Skip to main content

General Discussions

What your peers are saying about all things Apple

  • 10,000 Topics
  • 245,259 Replies
10000 Topics
C
ChrisTechContributor
asked in General Discussions
Jamf Unbind/Rebind With Config Profile

We are seeing issues with machines that have broken AD binds, is there a way to automatically remove the profile and reinstall it, or can I just add those machines from a SmartGroup into the scope?

327
Chubs
m.awaissig
m.awaissigNew Contributor
asked in General Discussions
Data migration between managed macs and iphones

Hi,Could any one guide on how we can migrate data between two managed macOS devices and same for iOS devices?

416
Chubs
J
jrikerNew Contributor
asked in General Discussions
If update method set to manual for iOS app how to bulk updates?

As the subject says, if I have auto update for a VPP app for iOS is set to disabled, new version comes out, app updated on one device, users verify the new version is good to go, how do I send the update to a thousand devices at once?  In our WS1 environment it’s simple, I just select the radio button next to the app and click Update.

151
Chubs
easyedc
easyedcEsteemed Contributor
asked in General Discussions
Platform SSO with Account Creation

I’ve tried testing a few times with Tahoe Beta and now Release and can’t get a Platform SSO to trigger an account creation. I’m tried just scoping profiles to target workstations, adding the profile as well as adding the profile to my Pre-stage.  What am I missing? PSSO works great once an account is created, however I can’t get the Tahoe specific options to occur. 

875
Person
Stuart_P
Stuart_PContributor
asked in General Discussions
Intermittent login issues on macOS 15.1.1

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

24750
G
avargas
avargasNew Contributor
asked in General Discussions
Blocking "Games" app on iPadOS 26

Has anyone had any luck in blocking the Games app? The only thing that appears under “Restrictions>Apps” is Game Center and that does not block the new app. 

415
woaikonglong
K
kdpkNew Contributor
asked in General Discussions
Ventura whitelist app

Hello , Is there any way to block all apps except the chosen ones? I saw on Apple developer that whitelisted app were deprecated whitelistedAppBundleIDs[string],but solution with allowListedAppBundleIDs didn't work for me. In my case I need to push policy to block everything except preinstalled apps and 5 chosen by IT. 

405
mm2270
M
msergiContributor
asked in General Discussions
Office MAU MSupdate command failing with XPC error

Howdy all, I am facing an issue that I can’t seem to solve with running Microsoft AutoUpdate via script from Jamf to keep our mac office apps updated. I have had this set up for several years and it had been working beautifully as a hands off solution. I am not sure exactly when it started failing, I recently noticed the problem and started digging into it. I am wondering if anyone is facing the same problem, or has advice on what to try.The setup is fairly simple, a policy that runs against a smart group of any macs with office apps that are not the latest version once a day. It runs a script to use the MAU command line msupdate to pull and install any available updates.Script is below, it only worked under user context originally so that is why it is set that way.The error I am seeing on every run now is related to the XPC connection, this happens on all clients no matter what, -reinstalled MAU with latest version, brand new mac build with latest install etc.  I have the original PPP

564
M
dletkeman
dletkemanJamf Heroes
asked in General Discussions
Failed to retrieve configuration on iPadOS v15.8.4

Heads up to my fellow Jamf community. We've been seeing iPadOS 15.8.4 iPads when reprovisioned can't be enrolled to Jamf School.  This may affect Jamf Pro too.  The exact error is "Failed to retrieve configuration".  I reached out to Jamf support and they said they have been getting reports of this from others and that this has been observed across different MDM providers.  Jamf reached out to Apple regarding this issue and this is exactly what they told me: Apple did get back to us just a bit ago, and they have identified the issue (they did not elaborate on what the issue was). The release is not ready yet though and at this time they couldn't give me an ETA on when that would release. For now I created an internal Jamf Product Issue so we can track customers and I have attached this case to that ticket (PI136109). Hopefully an update that fixes this issue will come out soon.  Jamf did say that they could reproduce my issue but had mixed results as one te

259020
John
Pravin_23
Pravin_23New Contributor
asked in General Discussions
Microsoft Active Directory Strong Certificate Mapping Requirements breaks wifi certificate

Hello guys, i am affected by the MS latest security patch Microsoft Active Directory Strong Certificate Mapping Requirements. My devices cant connect to wifi via certificates after the latest patch. My devices are not in domain, also users are local , so when i tried the objectsid Extension attribute it didnt work even though i have cloud idp as azure connected and i guess its because  users are local. Do anyone have any idea how to tackle this :) Can we use UPN or some other attribute for macbbos that uses local user account and not in domain?

482
Pravin_23
easyedc
easyedcEsteemed Contributor
asked in General Discussions
Is it just me, or are the jamf binaries slow on Tahoe

Now that Tahoe is out of beta, gremlins that I'd noticed earlier now feel more pronounced.  During Build testing I find myself frequently running through sudo Jamf recon ; sudo Jamf policyBut since moving to the release of Tahoe they’re just painfully slow to report data. It doesn't matter if it’s an upgrade from Sequoia to Tahoe or fresh install via IPSW.  Wired or wireless. ...S.L.O.W…  Is it just me?

382
Shyamsundar
TonyInHiro
TonyInHiroNew Contributor
asked in General Discussions
iPadOS 26 - Jamf Pro lists default apps as "Other" (ie. not in the Mobile Device App Catalog)

I (like others) use a smart group for students which lists devices that have “Apps Not In the App Catalog Are Installed”, in case some talented student is somehow able to download or sideload apps we don’t allow. I then use a configuration profile to hide all apps except those they downloaded/sideloaded, making their device near useless until they remove the offending app.Unfortunately with the iPadOS 26 update, Jamf Pro reports all the iPad default apps (camera, contacts, calendar, etc.) in the installed apps report. As these are default and can not be purchased through the app store, there is no way to add them to the app cataloge. So now every device that updates to iPadOS 26 will be considered to have unnauthorized apps on them. Not sure if this is a bug that Jamf will be able to fix, or if there is another work around to this.

842
J
grapy
grapyVisitor
asked in General Discussions
Defer macOS 26 for 90 days

Our school district would like to defer the upcoming macOS 26 upgrade (scheduled for release on September 15) but still allow security updates for macOS Sequoia.What is the best way to configure this in Jamf Pro so that the major OS upgrade is blocked, while security updates and minor patches for Sequoia remain available? Thanks  

94117
mvu
M
mathewsl05New Contributor
asked in General Discussions
macOS Tahoe new welcome slides

Has anyone had luck hiding the 4 slides that appear after an upgrade to Tahoe? 

582
M
chris.bates
chris.batesNew Contributor
asked in General Discussions
Unable to use Single App Mode

Hey all,  Wondering if anyone has any ideas on this? I am wanting to utilise SAM to lock down our iPads to a specific app. Trying to scope this through a department group but the device isn’t showing in the logs for the configuration profile. There are devices in there, just not the two that I specifically need. Both devices that aren’t showing in the logs are supervised and managed institutionally so unsure on what the issue is here… I have also checked to see if I can manually add the two devices but they are not showing when I try to search for them? Getting increasingly confused as the devices that are showing scoped currently, and are in the profiles logs, are NOT supervised...

276
Chubs
Giannini
GianniniContributor
asked in General Discussions
Automator Workflow

Morning,Despite my best efforts i haven’t found a solution online so my question is, can i deploy an automator workflow i’ve created via Jamf Pro as some sort of policy of which i can then distribute to selected machines?Thanks

614
Giannini
Pgonline
PgonlineVisitor
asked in General Discussions
MACOS Tahoe 26 lock desktop pictures not work

I have a Configuration profile to set the wallpaper to the corporate wallpaper, but that give error on MAC OS 26 Tahoe.Any one with the same problem?

280
Pgonline
I
infrase2020Contributor
asked in General Discussions
EntraID groups for software targeting

Hi All,  We have setup Jamf Pro SSO and Cloud idP for to EntraID. We then tried to use the EntraID groups for the targeting of applications/configuration profiles but they wouldn’t scope correctly.  I logged a ticket with jamf support and their theory was that because we map UserPrincipalName (i.e. Full email address), this doesn’t match the username on the local account because it doesn’t support the @ symbol. Their suggestion is to drop anything after the @ symbol on the mapping but it’s not that simple as we use the full UPN for other configurations in Jamf.So i guess my question is does anyone else have iDP setup with Jamf and do you sync the full UPN and able to target users via EntraID groups?  TIA.

635
Chubs
_
__AMMContributor
asked in General Discussions
Self Service+ replacing Jamf Connect? Confused after upgrade

We use Jamf Pro Cloud with Jamf Connect (for account creation + Entra ID password sync).After enabling “Use Self Service+ as the default end user app” in settings:Old Self Service was upgraded to Self Service+ on existing Macs Jamf Connect was removed, menu bar now has Self Service+ icon instead On new enrollments, we install Jamf Connect 2.45.1 → now it’s there alongside Self Service+I can’t find clear docs on this — so:Questions:Is Self Service+ intended to replace Jamf Connect completely? If yes, should we skip installing Jamf Connect post‑enrollment? Or should we move to Jamf Connect 3.x? Any official migration guide for 2.x → 3.x with Self Service+?Any experience or official Jamf resources appreciated.

1136
Chubs
G
gwhaley262Contributor
asked in General Discussions
Deploy Jamf Setup Manager via Prestage Enrollment

I’m trying to implement Jamf Setup Manager. I have everything aligned regarding the configuration profile and the Jamf Setup Manager PKG assigned as an enrollment package. But the PKG won’t install. I’m not seeing any logging or the app in the Utilities folder after enrollment. Any suggestions would be appreciated.

10810
J
K
KezioxNew Contributor
asked in General Discussions
Preventing Automatic Updates for Xcode Deployed via the App Store

Hello everyone, you can probably help me with a request.I created a configuration profile for software updates in Jamf Pro, and I enabled "Automatically install app updates from the App Store" because I always want to have the latest updates for apps installed from the App Store.However, there is one app that I don’t want to update automatically, and that’s Xcode. This app must not auto-update, because newer versions of Xcode don't always work for our developers.I deploy Xcode via the Mac Apps - App Store section. In the settings, I disable "Automatically force app updates", but it still seems to update on its own.Do you have any idea what I could do?Jamf support told me that since it’s an app installed from the App Store, it’s not possible to block automatic updates for that app only.Any ideas?Thanks all

533
shrisivakumaran
AmanCognita
AmanCognitaNew Contributor
asked in General Discussions
Shortcut for Mac accessibilty keyboard

Hi All, so i’ve had an issue for a few months, I’ve been trying to find the bash command line to turn on accessibility keyboard, so looking around in ventura this was easy to do and now the location has now changed, main thing is i don’t where. As i work in a school some teachers want on screen keyboard when they connect to the white boards, so i wanted to add an option in self service to deploy a shortcut to the keyboard

132
AmanCognita
C
cricri_macNew Contributor
asked in General Discussions
Configure your MacBook’s automatic startup behavior.

Startup Power is a macOS application built with SwiftUI that allows you to configure your MacBook’s automatic startup behavior.It directly modifies NVRAM variables (BootPreference for Apple Silicon, AutoBoot for Intel) to control these options.The app automatically adapts its behavior depending on your Mac type.If this can help the community, the application and the source code are available here:https://github.com/chrisbasse/Startup-Power 

180
C
BGhilardi
BGhilardiJamf Heroes
asked in General Discussions
Filevault activate by TAHOE

Hello,I have multi-user workstations on which I do not have FileVault activated so as not to have a problem when connecting a new user with Jamf Connect. Unfortunately, the TAHOE update automatically activates FileVault and suddenly at the start of the station an account is requested that can activate FileVault before having the Jamf Connect window. How can we get around the problem or how can TAHOE not activate FileVault?

25313
alemai
Tbaker63
Tbaker63New Contributor
posted in General Discussions
Enable Activation Lock via Group Action Turning off Activation Lock

Hey Guys,I already talked to Jamf and got this issue escalated for me. You may want to check if this problem applies to you.I was trying to enable activation lock through a static and smart group via selecting the group>View>Action>send remote command>enable activation LockAfter talking to Jamf they are aware that it is not accurately reporting if the device has AL turned on in the inventory screen so I was checking with ASM. There I discovered AL was off. I tried it again the same way and the issue persisted. If I went to the device>Management>Activation Lock>Enable activation Lock it seems to send out the same command but does enable activation lock. To test it I did the same this again with the group command and the device turned it off and could not turn it back on with the same command. I had to go back to the specific device and turn it on again. My problem was with a small number of iPads so this wasn’t a huge issue for me, but if you manage lots of Macs and

130
Tbaker63

Want to write for Tech Thoughts?

Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!

Submit A Blog Post
Terms & ConditionsCookie settings