TitleHi Apple/Jamf admins,I purchased a MacBook Neo advertised and sold as brand new from a third-party seller.During initial setup, I discovered that the Mac is enrolled in Jamf/MDM and is showing organisation-management information. I was not informed before purchase that the device was managed by an organisation.I have contacted the seller and they have offered to exchange the device, but I’d like to understand what has happened before returning it.From an IT/admin perspective:What are the legitimate ways to determine whether the Mac is registered in Apple Business Manager/Automated Device Enrollment? How can I distinguish between a locally installed MDM profile and Automated Device Enrollment? If the device is in Apple Business Manager, does removing the MDM profile locally actually resolve the underlying enrollment? Can an Apple/Jamf administrator release the device from their organisation remotely? Could a genuinely unused/new Mac have been purchased by a reseller and subsequentl

We would like to request an enhancement to Jamf Self Service / Self Service+ for macOS to provide more dynamic application status and lifecycle management.The requested functionality is: Self Service should automatically detect whether an application is already installed on the Mac. Once the application is detected as installed, the Self Service item should automatically change its status from Install to Installed. For installed applications, Self Service should also provide a native Remove/Uninstall option without requiring administrators to create a separate uninstall policy, Smart Group, or custom script for each application. If the application is removed, Self Service should automatically detect the change and return the application to an Install state. Ideally, this status should update dynamically without depending on a full inventory update or jamf recon. The expected user experience would be:Application not installed:[ Install ]Application detected as installed:[ Instal

Hi everyone,I’m trying to set a default font in Microsoft Outlook (macOS) using Jamf Pro, and I’m running into some trouble.By default, Outlook uses Aptos, but I’d like to change it to Book Antique, which is already available on the device.What I’ve tried: I attempted to use the 3rd-party tool OutlookFontPoke by Paul Bowden @ Microsoft. Here’s what I did:• Deployed the OutlookFontPoke script and TemplateRegDB.reg via a package (both located in /private/tmp/OutlookFontPoke-master).• Created a policy in Jamf that:• Extracts the current logged-in user• Fixes permissions• Run the command as that user: sudo -u "$loggedInUser" /private/tmp/OutlookFontPoke-master/OutlookFontPoke 'Book Antique' '11.0pt' 'black' Issue: Despite several variations of the above, I keep getting this error in the script logs:WARNING: Registry DOES NOT exist at path /Library/Group Containers/UBF8T346G9.Office/MicrosoftRegistrationDB.reg. Attempting to create...mkdir: USER/Library/Group Containers: No such file or dir

We are a community of IT professionals, systems engineers, and broadcast technology specialists managing Apple devices across Belgium’s media and broadcasting sectors. Whether you are deploying Macs in live production environments, managing enterprise fleets with MDM, or integrating Apple hardware into specialized broadcast workflows, this is your place to collaborate.

It was so great to meet so many of you in person at JNUC!Thank you to Margaret, Kat, and Katie for presenting and facilitating the WIT Networking session. Margaret, it was so fun to run into you over and over, both in the session and everywhere else. Kat, thank you so much for not letting me minimize the honor it was to be selected to present. It was phenomenal to see Beth attending this session. Thank you to Beth for being the kind of leader who supports her team and community directly and in person. Thank you to Daniela for catching me in the vendor hall to give me a sticker. Thank you to Joanna for chatting with me about user groups and connecting with possible speaking/presenting opportunities.Thank you to everyone who attended my session and to everyone who will take the time to read the slides, get inspired, and implement workflows for accessibility and user experience in your own environments.Thank you all for being a community, to me and to each other. I genuinely feel like I a

Our infrastructure team is complaining about bandwidth congestion over the two 10 GBPS E-Lans.Has anyone moved from the 10 GBPS E-Lan to Dedicated Internet Access (DIA) or Cloud Connect to experience less congestion?

 Hi all,I'm testing macOS 27 Golden Gate (26A428) before fleet deployment and I'm trying to hide the VPN section from System Settings using the com.apple.systempreferences payload with the DisabledSystemSettings key.Bundle ID used: com.apple.NetworkExtensionSettingsUI.VpnSettingsIntents (confirmed via pluginkit -m -A -v | grep -i vpn)What I've tried:Deploying a native com.apple.systempreferences payload via Jamf Pro (uploaded as a full .mobileconfig) Running sudo defaults write /Library/Preferences/com.apple.systempreferences DisabledSystemSettings -array "com.apple.NetworkExtensionSettingsUI.VpnSettingsIntents" manuallyIn both cases the profile installs successfully and the key is present, but the VPN section remains visible in System Settings.This worked correctly on macOS 26 Tahoe. Has anyone found a working bundle ID or alternative approach for macOS 27?Thanks

Hello Jamf Nation! On October 1st, we made exciting updates to Jamf Premium Support (blog here: https://www.jamf.com/blog/jamf-premium-support-technical-account-managers/. You still get the same expert help from our internal support team, including Tier 3 support, enhanced target response times, and 24/7 access to support, but with some added benefits. Let’s look at the highlights: Premium Support Tiers:  There are now five tiers of Premium Support, with the addition of Premium Support Titanium   Technical Account Manager: A Technical Account Manager (TAM) adds proactive technical guidance to help plan and implement your Mac or mobile strategy. There are three different types of TAMs available, dependent on the Premium Support tier:  Collaborative TAM: These Jamfs provide proactive technical advice and guidance to help you configure your Jamf environment and implement industry best practices. Available with Premium Support Gold and Platinum.   Integrated TAM: These Jamfs help plan and

Dear Community,i stumble upon the Topic:  I am currently facing the notorious "Peak Storage Overhead" / Storage Bottleneck issue while trying to update our fleet of 700 iPads (8th Generation, 32GB models). Even after a factory wipe, the Over-the-Air (OTA) update fails due to the system data footprint taking up too much space on these 32GB devices.I stumbled upon the topic where @cr4sh0ver mentioned a solution:"We changed our 'PreStage Enrollment' to require the latest OS before enrollment is processed. iPads go through normal enrollment process after the iPad has been updated..."Since we are running Jamf School (not Jamf Pro), I am struggling to find this exact setting. I know that we don't have "PreStage Enrollments" by that name, but rather Automated Device Enrollment Profiles (DEP) and Blueprints.Could anyone give me a quick, detailed step-by-step walkthrough for Jamf School on how to replicate this fix for a single test device?Where exactly in the Jamf School DEP profile (or elsewh

I am trying to configure Content Caching with MacOS 27, and they deprecated the Content Caching through Configuration Profiles. The main goal is to automate ICS with iOS devices.I have a Blueprint setup, and I have enabled “Auto enable tethered caching” and set it to True. This will set the key “AutoEnableTetheredCaching” to 1. However, I don’t see a way to set “AllowTetheredCaching” to a 1 as well.Limited output from “defaults read /Library/Preferences/com.apple.AssetCache.plist”:    Activated = 1;    AllowCacheDelete = 1;    AllowPersonalCaching = 0;    AllowSharedCaching = 1;    AllowTetheredCaching = 0;    AutoActivation = 1;    AutoEnableTetheredCaching = 1;    CacheLimit = 0; 

I have a problem where some users are unable to enroll new devices in Jamf School. I use enrollment via Entra. After entering their email address and password, it just spins for a while and then returns to the Entra window saying, “You can’t sign in right now. Please try again.”When I check the sign-in logs in Entra, they show “successful” several times, but no failed attempts. However, this does not affect all users—some are able to sign in and enroll devices, which is what confuses me.Has anyone run into the same issue?

Environment:- Fleet of iPads enrolled as Shared iPad via Apple Business Manager- Managed via Microsoft Intune- Federated authentication with Microsoft Entra IDIssue:The "Recent Users" pre-sign-in screen (the screen shown before any user signs in, displaying recent user avatars) never times out or goes to sleep on its own, regardless of the Auto-Lock setting configured on the device. This causes the display to stay on indefinitely whenever the device is sitting at this screen, which is a significant battery drain concern for a shared-device fleet.Steps to reproduce:1. Enroll an iPad as Shared iPad via Apple Business Manager / Intune2. Sign out of any active user session so the device returns to the "Recent Users" screen3. Leave the device untouched at this screen4. Observe: the screen never dims or locks on its ownTesting done:- Tested with Auto-Lock set to 2 minutes on one device and 5 minutes on a second device- Both devices exhibited identical behavior: the Recent Users screen stayed

If you’ve ever looked at a question during an exam and suddenly forgotten something you’ve practiced dozens of times, you’re not alone. Exam anxiety is real, and it affects all of us differently. Jamf Training Courses include a certification process, and the thought of any exam can be stress-inducing. Even for an experienced Jamf Admin, there’s often a different feeling when you’re completing those tasks under a time pressure. The good news is that exam anxiety doesn’t have to prevent you from succeeding, and I wanted to share some strategies I’ve seen help students prepare with confidence and perform their best during Jamf Training Courses.During Your Training CourseParticipate in ClassThis might seem obvious, but one of the best strategies for preparing yourself for the exam is to actively participate in the Training Course. Follow along with the material in the way that you learn best, whether that’s watching the demonstrations before completing the lesson tasks or mirroring the dem

Hi All.Does anyone know if it is possible to restrict access to the hidden photo album or even the ability to hide photos in the first place?I’m surprised there isn’t a restriction setting within Jamf to disable access to this.Cheers

Hey Jamf Nation! Welcome to another edition of Things to Do for JNUC — 2027 Edition! This time we are heading to sunny Southern California at the Anaheim Convention Center. JNUC 2027 is extra special as Jamf will be celebrating their 25th anniversary! Whether you're traveling from across the country or flying in internationally (I'm coming from Canada!), here’s a curated guide to help you plan your SoCal trip. Locals and Anaheim veterans, please share your insider tips and favorite hidden gems below! JNUC Highlights JNUC Party: The official conference party traditionally takes place on the 2nd night of JNUC (which typically makes it Wednesday evening). It’s always a major highlight. Expect great music, delicious food, and unmatched networking. Don’t miss it! Vendor Parties: Keep an eye out for evening side events with free drinks, appetizers, and fantastic giveaways. Please post below if you become aware of any vendor parties with open invites (like Rocketman Tech or others) so we ca

8th gen ipads have only 32GB of storage, 11GB are used for OS and 3GB for system data, so, if you want to upgrade from iPadOS 18 to 26 the update requires 20GB of storage available in order to update making it almost impossible to update. The only options I see is to “restore” iPad with mac device or configurator, but just imagine doing this for hundreds of iPads, so the other option is to NOT update.If you have\had this same issue let me know if you have found better options for this update and did you, your business or school district decided to stay in iPadOS 18 or not.

Join us for the next Central Valley Jamf Meetup at Sequoia Brewing!We’ll have a private room, food and drinks available, and nearby Tesla Superchargers for those traveling into Fresno from around the Valley.This will be a casual, community-driven meetup with topics to get things back up and running:Post-JNUC recap and key takeaways Networking with Jamf admins in healthcare, education, government, enterprise, and other industries macOS, iOS, and iPadOS 27 testing experiences and deployment plans Open Q&A and general Jamf admin discussion Interest in a future presentation on our endpoint engineering workflowWe’ll also have a few small swag giveaways too!Whether you’ve been managing Apple devices for years or are newer to Jamf, this is a great opportunity to meet other local admins, exchange ideas, and learn what others are doing in their environments.Date: October 21stTime: 5PMLocation: Sequoia Brewing 1188 E Champlain Dr Ste 107, Fresno, CA 93720 More details to come!See you all at

I asked JNUC Help about the rates for the hotels currently.  The cheapest currently available is $369 USD / night.  Here’s the reply I received on the subject.  I thought it was helpful enough to share for those concerned about the price.  I was able to find something affordable for myself even this early on:Thank you for reaching out, and I completely understand your concern about the rate—I know hotel costs can add up quickly, especially for a trip like this.Right now, we only have the Marriott available. We'll be opening the Hilton block in a couple of weeks—unfortunately, the hotel doesn't release the code until we're exactly a year out from the event, so my hands are a bit tied on timing there. I don't have the Hilton rate yet, but I'll share it as soon as it's available. These two hotels are the only ones Jamf has officially reserved room blocks with.I hear you on the $369 rate feeling steep, and I don't disagree—but that is actually a negotiated rate for Anaheim, which tends to

This year I had the privilege of presenting my first talk at JNUC after attending the previous three conferences. The talk grew out of extensive testing performed while troubleshooting problems in the environment where I was then working.Its central contention was relatively simple:Individually correct states do not necessarily produce a coherent system state.DNS can be correct. Identity can be correct. VPN can be correct. CASB can be correct. EDR can be correct. Individual Network Extension providers can all report that they are functioning normally.And yet the endpoint can still lack a reliably functioning path for MDM and its supporting transactions.I sometimes think of this as several independent republics, each functioning according to its own laws but without sufficient diplomacy between them. Every subsystem may be behaving correctly from its own perspective while the system as a whole lacks coherence.On macOS, this becomes particularly important because multiple security and ne

Hi Jamf Community,I’m looking for guidance on implementing Recovery Lock password rotation for existing Apple Silicon Macs already enrolled in Jamf Pro.Current SetupFor newly enrolled Macs, we have enabled Recovery Lock through PreStage Enrollment.This works as expected:Recovery Lock password is automatically generated. The password can be viewed from the device inventory in Jamf Pro. After the password is viewed, Jamf automatically rotates it after approximately 1 hour.Challenge with Existing MacsWe also have a number of Apple Silicon Macs that were enrolled before Recovery Lock was enabled in our PreStage configuration.For these existing Macs, I created a script that uses the Jamf Pro API with Client ID and Client Secret authentication.The script successfully:Authenticates to Jamf Pro. Retrieves the Mac’s Management ID. Generates a random Recovery Lock password. Sends the SET_RECOVERY_LOCK MDM command. Successfully enables/updates Recovery Lock on the Mac.This part is working as expe

Hi,I’m using a extension attribute for the latest macOS suppported on managed Mac in my Jamf Pro instance.The extension attribute i use is update for macOS Tahoe, but i haven’t found an update to support latest Mac and macOS 27.Could you help me?Thanks

Certified Jamf Pro Admin, available for contract and interim coverageBetween a Jamf admin leaving and a new hire starting, your Macs still need patching, enrollment, and policy upkeep. I step in quickly, keep your environment healthy, and hand off cleanly to your full-time hire.What I doJamf administration on your terms: interim coverage while you hire, or ongoing contract support if you’d rather not add headcount Environment cleanup: smart groups, policies, extension attributes, scoping, and stale records Product maturity: patch management, security baselines, compliance, and zero-touch enrollment via Apple Business Manager Migrations to Jamf from Intune, Kandji, Workspace ONE, or unmanaged fleets Integrations with Okta and Microsoft Entra ID Documentation and knowledge transfer so your team isn't dependent on meBackgroundCertified Jamf Pro Admin 10+ years in IT Managed 2,500+ devices across multiple organizations simultaneouslyEngagement styleRemote, with occasional on-site travel av

We are a University with Apple School Manager and Federated Apple ID setup, devices managed by Jamf Pro. Recently we've seen an issue with new users signing in to our shared iPads. They sign in with the federated account details fine, are prompted to create a passcode as normal:Then, when logged into the iPad, when the screen locks then the prompt to enter their passcode to unlock it is not the same as the normal federated one, its a numerical keyboard only, so they have no way of entering the alphanumeric passcode they just created:I've found that resetting the users passcode within School Manager resolves the issue. But its not a workable solution to have to do this for an entire class during a teaching session. Has anyone else experienced this issue?

It’s all about community with JNUC. That is the biggest and most important thing I took away from JNUC 2026 this year, apart from all the technical stuff, of which there was plenty, but that isn't what this article is about. I had been to a JAMF Nation User Conference before, back in 2025, and it was great. This year was no exception, with one large distinction: it wasn’t my first JNUC this time. I was lucky enough to get to go this year via the “Diversity Sponsorship.” Which is, in very plain words, an amazing opportunity offered by Jamf to give tickets to a lucky few users who fall into any of the diversity categories. Myself, a trans woman living in the South, I fell into the LGBTQ+ area of the diversity spectrum. With the sponsorship, the other winners and I were able to attend a very thorough “Level Up!” class that was offered a day before the conference officially began. The class was great, full of information, and genuinely worth whatever they would have charged, plus more. Alo

Hello Jamf Nation! JNUC 2026 attendance and speaker badges have now been assigned to all accounts in Jamf Nation!If you don't see your badge on your profile, send us an email at jamfnation@jamf.com and we'll look into getting it assigned. Please remember, badges go to the email address you registered for JNUC with. If you used a different email, just reach out and I'll get everything sorted for you!Thank you everyone for attending and speaking at JNUC! I look forward to seeing everyone here in Jamf Nation until the next JNUC or User Group Meeting in your area!