Just curious if anybody has tried adding Monterey to the Mac Apps and updating that way. I added it to our Mac Apps and put it in self-service, but it seems like you have to click the install twice. When you go there, click install, when it's done, the button changes to Open. The only way to kick it off is by clicking the Open button.

Is there a way to add an Active Directory user account using a Terminal command? Our normal workflow when on site is to:- log in as admin- bind the Mac to AD- log out of the admin account- have the user sign into their AD account at the macOS login screen, thus creating their user account and user profile. If we have a computer outside of our local network and need to add a network user account to a Mac, we have no way to do it. If we connect to the VPN logged into the admin account, we can hit our AD servers. But as soon as we log out of the admin account, or if we try to switch users or go to "login window..." the VPN connection drops and then we cannot add the network user account to the Mac. So my question is, is there a way to add an AD user account from Terminal? Is there a way we could log in as admin, connect to VPN, bind to AD and then add the user somehow without logging out of the admin account. We are looking at getting away from AD binding with Jamf connec

We've locked the computer with Jamf Pro and unmanaged it without backing up the lock code. After few weeks all the completed commands disappeared :(Is there anything that can be done to unlock the laptop?

Hello, Per ABM, we have two Logic Pro licenses in use. Per JAMF, we have 0. JAMF > Computers > Mac Apps > Logic Pro > I did place two Macs in Scope, the Logic Pro shows as something I can install in Self service, when I click install I get an error "Cannot connect to a JAMF MDM profile". My unit is configured correctly however. Can anyone advise?Thank you, 

Hi Everyone,I need some help with the Zoom auto-update bash script for MacBook Pro/Air M1. Does anyone manage to script the Zoom auto-update? Thanks!RJ 

What's everyones preferred process for updating the OS on M1 macs? I'd like to implement a process where I can instruct macs to download and install say Monterey 12.5.1  to M1 macs during overnight hours. I've seen some posts where updates were deployed via Self Service but I'd rather not go that path if I don't have to.

Hi, I'm looking for a script to run for all users so that it deletes files older than 60 days from the user's trash (preferably from "date added" to the trash, not when file was created), but either way is fine. I can run some commands as some suggested from local terminal, but I can't executed from Jamf Pro:find ~/.trash -mindepth 1 -mtime +60 -delete Please advise. Thanks in advance.

I'm trying to create a plist and add it using a config profile. I found the below 2 that I tried to modify, but after deploying the profile, Teams still doesn't autostart. teams.plist · GitHubMicrosoft Teams forced Auto-Start for all Users - Jamf Nation Community - 248530 

Basically this is related to the context of migrating to an Active Directory account using Centrify Direct Control Yet, Centrify DC only migrates from an existing user's local OS X account (linking with the accompanying user's local home folder). Is there a tool, terminal commands, procedure, etc. that will convert the OD account to an OS X local account. I am aware that I can create an OS X local account manually and then "move" / mv the contents into this new home folder, and then do a chown -R. I undertand this is related to UID's, and that the actual OD user account is stored on the OD server. We then use Centrify Account Migration Tool to "Link" this home folder to an AD user account name. It Links, and successfully logs in using AD creds, but the user profile / permissions are whacked. For example, do not see docs on the desktop, desktop picture, etc. thanks in advance, john k

My company is starting to roll out our company fonts. Some computers already have them installed, and some don't. If I just push the fonts through a policy it installs in /Library/Fonts/Managed, but if they were installed by the user previously they'll be in /Users/<user>/Library/Fonts. The ones installed through the policy also modify the file names, which may or may not be the cause of the issue I'm trying to alleviate: duplicate fonts.I'm installing a total of 84 fonts, all belonging to the same font family (or 2 font families, because mono spaced fonts are its own section in the font book). I attempted to create an extension attribute that will look for fonts installed by the user, and if the name is found and file count is at >84 it'll output true, else false. With this, I planned to create a smart group with which I can assign the new policy. However, the script on the extension attribute doesn't appear to be working properly (the count is outputting 1, not 85 like I get

Hello, I have this script that emails a bunch of information to our helpdesk, however it is currently using the native mail app on macs. Is there a way to edit it to use the Outlook app instead? email computer information to help desk currentUser=$( stat -f "%Su" /dev/console ) sudo -u "$currentUser" /usr/bin/open "mailto:support@company.org?subject=Computer Information ($serialNumber)&body=$displayInfo"

We recently added a bunch of iPods to Jamf via ADE. In the Prestage we set the Time Zone, but users have reported the time is not correct and in almost all of the iPods if we look at the Management tab we see Settings - Time Zone as Pending. On one iPod it shows as Failed with the message The setting being applied is restricted.  We do have a Profile on the iPods with the Restrictions payload. Does anyone know what specific setting might be restricting this? We do have Automatic date and time - Enforced, but I wasn't sure if that could cause the problem. I looked through the rest of the Restrictions payload and didn't think I saw anything related to time.

I am running into an issue where my iOS devices are not logging a serial number after Account-driven enrollment. I have enrolled multiple devices, but the Serial Number does not get reported in the Jamf Pro console. VPP licenses will not apply to iOS devices that do not have serial license so I am unable to assign any applications to my end users.

I have the latest version of DEPNotify but I want to make sure that I have the latest script #!/bin/bash# Version 2.0.7########################################################################################## License information########################################################################################## Copyright 2018 Jamf Professional Services# Permission is hereby granted, free of charge, to any person obtaining a copy of this# software and associated documentation files (the "Software"), to deal in the Software

We have a requirements to set the Outlook on Mac's Calendar settings to end scheduled meetings 15 minutes early along with a few other settings in that section of Outlook Meetings settings. I have screen shot of where the changes are made in the Windows version of the Outlook client.  What is the best way to do this using Jamf on the Mac systems?

Hi there, So Im trying to create some python script to put computer into a static group through API, but somehow i cant get this working . I tried to use requests lib, with no luck. Does anyone one got some ideas how to do it?

Hi Team,wanted to check if there is any way to create a dashboard in Jamf Pro which shows all apps installed in a user machine and status of apps (like running/not running/last opened/modified)Regards,Yaswanth

HI there, Does anyone know of a command to remove an icon from the macOS dock? We use Google Chrome as our default browser which also works without issue if you try to sign into a Google federated managed Apple ID during Apple ID / iCloud login.

Hi there, I'm currently seeing behaviour from jamf scoping with exclusions.We have 1 configuration that applies based on "All manage devices" excluding "Devices on macOS Ventura without Sophos Monterey Config Installed".The problem is, it looks like when enrolling the device, if scope criteria is checked for "All managed devices" before "Devices on macOS Ventura without Sophos Monterey Config Installed" criteria then it will install on that Ventura device anyway as if the device is actually not part of "Devices on macOS Ventura without Sophos Monterey Config Installed" scope exclusion. I cant think of a way around this except to somehow get the criteria checked for "Devices on macOS Ventura without Sophos Monterey Config Installed" first.  Most likely what's happening is that jamf has to perform a task to verify if the criteria of the config profile existing is met but the device is already part of all managed devices and not part of the exclusion YET until that tas

Hi There, I'm not super familiar with JAMF capabilities but am wondering if something is possible. Is there currently a method of being able to prevent apps from prompting for updates that would require administrator credentials? Or is there a way of giving users rights only to update their apps?We are hearing that whenever a developer pushes out an update to some apps, our users are unable to use the product until the app is updated. I know this may be app-specific, but is there a way to do this on a broader scale? I've seen there is a way to defer updates of software/apps, but I don't know how well that works and if it works on every app. Any feedback would be appreciated!

Hello I'm really struggling to get our Macs authenticating to our Wireless Network using Certificate based authentication. I've followed a few help guides but none of them seem to work, has anyone managed to get this working. Below is a copy of our Configuration profile

Hi folks. Tried searching but couldn't find a solution (if any) to running a policy after the first setup screen is finished? We've found that some users get their laptops early, go through setup, hit enrollment and leave their computer only to finish that setup later in the day or the next day. We have a few policies that run after enrollment but require a logged in user to be present (some people haven't even created the user in the setup screen yet).  Hope that made sense! Thanks all :D

Hey all, we have had an issue where about 653 of our laptops didnt renew their MDM profile when it was expiring.I'm now in process of re-enrolling them with the profiles renew -type enrollment command, however it prompts the end user to go a click install on their computer to complete the process.  Since we had them approve the ability for applescript to do keystrokes and mouse clicks perviously, I am thinking I could script the click of the update button in notification center when it pops up. I'm struggling to determine the UI element that is showing this button though.  Does anyone have any clues to processing the click of the update button seen here?  I always respect @mm2270 and their work, wondering if you have any idea if I can make it click this update button.

We have Jamf Pro on-prem and are just rolling out Jamf Teacher. Our teachers only have 5 options within Jamf teacher (Clear Restrictions, Start Lesson, Restrictions, Applock and Weblock) and I'm wondering if we've missed a setting or the other Jamf Teacher features I've heard about are only available through Jamf Schools or maybe Jamf Pro cloud. Has anyone come accross documentation about what Jamf Teacher features are available with Jamf Pro on-prem?

Hey Nation :-)So here's a challenge for the scripting guru's...I'm trying to write an EA for getting the Design Capacity for a built-in Intel MacBook Pro battery.So far I have this script:/usr/sbin/ioreg -r -c "AppleSmartBattery" | /usr/bin/grep -w "DesignCapacity" | /usr/bin/awk '{print $3}'But this yields me waaaaaay too much info and the required awk value is on it's own new line right at the bottom.The body of the result output does contain the "DesignCapacity" value mixed in among hundreds of other values!So my challenge is... how do I get rid of all that extra value output to just have the final line output?eg:me@MacBookPro ~ % /usr/sbin/ioreg -r -c "AppleSmartBattery" | /usr/bin/grep -w "DesignCapacity" | /usr/bin/awk '{print $3}'gives this result:                {"PMUConfigured"=0,"FccComp2"=5050,"ResScale"=133,"SystemPower"=1051098690,"Qmax"=(5496,5497,5510),"DesignCapacity"=5103,"CellVoltage"=(4169,4169,4169),"PassedCharge"=26,"RaT