Our company is looking to use the Monotype's Mosaic to deploy and manage fonts that we purchase going forward. I'm wondering if it's possible to disable all other means for our users to install fonts on their Mac so that they are only able to use Mosaic to get their fonts. Would disabling font book be enough or what would the best practice be here? Thanks!

Okay we’ve never had this issue in the past.  The prestage enrollment naming requirements ALWAYS take precedence...but for whatever reason, this is not the case.  Workflow to replicate:Move device (currently named PS1-Serial) from one prestage to another  Perform “wipe” command from Jamf Enroll device under new prestage with new name PS2-SerialUnfortunately on step 3, the device ends up with a PS1-Serial name for whatever reason.  Did I miss a PI (product issue) behind this?  Is this known behavior? Or am I just losing it from the week of crazy JAMF PIs that I’ve found?!

Looking for some guidance with Jamf Pro - PreStage Enrollment and FileVault.The issue: In PreStage, we pre-create and hide a local admin account. During setup, the workflow prompts for end-user account creation. FileVault is enabled immediately after the user account is created and the user logs in for the first time. As a result, only the end user is added to FileVault , the local admin account is left out of the FileVault enabled users list. I haven’t found a way to ensure the local admin is automatically included in FV2 during enrollment.Should this be configured differently in PreStage, or would scripting the local admin addition after FileVault is enabled be the right approach?

I know JNUC 2025 in Denver isn’t even out of the gates yet but I enjoy speculating about future things.  Many people seemed to think it was Denver before it was officially announced.  It seems JAMF likes state capitols so far.  My wife is even interested too since she normally pops along with me.  The top 5 most populated state capitols are:Phoenix, AZ Austin, TX (JNUC 2023) Columbus, OH Indianapolis, IN Denver, CO (JNUC 2025)I have no knowledge of where, I just enjoy speculating.  My wife hopes it will be Boston.  I’d hope for Salt Lake City personally.  My bet is on Indianapolis though.  Just a guess though.Any guesses, insights or desires for a future JNUC (next year or beyond)?

Pro Tip:If you have a need to take action on a a number of devices, no need to put them into a group.Use the blank search and enter serial numbers separated by a comma “ , “ and “ “ space example:serial1, serial2, serial3, serial4, serial5You’re welcome.

Since this came up during our meetup:The name "Jamf" is a reference to Laszlo Jamf, a character in the novel Gravity's Rainbow by Thomas Pynchon. It’s not an acronym. It’s not rude. It’s not what happens when you type “f” really hard.Knowing is half the battle. . .

Need help with Jamf Pro API automation. We're trying to bulk update computer inventory records using the Classic API, but getting conflict errors when posting device information updates.Can authenticate and pull device lists fine, but PUT requests to update asset tags and department fields are failing. Need someone familiar with Jamf's API endpoints and bulk device management.Should be 2-3 hours remote work to fix the API calls and test bulk updates. Need working this week for our asset audit.

Hi all, so we’ve had multiple Macs (all M1 or newer) that have had Tahoe as an update and afterwards the keyboard is unresponsive - built in or external USB keyboard.  All you get is the ding noise and from reading, this can be an issue for some.   Also seems there is no way to block the installer, just defer is that correct?Well for now I’m trying to see if there is a solid workaround to fix the issue without a reinstall but so far came across nothing that worked for me :(  Anyone that knows about this issue, it would be great to get your input. 

Don’t forget to sign into your Apple Manager …• Sign into ASM and ABM for updated agreements• Banner: Settings->Global ->Automated device enrollment Accepting updated agreementsAfter Apple updates one of these agreements, any Apple Business Manager Administrator, Apple Business Essentials Administrator, or Apple School Manager Administrator must sign in to the program website to accept any new agreements. If you're an Administrator in Apple School Manager, sign in to https://school.apple.com. If you're an Administrator in Apple Business Manager or Apple Business Essentials, sign in to https://business.apple.com.  

Hi all,Anyone have any skills with deploying NinjaOne to Macs through Jamf?I’m having some troubles deploying Ninja to my environment in Jamf pro. I’m deploying the pkg using a policy. I pulled the pkg direct from my Ninja admin site using their method of acquiring the necessary file. I’m also deploying a config file to allow the necessary streamer application to run in the background and quiet install (see screenshot for config.) Every time I deploy through Jamf, the NC Streamer file does not go to the device, and the device does not enter my Ninja console. When I manually install the same pkg without Jamf, the NC Streamer installs fine and the device is added as a local machine. I’m trying to figure out where I’m going wrong with my install and why this is isn’t working through Jamf. It’s just a simple PKG in a policy and a small config file.Please let me know if anyone has suggestions for me or if I need to provide more info.I have contacted NInja support already. They claim it’s a

I had a few devices upgrade to iOS 26 and the homescreen layout is not working….has anyone ran into an issue with this? 

Does anyone have any suggestions on how we can disable the "add to homescreen" feature in Chrome? Many students are adding games to their homescreen. 

Hello, Has anyone found a way to generate a report to find out if Screen Time is turned on on an iPad. From what I can tell that information does not seem to be available in Jamf Pro. Thanks! --Josh 

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

Has anyone gone through the process of creating a Configuration Profile Applications & Custom Setting  payload to restrict the AI options in iTerm2 (the prefs domain is “com.googlecode.iterm2”)? And if so, can you post the profile in this thread?Since I hate to re-invent the wheel I figured I’d ask before starting to build a payload for this from scratch…

Hello everyone,We’ve encountered problems with personal hotspot in iOS/iPadOS 26.The option to activate it is dimmed on my colleges devices even though she has’t got any restriction profile. Before in OS 18 she used personal hotspot without password without any problem. Now she can (not the normal way) set a password for it but not activate the function/option. And she doesn’t seam to be alone with this problem. In my own case my devices don’t have the problem (have the same profiles as my college), if it matters I’ve always had a password set even when updating to 26.Anyone else encountered the same problem? Does it have to do with Jamf or the OS?       Bottom selection of search results. Password set at the option at bottom of search results. Top option of search results, the normal place.  

I (like others) use a smart group for students which lists devices that have “Apps Not In the App Catalog Are Installed”, in case some talented student is somehow able to download or sideload apps we don’t allow. I then use a configuration profile to hide all apps except those they downloaded/sideloaded, making their device near useless until they remove the offending app.Unfortunately with the iPadOS 26 update, Jamf Pro reports all the iPad default apps (camera, contacts, calendar, etc.) in the installed apps report. As these are default and can not be purchased through the app store, there is no way to add them to the app cataloge. So now every device that updates to iPadOS 26 will be considered to have unnauthorized apps on them. Not sure if this is a bug that Jamf will be able to fix, or if there is another work around to this.

Not sure when this would have occured, but i have verified on several devices. We are pushing out a printer using jamf and if you go into the “printers and scanners” section of system settings control panel, it says “no printers”. However if you go into an application, you can see the printer there. I can also see it when i run lpstat -p. Nothing has changed with this printer, we have been deploying it for years. So much be a new osx update that caused this.      any ideas? Its a bit of an oddity that i found while trying to diagnose a separate print quality problem for a user. Then i found that multiple macs in our environment do this. Perhaps someone has seen it before.  Also when did jamf forums search start sucking. I cant even sort by date of the post… yikes.

We have been using the following script as part of our deployments since Apple silicon became a thing (I did not write the script). It appears that the “--agree-to-license” no longer functions in Tahoe and appears to invoke “help” in policy logs. Manually running “softwareupdate –-install-rosetta --agree-to-license” also returns “help” contents. Has anyone else seen this? #!/bin/bash# Installs Rosetta as needed on Apple Silicon Macs.exitcode=0# Determine OS version# Save current IFS stateOLDIFS=$IFSIFS='.' read osvers_major osvers_minor osvers_dot_version <<< "$(/usr/bin/sw_vers -productVersion)"# restore IFS to previous stateIFS=$OLDIFS# Check to see if the Mac is reporting itself as running macOS 11if [[ ${osvers_major} -ge 11 ]]; then# Check to see if the Mac needs Rosetta installed by testing the processor processor=$(/usr/sbin/sysctl -n machdep.cpu.brand_string | grep -o "Intel")if [[ -n "$processor" ]]; thenecho "$processor processor installed. No need to install Rosett

Hi,I am looking for a way to restrict icloud login on managed macbooks to using managed apple ids only. Does anyone know a way of doing this?At the moment, even if we give a user a managed apple id, there is nothing we can do to stop them using a personal apple id on company macbooksthanks

Hello all, I know there have been a couple of topics around this already but I can't seem to find a solid solution for this. We are a university and have both user assigned and public apple computers and laptops. I would like todo one of the following:1. Prevent users from login into their personal apple ID's and lock the devices to only use our ITS apple ID (make sure they can not log out of it).2. Simply block the ability to sign into any apple ID.3. Force sign out users already signed into their personal apple ID's. I have tried to set this up using a configuration profile under Restrictions > Preferences but this does not work (once the profile is applied the section is still visible). I also don't like the restrictions method as this includes many other options I don't want to use (in Applications, Widgets, Media, ect).We are using Jamf PRO and Apple School Manager. Thanks!

Does anyone have a step-by-step for creating a basic content filter for Mobile Devices? Looking through the documentation online it keeps sending me to how to set it up on macOS but not iOS/iPadOS.  Basic Question:  Does the filter name matter? 

I am looking for a script to remove old Jamf remote policies from Jamf cloud. We have several hundred of them I discovered after running Kmart tool. I found this one but I cannot get it to work. https://www.elliotjordan.com/posts/remove-remote-policies/ Thanks 

Our school district would like to defer the upcoming macOS 26 upgrade (scheduled for release on September 15) but still allow security updates for macOS Sequoia.What is the best way to configure this in Jamf Pro so that the major OS upgrade is blocked, while security updates and minor patches for Sequoia remain available? Thanks  

Just curious if anyone knows a way to disable ALL banner notifications. Just wipe them all out. I manage a few iMac labs and students really don’t need these things popping up for every single application they open. I can disable some specific ones with configuration profiles but it’s really hit or miss. Mostly miss. Thanks!