Jamf Pro
Powerful workflows for IT pros
cancel
Showing results for 
Search instead for 
Did you mean: 

Forum Posts

Jamf Pro 10.32.1 Release

Hi Jamf Nation,Today we're releasing a hotfix for Jamf Pro that addresses a recently responsibly disclosed security issue.We strongly recommended that you upgrade to Jamf Pro 10.32.1 as soon as possible. The following CVE is addressed by this release...  View more

  • 5708 Views
  • 26 replies
  • 5 kudos

What's new in Jamf Pro 10.32 Release

Update: This release includes fixes for security vulnerabilities and it is recommended that you upgrade to Jamf Pro 10.32.0 as soon as possible. The following CVEs are addressed by this release: [PI-006352] CVSS 8.3 https://cve.mitre.org/cgi-bin/cven...  View more

  • 9374 Views
  • 13 replies
  • 4 kudos

Prompt user to allow bootstrap token M1 macs

Reading the apple support documentation (https://support.apple.com/en-us/HT211860) It seems in order to support Kernel extensions or software updates on M1 macs you need use ADE or change the security policy in Recovery to allow this. We currently do...  View more

  • 271 Views
  • 2 replies
  • 0 kudos

Add Search domains to our VPN configuration

We need to add search domains to our VPN configuration that we push out with Jamf Pro.We've tried "networksetup -setsearchdomains "name of our VPN adapter" .ourdomain.com". This does not work against VPN network adapters. Anyone has a way to add them...  View more

  • 110 Views
  • 2 replies
  • 0 kudos

Skip Setup Items

Hi!I am not sure to understand what the "Skip Setup Items" payload is, especially outside a prestage enrollment profile.Could you explain?  View more

  • 62 Views
  • 0 replies
  • 0 kudos

Disable Screen Lock in MacOS

We have several general use computers with automatic login, and the fact that Screen Lock (aka: "Require Password after screen saver begins") is killing us. Every reference I have found to disabling Screen Lock either refers to the plist from when it...  View more

  • 398 Views
  • 2 replies
  • 0 kudos

802.1X Setup

Good Morning,We are in the middle of a project of rolling out authenticated ethernet using 802.1X. We have configured a configuration profile in our environment, and it works at first connection, but then if you renew DHCP or disconnect and reconnect...  View more

  • 73 Views
  • 0 replies
  • 0 kudos

Temporarily disable AMP Network Extension

Our developers have a workflow here that when the AMP Network Extension in active, it's a show stopper Their work around is to "Make Service Inactive" as in the screenshot. Obviously they then don't Activate it again once they're done. Is there a way...  View more

  • 74 Views
  • 0 replies
  • 0 kudos

Custom Chrome Settings to disable Javascript

Looking for a way to manage Chrome browser preferences on all of our company devices. Preferably if there is a way to create a configuration profile or custom app install with the specified preferences. The main preference change would be to have jav...  View more

  • 208 Views
  • 1 replies
  • 0 kudos

Deploy Wallpaper to M1 Macs

I've been trying to distribute backgrounds to the M1 Macs for days. but unfortunately these M1s behave completely opposite to the Intels. Log says "Completed" but on the M1 is only a blue background instead of the distributed background. all Intel Ma...  View more

  • 478 Views
  • 3 replies
  • 1 kudos

Push Configuration Policy via Script

Hi, I am trying to install a Configuration Profile as soon as some software is installed. At the moment I am using a Smart Group, but that needs a Recon before the machine is added to the group and the profile is pushed. Is there a way I could push i...  View more

  • 299 Views
  • 5 replies
  • 0 kudos

Kerberos SSO Extension

Good morning, I've been looking into ways to get away from AD binding and have had some mild success in testing the SSO extension with Kerberos. I've found that i'm successfully getting a ticket and the majority of functionality is working as intende...  View more

  • 744 Views
  • 6 replies
  • 0 kudos

Imacs unenrolling by themselves

I have several iMacs that unenroll themselves from JAMF. When this happens. I check the profiles and they are all or almost all gone. There may only be one or two left. I go and enroll them again through our portal but they eventually unenroll again ...  View more

  • 307 Views
  • 3 replies
  • 0 kudos

SSO Extension not finding network

When testing the SSO connection to AD over our VPN, if I disconnect and then later reconnect to our VPN, the SSO extension can't find the network. If I run a kinit command in terminal, this seems to resolve it, but I can't have users constantly do th...  View more

  • 162 Views
  • 3 replies
  • 0 kudos

Configuration Profiles best disabling practice

Older threads imply that removal is difficult so I would like to change mine to do nothing or mostly harmless and then distribute the updated one. It currently has a restriction payload which seems ugly to fix since some are allow and others are rest...  View more

  • 69 Views
  • 0 replies
  • 0 kudos

Temporarily suspend configuration profiles?

Is there any way to temporarily suspend a configuration profile for single user or on a single device? For example, we have a compliance requirement that prohibits the use of external USB storage devices; allowed by exception only. So if I have a use...  View more

  • 208 Views
  • 1 replies
  • 0 kudos

Microsoft AutoUpdate App Notifications Settings

I'm trying to set notification settings for MAU, but the app is not appearing in System Preferences > Notifications. I've tried using both of these identifiers: com.microsoft.autoupdate2 com.microsoft.autoupdate.fba Here is the plist I'm using: N...  View more

  • 94 Views
  • 0 replies
  • 0 kudos

Any issues retaining old system extensions?

We have recently been experiencing issues with Symantec Endpoint Protection which we have deployed to all our JAMF managed devices. We believe that the root cause is due to some misconfigured Config Profiles which were not pre-approving some system e...  View more

  • 59 Views
  • 0 replies
  • 0 kudos

Update signed configuration profile

I have a healthy distrust of the built-in configuration profile editor and instead prefer to create my own profiles. I have a workflow which updates the profiles UUID if any changes are made, then signs it ready for upload to Jamf. The certificate Ja...  View more

  • 249 Views
  • 5 replies
  • 0 kudos

Kernel Extensions - Big Sur - Blackmagic

Hi All, Trying to get Kernel Extensions (Not System Extensions) working for Blackmagic Desktop Video v12.0 under Big Sur. I've contacted Blackmagic support who have stated that they are still using Kernel Extensions. So far in JAMF I can get non-Admi...  View more

  • 425 Views
  • 3 replies
  • 0 kudos

Permanently delete configuration profile

I managed to goof up and put some extremely sensitive information in a configuration profile. Thankfully I haven't pushed it out to any devices, but I'd like to remove the profile from the Jamf server. When I delete the profile I'm still able to acce...  View more

  • 154 Views
  • 1 replies
  • 0 kudos

Smart Card + User Switching

Scenario: we have a mac at our reception desk that multiple people need to use throughout the day. I have enabled smart card only authentication and created local user accounts, and allocated a Yubikey 5 to each user that needs to use the mac. Signin...  View more

  • 82 Views
  • 3 replies
  • 0 kudos

FDA, etc for Crowdstrike Falcon

Hello all,Has anyone been able to successfully configure a policy for FDA, Approved System Extension/Kernel Extensions? We're having a tough time with it, and CS support hasn't been terribly helpful...  View more

  • 162 Views
  • 1 replies
  • 0 kudos
Labels