In Jamf Pro, We have policies to install the 2024 Microsoft Office suite LTSC during our Provision policy which is a script that calls each policy to install individual pieces of software we want to install on a Mac.Here is the order for the Microsoft install we have 2 policies:1. Install 2024 Microsoft Office 16.106.26020821.pkg(This is the older version from February. Testing. I tried the lastest version too)2. Install Microsoft_Office_LTSC_2024_VL_Serializer.pkg(I have also tried swapping the order)Ever since I can remember this has worked exactly as intended. The Office suite is installed then the volume serializer is installed to activate the license. At first launch it opens to the templates/recent documents page.However, over the last couple weeks of testing, the activation is no longer applying. I’ve tried everything I can to try and deactivate the license/reactivate it, but the only fix appears to be completely remo

Hey Jamf Nation,Happy WWDC week 🎉!The festivities kicked off yesterday with Apple’s Keynote and Platform State of the Union.So let’s dive in…What are you most excited about so far? Either professionally or personally! 

Hi everyone! Looks like Microsoft may have finally released a compatible version of Company Portal for simplified platform SSO to work with JamfPro and Intune :).   I’m sure I’m not the only one who’s been keeping an eye out for Microsoft to release a compatible version of Company Portal for Platform SSO during registration, so wanted to share the info with everyone. I noticed late yesterday that Microsoft updated their “What’s new in Intune” page with this little tidbit:What's new in Microsoft Intune - Microsoft Intune | Microsoft Learn They released this blog post in the last couple hours:

Jamf Icon Uploader is a utility that streamlines the bulk upload of icons to Jamf Pro, eliminating the tedious process of uploading them one at a time. This app was built to solve a common pain point: hosting app icons on Jamf Pro for use with Setup Manager. Instead of manually uploading each icon through the Jamf Pro interface, you can now upload an entire collection in a single operation. • Link: https://hcsonline.com/support/resources/apps/jamf-icon-uploader?ref=macadmins.news

I understand that it’s expected behavior, but when using the “Preserved Apps” option with the Return To Service feature, OS updates can’t be installed.Has anyone found a way to work around this limitation?

Hi everyone,I've been working through a deployment of Platform SSO Simplified Setup on macOS 26 using Microsoft Company Portal 5.2604.1 (5.2604.0 or newer is required per documentation), and I've hit a wall with username/account name mapping that I wanted to share in case others are running into the same thing and could potentially provide some alternative options.---Our Setup- Jamf Pro 11.28.1- macOS 26- Microsoft Company Portal 5.2604.1 (deployed as a PreStage package)- Microsoft Entra ID- PSSO profile with Simplified Setup enabled (EnableCreateFirstUserDuringSetup + EnableCreateNewUserAtLogin both true)- Authentication method: Password- Associated Domains payload included in the same profile---The ProblemEverything works end-to-end — Simplified Setup fires during the Setup Assistant, the user signs in with their Entra credentials, and a local account gets created. However, the local account short

Taking a swing at the regex. How is this?iOS/iPadOS 27 (Regex Devices Can't upgrade)^(iPhone(12|13|14|15|16|17|18|19),\d|iPad(8,(9|10|11|12)|12,\d|13,(1|2|1[6789])|14,(1|2|[89]|1[01])|15,\d|16,\d|17,\d))$

Hi there,I try to use Jamf Setup Manager to made zero touch installation on my Macs.First question, i don’t have found how to launch JSM after enrollement wouthout let a welcome pane open. If the Mac return back to login screen nothing happens. Is it possible to automatically launch JSM without a pane opened?I also try to change Mac name and sync his identify on Jamf inventory, which are the command i could use in JSM to do this?Thanks for your help

Taking a swing at the regex. How is this?macOS 27 Golden Gate (Regex Can't upgrade)^Mac(BookPro1(7|8),\d|(1(4,([5679]|10)|5,([36-9]|1[01])|6,[15-8]|7,[2-9]))|(1([56],1[23]|4,(2|15))|BookAir10,1)|(6,[23]|5,[45])|mini9,1|1(6,1[015])|14,(3|12)|1(3,[12]|4,1(3|4)|5,14|6,9)|14,8)$|^iMac21,[12]$

 What’s new in managing Apple devicesDiscover the latest updates to declarative device management, Apple Business, and Apple School Manager. Explore how these advancements help you streamline deployment, strengthen security, and improve the experience for people using your managed devices. Whether you're building device management solutions or managing enterprise fleets, you'll learn practical ways to take advantage of these new capabilities. https://developer.apple.com/videos/play/wwdc2026/206/

I have trouble under this device ID 116, because It’s failed to delete or looking details in Jamf Pro 

We have a few iMacs running Sequoia 15.5 and Jamf Connect that are going to black screens after you log in. Both local user accounts and IdP accounts are affected, but I can see the user folder is being created when we log in against our IdP, I get the account creation message but it just hangs on the black screen. Local admin account is having the same problem. I’ve tried uninstalling, restarting, and reinstalling Jamf Connect, but the problem persists. Uninstalling and logging in as a local admin user causes a beach ball to spin, but it sits there and doesn’t not progress. I’ve checked the config profiles and license and they’re all valid, and this isn’t happening fleet wide, just randomly.if I create a new user through Jamf, the user will create, but I can’t log into that account, it immediately dumps me back to the JC login window without any feedback. I can see the new user’s account by running dscl . -list /Users UniqueID but it still hangs. Resetting authchanger d

How to bulk lost mode a smart group of ipads in Jamf Pro?I have a smart group but lost mode is not one of the available remote commands?Suggestions?

I am trying to configure Baseline. I can’t seem to get the Global Status Icons to work. For example: Global Status Icon - Fail:SF=xmark.circle.fillGlobal Status Icon - Success:SF=arrow.down.circle.fillGlobal Status Icon - Wait:SF=progress.indicator  They don’t show up at all when deploying packages. 

Hello everybody !I’ve been looking around, but without finding any real solution. Add to this changes from Apple / Jamf so what worked before may not work anymore, and of course what didn’t worked before may now be fine.I would like what’s the best practice to install minor or major updates of macOS on Apple silicon computers. Actually, I’m working on 2 scripts: one that will download the updates and another one that will install them later. The problem is: users have standard user account and of course, admin credentiales are needed.I’ve read that mdm commands aren’t very reliable, but as the posts are now from months ago, maybe that it’s working as expected now. And about those mdm commands, I don’t know if it downloads / installs only minor updates, or if it will install major ones if available.I was thinking of having the credentials as parameters for the scripts, but is is secure enough ?A last thing to ask: is there a

Has anyone started down this road of managing MacBook Neo’s with JAMF School? I have started testing and have encountered a couple of annoyances thus far. We are generally a Microsoft shop and use JAMF School to manage student iPads. As such, we are using JAMF Connect for student login to the devices on these devices as well.There seems to be an issue with the Neo’s not wanting to reconnect to wifi after a restart. Also, Keychain is asking for access to JAMF Connect password after installation. We have this same setup working on 10 iMacs at one school and they do not ask for Keychain access.Any thoughts or shared experiences would be great. Thanks.

Hello,Currently, the date of the day is displayed at the top of the message, but the subsequent messages do not have a specific timestamp. For better organization and a clearer follow-up of discussions, I suggest adding a precise timestamp (time) to each message. This would help us keep track of conversations more effectively, especially for instructions or immediate feedback.Thank you!

We recently laid off 14 people and were going to gift them their M1 Laptops after they were off-boarded.  I issued Lock Computer commands from JAMF Pro to each machine and, to my surprise, found that only 3 of the 14 had actually locked out the user.   Luckily, these folks were all friends of the company (sad) and they did not do anything malicious, but I was able to use my TeamViewer link to the machine to go in and ‘removeFramework’ and re-enroll.   After that, I was able to wipe the machines normally.   Is there a way to get the rest of my machines back into compliance without removing the framework and re-enrolling them, one by one?  Will a ‘renewDeviceCert’ work?  Thanks. 

I’m just wondering if anyone has got this to work via Jamf Pro on-prem?I’ve created a package deployment of the latest Company Portal, configured the SSO extension profile as explained in the Jamf guide for Entra, and setup the pre-stage enrolment but when I go through the setup on my test MacBook Neo it doesn’t work.It takes over 15 minutes to try and install the Company Portal and then just moves on to the ‘create user’ step. If I restart the MacBook Neo it may eventually pick up the Company Portal and SSO extensions but then after signing in via Entra it shows a “Sign in to your organisation” screen with a box for username and a box for password, which will not accept any kind of credential.I can access the package URL and download the pkg file in seconds via a browser. I’ve reloaded Tahoe on the MacBook Neo and deleted and recreated the SSO extensions, still nothing.Thanks

Hello everyone,  IDK if anyone is using the great add on to Macs, but if you are can you help me get 4 Tiles to work?  Tile #1 - Submit a Service Desk Ticket - the link is mailto:#servicedesk@mycompany.com. Nothing happens.  Tile #2 - Battery - can't get it to display the battery level. Tile #3 - Storage - can't get the amount of storage to display.  Tile #4 - Privacy and Security - can't figure put how to open this one. We want end users to be able to open Privacy & Security directly without going through SystemSettings>Privacy and Security.  Other than that, it is a great addition to our JAMF program. If you haven't tried it - check it out.  https://github.com/root3nl/SupportApp JNUC 2021 release with training: https://www.youtube.com/watch?v=LijCmR

Does anyone have any insight to when (or if) Jamf Security Cloud will be available on MacOS and Windows?I see the options as not yet supported, but wondering if there is a timeline on that.   

*Trying to get ahead of OS27 and the devices that can’t update*We have a requirement that all Apple mobile devices can support the latest OS update.  Based on early reports, we will have 100+ iPads that won’t support OS27.  I need to be able to block those devices completely.  We have departments that will attempt to keep them, but I need to make sure they can’t use them.Current setup is Jamf Pro for MDM and Entra for compliance.  We currently use Smart Device Groups and Entra Conditional Access to block Microsoft apps from devices that don’t meet criteria to be in our compliance smart group.  I wasn’t sure if there is a way to completely block in Entra Conditional Access or if there is a way to wipe and ban the device in Jamf Pro.  If not, is there a way to block all apps or put it into a kiosk mode if it isn’t eligible for OS27?Any suggestions will be greatly appreciated!

I am gradually learning how to work with blueprints. I have had success managing software updates with blueprints, so I decided to try out restricting external drives to read-only access. I want to stop controlling this using Proofpoint DLP (which I think is crapware) and start controlling it with blueprints.After configuring the blueprint, I deployed it to one of my Macs, then connected two USB drives. Neither drive appeared on my desktop. I opened Disk Utility and found both there. When I clicked to mount each of them, they would not mount. I saw no errors. They just won’t mount. As part of my testing, I uninstalled Proofpoint DLP, which is being used currently to make external drives mount as read-only. Before scoping the blueprint to my Mac, I confirmed that I could mount drives and write to them. I just recreated this on a second Mac. It’s the same issue. Proofpoint DLP is removed. The blueprint is installed. A PLIST was created at /private/var/db/ManagedConfigurationFil

I have JAMF pro cloud instance and when I enroll new device using PreStage Enrollment, all my 12 application installations show ''background items added" notification on the right side of mac devices. can we mute these notifications?

I am trying to install sophos through JAMF School and used their script.The script it working fine when running it on the mac as sudo, but when i try pushing it through JAMF, nothing happens.This makes me wonder if i am missing something, i seem to be unable to make the app run as an administrator/sudo user.Can anyone help?