Hi guys, We have quite a few users who seem to download applications and run them from their desktop, Spotify and Chrome being the biggest culprits. I'm looking for a way to remove the application from users desktop folders. We have a couple of users (read: myself and a few other IT people) that have these installed on their machines in their Applications folder, and we don't want to touch those. Our users have local homes on our iMacs, and we run an AD environment. What's the best/tidiest way that people have used to remove apps from multiple users desktop folders?

Hey Jamf Nation!Since we announced Self Service+ at JNUC 2024, it has continued to evolve with features focused on content discovery, branding, and usability. Today, we’re excited to introduce the next major milestone: identity management in Self Service+. We're moving Jamf Connect's desktop app capabilities into Self Service+, which brings key functionality: synchronizing macOS accounts with cloud-based credentials, and privilege elevation for just-in-time admin rights on Mac. Jamf Connect's login window plugin remains separate application and is not included in this preview of Self Service+, ensuring continuity for account provisioning and local multi-factor authentication.How to join the beta:Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you'll receive an invitation to join the Beta Forum in your email, click "Join this group Hub" to gain access.Email beta@jamf.com with questions. The beta program is covered by the Jamf no

Hello all, I've had an issue since upgrading to Jamf Pro v10. On some client Macs, the Self Service app constantly crashes. In some cases it crashes as soon as it tries to launch. In other cases it crashes as soon as you click anywhere in the app window. In a few other cases, the app will be working fine, but as soon as you click on the 'History' or 'Updates' button at the top, the app crashes and continues to do so each time your open it. It has mostly happened on 10.11.6 clients, but we have one Mac running 10.12.6 that is now having the same issue. I had logged support call with Jamf about it. They said it was a bug with 10.0 and to update to 10.1. Did that, confirmed that the clients had the newest version of the app, but no change. Removing the frameworks from the client and re-enrolling it worked once on one client, but as soon as I clicked something in the app window, boom, crashed. Jamf did a remote session into my server, made sure everything look

Hi all,We are trying to determine if we can use Jamf to audit which users are actively using Apple Intelligence.Our hunch is that Apple doesn't log gen AI actions but I was wondering if anyone here might have some specific advice that could help.Thanks in advance!

Hi folks - working with a new jamf cloud and I've run into a problem trying to have a user follow the steps to make their device Entra compliant.  When they log into the Company Portal app (after starting the registration from Self-Service) the login screen for Entra pops up, accepts their username and password, then goes to a blank window.  We know authentication is happening because the MFA for the user kicks off but the login window is blank and does not show the numbers.     Has anyone seen this before?  I was able to do this on a different machine two days ago.  The OS on this machine is 15.0

Hi all - has anyone found a way to make Zoom the default for all events on new Outlook?  Tried a few different policies with no success.  Can add manually as a Zoom meeting, but this is pain for all users.  Many thanks in advance!

Hi, we ran into an issue during the Jamf Pro Patch Management. I ran a Patch Management Policy for Microsoft Teams 2.x with the Option to patch "Unknown Versions", too. The issue on some Mac Clients, all an macOS 15.3.2, that they were randomly quitting the Teams App. It turned out that their Inventory in Jamf Pro did not include the installed Microsoft Teams Version in the Patch Management section. In the Inventory view, the installed Microsoft Teams Version was recorded. A Jamf Recon didnt fix the issue, no MDM or DDM commands have failed on those Clients ... Did someone else run into a similar issue?

Anyone know if the ablity to set a screensaver at login windows is still broken in Sequoia. I belive its still the case in Sonoma.Im currently using this at works fine if a user is logged in locks the screen screensaver starts. The research I have done so far seems to indicate loginidealtime should trigger it at login screen, just doesnt seem to do anything. Have been playing around with a lower number that doesnt seem to help either.It something we always struggled to set in our labs, we adjusted our power policy last time so the macs would sleep. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>askForPassword</key> <true/> <key>askForPasswordDelay</key> <integer>0</integer> <key>idleTime</key> <integer>900</integer> <key>loginWindowIdleTime</key

I am about to scream. After several hours on the phone with ASM and JAMF, and after being moved up the chain about three times, the issue is not resolved. All my info in ASM is correct and synced, the 5 students show up in all their classes as offline, and their ipads DO NOT show an EDU profile, even though I have checked User ID and location, I have verified it matches in ASM, I have verified I have the right ipad, the right person, the right Apple ID, and done blank push and update inventory and everything else you could think of. Still no dice. The one thing I discovered is that on all the messed-up ipads, the roster info did not sync over. I put it in manually, but still no dice. ANYONE have this issue? I am mega frustrated.

How can I find if any connected to VPN? Is it dependent on app to find it, like as for Cisco AnyConnect and Pulse it will be different. Or any generic way is there in macOS? 

In macOS 15, the new Private MAC address settings is enabled by default, and there is a new settings in Profile to disable it, BUT it's only for a spacified SSID. If you need a global setting to disable the Private MAC for all existed and new SSID, try to create a new policy to run this command: sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist PrivateMACAddressModeSystemSetting -int 1 It will not disable the Private MAC Address immediately, but it will work after forgot the network or reboot the computer.  

we have a few older Intel iMacs that are applying policies as normal, but configuration profiles changes and deletions seem to be stuck in pending. They're all checking in, and policies work without issue. This lab is all Intel iMacs running MacOS 14.7.1, but 75% works without any issues. They all report as being successfully enrolled in Jamf, and they where all automatically enrolled via ASM. I'm not sure what to do to troubleshoot, as these profiles work fine with most of the Intel iMacs, and our newer fleet of Apple Silicon computers.

We are seeing an issue with On-Prem installation of Jamf Pro 11.15.0.The Jamf-Pro.exe Server Tools are getting picked up by CrowdStrike for a malicious hash.Even grabbing the 3.1.5 Server Tool exe and manually installing it to the path results in Quarantine.We're having our InfoSec team investigate, but looks like this may affect others. Anyone else with On-Prem infrastructure seeing this issue?

Hi, I am looking for an Uninstaller for the Nextcloud App that also would remove the local cached Nextcloud Files. Because the location of those cached Files can vary, do I have to check the Nextcloud preference file of each User to find out the right location? Thanks for any help!

Our standardized testing program uses a locked-down browser, and will kick out a tester, if anything tries to do something in the background. We think that a number of students were kicked out of their tests because they set up Mail.app and got a notification. Rather than try to play cat and mouse with alert settings, is there a way to completely disable the Notification Center? I tried putting Notification* as a Restricted app, that gets killed, but that seems to have had no effect. We are currently running 10.12.6, but are going to move to Mojave this summer, so I need a solution for each OS. Under Mavericks, you could disable the LaunchAgent: launchctl unload -w /System/Library/LaunchAgents/com.apple.notificationcenterui.plist but that doesn't work under Sierra, so I bet it doesn't work in Mojave either. Should I just nuke the agent with: sudo rm -rf /System/Library/LaunchAgents/com.apple.notificationcenterui.plist Will I be able to do that in Mojave? Ideally, I'd like a

Is anyone encounter JAMF Teacher issue with after class end, restriction is not automatic restore to default. Case by when teacher start a class with apps restriction (example Google Chrome), after class end the restricted apps (Google Chrome) will not automatic restore/reappear? Is it normal? Teacher requires to manually clear all restriction when class ended to get the apps restore/reappear on student devices. Thank you.

Hello, We're working to put together new device personas (engineering, creative, etc), and all have been going well, except for our "lab" devices. Basically, they want a clean macOS device to use for testing, but it should still be enrolled in Jamf for asset tracking purchases. All the other devices, I've just added a trigger after enrollment for special_installs, and scoped/limited them by appropriate AD group. But for the clean devices, I need them to stop the normal enrollment process entirely. No config profiles (outside of the jamf required ones) and no software installed. I'd normally add them to an exclusion group, but I can't think of a way to do that automagically prior to enrollment... 

Hi everyone, I've been facing an issue with internet connections just after updating to macOS Sequoia. Two devices running Sequoia cannot establish a connection with each other in Docker.   Error response from daemon: Get "https://europe-docker.pkg.dev/v2/": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)   This issue started right after I installed the update, and I've heard about DNS/connection issues related to it. The first thing I wanted to test was turning off the firewall, but I wasn't able to make any changes. I have a policy that was supposed to turn off the firewall with the following command:   defaults write /Library/Preferences/com.apple.alf globalstate -int 0   However, it didn't work on Sequoia, although I tested it on Sonoma and it worked well there. I've tried searching online but haven't found anything that works so far. My question is: Does anyone have any ideas on how to disable the firewal

With Jamf Pro 11.16.0 Beta we’re continuing our Compliance Benchmarks feedback. We’re also releasing the ability to configure the App Installers deployment process, along with new Prestage enrollment and inventory reporting options. How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Once you enroll you’ll receive an invitation to join the Beta Forum, click “Join this group Hub” to gain access. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks. Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program!

Hi,  I want to disable OneDrive from the background service, but I don’t know how to do it. Currently, it is enabled, and I want to disable it. On Microsoft’s website, they explain how to enable it, but not the opposite. https://learn.microsoft.com/en-us/sharepoint/deploy-and-configure-on-macos#background-services Would you know how to do it?

We're using Adobe CC (Creative Cloud (all applications) for schools – shared licenses.  Adobe documentation only offers deploying their packages via Jamf Pro. I'd tried to use Jamf School application installers. They work great but this likely fails 'cause the installers are obviously configured as user based licenses. The configured packages by Adobe admin console could not be installed even when packed with composer. This pkg-files are denied with error "Could not parse XML-file in package". Is there anybody who's next to this setup? Do you think this could be solved with a managed configuration via XML file?  

Hello, We are having issues enrolling BYOD devices in Jamf Pro using Account-driven BYOD Enrollment. We are following the instructions on Jamf documentation but we are receiving an error for any Managed AppleID that tries to sign in:"Your Apple ID does not support the expected services on this device. Contact your administrator to sign in"All of our Apple IDs are managed and the domain is setup in Apple Business Manager. We have a ticket open with Jamf Support but wondering if anyone else has had this issue. Current configuration:  This has worked before. We had these settings turned off for a while while we investigated (about 1.5 months).iPhone 13 Pro Max running iOS 16.4.1.

Hey guys, So in the midst of setting up our jamf i have a second user profile set up for our Dept to login to every laptop, Is there a way to set a standard profile pic using jamf pro ? Any advise would be great. Thanks

We're not a fan of Jamf requiring a Jamf Account SSO setup to access new features such as Blueprints or Compliance Benchmarks. What about new features down the pipeline? I was looking forward to Blueprints, and we use the JCE now for Compliance Benchmarks (CIS Level 2). So, the new features had us excited since it was presented at JNUC 2024. However, the Jamf Account SSO setup may be a deal breaker for organizations. Consider reading and voting for this Jamf Nation Idea:https://ideas.jamf.com/ideas/JPRO-I-1182

I have a strange issue.  First couple of wave deployments worked well, but now has stopped working.  Every device that I scope Nudge and the jamf profile to, give the message No minimum required macOS version found within the Nudge Deferral Status Extension Attribute.  This Mostly Mac blog states that means the requiredMinimunOSVersion key is not found.  This sounds like Nudge or Jamf are not reading the config profile located in /Library/Managed Preferences/com.github.macadmins.Nudge.plist.  I am using the default Nudge Suite (latest) with Jamf Pro Schema.  Any ideas are greatly appreciated