Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

I know that you can push WebClip profiles to shared iPads using the user deploy method but I can’t seem to get it working while using Shared iPads in Guest mode only. Has anyone been able to get WebClips sent to Shared iPads using the anonymous guest logins? I have tried every way I can think of and nothing seems to work.

Good morning JAMF NATION Usersrecently when i enolled machines and dep is ran instead of the user logging in with their SSO account they are met with create a local log in account setup page, this has started once we went to tahoe is there a fix for this

We are a Jamf partner company based in far east asia country.We are currently working on a project to build a Jamf Pro On-Premise environment.The deployment is being configured in an AWS environment, using an ALB for redundancy and failover, and Aurora RDS MySQL as the database.During the setup, we have realized that receiving technical support for On-Premise environments from Jamf’s engineering group is extremely difficult.and in Jamf CS response, It also appears that Jamf expects the database user to be granted full privileges by default. From a security perspective, however as we knews well, there may be cases where restricting certain permissions is necessary…Because the quality of engineering support from the Jamf vendor is not satisfy, our satisfaction with collaborating as a partner is also not very high.in present. In this project, the customer and our partner company are testing every issue on our own and resolving them step by step as

I’ve created a banner under the self service branding options (and based it on the recommended size that is suggested). The banner looks great however I have noticed that depending on my screen size the banner can stretch infinitely into being ridiculously huge. It doesn’t constrain itself to the maximum proportions. To replicate the issue, all you need to do is manually resize the self service plus window. I auto push self service plus to my mac endpoints and it looks like I’m currently on Self Service+ Version: 2.4.1 (2.4.9250708.2). From a design point of view I do not feel that is a positive user experience. Is this just a me problem?

Tahoe now wants to put three default widgets on the desktop in the upper left corner (Calendar, Weather, Photos)  I don’t mind the weather and calendar widgets but the Photos widget will confuse people who are using this machine in a Lab setting. How can I control, remove or disallow them during or after setup?I looked through all the Configuration Profile settings but there doesn’t seem to be any way in the Jamf GUI to address this. Will it require a custom Configuration profile?Thanks!

I had a few devices upgrade to iOS 26 and the homescreen layout is not working….has anyone ran into an issue with this? 

Hello everyone,i wanted to roll out our new custom TeamViewer Host and everything works except that our custom design with the company logo is not displayed. I did it exactly as in the instructions: https://hcsonline.com/images/PDFs/Jamf_Teamviewer_Host.pdf After the custom logo didn't show up, I kept searching and came across these instructions: https://community.teamviewer.com/English/kb/articles/50739-mass-deployment-on-macos#perform-an-assignmentThe groups and the membership works but unfortunately our custom layout does not. Am I missing something or have I done something wrong? 

Dear community,I am facing a major issue with our Jamf Pro environment.We are running Jamf Pro 11.21 On-Prem and have several working PreStage enrollments—until today.I had a device that was already upgraded to macOS Tahoe. After erasing the Mac, I started the PreStage enrollment. The macOS installation completed normally, and the device enrolled in MDM.However, after the Setup Assistant finished, Self Service never appeared, and only half of the expected configuration profiles were installed.I waited over 30 minutes, thinking it might be a timing or network delay, but nothing happened. I also tried: restarting the Mac running sudo profiles renew -type enrollment manually installing Self Service.pkg and jamf.pkg copied from a working machine Even after manual installation, the agent could not connect to the server.It looks like the Jamf framework does not install

Hello, We are in the process of setting up Microsoft Defender for Endpoint on our Mac devices using Jamf PRO. We have been successful in doing so using the documentation provided by Microsoft. However, we are running into a few issues. We are unable to get the 'Valid User' and 'Configuration Status' to populate. See pictures attached.  

We got a student iPad which has an unusual behaviour.The user chooses an app from the student app to install it. After the installation I saw that the app disappears directly. It’s not hidden. It’s deinstalled. In Jamf it shows the App is installed.Any idea what causes this?

Hello everyoneOne of our users is having strange wifi problems with his Mac M1 Max after device enrollment:In phases the wifi connection randomly disconnects and reconnects several times in second intervals. The problem doesn't just appear with one specific network, but it appears with other networks too.We have tried some of the standard processes, such as resetting PRAM, deleting wifi setting files etc. and finally reinstalled the Mac. After reinstalling and new enrollment, the problems were back. We suspected a hardware defect, but the repair center could not detect any hardware defect.The user then used his Mac for 9 days without enrollment. During this time, the problem did not appear. Now the device has been enrolled again and the problems have reappeared immediately after the installation. There seems t

We’ll use Google Chrome and Mozilla Firefox for this questionI’m learning how to use Jamf Setup Manager. I followed the directions on GitHub but I made some changes. I have Google Chrome installing automatically with Jamf App Catalog so I decided to install Firefox to test. I also have the package on a policy instead of prestage to install after logging in with Jamf Connect. (the only prestage package is Jamf Connect). Jamf App Catalog should automatically update apps… correct? I don’t know if installing with JSM will stop something like this from happening. I have Firefox setup as available in Self-Service only (but still in Jamf App Catalog). I was also playing around with Jamf Pro AI and before all the troubleshooting to get Jamf Setup Manager to pop up, the AI told me that it may have confused me. During troubleshooting, it said:I need to be honest with you - based on the search results, I'm not finding specific documentation abo

Working on setting up a few shared machines and I was asked to force Safari to always be in Private Browsing. Chrome has that ability in the plist but I don’t think Safari has the same. If that isn’t possible, we would also be OK with clearing browsing data when Safari is closed. Is there a way to do either? I haven’t found anything like that on the interwebz. Thanks!

I have created VMware Fusion 11.5.1.pkg file by using Composer/Package tool. while I tried to install it in new Mac installed successfully when opening the VMware Fusion getting attached error. if I use the same package for upgrade the VMware fusion from older version to new version(11.5.1) it works. Does anyone know how to do this?Any help would be appreciated. Thank you

Created label for the installation of Dockanchor :dockanchor)name="DockAnchor"type="zip"downloadURL="$(downloadURLFromGit bwya77 DockAnchor)"appNewVersion="$(versionFromGit bwya77 DockAnchor)"expectedTeamID="4XW3W377NX";; I am getting the following error :Script result: 2025-11-13 15:44:54 : REQ : : shifting arguments for Jamf 2025-11-13 15:44:54 : INFO : dockanchor : setting variable from argument NOTIFY=silent 2025-11-13 15:44:54 : INFO : dockanchor : Total items in argumentsArray: 1 2025-11-13 15:44:54 : INFO : dockanchor : argumentsArray: NOTIFY=silent 2025-11-13 15:44:54 : REQ : dockanchor : ################## Start Installomator v. 10.9beta, date 2025-08-07 2025-11-13 15:44:54 : INFO : dockanchor : ################## Version: 10.9beta 2025-11-13 15:44:54 : INFO : dockanchor : ################## Date: 2025-08-07 20

Hi, I have an issue with one my macbooks. It is not checking in with Jamf since a week after it was enrolled. I’ve run the following commands on the affected macbook. Sudo Jamf ReconSudo Jamf policySudo Jamf checkJSSConecction   These haven’t fixed the issue. The macbook was enrolled by user-initiated enrolment by going to our server url /enroll Do you know what else I can do to resolve this issue thanks

Hi everyone,I need help understanding the correct way to disable password sync in Jamf Connect while still using Google Workspace authentication during ADE enrollment.Our current setup (Jamf Connect + Google Workspace + ADE) behaves like this: During initial login, the user signs in with their Google Workspace account Jamf Connect creates the local macOS user account based on the Google workspace account (First name and Last name) The initial local mac password is set to the Google password If the user later changes their Google password, Jamf Connect detects a mismatch and prompts:“Your local password and network password are different. Please enter your local password to sync.” Once the user enters it, the Mac password gets updated to match the new Google password What we want instead: Users authenticate with Google Wo

I am trying to test out Single App Mode so we can fulfill a request a user has when their new Ipad comes in. They want it to only allow access to Safari and not allow any websites except the sign in page they set up. I have been able to restrict other sites with no issues, but the Single App mode is causing me issues. I created a Configuration Policy and selected Safari from the Lock to App drop down. When I scope it to my test group, it does attempt to apply, but fails due to "The field “Identifier” contains an invalid value.". Even when I chose "Specify Build ID" and enter "com.apple.mobilesafari" as the build ID, I get the same error. This happens for all apps in the drop down.I have confirmed the Ipad is supervised and all other settings I set up have applied with no issues. It is just this one thing that will not apply.  Any assistance anyone can provide would be appreciated. 

We are using Jamf Connect and one of the Login Window configurations is to display an RTFD document with our EULA. Prior to version 2.45.0, and the big interface change, the Eula displayed like in the following image:On newer version it now displays like so:It seems the only way to center the text is to push the margins in the text document to something like the following. Left: 5.75” and the right 14.75” for the following result (I am still playing with it):We don’t want the text spanning the entire white space at it makes it more difficult to read unless the font

Updated to JSS 11.22.1 last week and I am no longer seeing a “New” button on the Computer->PreStage Enrollments page (it is there on the Devices->PreStage Enrollments page). Tried both Chrome and Safari with same result. Anybody else having this issue? I did hit the support portal to raise the issue but all I’ve gotten so far is “It works for me” which is less than helpful.

HelloIn the process of testing single sign on extension for managed Ipads, I have deployed the Authenticator app and the single sign on profile with following plist.SSO is working great on all apps except outlook, I think it has something to do with how Outlook use SSO/ auth method it uses. <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <!-- Existing Keys --> <key>AppPrefixAllowList</key> <string>com.microsoft.,com.apple.,com.jamf.,com.jamfsoftware.</string> <key>browser_sso_interaction_enabled</key> <integer>1</integer> <key>disable_explicit_app_prompt</key> <integer>0</integer> <!-- Managed App Config for Intune -->

Why is there an option to only scope this to 1 smart group? While every other policy that installs apps lets you scope multiple things. Or am i missing something? 

I was planning to send a message to end user through Swiftdialog via a JAMF policy but it has to be after a specified time like after 50 mins or 80 mins. Any way is there? I cant see any such flag in Swiftdialog, if anyone knows about it please let me know. 

Hi everyone,I’m trying to figure out whether it’s possible to distinguish between devices with a physical SIM, devices without a SIM, and eSIM devices using Smart Groups. I’m not sure if anyone else is seeing the same behavior I am.My Environment:Jamf Pro On-Prem 11.22.1-t1762179835791 (Windows Server)Devices under management:iPhone (China version) iPad (China version)What I try to Achive:Create Smart Groups that can identify:Devices with a physical SIM inserted Devices without a SIM card Devices using eSIMWhat I’ve tested so far:Using Phone Number: Some devices can’t retrieve the SIM’s phone number.