We’re seeing more enterprise drone deployments rely heavily on Apple devices like iPads, iPhones, and MacBooks for flight planning, live monitoring, inspections, mapping, and field reporting.One challenge that keeps coming up is device consistency across distributed field teams. Managing updates, security policies, app deployment, and remote troubleshooting becomes difficult when multiple operators are involved in drone operations.I’m curious how other IT admins or mobility teams are handling Apple device management in drone-related workflows or other field operation environments.Are you using automated provisioning, remote configuration profiles, or specific security policies for operational devices?We’ve also been researching enterprise drone infrastructure and fleet coordination workflows at https://zenadrone.com/ and it’s interesting to see how mobility managem

Some apps supposedly have built-in functions which are supposed to report whether the app itself believes it has full disk access and will then either indicate this or go straight to a process of requesting the user grant such access.The main app I am having an issue with is called Scribe and is an app which automates installing updated corporate email signatures for Apple Mail on a Mac.I have previously created a PPPC Configuration Profile in Jamf Pro and verified this has been successfully pushed out to my Mac. System Preferences → Privacy & Security does show an entry saying this has been configured via a Profile and is enabled, i.e. is clicked to the right and is ‘blue’.It should be noted that my own experience is that the TCC database if queried, only lists apps that have been enabled locally and not apps enabled via a Configuration Profile. In this case Scribe is listed in the TCC database and whilst I cannot remember for certain, it is highly

Hi.We’re using Jamf School as MDM (so please do not tell me all the wonderful things available in Pro 😅 ).Setting up MacBook Neo’s as new student devices. We want to block applications as: FaceTime, iMessage, Phone, iPhone mirroring during enrollment. As of today the only “half ass” solution is the “Safelist and Blocklist” payload, but this is deprecated :  Are there any other good solutions for getting this to work?

My device is stuck at DeviceConfigured. I have been having this problem more often. Everything on the back end in JAMF looks fine, but on the front end it just says "Awaiting final configuration”. This problem will persist for a long time. Does this happen to anyone else? Anyone have any ideas on how to fix this? It does not have any network issues. I tried pushing this command through using update inventory. I wiped it and restarted it multiple times.  

Hi,I really hope that someone here can help me with this. We have had this error for a few weeks now and I am getting a little desperate here. Jamf and Apple support have not been able to provide a solution either.Some of our Macs are getting the “Enrolling with management server failed. An unexpected error has occurred <HTTPStatus:502>”. I know that usually means communication issues, but with those Macs that cannot be the case because I can enroll different Macs under the exact same circumstances without any problems. Same time, same cable, same server, everything is the same. On the other hand those Macs always have that problem and it wont go away no matter what I do. I have already tried enrolling via a different network, moving them to a different site, enrolling them via a different PreStage enrollment and much more. Nothing worked. And really bad part is that this issue is spreading. At first only a hand full of my Macs were affected, but now almost 50% o

Hi guys, I’m the IT guy in my school and have been encountering this issue that happens to 2 of my IT Colleagues. Their classes disappear in JamF Teacher from time to time. However on my Teacher account that I am using for testing, it stays. Not too sure what is the cause of this.  I have been retagging them back to their classes and this has put a hold for us to integrate in our School. Anyone else has encountered this before and has a solution? 

Hi everyone! Looks like Microsoft may have finally released a compatible version of Company Portal for simplified platform SSO to work with JamfPro and Intune :).   I’m sure I’m not the only one who’s been keeping an eye out for Microsoft to release a compatible version of Company Portal for Platform SSO during registration, so wanted to share the info with everyone. I noticed late yesterday that Microsoft updated their “What’s new in Intune” page with this little tidbit:What's new in Microsoft Intune - Microsoft Intune | Microsoft Learn They released this blog post in the last couple hours:

Hello everyone!On every mac using JC3 / SS+, the “Local Account Password Expires” counter never shows a correct days number, no matter what I try.-Kerberos is valid.-Signed out and back into SS+.-Changing the PW using the integrated workflow WILL change the password, but the counter never changes. The new PW will be accepted with SS+ and JC.-New-to-that-computer users who login will show a seemingly “random” date that does not match the idP Thanks for any help y’all have!PS: Sorry if this is a common fix, I searched all sorts of threads but didn’t find anything that helped.  

Happy Monday! So I just came across this issue.  When a user tries to change their password using Jamf Connect, they get this Kereberos error 4.So they go into Okta and change it there.  Later Jamf prompts them that the Local Password and Network password don’t match.  They are able to enter the old and new passwords and get the local mac password changed to match.  But Jamf still shows “password expires in 0 days”.I didn’t do the Jamf Connect setup, it was here when I joined the company, so I’m not sure exactly how to start fixing this.  I’m hoping you have some tips, maybe someone has seen this before, really anything.  I’ll keep doing my research, but It’s always nice to get some expert

I am suddenly having an issue with JAMF deployed apps. I’m only seeing the issue happening on 3 apps that are paid for. The apps deploy properly to the iPads but are now prompting the user to sign in to an Apple Account whenever the app is opened on the iPad. If they hit cancel it allows them to use the app but when they close out of it again, it will prompt the sign in again.Our VPP token in JAMF is not expired, the location is correct, Managed distribution for the app hasn’t changed since it previously been setup and working and we have enough licenses and this issue only suddenly started happening. I’m not seeing it on the free apps. Any feedback or direction would be great, thanks!

I’m curious to know how other organizations are handling OS updates. Not so much in terms of applying them but more so in terms of testing. How long do you typically defer updates in your environment? What is your testing methodology and criteria for deployment?

Hey folks! I am looking for some real-world architecture advice from people managing more segmented Jamf environments.In previous companies, my Jamf setup was relatively straightforward:- one main device type,- mostly shared configurations,- common app stack,- unified policies and profiles.Now I’m building a more segmented environment and trying to design it the “right” way before things scale too much.We’ll likely have multiple categories of macOS devices with different requirements, for example:- standard daily-use employee Macs,- security/guard team devices,- travel/restricted devices,- possibly more specialized fleets later.Each category may require:- different app sets,- different restrictions,- different onboarding flows,- different compliance/security baselines,- different Self Service experiences.I’m currently building around:

Running into these messages when trying to log into Self Service+ 2.21.0. No changes have been made in Okta or in Jamf. Its also saying my password isn out of sync when no changes have been made there either. Wondering if this is a bug considering 2.21 was just released 3 days ago and we just discovered it today. 

Hi,with MacOS 26 Tahoe Apple introduced the new Simplified Setup for Platform Single Sign-On. Both Jamf Pro and Jamf School support this new feature in theory, but I was not able to get it working with Jamf School using Microsoft Entra.Jamf School support says that it should just simply work, but both Jamf and Microsoft say that it is not yet supported (see Jamf and Microsoft).Has anybody been successful?

Hi All, Is anyone else having issues with enrolling MacBooks in their Jamf Pro environments? Every time we've tried to enroll a new MacBook Pro this week we're getting hit with "Enrolling with management server failed. Unexpected error (MDMResponseStatus:502)". Jamf Support had me try a few things like trying a different Prestage Enrollment Profile or even removing some packages from Prestage but no luck. Any help would be appreciated. Thanks

Hello there, Im a bit rusty so any help would be appreciated.Im writing a script in jamf pro which uses the computers-inventory API to grab info on a specific computer. So far I have thiscomputerID=$(sudo jamf recon | grep computer_id | cut -f2 -d '>' | cut -f1 -d'<')computerInventory=$(curl -s "${apiURL}/api/v3/computers-inventory/${computerID}" -H "Accept: application/json" -H "Authorization: Bearer ${apiBearerToken}" -X GET)#EXTRACT managementID out of computerInventoryI have no idea how to extract the managementID field out of computerInventory. Im trying to avoid jq cause I dont want to deploy that to all the macs in the fleet.Any help would be amazing.

I know this has been a “feature, not a bug” for a while with Jamf App Catalog titles but it’s becoming enough of a problem that I would REALLY like a better solution.  The problem:Macs fall into a Smart Group being used for scoping of Jamf App Catalog titles Jamf App Catalog scoping does not reliably update with those recently added Macs unless you toggle the deployment off and back on again to force it to recalculate. (Count is differing by 100 or more Macs for some titles in our instance today.) Jamf Pro lacks any way to alert us that an App Catalog title needs refreshing, so we have to monitor every title’s deployment count manually to see if any of them needs a reset.I started a support “ticket” (i.e. JamfBot conversation) about this just in case there was a new checkbox or something somewhere I wasn’t aware of, and it informs me that everything is functioning as intended as far as documented solutions.  I’m in line for a human support

I need to lock down some iPads to only display a single web page. These devices are supervised, and will be handed out to study participants in a lab. They’ll then interact with that single web page during the course of their participation in the study. We don’t want the participants to be able to launch any other app, configure any iOS settings, or visit any other website.This article, “Configuring Single App Mode for Web Clips in Jamf Pro,” which was just published four months ago, seems to be exactly the sort of thing I’m looking for. However, when I attempt to implement it on my test device, all I get is a blank white screen with the iOS status bar on top of it.I have tried using both com.apple.webapp and com.apple.webapp.managed as Bundle ID values in my Single App Mode pa

If not, you really should check out https://github.com/Jamf-Concepts/Jamf-Extender (and take a look at the other repos under Jamf-Concepts while you're there). Versions for Safari, Firefox, and Chrome/Edge are available.I’m not going to list all of the capabilities of the current version, but a few that I’ve found to be _extremely_ useful are:The capabilities of MUT accessible directly from the Jamf Pro console Identify how may times a Smart Group is used as a Target or an Exclusion  Convert unused Smart Groups to Advanced Computer Searches A Compare Profiles command to view the scope summary and which payloads are shared or unique (the settings in each payload are not displayed in the comparison however)Other areas where the extension adds capabilities are Blueprints, Jamf Security Cloud, and Jamf Protect

I'm looking for a way to send the 'wipe computer' command in bulk to our Labs so that they can be refreshed at the end of semester.I gather this will require use of an API client and secret.I'm wondering if anyone has come across a script that can do this?

Everytime  I try to delete an old smart group or static group that happens to be in scope of multiple policies I  then have to go to each policy and remove it from scope first and then I'm able to delete it.There's gotta be a better way to do this.Is there a feature request or something that will allow me to delete it without having to remove it from a bunch of policies first?It's a big waste of time. Add a checkbox for the user to select to allow removal from any policy the group is in. 

iOS 26.5 finally brings E2EE for RCS. Just interested: Will that have any impact on your MDM? We are a small company and now able to natively allow messaging each other without the use of 3rd party apps. 

Connect 3.4.0Self Service+ 2.12.0OS 26.1 Tahoe (Many other machines on 26.0.1)I can not get this prompt to close no matter what I do. Everything in the back end seems fine with my machine and my connection to Jamf, self service, connect, everything, it all seems fine. Anyone have any ideas?  I did not see this issue prior to updating OS from 26.0.1 to 26.1 and that is the only thing I can think of that may be triggering it. I have tried deleting associated keys and allowing them to regen, I have tried flushing and re-pulling Config Profiles and Policies. P&S settings are all good. I have fond that if I leave the window there for 30min or more, it will finally close after entering PW and selecting Always Allow, but then comes back up after Reboot.

• iOS - 50+ CVEs patched• macOS - 60+ CVEs patched• link: https://support.apple.com/en-us/100100

Can't seem to find an answer to this so I suspect that there isn't (a satisfactory) one...Security and Privacy best practice says to disable iOS notification previews, especially when a device is locked. This is what I want to set using Jamf Pro.I know I can set Notification preferences per app, but the setting in the screenshot is global and can be set on the device, but is there a way to configure this device-wide setting with Jamf Pro?There is a specific Jamf article on this, from the UK NCSC (National Cyber Security Centre), which refers to this specifically, but does not reveal how to achieve this exactly.https://www.jam