Hello Community, Hoping someone might be able to help me figure out how a user was able to upgrade their Mac to macOS Ventura when I have the installer being blocked using Restricted Software. Is there a log or something that will tell me what triggered the upgrade? I have seen two users do this now. Thoughts?

Hi engineers,  I am configuring "Cloud Services Conection" but, when i enter my credentials and clic on "Save" message "No assets found for this account" appears. How do I solve it ?? Thanks. 

I am trying to figure out (in detail) how to connect the two. Fortunately all of our computers are listed in ABM but I am not sure how to connect the two systems.In ABM all computers and devices say No MDM Server and Edit MDM Server is grayed out. I can select All Devices and Edit MDM Server but the only option available is to Unassign from the current MDM.Based on what I am seeing is the only option to unassign all computers and devices and then re-enroll them? If so what enrollment option is correct?It is obvious I have not been down this path before so I would appreciate any guidance in connecting Jamf Pro and ABM and getting all existing computers properly configured.

Hi Community/Hi Jamf AdminsWhen you lock apps in the Teacher app, they visually disappear from the iPad. However, they are brought back to the iPad in an arbitrary order when you unlock the apps again. So the order created by the kids is always goneand created folders etc. disappear.Is there any way to change this? Jamf Feature Request ?Thanks for feedback and suggestions.Peter

Hi AllHave anyone updated their JAMF pro from 10.14 to the latest? I know we are way back in pastDue to the end of support for Windows sever 2012R2 have to update the server OS to Windows sever 2019 and need to update the JAAMF as well.have anyone done this before if so Can we directly jump from  10.14.x to 10.44.x without the Incremental Upgrade?What are the important things that I should consider before updating?Thanks

I get many error messages on all computers under Management commands. We do not have nor did we ever have Jamf Protect.  I searched just about everywhere in Configuration Profiles & Settings to no avail. We have a cloud server, not on prem.  I thought I would reach out before opening a ticket. Any way to stop these messages from happening? As far as I know it isn't affecting anything, so is low priority. Remove Jamf Protect PPPC and System ExtensionProfile with identifier 'com.jamf.protect.daemon.pppc' not found. <MDMClientError:89>

I found this thread for an Intune EA, but am getting conflicting information. I check if a user is enrolled in Jamf by navigating to their computer, clicking the History tab, then navigating to macOS Intune Integration Logs. The extension attribute will return "None" despite the user being enrolled with Intune (see screenshots attached).   I have tried to find documentation on creating a smart group based upon the Intune Integration reporting Jamf already has, but have not been able to find any. I also quickly glanced through the Jamf Pro API reference and documentation to see if this could be accomplished via the API but was unsuccessful. Any help would be appreciated! Thank you for your time! 

I'm looking to set up a sandbox instance of Jamf Cloud. Does anyone know how many certificates the APNS portal supports? I'm a little nervous in selecting "Create new certificate" when I have a production instance and certificate deployed. I'm "assuming" that the "Create new certificate" wouldn't impact my current & valid production certificate, but rather be safe than sorry and ask the group. Any impacts to currently deployed certificates when creating a new one in the APNS portal? 

Hello,Could you please advise me on the following?I have Jamf Connect deployed via Jamf Pro (with Azure AD) anf FileVault enabled via a Configuration Profile.At the booting and restarting, macOS login window first appears to ask for Password and then presents the Jamf Connect Window where I supply the Azure Credentials.At the logout, it presents the Jamf Connect window.is it the way it should appear? Since FV enabled, it requires to be unlocked first and then JC login window appears there.if there is no FV, it straightaway presents the Jamf Connect Login Window.(User Migration has been chosen with Jamf Connect Configuration.) Thank you,Arun

Hi everyone,today I came across an error where the user can't login in the SelfService anymore. The authentication in the MacOS SelfService does work.It is strange to see that the logs mentioned further down are basically saying that the login successfully failed.We tested the LDAP connection without any error.    JAMF Pro Version: 10.43.1-t1674743888SelfService Version: 11.1.0 JSSAccess.log:username=xxxxxx, status=Successful Login, ipAddress=xxx.xxx.xxx.xxx, entryPoint=Casper Suite Application JAMFSoftwareServer.log:[ERROR] [Thread-2 ] [lientCommunicationServlet] - Error processing communication content - com.jamfsoftware.jss.exceptions.authentication.AuthenticationException: An authentication error has occurred. I hope someone can help. Kind regards.

Hey y'all,I can anyone add printers via the Jamf Admin-app on 10.42. I can click the menu-button, but no dialog shows up. If I rapidly click it several times I can see a dialog for a split second, but it disappears almost immediately.I see this on all my machines here, MDM enrolled, not enrolled, profile manager enrolled, virtual machine, everywhere.I'm running Monterey 12.6.1 and 12.6, but it happens also on Ventura.Does anyone else see this and/or have a workaround for me?BestMorgan

I have a number of Mac Apps (Office suite and Google Chrome are among them) configured to install when a new Mac is enrolled in our Jamf Pro system. The install of these apps seems to be pretty inconsistent and I'm not sure where they get hung up.Some times, a handful of the apps will install just fine, while others don't appear within a few hours of enrollment. Other times, nothing will install. I've looked at deployment status and they are often sitting in "In Progress" seemingly indefinitely. I've reset my test MacBook several times through the course of the day with no change. I've pushed our policies as well. This issue is not every time, as very occasionally all apps will install within an hour or two and a couple restarts, but happens more often than not.

Recently had a customer report a lost iPad so I did a search for the device to put it in lost mode. When trying to click into the device details, Jamf just spins endlessly. I was then able to click into several other devices with no issue. Restarted the browser, cleared the cache, restarted the computer etc- no change. This has happened before and is extremely frustrating.

Hey all, Hoping you all can shed some light. Essentially, I'm trying to create an extension attribute to simply pull the agent version and build info.https://community.jamf.com/t5/jamf-pro/extension-attribute-tenable-network-security-nessus/td-p/109007 So I'm following the above article related to its extension attribute setup. Deployment is going well but getting Jamf to acknowledge via the setup of an extension attribute is rough for me. Namely in the Nessus Agent Version and Build info:  I'm going awry somewhere so any help would be appreciated if possible.

I am trying to figure out how to deploy a script to our users that deregisters the O365 suite. On the Microsoft site I have found the following Terminal command:defaults write com.microsoft.Word ResetOneAuthCreds -bool YESThis works like a charm when I run it locally, but when I try to run it through Jamf (selfService) it gives no result. I think this might be because the script through Jamf does not run as the logged in user.This is what I have sofar:#!/bin/bash#Remove all Microsoft usersdefaults write com.microsoft.Word ResetOneAuthCreds -bool YEShoping there is someone that can point me in the right direction here.

With a jamf configuration profile, is it possible for web content filtering to only allow urls starting with for example www.youtube.com but blacklist all other sites?

Hello All,We are new in our setup of Jamf Pro and had to remove the Prestage Enrollments config so we could get a computer to our current config to test enrolls. After removing the Prestage Enrollment config and readding the computers we are testing with will not re-enroll using this https://learn.jamf.com/bundle/jamf-now-documentation/page/Re-enrolling_a_Computer_Using_Automated_Device_Enrollment.html as well as a newly wiped machine that is being activated is not going through the pre-enroll process that is configured. Also we are seeing a pop-up now which was not seen before the removing and readding of the Prestage enroll config which states "Confirm Prestage Account Settings Creastion, Prestage account settings creation may take extended time to save. Do not refresh." Click save and it goes through just fineWe ran through a user driven enroll on the computer in hopes it would fix the pre-stage and re-enroll issues we are seeing, it did not. After user enroll initiated a wipe throu

Hi all,I want to write a scripts to auto select Monterey or Ventura installer.The scripts is here:#!/bin/bash### CHECK AVAILABLE DOWNLOADS GET_OS_UPDATE=$(softwareupdate --list-full-installer | sed -n 3p)sleep 1TRIM_OS_VERSION=${GET_OS_UPDATE#*Version: }echo "$TRIM_OS_VERSION"OS_BUILD=${TRIM_OS_VERSION%%, Size*} ### GET THE MAJOR AND MINOR VERSIONS: majorVersion=$(echo "$OS_BUILD" | cut -d "." -f 1)minorVersion=$(echo "$OS_BUILD" | cut -d "." -f 2) ### GET THE NAME: TRIM_OS_NAME=${GET_OS_UPDATE#*Title: }echo "$TRIM_OS_NAME"OS_NAME=${TRIM_OS_NAME%%, Version:*}InstallerPath="/Applications/Install\\ "$OS_NAME".app/Contents/Resources/startosinstall" osascript -e 'tell app "System Events" to display alert "Downloading '$OS_NAME $OS_BUILD' update"'softwareupdate --fetch-full-installer --full-installer-version $OS_BUILD####Variables # Determine the current usercurrentUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /lo

Hey, guys! I am testing our company's FileVault 2 workflow and I haven't been able to use the Institutional Recovery Key, simulating the scenario in which we don't have access to the enabled user's password nor his/her personal recovery key. We have an encryption configuration with both recovery keys. To test it out, I downloaded from the JSS a RecoveryKey.p12 file and put it into a USB drive. Then, booted the "affected" machine into recovery mode, obtained the logical volume's UUID and then ran the following: diskutil cs unlockVolume UUID-OFTHE-VOLUME -recoveryKeychain /Volumes/USBDrive/RecoveryKey.p12 And the response I get is: Error: -69749: Unable to unlock the Core Storage volume It's worth mentioning that this is a Sierra machine, so the drive is HFS. Is this procedure correct or am I missing something? Thanks for your support!

So I am currently working on some API extension attribute based scripts, for use with extension attributes.I have a script working that will do the following:List the assigned number of Computers to a user and List it as a number, under a computer device as a extension attributeList the assigned number of mobile devices to a user and List it as a number, under a computer device as a extension attribute   # get the number of mobile devices assigned to the user UserXML=$( /usr/bin/curl \\ --header "accept: application/xml" \\ --request GET \\ --silent \\ --header "Authorization: Bearer $token" \\ --url "$jamfProURL/JSSResource/users/name/$strassigneduser") #echo "xml results $UserXML" mobileDevicesCount=$(echo $UserXML | grep -o "<mobile_devices>" | wc -l)# get the number of mobile devices assigned to the user UserXML=$( /usr/bin/curl \\ --header "accept: application/xml" \\ --request GET \\ --silent \\ --header "Authorization: Bearer $token" \\ --url "$jamfProURL/JS

Hello all,   I'm wondering if anyone has had any issues currently/in the past with random large amounts of Apple traffic. Yesterday our network got down to 2 MB/s (usually 200+). After some investigation with our ISP, we saw large amounts of traffic coming from Apple's 17.x.x.x IP range and our Firewall CPU usage reaching well over 80% at times and staying. Our ISP specifically said it was from update servers grabbing Apple Img. files. The weird part is we have an update deferral going to all iPads/Macbooks. We are currently going to be throttling our bandwidth to these ranges, but does anyone have any other suggestions? Thanks!

Anyone got a script for Dockutill on Monterey. Our old Python script doesn't work anymore. We are looking to keep the Self Service app permanently in the dock.  This is the current script. #!/bin/shDOCKUTIL=/usr/local/bin/dockutilsleep 10$DOCKUTIL --add '/Applications/Self Service.app' --replacing 'Self Service' --no-restart /Users/$3killall cfprefsdkillall Dockexit 0

Hi, This may be a stupid question but I am new to Jamf and not much of a Mac user. I downloaded Jamf Composer from my Jamf Product page. Version 10.46.0.I get a .dmg file. I run the file on a test Mac and it pops up saying to drag Composer to your hard drive to start building packages. It didn't install anything. So I drag the .dmg file to my Applications folder and run it again. Same message. I plug in an external storage device same thing. USB drive, same thing.I was planning to use Composer to build a .pkg file for Figma as so Figma can be deployed using Jamf.Let me know if maybe I am dragging the Composer .dmg file to the wrong place or maybe it is a bug with Composer.Thanks.

Hi Jamf Community,  Has anyone ever been asked to report on the number of systems that have Touch ID fingerprints setup? I've been attempting to write an EA as I have not found anything online. There are no Jamf Template EAs for TouchID, maybe this is a feature request. I know we can restrict the use (allow touch ID unlock, etc.) but we are unable to restrict our users ability to add a fingerprint into touch ID.  If anyone has some suggestions on how to accomplish this, I would be grateful. Thanks,JR

Has anyone been successfully able to update Splashtop Streamer via Jamf policy? I see that they have a guide for creating a package on their website (Splashtop), but I am unsure of what the "deployment code" is referring to.