The heartbeat of Jamf has always been its customers. From day one, your passion and expertise have shaped a community unlike any other. What began as a simple email newsletter eventually grew into Jamf Nation - a space to troubleshoot, share wisdom, and connect with people who just get it. Along the way, we noticed a group of customers consistently going the extra mile, and that sparked the creation of Jamf Heroes - our deeply engaged, wildly generous champions who support Jamf and the wider community in incredible ways. Whether answering questions, offering solutions, or hopping on calls to help someone out, their impact was undeniable. But over time, we realised something bigger: meaningful contributions happen across our entire customer base, every single day. So, we built a way to recognise all of it. Enter Jamf Nation Rewards.        We launched Jamf Nation Rewards at JNUC 2024 to celebrate the everyday actions that strengthen our ecosystem. Joining Jamf Nation discussions and thr

It’s already November, and that means the end of 2025 is clearly in sight. Can you believe it? It’s been an eventful year at Jamf, especially for the Jamf community and User Groups!  Earlier this year, we officially launched the User Group program with the goal of connecting as many Apple Admins as possible. We created a starter kit to help new groups get up and running, complete with all the information and resources they need. We also introduced a brand-new community platform, featuring a User Group landing page and an interactive Groups map that displays all the groups around the globe.  It’s been a great year!  To end on an even higher note, we want to give an extra boost to all the groups thinking about getting started. We’ve heard from several soon-to-be User Group leaders who are eager to start but haven’t yet hosted their first meeting. While it’s a busy time of the year, it’s also the perfect time to gather your community, whether in person or online. To help make that happen,

This past July, I gave my third-ever presentation at a large conference: "swiftDialog for Overworked MacAdmins," at the Penn State University MacAdmins Conference. It wasn't my first time: I also presented in 2024 at MacAdmins on the topic of Compliance, and at the Consortium of Liberal Arts Colleges as part of our security response team on a phishing response workflow. I'm not a big name speaker. I'm not a well-known blogger, or tech writer, or popular person on Slack. I'm not on LinkedIn. I don't have any particular expertise, or much formal training. I'm not even a people-person. So what do I think I have to contribute to the community? I think, like you, that I have a lot to offer. Let me tell you why. If you're at all like me, and I think most IT admins are, we're just doing the best we can in often difficult circumstances: slim budgets, staffing issues, fractally-expanding scope of work. I don't know anyone who has enough time to do all the professional development work they thin

Attending JNUC 2025 in Denver was an incredible experience, a mix of innovation, collaboration, and community. Being surrounded by Apple IT professionals, consultants, and Jamf engineers reaffirmed how rapidly the Apple ecosystem is evolving across management, automation, and security. Key Takeaways 1. Jamf Blueprints and Compliance FrameworksThe new Blueprints feature truly changes how we approach configuration management. The ability to combine configuration profiles, policies, and restrictions into modular blueprints simplifies deployment and compliance alignment, especially for large environments.It also pairs perfectly with automated compliance reporting and remediation workflows, something I’m already planning to test in our sandbox. 2. Jamf Pro + AI IntegrationOne of my favorite announcements was the AI integration in Jamf Pro, providing smart recommendations, faster troubleshooting insights, and context-aware automation. This is going to significantly reduce admin time on repet

If you are looking to manage a fleet of Apple devices at scale, Jamf Pro Cloud is one of theleading tools out there. Whether you are handling Mac, iPads, iPhones, or even Apple TVs, thecloud-hosted version of Jamf Pro makes setup and ongoing management so much easier, no on-premise servers, no manual patching, and security managed by the experts at Jamf. Below, Ibreak down the main steps to get up and running with Jamf Pro Cloud, share key concepts,real-world workflows, and actionable tips.Table of Contents1. What is Jamf Pro Cloud?2. How to Implement Jamf Pro Cloud3. Core Concepts ExplainedPolicies Configuration Profiles Smart and Static Groups Extension Attributes Scripts App and Patch Management The Self Service Portal Inventory and Reporting Security and Compliance Integrations and Automation4. Example Workflows 5. Best Practices What is Jamf Pro Cloud?Jamf Pro Cloud is a fully cloud-based platform for managing Apple devices. Everything runsover the internet; you simply log in to a

 This guide will walk you through setting the local macOS account pictures for end-users via Jamf Connect  Requirements: Jamf Pro Jamf Connect Formatted ID Token Path setup in Jamf Connect Login Config (/private/tmp/token) Azure Storage Blob Email addresses of users follow a pattern for all users (john.smith@myorg.com, jsmith@myorg.com, etc..)  Tested with: Azure AD and Jamf Connect Test User: John.smith@ericsontech.com Steps: 1. First step is to get all of your user images. To make this easy on yourself name them the same as the user's email address. So for John Smith his email is john.smith@ericsontech.com I would name his image as john.smith@ericsontech.com.png and upload that image and all other user's images to an Azure Storage blob. Example:   2. Setup this script to run via Jamf Pro. I have mine setup to run via Jamf Connect Notify Note:  You will need to update this with your Azure Storage Blob url  curl -L "https://myazureblobname.blob.core.windows.net/mdm/$EMAIL.png" -o /tmp/

This article is based off of the presentation at JNUC given by ​@tommypatzius , ​@Jordy-Thery and ​@glennu  Our session at this year’s JNUC 2025 was designed to present a list of helpful tools available to Mac Admins of all skill levels and backgrounds. We know that everyone’s experience with Apple device management is different, so we’ve pulled together a collection of tools that are approachable, practical, and, in many cases, free. Many of them have a low learning curve, making them accessible whether you’re brand new to managing Macs or have years of experience. Our goal is that everyone walks away with at least one new tip, trick, or tool they didn’t know before. To make things clear and easy to follow, we’ve divided the tools into categories by function: Apple apps, Jamf tools, maintenance, setup & customization, notifications & support, and inspection tools. We took a closer look at a few specific highlights—Jamf Helper Constructor, Self Service+, and IBM Data Shift—befo

This guide represents the synergy of the latest technologies from Apple and Jamf. It harnesses the power of the new Declarative Device Management (DDM) framework built into macOS 15 (Sequoia). This modern approach is unlocked by Jamf Pro version 11.8.0 or later, which introduces Software Update Blueprints. Critically, this entire workflow is powered by the Jamf Account SSO, which connects your instance to the cloud micro-services required for Blueprints to function, creating a truly modern administrative experience.The guide outlines the modern, three-part strategy for managing macOS 15 and newer in Jamf Pro. It leverages DDM via Blueprints for a reliable, automated workflow and is based on enterprise best practices for both aggressive and controlled rollouts.PrerequisitesBefore you begin, ensure your environment meets these minimum requirements:Jamf Pro: Version 11.18.0 or later. Target Computers: macOS 15 (Sequoia) or later. Device Supervision: Devices must be Supervised. Administrat

This October, I’ll be heading to Denver, Colorado, for the Jamf Nation User Conference (JNUC 2025). It’s a week that brings together community, learning, and all things new with Jamf, and this year, I’m especially honored to be attending as one of the recipients of the JNUC Diversity Sponsorship. The Sponsorship ExperienceThe Diversity Sponsorship program reflects Jamf’s commitment to amplifying the voices of underrepresented individuals in the tech industry. Now in its ninth year, the program selects up to 10 individuals to attend JNUC with full conference registration, a travel stipend, and access to exclusive networking opportunities. Being chosen for this year’s sponsorship is both humbling and energizing. It’s not just about attending sessions or seeing the latest product announcements—it’s about being recognized as part of a broader effort to ensure diverse perspectives are present in conversations that shape the future of Apple administration and security. Why I AppliedThis will

Have you ever had to manage devices from a DEP instance you don’t control or even own? Or send DEP or BYOD devices to another campus where they need to be managed with a different MDM? This was the situation we encountered last year, and here’s how we solved it. Institutional ContextOur institution has expanded globally, adding new international campuses in Spain. These schools serve students from K–12, with management needs that differ significantly from those in the U.S. Because of local legal and operational differences, we chose to build independent technology stacks for each campus, modeled after our flagship U.S. campus. This provided consistency while allowing for flexibility.U.S. campus: Jamf Pro + Protect; BYOD model for students, DEP-managed devices for staff and faculty. Spanish campuses: Jamf Pro + Protect + Connect + Safe Internet; all DEP-managed, school-owned student devices.This design gave Spain the flexibility to support younger students in a day-school environment, w

This article and many others can be found on Rich Trouton’s blog Der Flounder As part of Apple’s unveiling of Declarative Device Management (DDM) at WWDC 2023, Apple announced that DDM management included the ability to deploy MDM configuration profiles using DDM as the delivery mechanism in place of using MDM to deliver the profiles. Jamf Pro’s Blueprints leverages this capability to support device restrictions.Let’s see how this works using a device restriction configuration, using the example of setting the following Apple Intelligence management functions to false in order to block the corresponding Apple Intelligence functions on macOS:   Restriction Setting available in version Description Key Key value Default setting in macOS Allow Image Playground macOS 15.0.0 If key value is set to FALSE, prohibits the use of image generation. allowImagePlayground Boolean TRUE Allow Writing Tools

In the MacAdmin world, few names command the kind of respect Charles Edge does. Not just for his technical expertise, but for his relentless curiosity and generosity. After his unexpected passing in 2024, I found myself reflecting on a behavior I learned through Charles's actions. A mindset I've come to call the Edge Methodology. It's not a framework or a management technique in the traditional sense. It's a response to fear. A refusal to fake confidence in things not yet understood. And it's inspired by the way Charles lived: by digging in, learning with humility, and lifting up others in the process.  The Problem: Fear of Not Knowing At some point in our careers, many of us have worked in environments where saying "I don't know" felt like admitting defeat. Where curiosity was mistaken for incompetence, and asking questions risked being seen as unqualified.   I've definitely been there.    In those spaces, people would often bluff their way through techni

I don't know about you, but my in-person conference skills need a brush-up. For me, it's been a little over three years since my last in-person. So here are some tips I've put together with some help from a few friends. If you are turning up on Monday before dinner, check the JNUC Slack Channel for any pre-conference get-togethers Monday night. The same is true every night. You can sleep when you get back home. This may be the only chance you get to talk to these people for some time. Go to the Keynote. It's the start of the conference, and at JNUC it starts well. I know it might be hard getting out of bed after the long flight the day before but do it. In fact, get into the conference venue for breakfast and a gossip every day before the first presentation. Talk to people. Don't be afraid to talk to anyone. The "hallway" track can be a great part of the in-person experience. Ask questions. Seriously, the presenters want questions and hope all the attendees go away with

Not too long ago, I wrote a Tech Thoughts article covering some of my favorite community resources. I wrapped up that post by mentioning a couple of conferences that might be worth your time. Well, it’s time to revisit those — because conference season is upon us! This list is heavily inspired by Jamf’s very own Armin Briegel whom has a fantastic page listing conferences and resources at scriptingosx.com/conferences — and he keeps it well updated!    A Quick Look Back  My personal favorite from last year was JNUC 2024 in Nashville. It was my second time attending, and I already knew a few folks, which made the experience even better. The networking opportunities are truly the highlight. Talking to like-minded professionals and getting insights into how different companies approach challenges — sometimes in very different ways — is incredibly valuable. Also, a special shout-out to the amazing @MusicCityMac Alan West, who was so welcoming and

Death by PowerPoint started in the living room Willis H. O’Brien was a famous Hollywood special effects artist known for his pioneering work in stop-motion cinematography. While we may look at his special effects in the movie King Kong from 1933 as outdated compared to the special effects we see in contemporary movies, his work is still relevant. He gave his audience the illusion that a giant gorilla not only moved but climbed the Empire State Building, then the tallest building in the world. And he did it one frame at a time. Unlike stop-motion, though, special effects are nowhere near as tedious with today’s tools. Whereas O’Brien spent 150 hours to create one minute of animation on film, today, we have tools like Magic Move that generate animated transitions between slides in just a few seconds. Transitions and animations important for presentations. Why? A transition is a change from one slide to another. It signals a change in thought to the audience. But a good transition should

If you haven’t read part 1, then click here and go back and read it. The next portion of Apple Intelligence is now shipping with macOS 15.2 and iOS/iPadOS 18.2. We now have Image Wand, Image Playground, Genmojis, ChatGPT integration, and a little more. To soothe all concerns quickly, Apple Intelligence is NOT powered by ChatGPT. It will never send data off to ChatGPT without first asking permission and that integration must also be enabled. Ok, now that that’s out of the way.Apple Intelligence now features image playground, Genmoji and moreWhat’s great is that all of these features have a way to be blocked. Apple has provided the following configuration profile keys for the preference domain com.apple.applicationaccessallowImagePlayground allowImageWand allowGenmojiAnd new as of Dot 2 releaseallowExternalIntelligenceIntegrations allowExternalIntelligenceIntegrationsSignInThe two new keys, as of the Dot 2 releases, must be deployed on the Dot 2 releases and higher versions. They may not

 Outlook Search is Broken  Problem:  When you search in Outlook, you get "No Results," even when you know the  email is there.  Solution:  Force the Mac to rebuild its search index for Outlook. Quit  Outlook .  Go to  System Settings  and navigate to  Siri & Spotlight .  Click the  Spotlight Privacy  button.  In a new  Finder  window, click Go → Go to Folder, from the menu bar. Paste this path  and press Enter: ~/Library/Group Containers/UBF8T346G9.Office/Outlook/Outlook 15  Profiles Drag the  "Outlook 15 Profiles"  folder into the Spotlight  Privacy list.  Wait about a minute, then click on the folder you just added and click the  minus  button to remove it.  Mac will start re-indexing in the background. It might take a few hours, but search  will work again when it's done. Mac is Slow After Update  Problem:  Mac feels sluggish and shows the spinning beachball a lot after updating to  Sequoia  Solution:  This is often temporary. Here are the main  things to check. Wait it Out:  Af

The Jamf 400 course is the highest certification level in the Jamf training program and is designed for administrators who want to deepen their knowledge in scripting and automation. This course not only requires a thorough understanding of Jamf Pro and macOS but also the ability to independently analyze and solve complex problems.    What to Expect in the Jamf 400 Course?  The Jamf 400 course covers advanced topics and practical challenges. Key focuses of the course include Automation and Scripting:   Developing and implementing advanced Bash scripts and API calls to automate administrative tasks.  Prerequisites and Target Audience  To successfully complete the Jamf 400 course, intermediate to advanced scripting skills as well as familiarity with the Jamf API are required. The course focuses on deepening these topics and applying them in complex scenarios.  The course is designed for Experienced Jamf administrators who are already familiar wit

I’ve been silly busy learning lots of non Apple related stuff. However there does seem to be a need for a how to guide of sorts on how to implement Jamf’s new SSO requirements.  Back in the day, you set up a SAML integration from your IdP to Jamf Pro. Access group of users on one side, Jamf user accounts on the other and you called it done.  Jamf is changing how all this works. Instead of an integration per app, they are replacing everything with one OIDC connection from your IdP to their Jamf Account page. Every single SaaS app you then get from Jamf will then already be enabled for SSO, you just have to put the accounts in place. Essentially authentication becomes a once and done and the gating is done on the application side.  Any other speculation as to intent from Jamf here I think is complete hogwash.  This article has a Okta focus, because that’s the IdP I use. Your mileage will vary with other providers.  Before I get into the technicals I do need to po

At some point in your career as an Apple Admin, you’ve (most likely) inherited a Jamf instance and said either to yourself or out loud, “Huh, I wonder why they did that. I certainly wouldn’t do it that way” or “That’s not the best practice I was taught”.   Caveat: There’s no such thing as best practice. The better concept is defining the best practice for your environment.   This is where you get to step in and be the hero. It’s your job to take the environment, back it up first. Make sure you backup your instance and sync it to your free Jamf sandbox (If you don’t have one, talk to your rep). Once you’ve backed up and sync’d to the sandbox, I hope you’re noticing the theme here…you can get started with the H.E.R.O. process.   Something not mentioned is the process of writing documentation. DOCUMENT, DOCUMENT, DOCUMENT. Write down everything from the current state, proposed changes, changes you made (with dates), how configs work, workflow processes, and everything else. The 1st thing