The devices that I am managing Shows as MacOS 15.3.1 and shows as up to date. I don't have any restrictions on MacOS update. somehow users are unable to see any new MacOS update? When I try pushing the update through Software update, it's failing. possible it's because these devices were user enrolled. I am trying to  get a MacOS 15.5 Pkg and make users download from Self service and update.  How to get the latest Pkg or any script that i can use. It's been 2 days of me trying all sorts of scripts and nothing works.  Thanks in advance

Hi, my institution is changing its policy so that private iCloud accounts will no longer be allowed on work devices. Is there a way to just log out all iCloud accounts on Macs automatically? Thanks in advance.

Hello everyone,   I've encountered an issue where some employees in our organization receive this notification on their MacBooks:     We are looking for a way to disable these notifications across multiple devices using Jamf Pro. Has anyone else faced this issue or found a solution to manage or suppress these alerts through Jamf Pro configurations? Any guidance or advice would be greatly appreciated. Thank you!

I have recently secured some unused iPads in our environment previously enrolled in JamfNow and wondering if it is worth enrolling them in JamfPro or just getting new devices (9th Gen or newer). Does anyone know when support or ADE will not be available for 5th and 6th generation iPads with JamfPro? Thanks!

Hi, is there a way to block the iCloud login on Mac? My users are not allowed to log into their apple account with their work Macs, so I want to block the access completely. Thanks!

If anyone runs into this when trying to install the Nessus Agent with Jamf Pro: Installation failed. The installer reported: installer: Package name is Tenable Nessus Agent installer: Certificate used to sign package is not trusted. Use --allow Untrusted to overwrite. I have a fix. Thanks to Bartłomiej Sojka for pointing out that it's a hard link, and suggesting the solution. It’s the package downloaded directly from the vendor https://www.tenable.com/downloads/nessus-agents, in the section Nessus Agents - 7.4.3, NessusAgent-7.4.3.dmg I think the visible package in the disk image is actually a hard link to a hidden package in the disk image, named .NessusAgent.pkg. I have no idea why. Here is me using “ls -la” to get a long listing of all the files, even hidden files, in the disk image: MacBookPro:Nessus Agent Install ladmin$ ls -la total 28120 drwxr-xr-x 5 ladmin staff 238 Sep 10 16:11 . drwxr-xr-x+ 4 root wheel 128 Oct 31 19:55 .. -rw-r--r-- 1 ladmin staff

How can I disable the Help Apple Improve Search Item in the Spotlight Section of the System Settings?I can't find anything in Configuration Profiles and didn't find something related in com.apple.Spotlight.plist in /Library/Preferences/ or ~/Library/Preferences/.

I made two polices based on this posting:https://www.jamf.com/blog/reinstall-a-clean-macos-with-one-button/I've been able to get them to work a few times by purging the logs and waiting until check-in but since yesterday they don't seem to be functioning anymore and I'm trying to figure out why. The machine in question is online (and located about a foot from me) and while it does have Big Sur on it these policies have previously worked to download, wipe and reinstall Big Sur and then start the enrollment process. I've set the scope to specifically this one test machine as I previously have done but the logs don't show any changes. I was wondering if anyone has any ideas. I'd like to be able to re-apply these policies when needed without any issues. 

Hi everyone, I'm deploying the Global Secure Access (GSA) client on macOS using Jamf, following the official Microsoft documentation:https://learn.microsoft.com/en-us/entra/global-secure-access/how-to-install-macos-client The installation completes successfully, but on first launch, users are still prompted with the message:"Global Secure Access Client would like to add proxy configurations." Does anyone know how to pre-approve or automatically allow this proxy configuration request via a configuration profile or PPPC/extension setting? Thanks in advance!

Hello people my name is Sanjeev Mansotra from Dubai. I'm new to this community, please help to solve my query. How can Jamf Safe Internet be integrated with existing school networks to ensure compliance with both local data protection regulations (such as GDPR or CIPA) and institutional cybersecurity protocols, while maintaining seamless network performance and minimal latency for students accessing educational resources across a multi-campus setup? Additionally, what strategies can be employed to monitor and enforce safe internet usage without infringing on user privacy, and how can Jamf's threat detection capabilities be customized to address institution-specific vulnerabilities and emerging threats?

Jamf Team, thank you for all-new Jamf Nation portal! It looks great and modern! First question I have - where are 3rd party products, versions tracking? Dropped? IMO it was useful 

Hello,   Experiencing a strange issue and was wondering if the community have seen this before. We run our users as Standard users, no admin access. We use a script to enable certain permissions, including printer management and wifi management. On a standard user account on a 2020 macbook pro, having run the following terminal commands as part of a script: /usr/bin/security authorizationdb write system.preferences.network allow /usr/bin/security authorizationdb write system.services.systemconfiguration.network allow /usr/bin/security authorizationdb write com.apple.wifi allow I am now able to "Forget" SSIDs, but it still prompts me for administrator username and password. Weirdly, you can see that it forgets the network regardless of whether I hit Cancel or put in local admin creds. Is this just a weird glitch that we'll have to deal with telling users "Just hit cancel", or is there something else I can do to fix this?

Hi, Does anyone know if it is possible to increase the 'nettimeout=1' argument that Jamf Connect passes to ldapsearch after performing kerberos authentication to return user LDAP attributes? This is the full command built by Jamf Connect: /usr/bin/ldapsearch -N -Q -LLL -o nettimeout=1 -o ldif-wrap=no -H ldap://dc2.realm-name.net -b DC=realm-name,DC=net sAMAccountName=shortname pwdLastSet msDS-UserPasswordExpiryTimeComputed userAccountControl homeDirectory displayName memberOf mail userPrincipalName dn givenName sn cn msDS-ResultantPSO msDS-PrincipalName   Is it possible to change the default nettimeout=1 to a higher number? This is causing us issues when trying to get the menu bar updated with user state after successful TGT. I have tried adding NETWORK_TIME 60 to /etc/openldap/ldap.conf , but Jamf Continues to build the command line using the same argument of nettimeout=1

Hi everyone, We are currently using Jamf Connect integrated with Entra ID, and our environment is configured to use Pass-through Authentication (PTA). This means user passwords are validated directly against our on-premises Active Directory (AD). The issue: When a user's AD password expires and they are logged out of the system, they essentially become locked out. Jamf Connect prompts for login, but since the password is expired, the user is required to change it. However, password change fails with the following error: Entra ID error 120013"The user's Active Directory password has expired. Reset the user's password in your on-premises Active Directory to resolve the issue or have the user use the Self Service Password Reset (SSPR) functionality if it is enabled." This means users can’t change the password from the Jamf Connect login window. They can only reset it using an external method connected directly to AD. What we tried: We implemented a custom SSPR portal that connects direc

Earlier I got a blank Dock in macOS after enrollment if I waited to long during the steps of macOS setup with account creation and everything. But now I get it most of the time. The only icon showing in the Dock is Finder.Anybody been having the same problem and/or know how to solve it for future enrollments?We’re in Jamf Cloud and fort the moment in version 11.15.1.

I am having issues with editing random configuration profiles in Jamf Pro.  When I click the name of the profile in the list of profiles, the details of the profile will load. When I click 'Edit' at the bottom, I just get a never ending spinning progress ring and the 'edit' page never actually loads. Has anyone else experienced this? I tried to search for the topic, but its such a generic search I couldn't find anything related to this specific thing..   

Jamf Pro has built-in dashboards, but many admins want the flexibility of Business Intelligence (BI) or reporting tools. JNUC 2019 introduced integrations with some of the most popular tools. We have been hard at work creating resources to help you get the most out of your data, and now we want to see your dashboard! If you have a great dashboard to share, please post it here! If you have tips or tricks that helped you build it, share it with your fellow admins. Remember to sanitize any sensitive data before posting. Integrating Jamf with Splunk

I would like to ask a question: How does Jamf retrieve the installation count, usage duration, and user information of Office software?

If you were an organization that deployed remote Macs using a MDM profile and a local admin account for the first technician setting it up. And then a second local admin account for the user it is assigned to. How would you change this to be more secure and modern? Jamf Connect? Any other apps, policies, or settings you would recommend?

So I've followed the documentation here: https://support.techsmith.com/hc/en-us/articles/115007344888-Enterprise-Install-Guidelines-for-Snagit-on-MacOSAnd I can't get this thing to install.  Specifically, i'm just trying to push Snagit out to our machines, and will follow up with the license file after I can verify the installer is actually installing the DMG/PKG.I'm getting mixed answers between the Jamf console and the actual log file.Jamf: "Verifying DMG...Verifying package integrity...Installing Snagit.dmg...Closing package...In the logs all I see is.. "Instaling Snagit.dmg..."The Dashboard indicates a successful policy push, the logs indicate a lengthy install time, longer than expected at least.Reviewing the applications folder, it's apparent that it ISNT installed.  I've used the .DMG file directly from TechSmith, as well as trying to use Composer to create one with the same results.Any ideas?

Hi all, How can I disable System Prefs -> sharing -> airplay receiver via a script? I don't really know the libraries to the point which would allow me to go and locate them. It auto turns on when the machine comes online

iPads that sit on lock screen for a few hours, go to partial sleep mode which disconnects from WiFi. The only way to connect them to WiFi is to wake it up and go to home screen. If an iPad is locked with passcode and not connected to WiFi, how will it complete the "Clear passcode" command through Jamf? There is literally no way to connect back to the internet using the same WiFi, Ethernet or Internet Sharing. In the past, people claimed that Ethernet to lightning adapters worked, but since iOS 11.4.1, USB restricted mode disabled the use of dongles at the lock screen. We have a lot of iPads for staff that are simply added to Jamf without any configuration policies applied to them. I know there is an option to enable/disable USB restricted mode under configuration policies, but the problem is that we are not applying any policies to these iPads. So by default, USB restricted mode is Enabled which prevents use of dongles while at the lock screen. The only way to solve this matter is

We’ve been running into a persistent issue with Jamf Connect (v2.45.1) on devices running macOS 14 Sequoia, where login via Okta intermittently fails after a few reboots. The error we consistently see on the login window is:An error occurred. Contact your IT administrator. The operation couldn’t be completed. (JamfConnectLogin.JCAuthProviderFactory.FactoryError error 0)This happens after the machine has been rebooted 2–3 times, even if it initially works fine after provisioning. Some users can click the network icon and select their username to log in using local credentials, but others get stuck at the login screen completely. We’ve verified the machine is connected to the internet when this occurs.Additionally, the macOS native Microsoft Entra ID login option (added in Sequoia) sometimes appears despite us not using Entra ID at all, which we believe is causing interference or confusion with Jamf Connect.⸻Environment:• Jamf Connect: 2.45.1• macOS: 14.0 (Sequoia) on Apple Silicon Macs•

Good Morning. I am a new Jamf Administrator. We have managed to get everything up and running for the most part. The only thing I am seeing is that when Jamf Protect is installed it does not appear to have been granted full disk access in the Privacy and Security menu. The policy is self configured from Jamf Protect and signed so that it cannot be edited. But it appears to be correct.

We recently tested a scenario with Jamf Connect and Active Directory where we enabled the "Change password at next login" flag on the AD user account. Here's what happened: I was logout of Jamf Connect and on the Self Service+ UI, I noticed the status said: “Password out of sync” and “Sign in to your Identity Provider”. On the next login attempt via Jamf Connect, I expected a prompt to change the password. Instead, Jamf Connect displayed an error saying that the password is expired, with no option to change it directly from the login window. This raises a few questions: Shouldn't Jamf Connect handle the password change flow directly when AD requires it? What are the recommended access limitations when a user is not signed into Jamf Connect? Currently, I can still request admin access via Jamf Connect even if I'm not signed in. However, if I log out and log back in, the system prompts me for the current password as expected. How do you structure access policies arou