Hi,i ran into a deadend, where i need your help =) We are currently trying to setup the content cache with parent-child config.A simple ping and netcat are succeeding.I have declared the settings as followed for example:parent: 172.10.10.1child: 20.20.20.1 While reloadSettings it is showing my parent as reloaded. But with “AssetCacheManagerUtil status”i get the output:Parent: (none)i actually cannot get it running.  

Hi there - I’m new here so if I’m somehow off-target with this post, please let me know! I looked around for a Welcome message with guidelines, but had no luck. Sorry if I misunderstand anything. Here is what I’ve come to ask:What is the simplest effective way to properly secure 1-3 Macbooks? The scale is small but security requirements happen to be high (imagine a law firm, for example). I need both a professional configuration, which I’ll tweak for our purposes, and a deployment tool, but an entire MDM solution is way too much. Some background: I’m an experienced admin on other platforms, I’ve lightly used and helped out people with Macs for a long time but I’m new to actual, professional Mac adminsitration. Now I have just a few Macbooks, one to start. To narrow scope, I’m not worried about configuring or locking down user behavior, productivty, or updates and management (for this purpose). I need to lock down system and network behavior, including protecting identity (so no iCloud,

What’s the best way to add an app to Restricted Software that has a number (e.g. App Name 3.app, App Name 4.app, etc) Activity monitor shows the process name with the number as well?  Do I just need to create a separate entry for each version? 

Hi all,I'm running 2 macOS VMs on a bare-metal Mac (host is also macOS). I'm seeing inconsistent iMessage sign-in behavior depending on the Apple ID type and whether it's bare metal or virtualized:Managed Apple ID (ABM-issued): signs into iMessage fine on the bare-metal host.Same Managed Apple ID: fails to sign into iMessage inside the VM on the same physical machine.Personal/basic Apple ID: signs in fine in the VM without issue.Has anyone run into this specific combination — MAID working on bare metal but not inside a VM, while a personal ID works fine in both? 

I’m using a Jamf Pro Policy to remove dock items from student laptops.  Process works slick, except for the Apple TV app, which stubbornly hangs in there, in spite of my efforts.  Anyone else experience this problem, and perhaps found a solution?  I’ve read about the dockutil, and will probably fool around with it when I have time, but the JAMF GUI would be my preferred solution, if it would work.  Please share ideas. Thanks

Hi,so I just noticed that the configuration profile payload that defers macOS Updates up to 90 days is deprecated. So I was wondering how you are supposed stop your users from updating to the next macOS Version, once this is removed. Does anyone know? Kind regards

Hi All,  Does anyone has a method after User has action SSO on the system that Jamf Pro will extract all there details from Entra ID included there department to the User and Location information for there system in Jamf ProThanks in Advance

Hello Team,As per the organization's policy, all eligible devices are required to be updated with the latest macOS security updates.We have observed an issue on a few devices that are compatible with macOS Sonoma. After applying the latest security update from macOS 15.7.7 to 15.7.8, the devices became stuck at the login screen and users were unable to log in successfully.Could you please confirm whether there are any known bugs or reported issues associated with the latest macOS security update that could be causing this behavior? Additionally, kindly advise if any workaround or fix is available. 

Hi team,We are looking to strengthen our change management and security controls within Jamf Pro. Specifically, we're exploring ways to implement a peer review workflow for high-risk payloads like Config profiles, policies and scripts.Currently, any admin with edit permissions can save and deploy those changes immediately. For us, having a single admin able to make immediate, wide-reaching changes introduces significant risk—whether from accidental misconfiguration or compromised admin credentials.We’ve considered reducing the permission scope of admins and granting limited time admin elevations,  but we’re mostly interested in payload-level security here which we think is best to solve the problem.Curious to hear if you’ve thought of this, or if there’s any non-native way to solve it.I tried searching through the this forum and the mac-admins slack but couldn’t find any previous discussions on it. Feel free to point me to one if it already exist.Thanks!

Hey So Im looking to turn the hadware history of inventory into an extension attriubute that udaptes when the OS changes. I mnot sure if this is the right way to go however I made a script that runs during invetnory check in however its only pulling in with the OS was downloaded to install. Any suggetions on how to get this set up so other techs can use the extension t oassist with troubleshooting? 

 🎒 Regreso a Clases con Jamf School: Prepara tu flota de Apple para el nuevo año académico​A medida que se acerca el nuevo año escolar, los equipos de TI y los Administradores Mac en educación se enfrentan a su mayor reto anual: dar de alta nuevos dispositivos, actualizar configuraciones, gestionar perfiles de usuario y garantizar cero interrupciones el primer día de clases.​¡Únete a Mac Admins LATAM en nuestro 3.er encuentro comunitario! En esta sesión profundizaremos en Jamf School, compartiendo estrategias prácticas, flujos de trabajo y mejores prácticas para agilizar tu despliegue y mantener tu entorno educativo funcionando sin contratiempos.​🗓️ Detalles del Evento ​Fecha y Hora: 08/20/2026 | 4:30 EST ​Ubicación: En línea (Enlace visible al registrarse) ​Idioma: Ingles / Español ​💡 Lo que cubriremos ​Lista de verificación previa: Tareas esenciales de mantenimiento en Jamf School antes de iniciar el despliegue. ​Grupos inteligentes y alcance (Scoping): Estrategias eficiente

Hi everyone,I've been working through a deployment of Platform SSO Simplified Setup on macOS 26 using Microsoft Company Portal 5.2604.1 (5.2604.0 or newer is required per documentation), and I've hit a wall with username/account name mapping that I wanted to share in case others are running into the same thing and could potentially provide some alternative options.---Our Setup- Jamf Pro 11.28.1- macOS 26- Microsoft Company Portal 5.2604.1 (deployed as a PreStage package)- Microsoft Entra ID- PSSO profile with Simplified Setup enabled (EnableCreateFirstUserDuringSetup + EnableCreateNewUserAtLogin both true)- Authentication method: Password- Associated Domains payload included in the same profile---The ProblemEverything works end-to-end — Simplified Setup fires during the Setup Assistant, the user signs in with their Entra credentials, and a local account gets created. However, the local account short name is being set to the full preferred_username value (e.g. John.Smith@company.com), w

Anyone having some users upgrade to macOS 26.6 and now after they login with username password they are then greeted with a black screen. They can’t do anything else. We use Jamf Connect, users didn’t have any issues until they upgraded to macOS 26.6.

Anyone else having this issue?Jamf School’s app installers don’t seem to be installing apps onto my Macs properly. I have a list of apps in a device group that is sourced in the app installers - and upon a Mac joining said device group the apps stay stuck on “Installing” and they stay that way indefinitely. When I click on the stalled app to “Retry app stuck on installing” and refresh, the installation fails and I have to retry or it says “App installation timed out. Try again.”. This is really slowing down my zero-touch deployment process.  

Is there an option like “Clear Activation Lock” for MacOS devices but for the API?There seems to be for Mobile Devices but I can’t find anything about doing this for MacOS. If there is not currently, do we know if this option will be available down the pipeline? 

getting a few of these, has anyone figured a way to disable them completely?

Hi, in I recently discovered a bug in Jamf Pro that appeared just this week. After enrollment, profile/policy execution "stops" and is "waked up" by these commands: sudo jamf recon

My goal is to block FaceTime from opening, and removal from the dock would be a plus. I’ve looked at other threads on this same issue and consulted AI. I am doing what has been suggested but FaceTime still opens up and allows me to log in; user are not able to sign into their appleid’s. I am running version 11.30.1 of JAMF Pro. Does anyone have a current setup that is successfully blocking FaceTime. I’m just wondering what I am missing. Screen shots would be appreciated. Thanks.

Hello everyone 🙂!I was wondering if any of you managed to make SSO work for SMB share with Platform SSO and Entra? (no jamf connect)I found this documentation on Microsoft learning hub, but as i’m still a newbie i’m not sure how to implement it yet.The idea is that i want to connect automatically to the share at the user login with SSO, for now it is manual and with the password which is not ideal if we want a passwordless environment.Any tip is welcome, thank you for your help!!Joséphine

Can we clear Activation Lock via an API Call?

Hi all,I'm running 2 macOS VMs on a bare-metal Mac (host is also macOS). I'm seeing inconsistent iMessage sign-in behavior depending on the Apple ID type and whether it's bare metal or virtualized:Managed Apple ID (ABM-issued): signs into iMessage fine on the bare-metal host.Same Managed Apple ID: fails to sign into iMessage inside the VM on the same physical machine.Personal/basic Apple ID: signs in fine in the VM without issue.Has anyone run into this specific combination — MAID working on bare metal but not inside a VM, while a personal ID works fine in both? 

Hello:I’m looking at this document about setting up Federated IDs in ASM:https://support.apple.com/guide/apple-school-manager/intro-to-federated-authentication-axmb19317543/webWe have about 300 students in Apple School Manager with their school email addresses and Managed Apple IDs. They look like this:email: slynch30@students.mpslakers.commanaged: slynch30@appleid.mpslakers.comWe’re trying to set up our new students using Entra so they can use SSO. Students are currently in Entra using their email address as their UPNs.Is this possible? How, if at all, will this affect our other 300 students in ASM?

I am attempting to run policies on one device and receive an error "The index 999107 is invalid". I am able to run jamf recon and jamf manage. I renewed the Jamf framework. I also ran it with -verbose and nothing stands out.

Hello everyone 🙂,I recently set up PSSO with Microsoft Entra ID, using Jamf Setup Manager with Simplified setup and Secure Enclave enabled. Everything is working fine except for the user profile picture synchronization. The profile picture exists in Entra. I can’t figure out how to get it to work. Is there a specific permission I should add in Entra, through Microsoft Graph for example?Thanks for your help,JoséphineMac os version Tahoe 26.5.2, Company Portal v. 5.26206.0

We are currently moving Microsoft 365 Tenants as part of a merger, which means one half of the new business needs the Microsoft 365 Apps to move to the new tenant. These devices are AD Joined but not Azure AD Joined. Has anyone come across a way to do this without resorting to deleting key chains, and asking users to reconfigure the Apps. Thanks