Hello,I'm fairly new to jamf pro / protect and just took over partial responsibility for a tenant. I noticed, that lots of devices do not have the most recent Protect version, even with "automatic updates" enabled. (Most of them on os 12+)They check-in daily and I can see them as "connected" in Jamf Protect. Do I have to push the updates manually or is there something else at fault I haven't thought of?Thanks,Georg

We are having an issue with all new enrolled IOS devices. The device is being enrolled correctly, but when we attempt to open self service we get this error. I have verified that we have enough licenses from the VPP. Self service is running properly on our computers just not on IOS devices.

We have SSO enabled which works great. However, I need to create a local account that will use the ?failover url. This is an account for an intern so I can't make it an admin account. I created a custom account with the desired privileges but every time we try to use the ?failover url, we get a access denied. Our backup admin account for the ?failover url works as expected. What am I missing?

We installed Slack using the Mac Apps with the 'Install supporting configuration profiles' option selected. This led to the Alert configuration issue reported here https://community.jamf.com/t5/jamf-pro/jamf-app-installers-user-notifications/m-p/287342Recently, I noticed we now had two Profiles on our devices with the same name "App Installers - Slack". One profile had 2 settings (no update and Alert config) and the other had 1 setting (no update). I tried updating our Mac App configuration by unchecking 'Install supporting configuration profiles' option and this successfully removed the "App Installers - Slack" with the single setting, but the 2 setting Profile is still there. I have tried disabling the deploy and that did not remove the legacy profile.I have looked at other options to try and remove this profile but nothing is working since this is a signed JAMF Software profile and not one of ours. This is causing a lot of complaints from our user base since they want

Does anyone grab the Office VL installers from the following site = https://macadmins.software/based on what i see Office 2019/2021 use the same installer 16.57.0 ?but different Volume License serializer depending on what version you are licensing? so if i install 16.57.0 and run the LTSC 2021 License serializer it will be running Office 2021?does this have different features than if i ran the 2019 License serializer?    

Having some issues with Company portal registration and receiving a generic error message which has no proper logs to dive into unfortunately. Deploying company portal via mac apps and targetting all managed clients Afterwards I created a smart group to locate any devices that have company portal installed and targetted a policy to trigger Microsoft Device Compliance.This triggers the policy once the device recognizes that Intune Company portal has been installed.It launches flawlessly, but unfortunately during the registration portion, I do the following and receive a generic error. Company portal launches on its own with the policyI login w/ my corporate credentials and provide my username/password and then authenticate with 2fa.I then receive this generic error below.If I try to force quit company portal, i'm prompted with JAMFAAD wants to use microsoft to sign in .But, upon going through the process and logging in with my corporate credentials again, I am prompted to

I gave deploying printers via the Configuration Profile payload a try. Most of the printers had no issue deploying, but I ran into issues with deploying our more complicated printers.We run Ricoh C6502 MFCs for our follow-me printing and these by standard have a large capacity tray and finisher. We print from the Macs via PostScript.When uploading via Jamf Admin and deploying via Policies, the large capacity tray and finisher options are preserved.When attempting to deploy these printers via Configuration Profile, the tray and finisher settings are not preserved, which causes options for trays, stapling, and other finishing operations to not be present.Wondering if anyone else came across this in their testing or if my printer settings in question have issues. I tried this across Ventura 13.4 and Sonoma 14 Beta 4 and submitted feedback on the latter version.Looking in the /etc/cups/printers.conf, does not appear to be a difference between the Policies and Configuration Profiles install

Is their a way i can configure notification emails to alert token expiration dates?

In the process of removing admin from our users. I want to create configuration profiles for any software app permissions that are devs use that I'm not aware of yet. I can pull applications installed and from that try to find code requirements / team identifiers but that doesn't help without knowing what permissions to give it. This will be a process to research each software. Is there a way I can pull this information at least for the Privacy & Security tab? Checking System Report or these locations I am not finding the info I am looking for exactly. /Library/Preferences//Library/PreferencePanes/System/Library/Preferences/System/Library/PreferencePanes Ideally, I would have a script run in JAMF to collect this data combine it if possible. Thanks for any and all help or thoughts!  

Hi there, So when jamf notified us for APNS renewal, Instead of using the apple id assigned to renew the current certificate on the one on APNS. We have accidentally used a different apple ip and created a new certificate in APNS causing jamf to produce a new certificate on Jamf with a new topic. This has caused the managed laptops and phones enrolled on the previous certificate to lose the functionality to get any remote commands from jamf. The laptops still checking in and working fine, but the remote commands functonality has been lost. We have found the original apple id which was used to renew the certificate now.  My question is if we renew mdm again on jamf with the certificate that was originally used in apns, will it make those devices receive the remote commands again or will it break the entire devices to be unmanaged?  Hope this makes sense, any recommendation will be greatly appreciated. 

is there a way to remove the recovery lock password on Apple Silicon Macs without unenrolling/erasing them?

I've been trying to find a way to package Logic and GarageBand with all of the loops installed and indexed for each user. The apps install fine, nothing weird/crazy to deal with. I download all of the loops and extra content with both programs and make a package from them after installed; I grab /Library/Application Support/GarageBand, /Library/Application Support/Logic, and /Library/Audio, another 46GB of data there. After that I use composer during the indexing and grab a bunch of database files there in the user directory. After making a configuration installing the apps, then the content, then the index I am able to log into users and not have GB or Logic run the index (which is actually what I was trying to do in the first place); however, when I open GarageBand it tells me that a bunch of extras are missing and I have to re-download them. I run through the 6-10GB download process (with composer open) and let it install but composer only shows a few files being touched.

Hey all, anyone know of a way to prevent any and everyone from enrolling a macOS device through https://our.jamfserver.com/enroll without disabling ABM/DEP enrollments? I want to make DEP the only option for anyone to enroll into our jamf and would prefer that the web address just be invalid. But turning off user initiated enrollment breaks macOS ABM/DEP enrollments.  Essentially I want to hide http://my.jamfserver.com/enroll completely or make it non-functional when accessed via a browser, while still allowing everyone in our domain to enroll a new macOS device via ABM/DEP.Any tips? EDIT 12.3.02021: This comment hopefully better explains what I'm looking for. Also updated post title.

Asana application does not have a .pkg file inside the .DMG? any suggestion  Here is the download link: https://asana.com/download 

Preface: Maybe I'm missing something obvious... For DEP deployments, we have an Enrollment Complete policy that waits until a user is logged in to throw up a splash page and custom triggers our big config policy to then do the configuring we want, then it reboots, etc. Here's the logic in the Enrollment Complete script that confirms the user is logged in before kicking off the config: #!/bin/bash until [[ $LoggedInUser != "_mbsetupuser" && $LoggedInUser != "loginwindow" ]]; do LoggedInUser=$(defaults read /Library/Preferences/com.apple.loginwindow.plist lastUserName) sleep 1 done echo "$LoggedInUser has logged in, beginning configuration..." The issue is that the login process begins immediately after the Create User screen, thereby updating LoggedInUser to pass the until loop. This would be fine, but following Create User is the Choose a Time Zone screen. So sometimes, if a user doesn't pick a Time Zone quickly enough, the splash

Hello!I registered 11 new iPads with JamfSchool.After that I wanted to install 8 apps. 5 of the 8 apps installed without any problems.But for "Stop Motion", "Book Creatoer" and "IMovie" I got the message:"This app is not yet in scope for this device, please wait for the update to finish".Which update should I wait for and what happens now?Its iOS 16.1.1Best Regards,Ralph

I have a smart group that looks for invalid FV keys to determine if the key needs to be redirected to JSS: Based on that, it'll run the following script (https://github.com/JAMFSupport/FileVault2_Scripts/blob/master/reissueKey.sh): #!/bin/bash #################################################################################################### # # Copyright (c) 2017, JAMF Software, LLC. All rights reserved. # # Redistribution and use in source and binary forms, with or without # modification, are permitted provided that the following conditions are met: # * Redistributions of source code must retain the above copyright # notice, this list of conditions and the following disclaimer. # * Redistributions in binary form must reproduce the above copyright # notice, this list of conditions and the following disclaimer in the # documentation and/or other materials provided with the distribution. #

Hi Everyone, I was wondering if you can assist me on this matter. I'm trying to setup Nudge and I'm going with option 2 on the GItHub site. My question is, how do I add a Smart Group into a Scope? The only options I have are All Computers or Specific Computers? I was trying to attach a photo to this post as an example but community.jamf.com website is not letting me upload a screenshot. I hope this made sense.   Thanks,Rony    

Hi everyone, We have 2 JAMF Pro environments that are mirrors of each other – DEV and PROD.Our endpoints or DEP enrolled and FV keys are stored per environment. Without wiping and re-DEPing can anyone advise on an automated workflow to move devices?Some insight in re-escrowing the FV keys without decrypting and encrypting would be a win.*We are enabling FV using config profiles. If anyone can provide some insight, that would be much appreciated.

Hi All,looking for some guidance,I have approx 200 systems that where removed from JAMF via script but still have a old MDM profile. I need to get these back into a working state with a valid mdm profile. Is the best way to fix = Wipe / Re-image -> DEP enrolment  or is there another way to fix it ? via script or local steps?ThanksRob

The latest version of Chrome is 114.0.5735.106 (released 6/7) but Jamf is only showing the prior one that was released on 5/29.  Granted we are only a few days out from its release but wondering if that is normal/expected behavior.  

Hi, we have some MBP 16" we purchased in Dec 2022. we were able to deploy a few using the auto-enroll process. we have a couple of devices left. when we try to auto-enroll them now, we are stuck at the remote management screen - when I click on continue, it says retrieving enrollment profile and nothing happens. we are stuck at this stage. I have confirmed the token has not expired. I have put in a new token just as it was to expire after a couple of days.I have confirmed the network setting are OK. I checked the devices under the --> Settings --> Global --> Automated Device Enrollmenthere I can see the serial numbers for the 2 MBPs in question, which shows enrollment done on 17/12/2022. it is assigned to the correct group - SG-MacBook Pro - M1. however, it does not have a device name for these 2 machines. how can i resolve this?

Recently, my organisation had experienced theft of their property on site - an iPad was stolen. In the JAMF dashboard you can see the iPad has been wiped several times and on each occasion it would pull down our MDM profile and all apps that have been allocated to it. How does one go about trying to locate the physical location of the said item?

Hello, everyone,we added our existing MacBooks to jamf via UIE. The devices still have manually installed user profiles under System Settings - Profiles. Certificates were distributed with the configuration profile. Is there a way to uninstall this profile via jamf?Cheers

I did a search and found a couple of scripts, but they look like they're older threads so I figured I'd ask again. I'm doing some tests in Composer with various packages for a few different audio plugins, including Native Instruments. All computers in this lab have Native Access installed (the Native Instruments installer) and then several different instruments/effects/etc such as Kontakt, Reaktor, Guitar Rig, etc. I'm assuming if I package Native Access to be available in Self-Service, it's pretty straightforward and users can then just install Native Access as normal and pick whatever instruments they need to use, and so on...right? Or...am I better off making a package of Native Access + ALL their applications, instruments, etc...which is what we'd ideally like to provide on each workstation)? It would be sizable (like 80G) but we have plenty of hard drive space, so :shrug: .In either case, it seems like it's a pain to uninstall instruments, like if there's some kind of issue a