We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.
We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.
Real talk, real tools and real-time support from people who get it.
Real answers from Apple Admins like you
Find your way around
Share your thoughts
Submit your idea
I created an EA to tell me the last time Adobe Acrobat was used. The issue I am facing is that i have gotten a lot of results showing as NULL. From what I can tell this happens if the user has not launched Adobe Acrobat since it has been updated. Any ideas or a better way to report the last time it was used? #!/bin/bash # Define the path to Adobe Acrobat acrobatPath="/Applications/Adobe Acrobat DC/Adobe Acrobat.app" # Adjust path if needed # Check if Adobe Acrobat is installed if [ -d "$acrobatPath" ]; then # Get the last used date using mdls lastUsedDate=$(mdls -name kMDItemLastUsedDate -raw "$acrobatPath") # Check if a date was returned (meaning it was opened at least once) if [ -n "$lastUsedDate" ]; then echo "<result>$lastUsedDate</result>" else echo "<result>Never Opened</result>" # Or a default date like "2001-01-01" fi else echo "<result>Not Present</result>" fi
Since July 4 I haven’t seen any Daily Digests. Did they get turned off as part of the upgrade to the new JamfNation?
Hello all, I am in the process of rolling out OneDrive to our Mac environment. I assigned the app from the Jamf app catalog and put together a plist with all of our settings. I discovered that OneDrive has to have full disk access in order to automatically back up the desktop folder. I used the Jamf PPPC tool to grant onedrive full disk access, however it does not seem to take. I check in system settings → general → device management and I see the config profile, however when I run sqlite3 /Library/Application\ Support/com.apple.TCC/TCC.db \ 'select client from access where auth_value and service = "kTCCServiceSystemPolicyAllFiles"' in Terminal, onedrive is not listed as one of the apps that has full disk access. Any ideas?
Hi All, I was wondering if it’s possible to push a plist/script to allow Outlook to download external images from a sender. I have seen a thread on here regarding the same topic, but I believe this is to download ALL external images from ALL senders, which is something that we do not want to do. We just want to download from a specific address. Any help pointing me in the right direction would be amazing. Thanks, Chris
Like most JAMF environments, we don't let users be admins on their own box, so when a user gets a new computer that means that they cannot use Apple's Migration Assistant either, so I had to come up with a "homegrown" solution for users to migrate their data instead of having the IT do the transfer for them. This a constant work in progress, and in no way as comprehensive as Apple's utility, but it works to get the job done. Feel free to use in your own environment and let me know of any feedback / usability enhancements, etc... Again...this is not perfect in any way, and always a WIP, so if you use this test, test, test! Enjoy... Source Code: https://github.com/ScottEKendall/JAMF-Pro-Scripts/tree/main/MigrationWizard
Hi all - Trying to install Adobe Creative Cloud through Jamf School. I have had success with other .pkg files, but the installer file generated from our Adobe Admin Console is opening up like a folder and not a simple .pkg file. I've scanned the posts here for answers. Tried to send it as a zip, tried to generate a file with Compressor. No luck. Anyone have any suggestions? Thank you!
Many organizations recommend or prescribe a specific web browser for their users. The user can change the setting in the user interface, even though it is not really obvious where to look. Many MacAdmins would like to pre-set this browser and the default during enrollment. However, there are several challenges associated with this in macOS. It would be really nice if Apple provided some means to manage this with a configuration profile. If you agree, please file feedback with your AppleSeed for IT account. While we wait for that, what can we do? Use the browsers Most third party browsers have a built-in command option to set themselves as the default browser. Most Chromium based browsers (Google Chrome, MS Edge, etc.) can be launched with the --make-default-browser option: open -a "Google Chrome" --new --args --make-default-browser open -a "Microsoft Edge" --new --args --make-default-browser For Firefox, the options are different: open -a "Firefox" --new --args -silent -nosplash -setDe
The Jamf 400 course is the highest certification level in the Jamf training program and is designed for administrators who want to deepen their knowledge in scripting and automation . This course not only requires a thorough understanding of Jamf Pro and macOS but also the ability to independently analyze and solve complex problems. What to Expect in the Jamf 400 Course? The Jamf 400 course covers advanced topics and practical challenges. Key focuses of the course include Automation and Scripting : Developing and implementing advanced Bash scripts and API calls to automate administrative tasks. Prerequisites and Target Audience To successfully complete the Jamf 400 course, intermediate to advanced scripting skills as well as familiarity with the Jamf API are required . The course focuses on deepening these topics and applying them in complex scenarios. The course is designed for Experienced Jamf administrators who are already familiar with the features and configurations of Jamf Pro an
Not too long ago, I wrote a Tech Thoughts article covering some of my favorite community resources. I wrapped up that post by mentioning a couple of conferences that might be worth your time. Well, it’s time to revisit those — because conference season is upon us! This list is heavily inspired by Jamf’s very own Armin Briegel whom has a fantastic page listing conferences and resources at scriptingosx.com/conferences — and he keeps it well updated! A Quick Look Back My personal favorite from last year was JNUC 2024 in Nashville. It was my second time attending, and I already knew a few folks, which made the experience even better. The networking opportunities are truly the highlight. Talking to like-minded professionals and getting insights into how different companies approach challenges — sometimes in very different ways — is incredibly valuable. Also, a special shout-out to the amazing @MusicCityMac Alan West, who was so welcoming and made the Nashville experience extra memorable. Wh
I’ve been silly busy learning lots of non Apple related stuff. However there does seem to be a need for a how to guide of sorts on how to implement Jamf’s new SSO requirements. Back in the day, you set up a SAML integration from your IdP to Jamf Pro. Access group of users on one side, Jamf user accounts on the other and you called it done. Jamf is changing how all this works. Instead of an integration per app, they are replacing everything with one OIDC connection from your IdP to their Jamf Account page. Every single SaaS app you then get from Jamf will then already be enabled for SSO, you just have to put the accounts in place. Essentially authentication becomes a once and done and the gating is done on the application side. Any other speculation as to intent from Jamf here I think is complete hogwash. This article has a Okta focus, because that’s the IdP I use. Your mileage will vary with other providers. Before I get into the technicals I do need to point out a major caveat. This r
I manage several dozen iPads using Jamf Pro. I have a restriction set to only allow OS updates after they are 30 days old. Once the 30 days are up, I manually push out the update using the “Download and schedule to install” option, setting the “Force install date” one week in the future and selecting the specific version I want installed. What I am seeing is that when the “Force install date” comes around, the update is not forced, but the user is allowed to continue using the iPad without updating the OS. I expected them to be “forced” to update when this date happens. Does “force” have a different meaning here? What am I missing? Also, if I choose “Download and install” it does not force the user to update the OS either. Thanks for any insight. I’m new to this world.
Hey all, looking for some help or confirmation here. I’m managing lab Macs (M1/M2, macOS Sequoia) where user accounts are deleted at reboot. I want to stop OneDrive from auto-launching that “Set up OneDrive” window every time a new user logs in — but still allow students to launch it manually if needed. Here’s what I’ve tried so far: Scoped a Jamf Managed Login Items config profile with a rule to block application.com.microsoft.OneDrive(Label Prefix, team ID UBF8T346G9) Also added a rule to block com.microsoft.OneDriveLauncher just in case that agent is still around Tried both Jamf’s GUI approach and uploading a signed com.apple.servicemanagement profile directly with <Authorization>false</Authorization> rules Even layered on launchctl disable + login hook scripts to unload and delete the LaunchAgents But the wizard keeps launching for brand-new users , even when all signs say the login item is blocked. Nothing shows in launchctl list, and the ServiceManagement profile looks like it’s
Hello all, I am running into an issue with Jamf Connect when new users try to log in via the service. Initially, when a new user tried to log in, Jamf Connect would prompt them to sync their password with the service account that we have set up on our devices. I edited the plist to change the Migrate key from true to false, now when a new users tries to log in it will go directly back to our IdP login page instead. Any ideas? Thanks.
Have Logic on our recording studio machines (AD bound lab machines), but struggling to capture the plugin cache in Composer in a way that prevents Logic scanning for plugins on every login (We have c.400 plugins so it’s a real time killer). Do chip in with any questions/ suggestions, I'm very much not a Jamf power user, but to me has fallen the task...
Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!
216 Questions Answered
30 Questions Answered
17 Questions Answered
15 Questions Answered
20 likes
13 likes
11 likes
Learn about our customer advocacy program that celebrates our most passionate customers.
Join the community to receive product updates, and share feedback.
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.