I have an (non admin) end user using VMware Fusion 13.0.2 on a MacBook Pro M1 13.3.1.I've used PPPC Utility to set up a Configuration Profile that has "Accessibility - Allow" for Fusion.The end user still gets an error when they start Fusion to allow Accessibility. They are getting the profile and other profiles are working. Any insights would be appreciated. 

Hi allIs there any way that we can find out what is the current Apple ID on the Mac ??

We are attempting to build a compliance dashboard for senior leadership.  One of the top compliance items is that macOS be up to date.  That criterion is defined as that the endpoint must be on the latest patch and version of macOS within 30 days of release.  What we need is a data source that we can poll for the most recent version of macOS and when it was released so that we can feed the logic in the dashboard.Has anyone put together something like this, and if so, what did you use for the data source for the current version and patch level of macOS?

I use a Policy that runs the script below to name our MacBooks to the machine's S/N that runs after enrollment and lately it stopped working.  It might be since Ventura came out or one of the revision, but I cannot confirm.  I can run the commands manually so they commands haven't changed.  Any suggestions would be great. #!/usr/bin/env bash# Get the Serial Number of the Machinesn=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}')# Set the ComputerName, HostName and LocalHostNamescutil --set ComputerName $snscutil --set HostName $snscutil --set LocalHostName $sn

Have issue with Sophos signed mobile config profile. Have uploaded the mobile config file provided by sophos into jamf and it works fine. I need to add the profile to another site but I can not clone the profile (which is fine) but when I try to upload the mobile config file to the other site it will not let me. I am assume since it signed and its name can not be changed this is why it would not let me upload it to another site?

Hey all, I'm looking to restrict our users (K-12 students) from enabling Full Keyboard Access in System Preferences - Accessibility - Keyboard. I've identified the plist key value, FullKeyboardAccessEnabled and FullKeyboardAccessFocusRingEnabled, created a plist and set the -int to 0 and uploaded it to Jamf in a profile with Application & Custom Settings. While I'm used to custom .plist files "graying out" the option to enable/disable items, this one doesn't seem to do anything to restrict the user. Thoughts? This would only be a temporary management profile to get our district through state testing. I don't like locking down Accessibility options, but a request has been made.

If you have multiple virtual MDM's in apple school manager linked to different sites in Jamf, you assign a device to one of the MDM's in ASM and you have the setting Automatically assign new devices that is in the assigned MDM/Site's PreStage will it only assign devices linked to that MDM/Site in ASM? I.E. does the PreStage setting "Automatically assign new devices" work when you have more than one MDM in Apple School Manager?

Is there a way to remove the news previews from the Today View widgets? There are inappropriate news articles that show up for students and parents are wanting this blocked. I have the widgets blocked but it doesn't remove them from that view.

Hi, I know some of you are using Installomator to update third party software and since I need to clear some time I decided to give it a go on a small part of our Macs. They are more or less all the same under ventura. Works great on most of our macs, but for some reason, it does not work on several of them, the logs is giving the same error : firefoxesrpkg : ERROR : Error veryfying Firefox.pkg error : Firefox.pkg: rejectedsource =no usable signature.  Any recommendations ?

We have a fleet of mac and we're trying to prevent users from automatically upgrading their macs to macOS Ventura or any other new macOS that Apple releases. This prevents us from users accidentally breaking their software which do not work with the latest macOS. Is there a way to do this in Jamf?  Thanks, 

My boss asked, "How much data do our users save on their Macs?"Anyone know how I can figure this out? I manage around 800 Macs with Jamf Pro and they don't all have the same size of internal drive, so looking at something like "boot drive percentage full" or "boot drive available MB" isn't too helpful.Thanks,  --Jeff

We are working on a Secure Token policy and have traced the issue to the Parameter Labels not resolving. Here is the script we made to test it: #!/bin/sh ## Pass the credentials for an admin account that is authorized with FileVault 2 adminName=$4 adminPass=$5 userName=$3 ## Prompt for Password userPass=$(/usr/bin/osascript<<END application "System Events" activate set the answer to text returned of (display dialog "IT needs to Activate Encryption, Please Enter your Password:" default answer "" with hidden answer buttons {"Continue"} default button 1) END ) # create the plist file: echo '<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>Username</key> <string>'$adminName'</string> <key>Password</key> <string>'$adminPass'</string> <key>AdditionalUsers</key&g

Hi,Does Jamf support configuring a firmware password or preventing users from entering Safe Mode?Thanks, 

Anyone have a good way of setting the time zone up correctly? I have tried using the time zone script on the jamf forums, however we are still seeing issues with the time being up to 5 minutes off. Is there a way to enable the automatically detect time zone setting while also enabling locations services to allow this to happen?

Google have pushed out an emergency update for Chrome on the Mac. I've noticed in our 'Mac Apps' - Chrome is not yet up-to-date.Is there a way to force a 'Mac App' to deploy the latest version? Or do we just have to wait for Jamf to sort it out at their end? 

I recently deployed our first enrolled M1 MacBook. I logged in and added the user as an Admin account but the user could not install Teams or Zoom. Both failed after the user put in her password for the install. I logged in as me and both apps installed OK following the user’s method of downloading from the respective websites. User logged in and was able to set up both programs. Is there a Jamf setting that is preventing her Admin account from installing or is this an Apple setting?Any insight would be appreciated

Hi Everyone,I have recently come into a problem with users trying to install applications through MAC self service over Wi-Fi. For some reason, when users go to install an application over Wi-Fi in MAC Self Service, they get an error message. (The users are on our school Wi-Fi) This is what I see on my end: [STEP 1 of 4]Executing Policy Arduino IDE 2.0.4[STEP 2 of 4]Mounting BrooklineCould not mount distribution point "Brookline"[STEP 3 of 4][STEP 4 of 4]However, when users download it when connected through ethernet, there are no problems. Has anyone seen something like this and have any ideas? Much appreciated!Joe

We have SSO enabled (and working) in our environment, but the only thing that it does not work for is the Jamf Admin app. Is it possible to enable SSO for Jamf Admin? Or will it only accept Jamf account credentials?

Hello Jamfnation,Just wondering if anyone has had any luck with configuring the new settings for blocking access to preference panes in macOS Ventura? The old method is deprecated and produces some strange results if used: https://developer.apple.com/documentation/devicemanagement/systempreferencesOne example being that blocking 'users and groups' also blocks 'screen sharing' in General > SharingHopefully Jamf will be releasing a config profile setting soon?

Hello Everyone, I wanted to start up a convo around the changes coming to Microsoft Edge updates. Starting with Microsoft Edge version 113, Microsoft Edge for macOS will start using a new updater named EdgeUpdater. More details: https://learn.microsoft.com/en-us/deployedge/edge-learnmore-edgeupdater-for-macos Microsoft provided a configuration example, and it appears to use the same logic/keys as Google’s Keystone updater. Can anyone confirm this? Also, anyone know if we need to change our current MAU configuration to not include MS Edge? Thanks! 

We have a couple dozen Sites defined with Macs assigned accordingly. The problem is we have a bunch of Macs that are NOT assigned to any Sites. I'm trying to figure out how to craft a search or smart group to show me all Macs that are assigned to "None" for the site. There doesn't appear to be any way to define Sites as search criteria. Is there a method I'm missing that will tell me what I need to know?

I have my device configured using Apple Business Manager, when I reset the device with my custom PreStage Enrollment, I should be creating a local account during the setup where the user is a non-admin, however every time it runs through my account is an admin.I've tried creating a new PreStage Enrollment, not working.  The device also becomes managed by the 'administrator' account I pre-configure.  Any help would be appreciated!!

Not really a Jamf problem, but maybe someone here knows something. For a few months now I have had the problem that some Macs just wont accept a users credentials after a few weeks or months. I have no idea what triggers this. One moment it works and one restart later the user just cant log in anymore. This happened with Monterey and Ventura. It also happened multiple times and I am sure it was not just typos.This really is a problem because the Macs are encrpyted, so the users cant access their data anymore.I cant really investigate this, because once the Macs are locked I cannot access the anymore.I am using AD bound Macs with network accounts. 

A customer of ours had an interesting question; they want to rename their Macs based on the color of the iMac. e.g "iMac Blue SerialNumber".I can't seem to find any place where the color is referenced. In network sharing and in the about this Mac screen it shows the correct color so I assume it does store it somewhere. I found the icons but I can't pinpoint how it detects what color it is.Any tips? Macs are running Ventura by the way

I am trying to find a way to deploy VNC and Visual Studio Code. Was wondering if anyone has a way to do it and would be able to help me on this. Thank you in advance.