We purchased some M5 MacBook Airs with Tahoe with 26.2 installed and when we deploy them to a new staff person, they are required run a macOS update despite the fact we have the minimum required macOS version in the prestage set to “no enforcement”.  I don’t think this was happening in previous macOS’es.This just prolongs the onboarding process.

I need to lock down some iPads to only display a single web page. These devices are supervised, and will be handed out to study participants in a lab. They’ll then interact with that single web page during the course of their participation in the study. We don’t want the participants to be able to launch any other app, configure any iOS settings, or visit any other website.This article, “Configuring Single App Mode for Web Clips in Jamf Pro,” which was just published four months ago, seems to be exactly the sort of thing I’m looking for. However, when I attempt to implement it on my test device, all I get is a blank white screen with the iOS status bar on top of it.I have tried using both com.apple.webapp and com.apple.webapp.managed as Bundle ID values in my Single App Mode pa

Hi everyone,I've been working through a deployment of Platform SSO Simplified Setup on macOS 26 using Microsoft Company Portal 5.2604.1 (5.2604.0 or newer is required per documentation), and I've hit a wall with username/account name mapping that I wanted to share in case others are running into the same thing and could potentially provide some alternative options.---Our Setup- Jamf Pro 11.28.1- macOS 26- Microsoft Company Portal 5.2604.1 (deployed as a PreStage package)- Microsoft Entra ID- PSSO profile with Simplified Setup enabled (EnableCreateFirstUserDuringSetup + EnableCreateNewUserAtLogin both true)- Authentication method: Password- Associated Domains payload included in the same profile---The ProblemEverything works end-to-end — Simplified Setup fires during the Setup Assistant, the user signs in with their Entra credentials, and a local account gets created. However, the local account short

I was struggling with targeting a Web Clip in Single App mode for some iPads. I found several articles saying you couldn’t do it until I found a Jamf article saying that it was possible but, only by targeting the specifc bundle ID of the Web Clip.https://support.jamf.com/en/articles/13274571-configuring-single-app-mode-for-web-clips-in-jamf-proThis sounded great and I thought my search was over. However, this didn’t work. It made sense though, targeting the specific payload identifier should work. So, after much testing I discovered the following with regard to targeting a web clip in single app mode:1. There can only be a SINGLE web clip profile with a single web clip payload deployed to the iPad. I chose full screen but, it might not matter.2. The Single App profile MUST use the

If not, you really should check out https://github.com/Jamf-Concepts/Jamf-Extender (and take a look at the other repos under Jamf-Concepts while you're there). Versions for Safari, Firefox, and Chrome/Edge are available.I’m not going to list all of the capabilities of the current version, but a few that I’ve found to be _extremely_ useful are:The capabilities of MUT accessible directly from the Jamf Pro console Identify how may times a Smart Group is used as a Target or an Exclusion  Convert unused Smart Groups to Advanced Computer Searches A Compare Profiles command to view the scope summary and which payloads are shared or unique (the settings in each payload are not displayed in the comparison however)Other areas where the extension adds capabilities are Blueprints, Jamf Security Cloud, and Jamf Protect

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

Hi everyone! Looks like Microsoft may have finally released a compatible version of Company Portal for simplified platform SSO to work with JamfPro and Intune :).   I’m sure I’m not the only one who’s been keeping an eye out for Microsoft to release a compatible version of Company Portal for Platform SSO during registration, so wanted to share the info with everyone. I noticed late yesterday that Microsoft updated their “What’s new in Intune” page with this little tidbit:What's new in Microsoft Intune - Microsoft Intune | Microsoft Learn They released this blog post in the last couple hours:

In Jamf Pro, We have policies to install the 2024 Microsoft Office suite LTSC during our Provision policy which is a script that calls each policy to install individual pieces of software we want to install on a Mac.Here is the order for the Microsoft install we have 2 policies:1. Install 2024 Microsoft Office 16.106.26020821.pkg(This is the older version from February. Testing. I tried the lastest version too)2. Install Microsoft_Office_LTSC_2024_VL_Serializer.pkg(I have also tried swapping the order)Ever since I can remember this has worked exactly as intended. The Office suite is installed then the volume serializer is installed to activate the license. At first launch it opens to the templates/recent documents page.However, over the last couple weeks of testing, the activation is no longer applying. I’ve tried everything I can to try and deactivate the license/reactivate it, but the only fix appears to be completely remo

Hi there,I try to use Jamf Setup Manager to made zero touch installation on my Macs.First question, i don’t have found how to launch JSM after enrollement wouthout let a welcome pane open. If the Mac return back to login screen nothing happens. Is it possible to automatically launch JSM without a pane opened?I also try to change Mac name and sync his identify on Jamf inventory, which are the command i could use in JSM to do this?Thanks for your help

I had a support ticket recently where a user reported that they couldn’t update any packages they had installed in the TeX Live Utility, and I wanted to post here in case anyone was searching around for a solution. The large majority of our users don’t have local administrator rights on their Macs, so I wanted to find a solution where they could update their packages within the program without being prompted for administrator credentials.The solution is to create a Jamf policy to install MacTeX (of which TeX Live Utility is included) via Installomator and make this installable via Self Service.General > Display Name: MacTeX LatestCategory: UtilityTrigger: <Leave Blank>Execution Frequency: OngoingScripts: installomator.sh and Tex Live Utility Script (see below)Scope: As desired, but I elected to make this available to ‘All Computers’Self Service: Choose a Display Name and short Description. I then checked the Ut

I’m struggling, we’ve got a policy that disables uninstalling apps and system apps, and we have a policy that enables uninstalling apps and system apps.I’ve confirmed the Disable policy was removed from the device and the Enable policy was installed. I’ve confirmed no other applied policies are affecting those toggles (“remove apps” and “remove system apps”)For some reason, the device still won’t let us uninstall apps. What am I missing? We’ve restarted the devices and still no luck.

Hi all!We have been having a very strange problem for a while, the iphones without touching the buttons or starting the recovery mode are formatted from the factory. It does not happen to us in all the iphones devices that we have in Jamf but we have reported more than 15 cases with this problem, we reviewed the configuration and we did not find anything strange. We have configured the installation of updates if the user has not applied the update after 90 days, but these cases occur with all the updates made.Do you know what could be due?Thanks!

Hello Everyone while i am trying to registry any mac device with company portal it is saying get the app popup even device already have the latest company portal app installed, If anyone can help me to fix it  Note - it was working as expected two days back 

Hey Jamf Nation,Happy WWDC week 🎉!The festivities kicked off yesterday with Apple’s Keynote and Platform State of the Union.So let’s dive in…What are you most excited about so far? Either professionally or personally! 

Taking a swing at the regex. How is this?macOS 27 Golden Gate (Regex Can't upgrade)^Mac(BookPro1(7|8),\d|(1(4,([5679]|10)|5,([36-9]|1[01])|6,[15-8]|7,[2-9]))|(1([56],1[23]|4,(2|15))|BookAir10,1)|(6,[23]|5,[45])|mini9,1|1(6,1[015])|14,(3|12)|1(3,[12]|4,1(3|4)|5,14|6,9)|14,8)$|^iMac21,[12]$

Anyone running into an issue with the Shared Device SSOe profile failing to install on shared iOS devices? I set up the Intune integration with Jamf Pro for both shared devices and standard iOS devices. Standard iOS devices register with Microsoft just fine, but don’t actually perform SSO with the Microsoft apps but they do show as compliant in Entra. I had the Shared Devices registering for about two days and now after wipe, The “Install Device Compliance Shared Device Profile” command fails every time even with a different device. Previous Entra records have been removed. Any ideas of what I could try to fix it or where I can find more detailed logs? History of failed commands had nothing. 

Hi everyone, I. HATE. PRINTERS. That being said, we have to work with them.  and... Canon does not make it easy. Here is what I was able to find out from several places online, in order to get this "installer" to actually work. So let's jump on to our Macs and get this over with.Downloading the "Installer"1. Log into your Uniflow Online (web)2. Start Printing (Side Bar)3. Install Printer Driver > Click [Download macOS printer driver] Navigate to D

Jamf Icon Uploader is a utility that streamlines the bulk upload of icons to Jamf Pro, eliminating the tedious process of uploading them one at a time. This app was built to solve a common pain point: hosting app icons on Jamf Pro for use with Setup Manager. Instead of manually uploading each icon through the Jamf Pro interface, you can now upload an entire collection in a single operation. • Link: https://hcsonline.com/support/resources/apps/jamf-icon-uploader?ref=macadmins.news

I understand that it’s expected behavior, but when using the “Preserved Apps” option with the Return To Service feature, OS updates can’t be installed.Has anyone found a way to work around this limitation?

Taking a swing at the regex. How is this?iOS/iPadOS 27 (Regex Devices Can't upgrade)^(iPhone(12|13|14|15|16|17|18|19),\d|iPad(8,(9|10|11|12)|12,\d|13,(1|2|1[6789])|14,(1|2|[89]|1[01])|15,\d|16,\d|17,\d))$

 What’s new in managing Apple devicesDiscover the latest updates to declarative device management, Apple Business, and Apple School Manager. Explore how these advancements help you streamline deployment, strengthen security, and improve the experience for people using your managed devices. Whether you're building device management solutions or managing enterprise fleets, you'll learn practical ways to take advantage of these new capabilities. https://developer.apple.com/videos/play/wwdc2026/206/

I have trouble under this device ID 116, because It’s failed to delete or looking details in Jamf Pro 

We have a few iMacs running Sequoia 15.5 and Jamf Connect that are going to black screens after you log in. Both local user accounts and IdP accounts are affected, but I can see the user folder is being created when we log in against our IdP, I get the account creation message but it just hangs on the black screen. Local admin account is having the same problem. I’ve tried uninstalling, restarting, and reinstalling Jamf Connect, but the problem persists. Uninstalling and logging in as a local admin user causes a beach ball to spin, but it sits there and doesn’t not progress. I’ve checked the config profiles and license and they’re all valid, and this isn’t happening fleet wide, just randomly.if I create a new user through Jamf, the user will create, but I can’t log into that account, it immediately dumps me back to the JC login window without any feedback. I can see the new user’s account by running dscl . -list /Users UniqueID but it still hangs. Resetting authchanger d

How to bulk lost mode a smart group of ipads in Jamf Pro?I have a smart group but lost mode is not one of the available remote commands?Suggestions?

I am trying to configure Baseline. I can’t seem to get the Global Status Icons to work. For example: Global Status Icon - Fail:SF=xmark.circle.fillGlobal Status Icon - Success:SF=arrow.down.circle.fillGlobal Status Icon - Wait:SF=progress.indicator  They don’t show up at all when deploying packages.