Hello there,Newer Jamf Pro user, I've got a system of about 200 devices setup and running right now which has been done basically with user-intitiated enrollment, but now I'm getting ready for us to start rolling out pre-stage.What I would like to do, is once setup assistant finishes, and the user gets to the desktop, I want to push a message with a policy using restart options that tells them to not touch their machine for 15 minutes at which point the machine will restart. Thought process here is to allow the computer to do all the software installs etc, so they don't mess anything up.I was trying to do this with "enrollment complete" but what happened is that the message would pop-up right overtop setup assistant if they didn't get through it quick enough. So I'm trying to get it to wait until it hits the desktop. I tried using "login" trigger, but it didn't seem to work, it says it ran, but never showed up.I appreciate any insight you could offer. Thanks!

Hi all! Question: we are sending out a policy using jamfHelpers "fs" window and I'm pretty sure in the past one was unable to exit out of it entirely (which is what we desire) but recently, I've seen (and tested) that hitting "command-Q" actually works to exit the fs window. Sometimes the fs window shows up then disappears after a few seconds on its own. Is this normal and/or anyone has seen before? Just curious. Test machines are M1 on Monterey. Here's our script: #!/bin/bash # Variables jamfHelper="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" # Message prompt "$jamfHelper" -windowType fs -heading "Test" -description "Hello! Try exiting this window" -icon /usr/local/jamf/logo.png  

Just wondering if anyone has a list of the Abbreviations and its full name for the remote update managerSo we have it implemented as a script to download RUM and reveal to the user that a certain adobe app has updates available however when it prompts the user to install updates it shows in this format : (ACAI/0.5.3.1/macarm64)we know PHSP means Photoshop, IDSN means indesign but does anyone know of a full list of what all these abbreviations mean

So I'm hitting a wall with the last piece of my zero touch deployment.My organization is looking to begin deploying ~150 iPads each year to students. We've run a beta group and I've got the unboxing and setup experience all automated how we want where we just hand them the box and they're ready to go. My last hurdle is assigning the specific User in Jamf to the specific iPad they end up with in hand.For the Beta I just manually wrote on each box which student it would belong to and kept a spreadsheet with the the serial number/User assignments. Then after the devices powered on used MUT to bulk update the entries in Jamf to reflect the spreadsheet.Is there any way I can avoid having to write and keep track of ~150 names and serial numbers each year? It's not the end of the world but I'd like to eliminate as much human error as I can. Maybe there's a way the student can enter their User info when first setting up the device?Open to any recommendations!

We're looking at migrating to HTTPS for our main file share distribution point from SMB.  We've used SMB since we began with Jamf and have just had that port open on our state's firewall.  Recently they've told us no more on that and have deleted/remove the rule, our only choice going forward would be to use port 8080.  So, as of now our Mac's cannot mount our file share and get packages when off of our network.  Not the end of the world but it was handy to have policies work from home, especially overnight.  We followed the steps to migrate to HTTPS listed inUsing IIS to Enable HTTPS Downloads on a Windows Server 2016 or 2019 File Share Distribution Point - Technical Articles | Jamfhowever, we get a 503: Service Unavailable message when testing a download in browser and also when a Mac tries mounting to run a policy with a package.  I spent several hours troubleshooting different settings as well as trying different read-only accounts, recreating certific

Currently, app licenses get assigned when a user is scoped to a self service policy. I want to script an option that a user can “request” to have access to an application through self service and then automatically get added to a smart group that the application license and installation policy is scoped to. Has anyone done anything like this before? Thanks in advance!

Hey Jamf Nation,We are having issues with LockDown Browser not opening after students install the pkg or dmg created from composer. The message that pop up on their screen is "the application is damage- App installed from an unknown developer(notarization)  ". Issue just happening with intel clients running on Ventura. 

Does anyone know what specific permission/privilege in Jamf Pro allows a Jamf Pro user to view and scope existing policies? I can't seem to find the right checkbox in the privileges page of Users and Groups. The user in question just gets a blank page but there should be a bunch of policies showing.

Has anyone implemented the API for Superman? Specifically the api details. I am a little lost on the configuration of it any help would be appreciated. https://github.com/Macjutsu/superThanks!

Is Jamf using the "softwareupdate" command line tool to collect the details on the Mac client?I am just wondering because even on clients with a major software update deferral profile (90 days set),Jamf Inventory shows the macOS Ventura Upgrade on macOS 12.6.1 Clients?Thanks in advance, Bjoern

Hello!Since November or so I see HTTP Downloads (from an HTTP-DP served by IIS on our Jamf Pro Server)Server is Jamf Pro 10.42.1 running on Windows 2016 Server (it is the "DMZ"-Server of our clustered pair)Jamf only logs a "Package not found" although the Packages are definitely there, and I get a "404 0 2" error in the http-Logs. That mostly happens when the machine is first set up (DEPNotify is started right after the Setup Assistant finishes and users see the Finder for the first time.When the machine retries after setup ist finished (Policies are triggered through custom triggers and have retries set) then everything downloads ok.I am really stumped, has anybody seen something similar? MIME-Types are all set, the IIS on that Server was working fine up until November, when we moved the main Server to a different Datacenter. Bye, Fridolin.

Hello , I've got problem with python script ,  first line of script have command to import :import os.path ,os , getpassbut Jamf PRO have problem like below:line 1: import: command not foundDo you have some tips how to solve it ? 

I'm been experimenting with some scripts that we want to run at each user's log in. We're using Outset to handle them now, but it's been unreliable for us and seems to break part way through our semester, every semester. In light of that, I've been exploring new ways to get our users files and other things set up for them.I've had luck calling scripts using Jamf's Login Trigger, but the commands in the script are processed as a root user, not the currently logged in user, which causes the scripts to fail. I've found some documented fixes, but they're from previous less secure OSes and earlier versions of Jamf/Casper and I'm not sure they'd be successful under Ventura.Does anyone have some suggestions on getting the scripts ran as the user at login? Should I be going down the launchd rabbit hole?

I’m at a loss here. I’ve been suddenly fighting Zoom screen sharing being completely “blocked” with my JAMF Pro setup on all new computers. All machines are running 12.4, Zoom 5.11, and I have a PPPC payload deployed on some that allows non-admins to allow screenrecording and the other half does not have this. No matter which configuration I use, even when I allow full disk access and screen recording, Zoom still tells me to open my Security & Privacy to whitelist the app to screen record. I have tried both the IT installer PKG and the regular PKG to no success. Does anyone have advice on what I need to check for?? I’m at a total loss right now. Thanks in advance!!

Hello all!We have been having an issue lately where machines will start their prestage installation process (policies, app installs, scripts, etc) that we run on first setup BEFORE the user is able to even log into the machine via Jamf Connect 2.Previously the user would boot the machine for the first time and it would go through language selection > warn them about Company MDM setup > ask for location > then prompt for a Jamf Connect 2 login. It would wait there until logged in by a user THEN begin the full 10-15 minute setup. It would finally end with a reboot and come back up to a local login and the user would be able to log in without issue because it created a local user for them during that 10-15 minute setup.Now, the setup will begin nearly immediately after warning them of the Company MDM setup (about the same time as it asks for location. If a user gets distracted and doesn't log in at the JC2, it will go through its install then finish with a reboot and come back to

Hi Jamf community. I've been having some trouble understanding if the following is even possible, so I thought I'd post here to see if anyone has any ideas or has tackled this in the past.I have an EA I created, which gets the expiration date of the machine 802.1x issued certificate. It converts the expiration date into a "Jamf friendly" format, such as 2023-08-10 10:05:00. It reports that (if found) as the result in the EA.The problem I'm having is, I want to build a Smart Computer Group that uses this information to show me any Macs that have these certificates that are going to expire in say, 30 days from now. I can't seem to use any of the built in date operators to make this work. Neither the more than x days ago or less than x days ago criteria will give me what I'm looking for. They seem to only work properly with dates in the past and not ones in the future. And the before (yyyy-mm-dd)and after (yyyy-mm-dd) options wouldn't make sense to me it seems, since these would be consta

Hey folks, Im trying to create a Self-Service policy that will Disable or Enable the "Smart Quotes" keyboard feature in system preferences. When I run this code in my Coderunner app it works perfectly, but as soon as I load the script in the into a Self-Service policy I seem to have issues. The policies behavior looks good, popup comes up but the setting does not change. Any ideas? Thanks in advance   #!/bin/bash #Grab current logged in user user=`ls -la /dev/console | cut -d " " -f 4` #Check smartquote status currentstatus=$(defaults read NSGlobalDomain NSAutomaticQuoteSubstitutionEnabled) #SwiftDialog Location dialog="/usr/local/bin/dialog" #DISABLES if [ $currentstatus = 1 ]; then $dialog --message "You are about to disable Smart Quotes" --icon "/usr/local/images/deepwatch-Logo.png" --mini --button1text "Disable" --button2text "Cancel" sudo -u $user defaults write NSGlobalDomain NSAutomaticQuoteSubstitutionEnabled -bool false sudo killall Finder fi #

Hi all,Has anyone had success using an Apple TV device on a touch screen monitor and gotten the touch feature to work? Looking to replace full blown PCs with Apple TV's for large touch screens that are used to display a webpage with different data navigable by touch.Any thoughts/successes you can share appreciated. So far all I have found out there is a bunch of "Apple TV is not a touch device" negative Nancy's. Hopefully some of you are creative and found a way.

Hi, I'm running a script from Jamf that pulls a gitlab repo then executes a script from said repo that installs some packages leveraging brew install. The script works nicely on the intel laptop but not on M1The error showing in Jamf should the script executed other parts of the script but fails when calling brew.install.sh: line 10: brew: command not foundIf I run sh install.sh locally via terminal it works well. If I run brew in either bash to zsh it finds the command.What could be occuring differently when executing the script via Jamf Self Service that means it's completely oblivious to the brew installation?Jamf Script Snippet#!usr/bin/env bash #Get loggedInUser name loggedInUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name 😕😕 && ! /loginwindow/ { print $3 }' ) #Execute script under loggedInUser #sudo -u "$loggedInUser" ~/devtools/install.sh #!usr/bin/env bash ############################ # installs homebrew packages # i

I just joined a new company that currently uses a combination of Addigy and Meraki for MDM. After spending the last three weeks with Addigy, I can point to only one advantage over Jamf Pro. Addigy is more MSP focused. We can create multiple tenants to manage clients separately. In the past I have used sites in Jamf Pro for this and dedicated Jamf Pro servers for clients who are setup with Apple Business Manager. While I was being interviewed for this position, I made it very clear that I feel that Jamf Pro is the best solution and that I prefer to work with it over other MDM solutions. Today we have a meeting scheduled to discuss how the company will move forward with MDM solutions. I am strongly pushing for Jamf Pro. I would love some advice on how to convince the owners of the company to go with Jamf. I could learn to use Addigy but I feel that this would be a huge time drain when I already know Jamf Pro extremely well. What are some good points I can make to help convince them that

Is there a way to either delete Pre-installed Apple Apps through Jamf Pro or configure settings so that they do not install? 

Hello, I am trying to set desktop icons as visible with a script. I assume I can do a "defaults write ..." to some plist file to set these options, but after setting them myself while running Composer to try to see which file was edited, I was lost in plist confusion.To be clear, the settings are shown in the GUI under Finder settings (In Finder, type command comma and click the General tab) as:Hard DisksExternal DisksCDs, DVDs, and iPodsConnected Servers I would like to set those four as visible (checked) via command. Thanks for any help anyone can provide

I am trying to add a file to all of our Macs in our school system and then use JamfHelper to notify our staff that it is time to update the OS. I have the Script to run working but I would like to add our School Picture.I have tried using Composer by creating a .pkg as well as a .dmg and using the FEU option. None have worked so far.I'm trying to place the file in /Library/Application Support/JamfWhen the Policy runs I get the following error when using the .pkg:Installation failed. The installer reported: installer: Package name is XXXX XXXinstaller: Installing at base path / installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An unexpected error occurred while moving files to the final destination.)When I run the .dmg, the Policy runs but does not add the picture.Is there a location I can copy a .png file that all users would get it installed so I can match it up to our JamfHelper S

How do I remove pre-loaded apps from an iPad? Our iPads come pre-loaded with Pages, Keynote etc which we will not be using. Is there a way to remove them using the JSS?

Is there a process for downloading or copying all scripts that are stored in the JSS? I am creating a new JSS from scratch to be used for testing. Is there a documented way of downloading all of the scripts from a JSS and then importing to another JSS? Also, I would like to backup just the scripts on a regular basis outside of the typical JSS database backup.