Jamf Nation Community

ericbenfer

We have Jamf LAPS enabled for a PreStage account and a jamf binary account. For an unknown reason the PreStage account keeps getting locked out and requires a password change. When I run this command: usr/bin/pwpolicy -authentication-allowed -u prest...

ericbenfer · 02-09-2024

I am working with a Jamf environment that currently does not have any Jamf LAPS capable admin accounts. They did not create a “Management Account” in User-initiated enrollment. They did not create a “local administrator account” int PreStage Enrollme...

ericbenfer · 07-18-2023

We are using Jamf Device Compliance with InTune.Following this tech paper we have it working fairly well. Technical Paper: Integrating with Microsoft Intune to Enforce Compliance on Mac Computers Managed by Jamf Pro 10.43.0 or LaterWhen the end user ...

ericbenfer · 05-09-2023

I have an Extension Attribute that reports back the expiration date of a PIV Authentication certificate on a Yubikey.When inventory runs and a user has their Yubikey inserted it reports YYYY-MM-DD.This works very well. If the user does not have a Yub...

ericbenfer · 04-28-2021

Any thoughts on the best way to enable "Show Bluetooth in menu bar"?Either command line or configuration profile.

ericbenfer · 05-27-2024

You would only apply this to Mac systems that do not have a functioning Jamf management/LAPS account. As always TEST TEST TEST in your test Jamf Cloud instance first.

ericbenfer · 02-14-2024

Great idea. Ideally, filtered searches would be available for everything in Jamf.I always try to include the name of the payload in the configuration profile name. In the case of custom config profiles, I like to include the name of the domain space.

ericbenfer · 02-10-2024

I've an update to the smart group. "Managed By is not $yourManagementAccount" does not seem to work.So I'm using "Local User Accounts does not have $yourManagementAccount" As always TEST TEST TEST in your test Jamf Cloud instance first.

ericbenfer · 02-09-2024

https://community.jamf.com/t5/jamf-pro/retroactively-creating-jamf-laps-capable-admin-accounts/m-p/309839/thread-id/269584#M269599

ericbenfer · 02-09-2024

The goal here is to create a valid Jamf LAPS account, in case the “Management Account” in User-initiated enrollment, or the “local administrator account” in PreStage Enrollment were not created during initial enrollment. Here is what I've come up wit...

Jamf Nation Community

User Statistics

User Activity

Jamf LAPS PreStage account lockout / password change

Retroactively creating Jamf LAPS capable admin accounts???

Jamf - Intune - Azure - Device Compliance Certificate untrusted

What happens when an Extension Attribute reports back empty

Show Bluetooth in menu bar

Re: Retroactively creating Jamf LAPS capable admin accounts???

Re: Searching for Profiles by Payload Name

Re: Retroactively creating Jamf LAPS capable admin accounts???

Re: Upcoming change will enforce LAPS on Prestage admin accounts (important!)

Re: Retroactively creating Jamf LAPS capable admin accounts???