We got a student iPad which has an unusual behaviour.The user chooses an app from the student app to install it. After the installation I saw that the app disappears directly. It’s not hidden. It’s deinstalled. In Jamf it shows the App is installed.Any idea what causes this?

I was trying to deploy a screensaver custom on MacOS via jamf but wanted to understand how to do so ?

When using Jamf ID for SSO into Jamf Pro, is it mandatory to create a corresponding user account for the Jamf ID on the Jamf Pro side?I would like to keep only a break-glass account on the Jamf Pro side.Even if I match the Jamf ID role and the group name on the Jamf Pro side, RBAC does not work.If there is a way to achieve RBAC-based SSO into Jamf Pro using Jamf ID, please let me know.

Has anyone gotten jamf2snipe working with Jamf Pro Cloud API Roles & Clients (OAuth client ID/secret)? All documentation I see is for Classic API, which is blocked here

We look forward to JNUC all year. Then - in the blink of an eye - it’s over. Even though we’re tired (really tired), we miss it. Well, friends, you can now relive JNUC in our recap video!📸 Check it out!👉🏻 Did you see someone you know? Tag them below!👉🏻 What highlight did you like the best? Let us know in a comment. 👉🏻 Just loved the video? Shout out our talented Marketing team!  Thanks for watching! I hope to see you next year!!! 

Previously, we deployed the following script to allow standard users to change the date and time without requiring admin credentials. However, this is no longer working on Sequoia devices. Can someone assist in enabling this functionality on Sequoia devices? #!/bin/bash # Allows any user to change the date and time on their Mac. /usr/bin/security authorizationdb write system.preferences.dateandtime.changetimezone allow /usr/bin/security authorizationdb write system.preferences.datetime authenticate-session-owner-or-admin exit 0;  

Hello, We have been testing out Jamf Connect 3.5 the previous configuration we used with worked just fine with Jamf Connect 2.45.1 but after testing out Jamf connect 3.5 seems like no log in option appears during login it just shows the user. Normally we had options for SSO, local login, restart and etc. Thank you for any help in advance.

Hello.  This is more of a Microsoft question, but i'm not having luck down that route yet. We want Jamf Cloud to manage all of our institutionally owned iPads with MDM.  We want Intune to manage all user-owned Apple devices with Application Protection Policies.  The problem is, users only have 1 account.  So if they sign into a corporate iPad, they get a mix of both Jamf MDM configuration profiles and Intune application protection policies on their corporate device.  We want the Intune Application Protection Policies to ONLY apply when a user signs in on a personally owned device, and not a Jamf managed device. I don't know if that is possible since scoping an Application Protection Policy is based on AD group.  If their ID is in that group then they get Intune App.  I don't see any other criteria to filter out a device if it is Jamf MDM managed. Has anyone run into this or found a solution? Thanks

anyone getting this Sync failed: Communication error. Awaiting next sync. ????when creating a new prestage enrollments ?what's the sync interval? even after the sync interval has passed it is still displaying this Sync failed message

Tahoe now wants to put three default widgets on the desktop in the upper left corner (Calendar, Weather, Photos)  I don’t mind the weather and calendar widgets but the Photos widget will confuse people who are using this machine in a Lab setting. How can I control, remove or disallow them during or after setup?I looked through all the Configuration Profile settings but there doesn’t seem to be any way in the Jamf GUI to address this. Will it require a custom Configuration profile?Thanks!

I have been tasked by our security team to limit the terminal app to only allow admin accounts to open it due to a vulnerability. Any suggestions or best practices/advice on this? I do not want to rescrict the app completely because we use it for troubleshooting but we want the standard user to be locked down as much as possible. 

I am trying to troubleshoot some problems I am having with a few of my machines. I keep seeing this error in the log files and am not sure exactly what it means JMFCommons.JamfKeychain.JamfKeychainSecurityError.failedToReadJmfKeychainPassword  is what I keep seeing and I believe it is the root of all the other errors I am seeing. Can anyone shed some light on what causes this problem and how I can fix it. Thank you in advance

Does JAMF Sync suddenly require a your JAMF server to be cloud based?  I’m suddenly having issues syncing jamf sync to our on prem jamf server and it has an error referencing a cloud based server which we dont have.  

We experience blank/black screens after the Welcome to Mac screen. We performed a full reinstall via recovery, but experience the same again.Also tried to go into recovery, terminal, and remove /Volumes/Data/private/var/db/.AppleSetupTermsOfService but no success. Similar issues have been reported online - is there a fix for this?:https://www.reddit.com/r/mac/comments/1o3tt1i/does_anyone_know_why_its_stuck_on_the_welcome/ https://www.reddit.com/r/MacOS/comments/1kh2nbg/macbook_air_a2681_black_screen_after_welcome_to/

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

I am in a conundrum here.  Fresh out of the box I need all Office Apps deployed to our users.  Word, Excel, Outlook, OneNote, PowerPoint, Teams.  In the last wipe and reset on a device, it was taking forever for the apps to become available.  SelfService did not show them either as they are set to install automatically through the Jamf App Catalog.  I am looking for advice from the community to help me figure out the best method for deployment.  I need the apps to be there after deployment, my company requires them to be on the Current Channel and updated after each release of an update. I like having them visible in SelfService, but I do need the push method as well. Jamf App Catalog seems to limit this possibility unless someone has figured out a way around it.  I am not on SelfService+ as of now.  

Is there any way to get the password sync status from the new Self Service+ as Extension Attribute?Would be really nice to see if Google and the local user are in sync. Other ways to archive it are welcome 😀

Has anyone had luck getting Accessibility to "allow" or "let standard user approve"?Similar to the post here https://community.jamf.com/t5/jamf-pro/enabling-privacy-accessibility-setting-for-ms-teams/m-p/245576#M230198 we've used the PPPC Utility to "let standard users approve" Screen Recording but does not seem to work for accessibility. We have a handful of apps that needs Accessibility to "allow" or "let standard user approve" for non-admins but cannot get it to work. Apps like MS Teams, Logitech Logi Options will not work for the "Accessibility" section. I've attempted to use the PPPC utility and though the other options work it's "Accessibility" that will just not work.

Howdy everybody! Time for my annual post about how we all need to get our budgets prepped and ready to go for all the hardware we need to replace that Apple is dropping from its OS Compatibility list!I've modified my previous regex statement to take out the models that were lost to us this year to the latest macOS version. It looks like Apple is taking a big ole axe to the intel macs, minus only a couple of exceptions that seem to tie to the devices that were still being sold at the time of the M1 release. One tricky piece are the specific intel MacBook Pro's that Apple has listed. In that grouping are the MacBookPro16,x models, where x is 1,2 and 4, but not the 16,3 model, so keep that in mind. If anyone has details that contradict that, please let me know here and i'll quickly change the posted regex.I've tested this in my own Jamf instances to verify its returning the data that i'd expect to see, and am confident this will be able to match everything that is no longer supported by M

🍎 San Francisco Bay Area Apple Admin User Group - November MeetupJoin us for knowledge sharing, networking, and discussions with fellow Apple admins! 📅 Event DetailsDate: November 13, 2025Time: 5:30 PM - 7:30 PMLocation: ComputerCare700 Airport Blvd, Suite 110Burlingame, CA 94010 🎯 What's on the Agenda?Featured Speakers Erin Merchant (MacAdmin Foundation) - MacAdmin Foundation Georgia Rittenberg (CEO) - ComputerCare  How to Improve Your Q1 Outlook: Strengthen your Q1 strategy with practical approaches to pre-deployment planning, repair workflow visibility, and automation that actually saves time. See how to stay ahead of headcount shifts, eliminate spreadsheet dependency, and deliver real-time answers when executives come asking. Bio Georgia Rittenberg is the CEO of ComputerCare, a trusted partner for IT Directors and Managers, providing comprehensive IT Asset Management (ITAM) and certified IT Hardware Repair services for Apple, Lenovo, HP, Dell and more.    🥂 Food and Dri

We are trying to load an in-house app into Mobile Device apps.  We started to make the new record, uploaded the file in archived app file, but had to cancel the attempt.  Trying a 2nd time, it reports there is already an ipa with that name.  Where can I go to delete that or can I just select that??  I did not find it in Settings > Packages.

Hello,I am trying to update our method of deploying out the essential sounds for GarageBand through Self Service. In the past, I had leveraged the Carl Ashley AppleLoops script (it worked great!). After Apple removed Python from the base installation of macOS, I had been limping along with installing Python on the devices that were needing the sounds. This has posed other complexities.Currently, I am testing out installing all of the sound packages needed for the Essential Sounds from a cached copy of those packages on the laptop. This has not produced the desired results yet. The user is still prompted to install the sounds when launching GarageBand. All of the sounds that should be available from the Essential Sounds are present in GarageBand. The loops have also been reindexed in hopes that would resolve the issue.I would appreciate any help that anyone has to offer.Thanks!

Have a weired Webex issue that started a month ago. When the user opens his Webex, to join a meeting, he get's the error message "Webex quit unexpectedly and you can click reopen, report or ignore. The first time it happened, we just did an uninstall/reinstall and it worked for a couple of weeks. It's happened a couple more times. I recently tried using the webex uninstaller, we also checked the webex dependicy folders they provided to make sure there wasn't anything left over. I updated webex on my Mac and it worked, so I created a package using composer, but it keeps getting the same error. Below is a script I found that the user ran and after the uninstall, he restarted an not luck after. I do see something about checking keychain and resetting the TCC permissions which I'll try today. #!/bin/bash# Get the currently logged-in userCURRENT_USER=$(stat -f "%Su" /dev/console)USER_HOME=$(eval echo "~$CURRENT_USER")echo "Starting Webex residual file cleanup for user: $CURRENT_USER"# Defin

Hi everyone, we’re currently testing Platform SSO (Secure Enclave) in combination with the Kerberos Single Sign-On Extensionon our Macs (managed via Jamf Pro).Since enabling Platform SSO, we’ve encountered issues with password synchronization as well as Single Sign-On authentication for ADFS-based web applications. As soon as Platform SSO is enabled, users receive the following prompt either after some time or following a reboot:Password SynchronizationVerify your Active Directory and Mac passwords. If they do not match, your Mac password will be synced. The passwords are identical (local macOS login = AD password). However, this prompt appears repeatedly — and only when Platform SSO is active. Additionally, our ADFS-based web applications (intranet portals, internal sites) no longer perform automatic Single Sign-On once Platform SSO is active.I’ve tested this behavior in multiple browsers (Safari, Chrome, Edge, and Firefox), and in all cases, users are prompted to sign in manually.Whe

I’m trying to create a policy for a screenshot repository that save screenshot to another device. Hope someone can help me.