Apple Classroom on Teacher Macs in Jamf School - Possible without Managed Apple IDs?We're migrating from Jamf Pro to Jamf School. Previously had Apple Classroom working with Macs and iPads via ASM roster syncing from our SIS—no Managed Apple IDs needed.Current status in Jamf School:✅ Apple Classroom works on teacher iPads and student iPads ✅ Jamf Teacher app works on teacher Macs (shows rostered classes) ❌ Apple Classroom on teacher Macs won't load rostered classesTeacher Macs aren't receiving the Education Profile despite fresh enrollments. I suspect it's related to MDM-capable users, but can't confirm. Class data is clearly flowing (iPads get it, Jamf Teacher gets it), so it seems like a device-specific enrollment issue.Is Apple Classroom on teacher Macs possible in Jamf School without Managed Apple IDs?The solution seems tantalizing close based a on a checkbox still available in Jamf School -

Hi guys. I need to configure VPN via the macOS VP client. Each user has a unique VPN login, can anyone assist me with a script or something which will allow zero-touch config of a devices VPN details - user/password/shared secret etc. Never done this before, so any support you can offer is very much appreciated, thanks. Devices are DEP enrolled and in Jamf Pro.

Hello Is anyone doing ipad compliance everything is working great nearly.The self service process to register device in Entra.  - All goodThem been mark as compliant - All good.We are struggling with these keys which when pushed with an app should stop app protection from applying. But where still seeing the prompts for it. <!-- Intune MAM Integration -->      <key>IntuneMAMUPN</key>      <string>$EMAIL</string>Has anyone else come accross this? ThanksTom

Now that ASM (finally) has warranty information, what is the possibility that JAMF will be able to read that information and populate the Warranty fields in JAMF Pro?

So I’ve started seeing an issue with macOS 26.1 trying to set up new machines.The enrollment customization is not passing the user info from the SAML token, which is a known issue but usually sending the workaround profile that sets those attributes works fine. Here is the payload:<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0">    <dict>        <key>EnrollmentRealName</key>            <string>$REALNAME</string>        <key>EnrollmentUserName</key>            <string>$USERNAME</string>    </dict></plist>it’s not working now, I’m not even seeing the computer’s username change in Jamf Pro after signing in through the enrollment customization

Hi there,I'm not sure if this functionality exists for MacOS, but it does for Chromebooks, and it's pretty amazing, so we'd like to leverage it for our iMac labs at the very least, and if it works there maybe go org-wide with it. The problem is I'm not sure what method to attack this problem with.Currently our iMacs (like the rest of our Apple computers) are AD bound. Users log in with a mobile account, and use Enterprise Connect for password management.I know that Macs support Kerb/SSO authentication, and also that Google's SecureLDAP can work for macOS as well, but what I really want is for the login screen to show me a Classlink login page so users can sign in with a QR code badge.Since our Google accounts use Classlink as their IDP and show the splash page when you try to log into them via web browser, I started going down the rabbit hole of getting a test machine bound to Google Secure LDAP, thinking it might spawn a splash page for Classlink login.

We've had an issue twice in the last 2 months, where our wifi configuration profile that installs our certs fails to install. We get the following error "Install Configuration Profile Prod Wi-Fi Unable to decrypt encrypted profile" when desktop enrolls a mac. Everything else installs correctly with no issues. When we originally had this issue back in August, we had to add the new jamf IP's to the firewall and it that fixed it. We worked with out networking guys yeserday and they couldn't see anythin. The issue only last a day and it goes back to working.  It broke on 11/19 9:30a and started working on 11/20 6a. Very weird issue. I opened a ticket with jamf.

I have a problem in the selfservice-app. I cant delete the notifications of failed installations. Note as read doesnt do anything, too. https://ibb.co/ChknWR1

Hi,we are using the erase-install tool from github to upgrade our Macs (I guess the Jamf mass action feature is still not working proper?) and facing the issue, that the pop up to enter the local mac user credentials are in another keyboard layout than the system has. I could not find anything on github or here where this was discussed. Any ideas?  Thanks already

Hi Everyone I'm getting "Locate Hardware Information" stuck on one macbook air M4 laptop whilst tring to execute sudo jamf recon, i followed the steps and instructions found on https://community.jamf.com/t5/jamf-pro/jamf-recon-stalls-at-locate-hardware-information/td-p/315285 and https://community.jamf.com/t5/jamf-pro/recon-hangs-on-locating-hardware-information/m-p/284704 but when we execute the "sudo launchctl kickstart -k system/com.apple.softwareupdated" it fails with the error "Could not kickstart service "com.apple.softwareupdated": 150: Operation not permitted while System Integrity Protection is engaged". We then tried deleting the /Library/Preferences/com.apple.SoftwareUpda

I am trying to create a Applications Usage Reports specially for Adobe App, I have tried:To create a usage report for a group of computers based on applications, you'll need to follow these steps:First, ensure Application Usage collection is enabled:Go to Settings > Computer management > Inventory collection Click Edit, then the Software tab > Applications Select "Collect Application Usage Information" checkboxNext, create a Smart Group for your computers:Navigate to Computers > Smart Computer Groups > New Add criteria using Application Title and optionally Application Version Configure operators and values to define your groupFinally, generate the report:Go to Computers > Search Inventory Create or select an advanced computer search with your criteria Click the Reports tab Sele

Hello Jamf Community, I'm currently experiencing an issue with Jamf Remote Assist — I haven't been able to successfully connect to any Mac devices for the past two weeks. Each attempt either times out or fails with no clear error message. I've tried the following so far: Confirmed that Remote Assist is enabled in Settings. Restarted Jamf Daemon and the local Jamf app on the affected Mac. Verified network/firewall configurations (no changes recently). Tested on both Intel and Apple Silicon Macs with the same result.

I'm trying to setup a Custom Menubar Icon for Jamf Connect by following the instructions here:https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/Menu_Bar_App_Preferences.htmlI created a 16x16 png file and saved it as /user/local/icon.png Then I added these lines to the Profile, <key>MenubarIcon</key <string>/usr/local/icon.png</string> I quit Jamf Connect and when it relaunches, I just get a white square where the icon should be. The details of the image are not there. So it is trying to display it, but it just can't parse the file? When I click on About Jamf Connect, it also displays a small white square where the icon should be. I made sure the file had 755 permissions on it.  Is there a particular DPI or color pallet I need to set on the image? Is there something I

Hi everyone,I’ve recently started working in an environment using Okta for authentication with Jamf Connect deployed, and we also use Self Service+. At this moment we haven’t approved macOS 26.1 for all users yet, but a few people upgraded on their own and experienced the issue described in the Jamf Connect release notes:[PI143263, PI144134] Fixed:Jamf Connect presents a one-time prompt on computers running macOS Tahoe 26.1 beta, both on the login window and on the desktop:“Self Service+ wants to use your confidential information stored in “Jamf Connect” in your keychain.”Source: https://learn.jamf.com/en-US/bundle/jamf-connect-release-notes/page/Jamf_Connect_macOS_Release_Notes.htmlWhile investigating, I found that the affected u

Hello everyone, I come in search of a glimmer of hope.I am trying to use BeyondCorp Enterprise to enroll iPads on Jamf and be able to use G Suite with users under an advanced OU (Organizational Unit).Now, among the needs declared by Jamf, there is "Basic iOS mobile management enabled for your organization's Google integration."Has any of you ever managed this with the settings set to "advanced"? I fear it might not be feasible.

Hi everyone,I’m running into an issue trying to upgrade Jamf Connect across our environment and hoping someone from Jamf or the community has seen this before.Until recently, I was able to update Jamf Connect using the dropdown underSettings → Jamf Apps → Jamf Connect → Deployment and Update Settings.That list used to automatically show each new version as Jamf released it (for example, 2.44 → 2.45).Now the dropdown has stopped updating — it’s capped at 2.45.1, even though 3.4.0 has been released publicly for several weeks.I’ve tried to manually handle the upgrade:• Downloaded JamfConnectLogin.pkg (3.4.0) from account.jamf.com.• Uploaded it into Jamf Pro (Cloud Distribution Point).• Created a policy to deploy it to test devices an

Hello,we applied a FileVault policy, and it worked on every MacBook except one. We’re not receiving the FileVault key from that device, and the user keeps getting the policy pushed repeatedly.I also made the policy available in Self Service, but even from there it doesn’t work.What could be causing this issue?

Hi there, I cant find any documentation on this but is there any possibility of hosting documentation/videos in custom categories in self service? Other than having to script a download of documentation to home screen. 

Hey Everyone, I have been battling this issue for quite some time and have done rigorous testing but have sincerely hit a wall with this issue. My organization is prepping to remove Administrator access from all users on our macOS systems, this requires them all to be converted to a Standard user. (We have a "MakeMeAnAdmin" script in place in JSS we plan to utilize) MacOS: 14.3.1Jamf Connect: 2.32.0 We use Jamf Connect with Azure/EntraID so users can authenticate on login, we have the app roles setup for the app registration in Azure with two groups, MacUserAdmin-Entra & MacUserStandard-Entra with the correct roles tied to each (Administrator & Standard) The Problem:Whenever a user is moved into the group tied to the STANDARD role in Azure and attempts to login to Jamf Connect on one of our Macs they can enter the O365 email, PW, verify 2FA, but then hit a "Yellow Exclamation Point" box

When binding Macs to our domain we will import a computer cert so that the users Mac will be able to connect to our VPN and enterprise connect (can't do so without this cert). I have a user who is having this cert get auto removed from keychain and thus making him unable to connect to internal resources when working remotely. The cert that we import comes from our CA and is verified upon being imported.My question is, is there a way I can look and see how/why this cert was removed?

Hello,I have multi-user workstations on which I do not have FileVault activated so as not to have a problem when connecting a new user with Jamf Connect. Unfortunately, the TAHOE update automatically activates FileVault and suddenly at the start of the station an account is requested that can activate FileVault before having the Jamf Connect window. How can we get around the problem or how can TAHOE not activate FileVault?

Performing a phased rollout of JamfConnect 3.5 and SelfService+ Don’t want to make SelfService+ the default but I do want to uninstall SelfService Classic to avoid confusion for the end user..  What is the best way to do this?

With quality-of-life improvements for both end-users and Mac Admins alike, version 1.4.0 is what version 1.0.0 should have been from the start A fresh update to Mac Admins’ new favorite, MDM-agnostic, “set-it-and-forget-it” end-user messaging for Apple’s Declarative Device Management-enforced macOS update deadlineshttps://snelson.us/ddm 

Hello all, I know there have been a couple of topics around this already but I can't seem to find a solid solution for this. We are a university and have both user assigned and public apple computers and laptops. I would like todo one of the following:1. Prevent users from login into their personal apple ID's and lock the devices to only use our ITS apple ID (make sure they can not log out of it).2. Simply block the ability to sign into any apple ID.3. Force sign out users already signed into their personal apple ID's. I have tried to set this up using a configuration profile under Restrictions > Preferences but this does not work (once the profile is applied the section is still visible). I also don't like the restrictions method as this includes many other options I don't want to use (in Applications, Widgets, Media, ect).We are using Jamf PRO and Apple School Manager. Thanks!

We use Jamf Pro Cloud with Jamf Connect (for account creation + Entra ID password sync).After enabling “Use Self Service+ as the default end user app” in settings:Old Self Service was upgraded to Self Service+ on existing Macs Jamf Connect was removed, menu bar now has Self Service+ icon instead On new enrollments, we install Jamf Connect 2.45.1 → now it’s there alongside Self Service+I can’t find clear docs on this — so:Questions:Is Self Service+ intended to replace Jamf Connect completely? If yes, should we skip installing Jamf Connect post‑enrollment? Or should we move to Jamf Connect 3.x? Any official migration guide for 2.x → 3.x with Self Service+?Any experience or official Jamf resources appreciated.