Skip to main content

Tech Thoughts

Discover how Apple admins solve challenges, streamline workflows and drive innovation with Apple. Tech Thoughts features customer-authored content filled with firsthand experiences, practical advice and community-driven insights.

  • 94 Topics
  • 472 Replies
94 Topics
KyleEricson
KyleEricsonValued Contributor
published in Tech Thoughts
Set Account Pictures via Jamf ConnectBlog

 This guide will walk you through setting the local macOS account pictures for end-users via Jamf Connect  Requirements: Jamf Pro Jamf Connect Formatted ID Token Path setup in Jamf Connect Login Config (/private/tmp/token) Azure Storage Blob Email addresses of users follow a pattern for all users (john.smith@myorg.com, jsmith@myorg.com, etc..)  Tested with: Azure AD and Jamf Connect Test User: John.smith@ericsontech.com Steps: 1. First step is to get all of your user images. To make this easy on yourself name them the same as the user's email address. So for John Smith his email is john.smith@ericsontech.com I would name his image as john.smith@ericsontech.com.png and upload that image and all other user's images to an Azure Storage blob. Example:   2. Setup this script to run via Jamf Pro. I have mine setup to run via Jamf Connect Notify Note:  You will need to update this with your Azure Storage Blob url  curl -L "https://myazureblobname.blob.core.windows.net/mdm/$EMAIL.png" -o /tmp/

432
S
mattjerome
mattjeromeJamf Heroes
published in Tech Thoughts
Imposter Syndrome in IT: You’re Not Alone, and You’re Not a FraudBlog

Before we get too far into this I want to say one thing. I am not a medical or mental health professional. I’m a Jamf Engineer who has thought a lot about this but by no means am an authority on the subject. The following article is my reflections and not any type of mental health treatment. Now that that’s out of the way…here we go! Nobody goes to school to be a Jamf Engineer or Admin. The vast majority of us ended up in this field because we like to tinker with things, eventually break them and are forced to fix them without any help or education. For a lot of us, we ended up in this field by doing other things in a job where we do have formal training.When you fix what you’ve broken, you feel great. But when you can’t fix it, some of us give up, others seek advice, some keep plugging along to find the solution.  But what happens when you end up in a corporate environment and you have to tackle things that you inherited, need an upgrade or you just need to do maintenance, most of it

3446
Jordy-Thery
karthikeyan_mac
karthikeyan_macHonored Contributor
published in Tech Thoughts
A Community-Led Celebration of Apple IT in India
A Community-Led Celebration of Apple IT in IndiaBlog

Mac Admins India Connect is more than just a meet-up, it’s a movement. This conference was built by and for the growing community of Apple IT professionals across India. This event is the country’s first dedicated space for those who manage, secure, and support Apple devices at scale in order to meet and learn from one another in a larger scale, one day event. We’re so excited and still buzzing from our inaugural event, and we’re excited to keep it going for next year! Why We Started This India has long been a powerhouse for Apple device management, with admins supporting businesses and schools not only locally, but across the globe. That changed with the formation of Mac Admins India which is a grassroots tech community born on a Google group, and eventually, into real-world meetups. And now, with Mac Admins India Connect, we’re taking it one step further: an annual gathering to celebrate our craft, share our stories, and inspire each other. By the Numbers:👥 160+ attendees 🏢 80+ org

2857
sjha967
JeniA
JeniACommunity Manager
published in Tech Thoughts
Jamf Nation Upgrade: What you Need to Know
Jamf Nation Upgrade: What you Need to KnowBlog

Last month, we announced through this Tech Thoughts blog article that Jamf Nation will get an upgrade later this summer. Well, friends...the time has come! On Friday, July 4, Jamf Nation shifted from its current platform to a new space, and we couldn't be more excited.  What you need to know about the migration  Any new content published on Jamf Nation between JUNE 23 – JULY 3 will need to be re-posted to the new site after launch. (If you got your answer in that timeframe and don’t care that it’s on the new site, that’s fine too!)   All content that was posted to Jamf Nation BEFORE JUNE 23 will migrate. No action needed!    Yes, your profile information will migrate.   Yes, your User Group information will migrate.    Yes, your postings to the job board will migrate.  It will ALL migrate. 😊    Improvements in the new space   We’re excited for you to come in and see the new space soon! Warning...it will look and feel different, this is by design. This upgraded version of Jamf Nation w

973
vshulhin
R
rich.troutonHall of Fame
published in Tech Thoughts
Deploying Device Restrictions Management using Blueprints in Jamf ProBlog

This article and many others can be found on Rich Trouton’s blog Der Flounder As part of Apple’s unveiling of Declarative Device Management (DDM) at WWDC 2023, Apple announced that DDM management included the ability to deploy MDM configuration profiles using DDM as the delivery mechanism in place of using MDM to deliver the profiles. Jamf Pro’s Blueprints leverages this capability to support device restrictions.Let’s see how this works using a device restriction configuration, using the example of setting the following Apple Intelligence management functions to false in order to block the corresponding Apple Intelligence functions on macOS:   Restriction Setting available in version Description Key Key value Default setting in macOS Allow Image Playground macOS 15.0.0 If key value is set to FALSE, prohibits the use of image generation. allowImagePlayground Boolean TRUE Allow Writing Tools

1621
brandonharshe
spesh
speshJamf Heroes
published in Tech Thoughts
The Edge Methodology: Leading with Curiosity and CourageBlog

In the MacAdmin world, few names command the kind of respect Charles Edge does. Not just for his technical expertise, but for his relentless curiosity and generosity. After his unexpected passing in 2024, I found myself reflecting on a behavior I learned through Charles's actions. A mindset I've come to call the Edge Methodology. It's not a framework or a management technique in the traditional sense. It's a response to fear. A refusal to fake confidence in things not yet understood. And it's inspired by the way Charles lived: by digging in, learning with humility, and lifting up others in the process.  The Problem: Fear of Not Knowing At some point in our careers, many of us have worked in environments where saying "I don't know" felt like admitting defeat. Where curiosity was mistaken for incompetence, and asking questions risked being seen as unqualified.   I've definitely been there.    In those spaces, people would often bluff their way through techni

332
Bruce-O
honestpuck
honestpuckContributor
published in Tech Thoughts
Tips for a Great In-Person JNUCBlog

I don't know about you, but my in-person conference skills need a brush-up. For me, it's been a little over three years since my last in-person. So here are some tips I've put together with some help from a few friends. If you are turning up on Monday before dinner, check the JNUC Slack Channel for any pre-conference get-togethers Monday night. The same is true every night. You can sleep when you get back home. This may be the only chance you get to talk to these people for some time. Go to the Keynote. It's the start of the conference, and at JNUC it starts well. I know it might be hard getting out of bed after the long flight the day before but do it. In fact, get into the conference venue for breakfast and a gossip every day before the first presentation. Talk to people. Don't be afraid to talk to anyone. The "hallway" track can be a great part of the in-person experience. Ask questions. Seriously, the presenters want questions and hope all the attendees go away with

344
mvu
Jordy-Thery
Jordy-TheryValued Contributor
published in Tech Thoughts
Community is Valuable: A List of My Favorite Community ResourcesBlog

It must be 8 or 9 years ago that I started supporting customers with ZuluDesk (now Jamf School). This was my first step into the device management world. Before that, I was a repair technician.  As my curiosity grew, I was lucky enough that my employer allowed me to do the Jamf 100 and 200 courses. Managing iOS devices is all good and well, but with Mac you need a little more tools. Things like setting a wallpaper sound easy, but they actually require a bit more work than I expected.   Welcome to the world of Mac Admins! I discovered that for everything I wanted to figure out how to do, there is usually someone with the same question, and maybe they’ve already found a solution for it. Coming in as a completely new Mac Admin, it might be a bit difficult to find your way. But knowing the right people, tools or places to ask for help are really valuable and make all the difference.   So I thought, why not try and create some sort of list with starting points for f

7313
Jordy-Thery
Jordy-Thery
Jordy-TheryValued Contributor
published in Tech Thoughts
My Favorite Apple Admin Community Conferences in 2025Blog

Not too long ago, I wrote a Tech Thoughts article covering some of my favorite community resources. I wrapped up that post by mentioning a couple of conferences that might be worth your time. Well, it’s time to revisit those — because conference season is upon us! This list is heavily inspired by Jamf’s very own Armin Briegel whom has a fantastic page listing conferences and resources at scriptingosx.com/conferences — and he keeps it well updated!    A Quick Look Back  My personal favorite from last year was JNUC 2024 in Nashville. It was my second time attending, and I already knew a few folks, which made the experience even better. The networking opportunities are truly the highlight. Talking to like-minded professionals and getting insights into how different companies approach challenges — sometimes in very different ways — is incredibly valuable. Also, a special shout-out to the amazing @MusicCityMac Alan West, who was so welcoming and

1036
Jordy-Thery
talkingmoose
talkingmooseCommunity Manager
published in Tech Thoughts
Make Your Presentation MoveBlog

Death by PowerPoint started in the living room Willis H. O’Brien was a famous Hollywood special effects artist known for his pioneering work in stop-motion cinematography. While we may look at his special effects in the movie King Kong from 1933 as outdated compared to the special effects we see in contemporary movies, his work is still relevant. He gave his audience the illusion that a giant gorilla not only moved but climbed the Empire State Building, then the tallest building in the world. And he did it one frame at a time. Unlike stop-motion, though, special effects are nowhere near as tedious with today’s tools. Whereas O’Brien spent 150 hours to create one minute of animation on film, today, we have tools like Magic Move that generate animated transitions between slides in just a few seconds. Transitions and animations important for presentations. Why? A transition is a change from one slide to another. It signals a change in thought to the audience. But a good transition should

314
Jordy-Thery
boberito
boberitoJamf Heroes
published in Tech Thoughts
From Smart to Smarter: Elevating Apple IQ Even MoreBlog

If you haven’t read part 1, then click here and go back and read it. The next portion of Apple Intelligence is now shipping with macOS 15.2 and iOS/iPadOS 18.2. We now have Image Wand, Image Playground, Genmojis, ChatGPT integration, and a little more. To soothe all concerns quickly, Apple Intelligence is NOT powered by ChatGPT. It will never send data off to ChatGPT without first asking permission and that integration must also be enabled. Ok, now that that’s out of the way.Apple Intelligence now features image playground, Genmoji and moreWhat’s great is that all of these features have a way to be blocked. Apple has provided the following configuration profile keys for the preference domain com.apple.applicationaccessallowImagePlayground allowImageWand allowGenmojiAnd new as of Dot 2 releaseallowExternalIntelligenceIntegrations allowExternalIntelligenceIntegrationsSignInThe two new keys, as of the Dot 2 releases, must be deployed on the Dot 2 releases and higher versions. They may not

330
boberito
Ninyo
NinyoContributor
published in Tech Thoughts
A Modern Administrator’s Guide to macOS 15+ Update ManagementBlog

This guide represents the synergy of the latest technologies from Apple and Jamf. It harnesses the power of the new Declarative Device Management (DDM) framework built into macOS 15 (Sequoia). This modern approach is unlocked by Jamf Pro version 11.8.0 or later, which introduces Software Update Blueprints. Critically, this entire workflow is powered by the Jamf Account SSO, which connects your instance to the cloud micro-services required for Blueprints to function, creating a truly modern administrative experience.The guide outlines the modern, three-part strategy for managing macOS 15 and newer in Jamf Pro. It leverages DDM via Blueprints for a reliable, automated workflow and is based on enterprise best practices for both aggressive and controlled rollouts.PrerequisitesBefore you begin, ensure your environment meets these minimum requirements:Jamf Pro: Version 11.18.0 or later. Target Computers: macOS 15 (Sequoia) or later. Device Supervision: Devices must be Supervised. Administrat

213014
D
rastogisagar123
rastogisagar123Jamf Heroes
published in Tech Thoughts
Common macOS Problems (aka for Apple Silicon)Blog

 Outlook Search is Broken  Problem:  When you search in Outlook, you get "No Results," even when you know the  email is there.  Solution:  Force the Mac to rebuild its search index for Outlook. Quit  Outlook .  Go to  System Settings  and navigate to  Siri & Spotlight .  Click the  Spotlight Privacy  button.  In a new  Finder  window, click Go → Go to Folder, from the menu bar. Paste this path  and press Enter: ~/Library/Group Containers/UBF8T346G9.Office/Outlook/Outlook 15  Profiles Drag the  "Outlook 15 Profiles"  folder into the Spotlight  Privacy list.  Wait about a minute, then click on the folder you just added and click the  minus  button to remove it.  Mac will start re-indexing in the background. It might take a few hours, but search  will work again when it's done. Mac is Slow After Update  Problem:  Mac feels sluggish and shows the spinning beachball a lot after updating to  Sequoia  Solution:  This is often temporary. Here are the main  things to check. Wait it Out:  Af

3344
tommypatzius
Tonyyoung
TonyyoungContributor
published in Tech Thoughts
Managing Family Apple Devices with Jamf Now
Managing Family Apple Devices with Jamf NowBlog

If you’re the “tech support” for your household (and maybe your extended family), you know that keeping iPads, Macs, and iPhones updated, secure, and kid-appropriate can be a full-time job. Over the years, I’ve juggled everything from my children’s iPads to my wife’s iPad, my own Mac Studio and Mac mini, and evennmore devices as the family grows. As a parent of three kids under 10, I find myself constantly navigating what it means to raise emotionally healthy, curious, and safe children in a tech-saturated world. Each of our children has their own iPad. Two of them also bring school-issued iPads home. We share a Nintendo Switch in the living room for family gaming time, but for the most part, our home is firmly rooted in the Apple ecosystem. I settled on a solution that bridges the gap between “family IT” and enterprise-level management: Jamf Now. Why Jamf Now?Jamf Now is a cloud-based Apple device management platform built for small businesses, but it’s also ideal for power users, tin

3926
AJPinto
A
arminBriegelContributor
published in Tech Thoughts
Managing the default browser in macOSBlog

Many organizations recommend or prescribe a specific web browser for their users. The user can change the setting in the user interface, even though it is not really obvious where to look. Many MacAdmins would like to pre-set this browser and the default during enrollment. However, there are several challenges associated with this in macOS. It would be really nice if Apple provided some means to manage this with a configuration profile. If you agree, please file feedback with your AppleSeed for IT account. While we wait for that, what can we do?   Use the browsers Most third party browsers have a built-in command option to set themselves as the default browser. Most Chromium based browsers (Google Chrome, MS Edge, etc.) can be launched with the --make-default-browser option: open -a "Google Chrome" --new --args --make-default-browser open -a "Microsoft Edge" --new --args --make-default-browser For Firefox, the options are different: open -a "Firefox" --new --args -silent -nosplas

7125
rastogisagar123
BookMac
BookMacJamf Heroes
published in Tech Thoughts
Preparation for the Jamf 400 CourseBlog

The Jamf 400 course is the highest certification level in the Jamf training program and is designed for administrators who want to deepen their knowledge in scripting and automation. This course not only requires a thorough understanding of Jamf Pro and macOS but also the ability to independently analyze and solve complex problems.    What to Expect in the Jamf 400 Course?  The Jamf 400 course covers advanced topics and practical challenges. Key focuses of the course include Automation and Scripting:   Developing and implementing advanced Bash scripts and API calls to automate administrative tasks.  Prerequisites and Target Audience  To successfully complete the Jamf 400 course, intermediate to advanced scripting skills as well as familiarity with the Jamf API are required. The course focuses on deepening these topics and applying them in complex scenarios.  The course is designed for Experienced Jamf administrators who are already familiar wit

19410
rastogisagar123
F
frantonEsteemed Contributor
published in Tech Thoughts
Zen and the Art of Jamf SSOBlog

I’ve been silly busy learning lots of non Apple related stuff. However there does seem to be a need for a how to guide of sorts on how to implement Jamf’s new SSO requirements.  Back in the day, you set up a SAML integration from your IdP to Jamf Pro. Access group of users on one side, Jamf user accounts on the other and you called it done.  Jamf is changing how all this works. Instead of an integration per app, they are replacing everything with one OIDC connection from your IdP to their Jamf Account page. Every single SaaS app you then get from Jamf will then already be enabled for SSO, you just have to put the accounts in place. Essentially authentication becomes a once and done and the gating is done on the application side.  Any other speculation as to intent from Jamf here I think is complete hogwash.  This article has a Okta focus, because that’s the IdP I use. Your mileage will vary with other providers.  Before I get into the technicals I do need to po

2452
rastogisagar123
ben_whitis
ben_whitisEmployee
published in Tech Thoughts
Upcoming Change Device Compliance Integration for MacOS (SSO extension required)Blog

Microsoft has announced plans to move storage of the Workplace Join Key out of the user’s Login Keychain and into Apple’s Secure Enclave:    Microsoft Enterprise SSO plug-in for Apple devices - Microsoft identity platform    Announced in March 2024, Microsoft Entra ID will be moving away from Apple’s Keychain for storing device identity keys. Starting in Q3 2025, all new device registrations will use Apple’s Secure Enclave. There will be no opt-out of this storage location.  Applications and MDM integrations that have a dependency on accessing Workplace Join keys via Keychain will need to start using MSAL and the Enterprise SSO plug-in to ensure compatibility with the Microsoft identity platform.    In the same document, Microsoft provides guidance on how to test the Secure Enclave today to ensure the change will be compatible with your environment when the change goes live:   If you would like to enable Secure Enclave based storage of

10987
rastogisagar123
dan-snelson
dan-snelsonHonored Contributor
published in Tech Thoughts
Computer Compliance (1.9.0) Part 1
Computer Compliance (1.9.0) Part 1Blog

This is a blog article originally posted on ​@dan-snelson ‘s personal blog, https://snelson.us/This article is split into two separate posts, so for the full article, please proceed to Part 2 Provide your users a "heads-up display" of critical computer compliance information via swiftDialogProvide your users a "heads-up display" of critical computer compliance information via swiftDialogBackgroundMore than six years ago,William SmithpublishedBuild a Computer Information script for your Help Desk; we implemented a customized version in the fall of that same year.Last week, during a conversation with one of our rock-star TSRs — whom I'll refer to as "John" — we decided it was time forswiftDialog-ized reboot.FeaturesThe following compliance checks and information reporting are included in version1.9.0, which operates in "test" mode by default. (ChangeoperationModetoproductionwhen ready to deploy in production.)Compliance ChecksmacOS Version Available Updates (including deferred updates) S

3434
rastogisagar123
dan-snelson
dan-snelsonHonored Contributor
published in Tech Thoughts
Computer Compliance (1.9.0) Part 2
Computer Compliance (1.9.0) Part 2Blog

This is part two of Dan’s blog, and it belongs with this ‘Part 1’ article.  # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # ## Check Available Software Updates# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #function checkAvailableSoftwareUpdates() {    notice "Check Available Software Updates …"    dialogUpdate "icon: SF=arrow.trianglehead.2.clockwise,${organizationColorScheme}"    dialogUpdate "listitem: index: ${1}, status: wait, statustext: Checking …"    dialogUpdate "progress: increment"    dialogUpdate "progresstext: Determining Available Software Updates status …"    sleep "${anticipationDuration}"    mdmClientAvailableOSUpdates=$( /usr/libexec/mdmclient AvailableOSUpdates | head -n 5 )    if [[ "${mdmClientAvailableOSUpdates}" == *"OS Update Item"* ]]; then        notice "MDM Client Available OS Updates"        info "${mdmClientAvailableOSUpdates}"    fi    recommendedUpdates=$(

1213
rastogisagar123
mattjerome
mattjeromeJamf Heroes
published in Tech Thoughts
From Huh to H.E.R.OBlog

At some point in your career as an Apple Admin, you’ve (most likely) inherited a Jamf instance and said either to yourself or out loud, “Huh, I wonder why they did that. I certainly wouldn’t do it that way” or “That’s not the best practice I was taught”.   Caveat: There’s no such thing as best practice. The better concept is defining the best practice for your environment.   This is where you get to step in and be the hero. It’s your job to take the environment, back it up first. Make sure you backup your instance and sync it to your free Jamf sandbox (If you don’t have one, talk to your rep). Once you’ve backed up and sync’d to the sandbox, I hope you’re noticing the theme here…you can get started with the H.E.R.O. process.   Something not mentioned is the process of writing documentation. DOCUMENT, DOCUMENT, DOCUMENT. Write down everything from the current state, proposed changes, changes you made (with dates), how configs work, workflow processes, and everything else. The 1st thing

2618
rastogisagar123
boberito
boberitoJamf Heroes
published in Tech Thoughts
Raising Your IQ on Apple IntelligenceBlog

Apple Intelligence is finally here now that iOS 18.1 and macOS 15.1 has shipped. However, many people and organizations want to know how they can block it.Apple Intelligence is an Opt-In service from Apple, so unless you Opt-In, there’s no concerns about AI, on or off device.Officially, Apple has provided the following configuration profile keys for the X.1 OSes for the preference domain com.apple.applicationaccess.allowWritingTools allowMailSummary allowGenmoji allowImagePlayground allowImageWandAnd DDM management of Math Notes.There’s also the key allowAssistant to disable Siri, which has become more intelligent with Apple Intelligence.Currently in the X.1 OSes, these are the features which are available and able to be restricted: Siri, Writing Tools and Mail Summary, even though there are controls for the other features not yet implemented.This will allow you to fully block those features. But is that it? …the answer is …No. So even if you implement all the Apple supplied restrictio

1285
rastogisagar123
peterhasselbach
peterhasselbachNew Contributor
published in Tech Thoughts
My impressions of Jamf Nation Live in Munich
My impressions of Jamf Nation Live in MunichBlog

On June 24th, I attended Jamf Nation Live in Munich – and I'm still buzzing with excitement.Jamf has once again demonstrated why it is considered the leading provider in the Apple enterprise environment. I found the new developments around Jamf Pro particularly exciting, including improved integrations with Microsoft Entra ID, automated compliance checks, and even closer integration with Apple Business Manager. For businesses, this means less manual work, greater security, and easier scalability. Above all, the new self-service features give IT teams more control while giving end users more flexibility—a real productivity boost.  In addition to the technical innovations, the exchange with the Apple Admin Community was the real highlight for me. I saw many familiar faces and made new contacts. What always impresses me is the exceptionally open and helpful atmosphere in the Apple world. People share scripts, best practices, and solutions without any sense of competition—that's really uni

331
BookMac
jordy_witteman
jordy_wittemanContributor
published in Tech Thoughts
WWDC25 Recap, In-Person Experience and Key Announcements for IT Admins
WWDC25 Recap, In-Person Experience and Key Announcements for IT AdminsBlog

Monday June 9 it was that time of the year, Apple’s World Wide Developers Conference kicked off with the usual Keynote where they introduce the new versions of macOS, iOS, iPadOS, visionOS, tvOS and watchOS. I was lucky enough to have obtained a ‘golden ticket’ through the lottery system and actually attend this event at Apple Park in Cupertino! As an Apple consultant and macOS developer at long-time Jamf-partner Root3, it was both very exciting and relevant for me to attend. I’d like to share my in-person experience while also highlighting key announcements, especially for Apple IT admins and how this may affect us this fall.  In-person experienceThe WWDC event for attendees is actually a multi-day event with most activities taking place from Sunday to Tuesday. It starts with a welcome reception at the historic Apple Campus at 1 Infinite Loop where you check-in, get your badge, happy Apple employees high-fiving and lots of photo opportunities. It’s a great start of the week to mingle

791
JoannaB
rastogisagar123
rastogisagar123Jamf Heroes
published in Tech Thoughts
Mastering macOS Troubleshooting with Jamf Pro: A Command-Line ApproachBlog

Managing macOS devices in a large-scale enterprise environment always need IT expertise. Even with a powerful MDM like Jamf Pro, IT admins often need to dive into the command line to truly get to the root of issues.    In this blog, we will walk through real-world command-line troubleshooting techniques for both macOS system issues and Jamf Pro management. Whether you're dealing with failing profiles, app crashes, or failed policies, this post has your back with real commands that work.  Getting Started: System Info at Your Fingertips    Before troubleshooting, gather critical system details:  Get system version:  sw_vers      List all installed system updates  softwareupdate –history      Hardware overview  system_profiler SPHardwareDataType        Check uptime  uptime      Check disk usage  df -h    Network Troubleshooting    Network issues

2240
Jordy-Thery

Want to write for Tech Thoughts?

Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!

Submit A Blog Post
Terms & ConditionsCookie settings