We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.
We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.
Real talk, real tools and real-time support from people who get it.
Real answers from Apple Admins like you
Find your way around
Share your thoughts
Submit your idea
Hi Team, Can you provide detailed steps to configure in jamf Pro in terms of configuration profile and also for Policy since Rapid7 agent install is not working on Mac & intel chips? https://docs.rapid7.com/insight-agent/mac-installation/
Hello, I am a ServiceNow developer and working with our internal JAMF team member. We have integrated the two with the out-of-the-box connector. The data is coming into ServiceNow, but we have noticed an issue on the JAMF side. In the User and Location area, it is not populating even though the SME says it is mapped and setup properly. It is linked to Active Directory but seems to not be populating this area though it seems to have everything that is needed. Any idea what might not be setup or mapped that could explain this area not getting populated? It is impacting our Hardware and Software asset processes. Any thoughts or suggestions would be appreciated. Thanks.
The amtrak station in indianapolis indiana is more than just a stop for travelers — it’s a landmark that blends the city’s rich rail history with present-day convenience. Situated in a prime downtown location, it offers easy access to local attractions, dining, and lodging, making it ideal for both visitors and commuters. The station’s architecture reflects its historic roots, while modern amenities ensure a smooth and comfortable travel experience. Whether you’re embarking on a cross-country journey or arriving to explore Indianapolis, this station serves as a welcoming gateway to the city.
Grace and peace to all, We currently have Sel-Service+ enabled in our QA environment. It is blocking access to corporate resources when the Mac is connected to a VPN. We use Zscaler. I cannot find any documentation on Sel-Service+ configuration. It is using our JAMF Connect license and profile. Do we need to register Self-Service+ as an application in Entra?
We have a smaller environment and some flexibility on our update schedule. There is an MDM profile we push out with a software update payload where everything is checked except “Restrict software updates to administrator users only”. It has been like this for years and usually it means after a few weeks some folks have updated and others need a little reminder. The recent 15.5 to 15.6 update appears to be different for us. This time it pushed out to everyone on either 8/5 or 8/6. Has anyone noticed a change in how the built-in software update runs in Sequoia with that kind of set it and forget it MDM payload? There are only 10 computers running Sequoia in our environment with another few dozen running a mixture of Sonoma and Ventura, so it might be sampling/anecdotal. The other releases are in their usual state of lag two weeks after the update and all of them are using the same payload. This all came to attention because the one Sequoia user who hadn’t updated reached out complaining
I need to force install a Chrome Extension. I have looked in Jamf Nation for solution but latest ones were in 2017 and they currently do not work (from my testing). Has anyone got them to work with Monterey?
I'm integrating with JAMF MDM to get mobile devices. I have a standard JAMF pro user created and assigned Auditor privileges(grant all read). I'm able to get device info with the following info under the security object. "security": { "dataProtected": , "blockLevelEncryptionCapable": true, "fileLevelEncryptionCapable": true, "passcodePresent": true, "passcodeCompliant": true, "passcodeCompliantWithProfile": true, "hardwareEncryption": , "activationLockEnabled": true, "jailBreakDetected": false }, I have to capture the compliance info as well when I try to access compliance info using the following API call BaseURL/api/v2/conditional-access/device-compliance-information/mobile/{deviceid} it is showing null results. Please advise how can get the compliance status of the device. Do I need to get more privileges or can we capture from a security object? Thanks. mythdhr
Hello there, maybe someone has an idea for solving this issue. We have started to enroll MacBooks to employees without admin rights. We was using first the visual studio code installer from jamf mac apps. The problem with this, is that i cant add some configuratio (for example creating a symlink for this app) within the jamf mac app installer config. So at the moment i am using a normal policy with a pkg for vscode. Everything until here is working fine. When an update is released for vscode, the user (without admin right) can't install it. The first window which pops up is for the helper tool (updater) for visual studio code So i was searching for a solution and found this page here, which explains this problem: https://github.com/microsoft/vscode/issues/115805 I am able to do all this changes for the group and ownership for the logged in user but the problem still persist. My script #!/bin/bash set -x # Get the current user's home directory loggedInUser=$(stat -f "%Su" /dev/console)
Hi everyone, I’m trying to set a default font in Microsoft Outlook (macOS) using Jamf Pro, and I’m running into some trouble. By default, Outlook uses Aptos, but I’d like to change it to Book Antique, which is already available on the device. What I’ve tried: I attempted to use the 3rd-party tool OutlookFontPoke by Paul Bowden @ Microsoft. Here’s what I did: • Deployed the OutlookFontPoke script and TemplateRegDB.reg via a package (both located in /private/tmp/OutlookFontPoke-master). • Created a policy in Jamf that: • Extracts the current logged-in user • Fixes permissions • Run the command as that user: sudo -u "$loggedInUser" /private/tmp/OutlookFontPoke-master/OutlookFontPoke 'Book Antique' '11.0pt' 'black' Issue: Despite several variations of the above, I keep getting this error in the script logs: WARNING: Registry DOES NOT exist at path /Library/Group Containers/UBF8T346G9.Office/MicrosoftRegistrationDB.reg. Attempting to create... mkdir: USER/Library/Group Containers: No such f
Hello everyone,Some time ago we’ve moved from eDirectory to Entra and everything has just been work great. But yesterday I stumbled on a problem, error with calculating profiles in scope and same with apps. Has anybody else run into this?
Hi, I have a question haw can I setup on managed device via Jamf Pro (and Protect) configuration that restrict local account from some features, apps, internet, usb mount but on another account - admin account user can use all this features. Local restricted account enroled by Jamf, admin account added after enrolment manually. When the device will be login to the local restricted account should lost the connection with the internet, block some sharing features like bluetooth, airdrop, blok mount external usb devices/disks, block apps not needed or give only 2-3 apps what is needed. Tried wit configuration profiles with Restriction but working with all local account, trying some script on login but not working as it should. Could be a workaround solution…. but to get secure when restricted user use the device. Please give me some advice. Thanks!
Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!
216 Questions Answered
30 Questions Answered
17 Questions Answered
15 Questions Answered
11 likes
9 likes
8 likes
Learn about our customer advocacy program that celebrates our most passionate customers.
Join the community to receive product updates, and share feedback.
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
