Built for Apple Admins. Powered by you.

DDM OS Reminder (1.0.0)

A swiftDialog and LaunchDaemon pair for “set-it-and-forget-it” end-user messaging of Apple’s Declarative Device Management-required macOS updates Overview While Apple’s Declarative Device Management (DDM) provides Mac Admins a powerful method to enforce macOS updates, its built-in notification tends to be too subtle for most Mac Admins.DDM OS Reminder evaluates the most recent EnforcedInstallDate entry in /var/log/install.log, then leverages a swiftDialog-enabled script and LaunchDaemon pair to dynamically deliver a more prominent end-user message of when the user’s Mac needs to be updated to comply with DDM-configured macOS version requirements.Continue reading …

20

12 minutes ago

uber99New Contributor

Ipad updates

Morning all am looking to see how people have there ipad updates setup currently am going in to software update and selecting bunch of ipads asking them to update should i be setting config up so updates get push automatically just seeing what others do.

10

23 minutes ago

ChriswisemanNew Contributor

ipad case protection success rates

I am putting together some data on iPad breakages in schools. If you’d be happy to share annual percentage of physically damaged iPads together with the case solution you use and the total number of iPads you have I would be grateful. If you have data by year group even better . I will share results once I have them collated.

41

1 hour ago

GabeCzNew Contributor

Best practice on app deployment

What is the best practice for app deployment? Is it using the “Mac Apps” menu and setting them to auto install instead of self service store, or deploying apps using Policies?My best guess is to add app-specific scripts and settings, but is there anything else that gives benefits using policy instead of just making it mandatory in the other way?

101

GabeCzNew Contributor

First User should not be admin

We don’t have ldap integration yet.So when we automatically enroll a computer (when new or wiped) the first user account is always admin. Which is impractical if the machine is shipped directly to the user.We create our admin user at prestage enrollment. or should the admin account we are about to use for troubleshooting etc be created using a configuration profile? What is the best practice i’m asking.In any way, after wipe or at first boot, the user that gets created WILL be created with admin rights. My question is if there is a way to create the first user with user-only rights as we create our admin account way before this step.Thanks

171

GabeCzNew Contributor

Jamf App Catalog apps get installed, App Store apps don't

I’m fair new to Jamf Pro so forgive my for my beginner questions.Our Jamf Pro system is partly managed by and IT department above us.I uploaded our vpptoken and reclaimed (for whatever that means)Now if I modify an app to be available in the self service store it appears (it did not before uploading the vpp token). Didn’t try to install it yet. But they don’t get automatically installed if i set them to Install automatically/Prompt the users to install. Yet. Maybe I need to wait for the next xyz communication between the macbook and the jamf pro server?

172

10 hours ago

tdentonValued Contributor

Managing Zoom's "green border" setting

DMG

Afternoon Im trying to deploy Zbrush which is dmg which has .app file wrap inside it.I have packaged this into temp location \\private\tmp Im then running a script to install it.Having all sorts off issue trying to get the script to mount the dmg.Seems to work fine through terminal using hdiutil attach /private/tmp/MaxonZbrush.dmgDoes anyone have experience with working with DMG or any good resources.Thanks in advance Tom

jbylNew Contributor

This is kind of a shot in the dark, since it’s a somewhat obscure Zoom setting -- but does anyone know how to manage the “Show green border around my shared content” option? (It’s under Settings > Share Screen.) I can’t find a key for it in ~/Library/Preferences/us.zoom.xos.plist, and toggling the setting appears to do nothing to that file.

jhathcockContributor

Mobile Device Content Filter

Does anyone have a step-by-step for creating a basic content filter for Mobile Devices? Looking through the documentation online it keeps sending me to how to set it up on macOS but not iOS/iPadOS. Basic Question: Does the filter name matter?

191

13 hours ago

avargasNew Contributor

Blocking "Games" app on iPadOS 26

Has anyone had any luck in blocking the Games app? The only thing that appears under “Restrictions>Apps” is Game Center and that does not block the new app.

2588

14 hours ago

uber99New Contributor

Ipad updates

Morning all am looking to see how people have there ipad updates setup currently am going in to software update and selecting bunch of ipads asking them to update should i be setting config up so updates get push automatically just seeing what others do.

10

23 minutes ago

GabeCzNew Contributor

Best practice on app deployment

What is the best practice for app deployment? Is it using the “Mac Apps” menu and setting them to auto install instead of self service store, or deploying apps using Policies?My best guess is to add app-specific scripts and settings, but is there anything else that gives benefits using policy instead of just making it mandatory in the other way?

101

GabeCzNew Contributor

First User should not be admin

We don’t have ldap integration yet.So when we automatically enroll a computer (when new or wiped) the first user account is always admin. Which is impractical if the machine is shipped directly to the user.We create our admin user at prestage enrollment. or should the admin account we are about to use for troubleshooting etc be created using a configuration profile? What is the best practice i’m asking.In any way, after wipe or at first boot, the user that gets created WILL be created with admin rights. My question is if there is a way to create the first user with user-only rights as we create our admin account way before this step.Thanks

171

GabeCzNew Contributor

Jamf App Catalog apps get installed, App Store apps don't

I’m fair new to Jamf Pro so forgive my for my beginner questions.Our Jamf Pro system is partly managed by and IT department above us.I uploaded our vpptoken and reclaimed (for whatever that means)Now if I modify an app to be available in the self service store it appears (it did not before uploading the vpp token). Didn’t try to install it yet. But they don’t get automatically installed if i set them to Install automatically/Prompt the users to install. Yet. Maybe I need to wait for the next xyz communication between the macbook and the jamf pro server?

jbylNew Contributor

Managing Zoom's "green border" setting

This is kind of a shot in the dark, since it’s a somewhat obscure Zoom setting -- but does anyone know how to manage the “Show green border around my shared content” option? (It’s under Settings > Share Screen.) I can’t find a key for it in ~/Library/Preferences/us.zoom.xos.plist, and toggling the setting appears to do nothing to that file.

jhathcockContributor

Mobile Device Content Filter

Does anyone have a step-by-step for creating a basic content filter for Mobile Devices? Looking through the documentation online it keeps sending me to how to set it up on macOS but not iOS/iPadOS. Basic Question: Does the filter name matter?

191

13 hours ago

avargasNew Contributor

Blocking "Games" app on iPadOS 26

Has anyone had any luck in blocking the Games app? The only thing that appears under “Restrictions>Apps” is Game Center and that does not block the new app.

2588

14 hours ago

MithrandirContributor

AppSSOKerberosExtension Stops Working on Apple Silicon

Have recently built out a PlatformSSO config, and have seen varied results upon the devices on which I’m testing it. To my understanding it appears one has to scope a minimal AppSSOKerberos config in order for the PSSO config to properly register. I say this because, and this only appears to effect Apple Silicon devices running macOS 15+, when the config appear to bork itself registration is always unsuccessful.The underlying cause seems to be simultaneous writes to the AppSSOAgent and the AppSSO Daemon; what then happens is that underlying JSON config becomes corrupted, the config is discarded, and the system initiates a remediation by requesting a re-registration. It appears to be a concurrency bug causing an OS-level race condition. For whatever reason Intel Macs don’t seem to be impacted, but from what I can tell it’s an OS issues and not related to the M-series hardware.Has anyone else seen this? Anyone have any ideas toward a fix/remediation?

Lion55Contributor

Remove Broken MDM Profile

Hi All, I have several MDM Profile that have not checking and I would like to remove the MDM Profile from the Macbooks, I have try the following script: sudo jamf removeMdmProfilesudo jamf removeframework I don’t want to use recovery mode. Can anyone help?

281

15 hours ago

D

dfarnworth_bContributor