Hi all, I’m looking for a way to block or skip the “Update Mac Automatically” screen that appears during the Setup Assistant (screenshot attached). Is there a way to suppress or bypass this screen using a configuration profile? Any insight or guidance would be much appreciated! Thanks!

Because I tried configuring a static IP address on the iPad, then connected it to a different Wi-Fi network. When I reconnected to the original Wi-Fi, the configured IP address was completely gone and it reverted to automatic DHCP.

Does anyone know how to get these metrics through EA?

Not sure when this would have occured, but i have verified on several devices. We are pushing out a printer using jamf and if you go into the “printers and scanners” section of system settings control panel, it says “no printers”. However if you go into an application, you can see the printer there. I can also see it when i run lpstat -p. Nothing has changed with this printer, we have been deploying it for years. So much be a new osx update that caused this.      any ideas? Its a bit of an oddity that i found while trying to diagnose a separate print quality problem for a user. Then i found that multiple macs in our environment do this. Perhaps someone has seen i

Hi everyoneis it possible to get the result of the variable for configuration profile in lower case?Currently I have configured “Lock primary account information” with variables(see screenshot) The result of the variable is always in upper case. it is possible to change it to lower case? if yes then how? 

At the moment it seems that JAMF is unable to turn off private wifi addresses via configuration policy even though they have an option for "Disable MAC Address Randomization (macOS 15 or later)". After testing with JAMF and confirming this function does not work in setting this to OFF (there currently are no granular settings in the MDM framework for this), they recommended I raise a developer case with Apple for this. Shouldn't JAMF be doing this to allow this functionality in their MDM instead of us as a user?? Our vendor is incredibly upset and recommending we drop JAMF as a product due to their response on this.

Hello!In the last 2 years, I have had some Macs lose all configuration Profiles (including the MDM profile) when they try to renew the MDM Certificate (and fail for some reason)Mostly that could be fixed cancelling the “Renew MDM Certificate”-Pending task in the Management-Tab and then have the User run “profiles renew -type enrollment”. But it surely seems like a bug, when the (non-removable) MDM profile is gone.Has anybody seen something similar and a fix for it?Bye, Frido. 

Has anyone implemented Lights Out Management for Big Sur or Monterey? I can't seem to find any documentation whatsoever to proceed. Please help!

I have two reporting tasks in Jamf Pro that I dread every time I have to do them: Creating a Security Stack report Creating a report that shows which computers have a specific application installed and which do not What I’m trying to doFor the security stack, we have (for example) 5 security products that should be installed across our fleet.What I’ve been doing is exporting Computer Applications inventory and working from the CSV. The problem is the way Jamf structures the export: The application name appears once The rows beneath it (per computer) are blank until the next application name appears Those blank rows still represent devices that have the app installed, but the format makes filtering, automation, and reporting extremely painful I

I have just started using blueprints. My first blueprint enforces macOS Software Update settings and getting Macs updated to the latest macOS version that we are ready to put into production. In all my testing this is working very well. Unlike with policies and profiles, I don’t see a way to exclude computers. There are some “VIPs” that we treat differently (though I think everyone should be treated the same!) who I will likely have to exclude. I can do some manipulation with the groups that I scope the blueprints to but that will cause other management issues later on. Is there a good way exclude computers?

Hello everyone,Running into a weird issue that I’m not sure if is intended or not (Fairly new to JAMF). We have some user’s devices that had not been checking-in\pushing commands properly via Jamf Pro, mainly due to users not logging in. Received a few back after the users left the company and they are at the local Mac login instead of the Jamf Connect login screen. I can connect them to ethernet and send them commands from Jamf Pro, but they do not check-in and receive commands (wipe\lock\etc). If I log in past the local Mac login, they start receiving commands again and work properly. I can also still use recovery to wipe them, but they do not receive any commands or check-in until I am past that initial Mac login screen.Tried using Jamf Routines and a few other things to try and get them to check-in and receive the commands without having to login locally, but nothing seems to work until I get past that first local login or wipe them. Is this intended? Doe

Hi all, We are in the middle of configuring jamf Pro, and we need our MacBook users to have a standard account and then a secondary admin account, we are using Connect to link back to MS Entra and now wondering if it is possible to have a second account on the MacBooks for users to use as an admin account. All accounts would be created in Entra. Thanks 

I have been requested to make two sided black and white the default print option for our Xerox Printer. I was able to accomplish this and add some handy presets for the user to select other options like 1 sided and color. What I have found is unless I open the Show Presets... option and check Reset Presets Menu to "Default Settings" After Printing... Print jobs will use the last preset selected by the user... so if they selected color... the next job will print color as well. Selecting the option above does just what it says and reverts to the default after each print job. My question is... is there a plist or a command line flag to check this box? I did not see anything in the plist file for the printer or in lpadmin. Any assitance would be greatly appreciated.

 Even when Erase All Content and Settings is restricted, the option “Erase This iPad” still appears during sign out.Will it be possible to restrict this as well?The same behavior occurs even when using a Managed Apple Account...

Your enrollment Profile MAY have expired. Try loading a new enrollment profile. I am not sure what to do with this. It is happening immediately following a reset and check in with Jamf. Any assistance is appreciated. 

​We currently have our students set an app age restriction of 12+ in our MDM  Today we came across an app, Grammarly Keyboard, that is now 13+ .  That causes the app to install and then immediately remove.   Our only other option in the MDM is 17+ Anyone else running into this issue? Any other apps in the 13+ category?

Hey guys,we recently started to upgrade our deployed devices to macOS Tahoe. Since then many of our users have reported, that they can no longer take screenshots. The sound comes on but no screenshot was saved. After some research I found the culprit. For some reason the screen capture app thinks it has to save the screenshots as pdf files. But it can’t  display them in the mini-preview-window. So either setting needs to be changed. I didn’t want to do that manually, so here is my attempt at a script.Note, that this has to be run as the logged in user because the plist for screen capture is user bound.#!/bin/bashconsoleuser=`ls -l /dev/console | cut -d " " -f4`echo "${consoleuser}"currenttype="$(su - "${consoleuser}" -c 'defaults read com.apple.screencapture type')"if [ "$currenttype" != 'png' ]; then echo "Current type is not png! Changing to png now!"

Hi,I want to set multiple time servers (NTP) for my Macs, so that if one of them goes down or shows the wrong time the clients automatically switch to another one. Unfortunately this seems not possible out of the box. Does anyone have experience with this and can point me in the right direction?

On a specific device, the “Update Inventory” command is successfully sent and works normally.However, when the “Renew MDM Profile” command is sent, it fails with the following message:Error command: The new MDM payload does not match the previous payload. Mismatched key: CheckInURLBecause of this issue, the device cannot renew its MDM profile, and the expiration date is approaching.What is causing this problem, and how can it be resolved?

Hello, Our K–12 district has reached its purchasing limit for Apple devices directly from Apple for this year. However, we still have a need for additional iPads. I wanted to ask whether it is possible to use User-Initiated Enrollment to enroll devices that were not purchased through Apple (apple.com) (ex: CDWG.com, BestBuy.com etc.), and if so, whether there is any way to remove the “Remove Management” option from those devices. If removing the management option is not possible, is there a way to automatically enroll these devices into Apple School Manager using Apple Configurator? This way its supervised and fully manageable for the tech to push out updates and configurations.  Any assistance or guidance you can provide would be greatly appreciated. 

Has anyone been able to use Jamf Printer Manager 1.0.2 (or version 2.0) after switching to SSO login on your JPS? I’m trying to connect and I’m unable to authenticate after switching over. This is the first time using it since we changed, so it has to be the authentication setup.

Hi there! I've hit a bit of a wall. I've been asked to block YouTube Shorts for our students/users but leave the rest of YouTube open.We're running Jamf School + Jamf Safe Internet. I tried a custom rule for youtube.com/shorts, but it’s not working—likely because of how the traffic is vectored or how the API handles the "Reel" endpoints.Does anyone have a workaround for this? Are there specific domains/paths I should be targeting instead? Any links or tips would be huge. Thanks in advance!

Hello, Our K–12 district has reached its purchasing limit for Apple devices directly from Apple for this year. However, we still have a need for additional iPads. I wanted to ask whether it is possible to use User-Initiated Enrollment to enroll devices that were not purchased through Apple (apple.com) (ex: CDWG.com, BestBuy.com etc.), and if so, whether there is any way to remove the “Remove Management” option from those devices. If removing the management option is not possible, is there a way to automatically enroll these devices into Apple School Manager using Apple Configurator? Any assistance or guidance you can provide would be greatly appreciated. 

I'm looking to setup, add a domain (DRC WIDA testing) to a configuration profile with "Relaxed Domains" for our iPads. I don't see it anywhere I've looked in Jamf Pro configuration profiles, but Apple and WIDA have references to it. This would allow us finally to not have to manually toggle Cross-Site tracking to "on" on each iPad!!!!I've setup a custom configuration as described but I'm hoping there is a non-custom method that I'm just missing. This functionality is supported by a key in the Domains payload CrossSiteTrackingPreventionRelaxedDomains. From WIDA / DRC InsightCross-Website Tracking and Device SupervisionImportant: Sites using iPadOS 16.2 and higher no long

In the Other changes and Improvements from the release of 11.22 there was a mention that the deferral of updates with some payloads was deprecated with the 26’s and to use Blueprints going forward  However in the Configuration Profiles for both devices and computers it is not stated that this setting is deprecated.