Hello everyone! I didn’t want to open a new topic and was looking for the similar one, but could not find it. Before I open a support ticket, I would like to hear from the community, if it’s a know issue… or it’s just my MDM-Fleet member, who faced this issue.‘Management Commands’ disappeared from one of my MacBook’s Inventory Record (Management Tab). I was not able to get it back. Tried to redeploy the Jamf Management Framework for enrolled device (*.jamfcloud.com/api interface), but it didn’t help. The laptop seems to be synchronized with Jamf, but the problem is that if I want to wipe this exact laptop, I don’t have Management Commands section, where I click ‘Wipe Computer’ command. Does anyone of you face this issue before?By the way, this laptop is in another country, so the only possibility to wipe it, is to physically get it in my hands.Thanks a lot for your attention 

The commands will stay stuck in Pending and the device would be under the university network. Once I connect the device to a hotspot, the commands will go through. I have talked with the networking team and they have said that everything should be allowed under the university’s network when it comes to APNs, but I feel like there is something missing. I’m unsure if there is a profile or certificate I have to do for our university’s wi-fi, or what are the list of questions I can ask our networking team to officially confirm that push notifications are going through for iOS devices. For MacOS devices under the university wi-fi, management commands do go through at least, so I feel like this is a iOS specific issue that I need to somehow prove to the networking team to change something even if they claim they did.

Wondering how others are handling the transition from PPPC Profiles to DDM Blueprints.  For this example I’ll use Zoom. The PPPC that’s pushed out has Accessibility: Allow and ScreenCapture: Allow standard users to allow access.For Blueprints under App Settings, then App privacy the permission defaults are configured for Accessibility: Allow, Camera permission: Allow, Microphone permission: Allow.  There is no option for ScreenCapture in Blueprints yet. So is the recommended action to push the Blueprint prior to users upgrading to MacOS 27 (right now all of our devices are on 26 and we’re just testing 27).  Then also to keep the PPPC in place for the ScreenCapture feature, and if it’s being kept in place are you stripping out the Accessibility setting in the PPPC once all users are upgraded to MacOS 27 and the Blueprint is successfully pushed to all devices?

Anyone have experience with BYOD iPhones and iPads enrolled in Jamf via Profile-based Device Enrollment method? Can you issue a wipe command to factory reset them? This Apple support page indicates yes, you can, but I’m hearing otherwise from some people positing that feature’s not available on Managed devices, only Supervised devices...https://support.apple.com/en-lb/guide/deployment/dep08f54fcf6/web  

We are using Jamf School to administer iPads that are used on a 1:1 basis. Since a lot of our students use their iPads during breaks to watch YouTube videos or play games in a browser, we would like to turn off that function during breaks.We are testing Jamf RADAR. I was able to sucessfully include one of our iPads in Jamf RADAR by uploading a configuration into a profile in Jamf School.I tried to restrict that test iPad. So, I was able to block tobacco websites. Then I tried to turn off any browsers with the settings below, but I still am able to open the chrome app on the test iPad.The test iPad has iPadOS 26.6.1 on it.Thank you for any help in advance.CheersKai 

 Hello,One Apple TV can't install a device-assigned Disney+ app. The other four devices in the same group installed it fine.DETAILS- Jamf instance: retailinnovations.jamfcloud.com- Device: "Batcave 3", Apple TV 4K (3rd gen), serial K2Q7CXQHWH, tvOS 27.0, mobile device ID 324- App: Disney+ (com.disney.disneyplus), Jamf mobile device app ID 86 ("Disney+ - Batcave"), Site "Batcave"- Volume location: "BATCAVE VPP". The Apple Business organizational unit is "BATCAVE", with 5 licenses purchased.- Seat count: both Apple Business and Jamf show 5 of 5 in use, 0 available.- Error: INSTALL_APPLICATION fails with ManagedDevice.error 2605, "No license was found for app 'com.disney.disneyplus'".- Other apps from the same location (DirecTV, Netflix, Paramount+) installed on this device without problems.WHAT I'VE TRIED- Cancelled the failed command and sent Update Inventory, then let Jamf re-send the install. This failed at least four times, most recently at 23:23 UTC on 2026-10-18.- Removed the group

Hi everyone, I'm an IT professional based in Bryan/College Station, Texas, with hands-on experience supporting and managing Apple devices in an educational environment. I'm a Jamf Certified Associate – Jamf Pro and have professional experience with Jamf Pro policies, configuration profiles, device enrollment, application deployment, inventory management, and macOS troubleshooting. I also have experience supporting Windows and ChromeOS environments. I'm currently exploring full-time opportunities in desktop support, Apple endpoint management, IT support, or related technical roles. I'm open to remote positions throughout Texas or onsite opportunities within commuting distance of Bryan/College Station. I'd appreciate any leads, recommendations, or connections within the Apple IT community. Thank you!

 I had a user get this notification after a reboot (required after an update). Any idea if this is coming from macOS or Jamf Protect? This managed MacBook already had Jamf installed a while ago so wondering why it popped up again. Also, the user was concerned Jamf is doing all this on their MacBook behind the scenes. Thanks. 

Hello Jamf Support Team,We are experiencing an issue in our Jamf Cloud environment where all package deployments are failing during the package download stage. EnvironmentJamf Cloud URL: https://flexera.jamfcloud.com Managed macOS devices Policies are successfully received by clients Package downloads from JCDS fail with HTTP 403Issue SummaryThe Jamf client successfully communicates with the Jamf Pro server, retrieves policies, and begins package caching. However, when the client attempts to download the package from JCDS, the download fails with HTTP 403.This issue is occurring for:CSIA package deployment Cyberduck package deployment Evernote package deployment Newly uploaded test packageBecause multiple unrelated packages fail in the same way, this does not appear to be package-specific.Sample Client LogPlain Text  Executing Policy CSIACaching package csiaagent... Downloading https://flexera.jamfcloud.com/jcds/v2/downloads/csiaagent.dmg Error: Package was not successfully downloaded.

I am trying to renew my licenses but I am unable to because they expired more than two months ago. How can I renew them?

Hi.We’re using Jamf School as MDM (so please do not tell me all the wonderful things available in Pro 😅 ).Setting up MacBook Neo’s as new student devices. We want to block applications as: FaceTime, iMessage, Phone, iPhone mirroring during enrollment. As of today the only “half ass” solution is the “Safelist and Blocklist” payload, but this is deprecated :  Are there any other good solutions for getting this to work?

We have been using Jamf Setup with Entra SSO for a year now. Since the begining one of the first steps required is to log into Microsoft authenticator and register the device to the tenant using an account with cloud device administrator access. At JNUC I asked one of the sessions and they thought that requirement has been removed. I look at the documentation but I am not seeing any configuration changes but any device we setup still requires that step. Can anyone point to what I need to change to no longer require that registration step?

So It seems Apple has removed some MDM control of macOS updates in macOS 27 and they are only allowing using DDM commands to do this.Wanting to know if the Defer Major macOS updates MDM profile setting will work in macOS 27 or is this gone too? (I would assume that deferring upgrading to 27 will still work since older versions of the OS still support MDM update control. This is more about the future) I see with Jamf 11.29 that the download & schedule install is now DDM and works on prem but what we are really looking for is a way to continue Defer Major macOS updates for 90 days. We are not in Jamf cloud and not really looking to move.

Hello everyone,Anybody able to advice witch way to go to get Singel Sign-On for our Apple fleet? Is it with only Single Sign-On extension in Jamf, Kerberos SSO extension via Apples site or any other?

Hello Jamf Comunity - After ADE PSSO - Password enrollment, the user reaches the desktop, but a Jamf Conditional Access picker appears unexpectedly and disappears automatically within approximately 45 seconds. The MFA challenge and subsequent authentication/compliance checks complete successfully.Has anyone experienced this behavior? Is it related to Entra Conditional Access evaluation, device registration, or the Jamf compliance integration? Is there a recommended way to prevent this window from confusing end users?

Is anyone configuring Platform SSO with the Secure Enclave authentication method to overcome local password synchronization with Entra ID? Are you using JAMF Connect? If so, could you confirm which solution or flow you use with ADE and share your insights?  

In this case I’m trying to use two policy’s in macOS Terminal, one works and the other doesn’t. Office 365 with id 266 (can be installed via Self Service for the user) that works via the Terminal. The policy only contains a package.   Dockutil for students with id 293 (can also be installed via Self Service for the user) that doesn’t work via the Terminal - it says “No policies where found for the ID 293”. The policy contains a package and a script.  Does anyone know why the first works and the second doesn’t?

Hi, hoping someone is able to help!We’ve successfully deployed SCEP with Jamf School for our iPads. The devices received their certificates correctly and were able to connect to our Wi-Fi.However, we are now experiencing an issue with certificate renewal around a year later. The certificates are not automatically renewed when they are approaching their expiration date. It seems that Jamf School’s SCEP configuration does not send a new certificate request before the current certificate expires.As a result, the iPads are dropping off our Wi-Fi and are unable to reconnect once the certificate expires. To get them back online, we have to connect the iPads to another network and then manually push the Wi-Fi profile again through Jamf School.Other MDM solutions provide an option to specify how many days before expiration a certificate should be renewed, but I can’t find a similar setting in Jamf School.How can we configure automatic certificate renewal in Jamf School? I’ve looked through the

Does Jamf Pro 11.32.1 support Apple’s LiquidGlass Setup Assistant SkipKey in Mobile Device PreStage Enrollment/ADE? If not, when will LiquidGlass be included when “All” Setup Assistant Options are selected?

Has anyone had any experience in deploying Fortinet's FortiClient to computers? I get a DMG from our on-prem controller but that doesn't install when I use Jamf Pro to install onto client machines

I had a ‘latest version’ enforcement not apply recently so I want to source the community to see if anyone else has a similar setup or came to the same conclusion. This may end in a Feature Request, but I want to understand some logistics and maybe crowd-source a solution if possible. Let’s say I want to defer my updates for a set period of time across multiple release rings (Early Adopters, GA1, GA) but I also wanted to enforce updates as well. This would create ‘update windows’ for each ring. EA opens up after 7 days and is enforced after 10 days. GA1 is a week later and GA a week after that. Blueprints - technically - provides this and its quite simple to deploy. However… I’m learning that the enforcement mechanism relies on the Apple GDMF feed which… is typically only a single version in a given OS family. Right now, it looks like this: A command-line view curling gdmf.apple.com. For Tahoe, only 26.7.1 is listed as of 6 October 2026This means the Blueprint checks against this feed

Hello, I have seen that the FortiClient is causing difficulties for some users. However, I have just been able to create a relatively simple solution with which the config files can also be made to work by default. My requirements: macOS 11.2.3 (intel) / Jamf Pro / DEPNotify 1.1.6 complete installation on one system upload the install.mpkg to Jamf Admin start Jamf Composer and create a pkg with the following path incl. all subfolders (all custom settings are saved here): /Library/Application Support/Fortinet new policy: select both pkg-files, I first selected the config-pkg and then the Install.mpkg. That´s all. I had success with this. FortiClient is running perfect with custom settings. No restart needed.

Hello,I’ve run into a roadblock and could use some guidance.Our school district has been experiencing an issue with Keychain access prompts appearing for staff. For most users, clicking “Always Allow” after entering their password, resolves the issue, but for some, the prompt reappears after a period of time. This is only seen in Apple Classroom, as of now.Has anyone encountered this before? Are there any recommended troubleshooting steps or potential solutions I should explore to prevent the prompt from recurring?Any guidance on the best approach to resolving this would be appreciated. 

Hi everyone, I. HATE. PRINTERS. That being said, we have to work with them.  and... Canon does not make it easy. Here is what I was able to find out from several places online, in order to get this "installer" to actually work. So let's jump on to our Macs and get this over with.Downloading the "Installer"1. Log into your Uniflow Online (web)2. Start Printing (Side Bar)3. Install Printer Driver > Click [Download macOS printer driver] Navigate to Download FolderOpen SmartClientMac.iso > Open SmartClientMac Volume > Notice here you only have 1 file. But actually there are 4. 3 are hidden.On your Keyboard us the show hidden files shortcut: Command+Shift+.(Period)Getting Files in the Right LocationYou will now see 3 other files. We only need the SmartClientForMac.pkg and tenantcfg.plist files.Next, Go to Finder > Go > Go to Folder (Shift+Command+G)Enter 'private/tmp'Next create a new folder called 'uniflowclient'Which is now located in private/tmp/un

In Jamf Teacher, after the latest update (8.6.6) I face a big bug : Restrictions and Athaurozed apps menus are unavailable, and a message is displayed saying that (restrictions or authorized apps) are not available on MacOS devices.Well my device is an iPad, and so are the pupils’ devices.A bug correction will be welcome, unless this problem comes from something else ? but what? the pnly change I made was updating Jamf Teacher from 8.6.3 to 8.6.6. A colleague of mine showed me the same messages on her iPad.Thanks for your help.Jérôme