Hello Jamf Nation!We have several exciting new features including new Login functionality, Managed Software Updates enhancements, Packages page redesign, and more! You can find more information in the release notes when you enroll.Starting with the J... View more
We deploy an EFI password on all our Macs to prevent end users rebuilding their own devices, turning off SIP, etc. The policy fails on new M1 devices and there doesn't appear to be any documented way of securing the recovery boot menu? View more
Who takes care of expired certificates? Why are zuludesk certificates not renewed? What are the expired certificates in the attached images for? Thanks for a tip! View more
We are using 802.1X Wireless with AD Bound Macs. I am unable to get it to Use the Machine AD Account in the KeyChain that gets added when you Bind to AD. If I look at the account in the KeyChain and grab the user name and password, I am able to manua... View more
Hi,We're just trying to setup Jamf for the first time and have struck a slight issue that I'm wondering if anyone else has tried and can confirm if possible to do or not?We are looking at blocking the general Apple App Store and only allowing approve... View more
I am banging my head against the wall with this one and I feel a though the solution should be simple. I read that Jamf Pro 10.26 is supposed to be able to permit enabling NTP/time zone settings without needing location services turned on. However, f... View more
I have been trying to install a configuration profile for our Cortex XDR agent so that the agent can install without requiring anything from the end user. It works on most of the computers, but there are a number of computers that have the following ... View more
I'm a new customer of Jamf Protect and have to keep my macs secure according to PCI compliance as well as CIS 20 and starting to move towards ISO 27001.Does anyone have any good custom analytics that they've built for meeting compliance and best prac... View more
Has anyone been able to create a smart group to separate computers not capable of using the Virtual green Screens View more
I've seen a few other posts about this online, but we are having problems with the Guest User account not working on our Catalina and Big Sur machines. Guest is enabled and it shows in System Prefs that Guest is enabled. It just wont log in. I've tri... View more
Really? Do we need to put another bullet into you, Adobe Flash Player? View more
I recently installed a fresh macOS 11.0.1 Big Sur on my macmini. I also have several computers running macOS catalina 10.15.6. I am still able to use JAMF Recon and enroll computers with macOS catalina but when I try to enroll the computer with macOS... View more
I know I am pushing the envelope here but was wondering if a fellow admin (maybe from IBM) can point me to a working solution for the TN5250j emulator and working Java version. Our ERP system is iSeries based and I rely heavily on my day-to-day tasks... View more
We just got our first M1 MacBook, I was able to get it enrolled, and my AD profile installed. Everything looks pretty good in my local admin account, but once I login to an AD account I am unable to save any keychain items to the local/login keychain... View more
We just got our first M1 MacBook, I was able to get it enrolled, and my AD profile installed. Everything looks pretty good in my local admin account, but once I login to an AD account I am unable to save any keychain items to the local/login keychain... View more
Hello Everyone, We have a Configuration profile that is run on all machines upon provisioning, and upon enrolling my new M1 test machine, the Configuration profile in question fails with the following error: The operation couldn’t be completed. (SPEr... View more
Good morning all, Starting this morning, I'm having a problem with the download of each package from one of our Jamf File Share Distribution Points. At the end of each URL call appears the string "/".This causes problems with downloads that don't sta... View more
Hi,I'm wondering how software update deferral settings impact Software Update on both macOS and iOS. Right now, I have a config profile that defers software updates for up to 30 days. Then, on macOS, I have a policy that runs Software Update during c... View more
I have received a notification asking me to change the password method for user-initiated enrollment for the jamf admin account to a random password. I have set the password to a specific password so that I know what it is in case I ever have to use ... View more
I'm kicking off DEPNotify for non-DEP machines using the enrollment trigger. It works fine except that in many cases the time from enrollment to when it kicks off is 5 minutes or more. Is there a way to reduce that or add something so that once it's ... View more
Hi All, We use ISL for remote assistance. I added a new line as per ISL supports guidance but then the PPPC profile started to fail on random devices. I've removed the additional line but the profile is still failing on random devices. The error in t... View more
Hi, I am trying to implement Nomad Login AD for the first time to create our user accounts. I have it all working except for instances where the username is over 20 characters as this is truncated in AD. Does anyone have a solution for this? For othe... View more
So I know Jamf doesn't officially support enrolling VMs. I've found that running QuickAdd pre-macOS 11, works and the machine enrolls. Running User Initiated Enrollment, you need to set the computer model to a real mac model in order for the VM to no... View more
I am looking for a command line way to extract the icon from an app. Any ideas? Apps in Big Sur do not necessarily have an icns file in the app bundle. (I’m looking at you System Preferences) View more
So this is useful for 1 thing I know of. Google Chrome, which on some machines merges versions instead of overwriting the file. If we could add file size/size range, then we could add that if it gets 300mb or larger, we know it's merged data & needs ... View more
On Windows devices, its easy to break domain trust after a certain period of time, and I understand the impact that will have on the device. This makes it easier to protect data on old machines that a random associate might decide to "keep" after it ... View more
The operation couldn’t be completed. (SPErrorDomain error 10.) We have two Configuration Profiles for Symantec Endpoint Protection and Cisco AnyConnect client. However, they used to work with an Intel Mac and Big Sur. We received our first M1 MacBook... View more
Just wondered if anyone has come across this issue since upgrading to Big Sur 11.0.1? The padlock is permanently unlocked and cannot be locked. View more
So we currently deploy the Google Drive File Stream client to our workstations. According to the October changelog the application "supports Big Sur," but in testing our previous policies to preapprove the kernel extension for the app obviously no lo... View more
I know there's a FR that's been open forever and a day to request the ability to manage icons from within JSS:https://www.jamf.com/jamf-nation/feature-requests/1474/manage-self-service-policy-icons Within the discussion for that FR, there is some tal... View more
Is anyone else seeing failed Kext Config Profiles in the Management section for M1 Apple Silicon macs? I know kexts will fail on this hardware, so I created a Smart Group for 'arm64' architecture macs, and have 'excluded' this group from the scope (w... View more
