Hi there,i have a strange issue with my Apple Configurator 2, its up to date on a macOS 27 Mac, and when i try to prepare an iPad, for exemple, i have an error telling: provisional enrollement failed without anymore explanations.I’ve read this issue might be caused by ntework but i don’t have any problem to access to internet.Is there something elese i can do? 

Since NoMad has stopped working with the new macOS 26, we are looking for its replacement.We tried implementing JAMF Connect, but since we use ADFS, JAMF Connect is not compatible.Can anyone suggest any other replacement for NoMad, which can work as a password sync between Mac devices and our Entra environment.Thanks

I am trying to roll out Bitdefender via jamf school. They supply instructions for Jamf Pro https://www.bitdefender.com/business/support/en/77209-157498-install-security-agents---use-cases.html#UUID-d74e057a-3c56-ea49-62d0-e78bec7b5ca5_section-idm456459405796483264241879965 but nothing for school. I am unsure how to install the extensions that are required for Bitdefender - if anyone has followed the process, would welcome your input

Hi,  Has anyone has sucess with the new OS 27, Golden Gate and being to select the wifi on lock screen. It was mentioned as a new feature but it’s not working for me at this time and would be a great help in higher ed for our labs and using platform SSO for new users logging in.  Any feedback would be greatly appreciated.  Thanks!

We would like to request an enhancement to Jamf Self Service / Self Service+ for macOS to provide more dynamic application status and lifecycle management.The requested functionality is: Self Service should automatically detect whether an application is already installed on the Mac. Once the application is detected as installed, the Self Service item should automatically change its status from Install to Installed. For installed applications, Self Service should also provide a native Remove/Uninstall option without requiring administrators to create a separate uninstall policy, Smart Group, or custom script for each application. If the application is removed, Self Service should automatically detect the change and return the application to an Install state. Ideally, this status should update dynamically without depending on a full inventory update or jamf recon. The expected user experience would be:Application not installed:[ Install ]Application detected as installed:[ Instal

Hi everyone,I’m trying to set a default font in Microsoft Outlook (macOS) using Jamf Pro, and I’m running into some trouble.By default, Outlook uses Aptos, but I’d like to change it to Book Antique, which is already available on the device.What I’ve tried: I attempted to use the 3rd-party tool OutlookFontPoke by Paul Bowden @ Microsoft. Here’s what I did:• Deployed the OutlookFontPoke script and TemplateRegDB.reg via a package (both located in /private/tmp/OutlookFontPoke-master).• Created a policy in Jamf that:• Extracts the current logged-in user• Fixes permissions• Run the command as that user: sudo -u "$loggedInUser" /private/tmp/OutlookFontPoke-master/OutlookFontPoke 'Book Antique' '11.0pt' 'black' Issue: Despite several variations of the above, I keep getting this error in the script logs:WARNING: Registry DOES NOT exist at path /Library/Group Containers/UBF8T346G9.Office/MicrosoftRegistrationDB.reg. Attempting to create...mkdir: USER/Library/Group Containers: No such file or dir

Our infrastructure team is complaining about bandwidth congestion over the two 10 GBPS E-Lans.Has anyone moved from the 10 GBPS E-Lan to Dedicated Internet Access (DIA) or Cloud Connect to experience less congestion?

 Hi all,I'm testing macOS 27 Golden Gate (26A428) before fleet deployment and I'm trying to hide the VPN section from System Settings using the com.apple.systempreferences payload with the DisabledSystemSettings key.Bundle ID used: com.apple.NetworkExtensionSettingsUI.VpnSettingsIntents (confirmed via pluginkit -m -A -v | grep -i vpn)What I've tried:Deploying a native com.apple.systempreferences payload via Jamf Pro (uploaded as a full .mobileconfig) Running sudo defaults write /Library/Preferences/com.apple.systempreferences DisabledSystemSettings -array "com.apple.NetworkExtensionSettingsUI.VpnSettingsIntents" manuallyIn both cases the profile installs successfully and the key is present, but the VPN section remains visible in System Settings.This worked correctly on macOS 26 Tahoe. Has anyone found a working bundle ID or alternative approach for macOS 27?Thanks

Dear Community,i stumble upon the Topic:  I am currently facing the notorious "Peak Storage Overhead" / Storage Bottleneck issue while trying to update our fleet of 700 iPads (8th Generation, 32GB models). Even after a factory wipe, the Over-the-Air (OTA) update fails due to the system data footprint taking up too much space on these 32GB devices.I stumbled upon the topic where @cr4sh0ver mentioned a solution:"We changed our 'PreStage Enrollment' to require the latest OS before enrollment is processed. iPads go through normal enrollment process after the iPad has been updated..."Since we are running Jamf School (not Jamf Pro), I am struggling to find this exact setting. I know that we don't have "PreStage Enrollments" by that name, but rather Automated Device Enrollment Profiles (DEP) and Blueprints.Could anyone give me a quick, detailed step-by-step walkthrough for Jamf School on how to replicate this fix for a single test device?Where exactly in the Jamf School DEP profile (or elsewh

I am trying to configure Content Caching with MacOS 27, and they deprecated the Content Caching through Configuration Profiles. The main goal is to automate ICS with iOS devices.I have a Blueprint setup, and I have enabled “Auto enable tethered caching” and set it to True. This will set the key “AutoEnableTetheredCaching” to 1. However, I don’t see a way to set “AllowTetheredCaching” to a 1 as well.Limited output from “defaults read /Library/Preferences/com.apple.AssetCache.plist”:    Activated = 1;    AllowCacheDelete = 1;    AllowPersonalCaching = 0;    AllowSharedCaching = 1;    AllowTetheredCaching = 0;    AutoActivation = 1;    AutoEnableTetheredCaching = 1;    CacheLimit = 0; 

I have a problem where some users are unable to enroll new devices in Jamf School. I use enrollment via Entra. After entering their email address and password, it just spins for a while and then returns to the Entra window saying, “You can’t sign in right now. Please try again.”When I check the sign-in logs in Entra, they show “successful” several times, but no failed attempts. However, this does not affect all users—some are able to sign in and enroll devices, which is what confuses me.Has anyone run into the same issue?

Environment:- Fleet of iPads enrolled as Shared iPad via Apple Business Manager- Managed via Microsoft Intune- Federated authentication with Microsoft Entra IDIssue:The "Recent Users" pre-sign-in screen (the screen shown before any user signs in, displaying recent user avatars) never times out or goes to sleep on its own, regardless of the Auto-Lock setting configured on the device. This causes the display to stay on indefinitely whenever the device is sitting at this screen, which is a significant battery drain concern for a shared-device fleet.Steps to reproduce:1. Enroll an iPad as Shared iPad via Apple Business Manager / Intune2. Sign out of any active user session so the device returns to the "Recent Users" screen3. Leave the device untouched at this screen4. Observe: the screen never dims or locks on its ownTesting done:- Tested with Auto-Lock set to 2 minutes on one device and 5 minutes on a second device- Both devices exhibited identical behavior: the Recent Users screen stayed

Hi All.Does anyone know if it is possible to restrict access to the hidden photo album or even the ability to hide photos in the first place?I’m surprised there isn’t a restriction setting within Jamf to disable access to this.Cheers

8th gen ipads have only 32GB of storage, 11GB are used for OS and 3GB for system data, so, if you want to upgrade from iPadOS 18 to 26 the update requires 20GB of storage available in order to update making it almost impossible to update. The only options I see is to “restore” iPad with mac device or configurator, but just imagine doing this for hundreds of iPads, so the other option is to NOT update.If you have\had this same issue let me know if you have found better options for this update and did you, your business or school district decided to stay in iPadOS 18 or not.

Hi Jamf Community,I’m looking for guidance on implementing Recovery Lock password rotation for existing Apple Silicon Macs already enrolled in Jamf Pro.Current SetupFor newly enrolled Macs, we have enabled Recovery Lock through PreStage Enrollment.This works as expected:Recovery Lock password is automatically generated. The password can be viewed from the device inventory in Jamf Pro. After the password is viewed, Jamf automatically rotates it after approximately 1 hour.Challenge with Existing MacsWe also have a number of Apple Silicon Macs that were enrolled before Recovery Lock was enabled in our PreStage configuration.For these existing Macs, I created a script that uses the Jamf Pro API with Client ID and Client Secret authentication.The script successfully:Authenticates to Jamf Pro. Retrieves the Mac’s Management ID. Generates a random Recovery Lock password. Sends the SET_RECOVERY_LOCK MDM command. Successfully enables/updates Recovery Lock on the Mac.This part is working as expe

Hi,I’m using a extension attribute for the latest macOS suppported on managed Mac in my Jamf Pro instance.The extension attribute i use is update for macOS Tahoe, but i haven’t found an update to support latest Mac and macOS 27.Could you help me?Thanks

We are a University with Apple School Manager and Federated Apple ID setup, devices managed by Jamf Pro. Recently we've seen an issue with new users signing in to our shared iPads. They sign in with the federated account details fine, are prompted to create a passcode as normal:Then, when logged into the iPad, when the screen locks then the prompt to enter their passcode to unlock it is not the same as the normal federated one, its a numerical keyboard only, so they have no way of entering the alphanumeric passcode they just created:I've found that resetting the users passcode within School Manager resolves the issue. But its not a workable solution to have to do this for an entire class during a teaching session. Has anyone else experienced this issue?

Cannot update devices from iOS 27 to 27.0.1. All iOS 27 devices are still shown under iOS Update 27, even though they have already been updated to version 27. Only iOS 26.x devices can be updated to 27.0.1. 

can an admin PM please? i need some help with my account!thanks!

Unable to complete file upload. fiie contents does not match file type in Jamf when uploading an automated device enrollment token from apple business manager

We're seeing a strange issue for a few weeks now.The active window starts to lose focus randomly, which is a bit hard to explain, but for example, while typing every 20 seconds the textfield greys out for 5 secs then it's active again, which makes it impossible to work as this doesn't stop.With the help of the following python script (Brian33 on Nov 18, 2022), we found that OneDrive always steals the focus for a few seconds:https://forums.macrumors.com/threads/active-window-loses-focus.2321723/The only fix currently is to close OneDrive and re-open it, but this needs to be done always once the Mac restarts.So I created a script to close and re-open OneDrive during login, but it would be great to find a real solution. Our OneDrive version is always the most recent one: 23.056.0314Anybody else facing those issues?  

Hi there!Our school uses Jamf Teacher with Jamf School and sometimes we encounter a problem. Teachers start lessons for the whole class and don’t account for students who aren’t present.  This is fine if a student is at home due to illness but becomes problematic if they’re in another course like a special support course.We’d love a feature that allows us to easily exclude absent students from pushing lessons.  Does anyone know a good workaround?Should I make a feature request somewhere else? RegardsManuel

We have Jamf School with multiple domains.  3 of these domains are federated as we have 1-2-1 ipads.  Recently we have populated trolleys of ipads also into these domains.What we see is that on the shared domains, the classes appear.  When we choose to login as any student, the first student goes through fine.  But 2nd student onwards we get these errors and are unable to get the students logged inIt first says “Verification Failed - There was a problem connecting to the server”.  On clicking on this, it gives “Error setting up account - Try logging in again” and finally says “Unknown error has occurred”.There is nothing logged in the Activity log of the ipad.Any tips on how to resolve this will help.  Thanks. 

I updated our Apple TV fleet to tvOS 27 last over a week ago only to get some complaints about audio quality being “staticky” when casting sound through Airplay.  After much troubleshooting, I discovered it was due to our Airplay security being set to “On WiFi”.  If I set it to “Everyone”, the sound quality improves but Bluetooth discovery gets enabled which is a concern for us as kids were scaring teachers by blasting music when they were alone in the room.Besides awaiting a fix from Apple,  how does anyone else handle Airplay security?  Does everyone just set it to “Everyone”?