So It seems Apple has removed some MDM control of macOS updates in macOS 27 and they are only allowing using DDM commands to do this.Wanting to know if the Defer Major macOS updates MDM profile setting will work in macOS 27 or is this gone too? (I would assume that deferring upgrading to 27 will still work since older versions of the OS still support MDM update control. This is more about the future) I see with Jamf 11.29 that the download & schedule install is now DDM and works on prem but what we are really looking for is a way to continue Defer Major macOS updates for 90 days. We are not in Jamf cloud and not really looking to move.

Hi,i ran into a deadend, where i need your help =) We are currently trying to setup the content cache with parent-child config.A simple ping and netcat are succeeding.I have declared the settings as followed for example:parent: 172.10.10.1child: 20.20.20.1 While reloadSettings it is showing my parent as reloaded. But with “AssetCacheManagerUtil status”i get the output:Parent: (none)i actually cannot get it running.  

We have a tech that needs setup to use Jamf Nation with our tenant Caresource. Please let me know if you require any additional information or if there is another way to attach him to the tenant.  Thanks,Nick LumpkinsCaresource

Hi! I need to create a profile that only allows students to access Google Classroom.  This will require also having some web access to finish the login process; has anyone else done this? 

I have created a configuration profile in Jamf Pro for MacBooks that we are deploying as part of a prison education program. Because of the environment, these devices are locked down fairly tightly with several restrictions in place.We have deployed Swift Playgrounds to all of the MacBooks through Jamf, and the application is installing successfully and appearing in the Applications folder. However, when I go to Restrictions > Applications > Allow Apps within the configuration profile, Swift Playgrounds does not appear as an available application to select.Since the application was downloaded through Jamf and successfully pushed to the devices, I am not sure why it is not being recognized in the Allow Apps list.Do you have any suggestions on what I may be missing or how I can get Swift Playgrounds to appear as an available application in the restriction settings?Any advice would be greatly appreciated.

We have been testing 27 beta with every version and I'm not sure why so late in the beta cycle during beta 5 apple decided to add new pop ups. Currently I do not see a way to manage these.  

Is there a way to disable Notification Center completely? Or at least remove the "apps" in NC without students being able to add it back? We use LanSchool; Our math teachers are at a disadvantage since disabling "calculator.app" doesn't disable it in the NC. Restricting "calculator.app" via Jamf doesn't block it in NC, either. We're on macOS High Sierra, and the only thing I have found is the command line below (in quotes). However, I've found that due to Apple's BRILLIANT System Integrity Protection feature, you can't do this. You CAN turn SIP off, which would allow me to run the NC disable command, but can only be done in recovery mode via terminal; which of course, can't be done via Jamf. launchctl unload -w /System/Library/LaunchAgents/com.apple.notificationcenterui.plist killall NotificationCenter Any help would be really appreciated. Link on disabling, but doesn't work with High Sierra: https://gist.github.com/mikermcneil/10005651

Hi,I have an issue with Beyond Trust Bomgar client on Macs Managed with my Jamf Pro instance.I’ve made a Configuration Profile to allow Bomgar in the privacy settings, my test Mac got the rule but when i want to remote connect to my test Mac, i have to autorise 3 options.I saw many topic about this, but even if i made the same rule, it’s not working.If anyone has an idea? Thank you 

Hello fellow Jamf Admins,I would be extremely grateful if anyone has come across this App before (Hospital setting) called, “CBORD Mobile Inventory”. I am trying to add the App Config settings like I’ve done for plenty of our other Apps, but this particular App won’t give me a break. Below is a screen shot of what fields need to be filled out and the App Config I came up with and verified via AI. I am at a loss right now. The last thing we want is for our end-users to have to enter the data manually as that would be a nightmare. Any assistance would be very much appreciated. App Config I’ve tried (certain fields have been changed for obvious reasons). <dict>    <key>serverURL</key>   (<===== I have also tried “APIURL”)    <string>https://netmenu4.cbord.com/NetMenuAPI</string>    <key>appClientId</key>    <string>xxxxxddddfffcxxxxxxxx</string>    <key>region</key>    <string>us-east-1</string>    <key&gt

RSVP Here: https://luma.com/1e1eh23rOctober 15th, online  

East Midlands Apple Admins and MacAdmins Scotland are teaming up for our next meet-up on Tuesday 3 November, from 7:00pm to 9:00pm GMT.Everyone is welcome. If you're involved in supporting, securing, or managing Apple devices, we'd love to have you join us.Register here:https://lnkd.in/eZrmktn2The event will be held online via Zoom, with joining instructions sent to registered attendees nearer the time.We're excited to be joined by speakers from Jamf, Workbrew, and Fleet Device Management, who'll be sharing insights and experiences from the Apple IT and endpoint management world, followed by an open Q&A and community discussion.Please share with colleagues and anyone else who may be interested. We look forward to seeing you there!

Do we need to re-enroll all of our computers to make users MDM capable? 

Would love to connect with anyone going to JNUC next week. If you’re coming (or still on the fence) let me know via email at: tracey.joyce@jamf.com

We have a few iMacs running Sequoia 15.5 and Jamf Connect that are going to black screens after you log in. Both local user accounts and IdP accounts are affected, but I can see the user folder is being created when we log in against our IdP, I get the account creation message but it just hangs on the black screen. Local admin account is having the same problem. I’ve tried uninstalling, restarting, and reinstalling Jamf Connect, but the problem persists. Uninstalling and logging in as a local admin user causes a beach ball to spin, but it sits there and doesn’t not progress. I’ve checked the config profiles and license and they’re all valid, and this isn’t happening fleet wide, just randomly.if I create a new user through Jamf, the user will create, but I can’t log into that account, it immediately dumps me back to the JC login window without any feedback. I can see the new user’s account by running dscl . -list /Users UniqueID but it still hangs. Resetting authchanger doesn’t help eit

Hi Jamf Community,I’m reaching out as a frustrated parent dealing with managed iPads at my son's school, trying to permanently block specific apps like Instagram and Snapchat via Jamf Parent.Unfortunately, I've run into a wall with several limitations and confusing UX choices in the current implementation: Incorrect App Store Categorization: Blocking the "Social Media" category in Jamf Parent does not affect Snapchat or Instagram, as Apple/developers categorize them under "Photo & Video" or "Entertainment". However, Jamf Parent doesn't offer a dedicated "Photo & Video" category filter to toggle off, nor does it allow parents to manually recategorize or target individual apps for permanent restriction. No Permanent Single-App Blocking: In Jamf Parent, restricting individual apps seems strictly tied to a timer mechanism. UX / Translation Issues ("Clear after..."): The option labeled "Clear after [X] hours" is extremely misleading. In the German localized version, it translate

Hello,I’m looking at deploying Logic Pro to shared/classroom Macs using Jamf Pro and I’m trying to work out the best way to manage the Logic Pro Sound Library for multiple users.My understanding is that newer versions of Logic Pro use a single Logic Pro Library.bundle, which can be relocated to a shared location such as /Users/Shared/ and accessed by multiple macOS users.What I’m trying to establish is:Is the Sound Library installed on a per-user basis by default? If the full Sound Library is downloaded by one user, can other local users access those sounds without downloading them again? What is the recommended way to deploy/configure a shared Logic Pro Sound Library using Jamf Pro? Can the Sound Library download/installation be automated through a Jamf policy or script? Has anyone successfully deployed this configuration to shared Macs in an education environment? If the Logic Pro Library.bundle is moved to /Users/Shared/ can I default Logic Pro to look at this directory for new user

Fortinet's recent FortiOS 5.4.1 release for their FortiGate security appliances prevents any version of FortiClient prior to 5.4.1 from registering to the appliance. Users may even get a "FortiClient is being actively blocked from registration" which can cause panic and confusion. The problem is that, as of this writing, FortiClient 5.4.1 has yet to be released. Talk about putting the cart before the horse. So let's say that you don't want to have a few hundred upset users and would rather uninstall FortiClient discretely, en masse. Fortinet's documentation tells you to run the FortiClientUninstaller GUI app to uninstall FortiClient. But here's a more streamlined and scriptable method: /Applications/FortiClientUninstaller.app/Contents/Resources/uninstall_helperrm -rf /Library/Application Support/Fortinet/ Optionally, check for the existence of the following file and delete if it exists/private/var/root/Library/Preferences/com.fortinet.FortiClientAg

I have an interesting issue. A student logins in via Jamf Connect two weeks ago.Account is created. Account has been used and logs in via Jamf Connect every day until yesterday.Teacher emails me today, saying every time the student logs in, it immediately logs him out. Remote into the Mac mini, log in via Jamf Connect, issue confirmed.Logged in via local account behind Jamf Connect, issue still exists. Looked into the device’s Computer Usage logs in Jamf… every time the sign in happens, Jamf registers the user as “root”. Now, I can purge this account and I’m sure it’ll recreate properly and log in correctly. But I’d like some insight on how this could’ve happened. Students don’t have terminal access or admin rights. And it just… randomly started yesterday.

Hello,On our Mac fleet managed with Jamf Pro, we use Jamf Connect with Google SSO. We also have a local account called “localadmin” on each Mac, and only the IT administrators know the password.We recently deployed Jamf Protect, and I would like to create an alert whenever someone logs in to the “localadmin” account on one of our Macs.I have already tried creating a Custom Analytic and using a Jamf Pro script, but I haven’t been able to get it working properly.Has anyone already implemented something similar with Jamf Protect?Ideally, I would like to receive an alert whenever a successful login to the “localadmin” account occurs.Any advice or examples of Custom Analytics would be greatly appreciated.Thanks!

I am trying to enroll a mac using user initiated enrollment using the enrollment url. but during the process only general profile is getting installed and the enrollment page is stuck and not moving forward.We have configured Okta as a CA with dynamic SCEP challenge. The general profile which is installed is the SCEP enrollment. Any thoughts? 

I am trying to create a EA to report the status of the the following key in the Clients.plist.  This is what I have so far but it is not reporting properly.  Any help is appreciated.  TY #!/bin/bashABSlocationServices=$(sudo defaults read /var/db/locationd/clients.plist 2C4E4FD5-F029-XXXX-XXXX-XXXXXXXXXXXX:icom.absolute.ctesservice.ase:Authorized)if [[ "$ABSlocationServices" == "True" ]]; then    echo "<result>Enabled</result>"else    echo "<result>Disabled</result>"fi

We have a Jamf Pro license and according to what I can see Composer is part of this. But I can not find this software anywhere when I log into the backend ? - Where can I download this ?

Hi,Pretty new to Jamf and Mac MDM but seem to have the handle on the majority of stuff. I’m having a single issue with the users enrolling the devices into PSSO during the simplified set-up. I am pretty certain it’s a Conditional access policy we have set within our tenant that blocks access to any cloud resources from Uncompliant devices. The guidelines suggest - “The User Registration app for Device Compliance created when you connected Jamf Pro to Intune must be added as an exclusion in any policy that may prevent users from registering their devices.”And from the logs I can see this is the exact application that is getting blocked on the policy.The problem, even if I add the exception for this application into this conditional access policy it will still get blocked.If I add the user to an Exception group, the device enrols perfectly fine. Not sure if anyone else has had a similar issue? 

Hello Team,We are currently using Jamf pro + Jamf Connect for privilege elevation on our macOS devices. From an audit and compliance perspective, we are looking for a solution that can monitor and track user activity after elevated privileges are granted and can Alert .Specifically, we are interested in capturing and reporting on:Commands executed using elevated privileges (sudo/admin actions) Applications launched while elevated System configuration changes Software installations/removals Security-related modifications Detailed audit logs for compliance and forensic investigationsWe would like to understand how other organizations are addressing this requirement in their macOS environments.Are there native Jamf Pro, Jamf Connect, capabilities that provide this level of auditing? If not, what third-party solutions are commonly integrated with Jamf pro for monitoring privileged user activity? Has anyone implemented this using CrowdStrike, SIEM/EDR platform? What has been your experience

Everyone learns differently, and at Jamf we want to meet you where you are. This may mean comprehensive written documentation. It may take the form of multimedia content like videos or podcasts. One of the best ways to practice a tool is to use it – navigate the interface, explore objects, discover new features, make mistakes, and learn from the experience. That’s why we’re offering new opportunities to train with our products in the form of software simulations.   We want to provide realistic and meaningful learning experiences for new and seasoned users. Software simulations allow you to familiarize yourself with the interface, objects, and workflows without the worry of compromising your own server. In a simulated environment, we can provide guidance and tooltips. If you lose your way, we can help get you back on track. You’re in the virtual driver’s seat, and in a safe environment to practice before returning to manage your own fleet.   At the Jamf Nation User Conference