On some macs, when the policy to set the EFI password is run it has a very useless error message in the policy log of "The operation couldn't be completed. (com.jamfsoftware.task.errors error 188.)". Someone else in February asked about this same exa... View more
https://support.apple.com/en-us/HT207570 Will the above be supported by JAMF? View more
Have have been testing the removal of admin rights for some of the users in our environment running on MacOS. One issues that has come up is the ability to change the password for Keychain "login". For a standard user that options is greyed out. If w... View more
Hello everyone, I am new to jamf, and I am seeing an issue during the user enrollment process for macOS. I am using the hosted version of jamf. When I am outside of my corporate network, enrollment works fine, and the jamf binary gets installed.When ... View more
I'm seeing all my smart groups based on comparing patch reporting versions as messed up.Anyone else having issues?It seems like the logic to evaluate the version is somehow flawed causing either incorrect results in my smart groups or no members at a... View more
I am in the process of using the --eraseinstall switch with starttoinstall as documented here: https://www.jamf.com/blog/reinstall-a-clean-macos-with-one-button/ I use the suggested switches "/Applications/Install macOS High Sierra.app/Contents/Resou... View more
I have 5 different iMac labs for students at our university. Organisation wise it looks like this: Music labs Music Lab 1 Music Lab 2 Media labs Media Lab 1Media Lab 2 Media Lab 3 Some software applies to all labs. Some software only applies to all M... View more
Is there a way to prevent people from signing out of our Itunes accout or changing the apple music account? We have an apple music account that some users logout of and login with their own account and we wish to prevent that from happening. View more
hey all, I am running into an issue where I can install the CA JSS Built-In signing certificate. However, the MDM profile is failing to install. "Profile installation failedA connection to the server could not be" I've tried:-Enabling Full Trust for ... View more
Hi, We have an iPhone 6 that is registered with MDM through JAMF. Unfortunately the passcode is currently unknown and at the same time the device is not connected to any wifi or mobile data connection. This means, we cannot reset the passcode via the... View more
We have a lot of end users that are installing TurboTax on their work machines. We wish to block this. I can create a Restriction Software Policy; however, there are different versions. I wish to block the process that runs but I cannot find what the... View more
We don't use LDAP. Is there a way for me to include info on the CSV file I'm uploading to add new Mac laptops in DEP/Apple School Manager so that both my admin account and a specific user account are created and tied to a specific serial number? View more
I'm trying to do the CIS hardening recommendations for 10.12 and one of the ones I'm working on is enabling secure keyboard. I found @franton 's git page with a lot of the work done already, however when I try to run the script for the keyboard it en... View more
The last few High Sierra machines we have deployed I have noticed that after setting up Encryption and its completion, on the Filevault window it says Some Users are not able to unlock the disk. When I click on Enable users and login as the AD/Mobile... View more
We are seeing Macs enrolled in DEP not running the expected Splash Buddy and software install policies. My suspicion is the Smart Group the policies apply to is not updating before the enrollment completes and so the policies are not running. Wiping ... View more
Hey All, Trying to build 3 policies for our JSS regarding the google chrome browser but I'm having 0 luck! 1: I need to force chrome installs with the automatic updater installed to run 2: I need to be able to install the automatic updater on machine... View more
Hi,We are planning on migrating our casper server to a Jamf cloud environment.Does anyone know if we will need to wipe our devices and re-enroll them? We were told this might be a possibility. We were planning on keeping the same URL if possible.Any ... View more
"New Network Interfaces Have Been Detected" We do a lot of imaging of iOS devices at work and this pop-up comes up every time I plug in a device to be imaged. Does anyone know what is causing it and how to suppress it? Seems like a networksetup thing... View more
Hello friends. I was wondering if you guys have also had trouble creating images after this update of High Sierra 10.13.5. I already did update in my machine park, except that I did a base image (with AutoDMG) already with High Sierra 10.13.5 all upd... View more
Hi all- I wanted to reach out with some proactive information if you're using Carbon Black's Defense product on your Macs. If you're using Jamf to pre-approve our kernel extensions, know that for Defense sensor 3.1 and later the Team ID will be the s... View more
Recently joined a company whose computers don't have the asset tag field named, does anyone have a script to do this? Really don't facing manually naming each one View more
With Jamf 10.5 Casper Focus app removal, I'm wondering how I will lock student's devices when I need it (sometimes when I ask them to come to IT office). I know we can do that with Classroom App but the lock message is removed if the student is not a... View more
After I was finally able to convince our InfoSec to open the proxy and firewall to allow VPP, I tested it by doing an automatic install of Slack, then a Self Service install of IP Scanner onto a couple Macs. it worked fine. Yesterday I decided to ins... View more
Switched to the location token from ASM. Have two accounts and want to switch all app's VPP Accounts to clean and fresh new token. Not worried about devices. Instead of going into our 400 apps one at a time and editing the VPP to new account if I jus... View more
So i have Jamf and intune talking fine the app ID is all good and all says its fine. I can enrol from self service and the Mac shows in Azure as registered but then it never seems to talk to InTune to pass on the computer details and become compliant... View more
Hi, I have already enabled the MDM on Apple School for DEP and I see all machines populating but as "unassigned" under Enrollment I tried manually to enrol an iMac and get this error: Profile installation failed. Unable to contact the SCEP server at ... View more
I'm pushing out a dockutil script nested in the outset login-once folder, for AD users.... I have a couple of lines in the script adding: ~/Documents and ~/Downloads Both are now showing up as Locked folders. To be clear, they are tagged as such, but... View more
Is a multi-tenant Jamf Pro on the cards anytime soon? Small MSP here, don’t want to manage multiple installs (would rather have one setup really good). Would also like to have polices at the ‘top level’ that can be added to the organisations within t... View more
Hello guys and gals, im looking for suggestions on how to automate the install of keychain certificates , some end in .PEM and setting them to system keychain, always trust. its about 5 certificates in total. They have pretty much shot down my sugges... View more
This is in regard to the Jamf Blog post Reinstall a clean macOS with one button. While this functionality does appear to be extremely handy, it has become clear to me that Apple did not see fit to test this workflow with FileVault enabled Macs (big s... View more
