Hello,Since iOS 26.2, a passcode is required when using AirDrop, which quickly becomes cumbersome in a classroom setting.Is there a way to disable this requirement via Jamf School? I haven’t been able to find a relevant setting.Thank you in advance for your help.

One of my users cannot register for platform single sign-on. She can complete step 1, which is to authenticate with her Mac login password.  Next, she can enter her email address. That’s when the process goes awry. After entering her email address, the window goes blank white. Behind it, we can see that Company Portal is doing something in the background. There’s the spinning progress icon. After seeing this, I removed and reinstalled Company Portal and ensured that the latest version was installed. She’s running macOS 26.3.1 and will have 26.4.1 soon since I just started enforcing that update. Has anyone seen this behavior and solved it? The PSSO login type used is Secure Enclave. We can’t do anything but cancel the registration. 

I am testing Connect 2.45 and have had a popup appear on the Login Screen.Its a really "Helpful" Popup. All it says is SecurityAgentHelper wants to make changes, and it asks for an Administrator username and password. None of my users are Administrators, so they will not be able to fill this in.Is this a bug? Is there a way to fix it so that it does not pop up? What process is it that wants this access? Thanks Paul  

I know this has been a “feature, not a bug” for a while with Jamf App Catalog titles but it’s becoming enough of a problem that I would REALLY like a better solution.  The problem:Macs fall into a Smart Group being used for scoping of Jamf App Catalog titles Jamf App Catalog scoping does not reliably update with those recently added Macs unless you toggle the deployment off and back on again to force it to recalculate. (Count is differing by 100 or more Macs for some titles in our instance today.) Jamf Pro lacks any way to alert us that an App Catalog title needs refreshing, so we have to monitor every title’s deployment count manually to see if any of them needs a reset.I started a support “ticket” (i.e. JamfBot conversation) about this just in case there was a new checkbox or something somewhere I wasn’t aware of, and it informs me that everything is functioning as intended as far as documented solutions.  I’m in line for a human support

PI-1152 involves the MDM Device Identity Certificate not being trusted on new enrollments after updating to version 11.26.PI-1153 concerns Device Identity Certificates being marked as untrusted in Keychain Access during enrollment in version 11.26.1.

• Starting as early as the next major software release, Apple operating systems (iOS, iPadOS, macOS, watchOS, tvOS, and visionOS) might refuse connections to servers with outdated or non-compliant TLS configurations due to additional network security requirements.• Requirements: Servers must support TLS 1.2 or later, use ATS-compliant ciphersuites, and present valid certificates that meet ATS standards. For complete network security requirements, reference the developer documentation• Link:  https://support.apple.com/en-us/126655

I’ve had a bunch of Macs suddenly fail to get the Network Filter config apply for Defender. (Configured as instructed by Microsoft below)https://learn.microsoft.com/en-us/defender-endpoint/mac-jamfpro-policies?view=o365-worldwide#:~:text=Step%208:%20Configure%20Network%20ExtensionThis is resulting in a prompt "com.microsoft.wdav" Would Like to Filter Network Content that repeatedly appears in the middle of the screen and prevents users from working.It is effecting 90 macs out of over 1000, across different versions of macOS and on both Apple Silicon and Intel. Those affected are seemingly random, although only seems to affect our Lab environments connected via ethernet, not our staff devices on WiFI.Reseting a Mac and

Fixed

What’s NewWe are excited to announce the next step in helping admins configure their user’s experience in Self Service+.  With this extended beta release, admins will be able to configure the order of items in the left navigation bar, the presence of sections on the home page, and the appearance of the Self Service+ menubar item. With this first phase of the release, these three options above are configurable by configuration profile using the schema included in the release notes.In addition to this change, we are also currently working on a blueprints implementation within Jamf Pro to make changing these settings even easier.  As we work through your feedback on these changes, we also want to be bringing even more customizations to help you bring a more tailored experience to your users. If you have any ideas for Self Service+ experiences that you would like to configure, we ask that you also share your ideas for us to consider as we priori

Hey Jamf Nation! Welcome to another edition of Things to Do for JNUC, 2026 Edition. This JNUC we’re heading to Kansas City, Missouri, so let’s make the most of it. Whether you’re travelling from near or far (I’m still coming from Canada!), here’s a curated list of activities to help you plan your trip. Locals - please share your insider tips! JNUC HighlightsJNUC Party: The Wednesday night bash is always a highlight of great music, food, and networking. Don’t miss it! Vendor Parties: Expect free drinks, tasty bites, and epic giveaways. Jamf Heroes Meetup: Details for 2026 aren’t out yet but keep an eye on Jamf Nation for updates. Official JNUC Info: https://www.jamf

Hi all - has anyone managed to change Jamf-related notifications (Self Service, Jamf Connect, Management Framework) from persistent alerts to banners on macOS?On our supervised Macs, these are stuck as persistent, the alert style is greyed out, and users can’t change them.I tried pushing a custom Notifications profile (setting everything to banners), but it didn’t override the behaviour while the Jamf automatic notifications setting was enabled.When I disabled “Automatically install a Jamf Notifications profile”, my custom profile worked and switched them to banners - but it broke Self Service (lost the Elevate Admin option), so I had to roll it back.No other conflicting profiles in place.Just wondering if anyone has found a clean way to allow banner notifications without impacting Self Service, or if this is just expected behaviour with Jamf’s default setup.Thanks 👍

• PSSO Utility is a native macOS app for inspecting and monitoring Platform Single Sign-On (PSSO) status. It queries the system app-sso tool and presents key metrics, IdP details, and raw JSON output in a clean interface. A menu-bar item is available for quick troubleshooting.• Link: https://github.com/jamf-concepts/psso-utility

Hey everyone, I have been going through different posts across here and Reddit, and I could really use some help. I am attempting to use the Jamf ADCS connector to push a machine certificate to a MacBook, which I can get it to do successfully. In the same profile, I have the network configuration in place there as well.   The issue that I am running into is not anything with the certificate/Jamf side, but with the Windows RADIUS server. I have an unbound AD object for the machine created, but I am unsure what I need to do with the object. The machine currently is successfully attempting to authenticate with the certificate, but NPS is rejecting it for error 8 - User account does not exist.   Does anyone have this set up in their environments, and is there a better way to do things? My security and systems teams won't let me domain bind the Mac devices, so I am using Jamf Connect for authentication, and I assume this is also why I am having accou

I am trying to make a smart group to see what computers have the PaperCut Client installed but i don’t see anything in the /Applications/PaperCut Print Deploy Client/ directory that i can select as the .app in the smart group. What can I use create this smart group?   

I’ve read most documentation and searched the forums but I’m having trouble finding out how devices that are assigned to users are kept assigned to users during and after the migration. We have 1200 Mac devices and about 4k ipads that need to keep their assigned user during the migration. We plan to use the migration tool in Jamf Pro. Currently we are using LDAP Username and not email for the user assignment. However each user has an email brought in as well. Should we update LDAP values first in order to make the transition? Would it be better to use the API to pull all devices and users, do the migration, then put them back with new usernames? Any insight into the migration tool and things to look out for also welcome. 

Hey folks,I have something odd on a few macOS devices after users change their AD/Entra password via Jamf Connect and sync it locally.Zscaler asking for auth again / certificate install Outlook asking to sign in again Self Service opens but is completely blank Company Portal acts like there’s no server connection Keychain won’t unlock or accept the correct new passwordThe only thing that consistently fixes it for us:Delete everything in ~/Library/Keychains Reboot Log back in Re‑enroll the Mac into Intune via Self ServiceAfter that, everything works normally again.

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

Hi, I have deployed a CIS benchmark under Compliance in JAMF Pro, I want to use this to justify how secure our Mac devices are and adjust the rules as needed. Is there a way to generate a report is a CSV or PDF format? having a detailed informations or executive summary options?

I have recently taken responsibility of jamf pro from a previous employee and have never really used it before so this is a learning experience. I have a Macbook Pro on Ventura OS in a computer group with a Staff Restrictions profile applied. This profile is somehow completely disabling Control Center and the ability to set a Screen Saver with the message "Control Center settings are not available. These settings are controlled by a profile." I can exclude the device from the profile and gain access to the Control Center and Screen Saver settings but not when it's applied. I figured these settings would be located under the Restrictions payload under Preferences but I see no such setting specifically targeting these. Does anyone know where / what is the setting that controls these? Is it another name or in another location? What am I missing? I see no specific setting to enable / disable. Thanks in advance

We are currently in the process of implementing Jamf Pro in our company environment. So far, we have successfully integrated several scripts, SMB shares, and other configurations, and everything was running smoothly.As the next step, we attempted to set up Jamf Connect in order to integrate a SAML authentication flow via our Entra environment. The goal was to allow users to log in with their Entra credentials during a fresh macOS installation.However, after configuring Jamf Connect, we started encountering a critical issue. The Microsoft 365 login window appears as expected, but after a few seconds, the entire Mac screen goes black and becomes completely unresponsive. The only way to recover from this state is by manually restarting the device.Additionally, since this issue started occurring, our previously working scripts and configurations are no longer functioning as expected.Has anyone experienced a similar issue or has any suggestions on how to troub

Anyone want to share best practice for this? Blueutil doesn’t work as great/possibly at all in our environment after updating to macos 26.As a workaround I’ve been using the api to send the MDM command in a policy/script to those macs that turn it off. We have an outset login script that manages to lock out bluetooth changing in the control center and system settings, but there’s a short window of 5 seconds or so where students can turn it off before it is locked. 

Does anyone have issues when using JRA with the users that have multiple displays?During a session it will swap between displays automatically, even thought I have auto switch monitor turned off.

We got Defender working on our Macs about a year ago - deployed via JAMF Pro and with configuration profiles. We are not bound to the domain and do not use JAMF Connect.I am trying to follow along with Microsofts documentation (Onboard and offboard macOS devices into Microsoft Purview solutions using JAMF Pro | Microsoft Learn) which seems to be written for setting this up from scratch rather than adding it in to an existing setup. It seems to be doing something as we are getting better feedback under Device Onboarding, but still not making much progress. Here is an example of the details in Device Onboarding  in Microsoft Purview with the error messages before and the more informative messages after I have created the configuration profiles in JAMF from the above guide:

We use Jamf Pro Cloud with Jamf Connect (for account creation + Entra ID password sync).After enabling “Use Self Service+ as the default end user app” in settings:Old Self Service was upgraded to Self Service+ on existing Macs Jamf Connect was removed, menu bar now has Self Service+ icon instead On new enrollments, we install Jamf Connect 2.45.1 → now it’s there alongside Self Service+I can’t find clear docs on this — so:Questions:Is Self Service+ intended to replace Jamf Connect completely? If yes, should we skip installing Jamf Connect post‑enrollment? Or should we move to Jamf Connect 3.x? Any official migration guide for 2.x → 3.x with Self Service+?Any experience or official Jamf resources appreciated.

Hi everyone, I’m new here, so if this has already been asked before, please go easy on me 😅 Here’s the situation: I have a client who wants to prevent their developers from losing time every time they switch to a new machine (setting up their development environment, SSH keys, cloning repositories, etc.). Right now, their servicedesk team spends almost an entire morning preparing each device… but here’s the catch: instead of rebuilding the environment cleanly, they’re cloning everything from the user’s old machine. Personally, I don’t agree with this approach. I believe it’s better to go for a clean and automated process: regenerate SSH keys, clone repositories from Git, and configure the environment from scratch. So my question is:Is there any common approach or script within the community to handle this kind of scenario?For example, something that, using the user’s credentials, can generate SSH keys,