Blog Center
Recently active
This article and many others can be found on Rich Trouton’s blog Der Flounder As part of Apple’s unveiling of Declarative Device Management (DDM) at WWDC 2023, Apple announced that DDM management included the ability to deploy MDM configuration profiles using DDM as the delivery mechanism in place of using MDM to deliver the profiles. Jamf Pro’s Blueprints leverages this capability to support device restrictions.Let’s see how this works using a device restriction configuration, using the example of setting the following Apple Intelligence management functions to false in order to block the corresponding Apple Intelligence functions on macOS: Restriction Setting available in version Description Key Key value Default setting in macOS Allow Image Playground macOS 15.0.0 If key value is set to FALSE, prohibits the use of image generation. allowImagePlayground Boolean TRUE Allow Writing Tools
In the MacAdmin world, few names command the kind of respect Charles Edge does. Not just for his technical expertise, but for his relentless curiosity and generosity. After his unexpected passing in 2024, I found myself reflecting on a behavior I learned through Charles's actions. A mindset I've come to call the Edge Methodology. It's not a framework or a management technique in the traditional sense. It's a response to fear. A refusal to fake confidence in things not yet understood. And it's inspired by the way Charles lived: by digging in, learning with humility, and lifting up others in the process. The Problem: Fear of Not Knowing At some point in our careers, many of us have worked in environments where saying "I don't know" felt like admitting defeat. Where curiosity was mistaken for incompetence, and asking questions risked being seen as unqualified. I've definitely been there. In those spaces, people would often bluff their way through techni
I don't know about you, but my in-person conference skills need a brush-up. For me, it's been a little over three years since my last in-person. So here are some tips I've put together with some help from a few friends. If you are turning up on Monday before dinner, check the JNUC Slack Channel for any pre-conference get-togethers Monday night. The same is true every night. You can sleep when you get back home. This may be the only chance you get to talk to these people for some time. Go to the Keynote. It's the start of the conference, and at JNUC it starts well. I know it might be hard getting out of bed after the long flight the day before but do it. In fact, get into the conference venue for breakfast and a gossip every day before the first presentation. Talk to people. Don't be afraid to talk to anyone. The "hallway" track can be a great part of the in-person experience. Ask questions. Seriously, the presenters want questions and hope all the attendees go away with
It must be 8 or 9 years ago that I started supporting customers with ZuluDesk (now Jamf School). This was my first step into the device management world. Before that, I was a repair technician. As my curiosity grew, I was lucky enough that my employer allowed me to do the Jamf 100 and 200 courses. Managing iOS devices is all good and well, but with Mac you need a little more tools. Things like setting a wallpaper sound easy, but they actually require a bit more work than I expected. Welcome to the world of Mac Admins! I discovered that for everything I wanted to figure out how to do, there is usually someone with the same question, and maybe they’ve already found a solution for it. Coming in as a completely new Mac Admin, it might be a bit difficult to find your way. But knowing the right people, tools or places to ask for help are really valuable and make all the difference. So I thought, why not try and create some sort of list with starting points for f
Not too long ago, I wrote a Tech Thoughts article covering some of my favorite community resources. I wrapped up that post by mentioning a couple of conferences that might be worth your time. Well, it’s time to revisit those — because conference season is upon us! This list is heavily inspired by Jamf’s very own Armin Briegel whom has a fantastic page listing conferences and resources at scriptingosx.com/conferences — and he keeps it well updated! A Quick Look Back My personal favorite from last year was JNUC 2024 in Nashville. It was my second time attending, and I already knew a few folks, which made the experience even better. The networking opportunities are truly the highlight. Talking to like-minded professionals and getting insights into how different companies approach challenges — sometimes in very different ways — is incredibly valuable. Also, a special shout-out to the amazing @MusicCityMac Alan West, who was so welcoming and
Death by PowerPoint started in the living room Willis H. O’Brien was a famous Hollywood special effects artist known for his pioneering work in stop-motion cinematography. While we may look at his special effects in the movie King Kong from 1933 as outdated compared to the special effects we see in contemporary movies, his work is still relevant. He gave his audience the illusion that a giant gorilla not only moved but climbed the Empire State Building, then the tallest building in the world. And he did it one frame at a time. Unlike stop-motion, though, special effects are nowhere near as tedious with today’s tools. Whereas O’Brien spent 150 hours to create one minute of animation on film, today, we have tools like Magic Move that generate animated transitions between slides in just a few seconds. Transitions and animations important for presentations. Why? A transition is a change from one slide to another. It signals a change in thought to the audience. But a good transition should
If you haven’t read part 1, then click here and go back and read it. The next portion of Apple Intelligence is now shipping with macOS 15.2 and iOS/iPadOS 18.2. We now have Image Wand, Image Playground, Genmojis, ChatGPT integration, and a little more. To soothe all concerns quickly, Apple Intelligence is NOT powered by ChatGPT. It will never send data off to ChatGPT without first asking permission and that integration must also be enabled. Ok, now that that’s out of the way.Apple Intelligence now features image playground, Genmoji and moreWhat’s great is that all of these features have a way to be blocked. Apple has provided the following configuration profile keys for the preference domain com.apple.applicationaccessallowImagePlayground allowImageWand allowGenmojiAnd new as of Dot 2 releaseallowExternalIntelligenceIntegrations allowExternalIntelligenceIntegrationsSignInThe two new keys, as of the Dot 2 releases, must be deployed on the Dot 2 releases and higher versions. They may not
This guide represents the synergy of the latest technologies from Apple and Jamf. It harnesses the power of the new Declarative Device Management (DDM) framework built into macOS 15 (Sequoia). This modern approach is unlocked by Jamf Pro version 11.8.0 or later, which introduces Software Update Blueprints. Critically, this entire workflow is powered by the Jamf Account SSO, which connects your instance to the cloud micro-services required for Blueprints to function, creating a truly modern administrative experience.The guide outlines the modern, three-part strategy for managing macOS 15 and newer in Jamf Pro. It leverages DDM via Blueprints for a reliable, automated workflow and is based on enterprise best practices for both aggressive and controlled rollouts.PrerequisitesBefore you begin, ensure your environment meets these minimum requirements:Jamf Pro: Version 11.18.0 or later. Target Computers: macOS 15 (Sequoia) or later. Device Supervision: Devices must be Supervised. Administrat
Outlook Search is Broken Problem: When you search in Outlook, you get "No Results," even when you know the email is there. Solution: Force the Mac to rebuild its search index for Outlook. Quit Outlook . Go to System Settings and navigate to Siri & Spotlight . Click the Spotlight Privacy button. In a new Finder window, click Go → Go to Folder, from the menu bar. Paste this path and press Enter: ~/Library/Group Containers/UBF8T346G9.Office/Outlook/Outlook 15 Profiles Drag the "Outlook 15 Profiles" folder into the Spotlight Privacy list. Wait about a minute, then click on the folder you just added and click the minus button to remove it. Mac will start re-indexing in the background. It might take a few hours, but search will work again when it's done. Mac is Slow After Update Problem: Mac feels sluggish and shows the spinning beachball a lot after updating to Sequoia Solution: This is often temporary. Here are the main things to check. Wait it Out: Af
Mac Admins India Connect is more than just a meet-up, it’s a movement. This conference was built by and for the growing community of Apple IT professionals across India. This event is the country’s first dedicated space for those who manage, secure, and support Apple devices at scale in order to meet and learn from one another in a larger scale, one day event. We’re so excited and still buzzing from our inaugural event, and we’re excited to keep it going for next year! Why We Started This India has long been a powerhouse for Apple device management, with admins supporting businesses and schools not only locally, but across the globe. That changed with the formation of Mac Admins India which is a grassroots tech community born on a Google group, and eventually, into real-world meetups. And now, with Mac Admins India Connect, we’re taking it one step further: an annual gathering to celebrate our craft, share our stories, and inspire each other. By the Numbers:👥 160+ attendees 🏢 80+ org
If you’re the “tech support” for your household (and maybe your extended family), you know that keeping iPads, Macs, and iPhones updated, secure, and kid-appropriate can be a full-time job. Over the years, I’ve juggled everything from my children’s iPads to my wife’s iPad, my own Mac Studio and Mac mini, and evennmore devices as the family grows. As a parent of three kids under 10, I find myself constantly navigating what it means to raise emotionally healthy, curious, and safe children in a tech-saturated world. Each of our children has their own iPad. Two of them also bring school-issued iPads home. We share a Nintendo Switch in the living room for family gaming time, but for the most part, our home is firmly rooted in the Apple ecosystem. I settled on a solution that bridges the gap between “family IT” and enterprise-level management: Jamf Now. Why Jamf Now?Jamf Now is a cloud-based Apple device management platform built for small businesses, but it’s also ideal for power users, tin
Many organizations recommend or prescribe a specific web browser for their users. The user can change the setting in the user interface, even though it is not really obvious where to look. Many MacAdmins would like to pre-set this browser and the default during enrollment. However, there are several challenges associated with this in macOS. It would be really nice if Apple provided some means to manage this with a configuration profile. If you agree, please file feedback with your AppleSeed for IT account. While we wait for that, what can we do? Use the browsers Most third party browsers have a built-in command option to set themselves as the default browser. Most Chromium based browsers (Google Chrome, MS Edge, etc.) can be launched with the --make-default-browser option: open -a "Google Chrome" --new --args --make-default-browser open -a "Microsoft Edge" --new --args --make-default-browser For Firefox, the options are different: open -a "Firefox" --new --args -silent -nosplas
The Jamf 400 course is the highest certification level in the Jamf training program and is designed for administrators who want to deepen their knowledge in scripting and automation. This course not only requires a thorough understanding of Jamf Pro and macOS but also the ability to independently analyze and solve complex problems. What to Expect in the Jamf 400 Course? The Jamf 400 course covers advanced topics and practical challenges. Key focuses of the course include Automation and Scripting: Developing and implementing advanced Bash scripts and API calls to automate administrative tasks. Prerequisites and Target Audience To successfully complete the Jamf 400 course, intermediate to advanced scripting skills as well as familiarity with the Jamf API are required. The course focuses on deepening these topics and applying them in complex scenarios. The course is designed for Experienced Jamf administrators who are already familiar wit
I’ve been silly busy learning lots of non Apple related stuff. However there does seem to be a need for a how to guide of sorts on how to implement Jamf’s new SSO requirements. Back in the day, you set up a SAML integration from your IdP to Jamf Pro. Access group of users on one side, Jamf user accounts on the other and you called it done. Jamf is changing how all this works. Instead of an integration per app, they are replacing everything with one OIDC connection from your IdP to their Jamf Account page. Every single SaaS app you then get from Jamf will then already be enabled for SSO, you just have to put the accounts in place. Essentially authentication becomes a once and done and the gating is done on the application side. Any other speculation as to intent from Jamf here I think is complete hogwash. This article has a Okta focus, because that’s the IdP I use. Your mileage will vary with other providers. Before I get into the technicals I do need to po
Microsoft has announced plans to move storage of the Workplace Join Key out of the user’s Login Keychain and into Apple’s Secure Enclave: Microsoft Enterprise SSO plug-in for Apple devices - Microsoft identity platform Announced in March 2024, Microsoft Entra ID will be moving away from Apple’s Keychain for storing device identity keys. Starting in Q3 2025, all new device registrations will use Apple’s Secure Enclave. There will be no opt-out of this storage location. Applications and MDM integrations that have a dependency on accessing Workplace Join keys via Keychain will need to start using MSAL and the Enterprise SSO plug-in to ensure compatibility with the Microsoft identity platform. In the same document, Microsoft provides guidance on how to test the Secure Enclave today to ensure the change will be compatible with your environment when the change goes live: If you would like to enable Secure Enclave based storage of
This is a blog article originally posted on @dan-snelson ‘s personal blog, https://snelson.us/This article is split into two separate posts, so for the full article, please proceed to Part 2 Provide your users a "heads-up display" of critical computer compliance information via swiftDialogProvide your users a "heads-up display" of critical computer compliance information via swiftDialogBackgroundMore than six years ago,William SmithpublishedBuild a Computer Information script for your Help Desk; we implemented a customized version in the fall of that same year.Last week, during a conversation with one of our rock-star TSRs — whom I'll refer to as "John" — we decided it was time forswiftDialog-ized reboot.FeaturesThe following compliance checks and information reporting are included in version1.9.0, which operates in "test" mode by default. (ChangeoperationModetoproductionwhen ready to deploy in production.)Compliance ChecksmacOS Version Available Updates (including deferred updates) S
This is part two of Dan’s blog, and it belongs with this ‘Part 1’ article. # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # ## Check Available Software Updates# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #function checkAvailableSoftwareUpdates() { notice "Check Available Software Updates …" dialogUpdate "icon: SF=arrow.trianglehead.2.clockwise,${organizationColorScheme}" dialogUpdate "listitem: index: ${1}, status: wait, statustext: Checking …" dialogUpdate "progress: increment" dialogUpdate "progresstext: Determining Available Software Updates status …" sleep "${anticipationDuration}" mdmClientAvailableOSUpdates=$( /usr/libexec/mdmclient AvailableOSUpdates | head -n 5 ) if [[ "${mdmClientAvailableOSUpdates}" == *"OS Update Item"* ]]; then notice "MDM Client Available OS Updates" info "${mdmClientAvailableOSUpdates}" fi recommendedUpdates=$(
At some point in your career as an Apple Admin, you’ve (most likely) inherited a Jamf instance and said either to yourself or out loud, “Huh, I wonder why they did that. I certainly wouldn’t do it that way” or “That’s not the best practice I was taught”. Caveat: There’s no such thing as best practice. The better concept is defining the best practice for your environment. This is where you get to step in and be the hero. It’s your job to take the environment, back it up first. Make sure you backup your instance and sync it to your free Jamf sandbox (If you don’t have one, talk to your rep). Once you’ve backed up and sync’d to the sandbox, I hope you’re noticing the theme here…you can get started with the H.E.R.O. process. Something not mentioned is the process of writing documentation. DOCUMENT, DOCUMENT, DOCUMENT. Write down everything from the current state, proposed changes, changes you made (with dates), how configs work, workflow processes, and everything else. The 1st thing
Apple Intelligence is finally here now that iOS 18.1 and macOS 15.1 has shipped. However, many people and organizations want to know how they can block it.Apple Intelligence is an Opt-In service from Apple, so unless you Opt-In, there’s no concerns about AI, on or off device.Officially, Apple has provided the following configuration profile keys for the X.1 OSes for the preference domain com.apple.applicationaccess.allowWritingTools allowMailSummary allowGenmoji allowImagePlayground allowImageWandAnd DDM management of Math Notes.There’s also the key allowAssistant to disable Siri, which has become more intelligent with Apple Intelligence.Currently in the X.1 OSes, these are the features which are available and able to be restricted: Siri, Writing Tools and Mail Summary, even though there are controls for the other features not yet implemented.This will allow you to fully block those features. But is that it? …the answer is …No. So even if you implement all the Apple supplied restrictio
On June 24th, I attended Jamf Nation Live in Munich – and I'm still buzzing with excitement.Jamf has once again demonstrated why it is considered the leading provider in the Apple enterprise environment. I found the new developments around Jamf Pro particularly exciting, including improved integrations with Microsoft Entra ID, automated compliance checks, and even closer integration with Apple Business Manager. For businesses, this means less manual work, greater security, and easier scalability. Above all, the new self-service features give IT teams more control while giving end users more flexibility—a real productivity boost. In addition to the technical innovations, the exchange with the Apple Admin Community was the real highlight for me. I saw many familiar faces and made new contacts. What always impresses me is the exceptionally open and helpful atmosphere in the Apple world. People share scripts, best practices, and solutions without any sense of competition—that's really uni
Last month, we announced through this Tech Thoughts blog article that Jamf Nation will get an upgrade later this summer. Well, friends...the time has come! On Friday, July 4, Jamf Nation shifted from its current platform to a new space, and we couldn't be more excited. What you need to know about the migration Any new content published on Jamf Nation between JUNE 23 – JULY 3 will need to be re-posted to the new site after launch. (If you got your answer in that timeframe and don’t care that it’s on the new site, that’s fine too!) All content that was posted to Jamf Nation BEFORE JUNE 23 will migrate. No action needed! Yes, your profile information will migrate. Yes, your User Group information will migrate. Yes, your postings to the job board will migrate. It will ALL migrate. 😊 Improvements in the new space We’re excited for you to come in and see the new space soon! Warning...it will look and feel different, this is by design. This upgraded version of Jamf Nation w
Monday June 9 it was that time of the year, Apple’s World Wide Developers Conference kicked off with the usual Keynote where they introduce the new versions of macOS, iOS, iPadOS, visionOS, tvOS and watchOS. I was lucky enough to have obtained a ‘golden ticket’ through the lottery system and actually attend this event at Apple Park in Cupertino! As an Apple consultant and macOS developer at long-time Jamf-partner Root3, it was both very exciting and relevant for me to attend. I’d like to share my in-person experience while also highlighting key announcements, especially for Apple IT admins and how this may affect us this fall. In-person experienceThe WWDC event for attendees is actually a multi-day event with most activities taking place from Sunday to Tuesday. It starts with a welcome reception at the historic Apple Campus at 1 Infinite Loop where you check-in, get your badge, happy Apple employees high-fiving and lots of photo opportunities. It’s a great start of the week to mingle
Managing macOS devices in a large-scale enterprise environment always need IT expertise. Even with a powerful MDM like Jamf Pro, IT admins often need to dive into the command line to truly get to the root of issues. In this blog, we will walk through real-world command-line troubleshooting techniques for both macOS system issues and Jamf Pro management. Whether you're dealing with failing profiles, app crashes, or failed policies, this post has your back with real commands that work. Getting Started: System Info at Your Fingertips Before troubleshooting, gather critical system details: Get system version: sw_vers List all installed system updates softwareupdate –history Hardware overview system_profiler SPHardwareDataType Check uptime uptime Check disk usage df -h Network Troubleshooting Network issues
Back in 2007, Jamf customers started coming together – in email. It wasn’t the most advanced way to gather, but it worked. The purpose was to share knowledge. And for a few years, words of wisdom flowed as the list grew. Jamf Nation was forming and quickly outgrew its simplistic home. That's when Jamf’s founder, Zach Halmstad, shared a bigger vision. Jamf Nation would move to an online platform. In its new format it would: Facilitate customer-to-customer communication Facilitate customer-to-Jamf communication Facilitate Jamf-to-customer communication Fast forward nearly 15 years, and these are still foundational elements of Community at Jamf. But you deserve more than our current platform can offer. That’s why we’re excited to shift Jamf Nation from its current home to a new community offering this summer. Get ready for an elevated look, feel and overall experience. Be ready to: Find what you need more easily Experience
As organizations scale their Apple device deployments, maintaining visibility, control, and compliance across endpoints becomes increasingly complex. Jamf offers a powerful yet often underutilized feature to address this challenge: Extension Attributes. These customizable data points enable administrators to extend the default inventory capabilities of Jamf Pro, creating a more detailed, flexible, and actionable view of managed devices. What Are Jamf Extension Attributes? Extension Attributes (EAs) in Jamf Pro are custom scripts or input fields that gather specific information about devices beyond the standard inventory data (e.g., OS version, hardware model, serial number). Admins can write scripts—typically in Bash, Python, or Zsh—that query system details during inventory collection. The results are stored in the Jamf database and can be used in smart groups, reports or policies. For example, an EA can report whether FileVault is enabled, if a specific
Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
