I am trying to create a Policy that copies an alias to the Desktop. I used composer to put the file in /Users/Shared and then a bash script that copies it to the desktop use the command "cp -R "/Users/Shared/IBM/IBM i Access" ~/Desktop". The alias is there but it is broken.  If I go to /Users/Shared and try it from there it works just fine.  It seems like it gets broken in the copy process.  What am I doing wrong?

Hello all, It's come to my attention that students (mainly in the HS) have figured out that they can right-click in Chrome, select "Inspect", and somehow, manipulate how their grades look. The change what they want and take a screen shot to show their parents, teachers, or whomever. It's all to get out of work. I've not seen it done as of yet. Is there a way to disable this feature that you're aware of? I can't find much in Google Admin about it. Thank you for your insights!

I am hoping to be able to restrict using iCloud Drive and Find my Mac. I used iMazing Profile Editor to create a plist file that I could use in a configuration profile. The profile works as it should for iCloud Drive, but it does nothing for Find my Mac. I don't want users storing company documents in iCloud Drive, and I do not want Find my Mac turned on. FMM has made getting Macs repaired through Apple a pain if it's turned on. I found a thread here discussing restrictions for iCloud. It included a link to a Github page that has a profile that looks promising. It doesn't work either. That page is here: https://github.com/ducksrfr/mac_admin/blob/master/profiles/disable_icloud_services.mobileconfigI can totally lock out the ability to use iCloud completely, but I really don't want to. I'm trying to disable the things that can cause security issues, or difficulty for the users on the networks that we manage. Has anyone been able to successfully stop Find my Mac from being used

I did a search on this topic and the only thing I could find was almost three months old.We are beginning to introduce M2 computers into our company and before I move ahead with installing Jamf Pro, I wanted to check and see if there are any current issues with Jamf that I need to be aware of.Thanks.

As new macOS versions/updates are released, I create a a smart group for each version. As such, I created a smart group to keep track of which Macs have Ventura installed on them. The only criteria for this smart group is that the operating system version is 13.0.0. As I've done in the past for previous smart groups, I also set up this smart group to send me email notification on membership changes.The issue I'm having is that this smart group is CONSTANTLY sending me false-negative email notifications of Macs leaving the group and then shortly afterwards rejoining the group.Anyone have any idea why this is happening??

Does anyone know the correct Bash command to upgrade to Big Sur? I tried using "/Applications/Install macOS Big Sur.app/Contents/Resources/startosinstall --agreetolicense --forcequitapps --nointeraction" but it just hangs.

Have had a few occasions where certain team members at my office needed to uncheck the box to join networks automatically but then were given this admin prompt.

As of macOS 11 (Big Sure) and macOS 12 (Monterey) the appstore extract script doesnt work due to changes in the directory structure and the manifest.plist files not being downloaded. This updated script (v.3.1) resolves this issue and prompts the script use to type in a name to name the PKG and DMG like that of the previous naming convention. https://github.com/blakeusblade/MacAdminHelpers/tree/master/AppStoreExtract  

So I am using the API calls to Pull a computer ID. Here is the API Page with the Computer information. JSSURL:8443/JSSResource/computers/serialnumber/#########/subset/general -----<computer> --<general> <id>3258</id> <name>Hugonaut</name> <mac_address>##:##:##:##:##</mac_address> <alt_mac_address>##:##:##:##:##</alt_mac_address> <ip_address>#.#.#.#</ip_address> <last_reported_ip>#.#.#.#</last_reported_ip> <serial_number>########</serial_number> <udid>########</udid> <jamf_version>10.#</jamf_version> <platform>Mac</platform> <barcode_1/><barcode_2/> <asset_tag></asset_tag> <remote_management></remote_management> <mdm_capable>true</mdm_capable> <mdm_capable_users/> <report_date></report_date> <report_date_epoch></report_date_epoch> <report_date_utc>#</report_date_utc>

Hello fellow Jamfs,Attempting to enroll AppleTvs for the first time, iPads are enrolling fine. I have a seperate Pre-Stage for my AppleTvs and manually assigning TVS to TV pre-stage I created. But when I try to enroll TVs I get "Invalid Profile" anyone seen this and any possible solutions? I'm skipping all the tvos options in the pre-stage so not sure where the invalid profile is coming from.  Thanks everyone 

 Apple released an update for Safari and my guess is there will be Security updates shortly.How are admins updating these?Thanks for any help.

Hello,we're starting to deploy Jamf Connect and it went well so far for the employees at home, but today I noticed that we cannot connect to our offices wifi from the Jamf Connect Login window, meaning that we can't connect from Jamf Connect to our macbook pros at the office.We use Radius wifi at the offices with AD credentials. If we login local offline on the macbook, we can then connect to the wifi from mac preference system, but the Jamf Connect Login window refuses the same credentials to connect to the wifi.The network department have no idea why the login window could be restricted from using the radius wifi. Note that we tried 3 different accounts and different macbooks ending with the same results.We also tried with the "devices" network, which is WPA2, doesn't require a username, only a password and this one works. But this network is not supposed to be used by employee macbooks.Am I missing something ? To my understanding, it doesn't make any sense at all.

How do I enable BonjourI have a script to disable it,#! /bin/bash defaults write /Library/Preferences/com.apple.mDNSResponder.plist NoMulticastAdvertisements -bool truedo I just reverse it or delete the .plist file 

Hello All, If there is already another thread dedicated to this please point me in that direction, I don't mean to duplicate them.I'm very new to Jamf prestage enrollments, so I am doing a lot of testing. Basically I have taken one of our new Macbooks out of the box and am using it as the testing device. I have been enrolling it, then making changes, then wiping from Jamf Pro, then enrolling again. Sometimes this works as if the computer is new out of the box and sometimes it doesn't. Many times it is as if Jamf remembers the machine even though I delete it. I have also tried unassigning the device in apple manager, sometimes this works sometimes not. Does anyone have a workflow for this that works every time? Basically I want to enroll the device see what happens, then make changes and do it again.

Hello everyone.I am deploying Snapcomms, a screensaver-type application to be used by our communications department. The pacakge is installed successfully, but it needs access to PPPC settings. I am using the command codesign -dr - /Applications/Snap\\ Client.app to get information about what settings to utilize. These are the settings I got: However, the deployment errors with this message:In the payload (UUID: EF17794A-9081-4D7B-944F-EAA52BDA761F), the key 'CodeRequirement' has an invalid value.I contacted the company's support, but we don't have any new information yet.I am looking for suggestions in case someone has already deployed Snapcomms with Jamf or suggestions about troubleshooting this issue.Regards!

What does this setting in the configuration profile do? its under software restrictions. "Pairing with no-supervision configured host"I have a few ipads which are not functional, their mdm profile is so old that its red and it wont communicate with jamf. So i wanted to use apple configurator to manage them, but they say "pairing is prohibited by a policy on the device" just wondering if its this policy causing it. i'm going to try wiping it with itunes next.

This might be a simple fix but I have searched and my Google-Fu is weak after Daylight Saving Time ;-). I have a supervised 12.9" iPad that is in Single App mode. Somehow, it lost the Wifi and cannot be managed/reset/etc. by JAMF Pro. I have tried to reset it and put it in recovery mode but it will not go Plugging it into a MacBook Pro and iTunes yields the "This device is supervised by another device...." It seems that I have an unmanageable device that I cannot get back. Seems there has to be a way to get control of it again. Ideas? TIA, /randy

Hi has anyone seen this.Trying to integrate Azure Sentinel with JAMF Protect and getting an error."S3 forwarding values must only contain alphanumerical....." We are not configuring this and is turned off any ideas? 

Hello All,I am trying to get Cylance to install in a prestage enrollment and have been making slow progress thanks to all of you. Cylance requires the user to put in a token when installing. I have followed this post https://community.jamf.com/t5/jamf-pro/installing-cylance-package/m-p/145087#M134146 exactly. Everything seems to be running when I look at the logs, however I see this error: Result of command:/bin/sh: /private/tmp/Cylance/install_cylance_with_token.sh: Permission deniedIf I am understanding how executing a command works it should run as root. Could this be because this solution is a little older? Does anyone have any idea how to get this script to run? Thanks in advance.

I'm using the JSON configuration profile in Jamf and for some reason every time I try I save the text verbiage in the configuration profile it doesn't update on the end device so I'm stuck with the default wording. I've also tried changing it in the JSON file directly and still the same issue. Anyone run into this before?  

Hi folks,I am testing Microsoft Defender on macOS.For setting up the configuration profiles and policies I have been using this article:https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-jamfpro-policies?view=o365-worldwideandhttps://github.com/MicrosoftDocs/microsoft-365-docs/blob/public/microsoft-365/security/defender-endpoint/mac-jamfpro-policies.mdEverything is working as expected. So now it's time to make some customizations.In the Defender client I can see this in the section 'Exclusions:When setting up the configuration profile with the title 'MDATP MDAV configuration settings' I used the schema.json file from Defender's GitHub repository. Now I want to change the exclusions. Remove some from the example and add some new ones which are mentioned here: https://community.jamf.com/t5/jamf-pro/recommended-anti-virus-exclusions/m-p/42833Can anyone explain how to accomplish this? Because in the json file I can't find the exclusions for PDF or /home

Hi all, I need a report for all the apps installed on our Macs, Jamf by default shows all apps installed in Applications folder, there are apps installed in /Library/Application Support/ like JetBrains apps :/Library/Application Support/JetBrains/Toolbox/apps/PyCharm-P/is there a way to find out what apps are installed in that path?Thanks in advanced

So I came across this article https://www.jamf.com/jamf-nation/third-party-products/files/658/jssid-list-to-static-group-using-the-api-script But I was wondering if I can pass along a curl command in a single line with a computers ID to a static group using the Statics Group ID instead of writing out to a tmp xml file. Here is an example of a basic script I'm using to test. For the moment, I'm using a test serial number since I can easily populate my serial numbers into the script. If this is possible with a simple (rough example to get the point across) put $JAMF_COMPUTERID to "${apiuser}:${apipass}" "${jssURL}/JSSResource/computergroups/id/${GROUP_ID}" that would be awesome #!/bin/bash ######################################################################################### # Variables - Do Not Modify ######################################################################################### # API Credentials #######################################################################

HI All, Searched all over and couldn't find this. Looking to create an extension attribute that pulls the authenticated via for a specific ssid. The use case is, we currently allow users to connect to the corporate wifi with username and password , but it gives them a limited network connect , they cannot connect to all services. that shows up as Authenticated via EAP-PEAP (MSCHAPv2)we just implemented 802.1x scep cert authentication.That shows up as Authenticated via EAP-TLSWE plan on deploying the new configuration profile for the 802.1x but want to make sure users are connecting with the new profile and not the old one 

hi,the command: Sudo JAMF policy seems not to be supported on Ventura.Terminal says..This script support MacOS Catalina, Big Sur and Monterey only.Script exit code: 1Anybody else getting this issue? and if anything was changed...