We have been using the following script as part of our deployments since Apple silicon became a thing (I did not write the script). It appears that the “--agree-to-license” no longer functions in Tahoe and appears to invoke “help” in policy logs. Manually running “softwareupdate –-install-rosetta --agree-to-license” also returns “help” contents. Has anyone else seen this? #!/bin/bash# Installs Rosetta as needed on Apple Silicon Macs.exitcode=0# Determine OS version# Save current IFS stateOLDIFS=$IFSIFS='.' read osvers_major osvers_minor osvers_dot_version <<< "$(/usr/bin/sw_vers -productVersion)"# restore IFS to previous stateIFS=$OLDIFS# Check to see if the Mac is reporting itself as running macOS 11if [[ ${osvers_major} -ge 11 ]]; then# Check to see if the Mac needs Rosetta installed by testing the processor processor=$(/usr/sbin/sysctl -n machdep.cpu.brand_string | grep -o "Intel")if [[ -n "$processor" ]]; thenecho "$processor processor installed. No need to install Rosett

I am looking for a script to remove old Jamf remote policies from Jamf cloud. We have several hundred of them I discovered after running Kmart tool. I found this one but I cannot get it to work. https://www.elliotjordan.com/posts/remove-remote-policies/ Thanks 

Anyone using TeamDynamix?  We are looking at changing our ticket system however, we want something that is integrated with JAMF or at the least user friendly with JAMF.  Any thoughts would be greatly appreciated

Hi dear Jamfies,  since im quite new to the whoe jamf environment and had to take over a whole functioning instance, i wanted to make Tahoe available via Graham Pugh’s “Erase-Install” script. The manual, i was left with described, that as first step, i have to create an entry via title editor and just copy and paste the information (with adjustments) from the earlier version. Now in my case, i cannot enable this title, meaning, it wont show up in Jamf Pro, please see attached screenshot. I also seem to fail understanding the note given, since the manual i was given from earlier coworkers does not mention any other steps besides copying and pasting the information on software title tab and requirements tab. Can someone help me out? Thanks in advance. 

For awhile both Jamf Pro and Jamf Protect had a Resource box on the dashboard page.  Both are gone now and we are just redirected to countless webpages to click through to find the information buried. Another useful tool gone….

Is it possible to create a Time Machine backup profile that limits the backup size depending on the clients storage. For example, if a Mac has 512gb storage I want to limit their backup size to 1TB but if they have 2TB storage I want to limit them to 4TB. Obviously I could create groups based on device storage size and apply a different config to each group. But I’m wondering if there’s some formula I could enter in the “Backup Size Limit” field or some other method to achieve this nicely. Thanks!

Hello guys, i am affected by the MS latest security patch Microsoft Active Directory Strong Certificate Mapping Requirements. My devices cant connect to wifi via certificates after the latest patch. My devices are not in domain, also users are local , so when i tried the objectsid Extension attribute it didnt work even though i have cloud idp as azure connected and i guess its because  users are local. Do anyone have any idea how to tackle this :) Can we use UPN or some other attribute for macbbos that uses local user account and not in domain?

I (like others) use a smart group for students which lists devices that have “Apps Not In the App Catalog Are Installed”, in case some talented student is somehow able to download or sideload apps we don’t allow. I then use a configuration profile to hide all apps except those they downloaded/sideloaded, making their device near useless until they remove the offending app.Unfortunately with the iPadOS 26 update, Jamf Pro reports all the iPad default apps (camera, contacts, calendar, etc.) in the installed apps report. As these are default and can not be purchased through the app store, there is no way to add them to the app cataloge. So now every device that updates to iPadOS 26 will be considered to have unnauthorized apps on them. Not sure if this is a bug that Jamf will be able to fix, or if there is another work around to this.

I think might be a Tahoe this? Multiple Macs in my environment have been having Self-Service+ crash whenever we run anything on it. It just closes itself with no error or explanation, and the subsequent policy doesn’t run. Tried on multiple policies with the same result on multiple different Macs, all on Tahoe (26.0). Had no problems with the Beta. Has anyone else seen this? I’ve deleted the keychain for Self Service+, re-installed, and deleted the cache for Self Service+ as well.Is this a known issue, by chance? Self Service+ version is 2.8

Has anyone gone through the process of creating a Configuration Profile Applications & Custom Setting  payload to restrict the AI options in iTerm2 (the prefs domain is “com.googlecode.iterm2”)? And if so, can you post the profile in this thread?Since I hate to re-invent the wheel I figured I’d ask before starting to build a payload for this from scratch…

Hi all, We have a situation where we need to remove some iMacs from our Jamf instance, but we need to keep Logic on them. We have purchased Logic through Apple School Manager and it feeds into our Jamf with those purchases, so I’m assuming they will have to be connected to Jamf in some way to get the app. We need these Macs to be offline and standalone as they are old and no longer supported, so we don’t want to risk having them on the network (we’ve previously been a victim of a ransomware, so network integrity is critical now). My question is, is there a way to release the Logic licences we have purchased through Apple School Manager as, say, install codes or VPP codes (I’ve checked Jamf Pro and there is no VPP codes under Managed Distribution) so we can install them individually, or do we have to have them on Jamf to get the licences? Many thanks,Ben

I am wondering if anyone could help with a process for automating with JAMF a way to click on settings for both zoom and VIA  after the install has happen.  Both applications need system preferences adjusted in order to use the product and we need help figuring out how to get JAMF to do this after the app is installed.  Any help is greatly appreciated.        Thank You

Heads up to my fellow Jamf community. We've been seeing iPadOS 15.8.4 iPads when reprovisioned can't be enrolled to Jamf School.  This may affect Jamf Pro too.  The exact error is "Failed to retrieve configuration".  I reached out to Jamf support and they said they have been getting reports of this from others and that this has been observed across different MDM providers.  Jamf reached out to Apple regarding this issue and this is exactly what they told me: Apple did get back to us just a bit ago, and they have identified the issue (they did not elaborate on what the issue was). The release is not ready yet though and at this time they couldn't give me an ETA on when that would release. For now I created an internal Jamf Product Issue so we can track customers and I have attached this case to that ticket (PI136109). Hopefully an update that fixes this issue will come out soon.  Jamf did say that they could reproduce my issue but had mixed results as one te

We are seeing issues with machines that have broken AD binds, is there a way to automatically remove the profile and reinstall it, or can I just add those machines from a SmartGroup into the scope?

We’ve got FUS disabled through a configuration profile, but it appears the menu bar/control center extra bypasses this setting. Users can enable the extra and then use it to switch accounts.Not a major security issue I don’t think, but my org doesn’t use FUS. Is there a way to block specific menu bar/control center extras?

I used the “Defer software update” function so that our users could not upgrade to iOS 26 since it seems to be killing the battery on our phones. However, I wanted to send out iOS 18.7 for security reasons. I was able to send it out via Software Updates but if our users don’t catch the update prompt the first time it is sent to them, they will hit an error, and they can not install it other than going to General > Software Update which we have blocked.I was wondering if anyone has reached a similar obstacle and was able to find the best way to proceed. Thank you!

Hey all,Working on a script that prompts the user for information. Once complete, I set the script to ask the user if they would like to enter another response. If yes, a policy is triggered to call the script again. I seem to be getting an error. I believe it is because you can’t trigger a policy that is already running.I’m aware I can make the loop within the script. Just want to confirm that this is not possible. Has anyone run into this or found another option?

I recently spent some time working on a script to deploy AirPrint printers as we’ve got a few of them on our campus that don’t have driver support from the manufacturer, meaning AirPrint is the only option. I wanted to share what I’ve come up with in case anyone else is in need of this. All you have to do is change the details in the “Printer details” section at the top of the script to match your printer’s IP address, location, and display name. I’d also recommend modifying the PPD path slightly to give it a more specific name than just printer_driver.ppd. Example: break_room_printer_driver.ppd. Note: For this to work, the Mac needs to be on the same network as the printer since it queries the printer to gather the information to create the PPD file. The result is that you can deploy an AirPrint printer to your Macs via Jamf Pro complete with the icon and everything!   #!/bin/bash # Adds a printer via AirPrint. # Author: John William Sherrod - jwsherrod@mac.com # Version 1.0: 02

Students in our School figured out, that Widgets and Focus cancel restrictive Settings you set with Jamf. For example: With an other Focus you can change your Homescreen and use Widgets. If you lock the Screen with an App like Classroom you also can get around the Screenlock by clicking a Widget like the clock.Is it possibly to block Focus or at least Widgets on other Focuses?

Hello, looking for some help/advice.Has anyone successfully deployed the Dameware Remote Everywhere Agent?Does anyone have a working script they could share?We have created the bulk agent and have the ID, but no success.Thanks for any info.

Hi,Could any one guide on how we can migrate data between two managed macOS devices and same for iOS devices?

Hello everyone, you can probably help me with a request.I created a configuration profile for software updates in Jamf Pro, and I enabled "Automatically install app updates from the App Store" because I always want to have the latest updates for apps installed from the App Store.However, there is one app that I don’t want to update automatically, and that’s Xcode. This app must not auto-update, because newer versions of Xcode don't always work for our developers.I deploy Xcode via the Mac Apps - App Store section. In the settings, I disable "Automatically force app updates", but it still seems to update on its own.Do you have any idea what I could do?Jamf support told me that since it’s an app installed from the App Store, it’s not possible to block automatic updates for that app only.Any ideas?Thanks all

Hey everyone! We’ve got our next Dallas Area Apple Admins meetup on the books for Wednesday October 15th from 6:30 pm to 9 pm at Toyota Connected.  https://luma.com/f7xu8hpvhttps://dallasappleadmins.org/2025/09/22/October2025Meetup.html Come join us as we discuss what happened at JNUC, the new Apple operating systems, and much more.

Testing out GlobalProtect for our Mac users and running into this keychain issue. We are using a local Certificate for authentication but the machine wants to use the system keychain every time GP tries to connect. The goal is to have the users never have to authenticate or enter a password after the local cert is installed. I have already amended the ACL to include the GP app but the keychain still wants to be accessed. I am also using an administrator account, but still am prompted. If I manually unlock the System keychain from the keychain menu I am still prompted when I try and connect. Thank you for any help or tips someone may have.

Now that Tahoe is out of beta, gremlins that I'd noticed earlier now feel more pronounced.  During Build testing I find myself frequently running through sudo Jamf recon ; sudo Jamf policyBut since moving to the release of Tahoe they’re just painfully slow to report data. It doesn't matter if it’s an upgrade from Sequoia to Tahoe or fresh install via IPSW.  Wired or wireless. ...S.L.O.W…  Is it just me?