Jamf Pro
Powerful workflows for IT pros
cancel
Showing results for 
Search instead for 
Did you mean: 

Forum Posts

Jamf Pro 10.32.2 Release

Hi Jamf Nation,Today we are making an update for Jamf Pro available to include fixes for the MDM commands table that caused some Jamf Pro server performance issues and prevented apps from updating. A cloud upgrade is scheduled for this weekend, see b...  View more

  • 8290 Views
  • 18 replies
  • 7 kudos

Jamf Pro 10.32.1 Release

Hi Jamf Nation,Today we're releasing a hotfix for Jamf Pro that addresses a recently responsibly disclosed security issue.We strongly recommended that you upgrade to Jamf Pro 10.32.1 as soon as possible. The following CVE is addressed by this release...  View more

  • 6221 Views
  • 26 replies
  • 5 kudos

What do you have maximum clock skew set to and why?

Our security setting for maximum clock skew has been set at 15 minutes for several years now. However, as our fleet grows, we find more and more devices that go for several days/weeks/months without being recharged or powered on at all. Before I chan...  View more

  • 56 Views
  • 0 replies
  • 0 kudos

Unlocking With Apple Watch Is Not Allowed

It looks the latest update to Google Remote Desktop is causing Apple Watch unlock to fail with error message: "Unlocking With Apple Watch is Not Allowed When Your Screen is Being Shared". Apparently, Google Remote Desktop is requesting access to Priv...  View more

  • 63 Views
  • 0 replies
  • 0 kudos

Installing/Upgrading SecureDoc

While I have built packages thru Composer before, the method that SecureDoc (by WinMagic) installs it's product is somewhat different and I am unsure how to implement it thru JAMF. For SecureDoc Mac client updates, when the SecureDoc server is upgrad...  View more

  • 94 Views
  • 1 replies
  • 0 kudos

One user profile for multiple users

Here's the situation: In a Mac lab on campus we would like it if when any student logs in (using NoMAD and authenticating to AD) they are put into an existing profile that does not match their username. For example, the Mac is configured with a stand...  View more

  • 274 Views
  • 2 replies
  • 0 kudos

Splunk Jamf Integration

Jamf published to Splunk base an integration that allows you to connect your Jamf data inside your Splunk enterprise You can find the details here. We can share the visuals we make by copy pasting our strings. For instance to make the attached Map of...  View more

  • 194 Views
  • 4 replies
  • 0 kudos

Disable DNS over HTTPS in Firefox

I was looking everywhere for this info so hopefully this will help some of you too: With the new v70 of Firefox, DNS over HTTPS is turned on by default. Our Network and InfoSec dept do NOT like that and asked us to disable and block this. After some ...  View more

  • 215 Views
  • 1 replies
  • 2 kudos

Managing Apple Security Patches

Hello guys, I am pro with scripts, I want add a restart pop-up if script need to restart machine. We want to add restart pop-up with these steps;- Check script's result if there is not security updates to install just quit- Check script's result if t...  View more

  • 112 Views
  • 0 replies
  • 0 kudos

Update Keychain Password Script

An ongoing issue at many locations for AD bound macs is that if the users change their password incorrectly their keychain does not sync. 10.14.4 and up compounded this due to the 'update keychain' prompt not working and just creating a new keychain....  View more

  • 395 Views
  • 1 replies
  • 1 kudos

PPPC - SystemPolicyDocumentsFolder Missing

I'm having an issue where I'm trying to create a PPPC Profile but the option to allow or deny SystemPolicyDocumentsFolder is missing from the JSS. What's interesting when you use the PPPC Utility from Jamf it's in there. If I export the profile from ...  View more

  • 83 Views
  • 2 replies
  • 0 kudos

PSA Hacked Lightning Cables

Hey Everyone, I just wanted to post this article I came across for anyone out there that goes to events/trade shows/etc to be very careful of using free lightning cables that may come in giveaway bags or goodie bags: https://9to5mac.com/2019/10/02/ha...  View more

  • 74 Views
  • 0 replies
  • 0 kudos

Unable to Add AD Users to FV

Had anyone ever experienced this issue when an AD user tries to log into a freshly built machine and I go to Security & Privacy > Filevault > Padlock (Enter Admin Creds) > then click on enable users , you should get a window with the users that can b...  View more

  • 86 Views
  • 6 replies
  • 0 kudos

iOS S/MIME Certificate Management

I am trying to see if anyone has had any luck/experience with managing S/MIME certificates within iOS. Specifically, the public key certificates for recipients. This is an IMAP account, not Exchange, so GAL is not an option here.I have attempted to c...  View more

  • 57 Views
  • 0 replies
  • 0 kudos

iOS S/MIME Certificate Management

I am trying to see if anyone has had any luck/experience with managing S/MIME certificates within iOS. Specifically, the public key certificates for recipients. This is an IMAP account, not Exchange, so GAL is not an option here.I have attempted to c...  View more

  • 161 Views
  • 3 replies
  • 1 kudos

Possible to look at last known location on lost iPad?

One of our supervised iPads was in a backpack that a student lost. According to Jamf Pro, it says the last location update was yesterday at 1:33 PM, but approximate location says "waiting on device". These pieces fo information seem to contradict the...  View more

  • 87 Views
  • 0 replies
  • 0 kudos

Outlook iOS Managed Data (Contacts)

Microsoft Outlook is installed on iOS, via VPP as “Managed” (Make Managed When Possible). Create or sync Contacts to the device. The Contacts don’t seem to be in the Outlook “sandbox” as managed, because when the app is revoked, the Contacts remain b...  View more

  • 90 Views
  • 0 replies
  • 0 kudos

Jamf Parent Warning!

Warning! With Jamf Parent, there is currently no way to unlink parent control of a device. There is a way to clear currently pushed settings, but the parent app still has the ability to reset those settings. This becomes a huge issue especially if on...  View more

  • 182 Views
  • 4 replies
  • 1 kudos

Automatic IP Audits?

I was wondering if there was something pre-made I could use to pull IP address of devices from the JAMF console and have the report run through a whois and send out an email to myself for any IP's not geo-located in the states? Or is this something I...  View more

  • 56 Views
  • 0 replies
  • 0 kudos

Chrome Vs Safari

At the school district there is Securly for filtering and Chromebook / iPad mix for students. Google Admin is used for Chromebooks, and Jamf is used for iPads. The student email is provided through Google as well. On the iPads, would Safari or Chrome...  View more

  • 217 Views
  • 2 replies
  • 0 kudos

Chrome Extensions

Has anyone figured out how to stop students from downloading extensions in Chrome and Safari like the dreaded Ultrasurf and other VPN's? We are a mac environment running 10.14.5 OS.  View more

  • 325 Views
  • 11 replies
  • 0 kudos

Intune integration issue - compliance checking failed

We use JAMF pro 10.10.1. In company external network, this network with full security control, when we setup JAMF integrated with Intune, all good, we can see Mac registered into Azur AD, company portal installed success, but compliance checking is f...  View more

  • 46 Views
  • 0 replies
  • 1 kudos

Restrict ability to change iOS folder names?

I'm probably missing something basic, but I have a number of iPads loaded with children's software and some of them are in folders. Some industrious children have realized they can press and hold down on the folder to access the ability to change the...  View more

  • 60 Views
  • 1 replies
  • 0 kudos

FileVault 2 Key Escrow + Long String

I've been using homebysix's reissue_filevault_recovery_key.sh script in a policy to recover lost FV2 recovery keys, but lately the keys that are recovered are these crazy long strings: Has anyone seen anything like this? What could be causing this?  View more

  • 118 Views
  • 5 replies
  • 0 kudos

Apple TV Identification

We noticed this morning that one of our Apple TVs has gone missing and it is checking in from someone's home. I can see the last IP. Is it possible to learn anything more about the Apple TV? Can I see previous IPs, the logged in apple ID, or the SSID...  View more

  • 39 Views
  • 0 replies
  • 0 kudos

Restart iPads in a specific smart group

I've been fumbling around with this for a bit now and I'm feeling pretty stuck.I'm trying to get all the iOS devices in a specific SmartGroup to reboot via a script. groupid=104 jssAddress="https://myurl:8443" devices=$(curl -sku "${jssAPIUsername}:$...  View more

  • 138 Views
  • 9 replies
  • 0 kudos
Labels