Hi, maybe someone can help. I want to follow JAMF Michael Covington's recommendation to enable the Stolen Device Protection for iPhoneI searched the documentation and looked at the configuration profiles in JAMF Pro, but so far, I haven't found any d... View more
We ran into an issue where one of the higher-ups within our organization was having printer troubles and one of our technicians remotely logged into their Mac with the managed admin credentials. The higher-up took issue with this as the user's accoun... View more
Hi All,I'm still gaining my footing as a person in the security sector while trying to manage Macs in our environment with Jamf Pro. We have protection software such as CrowdStrike and Rapid 7. I tried searching through the community, but I'm not fin... View more
To protect data, we would like to ensure user could only transfer to USB if it is encrypted otherwise just provide read only access to USB. As per JAMF portal, configuration profile settings for media are Deprecated Just wondering if someone know ano... View more
After upgrading Jamf from 10.25.2 to 10.30.1 we get an error message when trying to save a configuration after changing it profile: enableFirewall must be set to true when enableStealthMode is not null. I'm having problems finding where to correct th... View more
Greetings friends, Wondering if anyone has a clever method for resetting Safari back to the default browser. Ideally we'd like to not lock this setting down, just change it when needed via a script, etc. Thank you View more
First off, I'm a Windows Sys Admin, and we're rolling out Macs and using jamf. Love the software, and love the OS, and realize you can't compare and lock things down the same, but still trying to secure our environment with how I and upper management... View more
Is it possible to automate an alert if/when a user goes in and creates a new local account? We have a policy in place for password changes that are needed at X amount of time. The users/groups pane needs to be enabled. Since Mac is not as granular as... View more
It's possible to save profiles created in CLI command? It's possible to improve the export of users and preferences? View more
I've been doing clean installs on our student laptops and have been getting this pop up along with one for Notification Center. Anyone know the path I would need to whitelist in our config profile? View more
Hi All, After multiple research from GitHub's, stack overflow, JAMF nation blogs I was still unable to find a method to manage, verify & delete the EFI passwords on mac devices. Not a Shell Script Expert, But still tried creating a in-house script wi... View more
We have several general use computers with automatic login, and the fact that Screen Lock (aka: "Require Password after screen saver begins") is killing us. Every reference I have found to disabling Screen Lock either refers to the plist from when it... View more
Looking to get some backers.I submitted a feature request to apple enterprise support to see if this can be controlled as pppc just like screen sharing is done now.This way apple stays happy about user controlling there privacy and we as admins get t... View more
Hi all, been looking around the past few weeks on some information on getting Tableau and JAMF to play nice so I can make use of Tableau's nice visual reporting for our environment. Haven't really found anything substantial. I did find a JAMF Marketp... View more
Hello, Indeed I try to limit as much as possible the interaction of the users for the configuration of the antivirus, only by following the following procedure: https://support.eset.com/en/kb7324-deploy-eset-endpoint-products-for-macos-using-jamf-pro... View more
I have followed Symantec's documentation for creating the configuration profiles to allow all the required system extensions, PPPC, kernel extensions, and content filter. It is working as expected for Catalina, but not on Big Sur, I'm getting the mes... View more
I am having trouble with recording the LAPS for macOS passwords to the LAPS EA. Everything works and there is no error, yet the LAPS EA is blank every time. I can see the password if I look at log details so I know the rest of the process works prett... View more
Hello everybody We have an issue with installing Kaspersky 11 Endpoint and Big Sur. We did everything that Kaspersky recommend with the configuration profile but we still have to allow "sysextctrld" Do you guys have this issue ? In the official knwol... View more
Howdy, Been on a long road trying to get Big Sur and Crowdstrike to play nice together. Almost there. We've pushed a signed config profile to all our Catalina machines (BS is still restricted) and our Falcon sensors are up to date. The issue just see... View more
Hi guys. I need to configure VPN via the macOS VP client. Each user has a unique VPN login, can anyone assist me with a script or something which will allow zero-touch config of a devices VPN details - user/password/shared secret etc. Never done this... View more
I need an endpoint recommendation with features like Day zero release support for new macOS Threat Protection Peripheral Control Web Control - View more
Hi guys. New on the tool, and I am pretty amazed about it.The thing is that some client it is asking us to monitoring web content that the macOS users browsing.I know that is possible to configurate a profile to create white and blacklists of website... View more
In response to the Sudo Vulnerability: Sudo-escalating on macOS (Jamf Blog) I put together an EA script that simply reports the Sudo Version on Macs: Data Type: String Input Type Script: #!/bin/bash #Shaquir Tannis 2-10-21 #Reports Sudo Version echo ... View more
Has anyone come up with a way to schedule a recurring quick/full scan on a system using a configuration profile? View more
I received a report today that a teacher was able to airdrop and app from their personal Mac to their school-issued Mac and the app was allowed to run. Clearly I've missed something in my setup. Because teachers cannot run .pkg files on school comput... View more
This morning, I was prompted that software (not sure if it was an extension) was blocked from "Apple Inc". I clicked off of the notification and looked in the Security & Privacy pref. Big Sur 11.1 (still have not yet updated). This is currently not a... View more
I'm looking to give a specific user access to flush specific computer logs on a policy. This is to allow SecOps to re-run policies that are set to once per computer. I set custom permissions as follows: Jamf Pro Server Objects > Policies > ReadJamf P... View more
Hi I was wondering if anyone had any tips on how I could create a profile to automate these steps when installing Bitdefender on Big Sur. https://www.bitdefender.com/support/changes-to-bitdefender-endpoint-security-for-mac-in-macos-big-sur-2626.html ... View more
Been running in circles for a while with this. I can SSH successfully into an enrolled computer using our jamf management account: "ssh jamfadmin@ipadress" However if I try to use the local Administrator account "ssh Administrator@ipadress" I get the... View more
Hi, Bitdefender has activated a new web content control module in the Endpoint Security app, which now results in the end user having to approve a system extension. I have tried to add the below approved system extensions in a config profile, but the... View more
