Starting from scratch (new Jamf instance), how do you establish a baseline for configuration profiles that will be pushed to iPhones and iPads. Do you keep them separate for each type of device and should there be a config profile for every setting/configuration? 

How does everyone utilize static groups and smart groups in your Jamf instance? Seems there's more ways than one to make it efficient. Would like to know particularly how it's used in a hospital or school environment where iPads or iPhones are the bulk of the devices being managed.P. S. I know the difference between the group types. Just want to get ideas on how different orgs might use them more efficiently. 

How does everyone utilize static groups and smart groups in your Jamf instance? Seems there's more ways than one to make it efficient. Would like to know particularly how it's used in a hospital or school environment where iPads or iPhones are the bulk of the devices being managed.P. S. I know the difference between the group types. Just want to get ideas on how different orgs might use them more efficiently. 

Is there a trick to removing “information” notifications?I have 25 of them now, everytime I manually refresh all devices, I end up with one.I can’t mark them as resolved (the whole thing just freezes / does nothing), and I can’t delete them because they aren’t marked as resolved.Some of them date back a couple of months now.

I have a TV app I would like to prevent from updating, but when I try to uncheck the boxes regarding auto updates they are greyed out and fixed to checked: Did I enforce that somehow for all apps, or is there a way I can uncheck the box to automatically force app updates? 

I know that you can push WebClip profiles to shared iPads using the user deploy method but I can’t seem to get it working while using Shared iPads in Guest mode only. Has anyone been able to get WebClips sent to Shared iPads using the anonymous guest logins? I have tried every way I can think of and nothing seems to work.

Hello, maybe someone can help me. The iPads are linked to Apple School Manager and JAMF School MDM. I can see the iPads in JAMF School, add location and profile, but nothing happens on the iPads themselves. During setup, it keeps asking me to log in with my Apple account; it doesn't show up as a managed iPad.Here's what I'm doing: I'm using Apple Configurator 2.- Connect the iPad to my MacBook, select the country and language, connect to Wi-Fi, and activate it.- Then I prepare the iPad using the Configurator.- In Apple School Manager, I assign the JAMF MDM instance.- In JAMF School, I assign the location and profile.- The Configurator then sets up the iPad, resets the system, and restarts it.- On the iPad, I select the country and language again and connect to Wi-Fi.- It says "Registering iPad."However, it doesn't say "This device is being remotely managed." Instead, I can click through the setup process until I get to the Apple account login.``` The strange thing is, one iPad is onlin

So we using Jamf School and it works great most of the time. We use Jamf Teacher and Apple Classroom in our schools, teachers use Macbook Air and the students Ipad gen 9.Now I have one colleague with a problem I havent seen before. Everything works fine with Jamf Teacher, classes, groups, add apps, lesson templates no problem. But Apple classroom dosen´t works at all. No classes showing at start screen, only the option to create classes manually. Anyone seen this problem?

I had a few devices upgrade to iOS 26 and the homescreen layout is not working….has anyone ran into an issue with this? 

Hello. When we first started using RTS, in our presages, the device would change its name to the one designated in the PreStage. Now when we do RTS on an iPad, the previous name is retained. This broke a smart group controlled config profile installation (and uninstall) that we use during our enrollment process.Is this a feature or bug? The Global settings for re-enrollment makes no mention of device name retention or deletion.

Hello everyone,I’m fairly new to Jamf administration and I’m looking for some guidance on deploying Cisco Webex on macOS.Is there a recommended way to:Install Webex silently via Jamf Pro (I deployed it via Mac Apps from Jamf Catalog)  Pre-approve or suppress the Webex EULA prompt(Cannot make it happen :()  Enable automatic sign-in for users (Created a configuration profile with Custom settings and Schema but it’s not working)Any advice, documentation, or examples would be greatly appreciated.Thanx

I am experiencing problems when trying to install apps on devices with iPadOS 26. It works fine on 18.6 and older. The error I am getting is "A TLS error caused the secure connection to fail." It works fine on mobile hotspot, so it has something to do with our corporate network and the changes that Apple made with iPadOS 26.Is anyone else experiencing these problems as well?

Currently pulling my hair out with Google searches and useless tutorials. It looks easy with PreStage Enrollments, but unfortunately I have iPad that were bought before setting up Apple Business Manager. Is there a way to get shared iPads to work with manually enrolled iPads or a way to apply a PreStage profile to a manually enrolled iPad? I am using Jamf Pro non-k12. Thanks

Hi,We have several iPhones that are listed in Apple School Manager and assigned to the Jamf School portal. However, when we attempt to enroll the devices from the iPhones, we receive an error stating: "Access blocked, does not comply with Google policy."We are not facing this issue with iPads or Mac devices — only iPhones are affected. As far as we are aware, there are no active policies set in our Google Workspace that would block enrollment.Do you have any idea what might be causing this issue?  

Edited 4SEPT2024: Updated information with the release of Jamf Pro 11.9 for PSSO and Device Compliance.  Also added link to Jamf Pro documentation. Jamf Learning Hub Instructions: https://learn.jamf.com/en-US/bundle/technical-articles/page/Platform_SSO_for_Microsoft_Entra_ID.html Current Public Preview Limitations What is Public Preview As of 15 JUL 2024, Microsoft Entra ID support for Platform Single Sign-On extension (PSSOe) is currently in Public Preview. As such, supported features and deployment information is subject to change without notice.  For more information, visit https://learn.microsoft.com/en-us/entra/fundamentals/licensing-preview-info.    Jamf Pro and Microsoft Entra Conditional Access Jamf Pro 11.9 and greater now includes logic to detects changes to PSSO registration.  When a new device ID is created in Entra ID as part of the registration, the gatherAADInfo command will report device compliance state to the new object.   For

Hi All, We are planning JAMF Pro 11 integration with Cisco ISE version 3.2. I would like to know if it will support it and if we can have a step-by-step process for what needs to be done and how. Please need the help.

Hey Friends! 👋 We're disappointed to share that the Music City Mac Admins User Group Holiday Social, initially scheduled for December 12th, has been canceled due to unforeseen circumstances and a lack of sponsorship.This event meant a lot to us, and we were genuinely excited to bring the community together to close out the year. While we're pausing this gathering, we're not slowing down.Looking ahead to 2026, we're shifting to a quarterly meeting cadence and actively planning new events with fresh opportunities for community involvement and sponsorship.If you're interested in:✅ Helping shape our 2026 programming✅ Sponsoring a future event✅ Presenting at an upcoming meetupI'd love to hear from you. Let's build something great together for the Mac Admins community in Music City in 2026.

I’m looking to add an additional MDM solution to our devices in Apple Business Manager.  With the release of OS26 (Tahoe) it appears now that devices enrolled in Apple Business Manager can use ABM Migration to change the Assigned MDM server “on the fly” without having to re-enroll the device.  I’m testing this, but it doesn’t appear to be doing anything with the device I’ve moved to a different MDM server.  A quick check seems to indicate that this feature MIGHT need to be enabled in our Jamf Pro account.   Has anyone else had this issue or know how to do this?

On the Jamf School dashboard, I can see the 6 most active users. I’d like to know if there is a way to see who actually uses their iPad. I introduced Jamf School Teacher, Student, Class Assigner, and Apple Classroom this year. I’d just like to see if there is a way for this. The number 1 teacher has used her iPad 2200 times, the other is 1100, 3rd place is a little over 200. The rest are under. We are a Google district for majority devices.Thanks! 

Hey, all! Does anyone recommend a nice/pretty way to use with iPad's ADE as in "user-will-be-in-awe-to-go-through-this-setup" ?I'm trying to setup some sort of onboarding for the iPads (1:1, not shared) in a similar way that we have for macOS, but I couldn't find anything (or, quite possibly, that I'm not searching in the correct ways in here ). I've tested the ADE with a prestage and it's working fine, plus the few Config Profiles that I'm doing testing with are landing correctly...just I need to make a more personalized "Corp-feel-like" experience...Btw, I'm using Jamf Pro - I need a way to have the user guided through the few hurdles with  Compliance (Register with Microsoft), Zscaler, etcThe enrollment customization part I have it sorted out, but it's not going to "enforce" the user to "click-here...run-this"...I think I need more of the 1st app to be triggered right after the ADE completion (maybe running temporarily as single-app mode?), where I can put some instructions on what

Hi Everyone,Ask for your help if there is a script or payload in configuration profile that can remove Wi-Fi setting in Control Center. Thank you.

So I’ve started seeing an issue with macOS 26.1 trying to set up new machines.The enrollment customization is not passing the user info from the SAML token, which is a known issue but usually sending the workaround profile that sets those attributes works fine. Here is the payload:<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0">    <dict>        <key>EnrollmentRealName</key>            <string>$REALNAME</string>        <key>EnrollmentUserName</key>            <string>$USERNAME</string>    </dict></plist>it’s not working now, I’m not even seeing the computer’s username change in Jamf Pro after signing in through the enrollment customization like I used to. Once setup assistant completes, Jamf Connect is installed, but when I get the re-enter your password screen I cannot progress past that sin

Hello. I don’t understand how to buy Jamf Protect.When I go to Jamf Protect and click “Request trial” it takes me to a page where it seems I’m registering for Jamf not Jamf Protect. I’m already enrolled to Jamf Now and I deployed Jamf Protect to the devices but I don’t see any reports/alerting and so on for Jamf Protect in Jamf Now interface.   So my question is , how do I buy only Jamf Protect and integrate it into Jamf Now or how do I get visibility on Jamf Protect from Jamf Now interface as is? Thanks kindly in advance.

We have iPads enrolled in MDM with Jamf Pro and also configured for ADE via Apple School Manager (supervised devices).I want to allow sign-in with Managed Apple IDs issued in Apple School Manager only on these supervised devices.According to the following document:https://learn.jamf.com/en-US/bundle/technical-articles/page/Configuring_Access_Management_for_Managed_Apple_Accounts_in_the_Jamf_Pro_API.htmlMy understanding is that this can be achieved by using the API to set the server UUID on the Jamf Pro side in the field,and then changing the setting in Apple School Manager from “Allow Managed Apple Accounts on all devices” to “Allow only on supervised devices”."automatedDeviceEnrollmentServerUuid"Is this really feasible in practice?Has anyone actually implemented this in a production environment?If so, I would appreciate any advice or points to be aware of.

Previously, we deployed the following script to allow standard users to change the date and time without requiring admin credentials. However, this is no longer working on Sequoia devices. Can someone assist in enabling this functionality on Sequoia devices? #!/bin/bash # Allows any user to change the date and time on their Mac. /usr/bin/security authorizationdb write system.preferences.dateandtime.changetimezone allow /usr/bin/security authorizationdb write system.preferences.datetime authenticate-session-owner-or-admin exit 0;