Hi,I’m trying to use Network Access in Jamf Cloud to route traffic to M365 apps via the ZTNA network for IOS devices. I’ve added this as a separate Activation Profile on top of the Default Profile that covers different services. The users already had the Jamf Trust app on their phones for the previously enabled services. Those services didn’t require a login, since Jamf Pro is distributing Jamf Trust. With the additional profile I assumed that logging in was somehow made possible in the App, but there’s no option anywhere. Also, I don’t see that traffic is routed through the ZTNA network either (since I would expect traffic to come from a different IP). Last, if I look in device management in Jamf Cloud, the Network Access services is not active for the devices, so I wonder if the Activation Profile is even deployed, despite I’ve done that (I even tried to open the link on a phone manually).Any suggestions on what I might be missing or doing wrong? The documentation isn’t really giving

We’ve been testing Platform SSO with Microsoft Entra ID in a Password Authentication configuration, and found that we need to create a local account on the system first in System Settings > Users & Groups, before a user can log in with user@domain.com as their username, is that expected behavior? If that is what is required then we can work with that, but ideally once the system has the relevant configuration profiles installed I’d like anyone in Entra ID to be able to log in without any manual configuration. If I don’t manually create a local, standard account with the same username beforehand, the user just gets a dialogue box containing a yellow warning triangle with no other information and is then automatically logged out again. Or would I be better off with a Secure Enclave configuration? We have hundreds of staff 1:1 Macs (mostly MacBooks) and about 100 lab iMacs/Mac Studios. We are a big MS/Azure/Entra house, currently bind to AD (which we are desperate to come away from

Hello jamf nation, If the goal of the new Jamf Nation Rewards program is to generate more content, user numbers and traffic, then it would be cool if jamf also considered redesigning the forum page. There are no specific topic areas. I can only search or scroll down. If I have then scrolled down so far that I have to click on "load more", then open a post and click back again, I am back at the top of the homepage and have to go back to the bottom and click on "load more". The only way to avoid this is to open a post in a new tab. Are there any thoughts on this?l @Mitchell_Gordon  Cheers

is there any way to create an extension attribute that will contain audit of usb devices (storage) connected e.g. in the last month?

We have been using this profile to automatically connect to the corporate SSID. However, two days ago, I encountered an issue when I attempted to re-push the profile to a device—it failed to install.   Upon investigating the profile, I noticed an "Options" error that appears when the SCEP payload is selected. However, no specific errors are shown in the payload settings themselves. I tried to create a new profile but still error is there   Could you please assist in identifying and resolving the issue?    

Does anyone noticed LDAP attributes for Okta is changed from city to l or o?From today morning, I saw this changes on my environment. With city key word, its not pulled data from Okta to Jamf.

I am starting to test JAMF Pro with Entra as the cloud identity provider for an iPad rollout. I am not the entra manager but it seems that a newly created student must change their password on first login.But when that first login is the Remote management enrolment page, their temp password doesn’t work.We don’t use JAMF Connect. Is this a known issue?

Hi Jamf Nation, While we passed a custom URL from google drive to fetch icon for the setup manager, it appears to be broken. Point to be noted, we didn't do any icon package deployment. We just passed the google drive link to fetch the icon in configuration profile under Application & Custom Settings>Jamf Applications>Icon Source Any idea what I am missing here?  Thanks

When Mac users rapport issues, you always have to remove/walk to the user and typically the first you do is check log files As far I remember during Jamf training, there is an option to get log files uploaded into the jamf backend in attachement ?. But cannot remember the details on this - but is there a way to do this?

I'm new to Jamf Protect. At some point I thought I heard it can house logs, but everything I'm reading says it needs a SIEM. Can anyone clarify?

I have enabled path management notification for Google Chrome update, Today I received below notification from Jamf Pro but when I checked in Google there is no information about the mentioned version. Is this is false alert from Jamf Pro?   Updates for Google Chrome are available.Title: Google ChromeVersion: 137.0.7151.121Publisher: Google

An org’s network requires non-personal devices (think digital signage, inventory scanners, etc...) to be bound to a set network using MAC address.  That then requires “Private Wi-Fi Address” to be disabled on all the iOS devices otherwise the device MAC does not match up to the registered MAC.For these type devices, I have a config set to disable “Private Wi-Fi Address” but that only comes through AFTER the device is enrolled (and gets internet access of course).  With a random MAC, the device cannot do the initial out of box activation and eventually times out.  I can get around all of that with a USB ethernet dongle, which allows the device to get online, enroll, get wifi config settings etc... but that is time consuming.Does anyone know of a way to disable the private wi-fi address setting when you first connect a device to wifi out of the box?I have tried backing out on the setup screen and holding the wifi name in question to try and bring up options, but so far no

I'm trying to add a video to a customize enrollment. It's a video we are storing in a S3 bucket on AWS. When I try to embed it the video doesn't show. Everything I look about this is about Youtube videos but we don't particularly want to host a video on Youtube.

There's plenty of posts regarding disabling AirPlay Receiver, but we actually want to ENABLE it. Our previous AirPlay solution, AirServer, is not being properly maintained by the dev, doesn't play nice on our network, and we have just about given up on it. I tried reversing @ljcacioppo 's solution for disabling the setting here, but when set to true, it doesn't toggle the setting on; it only allows the user to enable it. This is on Seqouia 15.5. Ideally, we would like the following things set via profile: AirPlay Receiver set to ON Allow AirPlay for Anyone on the Same Network Require password set to OFF (the user must click a popup to allow the connection so this is fine) Does anyone have a working solution for this?

We use ClassLink Single Sign On to manage certain apps on our iOS devices. At first launch, you need to choose the correct school district which can get a little confusing. I was wondering if there was a way using the App Configuration setting to specify the exact URL to open upon launching ClassLink.

I'm transitioning us from Jamf Pro to Jamf School. It can't happen like a flipping a light switch so I have to deal with small amount of lingering devices still in use in Jamf Pro into the coming school year (I have all our student devices but not teacher devices). In Jamf Pro we currently have 8 different Sites each setup with their own content tokens that match our locations in Apple School Manager. As we make the transition I can't completely remove every single license from Jamf Pro's tokens, so in setting up Jamf School I'm wondering.... Should I create this same structure with new locations and new content tokens to transfer the bulk of the licenses to in Apple School Manager for the new Jamf School instance, since I can't clean house and use the existing token? Downsides? Is that what Jamf School expects or is it more tuned to one large pool of apps from one content token even when using multiple locations with Jamf School ("sites"). I suspect creating this parallel world is t

Hello all,Just come to reimage my first computer lab of the year.Figured 'this lab now has M4 Mac mini's in it... that means I can use the Wipe Computer MDM command', as this is essentially doing an 'Erase all content and settings' - something I have previously done manually.8 of the devices wiped, reactivated, then started up just fine.The other 12 have SOS orange blinking lights on the front - apparently in DFU mode because something broke.I don't normally have to do this DFU business, so I'm connecting a USBC, loading Apple Configurator 2... and I'm going through the motions.After downloading and attempting to install, it failed presumably because my Macbook is on Sonoma, and it wants to be on Sequioa - now waiting for macOS to update.What a hassle! Is this a known bug?Hard to imagine I messed something up here. Ya press a button, enter a code... device wipes itself.Anyone been in this situation care to mutually vent frustration with me on the forums?

This ERB Secure Browser app require Screen Time permission. Our students are standard account. Is there a way to allow Screen Time or any ways to solve it?

Historically, after your jamf pro sign-in timed out, when you returned to the login page, it would sign you in automatically. With the new jamf admin sso integration, every login attempt requires you to type your full email. it only takes a few seconds, but when I have to do it 6 or 7 times a day, it starts to add up. 

Hi to all i've followed instruction on this link https://www.jamf.com/blog/help-users-activate-microsoft-office-365-and-configure-outlook-in-one-click/ to activate office 365 versione 16.94 on mac but office apps are not signed and when i open outlook the account has not be setted. In profile setting on the mac the parameter $email has been setted correctly with the email address settted on jamf inventory. There is something wrong? Thanks for your help

say i have 10 configuration profiles and 2 of them happen to have ENERGY SAVER settings. Names of the 2  config profiles with energy saver settings are below.  Which one of them gets their settings applied to the mac laptop? Gaming Energy Saver. (Battery: sleep 30, display sleep 30)                                      (Adapter: sleep 30, display sleep 1 hour)                                        Action Energy Saver. (Battery: sleep 15, display sleep 10)                                   (Adapter: sleep 15, display sleep 10)

Recently whenever i try to install displaylink manager via Installomator i run into this problem where it always fails at the package verification. Every other Installomator installation works perfectly fine only displaylink manager doesnt.Here is the output of Jamf:ERROR : displaylinkmanager : ERROR: Error verifying DisplayLink Manager.pkg error: DisplayLink Manager.pkg: rejected source=no usable signature 2025-06-16 10:07:02 : REQ : displaylinkmanager : ################## End Installomator, exit code 4Is there a problem with displaylink manager or is it a problem with me?

Hello! I am looking to disable the first "transfer your data" prompt before the enrollment screen on macOS. (Seqouia) When I wiped my device from JAMF PRO management portal after upgrading to Seqouia, I noticed BEFORE the enrollment screen, a "Migration Assistant" - "Transfer your data" prompt.  How can I disable this prompt before enrollment?  I have PreStage options disabled to NOT show transfer wizard (pictured) - confirmed the device is getting the proper prestage profile. And when enrollment pops up, and I finally enroll, I can confirm the migration assistant\\Transfer your data does not prompt.   

Hey everyone! 👋 I wanted to share a project I’ve been working on, now available on GitHub:🔐 Jamf Automatic Admin Password Generator This script is designed to securely rotate the password of a local admin account on macOS devices managed by Jamf Pro. It handles everything from password generation to encryption and inventory reporting, making it ideal for IT admins looking to improve endpoint security without manual effort. ✨ Key Features: Generates strong passwords using two random words + creative suffix Applies leet-style substitutions for complexity Mixed casing and ensures minimum 20-character length Updates the local admin password securely Encrypts the password using AES-256-CBC Saves encrypted password to:/private/var/tmp/encrypted_localadmin_password.txt Triggers jamf recon for inventory update in Jamf Pro 🛠️️ Configuration Highlights: adminUser: The local account to rotate (default: admin) encryptionKey: Your custom AES

(Not Jamf Pro specific but I figure this is the most appropriate channel) If you've been using Microsoft AutoUpdate (MAU) to manage updates to Office for Mac you might have noticed that your Office apps have been stuck on the October 2023 Office 16.78 release (the last release to support an Office 2019 license). This appears to be due MAU's license detection mechanism failing to properly detect a Microsoft 365 Subscription license since MAU 4.65 released in November 2023. If you aren't seeing the post 16.78 Office releases, and your users have Microsoft 365 Subscription licenses, deploy a Configuration Profile with an Application & Custom Settings payload for the com.microsoft.autoupdate2 preferences domain and the .plist:   <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>AppCustomPref</key> <dict&gt