I'm certain the answer to this is "you can't," but I figured I'd try here.I want to get some VPP licenses for the Catalina installer so I can scope them out to some machines without them having to hit our Jamf servers. Unfortunately, Apple School Man... View more
I would like to enable a group of users to be able to flush policy logs on clients, but without granting them the "Administrator" role.What are the privileges that I need to set for this group to be able to do this flush command?Thanks. View more
I would like to enable a group of users to be able to send the "Lock Computer" command, but without granting them the "Administrator" role.What are the privileges that I need to set for this group to be able to send this command?Thanks. View more
I am sorry, but I can't find an answer for this anywhere. I have used VPP invitations for years, once a student accepts it, I can push iBooks to their iPad. I have also always used the self service portal for apps and removed the app store.In the pas... View more
Occasionally I'll run into users who have installed Garageband, Pages, Numbers and Keynote or they'll end up being preinstalled on a new Mac (less common now) and I was wondering if anyone has ever created a policy to uninstall or remove these from a... View more
Hey All.. I got my hands on an M1 MBP since we are starting to deploy more M1 Macs. I built a DMG to deploy an M1 based app and it builds fine in Composer. It's about 166MB but when the DMG is installed, it's 0 bytes. Empy .app folder. Looking on the... View more
So last week or so, ive ben trying to upload a package or DMG around 10GB and it gets stuck at 100%, never faisl but also never finishes. If i close the page and try again, it doesn't show that it was uploaded already. And same thign happens, just ge... View more
I would like to know if you can move a computer from one smart group to another without having to reimage the device. We have setup smart groups that pickup the computer from pre-stage but once they are in the groups we can move them to a different s... View more
Hello I'm running into a tricky situation. Indeed it seems like a bunch of people already encountered this problem. But never I was able to find a solution or a proper diagnostic of the said problem.Here I am:Using verbose I saw that it was freezing ... View more
Just wondering if anyone knows how to configure Defender to exclude network volumes.1) One of ours mounts as "data" which is a pretty generic name. So for example I could exclude /Volumes/data for that but I worry that I may be excluding a thumb driv... View more
What happens when we choose option "Allow SSH access for management account only" under Settings: Global Management: User-Initiated Enrollment. I am asking this question because we want to understand the security mechanism. View more
I have a pool of systems where sudo is stuck - entering any command into the terminal that you need to elevate using sudo gets hung - sudo never requests the password, and the command never runs.The only common denominator at the moment is that all t... View more
Hi all, I am trying to push a folder containing images from jamf to a user folder. Once pushed, I want to target the images in then folder to change the desktop wallpaper and user account image in user and groups. I am trying set this once computer e... View more
We have setup the Jamf AD CS Connector to allow for machine-specific certificates to be deployed to our Macs via a Configuration Profile. This works fine, except for the machine certificate is not trusted. A user would have to go into the Keychain an... View more
Looking through the documentation, I couldn't find a way to easily remove the ConnectWise Control Client. Created the script below to help anyone who uses the app. Please add your control client's unique id where the "x's" are. #!/bin/bash # Brandon ... View more
After our server was updated to 10.31 the unknown keys feature is presenting itself in a number of profiles. At first all unknown keys were "payloadenabled" which per the release notes can be safely removed.However, now a number of the profiles have ... View more
I have a user who has iCloud setup on their corporate machine, their account instead of being the standard 500 local user ID has a User ID 12345678 digits. This usually tells me its tied to the iCloud/Apple ID the password cannot be changed locally w... View more
Hi everyOne, I need your help pls OR if anyone has get it this problem before when enrolling MAC M1Pls note that with others like MacBook Pro the same prestage profile works fine.So i explain :I added a macBook Air M1 to prestage profilei reboot the ... View more
We have ipad 8th generation and i need to turn icloud off but still leave mail app open. I know i can turn both off with Modifying account settings. But I still need to use mail app. View more
Essentially I have an enrollment script that calls on the custom trigger "FV2" to run, all using jamfhelper.During DEP enrollment, user needs to auth to Okta then create a local account using setup assistant. That user is an admin.However, based on m... View more
I'm trying to change some computer Prestage assignments using the MUT tool but having difficulty. In MUT I have selected 'Remove from Prestage' and then input the appropriate id# but when I run it it errors out with "404 error: Computer Prestage with... View more
Hi all,I have been tasked with bringing our Mac clients to 75% compliance with the CIS Level 1 benchmark for macOS 11. I am currently using the Jamf-provided scripts (https://github.com/gocardless/CIS-for-macOS-BigSur-CP) to automate rollout to our m... View more
Hello,I'm fairly new to managing Jamf, but not so much to its use. Right now I'm curious if anyone knows a way to help speed up the login process for my user's MacBooks. Right now, the computer boots to the login screen and users are prompted to ente... View more
I have been wanting to add fields in the DEPNotify registration process for the user's full name and email address. I have successfully made the necessary modification to have a field for the user's full name. The documentation inside the script stat... View more
I have two Windows servers in a shared resource internal domain running in a cluster. The public cert: jamf.company.org is installed on the F5 with SSL termination and balanced between serverA.local and serverB.local Yes, I know .local. It's this com... View more
Has anyone else run into this issue? It seems to be happening more and more to the point where most apps aren't installing. The weird thing is, this doesn't happen on all iPads, they will be the same type and the same iOS. Also, it's not the same app... View more
Hi there,Looking for instructions on how to install the Veeam Agent for Mac. Veeam doesn't have any instructions they just say to "refer to the documentation of your MDM solution.". Obviously there's nothing in the documentation for how to install th... View more
I am having trouble with configuring our Apple TV's. On Jamf Pro Pre-Stage enrollment it shows: Assigned - Pending Sync. I unassigned it from DEP and Re-Assigned by to Casper with no success. In addition to this, I am unable to change the name on the... View more
Hi. This is my first post, so be nice. insert laugh emoji here. The place I work at is having a hard time tracking workstations (PC and Macs). I don't have any good information on who owns a Mac. It's also part of university and different systems wit... View more
When i go to enrollment invitations and try to send a text enrollment invitation to any user that does not have ATT as a carrier the users do not receive the text and I have to use the email option. ATT users it works they receive the text jamf enrol... View more
