Hello, I am trying to create a configuration profile on Jamf to deploy it to my mac laptop.The .mobileconfig is built using the template mentioned here (docker.mobileconfig): https://docs.docker.com/enterprise/security/enforce-sign-in/methods/#macos-configuration-profiles-method-recommended When I try to upload this in Jamf (we use Jamf Pro) using the “Upload” option shown below, it fails with the error “File Cannot be processed” I am able to create the profile using the “New” button where I copy and paste my profile in the Property List box.I don’t suspect anything wrong with the template structure as using “New” button I am able to upload it and also I am  able to directly add my profile on my mac laptop.Any idea why I am getting “File Cannot be processed” error when I use “Upload” option ?I have reviewed few old posts reporting similar error, but they are slightly different than my issue.Appreciate any help.

I’m unsure if this effects iPadOS 26.0 as I have just pushed out iPadOS 26.0.1 to devices this week.  We have a Single App Mode profile for TD Snap (though app doesn’t really matter).  After the device is rebooted it looks like on the home screen you can’t unlock the device.Swiping up just shows “No older notifications” but does not unlock the phone and take it to the Single App locked mode to TD Snap.Has anyone else experienced this?This iPad is on iPadOS 26.0.1.  Didn’t have this issue prior to the update.

I'm trying to setup the GoGuardian app for a small group of our iPads. I have everything working except that I can't find a way in Jamf Pro to turn on the setting for "Allow Notifications" in the Screen Sharing section. It's off by default but it needs to be enabled so that teachers can send notifications to the iPad requesting it to open a browser tab for the student.I'm guessing that's just not something Apple allows Jamf to set, but I wanted to check with group and make sure I'm not missing something obvious. Thanks!

Hey,I’ve tried looking for this all over and found some partial solutions that don’t really work so I wanted to ask here.I’ve been asked to set up several iMacs to auto-log off or reboot after 30 minutes of inactivity AND (this is the kicker) delete all files on Desktop, Downloads, and Documents.I found the Configuration Profile Login Window setting to auto log-off but I’ve seen that if people left unsaved documents over it doesn’t work. It seems to me some scripting is needed here and that’s still a weak spot for me so I’m putting this out to this community in the hopes of some help.Thanks in advance!

Check this new article on the Tech Thoughts Blog from ​@Alvaro1337 ,  “My JNUC Experience 2025 –Denver,Co” ! 

How is everyone securely disposing or destroying their own Apple SSD storage units?Considering that MacBooks from 2016 to 2022 have an SSD (NAND storage) that is not upgradeable,and it is not replaceable either, since it is soldered onto the main board:If a company has decommissioned a MacBook and the device reaches its end-of-life,the NAND storage cannot be extracted and re-used on a different device.Also:How can businesses assert that their data is securely wiped before device disposal?

Hi everyone, I’m looking for the best way to convert mobile accounts to local accounts without using Jamf Connect, and to do it cleanly. The goal is to improve compatibility with FileVault, since it generally works better with local accounts. I’ve tested version 3.0 of https://github.com/BIG-RAT/mobile_to_local.The script seems to correctly convert the mobile account into a standard local user and successfully removes the Mac from the domain.However, after that step, I wanted to test joining the domain again the rejoin works, but I can no longer log in with any AD accounts. No matter which account or password I use, authentication just fails. Has anyone else experienced this issue or found a more reliable method ? 

Troubleshooting done - Usually outlook case space issue happens if user has local archives, migration to new outlook will cause storage space issue. Outlook size remains same  - Checked for logs , nothing unusual. - ran disk space analyzer didn't find anything unusual in size. - no time machine snapshots found. - if i initiate indexing in the mac, system data space reduces immediately more than 150 Gb but it increases quickly to around 50 GB within 15 - 20 min. - if i boot the mac to safe mode, the storage size remains same nothing changes. - checked launchagents, launch daemons, login items, nothing unusual,   if anyone has faced this issue, let me know

Hey Everyone, I have been battling this issue for quite some time and have done rigorous testing but have sincerely hit a wall with this issue. My organization is prepping to remove Administrator access from all users on our macOS systems, this requires them all to be converted to a Standard user. (We have a "MakeMeAnAdmin" script in place in JSS we plan to utilize) MacOS: 14.3.1Jamf Connect: 2.32.0 We use Jamf Connect with Azure/EntraID so users can authenticate on login, we have the app roles setup for the app registration in Azure with two groups, MacUserAdmin-Entra & MacUserStandard-Entra with the correct roles tied to each (Administrator & Standard) The Problem:Whenever a user is moved into the group tied to the STANDARD role in Azure and attempts to login to Jamf Connect on one of our Macs they can enter the O365 email, PW, verify 2FA, but then hit a "Yellow Exclamation Point" box with simply an "Okay" button. Once you click "Okay" you are kicked back

Hi, I accidently Turn On "Enable LAPS for PreStage accounts", now all my DEP macbook password automatically updated. Now user not able to login to their macbook. Is there a way to revert this? Thank you.

Hey All,we are working on POC to identify settings needed to rollout JAMF Trust with Okta as per the documentation specified here : https://learn.jamf.com/en-US/bundle/jamf-security-cloud-setup-guide/page/Authorizing_Jamf_Security_in_Your_Okta_Organization.html Issue : when jamf trust is launched it will display “Onelast Thing Sign-in” window, redirects to Okta for login, upon entering credentials and MFA it will throw error message unauthorized.What was done so far. Device belongs to correct smart computer group which syncs with securitycloud.  activation profile targetting correct device group.  double and triple checked all settings on Okta integration and everything is correct.  In Jamf Pro “User and Location” contains Email address which is exactly same as Okta user email address. including case sensitiveness.  Okta application integration shows success everytime tries to login using okta credentials.  But the Security cloud logs shows this  Any help or tips or anyone come across

Hey All,we are working on POC to identify settings needed to rollout JAMF Trust with Okta as per the documentation specified here : https://learn.jamf.com/en-US/bundle/jamf-security-cloud-setup-guide/page/Authorizing_Jamf_Security_in_Your_Okta_Organization.html Issue : when jamf trust is launched it will display “Onelast Thing Sign-in” window, redirects to Okta for login, upon entering credentials and MFA it will not throw error message unauthorized.What was done so far. Device belongs to correct smart computer group which syncs with securitycloud.  activation profile targetting correct device group.  double and triple checked all settings on Okta integration and everything is correct.  In Jamf Pro “User and Location” contains Email address which is exactly same as Okta user email address. including case sensitiveness.  Okta application integration shows success everytime tries to login using okta credentials.  But the Security cloud logs shows this  Any help or tips or anyone come acr

I have a 4th gen Apple TV that was assigned to Apple Business Manager via Config 2.  From there it was assigned to my Jamf and then I scoped it to a prestage enrollment.  When the device boots up it attempts to activate and then jumps over to my remote management and attempts to download a config from my Jamf when the request times out.  Any ideas why its not getting what its looking for.  Im not even sure where I can find logs to see what is failing.  

Hi all,I have been using a script that sets the Recovery Lock password on Silicon Macs without the correct Recovery Lock password already set using the following APIhttps://JAMF_PRO_URL/api/preview/mdm/commands  As mentioned here:https://learn.jamf.com/en-US/bundle/technical-articles/page/Recovery_Lock_Enablement_in_macOS_Using_the_Jamf_Pro_API.htmlHowever it looks like the /preview/mdm/commands has been deprecated, can someone confirm and is there another way to do it or can it only be done with PreStage now? Source: https://developer.jamf.com/jamf-pro/docs/privileges-and-deprecations

Hello, I have been receiving the error Unable to Decrypt Encrypted profile when I push the network profile to the MacOS devices. Now none of the MacOS devices connect with the office Wifi. Any suggestions. AD CS Connector Certificate seems to be fine. 

A significant update to the practical and user-friendly approach to surfacing Mac health information directly to end-users via Jamf Pro Self Service Overview Mac Health Check provides a practical and user-friendly approach to surfacing Mac health information directly to end-users via Jamf Pro Self Service.Built using the open-source utility swiftDialog, the solution acts as a “heads-up display” presenting real-time system health and policy compliance status in a clear and interactive format.Administrators can customize the user interface using swiftDialog’s visual capabilities, making the experience both informative and approachable.The tool logs results for review, while not altering device configuration, and a new “Silent” Operation Mode makes Mac Health Check ideal for IT visibility without end-user intrusion.  Continue reading …

I’m curious about your experiences deploying Self Service Plus alongside a Jamf Connect 3.x update. I’m currently testing this and have a policy set up to install both Jamf Connect 3.x and Self Service Plus via policy.However, I’m wondering if it’s better to just upgrade Jamf Connect and use the “Use Self Service+ as the default end user application” option directly from the Jamf Pro server instead.Has anyone tested or noticed any issues in the app’s behavior or reliability during deployment with each approach?

I have created USB disabled policy and pushed over JAMF. which was success but I have noticed that through Android File transfer we are still able to send the confidential file to smart phones. is there any way to completely block file transfer to other devices like mobile phone.

In iPadOS there is a new system app, Phone.But it doesn’t seem to be blockable using a Profile, since it doesn’t seem to be present in the list of Default Applications.Has anybody found the same issue? And, more importantly, a solution?Thanks in advance.

Trying to install Chrome for Mac using the app installer.  When it installs, chrome will no allow me to update manually.  If I manually install chrome, then there isn’t an issue.I do not have a configuration profiles loaded for chrome.

Every year, I’m blown away by the magic of JNUC. I’ve attended since 2016, so you’d think it would get old… It doesn’t. Seeing the community in such a large, present way is truly the highlight of my year. Thanks to everyone who stopped by the Jamf Nation booth to say hi! For those who didn’t get a chance, here’s what we shared:Configure SSO in Jamf Account for 1,000 Jamf Nation Rewards points! Learn more here.  Aren’t signed up for Jamf Nation Rewards yet? Take care of that now! Here’s how.  User Groups are meeting (virtually and in person) all around the world. Find the one that’s best for you - and join - here!Now tell us - what was your favorite JNUC moment? Share a photo or a written comment below!  

Hello everyone, I work as a system admin and have a user who already signed up for an apple id using their work email and now I cannot create an account for him within the DEP using that email address. Is there a way to convert or enroll the apple id so it falls under the DEP? Currently the error I'm getting is "This managed appled id has already been taken". Thanks! L

Hi,Just trying to save myself some time..Does anyone have the relevant PPPC (s) for deployment with Astropad?? I know, im lazy :-) TIA

Hi everyone,We’re using Jamf to manage our iPads. After enrolling a device via Prestage enrollment, everything works fine at first — but after some time, the iPad always shows the message “Passcode was changed” and gets locked out.The user did not actually change the passcode.Has anyone experienced this issue or know how to prevent it from happening?Any advice would be appreciated.Thank you!

Hi There, I am a noob so please excuse my ignorance. We have a new install connected to GoogleID and have had an issue from the beginning where the Jamf Connect Menubar's Change Password and Reset Password pages comes up blank. I've tried changing default browsers with no luck. I've made sure both browsers were signed into the Google account with no luck. The Connect option seems to work and pulls up the correct email and password info as it logs in. I should add that other than that Jamf Connect seems to be working as expected. Here's what the plist info is set to.  I appreciate any help you all can offer as I'm stumped.  -Jason <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>ChangePasswordURL</key><string>https://myaccount.google.com/intro/signinoptions/password</string><key&gt