimum.Just curious on what exactly would happen.  Appreciate any feedback.

I am trying create a policy to uninstall Citrix Receiver on my macs. Unable to add uninstall.app into jamf admin due to error message "not being support in Jamf Admin". I little experience creating scripts. Trying to create script but unable get script to run. Wondering if anyone has script for uninstall citrix receiver

Hi Jamf folks, is anyone doing change control across their jamf policies? We are looking to ensure that there's no unauthorized changes to our critical policies, and that they could be audited periodically.If anyone is doing this and could point me in the right direction I'd greatly appreciate it!

Hoping someone can help me out with this - I need to drop a file in ~/Downloads when deploying software during our automated enrollment. We use Slack for internal messaging, and there is a preconfigured Slack token that will populate our Workspace URL - in order for Slack to read this file, it has to be in the ~/Downloads folder. I've set up a config profile, and given Slack access to the folder, and created one as well for com.jamf.management.Jamf to have access to the folder. It doesnt look like I have the profile for Jamf set up correctly - I can watch the Console logs and see that the package is being deployed, however, its never written to the folder. If I manually place the file there, then open Slack, it reads the token and launches the app appropriately. Any ideas on where I went wrong?

So we have been running the same JAMF instance for 9 years and 51 weeks, and it turns out that the JAMF CA itself has to be renewed after 10 years, so I've got a week to sort out the problem I'm about to describe.My problem is, we are still using a self-signed certificate, so JAMF support has told me that if I renew the CA, all my clients will no longer trust it and will have to be reenrolled. But I already know, from experimenting on my test instance over the winter, that switching over to a publicly-signed certificate *also* drops all my clients.As far as I can tell, there is no way to migrate from a self-signed certificate to a publicly-signed certificate without dropping all your clients. I have googled and I cannot find any documentation anywhere discussing any such process. My JAMF support case seems to be languishing with people scratching their heads.Can anyone point me to steps for migrating to a public certificate without dropping all my clients?(Live JAMF instance is still 1

Does anyone know? I always assumed it meant "just another Mac fanboy", but I have heard several other... creative interpretations. Apparently there is some connection with a book called "Gravity's Rainbow"?

Xcode 14 on Ventura seems to have a different setup than in the past.  When it’s first opened it presents this  and if I click the Install button it promos for admin credentials.  Does anyone know how to preinstall the platform items?       

UPDATE: I have added this script to my gitHub repo. You can find the freshest of the fresh here... Hey everyone! It's been awhile since I've contributed anything to Jamf Nation. I have a script / workflow that I've been sitting on since 2019 that I am finally ready to share... I'm certain many of you use jamfHelper and for the most part, the jamfHelperGUI app is all but a dinosaur sitting on a couple of forked gitHubs out on the interwebs. That being said, I got tired of writing jamfHelper pop-up windows for every workflow that needed one. I wanted something a bit more cookie-cutter... something I could drop into my Jamf Pro Scripts repository and call from within a policy by leveraging Jamf Pro's Scripts "Options" features. So I set out to write a one-size fits all script to assist with the daily grind of pop-up communications. So without further ado, I give you my latest iteration of jamfMessenger... version 3.x... oooh! shiny!    &nb

I am still fairly new with Jamf and I am trying to figure out the various recovery options and when to use them.Currently I am seeing the following four: ConditionUnlock/Recovery OptionUser activates Find My and does not turn it off before returning the device. Activation lock is enabled.Use Activation Lock  Bypass to turn off Activation Lock?Jamf > Computer > Inventory > Local User Accounts > scroll to the far right > Manage > Unlock accountPersonal Recovery Key required to reset passwordJamf > Computer > Inventory> Disk Encryption > Personal Recovery Key ?Jamf > Computer > Security > Recovery Lock Password I am not sure these are all of the unlock/recovery options but I would really like to know the options and the conditions that require them.Thank you.

I started using the new API. For now I'm using basic authentication (with my personal acount) with /v1/auth/token to get a Bearer token. Works like a charm.However, I really want a seperate account, because the scripts run on a seperate VM.However, I just can seem to find an account manager for Jamf Pro. So my questions are:Where do I find the account manager to manage the users which can login to our Jamf Pro instance (xxx.jamfcloud.com)Is the basic authentication + auth-token a good way to authenticate on a standalone VM? 

Howdy!We have Jamf Pro hosted in Jamf Cloud. I am not sure when this started, as this matter was brought to my attention by another team member. However, our Change Management logs are flooded with entries from our VPP Account supposedly editing our VPP object. Screenshot:I did some searches but I could not find a similar issue. The problem is that each of these entries, if I click on the Details button, show the exact same data. Seen here: This entry appears every minute. It is making auditing nearly impossible because it is flushing out previous entries that are actually team members making changes.How can we fix this?Thank you.

Does anyone know what flavor of regex is used by Jamf Pro? I've been using PCRE for my patterns, and haven't had any problems (that I know of,) but would like to get official confirmation just to be sure.

Scenario: Large school with students using mainly macbooks, work is saved to OneDrive. Students are often breaking their OneDrive syncing by using illegal windows characters in file names (word docs ect) causing sync errors and are then requiring a manual fix by IT Staff renaming the files/resolving onedrive syncing. All devices are MDM enrolled, is it possible with Jamf Pro to disable the ability to use special/specific characters when naming files. I did see the following post: Solved: Any way to create a policy to prevent users from u... - Jamf Nation Community - 108934 that hinted it wasn't possible, but this is now several years old and things may have changed. Thanks a lot,JM 

Does anyone know how to create a configuration profile to make sure users are have the preference setting to load CCD on Logon ?  We have users that have unchecked the preference and need to make sure the CCD app loads on logon in order to do the updates. This is especially important on Ventura.Thank you for any advice 

Does the partner device management connector token in in tune also apply to iOS devices, i only hear macOS, but most of my fleet is iOS, in the device compliance in jamf pro it does have iOS and iPadOS.

Before we were able to roll out a profile that prevents students from turning on "Find My Mac", it looks like we have some students that turned this on. I have 2 computers from students who recently left the school and I can't erase the hard drive. I tried from recovery mode and entered the bypass code stored in Jamf, doesn't work. Also tried to send a command from the Jamf pro server but get an error. Will attach the error messages if anyone can advise? 

Hey all!What are the implications, if any, of moving an imaged and in-use machine from one Prestage Enrollment to another? Our scenario:We have ~900 laptops all built with one of three prestage enrollments. Each new PE was setup over time with slightly more settings for our environment and only net-new machines were ever enrolled in the latest PE, so we have have a large mixture of each in our company. We have now built a 4th and if we reimage a machine the biggest pain is going into the PE scopes, unchecking it's old PE, then rechecking it in the new PE. We reimage 4-5 laptops per day so searching for the serial and doing this for each one would get tedious.Our hope is that we could uncheck all machines from the scopes in the three old PE's and just check all machines in the new one. That way they whenever we reimage them (either tomorrow or two years from now) they will image with the newest PE. Will unchecking those machines and rechecking them in the new one do anything?

Seeing an odd issue with one device in the JSS. This device in our JSS that has two entries. One is current, the other has not 'checked in' since March. I can select and delete the currently active device through the console no problem. However, the older entry, when I click on the device name, goes to a new page and says "The page you requested could not be found". I need to be able to delete both entries. Anyone know of a way to delete this stale, false record? Perhaps a MySQL command or similar?

Hi Team,Hope everyone had a great weekend.I have a question related to Patch Management. So I was able add my current package (Ver.108.0.1) to the Definition tab as well as I was able to add some machines to my scope as a 'TEST' along with the target version of the program that I want installed. I was wondering if there's anything else that I need in order to get these machines updated or do I just give them time and they will populate on their own? Here are some screenshots of what I've done so far. - I'm sure there's an answer somewhere on here, but I can't seem to find it. - Thanks. 

Hey y'all! I haven't been able to find a KB article on this so I'm unsure if it's possible.  Is it possible to uninstall remotely iOS apps that were installed via JAMF? If so, could the uninstall also be done in bulk?For example, I have a group of iPads that I don't necessarily want to wipe, but they have some currently unnecessary apps on. I would like to be able to uninstall the unnecessary apps remotely. These apps are not default apps from Apple. 

Hello, I'm fairly new to JAMF so sorry if my question seems redundant. We're currently prepping iPads to be surveyed out, since they have student data our procedure involves wiping the devices (either via Apple Configurator or JAMF Wipe). Is there a way to scan the serial numbers of the devices we plan to restore into a spreadsheet and have them uploaded to JAMF Pro to then be remotely wiped?  The process we have currently works but I was just looking to see if there were any tips to make it go by faster. Thanks! 

I was wondering if there's a way to install the adobe creative suite into the ~/Applications folders to help our non-admin creative users update / install fonts.  I know a lot of efforts can be handled via the creative cloud apps, but they are still finding issues with fonts and 3rd party plugins. 

This is our first JAMF Pro instance being hosted in the cloud by JAMF and we've been hitting roadblocks while getting it set up for the first time using our on-prem Microsoft AD LDAP server. The first block was a firewall issue where it wouldn't proceed past the "Enter Server Info" step using the LDAP Server Assistant. We've got that sorted and it proceeds to the next step of "Enter Credentials," but that is where we are currently stuck and support emails haven't provided much insight and it seems this step isn't a big enough trouble point to be online on forums. We're using SSL with a cert generated from Digicert(also attempted a self signed cert from the server, but can try again if better instructions are found). I've created an AD Service Account just for this connection and have confirmed it exists. I've also tried my personal AD account and it still states "Could not find user." What are we missing here and how can we determine the point of failure?