Jamf Pro
Powerful workflows for IT pros
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Forum Posts

Jamf Pro 11.5.0 Beta is Now Available

Hello Jamf Nation!We have several exciting new features including new Login functionality, Managed Software Updates enhancements, Packages page redesign, and more! You can find more information in the release notes when you enroll.Starting with the J...  View more

  • 639 Views
  • 0 replies
  • 4 kudos

Restrict App Store Apps

I'm looking for a way to restrict what our users install in the App Store. I don't want to disable it, just limit to "work-related" apps. Their Apple IDs are not managed, they use their own.Is this possible?  View more

  • 4865 Views
  • 6 replies
  • 0 kudos

AD password requirements prompt

So, I am pretty sure the answer is no, but is there any means to prompt a user with the list of password requirements when they are changing an AD account password? I see it works for local accounted based on our password profile deployed to the mach...  View more

32dab1d34c104b989f6e6d3c418a1092
  • 541 Views
  • 0 replies
  • 0 kudos

Custom schema for munki

For everybody using Munki with Jamf here is a schema for it. It borrows heavily form the manifest made by the guys from the ProfileCreator Github. It only misses references to their Github and version hints { "$schema": "http://json-schema.org/schema...  View more

  • 1439 Views
  • 1 replies
  • 0 kudos

Disable SSH on devices

Hey, there are some machines that have SSH enabled with the following Startup Configuration: Now I am looking for a way to disable it. I found the following script: sudo systemsetup -f -setremotelogin off Will disabling SSH interfere with anything re...  View more

d435a4ca546742bea3d07ac64ccce264
  • 3434 Views
  • 2 replies
  • 0 kudos

iOS, Jamf Reset, Jamf Setup and process questions

Hi! As my institution's Jamf admin I'm working on developing procedures to manage our to-this-point large pool of essentially unmanaged iOS devices. Prestage Enrollment isn't new to me, but managing iOS very much is. I'm currently working on bringing...  View more

  • 1319 Views
  • 1 replies
  • 1 kudos

Bootstrap Token

I just upgraded to 10.18 on-prem. I can't find much info on Bootstrap Tokens in the documentation. Anyone here know how to turn it on/use it? I tried running profiles install -type bootstraptoken on my own test machine but I get an error saying profi...  View more

  • 2483 Views
  • 2 replies
  • 0 kudos

A Guide for Custom Screen Savers

There is a lot of information about custom macOS screen savers and how to implement, but it took me a long time to sort through everything and find answers, so i am posting my findings here. I am going to try to keep it simple. Task: Deploy a custom ...  View more

  • 9322 Views
  • 5 replies
  • 5 kudos

Disable KeyChain export private keys and certificates

Hi all,Is there any way to disable export option for some private keys and certificates in KeyChain?I tried to import the keys with -x option (Specify that private keys are non-extractable after being imported.) security import -x At the first right ...  View more

  • 2708 Views
  • 5 replies
  • 0 kudos

Issue with Apple ID

Since the release of iOS/iPadOS 13, I have had the issue that pretty much daily I am constantly being asked to enter my Apple ID. This is on a managed iPad 5th gen from my work. The thing that seems to work for a short while is hitting cancel rather ...  View more

  • 679 Views
  • 3 replies
  • 0 kudos

Forcing Allow in Security and Privacy

I would like to automatically force Allow access to the Microphone and Camera for apps such as Zoom and Chrome. As part of our security policy we have disabled users from accessing the security and privacy setting. Whenever they need to grant access ...  View more

  • 9221 Views
  • 17 replies
  • 2 kudos

Way to bypass blocked apps from loading

Have a need to allow certain applications to run without having to go to System Preferences>Security Privacy and selection "Allow" from blocked downloaded apps. It there an option in JAMF to do this?  View more

  • 1129 Views
  • 1 replies
  • 0 kudos

Security command: User interaction is not allowed!

Hey guys,I'm need to run security show-keychain-info command to query Keychains information of endpoints. Some of them return User interaction is not allowed although their Keychain is unlocked.Other security commands don't work on those endpoints.Ho...  View more

  • 2240 Views
  • 1 replies
  • 0 kudos

Missing Diagnostic Software in Gateway Manager

I just set up a new AST server running catalina and the latest version of Gateway manager and Diagnostic server. Gateway manager currently says all of the diagnostic software is missing but it shows perfectly fine in the Diagnostic Server. All of the...  View more

bdfad4f7efd040ae86f44a0ff35e5002
  • 426 Views
  • 0 replies
  • 0 kudos

Lost Mode Licensing

Afternoon everyone, I just wanted to gauge best practice around managing stolen / lost devices within Jamf.So if we have a bunch of devices lost or stolen and we activate lost mode, the device will stay as an active record within Jamf.If we were to "...  View more

  • 724 Views
  • 0 replies
  • 0 kudos

Wrong recovery partition version

After upgrading our Macs on mojave 10.14.6 we had see that many Macs have the wrong recovery partition version (10.13, 10.12, etc…). We realized this when we wanted to reinstall a macos computers again. My question is the following, how can I find ou...  View more

  • 729 Views
  • 2 replies
  • 0 kudos

Sophos Catalina Prompting for FULL DISK ACCESS

Hi Guys Got an issue where Sophos is prompting for full disk access, we have created a profile and pushed it out to myself as a test user but I still get this pesky end result pop up. See attached screenshots of a profile created based on KB from Sop...  View more

ccd58b80a3bd424787bcefd796bb244a 5dd6340b46544b50ad4542b96159a9ed
  • 7488 Views
  • 37 replies
  • 1 kudos

Log out after 30 minutes of inactivity

Hi all. We seem to be unable to remove this setting via Jamf, whether we set it to to no tick or to the maximum amount of minutes allowed (960) then it defaults back to 30 minutes. We are using all MacBooks so no shared devices requiring this setting...  View more

5b0ab704d3194ca7b83bf863bdbd2185 00ba886b61e54e588033813ff3ac79b9
  • 1203 Views
  • 3 replies
  • 0 kudos

Managing Safari with Configuration Profile?

Is anyone managing Safari using a Configuration Profile on macOS Mojave? I have official documentation for Firefox and Google Chrome from Mozilla and Google respectively, but I can't find anything from Apple (or on here) about managing Safari. There'...  View more

  • 9630 Views
  • 11 replies
  • 2 kudos

can't connect to corporate wifi suddenly

Hey this is a shot in the dark - All our Macs can suddenly not connect to corporate WIFI. only thing I can think that has changed is JAMFcloud updated to 15. any big picture ideas? can't find anything inside our environment that's obvious  View more

  • 1269 Views
  • 2 replies
  • 0 kudos

Network user account can not login

Our company is mainly a windows environment but we have taken on a single macbook pro with OS X 10.14.6. When it was initially setup I created a local administrator account then a second admin account for the user that I then bind to our windows acti...  View more

  • 3687 Views
  • 3 replies
  • 0 kudos

Remove Shadow from Login Screen

I've seen several threads talking about replacing the login screen background in HS and Mojave, but I don't see anyone mentioning the shadow behind the credential fields/icons. Does anyone know how to remove this? I'd like to have a white login windo...  View more

  • 292 Views
  • 0 replies
  • 0 kudos

Auto Logout profiles not working with T2 Macs

One of our administrators has noticed that his Jamf config profiles with payloads set to log lab users out after 15 minutes of inactivity are not logging the users out of certain iMacs. This issue is specific to his new iMacs, but on his older Mac mo...  View more

  • 627 Views
  • 1 replies
  • 0 kudos

AD bind script does not run via Jamf, just locally

Hello all. I struggle so hard for hours now to determine what could be wrong with the following AD script: #!/bin/bash apiurl="https://jss.company.com" # decrypt API user auth string function DecryptString() { echo "${1}" | /usr/bin/openssl enc -aes2...  View more

  • 1263 Views
  • 7 replies
  • 0 kudos
Labels