I was able to get the Jamf Return to Service app working on an iPad, perhaps a bit too well... Once the iPad reboots, it self-enrolls fine, but it loses all Static groups it was in. I then have to manually re-assign the iPad to the Static groups it needs for proper configuration and app access.   Is there a way to make Return to Service work so that it wipes the iPad, but then puts it back into the Static groups it was in? I noticed the wipe and repair option with Apple Configurator does not have this issue (keeps static groups after resetting).

Since we upgraded to sequoia, we had to update our Nexthink version, because the install was failing on enrollments. After changing it and enrollig a sonoma device, it works and shows in nexthink. When we enroll a mac on sequoia, it looks like it installs on the device, but never shows in nexthink.

Hello :) because I'm still struggling with Jamf Connect for testing Onelogin. I'm using the latest version of Jamf Configurator (2.9.0) Please note, for my test instance, I didn't configure MFA for Onelogin. I don't know if it's the OIDCTenant or something else why it's not working but I tested already these things for OIDCTenant. Error message from Jamf Configurator: " Unable to load Identity Provider "Error message from Onelogin: "OIDC authorization code for Jamf Connect FAILED" Onelogin-Client ID<companyname><companyname><companyname>.onelogin.comlogin.<companyname>.onelogin.com/Client-ID <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>CreateJamfConnectPassword</key><true/><key>OIDCClientID</key><string>Onelogin-Client-ID</string&g

I have been busy at work lately with some more scripts!  This one is a dual purpose app. If you pass the word "info" in the 4th parameter of the script it will inform the users of their laptop battery status, if you pass the word "fail" in the 4th parameter it will let them know that their capacity is below 'x' amount (You determine failure by a smartgroup) #!/bin/zsh # # Written by: Scott E. Kendall # Created: 2025-01-15 # Last Modified: 2025-01-15 # # Prompt user if battery needs service # ###################################################################################################### # # Gobal "Common" variables # ###################################################################################################### export PATH=/usr/bin:/bin:/usr/sbin:/sbin JAMF_LOGGED_IN_USER=$3 BATTERY_CONDITION="${4:-"info"}" LOGGED_IN_USER=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) USER_DIR=$( dscl . -read /User

iPads generally do not go home with students so there is not a need for the Jamf Parent app. I want to see if there is an easier option for teachers to have their students assign themselves iPads for better tracking and management. We use most iPads for K-1 only.  I'm curious if there is something like this, similar to Clever where students scan their badge to access the app, but in this case, they scan the iPad to assign it to themself and the data is synced into Jamf School and goes away if iPad is wiped, etc.  This would also help with our asset management API.  Thank you

Hello there....We're migrating all our clients, windows and mac to microsoft defender for endpoint. For the mac clients id like to use the policies in the microsoft defender portal to keep them in the same place as the windows clients, which will hopefully make support a bit simpler.I've followed the instructions in the link below,  the mac I'm testing on shows up in the defender portal and I've created a mac endpoint security policy assigned to a group to apply. The problem is I cant add the mac to the group in intune as it doesn't exist.I'm sure I've missed something, i can see there are ways to connect jamf and intune but I'm not sure what is the recommended way, does anyone have any info that might point me in the right direction?Any help would be much appreciated  Set up the Microsoft Defender for Endpoint on macOS policies in Jamf Pro - Microsoft Defender for Endpoint | Microsoft Learn

Dear All, First of all would like to thank in advance any help or advise regarding this.   To put you all in a little bit of context on our environment we are using a Configuration Profile including "AD Certificate" Payload and Network Payload to configure the connection via TLS Auth. We have been working for a while with this type of configuration without the need of binding our Mac fleet to AD , and indeed we are using Enterprise Connect (yes, I know this is kinda deprecated and we should be using like Kerberos SSO), so far this allowed us to get the AD Certificate (User Level Certificate) Payload in the past without any issue. So far since like 1 week ago it suddenly stopped working, So still figuring out what changed or if there was a change that I didn't get informed on our Infrastructure. We want to avoid any open external traffic like going through workarounds as SCEP > or any AD CS Connector... Would now to request your assistance , if at any point you have configured s

Hi everyone, I'm currently working on aligning our macOS fleet with the CIS Level 1 benchmarks using Jamf Protect and Jamf Pro. I have CIS18 compliance reporting enabled in Jamf Protect, and while it’s very helpful, I’m running into a significant challenge. I’m seeing up to 25 FAIL results in the Compliance report. I’d like to remediate these via configuration profiles in Jamf Pro, but here’s where things get tricky: The CIS18 report in Jamf Protect doesn't clearly state what exactly needs to be configured to fix each FAIL. I’ve referred to the official CIS macOS benchmark PDF, but there are many settings that can’t be implemented via configuration profiles or are labeled differently in Jamf. There’s no consistent ID or reference number in Jamf Protect's report that I can use to match it back to the CIS benchmark document it which makes it very hard to find the right section and remediation. Has anyone dealt with this mapping issue before?How did you go about creating your

Hi  I have some issues to get the upload to Jamf working from autopkg Does any one have a general upload template for Autopkg? thnx in advance

Trying to set up a config profile for this new feature set. I have used Jamf's example and Apple's example as starting points, but the radio buttons for the items I have set to be managed are still able to be turned off and do not say they are managed like the Jamf apps are. Has anyone else had success in getting a config profile to work for this yet?

Hi I am looking for a best practice way to move from a MS Office Mac App Store Installation to MS Office PKG Installation. We have currently some Clients with MS Office from the Mac App Store, those Clients shoul get MS Office via PKG Installation in the future. Can we simply remove the MAS MS Office Apps from the Clients and replace them with the PKG MS Office Apps? Thanks in advance.

Hello everyone! Since 12/14/25 we have been receiving the message “The VPN client agent was unable to set up monitoring of the VPN profile files” every few seconds. It doesn't matter whether VPN is connected or not. It feels like the message only comes when you open the Finder and then you can't get rid of it. Reinstalling the same version fixes the problem. Since Friday we have activated version 5.1.7.80 for the zero touch deployment. So yesterday I activated version 5.1.6.103 again. When you connect to the VPN for the first time, the app is updated to 5.1.7.80. Today I have the first client installed with version 5.1.6.103. Since it was connected, it also automatically updated to 5.1.7.80. So it can't be my newly created 5.1.7.80 pkg. maybe it's because of macOS 15.3.1? Have you ever seen this?    

Hi everyone, I'm currently struggling to create a working PPPC profile for AnyDesk on macOS. My goal is to pre-approve the following permissions for all users: Full Disk Access Accessibility Screen Recording So far, I’ve tried two approaches: A .mobileconfig file generated with the help of AI Manually configuring the payload using Jamf In both cases, the profiles appear as “completed” in Jamf, but they don’t seem to take effect — AnyDesk still prompts for the permissions when launched. These settings need to be valid system-wide, across all users, and I’m currently out of ideas. Has anyone successfully deployed a PPPC for AnyDesk or encountered similar issues? Any advice, tips, or examples would be greatly appreciated! Thanks in advance!

Hey guys, I really struggle on probably something easy. We are partially using the erase tool from github to update some Macs in our fleet. So the easy way is a policy with the package and the command line like /Library/Management/erase-install/erase-install.sh --version=15.4.1 --reinstall --check-power --no-timeout --min-drive-space 20 --no-fs --rebootdelay 300 --power-wait-limit 300 --cleanup-after-use   My problem is that this policy, once completed, is showing failed. So it will start again popping up on the users macs. I read about the launcher script, but it failes too. I tried with the package and without, I tried the example script given by Github and the normal version. Hows the process? I would just like to have jamf confirmed that the installation is completed. Thanks!  

Hey Everyone, Kinda new on all related stuff for MDM and JAMF, so I'm figuring out how to properly perform tests on mac enviroments without everytime breaking my own laptop and certificate stuff to connect back and pull over everything from the scratch. With that in mind, I've came with the idea of creating VM (Using VirtualBuddy) and enrolling it to jamf server through the jamf enrollment link... so far even everything seems to be good. I´m facing problems with the Self Service app, that it's not connecting.   Anyone else that has being tested this? or have any kind of solution to have an appart mac enviroment to break :) without the need of purchasing another macbook hehe :)

Hi all, I did not see anything like what I needed so I created one. Below is a script to copy image files to a users local directory. It works fine, very basic, but I'd like to combine the two if statements and work out an exit code if the source files are not present. If anyone is bored out there???? : ) #!/bin/sh #Created by Brian LaMantia 6/1/2020 #Move FIS background images from /private/tmp to the current users Uploads folder in Teams. #Run after the images are deployed to the tmp folder then displays a message to the user. #If the package fails, do not display a message. #If you make this better, post a copy for me! #get current user currentUser=$(/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }') #Check if the images package was installed sourceFiles=/private/tmp/Teams #Check if Teams uploads folder exists teamsPath=/Users/"$currentUser"/Library/Application Support/Microsoft/Teams/Backgrounds/Uploads/ #jamfhelper path jamfHelper=/Library

New to Jamf School. Handed out new pre enrolled iPads to teachers about two weeks ago and they were all connecting to the school Wifi and working fine. Suddenly about a week ago they stopped connecting to any WiFi network...even outside of school. Any ideas if something within Jamf could be causing this? We do not have Safe School.

Hi there, we are new to JAMF and are currently experiencing an issue with the Classroom app not displaying any classes on our devices. Unfortunately, I have not been able to resolve this on my own, so I am hoping of receiving your support. Initially, the Classroom app on my own testing device successfully showed the groups configured in JAMF. However, when two of my colleagues offered their devices for testing (we are currently in the process of migrating from another MDM solution to JAMF), the app did not work as expected. After installing the app, it prompted for a teacher name and no classes were displayed. I attempted to reproduce the issue by resetting my device, and since then, it also no longer shows the classes—even though it previously did. The devices of the students shows the correct classes in the general preferences of the devices, so I think their devices are working correctly in Apple Classroom. We would greatly appreciate any assistance in resolving this matter so that

Hi All,   Does any have any information on how I can deploy License Key for SnagIT 2025? Please don't refer me to the SnagIT Website as there Script on the site doesn't work for me.   Thanks in Advance

Hey Folks,   we have recently moved with our entire Fleet of iOS and macOS Devices to Jamf Pro.  today Apple released iOS18.2 and we wanted to Update our iOS Devices using DDM. We noticed that non of our Devices, macOS or iOS, has DDM enabled.  Does anyone know why?   thanks! 

I am looking to Execute Absolute Full Agent, however the PKG relies on a few other files, how can I accomplish this as it seems to have an error code of 0 - getcwd with my script.  #!/bin/sh ## postinstall   pathToScript=$0 pathToPackage=$1 targetLocation=$2 targetVolume=$3   if sysctl machdep.cpu.brand_string | grep -w "Intel"  ; then sudo -S installer -allowUntrusted -verboseR -pkg "/private/tmp/Absolute5.10.25/AbsoluteFullAgent.pkg" -target /   fi   rm -rf "/Private/tmp/Absolute5.10.25/" 2>dev/null     exit 0 ## Success exit 1 ## Failure    

Hi everyone, hoping someone is able to help. We are implementing Jamf Connect (w/ Jamf Pro) using EntraID as OIDC and ROPG. Additionally, I am integrating Kerberos, but I am running into issues (most likely DNS) with devices on VPN (Citrix Secure Private Access). We have a on-prem Citrix NetScaler/ADC and while connected to Citrix ADC I am able to get both kerberos tickets (krbtgt and ldap). However, when connected to Citrix Secure Private Access (cloud), I only get the kgbtgt not the ldap ticket and Jamf Connect says unable to get kerberos ticket, attempting to fetch. I am hard coding the kdc and realms in /etc/krb5.conf (Sequoia 15.4.1).. anyone worked with Kerberos and Citrix appliances before? Any feedback would be awesome, over 24 hours on this issue already    I am unable to resolve nslookup -type=srv _kerberos._tcp.REALM-NAME.NET (neither in uppercase or lowercase, in our NetScaler/ADC on-prem works fine. Also when I run scutil --dns I get 182 search domains, one

Hello all. Just for some context, I'm Alex, and I work at a school in the UK. We are currently in the process of setting up JAMF Pro and JAMF connect, and we are running into trouble around DFS shares and Kerberos. Are AD domain is school.local, and are azure AD  is school.co.uk, and we are currently not getting Kerberos tickets,. In the JAMF connect logs, I get a kerberos authentication error, OffDomain. So I am wondering if this has anything to do with the domain names not matching and wondering if anyone else has had similar issues and how you've gotten around it? Just to clarify, I can ping the domain from my test Mac, and kinit gives a manual Kerberos ticket. Also, the next question... We have DFS shares for our home folders in AD, and all our other shares are DFS. I'm desperately looking for some way of mounting these shares, based on user groups etc. If certain user is in particular group, mount this share for them, etc. And as well while having home folders mounted over DF

Hi everyone, I am searching for the API which will provide the list of all the applications and its latest version. This will help if the installed app on the computer, is having the latest version or not. I tried this API, but couldn't get the latest version:/JSSResource/macapplications/ I am able to find corresponding API for mobile applications:https://developer.jamf.com/jamf-pro/reference/findmobiledeviceapplications But couldn't find the same for computers.   Thanks in advance.

Hello Jamf Community, Not sure whether this has been done or not but I'm looking to see if anyone has any ideas/scripts for creating a sort of universal uninstaller for approved applications. All of our users are standard users and we only want them to uninstall certain applications we deem "approved" for uninstallation. As such, we are looking for something that creates a pop-up window which allow them to select from a predefined list of apps to uninstall. Is anyone aware of something like this that exists? Or have an idea on how to create it? I'm not the best at scripting...