I work in a school district and was wondering if anyone had used scripts to shut down apps after a certain time.  We are looking for a way to stop students from accessing safari and google chrome after school hours.  Any help would be appreciated.  I'm new to scripting and haven't had much practice with it.

I feel like i'm missing something here. Aren't nested groups supported in v9? I don't see how to add a computer group to a static group.For example: If i have static groups called Lab1, Lab2, Lab3, etc. that all have specific computer assignments, then i'd like to have another static group called something like All Labs that have the static groups Lab1, Lab2, and so on. That way, if i want to push a config profile to all labs, i can just select All Labs as the scope, rather than listing all of the individual labs.

I just wanted to know if there is any restriction to use same Apple ID for push notification can be used for ABM login for any order for VPP app or DEP device assignment. Or this two Apple Id has to be different and it is must?

We've been using LDAPS for some time without issue. It recently stopped working sometime over spring break when not in regular use. SSL certificate had expired on 03/30, so the new/current SSL certificate was uploaded but the issue is still not resolved. No other settings have been changed, firewall or otherwise.Test simply returns, "Unable to connect to the LDAP Server." "No Suggestions Available".Cloud logs don't seem to provide anything more specific. I'm not sure what may have changed to cause this issue; may have been Windows Updates on the LDAP servers, or possibly something on the JAMF Cloud side?JIM was a bit behind, so updated it from 2.2.2 to 2.4.0 and rebooted with no change.I can connect using regular LDAP (non-secure/test-only). Somehow there's a problem with the certificate, I just don't know what it is or where to find more specifics. The Subject and SAN both match the FQDN of the host, as expected. And as I said, this has been working without issues for several years, o

Hi All,We have just purchased 3 Mac Studios with Apple Studio Displays.The problem is I would like to record the serial/asset numbers of the displays to the Mac Studio they are connected to.Anyone got any ideas around this?

I'm looking for an extension attribute that I could add that would report whether the currently logged in user has the old or the new Outlook UI.  We've run into some issues that seem to be fixed by switching between the two and while we have a gut feeling for how many of our users are still on the old UI, it'd be nice to have some data to back that up.  I haven't been able to find any preference files or anything else specifically that would really tell me one way or the other.  Has anyone else found anything that works?

Hello folks! Wondering if it's advised to remove a computer from Jamf Protect if we plan to repurpose it from one user to another - or will Jamf Protect be able to tell it's on a new user, with a new hostname, etc? Noticed that one of our computers hadn't checked in "3 months" yet it's checking into Jamf Pro every day. Upon digging noticed that the host or computer name were different in both. Thanks!

Is it normal for a policy that only has a script as the payload to never get logs? I have our "master enrollment" script that calls on other policies after enrollment and it shows "pending" on end for any computer. What's strange is that the policies that it calls within the script work/are triggered.Trigger: Enrollment CompleteFrequency: Once per computerScope: All computers - Specific Users

Afternoon Jamf nation I looking for people who have successfully built a custom dock using this method here https://community.jamf.com/t5/jamf-pro/build-a-custom-macos-dock/m-p/264565Its sort of working, it only seems to be building the dock the second time the same users logs in. Any suggustion on how I can fix this behavouir as I need the dock to be created for every user that logs in when they log in. As this will eventually be deployed to a lab.ThanksTom

We've just completed our annual Apple GSX Certificate renewal.We got the new cert, converted it to a .p12, imported into Jamf, clicked 'Test', and got the 'A connection to the GSX Server was successful' result.When we run the GSX Lookup on all devices, though, 100% of our inventory returns as "Serial Numbers Not Found"This worked 2hrs ago on the old cert, so it seems to be a break between the cert and our GSX account.I'm trying to work this with Apple, but getting to anyone with GSX knowledge is pretty difficult.Apple's cert renewal instructions here: ( https://gsxapiut.apple.com/apidocs/ut/html/WSFaq.html ) have been wrong for 2+ years:"...The FQDN is a very important field and it's case sensitive. Please be sure to provide the following value for this field: For test environment CSR : Applecare-APP157-[SoldTo ID].Test.apple.com For production environment CSR : Applecare-APP157-[SoldTo ID].Prod.apple.com For example,if your soldTo is 0000012345, the value should be Applecare-APP157-0

Is there a way to suppress this notification in Patch Management of Jamf Pro?I've noticed this since the new UI update, but haven't gotten around to asking about it until now.It gets in the way of pressing the edit or save button in the bottom right corner.It says "Table preferences have been saved". 

On Friday I had my first new iPhone enroll in Jamf Pro. Friday night the user contacted me saying when he tries to restore his data from iCloud it wipes his phone but then it re-enrolls in Jamf Pro. Everything I have researched says restoring from iCloud or iTunes will wipe the phone. I asked at the Apple store but all they would say is bring in the two phones. Other than Airdrop which they said would not bring over his contacts, does Apple have a solution for selectively bringing data over? I am new to Jamf and Apple and this seems to be an Apple issue but I would imagine this is something the Jamf community has dealt with before. Any help would be appreciated.

Hi Everyone,We are currently having problems with trying to re-enroll older MAC computers using Mojave. We take the computers out of JAMF and Pre- Stage enrollments. We re-enroll the computers, but the policies get stuck. The computers show up in JAMF as the serial numbers but not as the computer name. We are able to see the JAMF certificate and MDM profile but then nothing else loads up, it is like the policies are stuck. Has anyone had issues with this? Thank you so much in advance!Joe

I am new to Jamf school and Apple Macbook. We recently upgraded our printers to Xerox Altalink C8155. I have downloaded the driver from the xerox website and uploaded the pkg to Jamf school. I can see that the app got installed. But the printers are still taking the generic printer driver and this resulted in users not getting the option to print back to back or some other useful features by xerox. Can some one please guide me on how to install the drivers correctly. Thanks

Trying to make the following TeamViewer Host Unsigned.mobileconfig file from the what I assume to be the plist text from the Jamf site: https://learn.jamf.com/bundle/jamf-pro-documentation-current/page/TeamViewer_Integration.htmlOnly the plist text is listed there, how would I copy that and create the .mobileconfig file?

Hello all,in the past weeks I've been looking at making our users MDM Capable on their computers to push user-level profiles. While it's still a work in progress, I've noticed a few weird results that I'd like to hear if the community understands what's going on.First, the user accounts are admins created by Jamf Connect during prestage enrollment. This is the initial reason why the accounts are not MDM Capable and that I'm trying to fix.After reading many threads, it would seem that using sudo /usr/bin/profiles renew -type enrollment is how many solved that. After trying, I find that the computer is no longer Managed by JSS and this happens on every computer I tried. Why does this happen ?Testing other options, I found that the Renew MDM Profile command from Jamf Pro Management also removes the management account. Leaving the Managed field of the computer empty. I don't understand why this happens.In the end, what worked so far is1. sudo /usr/bin/profiles renew -type enrollm

Hoping you can help but please keep it simple for me!!I have a number of iPads bought from a reseller who adds them to our Apple Business Manager (ABM) account and all good - I work with these just fine.Someone at work bought 2 iPads NOT through reseller so I have no option to have them added to ABM. You need to know I DO NOT Have a Mac so cannot use Apple Configurator software either.So what I did:1. On iPad I went to https://OURNAME/jamfcloud.com/enroll2. Logged into Jamf and added MDM Profile and CA Certificate (including going into settings to accept them)At this point the iPad should be fine. I can see it in JAMF Pro but the issue is it remains "Unsupervised" so I cannot push a Configuration Profile to it. It will however accept an App being pushed to it.What am i doing wrong to not have it supervised and configuration profile failing?With many thanks, Alan  

First time posting hear and very new to Jamf Pro.  We are using Jamf Pro in the cloud and I am trying to figure out how to get Ventura 13.3 deployed.  I have created a policy and configured the Software Updates to use Apples Software Update server and does not seem to work.  found another article that says download from Apple, use Composer to create a dmg file.  However it won't upload to Jamf Pro Cloud.  Get to 2% and stops.  I am probably doing something wrong, but thought I would ask for input from folks that have done this before.  We are still learning so will take whatever we can get!Mike

Team, is there a quick and easy way to export all recovery keys? Also, do we have the option to export this from smart group sorted details from Jamf Pro?

Does anyone have a script or something to remove Adobe Air from our Macs? Our past IT guy installed it on everyone's computer but we have no use for it anymore and I'd like to get rid of it. I haven't been able to find a script anywhere to uninstall Adobe Air.

Issue is, right now, prestage enrollment of iPads isn't working. The error I see in our Jamf cloud/Pro server logs is:2023-03-29 16:59:04,484 [ERROR] [duledPool-5] [ileAssignmentSynchronizer] - DeviceEnrollmentProgramException[responseCode=404, responseBody='PROFILE_NOT_FOUND', message='The DEP service reported an error.'] com.jamfsoftware.dep.comm.DeviceEnrollmentProgramException: The DEP service reported an error. at com.jamfsoftware.jss.objects.streamlinedenrollment.service.comm.DeviceEnrollmentProgramRequest.sendOneTime(DeviceEnrollmentProgramRequest.java:65) ~[classes/:?] at com.jamfsoftware.jss.objects.streamlinedenrollment.service.requests.AssignProfileRequest.send(AssignProfileRequest.java:34) ~[classes/:?] at com.jamfsoftware.jss.objects.streamlinedenrollment.service.requests.AssignProfileRequest.send(AssignProfileRequest.java:14) ~[classes/:?] at com.jamfsoftware.jss.objects.streamlinedenrollment.service.comm.DeviceEnrollmentProgramConnection.sendRequest(DeviceEnrollmentP

Hello,I noticed that the EA that Jamf provides for Firefox patch management is probably buggy. Does anyone know how to fix this? Unfortunately, it does not really show what error is here.Thanks in advance!

Hi,I forgot my Jamf Pro login password. How can I forget my password?Thanks,Trinh Tran

So none of our devices are prompting users to sync their passwords after they change it via IdP.  I checked the Jamf Connect configuration profile and it looks to have all the settings correct.  NetworkCheck is set to 15 and we have the Jamf Connect notification profile enabled under Settings>Computer Management>Security.Jamf Support told me it could be hidden behind the time and that i should click on it to look for the notification.  I had a device that updated the password days ago and when i click on the time there is no password notification there.Has anyone seen this?  Any way to force a password sync? EDIT - After messing around on my device right after posting this I have noticed that the Jamf Connect icon is not in my menu bar.  If i launch it and click Connect it then prompts me to sync the password.  Is there a way that I can have this app launch on boot and have it automatically logged into?

I configured the wonderful Support app today, and everything seems to be working the way I want it to, except for the custom logo I'd like to use (our institution's logo). I edited the image size down to 48x48, and put the file in the recommended location (/Library/Application Support/[our institution name]/[image file]), though the image will not appear in the Support menu on my test device. When I edit other features in the config profile, the changes take place almost immediately, but the logo has yet to change. Anybody familiar with deployment of this app have any pointers/ideas?