I am gradually learning how to work with blueprints. I have had success managing software updates with blueprints, so I decided to try out restricting external drives to read-only access. I want to stop controlling this using Proofpoint DLP (which I think is crapware) and start controlling it with blueprints.After configuring the blueprint, I deployed it to one of my Macs, then connected two USB drives. Neither drive appeared on my desktop. I opened Disk Utility and found both there. When I clicked to mount each of them, they would not mount. I saw no errors. They just won’t mount. As part of my testing, I uninstalled Proofpoint DLP, which is being used currently to make external drives mount as read-only. Before scoping the blueprint to my Mac, I confirmed that I could mount drives and write to them. I just recreated this on a second Mac. It’s the same issue. Proofpoint DLP is removed. The blueprint is installed. A PLIST was created at /private/var/db/ManagedConfigurationFil

Hi all I have a fleet of Mac Pros all sitting behind a firewall. All traffic - IPs, ports have been allowed as per the Jamf documentation. All Macs can sync and restart however apps can't be deployed or updated. Am I missing something? I even have the entire APNS IP range allowed but still nothing. Any help or advice would be much appreciated

When trying to resolve certain messages in the notfication page, the following error is coming up - Our development team is notified about this problem. Problem identification: #52c7d9c084285505This has been happening for some time and I was wondering if anyone has been able to come up with a solution.

I am having a separate issue but need to submit ticket. When I log into Jamf Account and try to click the “Contact Support” button, nothing happens. Is anyone else experiencing the same issue?

I’m trying to deploy a Mac App that was purchased through Apple School Manager VPP.When I go to Computers → Mac Apps → App Store and add the app from the App Store, I can find the app and click Add, but the page spins and never moves past for me to actually finish adding the app to my tenant. I’ve checked the VPP token and ensured everything is connected properly. This is not an issue when working in the Devices, only when adding apps from the app store for computers.

We use Jamf Pro and have an integration with Conditional Access to register Macbooks within Microsoft Intune.We have recently started receiving this error message and have not been able to resolve it. Who can help me think about how we can tackle this issue?

Hi,Could any one guide on how we can migrate data between two managed macOS devices and same for iOS devices?

We’ve been using a script that automatically downloads and installs the latest version of Google Chrome when we push a prestage policy to our Macs. This script no longer works on Tahoe. This is the error that shows up in the logs:Script result: Wed Jan 21 16:08:00 CST 2026: Create temporary directoryWed Jan 21 16:08:00 CST 2026: Download 'https://dl.google.com/chrome/mac/universal/stable/GGRO/googlechrome.dmg' Wed Jan 21 16:30:23 CST 2026: Check downloaded DMG hdiutil: attach failed - no mountable file systems find: : No such file or directoryI’d like to find out how I can update this script to work with Tahoe. Here’s the script we’re currently using:#!/bin/bash    bundle="Google Chrome.app"    tmp="/private/tmp/GoogleChrome"    echo "$(date): Create temporary directory"    mkdir -p "${tmp}"    echo "$(date): Download 'https://dl.google.com/chrome/mac/universal/stable/GGRO/googlechrome.dmg'"    curl -s -o  "${t

Is there a way to send alert messages to iPhones manage by JAMF. I can do it in Mac via policy using the JAMF helper. Is there a same method in doing this to iPhones? 

I have been having  this issue where some of our Mac computers are being force to change their password approximately every 90 days. First thing comes in mind is if we have a Jamf policy for password expiration. As per checking  we don’t have any policy enforced for a password expiration. I’ve been researching if what may be the cause, most says that it’s due to an MDM.Anyone having this kind of issue? how did you resolved it. We don’t want to set an expiration date for our Mac passwords.

Hi! We finally upgraded Bomgar or BeyondTrust Remote Support to 24.3.2 to support Sequoia. The only issue I'm having is finding a way to allow standard users to toggle on, or allow applications in System Settings > Privacy & Security > Remote Desktop.I didn't see anything in the PPPC Utility tool and wasn't able to find anything in Jamf Pro under the Privacy Preferences Policy Control config settings.   Wasn't sure if it's possible to allow currently or not but thought I'd ask here.  

Follow this instructions :https://support.grammarly.com/hc/en-us/articles/8341875702413-How-to-deploy-Grammarly-for-Mac But still at Accessibility admin rights are required. Any idea what is wrong? thanks  

Hi, Is there an updated way to install Avast via JAMF? I have search previous post but it seems its a long time ago and its not working anymore as per the last replies. Advance thanks.

We are currently using a pre-stage created managed account and the LAPS process for passwords on that account. Since we use Jamf Connect, we have ‘skip account creation step’ turned on.I am finding that this account is not getting the bootstrap token escrowed or a secure token after MDM enrollment. Is this intended? How can I change this? Ideally, I’d like to have a hands off option that doesn’t require a manual installation so that we always have the bootstrap token escrowed and a secure token on our managed account. What am I missing in this step? I am finding when we do need to use the local admin account, it’s not able to take some actions, like install a new OS.

We’ve been testing Self Service + (deployed via a policy since we can’t use Jamf Cloud Services). First impression is: why did they change what the user first sees when they open Self Service?In Self Service classic the user would see the items that they can run. Now in + they have to click in a few spots to get a list of items to run - aren’t we going backwards in making this easier for our end users?I hope that Jamf will provide some way to customize this behaviour - I want to be able to specify what section of of Self Service + loads at startup. I also don’t like that our administrator account is listed on that initial screen that loads - would be good to be able to suppress that completely since we don’t use Jamf Connect. And does anyone know what Jamf means by deprecating classic Self Service? Is it simply not going to function anymore or will it simply not be updated? And is it not going to install on new Macs and will it be removed from ex

I’m not too familiar with Securly (was just given access to Securly Filter for testing), but during the pandemic (before my time) Securly was implemented when students took iPads home. This was when our school district had Jamf Pro. Pretty much all of our iPads (less than 70~ stragglers still in Pro) are in Jamf School now. I replicated what we had in Jamf Pro as a configuration profile. It was simple enough from Securly’s documentation/old Jamf Pro configuration profile. But when I test it, and I see the activity, I only see ‘email’ (in Securly) as the user and not the actual email of the user. I’ve tested this by having my email account, a random student email account, and no active owner as the owner on the iPad (by adding/removing in Jamf School iPad inventory). All just say email. I tried this with the serial number as the variable but that shows up with random letters in the user field. I was hoping at least the serial number would actually show up correct

Afternoon, Just got a reminder that i need to migrate to the new Self Service + does anyone know how to do it? Thanks

Hi all,I've tried to install JCE 1.4 on a fresh laptop => selected macos => clicked on create new project => selected sequoia => clicked create => selected the folder => clicked save.Next step would be to be prompted for a security standard, but nothing happens.I tried it on 2 different laptops with the following OS:Sonoma 14.7Sequoia 15.0I also tried selecting the following OSs for the projects:SonomaSequoiaWith the same results.Can someone please confirm that its also happening for them? Thx! 

Hi Jamf Nation! 👋I'm excited to share an open source tool our team built: Jamf Docs MCP ServerWhat is it?An MCP (Model Context Protocol) server that gives AI assistants like Claude direct access to Jamf documentation from docs.jamf.com. Instead of copy-pasting documentation or switching between windows, you can ask your AI assistant questions and it will search and retrieve the official Jamf docs automatically.FeaturesSearch across all Jamf product documentation (Pro, School, Connect, Protect) Fetch full article content in Markdown format Browse documentation structure by product Built-in caching for faster responsesQuick Startnpx @get-technology-inc/jamf-docs-mcp-serverOr add to your Claude Desktop config:{ "mcpServers": { "jamf-doc

Hey everyone, Im suddenly running into an issue were I need all applications, both pushed by JAMF and others installed by the users, to have the option of “Scale to fit below built-in camera”. I could write a script to enable it for every app that we push but that is 1- not elegant and 2-wouldn’t hit any of the user installed apps.Does JAMF have a way to do this or has anyone been able to do something like this?  Thanks.

I couldnt find any clear answer about my question. For Self Service Classic, I set a custom install location (/Applications/Catalog.app).From what I read, once I enable Self Service+, the branding will carry over, but my custom install location won’t ? I’m planning to enable the “Use Self Service+ as the default end user application” option very soon, will it use my custom install location, or will it use a default one (/Applications/SelfService+.app) ? Thank you

FYI Just got this error on all my machines after editing a policy. jamf policy → Mon Dec 07 14:45:17 My MacBook Pro jamf[909]: Enforcing management framework... Mon Dec 07 14:45:18 My MacBook Pro jamf[909]: Enforcing scheduled tasks... Mon Dec 07 14:45:18 My MacBook Pro jamf[909]: Removing existing launchd task /Library/LaunchDaemons/com.jamfsoftware.task.1.plist... Mon Dec 07 14:45:18 My MacBook Pro jamf[909]: Adding launchd task com.jamfsoftware.task.1... Mon Dec 07 14:45:19 My MacBook Pro jamf[909]: Creating launch daemon... Mon Dec 07 14:45:19 My MacBook Pro jamf[909]: Creating launch agent... Mon Dec 07 14:45:19 My MacBook Pro jamf[954]: Informing the JSS about login for user schattc Mon Dec 07 14:45:21 My MacBook Pro jamf[954]: Informing the JSS about login for user schattc Mon Dec 07 14:45:21 Schatt's MacBook Pro jamf[966]: Checking for policies triggered by "recurring check-in"... Mon Dec 07 14:45:23 My MacBook Pro jamf[966]: There was an

My organization is new to Jamf, and in recent years we’ve started to provision macOS devices. My question is how have other Jamf admins been managing asset tags? Ideally, I would like to have some automated method for generating an asset tag or computer number and assigning it to the mac during the prestage enrollment process. I’ve seen documentation for scripts assigning tags during the initial setup of the mac, but I find it concerning how this is relying on the end user to manually type it in rather than just automatically changing the mac’s hostname to its assigned name from a CSV: GitHub - jamf/Mac-Asset-Tag: A script that generates a GUI to accept a user input asset tag for the Mac. Any ideas would be greatly appreciated!  

Hi all, we use Automated Device Enrollment with Apple Business Manager.Suddenly, device registration in Jamf stalls. After user login and MFA confirmation (Entra ID), a small notification window appears asking, “Do you want to allow downloads on ‘login.microsoftonline.com’?”No matter what we select here, the process then stalls at “Retrieving enrollment profile.”We have already checked ABM, Intune/Entra ID, and Jamf settings (token), and all syncs are running.Does anyone else have any idea what the cause might be here?

Because I tried configuring a static IP address on the iPad, then connected it to a different Wi-Fi network. When I reconnected to the original Wi-Fi, the configured IP address was completely gone and it reverted to automatic DHCP.