Hello Jamf Nation!We have several exciting new features including new Login functionality, Managed Software Updates enhancements, Packages page redesign, and more! You can find more information in the release notes when you enroll.Starting with the J... View more
Hi all,Is there any way to disable export option for some private keys and certificates in KeyChain?I tried to import the keys with -x option (Specify that private keys are non-extractable after being imported.) security import -x At the first right ... View more
Our security setting for maximum clock skew has been set at 15 minutes for several years now. However, as our fleet grows, we find more and more devices that go for several days/weeks/months without being recharged or powered on at all. Before I chan... View more
It looks the latest update to Google Remote Desktop is causing Apple Watch unlock to fail with error message: "Unlocking With Apple Watch is Not Allowed When Your Screen is Being Shared". Apparently, Google Remote Desktop is requesting access to Priv... View more
While I have built packages thru Composer before, the method that SecureDoc (by WinMagic) installs it's product is somewhat different and I am unsure how to implement it thru JAMF. For SecureDoc Mac client updates, when the SecureDoc server is upgrad... View more
Lazarus group goes back to the Apple orchard with new macOS trojan View more
Hi team. When Mabooks are lost or stolen and we want to initiate the wipe data command or lock macbook command using macbook mac address or serial number. We are looking to automate this process using ServiceNow ticketing tool. so could you please te... View more
Here's the situation: In a Mac lab on campus we would like it if when any student logs in (using NoMAD and authenticating to AD) they are put into an existing profile that does not match their username. For example, the Mac is configured with a stand... View more
Jamf published to Splunk base an integration that allows you to connect your Jamf data inside your Splunk enterprise You can find the details here. We can share the visuals we make by copy pasting our strings. For instance to make the attached Map of... View more
I was looking everywhere for this info so hopefully this will help some of you too: With the new v70 of Firefox, DNS over HTTPS is turned on by default. Our Network and InfoSec dept do NOT like that and asked us to disable and block this. After some ... View more
Hello guys, I am pro with scripts, I want add a restart pop-up if script need to restart machine. We want to add restart pop-up with these steps;- Check script's result if there is not security updates to install just quit- Check script's result if t... View more
An ongoing issue at many locations for AD bound macs is that if the users change their password incorrectly their keychain does not sync. 10.14.4 and up compounded this due to the 'update keychain' prompt not working and just creating a new keychain.... View more
So we are using the restrictions to disable the 'Allow iCloud Keychain' setting, as well as disabling 'Allow iCloud Drive'. The Configuration profile is applying to the device and when I sign in with my Apple ID both options are greyed out but the iC... View more
I'm having an issue where I'm trying to create a PPPC Profile but the option to allow or deny SystemPolicyDocumentsFolder is missing from the JSS. What's interesting when you use the PPPC Utility from Jamf it's in there. If I export the profile from ... View more
Hey Everyone, I just wanted to post this article I came across for anyone out there that goes to events/trade shows/etc to be very careful of using free lightning cables that may come in giveaway bags or goodie bags: https://9to5mac.com/2019/10/02/ha... View more
Had anyone ever experienced this issue when an AD user tries to log into a freshly built machine and I go to Security & Privacy > Filevault > Padlock (Enter Admin Creds) > then click on enable users , you should get a window with the users that can b... View more
I am trying to see if anyone has had any luck/experience with managing S/MIME certificates within iOS. Specifically, the public key certificates for recipients. This is an IMAP account, not Exchange, so GAL is not an option here.I have attempted to c... View more
I am trying to see if anyone has had any luck/experience with managing S/MIME certificates within iOS. Specifically, the public key certificates for recipients. This is an IMAP account, not Exchange, so GAL is not an option here.I have attempted to c... View more
One of our supervised iPads was in a backpack that a student lost. According to Jamf Pro, it says the last location update was yesterday at 1:33 PM, but approximate location says "waiting on device". These pieces fo information seem to contradict the... View more
Microsoft Outlook is installed on iOS, via VPP as “Managed” (Make Managed When Possible). Create or sync Contacts to the device. The Contacts don’t seem to be in the Outlook “sandbox” as managed, because when the app is revoked, the Contacts remain b... View more
Warning! With Jamf Parent, there is currently no way to unlink parent control of a device. There is a way to clear currently pushed settings, but the parent app still has the ability to reset those settings. This becomes a huge issue especially if on... View more
I was wondering if there was something pre-made I could use to pull IP address of devices from the JAMF console and have the report run through a whois and send out an email to myself for any IP's not geo-located in the states? Or is this something I... View more
At the school district there is Securly for filtering and Chromebook / iPad mix for students. Google Admin is used for Chromebooks, and Jamf is used for iPads. The student email is provided through Google as well. On the iPads, would Safari or Chrome... View more
Has anyone figured out how to stop students from downloading extensions in Chrome and Safari like the dreaded Ultrasurf and other VPN's? We are a mac environment running 10.14.5 OS. View more
We use JAMF pro 10.10.1. In company external network, this network with full security control, when we setup JAMF integrated with Intune, all good, we can see Mac registered into Azur AD, company portal installed success, but compliance checking is f... View more
I'm probably missing something basic, but I have a number of iPads loaded with children's software and some of them are in folders. Some industrious children have realized they can press and hold down on the folder to access the ability to change the... View more
We try to monitor student's use of their iPads. We will occasionally do spot checks by looking at their history in Safari as well as checking other things. Students have found a way around this. If they put a link in a Google Document, when they open... View more
I've been using homebysix's reissue_filevault_recovery_key.sh script in a policy to recover lost FV2 recovery keys, but lately the keys that are recovered are these crazy long strings: Has anyone seen anything like this? What could be causing this? View more
Hi, We are currently switching from Safeguard to JSS managed encryption and I have put up a policy which uninstalls Safeguard and generates new encryption key and stores it on JSS. For now we are running it on a small test group and while the majorit... View more
We noticed this morning that one of our Apple TVs has gone missing and it is checking in from someone's home. I can see the last IP. Is it possible to learn anything more about the Apple TV? Can I see previous IPs, the logged in apple ID, or the SSID... View more
