Edited 4SEPT2024: Updated information with the release of Jamf Pro 11.9 for PSSO and Device Compliance.  Also added link to Jamf Pro documentation. Jamf Learning Hub Instructions: https://learn.jamf.com/en-US/bundle/technical-articles/page/Platform_SSO_for_Microsoft_Entra_ID.html Current Public Preview Limitations What is Public Preview

JNUC 2027 - Anaheim, CA - October 26, 27, 28Join us for the 18th annual Jamf Nation User Conference, happening at:Anaheim Convention Center800 West Katella AvenueAnaheim, CA 92802JNUC 2028 - Portland, OR - October 17, 18, 19Join us for the 19th annual Jamf Nation User Conference, happening at:Oregon Convention Center777 NE Martin Luther King, Jr. Blvd.Portland, OR 97232JNUC 2029 - Washington DC - November 6, 7, 8Join us for the 20th annual Jamf Nation User Conference, happening at:

Previously, we deployed the following script to allow standard users to change the date and time without requiring admin credentials. However, this is no longer working on Sequoia devices. Can someone assist in enabling this functionality on Sequoia devices? #!/bin/bash # Allows any user to change the date and time on their Mac. /usr/bin/security authorizationdb write system.preferences.dateandtime.changetimezone allow /usr/bin/security authorizationdb write system.preferences.datetime authenticate-session-owner-or-admin exit 0;  

Hello everyone,I’m fairly new to Jamf administration and I’m looking for some guidance on deploying Cisco Webex on macOS.Is there a recommended way to:Install Webex silently via Jamf Pro (I deployed it via Mac Apps from Jamf Catalog)  Pre-approve or suppress the Webex EULA prompt(Cannot make it happen :()  Enable automatic sign-in for users (Created a configuration profile with Custom settings and Schema but it’s not working)Any advice, documentation, or examples would be greatly appreciated.Thanx

Hello. I don’t understand how to buy Jamf Protect.When I go to Jamf Protect and click “Request trial” it takes me to a page where it seems I’m registering for Jamf not Jamf Protect. I’m already enrolled to Jamf Now and I deployed Jamf Protect to the devices but I don’t see any reports/alerting and so on for Jamf Protect in Jamf Now interface.   So my question is , how do I buy only Jamf Protect and integrate it into Jamf Now or how do I get visibility on Jamf Protect from Jamf Now interface as is? Thanks kindly in advance.

We are restricting the ability to add non-corporate email accounts to the native Apple mail client (which is easy to lock down in jamf by locking the Settings) but we would like to offer Outlook for iOS app as an alternative to the native client.  So...couple of questions:1. Is it possible to push a config to the Outlook app so that is sets up the users Exchange email box?2. Is it possible to lock down the Outlook for iOS app so that users can't add additional email accounts?

On the Jamf School dashboard, I can see the 6 most active users. I’d like to know if there is a way to see who actually uses their iPad. I introduced Jamf School Teacher, Student, Class Assigner, and Apple Classroom this year. I’d just like to see if there is a way for this. The number 1 teacher has used her iPad 2200 times, the other is 1100, 3rd place is a little over 200. The rest are under. We are a Google district for majority devices.Thanks! 

Hi everyone,ContextI’ve encountered several machines where multiple Teams accounts (professional, personal, etc.) were registered, and removing them from the system proved to be quite difficult.I looked into various solutions, but many of the recommended methods didn’t work in my case. Every time I opened Microsoft Teams, the accounts would reappear.Here are some of the resources I consulted:    https://support.microsoft.com/en-us/office/sign-out-or-remove-an-account-from-microsoft-teams-a6d76e69-e1dd-4bc4-8e5f-04ba48384487     https://learn.microsoft.com/en-us/answers/questions/2202933/how-do-i-delete-an-old-teams-account-on-mac     etc. What actually worked for meI manually removed the following items from Keychain Access:    OneAuthAccount     login.windows.net     authority_mapAnother effective solution was using a script that I adapted to fit my

I just want to ask, before we deploy PSSO for better MFA authentication, does Device Compliance need to be enabled in Jamf and does the device need to be registered in Entra? Is that correct? Because I thought we could deploy the company portal and then the configuration profile based on the Jamf documentation.

Hello everyone,I’ve added many ATV to our School Manager with latest Apple Configurator 2 without any problem. But now I’ve run in to two problems. When click prepare it takes some seconds and then I get the error as bellow. It’s a ATV 4 HD with USB-C. USB-C is connected to my computer and the computer and ATV is on the same network and the devices is updated to latest tvOS and reset. I’ve tried some times to set it in recovery mode but it just wont work. Does anyone have any idea what to do?

Hi All,  Can someone help me with Global System Extension to the Global Protect package to be deploy from Jamf Pro to Devices? the Global System extension need to be excutable with the deploy as well? Thanks in Advance

I have Jamf now and I added Jamf protect on my blueprint. It shows that Jamf protect was deployed but I expected to see the Jamf protect reports or alarming and so on in the Jamf now interface but there’s nothing of the sort. Can someone please explain what I’m missing? Thanks kindly in advance.

Dear experts,I joined here because of a issue that we cannot resolve after almost a month (yes..) of troubleshooting. The problem is as follows:Jamf Pro with iPhones. No Computers etc.Apps will not install from Self Service. The device history shows that the license for the app is not found.  I looked everywhere, each history tab for devices, location, any changes or things that line up with when the issue came up, unable to pin point anything. It unfortunately just stopped working, seemingly out of nowhere, and I wish I had anything more precise to say about this. What we did so far:renewed the VPP token as well as the .p7m server token file, taken from Apple Business Manager and uploaded them again in Jamf made sure that the Apple IDs match, same email address used in ABM as in Jamf for Admin as I saw in 

Running a Jamf Cloud instance, and testing various methods for software update management.I pushed out a managed software update to two test devices, update was configured to allow a max of three deferrals. This is the behavior experienced by both endpoints, each time a managed update was pushed:Maximum deferrals were selected, or deferral notifications otherwise ignored. Users received notifications that their computers would restart. No updates applied, computers did not restart. Logs reported that AvailableOSUpdates had changedBootstrap tokens are escrowed for every device in our inventory. Managed updates were pushed multiple times, reporting the same error at step four each time. No new updates were published between attempts.Unless I’m mistaken, shouldn’t updates automatically authorize if a valid bootstrap token is escrowed in Jamf? Why did the available updates never apply?

Hi all,I’m looking for some advice on improving our macOS update workflow. Current setupRight now we’re using a mix of:Restrictions payload with no deferral for our tester group, 1week deferral for everyone else.Nudge -separate config profiles depending on whether we want to push a required update or just remind users.This works, but managing multiple profiles every time there’s a new macOS version isn’t ideal.What I’d like to achieve is: A cleaner process for forced updates for everyone when needed.A standard workflow where users get UI prompts to update (Nudge-style), based on our deferral policy.Ideally: define the update version and handle the user prompts from one place, without juggling several profiles. Does Jamf Pro offer any built-in way to handle both the update logic and user prompts together?Or is Nudge still the best option?If you have a setup tha

I’m testing Jamf App Installers.One of my tests is Google Chrome and the other is Firefox.The other day I had an update for Chrome and received this message: When I checked the version of Chrome, it has updated and is now 142.0.7444.176 (Official Build) (arm64) which matches the version in the App Installers I struggled to find a log on the Mac,  However, there is an item under Jamf Pro → Device → History → Management History on the server and that has an entry InstallEnterpriseApplication - Google Chrome - 142.0.7444.176 18/11/2025 at 10:29 AMWhich is a

We would like to create a shared mac device where multiple users can login to with their personal accounts. We are utilizing Platform Single Sign-On and have enabled “Create new user at login”.Everything works as expected and multiple users can login with their personal Entra ID account but we have a funny issue here.The first user who logs in (via prestage) gets a local account like “user@domain.com” but all other users who are logging in at the login window are getting a local account like “userdomain.com” so without the @Mappings set in PSSO as:Full Name: NameAccount Name: preferred_usernameWe would like to create local accounts of users with full email. Any thoughts?

We (finally) got zero-touch working this year, but the only issue is we’re only targeting new hires so far. What we ran into is existing Mac users getting a lease replaced machine don’t have an automated way of getting the software they use today installed on their new machines. They would have to go to ServiceNow and request it all again. I was wondering if anyone had any experience via the API or scripts to look at what they had installed on an old machine assigned to the same user and scope the new machine for the same software (using maybe an allow/block list for things like licensed software)?

Anyone having issues with the API?I was using several scripts that suddenly broke yesterday, November 24 around 9:30 AM EST.I’ve got most of them fixed, but some aren’t working as consistently as they were previously. To give a little context, I was using /JSSResource/computers/serialnumber to get location data to set fields in the Login Window. I also use the location data fields like <realname> <building> <department> to set the machine name and to create a local user account.After adjusting scripts to use a bearer token, I was able to get this to work somewhat, but had to make several adjustments to the parsing of the data with awk commands to remove whitespace and newlines.Additionally, I’m seeing script failures for no apparent reason now.Has anyone experienced anything like this?-Chris

Hello, We have an issue where iPads running 26.0.1 are working absolutely fine no issues whatsoever however as soon as they upgrade to 26.1 their internet connection stops working. Devices can be connected to the network no issues and appear to be working fine but you are unable to access the internet and they refuse to talk to JAMF.I found the following : https://discussions.apple.com/thread/256182709?sortBy=rank which appears to be the same issue. Wiping the devices hasn’t helped and the problem persists.  

Hey, all! Does anyone recommend a nice/pretty way to use with iPad's ADE as in "user-will-be-in-awe-to-go-through-this-setup" ?I'm trying to setup some sort of onboarding for the iPads (1:1, not shared) in a similar way that we have for macOS, but I couldn't find anything (or, quite possibly, that I'm not searching in the correct ways in here ). I've tested the ADE with a prestage and it's working fine, plus the few Config Profiles that I'm doing testing with are landing correctly...just I need to make a more personalized "Corp-feel-like" experience...Btw, I'm using Jamf Pro - I need a way to have the user guided through the few hurdles with  Compliance (Register with Microsoft), Zscaler, etcThe enrollment customization part I have it sorted out, but it's not going to "enforce" the user to "click-here...run-this"...I think I need more of the 1st app to be triggered right after the ADE completion (maybe running temporarily as single-app mode?), where I can put some inst

Hi,We have several iPhones that are listed in Apple School Manager and assigned to the Jamf School portal. However, when we attempt to enroll the devices from the iPhones, we receive an error stating: "Access blocked, does not comply with Google policy."We are not facing this issue with iPads or Mac devices — only iPhones are affected. As far as we are aware, there are no active policies set in our Google Workspace that would block enrollment.Do you have any idea what might be causing this issue?  

Hello folks,we encounter a problem on some iPads (Gen 9) that were upgraded to IOS 26.1We use Jamf School and also Jamf Safe Internet on these devices.The ipads still connect to the wifi but it says no internet.The ipads don’t check in to the Jamf School Dashboard so i cannotchange the settings there.Is there a known problem with IOS 26 and Jamf Safe Internet? thanks in advance

We recently upgraded from Jamf Connect Login 3.3 to 3.5 to fix a keychain popup bug from earlier this month:This had the unintended consequence of breaking the “password sync” feature of self service +:Clicking the link to “Sync password” leads to a greyed out credential screen. This screen contains the correct email address and presumably correct password.The “change password” feature of self service plus seems to work, the local password and idp password will match afterwards, but self service plus doesn’t recog

I’m deploying Snagit 2025 on macOS Tahoe. I’m following Techsmith’s documentation to the letter at the link below. I’ve deployed older versions on older OS versions without issue. The issue I’m having appears to be a permissions issue. https://support.techsmith.com/hc/en-us/articles/115007344888-Enterprise-Install-Guidelines-for-Snagit-on-MacOSThe issue happens the first time you attempt to open Snagit. On app execution, you are presented with the error below:In troubleshooting, I’ve added permissions to everyone to the first folder and still have the same issue. The second folder doesn’t exist yet. Has anyone else had this issue?