Hello everyone,I have a problem in PreStage Enrollment, when passing through the sAMAccountName, maybe someone here has a solution for it.We need user certificates per configuration profile, which is why I set up a new PreStage Enrollment for MDM Enabled Users, but currently the ShortName (sAMAccountName) is not taken over for the AccountName if the value contains capital letters (which is unfortunately often the case here).The other attributes were already in use, which is why we used "Room" for mapping the sAMAccountName/onpremisessamaccountname, which works so far, but in PreStage only as long as there is no capital letter. If there is a uppercase letter in it, the value is not filled in the macOS account setup and the fields are not locked.AD and AAD are set up and Entra ID as IDP for SSO.There are already hundreds of rolled out Macs i

A five-question self-assessment to help you plan your 2026 Mac Admin open source contributions InvitationPlease accept my personal invitation to increase — or, for you Jedi-Ninjas, to maintain — your contributions to the Mac Admin community’s various open-source projects during 2026.Take the self-assessment

So I’ve started seeing an issue with macOS 26.1 trying to set up new machines.The enrollment customization is not passing the user info from the SAML token, which is a known issue but usually sending the workaround profile that sets those attributes works fine. Here is the payload:<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0">    <dict>        <key>EnrollmentRealName</key>            <string>$REALNAME</string>        <key>EnrollmentUserName</key>            <string>$USERNAME</string>    </dict></plist>it’s not working now, I’m not even seeing the computer’s username change in Jamf Pro after signing in through the enrollment customization

With 15.6 and beta macos 26The EA I was using for report back a macs SSID is now broken/blocked.Does any happed to have one that will works? Thanks #!/bin/sh# Jamf Extension attribute to return SSID## Check for SSID namewifi_name=$(ipconfig getsummary en0 | awk -F ' SSID : ' '/ SSID : / {print $2}')# Check if SSID is foundif [ -z "$wifi_name" ]; then    result="No Wi-Fi network found."else    result="$wifi_name"fi# Result for Jamfecho "<result>$result</result>"    

Since the A16 iPad doesn’t have serial numbers engraved anymore, I need a way to identify iPads in cases where the screen has died (water or physical damage). Are there any solutions like this that integrate with JamF School? If not, are there any recommendations?

I’m testing Jamf App Installers.One of my tests is Google Chrome and the other is Firefox.The other day I had an update for Chrome and received this message: When I checked the version of Chrome, it has updated and is now 142.0.7444.176 (Official Build) (arm64) which matches the version in the App Installers I struggled to find a log on the Mac,  However, there is an item under Jamf Pro → Device → History → Management History on the server and that has an entry InstallEnterpriseApplication - Google Chrome - 142.0.7444.176 18/11/2025 at 10:29 AMWhich is a

I am looking for the code for the Configuration dictionary for IXL iOS app to set the custom domain in the app. There is a setting for it in iOS Settings - IXL. Unfortunately IXL is anot aware of how to set this via MDM commands.

Hey folks, I worked on a script to deploy Autodesk 2026 (the one that uses the named user licenses). We don’t teach Mudbox, so that isn’t in the script...but Maya and AutoCAD is (along with Darwin..what a PIA to get working). I packaged the apps and deployed to /private/tmp/AutodeskApps… I have a lot of logging left in the script as Darwin is a royal pain and can fail at many different steps. I also made use of a lot of variables to hopefully make updating in the future easier. Oh, also did it in zsh.Hope you all find it useful, or at the very least, a good jumping off point!#!/bin/zshset -euo pipefail############################# VARIABLES############################YEAR="2026"TMP="/private/tmp"APP_TMP="${TMP}/AutodeskApps"LOG="/var/log/autodesk2026_install.log"DMG_LIST=( "Autodesk_Maya_2026_1_Update_ML_macOS.dmg" "Darwin.dmg" "AdskIdentityManager-UCT-I

I'm looking to use an extension attribute to list a user's Azure AD group membership status. Once that is identified, I would like to then parse this information for certain data, such as a specific group, and then create a smart group based on this information. Once the device enters that smart group, I can then have certain policies (such as licensed software) automatically deploy there. Has anyone done this? Thanks in advance!

For strong certificate mapping, can two SAN types be used in the Subject Alternative Names field? Official guidance specifies using only the SCEP URI, and although the current configuration with multiple SAN types appears to work, it seems unreliable, as I’m seeing additional certificate-selection prompts. This change was made while I was out, so I need to confirm that this approach follows best practice.  

Hello,I wanted to install Freeform on our iPad, but unfortunately I can't find the app at Apple School Manager.What can I do?Best Regards,Ralph

We’ve never fully standardized on having everyone in our org sync their Desktop and Documents folders to their OneDrive, and I’ve been working on getting that done recently. First step: create an extension attribute that shows the OneDrive redirection status on each Mac so I could build some smart groups.I kept it simple and just had it look to see whether the user’s Desktop and Documents folders were in their default locations, or if they had OneDrive in the file path of their locations. If it’s the former, it displays “Disabled.” If it’s the latter, it displays “Enabled.” If only one of the two folders are synced to OneDrive, it displays “Partial.”Just wanted to share in case this was useful for anyone else!#!/bin/bash# Extension Attribute to check if Desktop and Documents are syncing with OneDrive (KFM)# Author: John William Sherrod jwsherrod@mac.com# Version 1.0, Date: 08-28-2025# Get the curr

Hi,my organization requires me to block all Adobe Creative Cloud AI features. Does anyone have experience with this? What can be done? Are there Configuration Profiles I can use that are already tested?Thanks in advance.

Hi,with MacOS 26 Tahoe Apple introduced the new Simplified Setup for Platform Single Sign-On. Both Jamf Pro and Jamf School support this new feature in theory, but I was not able to get it working with Jamf School using Microsoft Entra.Jamf School support says that it should just simply work, but both Jamf and Microsoft say that it is not yet supported (see Jamf and Microsoft).Has anybody been successful?

Starting from scratch (new Jamf instance), how do you establish a baseline for configuration profiles that will be pushed to iPhones and iPads. Do you keep them separate for each type of device and should there be a config profile for every setting/configuration? 

How does everyone utilize static groups and smart groups in your Jamf instance? Seems there's more ways than one to make it efficient. Would like to know particularly how it's used in a hospital or school environment where iPads or iPhones are the bulk of the devices being managed.P. S. I know the difference between the group types. Just want to get ideas on how different orgs might use them more efficiently. 

Hi All,  Does anyone has a method after User has action SSO on the system that Jamf Pro will extract all there details from Entra ID included there department to the User and Location information for there system in Jamf ProThanks in Advance

Hi All, Does anyone know how to create uninstall button in self service for an application? Thanks in Advances

We’re moving away from Cisco Secure Client. But this utility is cool, and helpful. • A macOS utility to repackage Cisco Secure Client DMG files for unattended deployment via Jamf Pro (or any MDM solution).• huexley/CiscoRepackager• https://github.com/huexley/CiscoRepackager?utm_campaign=MacAdmins.news&utm_medium=email&utm_source=MacAdmins.news_385

Just in time for macOS Tahoe 26.2, a major update to Mac Admins’ new favorite, MDM-agnostic, “set-it-and-forget-it” end-user reminder for Apple’s Declarative Device Management-enforced macOS update deadlines — now with Configuration Profile support and a demo mode for easy reminder dialog testing OverviewWhile Apple’s Declarative Device Management (DDM) provides Mac Admins a powerful way to enforce macOS updates, its built-in notification is often too subtle for most end users to notice. DDM OS Reminder fills this gap by providing persistent, customizable reminders that ensure users are aware of upcoming update deadlines.New in 2.0.0Configuration Profile Support: Easily deploy and manage DDM OS Reminder settings via

Hi everyone,ContextI’ve encountered several machines where multiple Teams accounts (professional, personal, etc.) were registered, and removing them from the system proved to be quite difficult.I looked into various solutions, but many of the recommended methods didn’t work in my case. Every time I opened Microsoft Teams, the accounts would reappear.Here are some of the resources I consulted:    https://support.microsoft.com/en-us/office/sign-out-or-remove-an-account-from-microsoft-teams-a6d76e69-e1dd-4bc4-8e5f-04ba48384487     https://learn.microsoft.com/en-us/answers/questions/2202933/how-do-i-delete-an-old-teams-account-on-mac     etc. What actually worked for meI manually removed the following items from Keychain Access:    OneAuthAccount     login.windows.net     authority_mapAnother effective solution was using a script that I adapted to fit my

Hi All,  Can someone help me with Global System Extension to the Global Protect package to be deploy from Jamf Pro to Devices? the Global System extension need to be excutable with the deploy as well? Thanks in Advance

Is there a trick to removing “information” notifications?I have 25 of them now, everytime I manually refresh all devices, I end up with one.I can’t mark them as resolved (the whole thing just freezes / does nothing), and I can’t delete them because they aren’t marked as resolved.Some of them date back a couple of months now.

I have a TV app I would like to prevent from updating, but when I try to uncheck the boxes regarding auto updates they are greyed out and fixed to checked: Did I enforce that somehow for all apps, or is there a way I can uncheck the box to automatically force app updates? 

I know that you can push WebClip profiles to shared iPads using the user deploy method but I can’t seem to get it working while using Shared iPads in Guest mode only. Has anyone been able to get WebClips sent to Shared iPads using the anonymous guest logins? I have tried every way I can think of and nothing seems to work.