Har Jamf Problem? | Aktuella problem, status and nertid för Jamf

Reddit Posts - Jamf

Score: 1 | Comments: 10

I am not sure of your fix. It could be macOS issue or jamf config issue. I would consider redeploying your configuration profiles to see if that helps HOWEVER since NoMAD is deprecated I would also consider going to other solutions like Jamf Connect, XCreds or Kerberos SSO Extenstion. https://support.apple.com/guide/deployment/kerberos-sso-extension-depe6a1cda64/web
NoMad was formally retired by JAMF December of 2023, you need to stop using it. https://www.jamf.com/blog/jamf-to-archive-nomad-open-source-projects/
We get this error from time to time even though the config looks good, and when we do we use this script. # Get logged in user loggedInUser=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) # Remove file if exists if [[ -e /Users/$loggedInUser/Library/Preferences/com.apple.kerberos.plist ]] then rm -f /Users/$loggedInUser/Library/Preferences/com.apple.kerberos.plist fi # Create new file sudo -u "$loggedInUser" defaults write /Users/$loggedInUser/Library/Preferences/com.apple.kerberos.plist 'libdefaults' -dict 'default_realm' 'DOMAIN.HERE' /bin/sleep 3 # Kill/relaunch nomad killall NoMAD
I think you meant to post this in /r/shittysysadmin

Score: 0 | Comments: 3

Running into a similar issue and this is how we are planning/beginning to test. Not sure if anyone else can confirm ahead of our next change management window. Updating the device enrollment in Entra to allow any licensed user (so they can platform SSO - Entra Join our Jamf managed Mac’s) but putting in device enrollment restrictions in Intune to restrict Personal Windows and Personal macOS from joining. Two different portals to manage similar settings. But I *think* this will work. MS documentation is light as pSSO is still in preview.
I don't think you'll have to worry about that. From the [documentation](https://learn.microsoft.com/en-us/entra/identity-platform/apple-sso-plugin): > * The device must be *enrolled in MDM*, for example, through Microsoft Intune. > * Configuration must be *pushed to the device* to enable the Enterprise SSO plug-in. Apple requires this security constraint. Unless your users are enrolling their personal devices into Jamf and you are actively pushing the configs needed to enable it, they won't be able to join to entra.
I think you need to raise a case with Microsoft, this is not something I’d trust from a rando on Reddit. The entire function of conditional access leans on entra registration, and this all leans on user authentication.

Score: 1 | Comments: 6

Use a script instead #!/bin/sh # Get laptop model model=$(system_profiler SPHardwareDataType | grep Model | awk ‚{print $4}‘) # Get SN serial=$(system_profiler SPHardwareDataType | grep Serial | awk ‚{ print $4 }‘) # Assign a prefix if echo „$model“ | grep -q „Pro“; then prefix=„MBP“ elif echo „$model“ | grep -q „Air“; then prefix=„MBA“ else prefix=„Apple“ fi # Generate computername computerName=„$prefix-$serial“ echo „$computerName“ # Rename computer scutil —set ComputerName „$computerName“ sleep 5 scutil —set HostName „$computerName“ sleep 5 scutil —set LocalHostName „$computerName“ sleep 5 echo „Equipo renombrado a $computerName“ # Clean caché and push an inventory sync dscacheutil -flushcache /usr/local/bin/jamf recon
As someone else has mentioned, a script will work. After you have a script, you can set it in a policy to run once per computer for your DEP enrolled devices. Then after enrollment their names will get changed to the structure you want. You can also periodically run a script that detects if any fall out of this naming convention, and correct the computer name. This way everything is automated for you.
As far as I know changing the name of a computer record does not change the name of the computer (like it does for iOS/iPadOS/tvOS). You either need a policy to enforce the Jamf record name or a script to set the name and run a recon. You can also use a config profile to make the name unchangeable by Users. Also the Jamf binary has a command to set the name. So instead of the scutil commands you can just use ‘jamf setComputerName -name “NameOfComputer’

Nuvarande status för Jamf är OK

Inga problem eller störningar för Jamf de senaste 24 timmarna

Om du upplever problem med Jamf, vänligen rapportera här!

Hur fungerar det?

Realtidsdata och statistik för Jamf senaste 24h

Livekarta över rapporterade problem

Officiella länkar för Jamf

Rapporter av besökare

Senaste rapporter

Diskutera nuvarande status och problem med Jamf

Läs mer om Jamf

Reddit Posts - Jamf

NoMAD Password change not working

Microsoft Enterprise SSO extension-- prevent users from joining personal devices?

Device name enforcement is not working