Jamf Nation Community

mjhersh · 07-12-2024

Hi, folks. We have some users who use their mobile hotspot on their Macs from time to time while traveling. Their mobile data is metered, so they enable "low data mode" under System Settings > Network > Wi-Fi > Details. Does this affect Jamf policies...

mjhersh · 03-04-2022

Hi everyone. Is there any way to reset a Secure Token-enabled account's password via Jamf? I would be comfortable revoking the secure token, if that is necessary, as long as that can be automated.The closest approach I have that works is to simply de...

mjhersh · 07-23-2020

Hi, folks. I'm trying to create a default home screen layout for iPads, to be applied during enrollment. These are single-user iPads and the general goal is to provide sensible defaults without locking anything down. Unfortunately, the "Home Screen L...

mjhersh · 05-02-2019

I've encountered a strange problem on a smallish (I hope) number of Macs where the recovery partition does not match the installed OS. This causes some OS updates to fail, since they reboot into recovery to complete installation. In particular, I'm s...

mjhersh · 03-13-2019

I have a group of iPads that all need access to a department-managed contact list. We're accomplishing this right now by using a Google account for shared contacts. We're also pushing everyone's Exchange account via configuration profile. The problem...

mjhersh · 08-02-2024

Have you reset the iPad after adding it to the prestage? Even if you have not proceeded through the setup assistant, I've found that devices often need to be fully wiped before picking up their new ADE status if they have ever been powered on. And un...

mjhersh · 07-15-2024

Those are both good ideas. Unfortunately, the majority of our users work remotely on Wi-Fi. I don't know of a way to distinguish between a normal home network and mobile hotspot using network segments.

mjhersh · 03-06-2024

Arguments configured in the policy are also available on the local Mac, just in a different place. You can see them using `ps ax`. The arguments can be viewed without root access, while the script file itself is only readable by root. Using encrypted...

mjhersh · 03-05-2024

That's better than nothing, for sure, but ultimately it is only obfuscation. Both the encrypted string AND the decryption key are available on the local Mac, and could be extracted by a savvy adversary. For credentials with the ability to erase any M...

mjhersh · 03-05-2024

A word of advice to anyone considering this: it is extremely dangerous to put Jamf API credentials in a policy script. Regardless of whether it is hardcoded in the script or passed as an argument in the policy, this can be extracted on the client sid...

Jamf Nation Community

User Statistics

User Activity

Wi-fi "Low Data Mode" on Macs

Automating password rotation on Monterey with secure tokens

Any way to push an iOS home screen layout while allowing user changes?

Mismatched recovery partitions

iOS default account for contacts

Re: iPad not appearing in JAMF

Re: Wi-fi "Low Data Mode" on Macs

Re: Mac Wipe Reverts OS

Re: Mac Wipe Reverts OS

Re: Mac Wipe Reverts OS