Hello Jamf Nation!We’ve released Jamf Pro 11.26.0 beta. This release includes updating session duration and time out within Jamf Account, automatic device registration with Microsoft Entra when using Simplified Setup for Platform Single Sign-on (Platform SSO), various bug fixes and more! For full details, check out the release notes after enrollment.How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Click “Join Community” to join the beta forum once enrolled. If you encounter an error on Jamf Nation joining the beta forum, please log into Jamf Nation and then click “Join Community” again. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks, Blueprints, and App Switcher. Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf

Hello everyone,i wanted to roll out our new custom TeamViewer Host and everything works except that our custom design with the company logo is not displayed. I did it exactly as in the instructions: https://hcsonline.com/images/PDFs/Jamf_Teamviewer_Host.pdf After the custom logo didn't show up, I kept searching and came across these instructions: https://community.teamviewer.com/English/kb/articles/50739-mass-deployment-on-macos#perform-an-assignmentThe groups and the membership works but unfortunately our custom layout does not. Am I missing something or have I done something wrong?  

We are currently using a pre-stage created managed account and the LAPS process for passwords on that account. Since we use Jamf Connect, we have ‘skip account creation step’ turned on.I am finding that this account is not getting the bootstrap token escrowed or a secure token after MDM enrollment. Is this intended? How can I change this? Ideally, I’d like to have a hands off option that doesn’t require a manual installation so that we always have the bootstrap token escrowed and a secure token on our managed account. What am I missing in this step? I am finding when we do need to use the local admin account, it’s not able to take some actions, like install a new OS.

Hey all - Ran into a thing that has been mentioned before, but it was a year ago and a few Jamf Connect login versions ago. We are now up to 3.6 Had a user who had their Microsoft Authenticator switch from sending them push notification to enter a number to requiring her to enter the 6 digit number. She would get the Jamf Connect Login window and enter her MS login, PW and the 6 digit 2FA code. The Jamf Connect Login window would stay up, but load her profile page. She would also see an error that password needed to be at least 7 characters, and contain one number and one alphanumeric character. It took me a VERY long time (and a computer wipe) to figure out that it looks like the Jamf Connect login window is passing that 6 digit number to the OS for login instead of the users Password.  Once we reset her Authentication Methods in EntraID so that the push notification workflow returned, her login issues on her laptop went away.  Has anyone else run into this before? If so is there a se

Due to changes being made by our network team we’re required to deploy a new Trusted Root Certificate within our Wifi Configuration Profile.  DigiCert are changing Root Certificates.What I’m encountering is even though I can successfully deploy the Certificate and Trust it within the Configuration Profile if I deploy more than one Root Certificate the Mac will not connect.I’m hoping that I can deploy the new certificate without impacting the existing wifi connection before Networks make the backend change.

Greetings all, We are trying to enforce screen lock time limits (which InfoSec wants), but when we do, it also enforces a particular screensaver module (which InfoSec doesn't care about in the least).  Some of our users don't like "Flurry" and want to set their own.  These two seem joined at the hip in the GUI.  Copilot had a suggestion using a script, but it didn't work for me. Does anybody have these two things functioning, but separately.  It doesn't seem like a big deal to me, but some of our users are really not happy about not being able to set their preferred screen saver.

Hi all I have a fleet of Mac Pros all sitting behind a firewall. All traffic - IPs, ports have been allowed as per the Jamf documentation. All Macs can sync and restart however apps can't be deployed or updated. Am I missing something? I even have the entire APNS IP range allowed but still nothing. Any help or advice would be much appreciated

We are new to Jamf Now. WE have been experiencing issues with deploying apps to some of our phones. I have tried to re-enroll it, restore the phones, re-create the blueprint and create a different blueprint. I also updated the tokens.  Has anyone encountered this issue? If yes, would you tell me what troubleshooting steps did you do? 

Every day we and our editors use Self Service to install multiple plugins (mulitple policies) - we USED to be able to know when they were all done, and how much there was left to go. Now we’re blind.  I do not understand why you removed this, it’s a big inconvenience for all of us.

Hi everyone, I'm deploying the Global Secure Access (GSA) client on macOS using Jamf, following the official Microsoft documentation:https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-install-macos-client The installation completes successfully, but on first launch, users are still prompted with the message:"Global Secure Access Client would like to add proxy configurations." Does anyone know how to pre-approve or automatically allow this proxy configuration request via a configuration profile or PPPC/extension setting? Thanks in advance!

We have had a PolicyBanner installed on our fleet for several years.  We have not had an issue with it until users upgraded to 26.  When the banner pops after user login, the window is stretched to almost full screen, regardless of screen size or resolution.  Screenshot attached of my large screen monitor.I have tried editing the RTF file a few ways to change margins and it will change the text but does not affect how the window sizes.I have also tried changing Desktop & Dock > Windows to Prefer tabs to Always instead of Full Screen This screenshot shows after trying to change margin and text.  I can share another with all the txt centered and nothing on the right of the txt but empty white space.   Thoughts?  Here is the original screen  

Anyone running into an issue with the Shared Device SSOe profile failing to install on shared iOS devices? I set up the Intune integration with Jamf Pro for both shared devices and standard iOS devices. Standard iOS devices register with Microsoft just fine, but don’t actually perform SSO with the Microsoft apps but they do show as compliant in Entra. I had the Shared Devices registering for about two days and now after wipe, The “Install Device Compliance Shared Device Profile” command fails every time even with a different device. Previous Entra records have been removed. Any ideas of what I could try to fix it or where I can find more detailed logs? History of failed commands had nothing. 

I get a Lego block icon when trying to login to a Mac on a domain. It doesn’t happen on all computers. I recently wiped a MacBook, that I could log into, however, after enrollment... now I get the Lego block icon. I can log in with other accounts.I believe it has something to do with the AD binding and possible VPP issue (my logs have been flooded with VPP Invitation Usage notifications). I don’t know how to fix it.Any help, would be greatly appreciated.Thank you. 

I have been checking my Change Management logs .. and I have hundreds of VPP Invitation Usage logs - is this normal, is it causing other issues? 

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

Morning,Anyone else experienced this issue since updating to Logic Pro 12 - We’ve got Jamf Pro at my org and currently push out Logic Pro via Apps store on Jamf which takes care of the updates and deployment to our various smart groups but since updating to version 12 yesterday we receive this error everytime we launch LP: The application cannot be used because the App Store authentication failed or no Network is available.Any ideas?Any advice or tips is greatly appreciated.

I am trying to create a Applications Usage Reports specially for Adobe App, I have tried:To create a usage report for a group of computers based on applications, you'll need to follow these steps:First, ensure Application Usage collection is enabled:Go to Settings > Computer management > Inventory collection Click Edit, then the Software tab > Applications Select "Collect Application Usage Information" checkboxNext, create a Smart Group for your computers:Navigate to Computers > Smart Computer Groups > New Add criteria using Application Title and optionally Application Version Configure operators and values to define your groupFinally, generate the report:Go to Computers > Search Inventory Create or select an advanced computer search with your criteria Click the Reports tab Select "Applications" as the inventory item to base results on Choose your file format and click Download ReportThis is jamf instructions and it did not work, when I reached out to support this is

Hello there everyone, I have come across a very weird issue lately.Any policy that I add to Self Service+ fail to run, while if I open Terminal and run jamf policy -event TRIGGER it works like a charm.The policy does not matter it if includes a package or a script. It has been driving me nuts.Tried on different machines and re-installing Self Service+ app. Thank you in advance,Spyros

Hey folks! Dropping in for another quick Self Service+ post on how to: determine available URL schemes for a macOS app (in this example, Self Service+.app) how to map policy URLs from Jamf Pro to the new schema and have the actions load within Self Service+ The Self Service app has historically supported URL schemes to automatically run a policy or open the app directly to a description of a given policy. Within the Self Service settings of an app policy in Jamf Pro there are installation and description URLs provided. Those URLs tie into URL schemes for the Self Service app, and can be launched in scripts and by sharing them directly via link. For example, running the simple Terminal command open "jamfselfservice://content?entity=policy&id=392&action=view" one can launch Self Service classic and deep link right into a policy and view the description. Self Service+ also includes this functionality, though the URL schemes are not displayed in Jamf Pro for pol

Hi Jamf Folks,I use nginx file distrubtion server. It works, but I have errors in the nginx log everytime I install something via Self Service +```2026/02/17 12:54:16 [error] 13387#0: *1 open() "/<pathToPkg>/Package.pkg/index.bom" failed (20: Not a directory), client: <ip-addresse>, server: webserver.de, request: "GET /<pathToPkg>/Package.pkg/index.bom HTTP/1.1", host: "webserver.de"```When I download it via webbrowser or wget, I do not get an error.here is my nginx.conf```worker_processes  1;events {    worker_connections  1024;}http {    include mime.types;    default_type application/octet-stream;    server {        listen 443 ssl;        http2 on;        server_name webserver.de;        ssl_certificate     fullchain.pem;        ssl_certificate_key privkey.pem;        location /Packages/ {            alias /<pathToPkg>/Packages/;            auth_basic "Downloads";            auth_basic_user_file /<pathto>/htpasswd;            types {                appl

We’re moving some devices from Jamf to Intune now when the new fuction with OS 26 is in place with School and Business Manager.We have encountered problems with two units so far, that you can't specify a date for the change. With that, it doesn't seem like they are being moved as intended and need to be deleted the old way. Does anyone know what could be causing this and/or if there is a solution?

So as we approach the inevitable coming of Self Service + we have noticed something that would be great to remove if possible to bypass some potential issues.In the Mac menu bar the Self Service + icon does not go away no matter what at the moment, and it also has a “Get software” option in the menu that does not apply to us. So I have the following questions:1: Is there a way to automatically hide or disable the icon from showing up?or2: Is there a way to customize what menu options the icon has so that it is more applicable to different use cases where optional software deployed through self service is not a thing? 

HI everyone,I am trying to implement JAMF Connect in our organization. I was able to successfully configure the OIDC, but while testing the ROPG, I am getting the attached error. I have confirmed that the client secret ID is correct, as the ROPG login is working for just one account. Also, all the users have been given access to the Enterprise Application. Any leads would be helpful. Thanks

Hi, I have a scenario where I want to use Entra ID during Automated Enrollment to authenticate end users and ensure Entra ID is the single source of truth for users and groups. I was also wondering whether if it would be possible to automatically create local accounts based on Entra ID.From what I have read, this is only possible with Jamf Connect. However, I've also heard that Jamf Pro has some IdP/SSO capabilities during enrollment, I'm trying to understand what can actually be achieved using Jamf Pro alone. If anyone with Jamf Pro expertise could clarify, I would greatly appreciate it. Thanks!

Has anyone successfully managed the following Safari settings via Jamf Pro (macOS and iPadOS)?• Hide IP Address from Trackers  • Prevent Cross-Site Tracking (I have disabled this in Safari on Macs with the “WebKitPreferences.storageBlockingPolicy” key.We are trying to determine whether these can be enforced through a configuration profile or other supported method, rather than relying on per-user changes. This is for lab or classroom environments,If you’ve implemented this, could you share:- Whether it’s working on macOS, iPadOS, or both  - The payload/key used (if profile-based) or the approach taken  Thanks in advance for any insight!