Hello Jamf Nation!We have several exciting new features including new Login functionality, Managed Software Updates enhancements, Packages page redesign, and more! You can find more information in the release notes when you enroll.Starting with the J... View more
I'm looking for a way to restrict what our users install in the App Store. I don't want to disable it, just limit to "work-related" apps. Their Apple IDs are not managed, they use their own.Is this possible? View more
So, I am pretty sure the answer is no, but is there any means to prompt a user with the list of password requirements when they are changing an AD account password? I see it works for local accounted based on our password profile deployed to the mach... View more
For everybody using Munki with Jamf here is a schema for it. It borrows heavily form the manifest made by the guys from the ProfileCreator Github. It only misses references to their Github and version hints { "$schema": "http://json-schema.org/schema... View more
Hey, there are some machines that have SSH enabled with the following Startup Configuration: Now I am looking for a way to disable it. I found the following script: sudo systemsetup -f -setremotelogin off Will disabling SSH interfere with anything re... View more
I am wondering if there is a way to disable the Option+Enter method for a local admin to login to the active user’s session while the screen is locked. View more
Hi! As my institution's Jamf admin I'm working on developing procedures to manage our to-this-point large pool of essentially unmanaged iOS devices. Prestage Enrollment isn't new to me, but managing iOS very much is. I'm currently working on bringing... View more
I just upgraded to 10.18 on-prem. I can't find much info on Bootstrap Tokens in the documentation. Anyone here know how to turn it on/use it? I tried running profiles install -type bootstraptoken on my own test machine but I get an error saying profi... View more
There is a lot of information about custom macOS screen savers and how to implement, but it took me a long time to sort through everything and find answers, so i am posting my findings here. I am going to try to keep it simple. Task: Deploy a custom ... View more
Hi all,Is there any way to disable export option for some private keys and certificates in KeyChain?I tried to import the keys with -x option (Specify that private keys are non-extractable after being imported.) security import -x At the first right ... View more
Since the release of iOS/iPadOS 13, I have had the issue that pretty much daily I am constantly being asked to enter my Apple ID. This is on a managed iPad 5th gen from my work. The thing that seems to work for a short while is hitting cancel rather ... View more
I would like to automatically force Allow access to the Microphone and Camera for apps such as Zoom and Chrome. As part of our security policy we have disabled users from accessing the security and privacy setting. Whenever they need to grant access ... View more
Have a need to allow certain applications to run without having to go to System Preferences>Security Privacy and selection "Allow" from blocked downloaded apps. It there an option in JAMF to do this? View more
Hi team. When Mabooks are lost or stolen and we want to initiate the wipe data command or lock macbook command using macbook mac address or serial number. We are looking to automate this process using ServiceNow ticketing tool. so could you please te... View more
Hey guys,I'm need to run security show-keychain-info command to query Keychains information of endpoints. Some of them return User interaction is not allowed although their Keychain is unlocked.Other security commands don't work on those endpoints.Ho... View more
This question is for iOS and iPads OS. We are transitioning MDM platform to Jamf Pro. Previous MDM automatically signed in users to Microsoft apps after enrollment signin process. Does Jamf Pro support this? If it does, how do you configure this?We a... View more
Jamf | PROTECT...folks, we need to be able to set values for each item View more
I just set up a new AST server running catalina and the latest version of Gateway manager and Diagnostic server. Gateway manager currently says all of the diagnostic software is missing but it shows perfectly fine in the Diagnostic Server. All of the... View more
Afternoon everyone, I just wanted to gauge best practice around managing stolen / lost devices within Jamf.So if we have a bunch of devices lost or stolen and we activate lost mode, the device will stay as an active record within Jamf.If we were to "... View more
After upgrading our Macs on mojave 10.14.6 we had see that many Macs have the wrong recovery partition version (10.13, 10.12, etc…). We realized this when we wanted to reinstall a macos computers again. My question is the following, how can I find ou... View more
Hi everyone, I'm in a bit of an odd situation. Hoping someone will have some ideas on what I can do. I have a user with a Macbook who has been let go of the organization. Without getting into details, they are keeping their equipment. I want to be ab... View more
Hi Guys Got an issue where Sophos is prompting for full disk access, we have created a profile and pushed it out to myself as a test user but I still get this pesky end result pop up. See attached screenshots of a profile created based on KB from Sop... View more
Hi all. We seem to be unable to remove this setting via Jamf, whether we set it to to no tick or to the maximum amount of minutes allowed (960) then it defaults back to 30 minutes. We are using all MacBooks so no shared devices requiring this setting... View more
Is anyone managing Safari using a Configuration Profile on macOS Mojave? I have official documentation for Firefox and Google Chrome from Mozilla and Google respectively, but I can't find anything from Apple (or on here) about managing Safari. There'... View more
Hey this is a shot in the dark - All our Macs can suddenly not connect to corporate WIFI. only thing I can think that has changed is JAMFcloud updated to 15. any big picture ideas? can't find anything inside our environment that's obvious View more
Hi, I'm experimenting with a login script (triggered by a LaunchAgent) that moves the logged in user's Desktop folder to a new location while symlinking another folder to the Desktop folder, effectively displaying another folder's contents on the act... View more
Hi, We have deployed on our managed computer a configuration profile in order to pre-configure their WiFi connexion, which is a hidden SSID, with WPA/WPA2 encryption. But it has happened many time that some of these computers stopped connecting to th... View more
Our company is mainly a windows environment but we have taken on a single macbook pro with OS X 10.14.6. When it was initially setup I created a local administrator account then a second admin account for the user that I then bind to our windows acti... View more
I've seen several threads talking about replacing the login screen background in HS and Mojave, but I don't see anyone mentioning the shadow behind the credential fields/icons. Does anyone know how to remove this? I'd like to have a white login windo... View more
One of our administrators has noticed that his Jamf config profiles with payloads set to log lab users out after 15 minutes of inactivity are not logging the users out of certain iMacs. This issue is specific to his new iMacs, but on his older Mac mo... View more
Hello all. I struggle so hard for hours now to determine what could be wrong with the following AD script: #!/bin/bash apiurl="https://jss.company.com" # decrypt API user auth string function DecryptString() { echo "${1}" | /usr/bin/openssl enc -aes2... View more