We have JAMF Pro running for a couple of years, we recently exceeded our licence count so purchased additional licences and applied the new Activation code to our instance. Our instance shows a total devices purchased as 30/270, managed devices as 26/264 and unmanaged devices as 0/0 so we do have a surplus of licences.BUT we have an alert through the lightning bolt to tell us we have exceeded our device count.Has anyone else had this issue? Any ideas on how to resolve the annoying error?

Hi all,Is there any option to play with Screen Saver time to enforce maximum minute and let users to set it up by themself, instead of enforcing a policy with fixed timing as attached screenshot?Thank you! 

We're in the process of testing the Device Compliance piece in our Jamf QA and after making the changes, we get an error when we click on the Device Compliance setting. The error comes up right after clicking on it.  

I am attempting to deploy Slack to our macOS Ventura devices via a curl script. When a user launches the app for the first time, they get a pop-up that says '"Slack" is damaged and can't be opened. you should move it to the Trash. '  This is only occurring in Ventura. If I download the software manually through the same URL I am calling in the curl script and install it normally, it works fine. Is there something new I have to do to get past the gatekeeper in macOS Ventura? This worked in Monterey. The script in question:#!/bin/bash # this is the full URL url="https://slack.com/ssb/download-osx-universal" # change directory to /private/tmp to make this the working directory cd /private/tmp/ # download the installer /usr/bin/curl -L $url -o slack-desktop-latest.dmg # mount the dmg hdiutil attach slack-desktop-latest.dmg -nobrowse # check if ~/Applications exists and create it if not DIRECTORY=~/Applications if [ -d "$DIRECTORY" ]; then echo "$DIRECTORY exists" elif [ ! -d "$

I'm trying to set up a configuration profile to put some iPads into Single App Mode. Every time I go to Options > Single App Mode, it freezes.  Even when nothing else has been configured in the profile, it will freeze as soon as I go to the Single App Mode setting. I've tried multiple browsers but it happens no matter what.  Any suggestions?

I have an app PKG file to deploy as a Policy in Jamf Pro.  The app requires a certificate be placed on the Keychain and some System Extensions be configured.  I can deploy the certificate and extensions as part of a Configuration Profile.  Is there a way I can deploy both to a user's Mac so that they will have them at about the same time?  

Does anyone know of a way to make the Autolock time longer than default on a shared iPad deployment? Students are complaining that it locks the device too quickly when they are referencing it as a textbook.

Hey everyone, I have a question about Jamf Pro hosted on site. Currently, we host Jamf Pro on a Windows Hyper-V instance with the public IP address directly on the network adapter of the virtual server. Our Internet Service Provider has informed us that we will no longer be able to have a public IP address on the physical adapter on our equipment without major changes to our network. If we did not want to make these major modifications, we’d need to set a private IP address internally/on the adapter and use a translated address for outside access to Jamf Pro and Web services. I am curious how if we went to this Private IP how it would affect our Jamf installation. I know that I can set a custom Forward Lookup Zone in our Windows server DNS servers to make the domain work internally, but will this have any drawbacks if our Jamf Pro URL is resolving to different IP addresses internally versus externally? Is the Jamf Binary, Apple MDM, and/or macOS DNS smart enough to re-resolve the

Hi, I have written a script to install CS falcon on Mac via JAMF, but script successfully install the CS falcon on Mac system but "Falcon” Would Like to Filter Network Content" in network extension and "The System Extension Blocked message" in Security & Privacy, which need to "Allow" manually.   Need help to correct the script for automatically run the process without user interaction, following script. #!/bin/bash # Set the installation parametersCLIENT_ID="YOUR_CLIENT_ID"CLIENT_SECRET="YOUR_CLIENT_SECRET"INSTALL_TOKEN="YOUR_INSTALL_TOKEN" # Define the installation directoryINSTALL_DIR="/Applications/Falcon.app" # Define the Crowdstrike bundle identifierBUNDLE_IDENTIFIER="com.crowdstrike.falcon.Agent" # Define the Crowdstrike team identifierTEAM_IDENTIFIER="X9E956P446" # Copy the Falcon Sensor packagecp /private/tmp/ # Install the Falcon Sensor packageecho "Installing Falcon Sensor..."sudo installer -pkg "/private/t

Hi everyone, I just reinstalled Mac OS on my MacBook Air, when I tried to enroll my MBA to JSS, it tells me MDM Capability: No I've checked my certificates, none of them expired. and just did a push diagnostic and it pass too Any idea?

Hi all, I'm trying to make our cofiguration profile work for our macbooks. I'm noticing for new Macbooks to be enrolled, I get MDM Capability = No. Verify MDM Enrollment = Enrolled. With MDM Capability = No, it mean none of the Configuration Profile would be pushed to them. I've read on past JAMF Nation discussionshttps://jamfnation.jamfsoftware.com/discussion.html?id=19266https://jamfnation.jamfsoftware.com/discussion.html?id=11948 that this push MDM actually is dependent on Apple, and running sudo jamf mdm may trigger it to work. But when I do run /usr/local/bin/jamf removeMdmProfile/usr/local/bin/jamf manage/usr/local/bin/jamf mdm all I get is Verify MDM Enrollment = Enrolled. Any other ideas on how to activate this MDM? Right now half our Macbooks have MDM, but the other half have this turned off. I'm puzzled as to what is required.

Hi, very new at supporting Jamf and we have a small issue (more an inconvienience for our users) Two issues really:On login our users, when signing in using their azure creds and authenticator app are then prompted for their AzureV2 password rather than just letting them continue the sign in. Is this behaviour expected or are we looking at how our access rules are configured in Azure? Interested if anyone else has seen this behaviour before?

Hi all,I am trying to deploy Cynet on several macOS machines with pkg and then grant full disk access on each machine remotely using Jamf pro.Can you please help me on how to do it? Thanks! Ben.

Still trying to wrap my head around how this works.  I have an enrollment process in place where I can send a user new in the box mac and it pretty much sets up itself, we have to have FileVault encryption and we are using Azure with MFA.  After everything is completed if the user reboots they are presented with the FileVault login, then it brings up the Jamf Connect login to Azure which will prompt for MFA.  Is that the expected behavior?  

Hi All,We currently are using McAfee Endpoint Protection and we would like to at least have it update automatically.Able to know if there is a script that we can use to do just that?Sorry as I am literally new in scripting.

Hello everyone,We have standard Intel/M1 accounts (non-admin) (OS: 10.14.6 to 12.6.1).Could you advise how best I can grant them admin access to make the upgrade ?Thank you.

Hello There, I want a policy on JAMF that all Mac users' laptops will auto-restart after 25 days.If anybody has it please do post.Thanks

I am wanting to create a smart group that will show me all the Macs that are capable of running Big Sur, not actually on Big Sur, but could upgrade to it. Is there a way to create a smart group that I can filter out the most recent version of macOS the device is capable of running?  Thank you

Hi All, Looking for a way to sign our users out of the AppStore and iCloud as we plan on restricting those going forward. Found a few discussions like This Post but it doesn't seem to be working on El Capitan. We've noticed the ~/Library/Preferences/com.apple.storeagent.plist file doesnt seem to exist anymore as well. Has anyone had any success doing this?

I recently setup JC/Okta and have been testing this setup in a Jamf sandbox environment.  When test users login to their Macs we are seeing the Okta login screen, which we can use for successful authentication,  but its not allowing us to use any type of two factor authentication for Okta. We typically use Okta Verify app for two factor and I have configured Jamf Connect in Okta via Admin>Authentication Policies>"Any Two Factors".Am I missing something here? 

After 2 weeks now of "remote learning," I still have 1 issue that requires the family to drop the ipad off. Kids are disabling the ipad by entering the screen lock password wrong too many times. Actually, the last 2 it was a sibling that did it on purpose! I just wanted to see if I was missing a way to get the ipad going again from home instead of having to have the ipad dropped off at the school and wiped and re-setup?We have JAMF Pro and these are fully Supervised iPads.

As per the title - if we have a random Recovery Key set and someone accidentally deletes a laptop out of JAMF (and thus removing the option to wipe it and to see the recovery key), how do we wipe and re-build the machine?Without knowing the recovery key we can't boot into recovery options and wipe the disk.

I've been tasked with implementing this change on some remote users. I've had a quick scout around and can't see an easy way of doing this. Anyone got any ideas?

Hello all,I have a JamfPro instance with about 40 Macbooks. Of those, I have 10 devices that are not accepting any management commands. To clarify, all of the management commands and configuration profiles are stuck in pending and nothing that I have done so far appears to have any effect. I have attempted the following in an attempt to fix:Canceling all pending commandsSending a blank pushRenew MDM profileIssuing the command sudo profiles renew -type enrollment via script and scoped into policy in Jamf. Results in  Script result: Error: Renewing DEP enrollment failed: (null) ((null):0)Has anyone else run into this where specific devices are not accepting management commands? Is there any way to fix this without having to physically visit all 10 devices? 

Hey all, I've pieced together what I think are all the steps for using a Notify Screen along with our basic Jamf Connect setup, but it's been mostly a copy-paste from the JC documentation so I'm not confident it's as smart as it could be. We run a very general Jamf Connect login with Okta and are adding a Notify screen to newly enrolled computers to install basic apps on first setup. Some questions I am confused about:Is it smart to have two different Jamf Connect config profiles? One for the initial setup and one for ongoing use?The reason I ask is we have a single Jamf Connect config profile that contains all the login info in: "Jamf Applications" com.jamf.connect.login as well as "Upload" com.jamf.connect for the JC app properties but we ALSO have "Upload" com.jamf.connect.authchanger which contains the default strings of -reset, -jamfconnect, and -notifyWould it be smarter to have one 'enrollment only' config profile that has all 3, then an 'ongoi