Hello Jamf Nation!We have several exciting new features including new Login functionality, Managed Software Updates enhancements, Packages page redesign, and more! You can find more information in the release notes when you enroll.Starting with the J... View more
Anyone attempted or using modsecurity with their reverse proxy?Struggling with the ruleset and having issues with DEP/Self Service and jss console logins to name a few :) View more
Hello, It seems like there is no such integrated feature on JSS for iPads and I could not find anything so far, anybody has any ideas if there is something like that available? Or even if it is possible? Basically the idea is to reset the iPad's pass... View more
I posted this on the general discussion board earlier today but then I discovered this new community and I feel like it fits better here since we are all in the education world. I am wanting to improve our end user security within our school district... View more
Hello After the autoupdate to Skype 8.60, i have users getting an prompt to imput local admin credentials whenever they start Skype.After some investigation, i concluded that skype wants access to a private key in the SYSTEM keychain, and the problem... View more
Hello all! New to the community here and I am glad to have read through some of the post here to see how helpful and knowledgeable the members are. I recently purchased a bulk of A1990 Macbook Pro's from an auction from a company that went under. I w... View more
FYI: We are have posted to our GitHub repository, App Playpen. App Playpen is a python GUI application that provides a framework & automation to secure macOS applications with exceptional requirements. We have developed a methodology of managing ente... View more
I am trying to create a report for a security audit coming up. When looking at the filevault status on t2 computers its showing as not encrypted. However when you look at the computers it is showing filevault is enabled. From my understanding, comput... View more
During a recent internal audit, we were asked to provide a list of Jamf Pro administrators who have rights to view a computer's FileVault Recovery Key. If you have more than a few Jamf Pro admins, this task can prove tedious. Hats off to @dacschumach... View more
I found jamf invaluable for helping me get this issue figured out... actually kind of excited about being involved as I find out more about what this community is about. I do a lot of product testing and apparently one of our Chrome policies prohibit... View more
https://labs.f-secure.com/blog/jamfing-for-joy-attacking-macos-in-enterprise/ Just a small portion of the blog post by F-Secure which talks about the popular workaround that Jamf admins use to obscure passwords: https://github.com/jamf/Encrypted-Scri... View more
Hi Jamf Nation, I am using a security agent and want to make sure users do not turn it off. While the app itself is good at remaining hidden, it can be located and forced quit in Activity monitor. I have been working in a Smart Group to have the secu... View more
I have been told by jamf that in order to enable conditional access, proxying the traffic is not supported. I was advised to bypass the traffic, which we're unable to do due to security requirements in our environment. Even though we have been advise... View more
My security dept. want to implement Zscaler on our Mac's to secure the VPN tunneling. So I have the workflow to install it but now they are coming back wanting me to disable IP V6 on the Mac's. I checked with Apple and Apple says that not a good idea... View more
Hi!!! For your information, finally we have the new versions for macOS 10.14 and 10.15 https://www.cisecurity.org/benchmark/apple_os/ I contacted with CIS and they are already working to include the new xml benchmark under CIS CAT tool View more
Our users are AD bound, mobile accounts and we are having trouble with password resets. When selecting "User must change password at next login" in AD the users get prompted to change when logging in but of course this does not update the keychain. U... View more
I'm just wondering what endpoint security you all have on the Macs in your environment. With a lot more people working from home we have iMacs and MacBooks checked out all over. Some are working from their local computers, others VPN, and others use ... View more
Hi All Probably a question asked in many different ways. All the Macs in our environment are bound to AD & logged in as Mobile Accounts.Is there a script without logging in as admins to make that that end user as an admin? If so any solutions would b... View more
Hi everyone! For those attending our “How to Support a Remote Workforce” webinar today, I’m starting this discussion for follow up questions and discussions. We won’t have much time to take questions after the webinar but I’m glad to answer questions... View more
Hi bro I have problem with activation lock ....I get this machine from eBay....the owner send me machine locked when I try to contact him ...he said ...I not lock this machine....after fees days not reply me...anyone can help me to activate this mach... View more
I'm looking for a way to restrict what our users install in the App Store. I don't want to disable it, just limit to "work-related" apps. Their Apple IDs are not managed, they use their own.Is this possible? View more
I have a working test system to add the user images to Apple Classroom, however SSL configuration is new to me and as regards photos of students security is very important.Is a self signed cert on the server hosting the photos secure enough?The photo... View more
So, I am pretty sure the answer is no, but is there any means to prompt a user with the list of password requirements when they are changing an AD account password? I see it works for local accounted based on our password profile deployed to the mach... View more
Howdy. I'm currently working with whitelisting zabbix_agentd (the Zabbix agent for system monitoring) to no avail. In JAMF the Enable Firewall option requires a bundle ID, which the zabbix agent binary would not have. So, how does one actually whitel... View more
The Security team at my business has several security applications they want us to install, and a few of them are not getting along well with Catalina's new security upgrades. We are getting constant popups that "Application/File" will damage your co... View more
Just want to give a heads up since I did not see it anywhere else on Jamfnation yet. My security team contacted me today regarding a Tomcat vulnerability. Remote code execution in Apache Tomcat AJP connector. A lot of versions of Tomcat effected. Ple... View more
If your are a Mac admin who deploys McAfee products, a security person who administers McAfee products, or a user who runs McAfee products, the McAfee ENS for Mac product team wants to hear from you! The team is running a survey and you can submit yo... View more
Hey, there are some machines that have SSH enabled with the following Startup Configuration: Now I am looking for a way to disable it. I found the following script: sudo systemsetup -f -setremotelogin off Will disabling SSH interfere with anything re... View more
I am wondering if there is a way to disable the Option+Enter method for a local admin to login to the active user’s session while the screen is locked. View more
Hello! We currently do not enforce the firewall on macOS but will be doing so shortly. A few questions. 1. What is the industry trend? I assume it’s locking down ALF with a configuration profile and not with PF. If ALF, what is the best method to man... View more
I just upgraded to 10.18 on-prem. I can't find much info on Bootstrap Tokens in the documentation. Anyone here know how to turn it on/use it? I tried running profiles install -type bootstraptoken on my own test machine but I get an error saying profi... View more