Should I create smart computer groups for each of my licensed software that I want to keep updated with Jamf App catalog? I am concerned that if I choose all of my managed clients, the catalog will install licensed software on my assets that did not purchase a license. Also curious that if I use Jamf App Catalog to keep Google Chrome or Mozilla Firefox updated will it only update the assets that have it installed or will it install the latest version on all of my assets?

Hi, In searching for a better way to install Apple Loops and other post-install downloadable content from apps like Logic Pro and  GarageBand, I see that Carl Ashley has created a new tool called loopdown. It basically downloads all the loops based on the app's plist and creates smaller packages (I believe based on folder structure) ready for uploading to MDMs like Jamf. It appears to work great. The only problem is that it produces a lot of packages (840 for Logic Pro and 707 for GarageBand) and I was wondering whether there is a way to bulk upload these packages? I'm not asking about deploying all these packages in 1 policy. I know we can do that but rather upload them to the cloud repo.

We have been using JAMF for a few years now and have quite a few leased and purchased Macs in our system but a lot of deprecated policies, profiles, and other settings that we are wanting to rebuild mostly from scratch. We are going to be entering into a new lease later this year so rather than try to go through each item one by one we are wanting to rebuild the system for the new lease while still being able to support the existing leased and purchased Macs.I know how to create a new PreStage Enrollment but most of our policies and profiles are set to "All Computers". I know that I can make an exception in each one by using a smart group but is there a way to immediately separate the new PreStage devices without creating a new JAMF environment to where they won't get any of the old stuff?

Hi folks,I'm currently creating a new process for user initiated enrollments using DEPNotify. For testing, I'm removing all local device jamf components and running API scripts to unmanage/ un-enroll the device and de-selecting the "Allow Jamf Pro to perform management tasks", but keeping the JSS record intact. Then performing changes to the build script / procedure and re-enrolling again for testing purposes.However, what I've found is that if I don't delete the JSS record for the device, although the the device successfully appears to re-enroll, the actual script that is supposed to run and start DEPNotify on the Enrollment complete trigger does not startup. It's as if it performs a "silent" re-enroll. I'd like the build process to be consistent regardless if it's a new enrollment or a re-enroll. We may have instances where devices have their management disabled in the JSS and need to be re-enrolled, and if it's end users performing the enrollment then it would be helpful to have on-

Searched Jamf Nation but couldn't find anything close enough to my use case. I'm querying the Jamf API for computer IDs by way of usernames:jamfUserURL="https://[company].jamfcloud.com/JSSResource/users/name/$username" computerID="$(curl -X GET -s -k -u "$jamfUser":"$jamfPass" "$jamfUserURL" | xmllint --xpath '/user/links/computers/computer/id/text()' - )" echo $computerID This works great except for end users who have more than one computer in the environment. Then I get a result with all IDs combined into one return. Would it make sense to stick this in a for loop to iterate through the multiple IDs? If so, can someone please assist?

Where do we find the download link for the Jamf Pro admin tools?

I have scoured the threads and the inter-webs and can't find much on this. I know how to show the uninstall package option on on-prem, I index the package in admin and voila.But such option is not possible on cloud.Please advise. Thank you, 

Is Jamf Migration specialist is part of license plan or need to pay for Jamf migration specialist?

Hi Everyone!I help manage macs for a university and lately we've been having some issues with our local admin account created during prestage enrollment. It's become an issue where the account will create, and we will be able to login to the local account for a while and then suddenly without any indication we won't be able to login to the account or use it for admin privileges. Has anyone else had this issue? I haven't been able to find anything in the records for computers that this happens on and am lost now.

Hi all,We've recently deployed Jamf Pro on-premises and made it available on the DMZ. We're planning on having an HTTPS DP available on the DMZ (Apache running on Debian) However, when I try to add the DP to Jamf Pro, it keeps asking me for the SMB Share info and credentials which this distribution point doesn't have. Is there any workaround for this issue? We do have a samba share on the internal network but I can't have an SMB share on the DMZ and even if I could our security team will laugh in my face. Does anyone know how to get around this issue? Cloud Distribution points are not an option for us.Thanks in advance!

Hey EveryoneI am working in a multiuser lab environment and I have been asked to create a shared folder space on the local machine then provide a desktop shortcut/Dock icon to this folder. What is the best way to achieve this? 

I was wondering if we can build a smart group for devices based on the devices country?at the moment, we have our devices scattered around the globe (USA[Chicago/NewYork/SanFrancisco/Florida/Houston], United Kingdom, South Africa, Japan, New Zealand, Australia [Sydney/Melbourne/Brisbane/Perth]

Here's the scenario:We have a classroom of computers. Between class sessions, we run a restart on those computers. This happens at varying times.To run this restart we used to use Apple Remote Desktop. Since that is becoming/is unsupported, we want to move away from it.To run the command to restart/shutdown, etc., we have a staff computer that is separate from the other classroom computers.So... from what I've read it is possible to call a policy from a separate policy. Say:(Policy 1) has a custom trigger, and(Policy 2) uses Files and Processes to call the custom trigger 'sudo policy -trigger [triggername]'I created (Policy 1) to deliver a restart command. I scoped it to all of the computers that I want to have restarted. I created a custom trigger 'restartComputers10'I created (Policy 2), have it call the 'restartComputers10' trigger, scoped it only to the staff computer, made the command available in Self Service.Now that policy is only visible in Self Service from the staff computer

I noticed Crowdstrike Falcon was added to Third Party Products. It was added by @pingebrigtsen who works for the company. Is anyone using it? Asking because there are no discussions about it on this forum. Zero. Nada. Zilch. Did you replace another solution (McAfee, Symantec, etc.) with it? What does it do that you like? What does it not do that you hoped it would? How is it working out for your environment? Just curious, not trying to start an anti-malware war. :)

Hey! I thought I'd try my luck here as well. Im trying to use checkJSSconnection in a while loop but the computer just get stuck in the loop. This happens after setup assistant is complete and the account is logged in.Code:jamf checkJSSConnection -retry 0 >> null status=$? until [[ $status == 0 ]]; do jamf checkJSSConnection -retry 0 >> null status=$? echo "$(timestamp) Unable to connect to Jamf, retrying ..." | tee -a $log /bin/sleep 2 doneThe exit code returned is 1, and never stops being 1 so the loop continues forver.The thing is, I do have connection to jamf. If I start a new terminal window and run checkJSSconnection it will return 0. If I kill the jamf process and rerun the script via manual trigger, checkJSSconnection will return 0 on the first try.This happens every time I run a new test enrollment via prestage, so its not a one time thing.If I disconnect my wifi, start the loop and then reconnect the wifi the loops exits as soon as the connection is established,

Hey hey!Is there any way to get a report spit out that shows, for example, all iPads with Room Controller on them that are less than version X? I've found that our Zoom Room controllers get cranky about updating when we have them locked in guided access mode, so I'd like to be able to check now and again to make sure they're all on at least version X for specific security/features that dropped with it. In this case I want to make sure they're all on 5.13.X for Teams compatibility.It doesn't seem like Smart Groups has a 'less than' functionality, and I've seen mention of using Patch Reporting but that only seems to work on the macOS side of things. I'd even be happy if I could just have it spit out a .csv file with device name and version number on it as I can quickly sort that.Thank you for any info or tips!

Bonjour,Je ne trouve pas comment forcer la réinstallation d'une Apps Mac dans Jamf Pro.J'ai déployé Adobe InDesign sur un poste en passant par un SmartGroup. L'app a bien été déployée.L'utilisateur final a désinstaller l'app par erreur mais elle apparait toujours en état installée dans le status de déploiement.J'ai sorti le poste du groupe puis remis sans effet.Quelqu'un aurait une idée ?

I made a Package (named Receipt March2023.dmg) and made a Policy (named Receipt March 2023) that installs it.  I scoped it to one computer and the Policy successfully ran and the Package was installed.  I want to save an Advanced Search in Jamf Pro that will, among other criteria, search for computers that have installed this package.  I see that there is a Search criteria named Packages Installed by Casper.  If I choose that criteria and enter Receipt March2023.dmg for the Value, the search doesn't find any computers.  If I click the three dots to see the options for the criteria, Receipt March2023.dmg isn't in the list of Packages.  Why not?

We had been making use of the Content Caching Module in Jamf School for many years to take pressure off of our Internet, however this is still in beta and has been failing to cache files for some time (I can't be certain of the exact date). I have since uninstalled the Caching module as it does not appear to work anymore and appears to have been installing older settings and profiles on our devices that were cached before the module stopped working.At this time I have configured 2 Mac Minis and an iMac with Content Caching in order to take pressure off our Internet. I would like to make use of the Content Caching module rather as this was more efficient and reliable than the Content Caching feature available on networked Mac OSx devices. Is there any way to speed up the process of fixing this module? The message I have on the module (when enabled) is:Due to recent changes in the macOS system store download process, the Jamf School Content Caching daemon cannot currently deliver pa

Hi all, we are trying to finalise a roll-out of Jamf for Mac management, with zero-touch from IT. Devices are enrolled automatically to our Jamf MDM server in Apple Business Manager, and ideally we'd like to send devices directly to users, for them to unbox and run through Jamf Pre-Stage Enrollment.The issue I have seen, maybe one in every 10 builds, is enrollment will not complete correctly. We have a device at the moment that hasn't renamed correctly, hasn't deployed all Enrollment Complete software/policies, and hasn't deployed all config profiles (including FileVault enablement).Running this command locally on the device will essentially re-run enrollment:sudo jamf policy -event enrollmentCompletebut my concern is sending a device to an end-user, the device doesn't enrol correctly, the user tries to work on the device but doesn't have Office apps, or the device doesn't meet security requirements, such as disk encryption.Does anyone have any advice please?Thank you

Hello Everyone,I am still pretty new here so bear with me on this one. Our organization uses binds our Macs to AD and people sign in to create mobile accounts. These accounts have admin privileges but some things are restricted. For example, terminal access on mobile accounts is deactivated. When you open a prompt, the terminal window says "process complete" and doesn't let you enter anything. What kicked this all off is that we recently installed SPSS v. 29 on a machine and noticed that the local Admin account can run it fine but the mobile account cannot. In the local account, we noticed that SPSS launches a few terminal commands to load Java and launch SPSS. We suspect that the mobile account can't launch SPSS b/c the mobile account access to terminal is blocked.In the process of troubleshooting, we used the chmod 777 command on the SPSS folder in Applications to make sure the mobile user had rights to this program. Then we tried a few ways to modify access to Terminal (with a root

Hi all, I have a application that is a DMG, and I have a license file that i need to drop into the users application folder. Any suggestions on the best way to deploy this app? I am not sure if using the built in payload in policy would be enough or to use composer? Any guidance appreciated. 

Hi there,We have some users who needed to run Mojave until recently. We went to upgrade them (all users are remote) and I noticed that every system running Mojave stopped checking in with Jamf on 8/13/22.We disable Admin access for end users and use either the Jamf Admin user or a policy to temporarily perform admin procedures.Unfortunately both of those options are not working (Jamf admin refuses password and zero policies in Self Service will work, they just error out).The last thing I want to do is ship the computers back in and manually wipe them and restore them. Does anyone have a solution for forcing check in on systems that seemed to have dropped off?

Hi All,I'm trying to use this script to determine if a Mac's uptime is 5 days or longer, then output results as "Yes" if so, and "No" if not. But when configured as an EA, it only gives the "No" result. What am I missing?#!/bin/bash# Get the system uptime in secondsuptime_seconds=$(awk '{print $1}' /proc/uptime)# Calculate the uptime in daysuptime_days=$(echo "$uptime_seconds/86400" | bc)# Check if the uptime is greater than or equal to 5 daysif [ $uptime_days -ge 5 ]; thenresult="Yes"elseresult="No"fi# Output the result in the correct format for Jamf Proecho "<result>$result</result>"

A lot of my enrolled macs are not updating the user field. Its random but its really an inconvenience to have to update them manually.any command out there to update users and location field? when the field is not populated? My macs get named after user ID. We run a script to rename them and bind to AD based on LDAP userID.Again this is random as some work and others dont. Dont even know where to begin to look as to why.Im running latest but this happened before on all versions 9.x