Hello,Our marketing department tasked IT with providing office signage for our two offices- originally we were looking at BrightSign which seemed fairly expensive per device. With the recent discount on Apple TVs, I thought they would provide a cost effective solution as well as giving AirPlay capability to the monitors around the offices.The thought was to give each department a Managed Apple ID to drop their own photos and slides into iCloud photos and have the Apple TVs cycle through those images when not in use. And if whoever is managing that account leaves the company, we could reassign the Apple ID owner in Apple Business Manager.When attempting to sign into a managed Apple ID on the Apple TV that is enrolled in ABM & Jamf, we receive the message, "This Apple ID is not supported on this device." It has already been logged into www.icloud.com as well as on a Mac- but for whatever reason will not login on the Apple TV.Is this just flat out not possible? If not, do you hav

I noticed that our macOS Monterey app still shows an older version of the app (latest is 12.6.1 but shows 12.6). Is there a way to refresh it so it can grab the latest version or is this normal for macOS updates? All other apps are up to date. I don't want users updating to an outdated version only to have to update it again.

Hi everyone, I'd like to ban users from disabling chrome/safari specific extension (McAfee Endpoint Security Web Control). Any idea for the config to setup in jamf ? Should I rebuild Chrome bundle or just push a policy ?

Hi All,I've been trying to setup Tableau Desktop to install on our managed Macs.  I'm very new to setting up packages to deploy but have had success with other installs.  This one just does not want to install.  Has anyone had success with getting this setup and would like to provide how they did it?

I'm using the cloud-hosted version of Jamf Pro. Often (or always?), the page title shown in my browser's tab or window title ends with an asterisk *. Today the title ends with two asterisks **: It doesn't matter what page/part of Jamf Pro I'm using, all the page titles have the asterisks appended. What does this mean? Is there some sort of alert I'm supposed to be checking on?Thanks for any enlightenment! 

I know iOS devices with JAMF can have Lost Mode enabled. Is there an equivalent for MacOS out there? Primarily, I want to make lost Macs scream and be able to track their physical location. I've done some digging and can't find something myself, so I'm turning to the JAMF community. Any leads would be appreciated! Thanks. 

Hi all. Has anyone been able to set up a mobileconfig profile to automatically set up a gmail account? We use Google Apps, and want to be able to provide a 1-touch setup through self-service to import all details into the built-in mail settings. --Nathan

I've started to play around with the extremely versatile swiftDialog tool.  One of the things that I'm finding most interesting is the ability to provide a progress bar based on contents of a command file.  I've started to think through how this could be used for a scripted macOS upgrade.  It should be easy enough to read from the startosinstall.log file into whatever command file is being used, and the text is fairly predictable throughout.  That said, I'm still new to it and learning how to make best use of it.Has anyone already built out a script to display the startosinstall progress via swiftDialog?

Hello, I'm trying to install Jamf Pro on a windows PC and I'm getting this error:  

We updated to 10.42.  We are seeing an error where every single policy that has a package fails to install the package but the rest of the policy goes through.  So if the policy has a package payload and a script payload, the package fails with error 1200 and the script runs as expected.    We are able to open Jamf Admin and even connect to the share directly.  All file share distribution point settings are correct, the SSL cert is valid, and we verified all password are correct.  

Hi all, sorry for the rookie question, just getting Jamf environment set up in the (now cloud based, remote) office, and there's a lot of machines that have.... been around a little while  ;-). I would really like to have some sort of clean slate as we transition to Jamf, but I can't really wipe all these remote machines (more than 30) and start over (we can't use automated enrollment with these older machines, and many of the non tech savvy users would be totally lost if I had to talk them through a clean OS install over the phone or something), as more than half of them are spread out all over the place with all of our users working remotely now. As an alternative, I was thinking it would be nice to clean out all of the old versions of applications (we use a lot of Adobe, 3d and graphics software in general, so the older versions pile up rapidly, and no one ever has time to do much about it). Anyone know of a script that will remove not just the entries in the /Applications dire

Does someone have a custom configuration profile to just Defer Updates on macOS? I rather not have to deploy the full Restrictions Config Profile to Defer Updates since that seems to end up controlling too many other things that we don't need controlled (or grayed out). 

At our school the most iPads are iPad Air 2 and they have few years yet working. We didn't remember if we registered the iPads with any iTunes account and now, I restored an iPad with the last IOs version and I get a stuck iPad because it is locked and we didn't remember the account used, as the message didn't show all the account name. Any idea that we can do, change the iPad to shared and restore again maybe? Thank you very much

Hi all,I am trying to install GlobalProtect on our Macs via Jamf Pro. I have GP installed with no issues and have the policy to set to configure the default portal. This all works great; however, the problem is, during the installation, GlobalProtect is not installing 'GlobalProtect System extensions' (see linked picture). Without this, I don't have a working VPN connection. I tried a few things I found on https://docs.paloaltonetworks.com/, but nothing works. It works fine if I manually install GlobalProtect and check this box. If I deploy the package with Jamf Pro, the box doesn't get checked, and the VPN doesn't work. Any ideas?

Hello dear forum,We are using Tunnelblick to establish a VPN tunnel. We distribute Tunnelblick directly when setting up the device per policy.For the newer Macs (from M1, AppleSilicon) it is necessary to install the Tun & Tap extensions for Tunnelblick.This requires to restart the Mac in recovery mode and to change the security policy in the Startup Security Utility (see screenshot in the attachment).Since this requires admin privileges and I only create a hidden admin user via pre-stage, if I do this manually, it shows me here that there is no admin user.My question is therefore, whether it is possible to change the security policy via configuration profile or script to via Jamf to reduced security without that a manual intervention is required.Preferably the Tun&Tap extensions should also be approved automatically.I had already created a configuration profile, but this did not lead to the desired success (see attachment).Tunnelblick uses the following Tun&Tap extensions:-

Anyone deployed Notion app successfully? I'm trying to place the app in self service so a non-admin user can install since it requires moving the app to the users application folder. After running from a few test machines the app installs successfully from self service but fails to open saying its not installed properly. So far i've built the installer from composer by DMG and PKG and made sure root and wheel are selected.

Greetings! I have this script that uses the API to pull the username that's assigned to the computer in the JSS and then name the computer with it. #!/bin/sh jssUser=$4 jssPass=$5 jssHost=$6 serial=$(system_profiler SPHardwareDataType | awk '/Serial/ {print $4}') response=$(curl -k -s ${jssHost}/JSSResource/computers/serialnumber/${serial}/subset/location --user ${jssUser}:${jssPass}) real_name=$(echo $response | /usr/bin/awk -F'<username>|</username>' '{print $2}' | cut -c1-11); if [ "$real_name" == "" ]; then echo "Error: Username field is blank." exit 1 else /usr/sbin/scutil --set HostName "$real_name" /usr/sbin/scutil --set LocalHostName "$real_name" /usr/sbin/scutil --set ComputerName "$real_name" fi I think the problem is with: real_name=$(echo $response | /usr/bin/awk -F'<username>|</username>' '{print $2}' | cut -c1-11); ...but I'm not sure what needs to be fixed in order to get it to print the just username again. Thanks!

Hey all,For awhile now we have had an issue with Google Chrome in which the icon just bounces up and down a few times and does not open when a user tries to open Chrome after it installs via enrollment/check-in.  We build the policy ourselves which may be the problem, but I believe the person who builds it just scans the package and uploads it directly to Jamf...Anyway, we came up with a solution that uses a script to give the login user access to the folder $HOME/Library/Application Support/Google/Chrome, and that seems to work.The only problem is, this has to be run for every user that's logged in, and what's worse we can only seem to get it to run from Self Service, which I think may have something to do with it running from root rather than as the user.  We have hundreds of shared machines that are logged into by multiple users, and it's not feasible to have every user run this.  Here is the current command we are using:#!/bin/shloggedInUser=$( scutil <<&l

I feel like a complete bone head but can’t get past this issue. Any help would be appreciated.I am studying for the JAMF 100 and setup a simple trial account.  I want to enroll an iPhone to test it.   When I go to /enroll it prompts for my jamf account, then my managed Apple ID.  No matter what I do I cannot get past this step and skip the managed Apple ID like they do in the training videos as I don’t use managed Apple id’s.  Below are the settings I verified:1.  I created a test user with enrollment rights2. under settings > global management > user-initiated enrollment under iOS I selected ‘enable personally owned devices’ via profile driven enrollment via url.  The two other boxes are unchecked.  3.  under settings > global management > user-initiated enrollment under access the group is set to “all ldap users”, allow group to enroll personally owned devices is the only option set.note: I do not have an ldap server setup for

I'm trying to get Nudge working with a JSON file but based on this older post:https://community.jamf.com/t5/jamf-pro/having-issues-uploading-a-config-profile-for-nudge/m-p/246960#M231095 My JSON configuration profile doesn't look the same. My understanding is that it should say Nudge and allow me to modify osVersion Requirements, userExperience,etc Also if I use a JSON I don't also need a separate mobile config is that correct? 

Hi,I tried to use the API to validate and then upload a CSV file to the Inventory preload:https://developer.jamf.com/jamf-pro/reference/post_v2-inventory-preload-csv-validatehttps://developer.jamf.com/jamf-pro/reference/post_v2-inventory-preload-csvI am able to use other API calls. Just these with the file upload I can not figure out and always get a 400 error.Could someone share some example code on how to use those 2 API endpoints?Thanks,Christian

I'm setting up SSO for the first time and need to map groups created in Azure to groups I have within Jamf in order to separate out Admins, techs, auditors etc - although I can't find anything on that in the documentation. Grateful for any guidance

I am reaching out to see if anyone is running into the issue about SSO not working on Beta Versions in Ventura. Thinking this will work when fully released? Not sure if this a normal when testing the Beta OS's. Ignore or Cancel it still prompts right away or sometime after 15 mins or so. AppSSOAgent looks like is not even running since it keeps quitting. Any Ideas be helpful, thanks  

We're testing a way to make it a little faster for users when they come in to get their new Mac's. We setup a staging profile, login with that account, we sign in to self-service with the user who will be getting it, at the prompt to enter local password, we put in the staging password and then run a script that switches the user on the device. We then go in to Jamf and change the user info there. The Mac shows encrypted, filevault 2 is new user and the user has a secure token. We're able to change the password, but when you log back on to jamf connect, it says incorrect password with either the current or staging password. Not sure if there is a way around this.

Hi all,We newly set up Apple School Manager and connected it to Jamf Pro (We have two on-premise Jamf instances running behind a load balancer). Our newly purchased devices are showing up on ASM/ABM and are automatically assigned to our Jamf MDM.On Jamf we set up a prestage enrollment and assigned it to those devices, after a few minutes the devices showed up as "Assigned", however when turning on the mac, it doesn't seem to recognize that it is managed by an MDM, the Remote Management screen doesn't show up at all, and the setup assistant continue as if it was a normal mac setup.The network is working fine so is the ethernet adapter (we use Belkin USB-C to Gigabit Ethernet Adapter) however, I noticed that all the new devices are in the PST time zone and there's no way to change it (we're in CET)The only workaround is for me to get my iPad out and use Apple Configurator2 to manually re-add the device to ASM/ABM.is anyone else is facing a similar problem?