Hello everyone!I’m currently going through a PCI audit process and we need to collect logs for specific events within macOS, we aim to do this with Jamf Protect (Telemetry, Analytics, Unified Logging, whatever fits best honestly). But having rather low success so far, given the amount of noise we get from, probably, too general predicates.Have you had to set this up? Do you have hints or tips (or, even better, your analytics/filters)? This is the list of events we want to get logged: a. all administrative actionsb. accessing audit trailsc. invalid access attemptsd. successful access attemptse. elevation of privilegesf. creation/deletion/changing an account with admin privilegesg. start/stop/pausing of audit logsh. creation of system-level objects Thanks in advance!

We have a few iMacs running Sequoia 15.5 and Jamf Connect that are going to black screens after you log in. Both local user accounts and IdP accounts are affected, but I can see the user folder is being created when we log in against our IdP, I get the account creation message but it just hangs on the black screen. Local admin account is having the same problem. I’ve tried uninstalling, restarting, and reinstalling Jamf Connect, but the problem persists. Uninstalling and logging in as a local admin user causes a beach ball to spin, but it sits there and doesn’t not progress. I’ve checked the config profiles and license and they’re all valid, and this isn’t happening fleet wide, just randomly.if I create a new user through Jamf, the user will create, but I can’t log into that account, it immediately dumps me back to the JC login window without any feedback. I can see the new user’s account by running dscl . -list /Users UniqueID but it still hangs. Resetting authchanger d

We're having an issue with the Jamf Setup app (iPadOS) displaying in single app mode. We've configured the app so that the user can enroll their device during the process with Entra Login. However, the Jamf Setup app requires Safari to display the Entra registration window. Unfortunately, when I launch the Jamf Setup app in single app mode, I can't enroll my device because the Entra registration window doesn't appear. I don't want to use the "restriction" profile to only allow Jamf Setup and Safari, because our users might simply browse with Safari without registering their device. Do you have any suggestions or experience on how I can lock my iPad in the Jamf Setup app and registering the device using Entra Login?

I am gradually learning how to work with blueprints. I have had success managing software updates with blueprints, so I decided to try out restricting external drives to read-only access. I want to stop controlling this using Proofpoint DLP (which I think is crapware) and start controlling it with blueprints.After configuring the blueprint, I deployed it to one of my Macs, then connected two USB drives. Neither drive appeared on my desktop. I opened Disk Utility and found both there. When I clicked to mount each of them, they would not mount. I saw no errors. They just won’t mount. As part of my testing, I uninstalled Proofpoint DLP, which is being used currently to make external drives mount as read-only. Before scoping the blueprint to my Mac, I confirmed that I could mount drives and write to them. I just recreated this on a second Mac. It’s the same issue. Proofpoint DLP is removed. The blueprint is installed. A PLIST was created at /private/var/db/ManagedConfigurationFil

I am having a separate issue but need to submit ticket. When I log into Jamf Account and try to click the “Contact Support” button, nothing happens. Is anyone else experiencing the same issue?

I’m trying to deploy a Mac App that was purchased through Apple School Manager VPP.When I go to Computers → Mac Apps → App Store and add the app from the App Store, I can find the app and click Add, but the page spins and never moves past for me to actually finish adding the app to my tenant. I’ve checked the VPP token and ensured everything is connected properly. This is not an issue when working in the Devices, only when adding apps from the app store for computers.

Hi,Could any one guide on how we can migrate data between two managed macOS devices and same for iOS devices?

We’ve been using a script that automatically downloads and installs the latest version of Google Chrome when we push a prestage policy to our Macs. This script no longer works on Tahoe. This is the error that shows up in the logs:Script result: Wed Jan 21 16:08:00 CST 2026: Create temporary directoryWed Jan 21 16:08:00 CST 2026: Download 'https://dl.google.com/chrome/mac/universal/stable/GGRO/googlechrome.dmg' Wed Jan 21 16:30:23 CST 2026: Check downloaded DMG hdiutil: attach failed - no mountable file systems find: : No such file or directoryI’d like to find out how I can update this script to work with Tahoe. Here’s the script we’re currently using:#!/bin/bash    bundle="Google Chrome.app"    tmp="/private/tmp/GoogleChrome"    echo "$(date): Create temporary directory"    mkdir -p "${tmp}"    echo "$(date): Download 'https://dl.google.com/chrome/mac/universal/stable/GGRO/googlechrome.dmg'"    curl -s -o  "${t

Is there a way to send alert messages to iPhones manage by JAMF. I can do it in Mac via policy using the JAMF helper. Is there a same method in doing this to iPhones? 

Hi! We finally upgraded Bomgar or BeyondTrust Remote Support to 24.3.2 to support Sequoia. The only issue I'm having is finding a way to allow standard users to toggle on, or allow applications in System Settings > Privacy & Security > Remote Desktop.I didn't see anything in the PPPC Utility tool and wasn't able to find anything in Jamf Pro under the Privacy Preferences Policy Control config settings.   Wasn't sure if it's possible to allow currently or not but thought I'd ask here.  

Follow this instructions :https://support.grammarly.com/hc/en-us/articles/8341875702413-How-to-deploy-Grammarly-for-Mac But still at Accessibility admin rights are required. Any idea what is wrong? thanks  

Hi, Is there an updated way to install Avast via JAMF? I have search previous post but it seems its a long time ago and its not working anymore as per the last replies. Advance thanks.

I’m not too familiar with Securly (was just given access to Securly Filter for testing), but during the pandemic (before my time) Securly was implemented when students took iPads home. This was when our school district had Jamf Pro. Pretty much all of our iPads (less than 70~ stragglers still in Pro) are in Jamf School now. I replicated what we had in Jamf Pro as a configuration profile. It was simple enough from Securly’s documentation/old Jamf Pro configuration profile. But when I test it, and I see the activity, I only see ‘email’ (in Securly) as the user and not the actual email of the user. I’ve tested this by having my email account, a random student email account, and no active owner as the owner on the iPad (by adding/removing in Jamf School iPad inventory). All just say email. I tried this with the serial number as the variable but that shows up with random letters in the user field. I was hoping at least the serial number would actually show up correct

Afternoon, Just got a reminder that i need to migrate to the new Self Service + does anyone know how to do it? Thanks

Hi Jamf Nation! 👋I'm excited to share an open source tool our team built: Jamf Docs MCP ServerWhat is it?An MCP (Model Context Protocol) server that gives AI assistants like Claude direct access to Jamf documentation from docs.jamf.com. Instead of copy-pasting documentation or switching between windows, you can ask your AI assistant questions and it will search and retrieve the official Jamf docs automatically.FeaturesSearch across all Jamf product documentation (Pro, School, Connect, Protect) Fetch full article content in Markdown format Browse documentation structure by product Built-in caching for faster responsesQuick Startnpx @get-technology-inc/jamf-docs-mcp-serverOr add to your Claude Desktop config:{ "mcpServers": { "jamf-doc

Hey everyone, Im suddenly running into an issue were I need all applications, both pushed by JAMF and others installed by the users, to have the option of “Scale to fit below built-in camera”. I could write a script to enable it for every app that we push but that is 1- not elegant and 2-wouldn’t hit any of the user installed apps.Does JAMF have a way to do this or has anyone been able to do something like this?  Thanks.

I couldnt find any clear answer about my question. For Self Service Classic, I set a custom install location (/Applications/Catalog.app).From what I read, once I enable Self Service+, the branding will carry over, but my custom install location won’t ? I’m planning to enable the “Use Self Service+ as the default end user application” option very soon, will it use my custom install location, or will it use a default one (/Applications/SelfService+.app) ? Thank you

FYI Just got this error on all my machines after editing a policy. jamf policy → Mon Dec 07 14:45:17 My MacBook Pro jamf[909]: Enforcing management framework... Mon Dec 07 14:45:18 My MacBook Pro jamf[909]: Enforcing scheduled tasks... Mon Dec 07 14:45:18 My MacBook Pro jamf[909]: Removing existing launchd task /Library/LaunchDaemons/com.jamfsoftware.task.1.plist... Mon Dec 07 14:45:18 My MacBook Pro jamf[909]: Adding launchd task com.jamfsoftware.task.1... Mon Dec 07 14:45:19 My MacBook Pro jamf[909]: Creating launch daemon... Mon Dec 07 14:45:19 My MacBook Pro jamf[909]: Creating launch agent... Mon Dec 07 14:45:19 My MacBook Pro jamf[954]: Informing the JSS about login for user schattc Mon Dec 07 14:45:21 My MacBook Pro jamf[954]: Informing the JSS about login for user schattc Mon Dec 07 14:45:21 Schatt's MacBook Pro jamf[966]: Checking for policies triggered by "recurring check-in"... Mon Dec 07 14:45:23 My MacBook Pro jamf[966]: There was an

My organization is new to Jamf, and in recent years we’ve started to provision macOS devices. My question is how have other Jamf admins been managing asset tags? Ideally, I would like to have some automated method for generating an asset tag or computer number and assigning it to the mac during the prestage enrollment process. I’ve seen documentation for scripts assigning tags during the initial setup of the mac, but I find it concerning how this is relying on the end user to manually type it in rather than just automatically changing the mac’s hostname to its assigned name from a CSV: GitHub - jamf/Mac-Asset-Tag: A script that generates a GUI to accept a user input asset tag for the Mac. Any ideas would be greatly appreciated!  

Hi all, we use Automated Device Enrollment with Apple Business Manager.Suddenly, device registration in Jamf stalls. After user login and MFA confirmation (Entra ID), a small notification window appears asking, “Do you want to allow downloads on ‘login.microsoftonline.com’?”No matter what we select here, the process then stalls at “Retrieving enrollment profile.”We have already checked ABM, Intune/Entra ID, and Jamf settings (token), and all syncs are running.Does anyone else have any idea what the cause might be here?

Because I tried configuring a static IP address on the iPad, then connected it to a different Wi-Fi network. When I reconnected to the original Wi-Fi, the configured IP address was completely gone and it reverted to automatic DHCP.

Hi all, I’m looking for a way to block or skip the “Update Mac Automatically” screen that appears during the Setup Assistant (screenshot attached). Is there a way to suppress or bypass this screen using a configuration profile? Any insight or guidance would be much appreciated! Thanks!

Because I tried configuring a static IP address on the iPad, then connected it to a different Wi-Fi network. When I reconnected to the original Wi-Fi, the configured IP address was completely gone and it reverted to automatic DHCP.

Does anyone know how to get these metrics through EA?

Not sure when this would have occured, but i have verified on several devices. We are pushing out a printer using jamf and if you go into the “printers and scanners” section of system settings control panel, it says “no printers”. However if you go into an application, you can see the printer there. I can also see it when i run lpstat -p. Nothing has changed with this printer, we have been deploying it for years. So much be a new osx update that caused this.      any ideas? Its a bit of an oddity that i found while trying to diagnose a separate print quality problem for a user. Then i found that multiple macs in our environment do this. Perhaps someone has seen i