Skip to main content

Unanswered questions

128
jarrahf
jarrahfVisitor
 General Discussions
Apple TV WiFi Stuck in Single App Mode

Hey All,We’ve been using a fleet of WiFi Only Apple TV’s as digital signage in single apple mode, we changed the configuration profile, and this appears to have disconnected all of them, while keeping them stuck in single app mode. Is there a way out of this? Kind Regards,Jarrah

244
Chubs
I
ITRAGVisitor
 General Discussions
Jamf Pro Commands not initiating

Hello,we recently have the problem that the commands coming from Jamf Pro are stuck on the “pending” status. Not too long ago i tried to unmanage an iphone, which worked. But now its not possible to unenroll or to initiate commands in general without them being pending.Thank you in advance, i will put a screenshot of the problem as an example.Kind regards,Siraj 

133
mvu
F
FwatsonNew Contributor
 General Discussions
macOS Update Suddenly Failing, "You must be root to do this"

I’ve been running a script in our labs for the last couple of years to do macOS updates after caching the installer onto devices, the script is this:/usr/bin/su -l ladmin -c "echo ADMINPASSWORD | /Applications/Install\ macOS\ Sequoia.app/Contents/Resources/startosinstall --nointeraction --agreetolicense --forcequitapps --user ADMINACCOUNT --stdinpass"This has worked perfectly fine, and continues to work on our iMacs and Mac Minis, but when I’ve tried to update our MacBooks from Sonoma to Sequoia I’m being met with this bizarre message:Result of command:Error: You must be root to do this…I don’t understand this at all, because as far as I was aware everything the Jamf binary does is already run as root. Is anybody able to shed any light as to why this is failing please?Much thanks!

323
Chubs
filinovak
filinovakNew Contributor
 General Discussions
Managing Safari browser iPadOS 26 (DDM)

I read somewhere that with iPadOS 26 we will have an option to manage Safari like set Bookmarks and other staff. Unfortunately when i want elaborate this more further i am not able to find any offical documentation from Apple or from Jamf on this topic. Has anybody experience with this? Does Jamf already implemented into console tools to manage Safari via DDM?

123
Chubs
M
maxwolfNew Contributor
 General Discussions
Can Safari web apps (Sonoma feature) be deployed to other Apple devices?

Hi,I'm trying to experiment with deploying Safari web apps to other devices for an IT environment.I can create a package of a Safari web app on my personal MacBook, and repeatedly deploy the package to my personal MacBook without issue. The Safari web apps are typically installed to ~/Applications, but I can install to the system /Applications folder, or even to a place like the user desktop, and it will work. The app will also work for different users on my personal MacBook.When I install the package to another computer, there is a pop up saying that says "You can't open the application because it may be damaged or incomplete."Are Safari web apps hard locked to a device, from something like associating the web app with hardware identifiers? Could changing the web app or an associated plist with the web app via a script resolve this issue, or do web apps have to be manually created per user? Or more importantly, does anyone know if Jamf will support creation of Safari web apps via Jamf

5410
paul_r
D
dbeachyVisitor
 General Discussions
Students are prompted to re-enter Google password upon opening the iOS mail app on managed ipads

We manage our ipads using Jamf Pro. We load the students google email accounts onto the device using a Jamf configuration profile with the Google payload.  The mail account will appear on the device (ipad iOS mail app) and prompt user to enter google password.  The user enters the password and the iOS mail app will display the students google email.  However,  several times through out each day, the iOS mail app will stop displaying google email and prompt user to re-enter their google password.   After re-entering the google credentials, the Mail app will not always start working again.    I have had Jamf support review our config file with the google payload - they said it is set up correctly.  I have contacted Google and they said that it is a Jamf issue.  Has anyone else experienced this issue?  How did you resolve it? thanks.

101
Chubs
BCPeteo
BCPeteoContributor
 General Discussions
Deploying Sophos Endpoint per macOS profiles

How are people deploying Sopho's endpoint per macOS profiles? Are you creating smart groups for each OS and then assigning them to Sopho's endpoint profile for that OS? What happens when a user upgrades to another OS, do they get popups when old profile removes but does not have the new profile yet?

255
L
Stuart_P
Stuart_PContributor
 General Discussions
Intermittent login issues on macOS 15.1.1

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

13947
Stuart_P
snehapatil
snehapatilNew Contributor
 General Discussions
Jamf API response

I wanted clarification on what HTTP response status code Jamf Pro will return if I call the /api/v2/mobile-devices endpoint when I only have a Jamf Computer license, and similarly, what status code I will get if I call the /api/v1/computers-inventory endpoint when I only have a Mobile Devices license.

525
snehapatil
marcoschiav1
marcoschiav1New Contributor
 General Discussions
Sync removed computer from Jamf Pro to Jamf Protect

Hi all,we just configured Jamf Protect, and it seems that the Macs removed from Jamf Pro were not removed automatically from the list on Protect.Is there a way to automatize the offboarding, or the only solution is to remove a device manually from both?Thanks,

335
Mike McGlone
I
infrase2020Contributor
 General Discussions
Known Wi-Fi Networks Disappearing

Hi, We have had quite a few calls into our service desk recently where users are unable to connect to known networks. Upon further investigation it appears that all known networks have disappeared from the device however the profile is showing as installed on the management profiles.    The workaround is to exclude them from the configuration profile and then re-add them which solves the issue, but this is becoming a bigger issue.   Has anyone been able to resolve?    Thanks Ashley

376
JennyXJ
M
mathew_pageVisitor
 General Discussions
No Static Device Groups Shown in Device Inventory - 11.19.1-t1754574720728

Our Device Inventory is no longer displaying Static Group Memberships. I can see the devices in the Static Group, just not in reverse on the Device Inventory. Anyone got similar problems? Kind Regards,Mathew

554
K
G
GaToRAiDContributor
 General Discussions
Save the Mule! He needs your help!

Ok, if the subject doesn't say enough, here is a little back ground. I've created a gofundme account for MacMule in hopes he will be able to attend this years JNUC. He was informed he would not be able to go to this years JNUC due to corporate issue(we all know and love those issues don't we). So for all of those of you who he has helped and those of you who use his AutoCasperNBI, he needs your help! He keeps calling me nuts for doing this, but I think as much as he has contributed to the community, we should help him. He stays up late each night(since he lives in England) to help out US mac admins from his house. He doesn't have to do this, but he does it for the love of the community, lets pay him back! MacMule's GoFundMe Page (*Note: to the jamf nation admins, if this is considered to be against the forum rules, my bad, just wanted to help out a fellow mac admin)

6233
Jordy-Thery
D
dabernatVisitor
 General Discussions
Uninstall Jamf Protect macOS 12

I need to uninstall Jamf Protect from a device running macOS 12, so I download the uninstaller and try to run it locally and also tried to push it from Jamf Pro. It fails with an error saying macOS 13 is required to run the uninstaller…..Anyone else dealt with this?Am I stuck with reimage the device? I’d rather not but will if I have to.

80
D
Alvaro1337
Alvaro1337Contributor
 Mac Admins LATAM
Unable to Push macOS 15.6

Hello Jamf Nation, I have been attempting to deploy the latest macOS 15.6 update to the pending devices. However, each time I use the Software Updates feature to update the version, I encounter the following error: “UnableToFindUpdatesAndOutOfRetries”. As a result, the devices do not receive the update.Do you have any suggestions or alternative methods I can try?

925
Miguel_Sa
Shyamsundar
ShyamsundarJamf Heroes
 General Discussions
Anyone have issue in accessing Blue Prints

Hi All,  Did anyone have issues in accessing Blue Prints, from last few hours it say Error occurred ,try again later. my instance was hosted on Central Europe  

151
thebrucecarter
T
tcandelaContributor
 General Discussions
Where is the PaperCut client app?

I am trying to make a smart group to see what computers have the PaperCut Client installed but i don’t see anything in the /Applications/PaperCut Print Deploy Client/ directory that i can select as the .app in the smart group. What can I use create this smart group?   

16724
T
gmihailo
gmihailoContributor
 General Discussions
Papercut with Windows Virtual Print Queues

For the life of me I simply cannot get our Windows Virtual Print queues with Papercut working on MacOS (currently for us 15.6.1).I get the dreaded ‘unable to connect to printer’ error.  and then its just stuck waiting. Here is what I’m doing.I set up the printer locally using the advanced tab and add it as smb://print.domain.local/printer-queuename I select the universal “Mac Printer” driver I downloaded from Fuji Xerox site (currently v 2.6).  I do a test print. It works. But only once. It never works again. If I now add a second printer queue using the same method it doesn’t work. if I then go and delete the initial printer I added and re-add the steps I cannot print again that also doesn’t work. I’ve also added the following script in the hopes that kerberos will play nice. No joy.lpstat -p | awk '{print $2}' | while read printer; do    echo "Setting Kerberos on ${printer}"    lpadmin -p "${printer}" -o auth-info-required=negotiatedone  Has anyone else experienced this? I am at a co

654
Tatenda
khinkelman
khinkelmanJamf Heroes
 General Discussions
Chrome on iOS with Jamf Pro

Does anyone have any suggestions on how we can disable the "add to homescreen" feature in Chrome? Many students are adding games to their homescreen. 

193
malik_john
Jan_H
Jan_HJamf Heroes
 General Discussions
Exclude Microsoft Authenticator from Conditional Access Policy

Hi Jamf Nation, we are using conditional access policies in EntraID to prevent users from using private mobile devices to access our M365 Services. However I need to Exclude Microsoft Authenticator App from this Policy but im not able to select this app in CA Policy Config. I tried to use a filter for a device condition "device.mdmAppId -eq "4813382a-8fa7-425e-ab75-3b753aab3abb"" But i guess this attribute is not available to EntraID since Devices are not Intune but Jamf managed. In the Device Sign In Log im able to see the block based on the Application ID for Microsoft Authenticator. Do any of you have any ideas on how to do this?

3605
Techi92go4It123
M
MarkZoutendyk
 General Discussions
Changing of app colours

Hi Everyone I'm wondering if anyone knows how I can prevent students from changing the colour of their apps? I have looked around in the profile settings but can't seem to find a setting to disable that function.

283
malik_john
J
jacbglaNew Contributor
 General Discussions
Jamf Connect and SSO with Cyberark

Hi We are just adding Jamf Connect using Cyberark; we are getting the following issue once the user has logged into the SSO client its double asking for the local password, would like to remove this.  We have the setting set in the xml    <key>OIDCUsePassthroughAuth</key>    <true/> Does anyone have any other suggestions we can try? thanks.   

242
J
amorrisuk
amorrisukNew Contributor
 General Discussions
Office 365 Tenant Migration - Reconfigure Office Suite

We are currently moving Microsoft 365 Tenants as part of a merger, which means one half of the new business needs the Microsoft 365 Apps to move to the new tenant. These devices are AD Joined but not Azure AD Joined. Has anyone come across a way to do this without resorting to deleting key chains, and asking users to reconfigure the Apps. Thanks

435
jamesstuart78
john_sherrod
john_sherrodValued Contributor
 General Discussions
Extension Attribute: OneDrive Folder Redirection

We’ve never fully standardized on having everyone in our org sync their Desktop and Documents folders to their OneDrive, and I’ve been working on getting that done recently. First step: create an extension attribute that shows the OneDrive redirection status on each Mac so I could build some smart groups.I kept it simple and just had it look to see whether the user’s Desktop and Documents folders were in their default locations, or if they had OneDrive in the file path of their locations. If it’s the former, it displays “Disabled.” If it’s the latter, it displays “Enabled.” If only one of the two folders are synced to OneDrive, it displays “Partial.”Just wanted to share in case this was useful for anyone else!#!/bin/bash# Extension Attribute to check if Desktop and Documents are syncing with OneDrive (KFM)# Author: John William Sherrod jwsherrod@mac.com# Version 1.0, Date: 08-28-2025# Get the currently logged-in user:loggedInUser=$(scutil <<< "show State:/Users/ConsoleUser" |

657
john_sherrod
cmayo
cmayoContributor
 General Discussions
Unable to rename laptop (Macbook Air) using a script on Policy on Jamf Pro

Hi All,    Our District is aiming to use Macbook Air for our next laptop refresh. We have Jamf Pro and on our way to get a subscription on Jamf Connect. Anyhow, when I created a script under Policies, the name is not changing. The naming convention that I wanted to use for all the M1's should be M1-"Serial Number". The script that I've created is below;#!/bin/bash$ sudo jamf setComputerName -name $M1-$serialNumberscutil --set ComputerName $M1-$serialNumberscutil --set LocalHostName $M1-$serialNumberscutil --set HostName $M1-$serialNumberexit Please help?Thank you and have a great one!Sincerely,Cesar

4128
sharriston

Want to write for Tech Thoughts?

Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!

Submit A Blog Post
Terms & ConditionsCookie settings