We had KFM enabled for our users, but since a couple of months the KFM doesn't seem to work anymore. We did a lot of troubleshooting, changing the plist, using a JSON file, using another JSON, changing from user to computer level but nothing seems to work.To troubleshoot the whole OneDrive issue, we are now trying to get the wizard for KFM to pop up. But even this isn't working anymore :(.Our last configuration file was created with iMazing which looks like this: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadContent</key> <array> <dict> <key>DisableHydrationToast</key> <false/> <key>DisablePersonalSync</key> <false/> <key>DisableTutorial</key> <true/> <key>EnableAddAccounts</key> <true/> <key>Enab

Jamf Connect in Entra Enterprise App the role has stopped working for Users (Standard User/Administrator), can someone help me look into this issue?

Hi everyone, I am new to Jamf and I am loving it so far. I am creating a managed local administrator account through the User-initiated enrollment settings and that is fine (already created a config profile for the rotation of the passwords). The problem that I am having is that in the prestage enrollment the users are assigned to be local administrators automatically and right now (from what I learned) the only way to make them standard user is to tick the options to create a local admin account in the prestage settings, but this will create 2 admins once the user is enrolled.    I am sure I am missing something, any suggestions?  

Our organization recently deployed Jamf pro to help us manage our Mac's and while for the most part theres been very few issues I haven't been able to fix myself there is one that has been plaguing us pretty badly. The Mac's enrolled in Jamf either through prestage or open enrollment do not have access to most of the accessibility options are not available for either the Admin or Standard users.                                                      Now being fairly new to Jamf and to Mac's in general im a bit lost as to what could possibly be doing this. Ive done some reading about the authorization Db and some of the plists but I am having a hard time finding anything specific to this section of the system settings. A few things that I have checked is within the restrictions section within Configuration profiles and made sure that the pane was e

Hey All...just finished what I call the "JAMF System Admin Tools"...this SwiftDialog based app will backup your SS icons, System Scripts, Computer EAs, Make VCF cards from your email addresses, show (& clear) failed MDM commands and backup your configuration profiles! Been working on this for a while, and I think it is ready for the masses. I will be added more features and tweaking the logging in the next few weeks. Let me know if you run into any issue or any feedback you want to give!   (I combined my failed MDM commands, SS Backup and VCF Cards standalone apps into one).  More coming soon... The following items are available to be backed up: Self Service Icons - Great to have a back when JAMF starts showing generic icons in Self Service. Failed MDM Commands - Export systems that have failed MDM commands so you can review them and optionally clear the failures System Scripts - Everything that is stored in Settings > Scripts Computer Extension Attributes - Export al

Hi All,   can someone let me know if how get local admin and Standard user working again with Jamf Connect?   Thanks in Advances

Best way to push contact list to iPhones Did a search here in JAMF Nation, not really much there... -A CardDav Server?-or a group email with a vCard file to import into Contacts app- Is there something that can be setup in Config Profile- iOS Outlook is the app we would be using and there seems no Config Profile for Outlook? the simpler the better.... thx in advance, John K

Hello! We're starting to use the new Self Service URL format for staff communication.Policies take the following URL format:jamfselfservice://content?entity=policy&id=792&action=view Due to Google Mail's stripping of application-specific hyperlinks, we have to create a PHP redirect that identifies the requested entity, id and action, then constructs the Self Service query. This works great! Now we'd like to create URLs that open Self Service and point to Library categories instead of specific Policies; is anyone aware of the format these links would use? I'd assume it's something along the lines of:jamfselfservice://content?entity=category&id=1 ... but obviously it's not that, and I couldn't find any documentation referencing the possible entity names. Thank you!

As you may know, macOS devices can break in numerous ways and stop behaving as expected in JAMF. Many of these scenarios have been fixed now that JAMF considers the device managed even without a management account. However, there's one covert issue that I've noticed recently that I'd like some help on both detecting and fixing, in some automated way.First, what's the problem? Well, difficult to say, but it manifests itself in the following way:When an MDM command is issued to the device, the command fails with the following reason:"The device token is not active for the specified topic."My assumption at this point is that the MDM profile on the client is somehow broken as this isn't a general problem. But anyway, is there some way we can detect these devices in bulk somehow? By search? By data in the JAMF DB? Or by looking for error messages in the jamf pro server logs?Now, once a method to identify affected devices has been found, how can this be remedied? Note that the JAMF agent is

Trying to push macOS 15 to a MacBook Air and am receiving the following error:UnableToFindUpdatesAndOutOfRetriesI was able to push macOS 15 to a MacBook Pro via Jamf Pro without any issues. Is there not an install package for macOS 15 for a MacBook Air at this time?

Hi everyone, Does anyone know how to automatically set Microsoft Outlook and Microsoft Edge as the default apps on iOS? I've been researching this, and from what I’ve found, it seems the user needs to open the apps at least once and manually set them as default. Is that correct? Any input or workaround would be greatly appreciated! Thanks in advance.

Hello - I am configuring Chrome to use kerberos to single sign on to my workplace home page but it isn't working.We do not want to use MCX due to previous issues using them in our environment. I have set the whitelist domains using:sudo defaults write /Library/Preferences/com.google.Chrome.plist AuthNegotiateDelegateWhitelist '.domain.intra'sudo defaults write /Library/Preferences/com.google.Chrome.plist AuthServerWhitelist '.domain.intra' However loading the homepage still requests credentials. In Firefox, everything works fine once I set the domains. Any idea why it doesn't work? Am I missing a setting? Ive tried forcing certain authentications too but then the page will not load at all. Thanks for any help..

We run a AD bound server 2012 print server running paper cut and mobility print, and we have a mix of jamf connect, and AD bound devices, but presently only trying to resolve this matter for our Jamf Connect clients.   we have had to put up with regular auth requests for printing, issues mostly associated to the end user changing the password, and the macOS not re-prompting to enter the new password.my solution to fix this, had been to attempt to make Keberos auto negotiate to work for printing, but so far my attempts have been in vain.before I push forward further to try and identify the issue, I was hoping to know if others using Jamf Connect, have been able to make Keberos auto negotiate work for mobility print paper cut air print servers?

i have problem don't see the link for download jamf testing

Hi, I heard the news High Sierra's out (Yay!) But when I go to Apple's App Store, search for High Sierra and then download, it only downloads a 19.9Mb file. Where can I download the full version? I searched developer.apple.com as well. I want a stand alone installer (and create a bootable USB from it) so I can easily and quickly test out multiple Macbooks with this new OS. Is there anywhere can download the full installer?

Hello, I'm trying to include the Cloudflare WARP client install during the onboarding setup on our Macs. The issue is that once it installs it auto launches the menu bar app and a browser sign in page. I would prefer if these two actions didn't launch automatically, and we would instruct the user to login after the onboarding setup. Currently, we are just instructing users to install the app in Self Service after the onboarding process finished. Anyway to prevent Cloudflare from auto launching after installing or maybe a script to minimize the windows after it installs? Thanks

I am trying to change a computer's name by editing it in the computer's Jamf Pro inventory > General page. I have a policy to change all of my managed computers' names to match the names set in Jamf, so theoretically this name change should be pushed out to the machine after I updated it in Jamf. This is an iMac running MacOS14.4.1. But when I change the name on this machine and save it, the page reverts back to the default "iMac" name. I've done this hundreds of times and have never had an issue getting a name change to stick in the Jamf Pro inventory. Has anyone else seen this issue? 

Hi First post. We have a reading app the the children have found a back door to getting to google. Is it possible to block redirects from an app to google? Safari is not allowed but certain apps open in safari which is fine.   Hope this makes sense

I’m doing some testing with the SelfService+ app. For example, where can I configure the items highlighted in green? (See example screenshot.) Or are these settings not available yet — am I too early? Also at Account Management are there more options to show?   thanks

Is there any way to auto assign, or default template configure apps using a specific location for app purchases?   Let me give you the story and maybe you have a better approach:Department has a set of shared devices. They would like a way of managing and deploying apps to themselves automatically and they are not technical people.   Here is the approach that I was thinking. Manager logs into ABM, purchases required app for their location. That location vpp code has a template. The template sets the vpp distribution, scope, and install configuration. Is this possible or would I have to set this up myself as an automation on my side with api's?

Another script that grew out of necessity.  Apparently we don't have a global DL for all of the Mac users, so I had to extract all the emails from my JAMF server.  I know that there are utlities to export email addresses, but they export in XML format...I wanted something to export into the VCF file so it can be imported into Contacts, Outlook, etc. Script repo:  https://github.com/ScottEKendall/JAMF-Pro-Scripts/tree/main/BackupJAMFEmailAddress

Hello !I just noticed that for the iPads we recently bought that at the remote management step, I have the "Enroll this iPad" as usually but on some iPads, I have one more button named "Remove iPad from Organization". What is it about ?If it allows the iPad to be removed from Jamf and / or Apple Business Manager, I don't want it. I search about it but didn't find any usefull information. I would like to try to tap on it but I don't want to do something irreversible.Could someone give me informations about this and how to make this button disappear like on other iPads I have ?

Was having some trouble with our instance. Turns out it was multifaceted-part my org, and part a Jamf thing (apparently). Upgrade to 11.17 seems to have rectified things on the Jamf side.To that end I was trying to figure out how to script DDM sync, and seem to have gotten it sorted: #!/bin/bash JSS_URL="https://[your_jss_urll_here]"API_USER=""API_PASS="" log() {echo "[$(date '+%Y-%m-%d %H:%M:%S')] $1" >&2} fail_exit() {log "❌ ERROR: $1"exit 1} get_token() {log "🔐 Requesting Jamf Pro API token..."auth_response=$(curl --silent --request POST \\--url "$JSS_URL/api/v1/auth/token" \\--user "$API_USER:$API_PASS") token=$(echo "$auth_response" | jq -r '.token // empty')if [[ -z "$token" ]]; thenecho "$auth_response" > /tmp/jamf_token_error.jsonfail_exit "Unable to extract token. Response saved to /tmp/jamf_token_error.json"fiecho "$token"} get_all_ids() {local token="$1"local page=0local page_size=100local all_ids=() while true; dolog "📦 Fetching computer ID

Hello everyone, I am reaching out to ask if others have encountered the following issue with managed iPads in a Jamf School environment: Our student devices switch between a school profile during lesson hours and a standard profile outside of those hours (private usage). After the profile reverts from the school configuration back to the standard one, we have observed that either the Screen Time settings (such as app limits and downtime) are reset or the Home Screen layout is restored to default—sometimes both. Notably, these issues do not always occur together; on some devices only one of the two problems appears, while on others both are present. This situation is causing considerable inconvenience for our users and undermines a reliable device experience. I would like to ask: Has anyone else experienced similar issues? Are there recommended configurations or workarounds to prevent Screen Time settings and Home Screen layouts from being reset when switching profiles? Is there a

Hi,   I'm use the Patch management to manage updates for Firefox ESR. The current Patch Management definition is handling both 115.x & 128.x. I am using the report to create a smart group to handle the updates via a Installomator policy to install Firefox ESR which is the 128.x version. The Patch Management report is reporting 115.x as the latest version ignoring the 128.x as part of the definition. Is there a way to modify the report so that people can choose the version they are looking for? I know that if 128.x updates next it will be the latest version as the definition goes by the release date of either 115.x or 128.x. This is causing annoyances in my user base as update is running daily in some cases. Is there anything that can be done? Thanks,