Hello Jamf Community, iam looking for a Script to uninstall the Cisco Client Silent.I have a script that does it, but the Users will always get a Pop-Up Message that the Socket Filter needs Admin Permission. You can ignore the window, and it is uninstalled, but I would like to have it more clean. Greetings TGD

Hi All, Does anyone know how to add Zoom Contact Centre Extension for Google Chrome via Jamf Pro?I guess that I will need to Bundle ID which I can’t find anywhere. Thanks in Advance!

Hi All,  If you need to add Licenses for a Jamf App from the Catalog, How do you action this process? Thanks in Advance 

I (like others) use a smart group for students which lists devices that have “Apps Not In the App Catalog Are Installed”, in case some talented student is somehow able to download or sideload apps we don’t allow. I then use a configuration profile to hide all apps except those they downloaded/sideloaded, making their device near useless until they remove the offending app.Unfortunately with the iPadOS 26 update, Jamf Pro reports all the iPad default apps (camera, contacts, calendar, etc.) in the installed apps report. As these are default and can not be purchased through the app store, there is no way to add them to the app cataloge. So now every device that updates to iPadOS 26 will be considered to have unnauthorized apps on them. Not sure if this is a bug that Jamf will be able to fix, or if there is another work around to this.

Hey guys. We have a few policies run with trigger of “enrollment complete” for new prestage loads. We’ve typically had these install packages, mostly for Microsoft stuff. We’d like to make sure the machines get the latest version at load, and don’t necessarily want to update the package every time. We thought we could use the InstallLatestMSProduct.sh script within one of these policies to test, and it turns out, the package being called via linkID won’t download, and the policy fails. We have the same policy set for self service and that downloads the package just fine, so we think there’s something with the enrollment process that isn’t allowing the policy with a script to download the package properly. Has anyone seen this? Is it not advised to run a script as part of a policy with “enrollment complete” as trigger? Thanks in advance.

It is very tedious going one device at a time to see if there are failed commands. Has anyone been able to create a Search that shows devices with failed commands?

EnvironmentJamf School Jamf Connnect 2.45.1 macOS Tahoe (26.1, 26.2)Issue - Keychain dialog popping up for Jamf Connect on restart or fresh login.I’ve read many reports of how to fix this by updating Jamf Connect to 3.0 or higher. The issue is that JAMF School guidance is not to go past 2.45.1 for Connect menu bar reasons and lack of access to Self Service+, etc...Our goal was to move our computers from Jamf Pro to JAMF School but this lack of support has me reconsidering, with such an unclear vision how Jamf Connect will be managed in the short-term or long-term. I’m holding back our fleet from updating en mass to Tahoe just because of they keychain dialog issue, when I would like them to be there.If anyone has a solution I’m all ears for how to work with this keychain issue.  

I have a computer configuration profile for Proxies and Proxy Bypass list.The CP is deployed with Computer Level and Install automaticallyThe proxies settings work but when I verify the Proxies, they display with no issueThe issue is the Proxy Bypass list does not seem to work/display.  When I go to a website that is supposed to skip the proxy, they are blocked.In Jamf EA I get the Proxy Enable status, Proxy IP, and Port numbers (which displays the correct info) using command scutil --proxyIn another Jamf EA, I extract the Proxy List with command scutil --proxy.  I see the list but it doesn't looks like it's enabled.  Because of this issue (Jamf Pro since 10.16.x), I have been having to use Scripts to do this work. 

Anyone want to share best practice for this? Blueutil doesn’t work as great/possibly at all in our environment after updating to macos 26.As a workaround I’ve been using the api to send the MDM command in a policy/script to those macs that turn it off. We have an outset login script that manages to lock out bluetooth changing in the control center and system settings, but there’s a short window of 5 seconds or so where students can turn it off before it is locked. 

Hello, I'm new here, I'm a student I got a school ipad and I was able to download absolutely any app I want. I signed in to an apple account then I use spotlight to find an app : like MailChimp or candy crush and when the result from the app store is showed I can press the get button that will install the app. App store is restricted on the device but using spotlight can bypass this. Maybe I'm not in the right place but just wanted to report this bug. I'm on iPados 26.1

Good afternoon I have a weird issue that is coming at a horrible time!  I have 6 M1 2020 Mac Minis that are failing at retrieving enrollment profiles.  Nothing has changed in my environment, and I even just pulled 4 new M4 MacBook Airs out of the box to test.  The Minis were previously in a different lab (one that I just successfully reset 16 other computers in), but these 6 continuously fail to enroll.  Any ideas?

In our Azure logs, it shows the Jamf Pro Azure AD Connector authenticating with one of our administrator’s accounts multiple times per hour. I’ve tried looking into the documentation here: Azure AD Integration - Jamf Pro Documentation 10.43.0 | Jamf but I am wondering if this could work with a service account just to keep our user sign-in longs clean. Or if there are other best practices, I’m open to suggestions. Thanks!

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

Hi everyone, I. HATE. PRINTERS. That being said, we have to work with them.  and... Canon does not make it easy. Here is what I was able to find out from several places online, in order to get this "installer" to actually work. So let's jump on to our Macs and get this over with.Downloading the "Installer"1. Log into your Uniflow Online (web)2. Start Printing (Side Bar)3. Install Printer Driver > Click [Download macOS printer driver] Navigate to Download FolderOpen SmartClientMac.iso > Open SmartClientMac Volume > Notice here you only have 1 file. But actually there are 4. 3 are hidden.On your Keyboard us the show hidden files shortcut: Command+Shift+.(Period)Getting Files in the Right LocationYou will now see 3 other files. We only need the SmartClientForMac.pkg and tenantcfg.plist files.Next, Go to Finder > Go > Go to Folder (Shift+Command+G)Enter 'private/tmp'Next create a new folder called 'uniflowclient'Which is now located in private/tmp/un

Hi everyone!I have a macOS machine running macOS 15 (Sequoia). I created a configuration profile with the “Single Sign-On Extensions” option configured with Microsoft Entra ID.This allowed me to register with Platform SSO natively on macOS, using the notification that popped up on my machine after installing the profile.However, that requires my users to manually click the notification and register. To make the process easier, I created a new configuration profile with Jamf Connect (com.jamf.connect.login), also configured with Microsoft Entra ID.Now users are able to see the Microsoft Entra ID authentication page on their login window. However, I was under the impression that once they connected at the login window, it would automatically register with Platform SSO - but it still requires them to go through that notification.Is there a way to achieve the auto-registration with the combination of the SSO extension/JAMF connect?

Hello. This is my code in .net.var client = new HttpClient();var jamfUrl = "https://{server}.jamfcloud.com/";var clientId = "xxxxxxxx";var clientSecret = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx";var byteArray = Encoding.ASCII.GetBytes($"{clientId}:{clientSecret}");client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Basic", Convert.ToBase64String(byteArray));var response = await client.GetAsync($"{jamfUrl}/apps/");response.EnsureSuccessStatusCode();var json = await response.Content.ReadAsStringAsync();But when I execute this to get the list of applications I get following response<!doctype html><html lang="en"> <head> <meta charset="UTF-8" /> <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png" /> <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" /> <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" /> <meta name="view

I had a few devices upgrade to iOS 26 and the homescreen layout is not working….has anyone ran into an issue with this? 

So we have Google LDAP connected to Jamf. It's working great for populating User & Location information, etc. However, I'd really like to leverage 'Directory Service User Group' to scope stuff. It just doesn't seem to be working. I've tried to do some reading and I've found people saying it's unreliable. When I go to Cloud Identity Providers > Google LDAP > and do a lookup of myself or others + and also search for a group name - it correctly returns that I'm a member of ___-staff group. There's a specific policy I want to exclude for this staff group. I can go to exclusions for this policy > Directory Service User Groups > search for the staff group I'm apart of > it finds it, and I add it. After doing that, I still see my computer as pending like it's still in the scope. User & Location info is accurate, my local account matches LDAP user name, etc. How are people future-proofing scoping? My other option is to hand-build Departments in Jamf that match Departm

Hi,I have recently deployed a new wifi cert for our wifi office network and I am testing it at the moment.Once I choose the network, it will ask me to choose a certificate or enter credentials. I choose the new certificate and then afterwards the “eapolclient” prompt pops up. I click Deny and then I am able to connect to the Wifi with the new cert. I am wondering if there is a way to either always click Deny, or during these network authentications allow it to have permissions to the System keychain. Also if someone has a way to allow users to use our new certificate without even having to choose the new cert themselves, that would be even better. What I am trying to do is to minimize the steps that users have to do to connect to our Wifi with the new certificate. On the configuration policy, I only have the p12 cert and the network part 

Hi! Looking for a way to disable the "Restart and show password reset options" as mentioned in https://support.apple.com/en-us/HT202860 We have firmware passwords set on our laptops (by policy the firmware password is only known to IT) and when a user clicks that, it gets stuck at the firmware password screen. Reboots go right back to the firmware screen. Unfortunately, with all the work from home, we can't just stop by to fix it. 

Hello,Before asking my question, I’d like to briefly describe our current environment:We are using Jamf Pro on-premises. MacBook devices are enrolled using the User-Initiated Enrollment method. During enrollment, a hidden local account named jamf is created on the machine. All devices are domain-joined, and FileVault is enabled. Users log in with their Active Directory (AD) accounts, which are configured as mobile accounts. Initially, we manually create a local admin account named support during setup. This ensures that both the support account and the user’s AD account are enabled for FileVault.Our security team has raised a concern because the support account currently uses the same password across all devices. They have requested that we either remove this account or implement automatic password rotation, similar to a managed account.Could you advise on the best approach? How do you typically handle this scenario?Additionally:Is it possible to add the jamf account to FileVault? Woul

Has anyone had luck getting Accessibility to "allow" or "let standard user approve"?Similar to the post here https://community.jamf.com/t5/jamf-pro/enabling-privacy-accessibility-setting-for-ms-teams/m-p/245576#M230198 we've used the PPPC Utility to "let standard users approve" Screen Recording but does not seem to work for accessibility. We have a handful of apps that needs Accessibility to "allow" or "let standard user approve" for non-admins but cannot get it to work. Apps like MS Teams, Logitech Logi Options will not work for the "Accessibility" section. I've attempted to use the PPPC utility and though the other options work it's "Accessibility" that will just not work.

Hello everyone, We have a strict requirement to allow standard (non-admin) macOS users to enable Internet Sharing, even if this is an Apple platform limitation. Granting local admin rights is not an option. Environment:  macOS (Ventura / Sonoma) Jamf Pro Standard user accounts only   What we’ve reviewed so far:  Jamf policies and scripts Self Service workflows Configuration profiles / PPPC Authorization Database changes   At this point, Internet Sharing appears to require system-level privileges, but the business requirement still stands and we need to explore any supported or semi-supported approach that can meet this need without making users admins. Questions:  Has anyone achieved this using Jamf or macOS controls? Are there any workarounds (MDM-driven, scripted, or AuthorizationDB-based) that allow standard users to enable Internet Sharing? Can Jamf or Apple officially confirm whether this is completely blocked?   Any guidance, confirmation, or alternative approaches

New behaviour in iPadOS 17 - when you only define a lock screen wallpaper and do not define the home screen wallpaper and you do not click the check box to use the same image for lock and home, iPadOS 17 now magically makes home and lock screen identical. (Huh? That's not what I asked for)I filed an Apple Feedback Assistant ticket and they said it is "currently functioning as intended".It didn't do this in 16.So what's the issue? If you make a reasonably great looking lock screen wallpaper it is totally distracting as a home screen wallpaper. The app icons become too cluttered with the background - there's no visual sense of depth to separate. If you use the QR code, it looks terrible on every page.The consequence is that you have to allow changes to wallpaper and you have to choose a plain style home screen. Then if you want your beautiful lock screen to stay "locked" so that students don't remove it you have to play the restrictions dance in both Restrictions and the Wallpaper payloa

Instead of seeing iOS 19 and macOS 16 at WWDC this year on June 9, Apple is planning for iOS 26 and macOS 26. It's a similar name convention for automakers. Like the Toyota Camry 2026.   Other Apple Operating Systems will follow suit.  iOS 26iPadOS 26macOS 26watchOS 26tvOS 26visionOS 26 Thoughts? https://www.macrumors.com/2025/05/29/ios-26-again-rumored/