Running a Jamf Cloud instance, and testing various methods for software update management.I pushed out a managed software update to two test devices, update was configured to allow a max of three deferrals. This is the behavior experienced by both endpoints, each time a managed update was pushed:Maximum deferrals were selected, or deferral notifications otherwise ignored. Users received notifications that their computers would restart. No updates applied, computers did not restart. Logs reported that AvailableOSUpdates had changedBootstrap tokens are escrowed for every device in our inventory. Managed updates were pushed multiple times, reporting the same error at step four each time. No new updates were published between attempts.Unless I’m mistaken, shouldn’t updates automatically authorize if a valid bootstrap token is escrowed in Jamf? Why did the available updates never apply?

We would like to create a shared mac device where multiple users can login to with their personal accounts. We are utilizing Platform Single Sign-On and have enabled “Create new user at login”.Everything works as expected and multiple users can login with their personal Entra ID account but we have a funny issue here.The first user who logs in (via prestage) gets a local account like “user@domain.com” but all other users who are logging in at the login window are getting a local account like “userdomain.com” so without the @Mappings set in PSSO as:Full Name: NameAccount Name: preferred_usernameWe would like to create local accounts of users with full email. Any thoughts?

We (finally) got zero-touch working this year, but the only issue is we’re only targeting new hires so far. What we ran into is existing Mac users getting a lease replaced machine don’t have an automated way of getting the software they use today installed on their new machines. They would have to go to ServiceNow and request it all again. I was wondering if anyone had any experience via the API or scripts to look at what they had installed on an old machine assigned to the same user and scope the new machine for the same software (using maybe an allow/block list for things like licensed software)?

Anyone having issues with the API?I was using several scripts that suddenly broke yesterday, November 24 around 9:30 AM EST.I’ve got most of them fixed, but some aren’t working as consistently as they were previously. To give a little context, I was using /JSSResource/computers/serialnumber to get location data to set fields in the Login Window. I also use the location data fields like <realname> <building> <department> to set the machine name and to create a local user account.After adjusting scripts to use a bearer token, I was able to get this to work somewhat, but had to make several adjustments to the parsing of the data with awk commands to remove whitespace and newlines.Additionally, I’m seeing script failures for no apparent reason now.Has anyone experienced anything like this?-Chris

Hello folks,we encounter a problem on some iPads (Gen 9) that were upgraded to IOS 26.1We use Jamf School and also Jamf Safe Internet on these devices.The ipads still connect to the wifi but it says no internet.The ipads don’t check in to the Jamf School Dashboard so i cannotchange the settings there.Is there a known problem with IOS 26 and Jamf Safe Internet? thanks in advance

I’m deploying Snagit 2025 on macOS Tahoe. I’m following Techsmith’s documentation to the letter at the link below. I’ve deployed older versions on older OS versions without issue. The issue I’m having appears to be a permissions issue. https://support.techsmith.com/hc/en-us/articles/115007344888-Enterprise-Install-Guidelines-for-Snagit-on-MacOSThe issue happens the first time you attempt to open Snagit. On app execution, you are presented with the error below:In troubleshooting, I’ve added permissions to everyone to the first folder and still have the same issue. The second folder doesn’t exist yet. Has anyone else had this issue?

Apple Classroom on Teacher Macs in Jamf School - Possible without Managed Apple IDs?We're migrating from Jamf Pro to Jamf School. Previously had Apple Classroom working with Macs and iPads via ASM roster syncing from our SIS—no Managed Apple IDs needed.Current status in Jamf School:✅ Apple Classroom works on teacher iPads and student iPads ✅ Jamf Teacher app works on teacher Macs (shows rostered classes) ❌ Apple Classroom on teacher Macs won't load rostered classesTeacher Macs aren't receiving the Education Profile despite fresh enrollments. I suspect it's related to MDM-capable users, but can't confirm. Class data is clearly flowing (iPads get it, Jamf Teacher gets it), so it seems like a device-specific enrollment issue.Is Apple Classroom on teacher Macs possible in Jamf School without Managed Apple IDs?The solution seems tantalizing close based a on a checkbox still available in Jamf School -

Hi guys. I need to configure VPN via the macOS VP client. Each user has a unique VPN login, can anyone assist me with a script or something which will allow zero-touch config of a devices VPN details - user/password/shared secret etc. Never done this before, so any support you can offer is very much appreciated, thanks. Devices are DEP enrolled and in Jamf Pro.

Hello Is anyone doing ipad compliance everything is working great nearly.The self service process to register device in Entra.  - All goodThem been mark as compliant - All good.We are struggling with these keys which when pushed with an app should stop app protection from applying. But where still seeing the prompts for it. <!-- Intune MAM Integration -->      <key>IntuneMAMUPN</key>      <string>$EMAIL</string>Has anyone else come accross this? ThanksTom

Now that ASM (finally) has warranty information, what is the possibility that JAMF will be able to read that information and populate the Warranty fields in JAMF Pro?

Hi there,I'm not sure if this functionality exists for MacOS, but it does for Chromebooks, and it's pretty amazing, so we'd like to leverage it for our iMac labs at the very least, and if it works there maybe go org-wide with it. The problem is I'm not sure what method to attack this problem with.Currently our iMacs (like the rest of our Apple computers) are AD bound. Users log in with a mobile account, and use Enterprise Connect for password management.I know that Macs support Kerb/SSO authentication, and also that Google's SecureLDAP can work for macOS as well, but what I really want is for the login screen to show me a Classlink login page so users can sign in with a QR code badge.Since our Google accounts use Classlink as their IDP and show the splash page when you try to log into them via web browser, I started going down the rabbit hole of getting a test machine bound to Google Secure LDAP, thinking it might spawn a splash page for Classlink login.

We've had an issue twice in the last 2 months, where our wifi configuration profile that installs our certs fails to install. We get the following error "Install Configuration Profile Prod Wi-Fi Unable to decrypt encrypted profile" when desktop enrolls a mac. Everything else installs correctly with no issues. When we originally had this issue back in August, we had to add the new jamf IP's to the firewall and it that fixed it. We worked with out networking guys yeserday and they couldn't see anythin. The issue only last a day and it goes back to working.  It broke on 11/19 9:30a and started working on 11/20 6a. Very weird issue. I opened a ticket with jamf.

I have a problem in the selfservice-app. I cant delete the notifications of failed installations. Note as read doesnt do anything, too. https://ibb.co/ChknWR1

Hi,we are using the erase-install tool from github to upgrade our Macs (I guess the Jamf mass action feature is still not working proper?) and facing the issue, that the pop up to enter the local mac user credentials are in another keyboard layout than the system has. I could not find anything on github or here where this was discussed. Any ideas?  Thanks already

Hi Everyone I'm getting "Locate Hardware Information" stuck on one macbook air M4 laptop whilst tring to execute sudo jamf recon, i followed the steps and instructions found on https://community.jamf.com/t5/jamf-pro/jamf-recon-stalls-at-locate-hardware-information/td-p/315285 and https://community.jamf.com/t5/jamf-pro/recon-hangs-on-locating-hardware-information/m-p/284704 but when we execute the "sudo launchctl kickstart -k system/com.apple.softwareupdated" it fails with the error "Could not kickstart service "com.apple.softwareupdated": 150: Operation not permitted while System Integrity Protection is engaged". We then tried deleting the /Library/Preferences/com.apple.SoftwareUpda

I am trying to create a Applications Usage Reports specially for Adobe App, I have tried:To create a usage report for a group of computers based on applications, you'll need to follow these steps:First, ensure Application Usage collection is enabled:Go to Settings > Computer management > Inventory collection Click Edit, then the Software tab > Applications Select "Collect Application Usage Information" checkboxNext, create a Smart Group for your computers:Navigate to Computers > Smart Computer Groups > New Add criteria using Application Title and optionally Application Version Configure operators and values to define your groupFinally, generate the report:Go to Computers > Search Inventory Create or select an advanced computer search with your criteria Click the Reports tab Sele

Hello Jamf Community, I'm currently experiencing an issue with Jamf Remote Assist — I haven't been able to successfully connect to any Mac devices for the past two weeks. Each attempt either times out or fails with no clear error message. I've tried the following so far: Confirmed that Remote Assist is enabled in Settings. Restarted Jamf Daemon and the local Jamf app on the affected Mac. Verified network/firewall configurations (no changes recently). Tested on both Intel and Apple Silicon Macs with the same result.

I'm trying to setup a Custom Menubar Icon for Jamf Connect by following the instructions here:https://learn.jamf.com/bundle/jamf-connect-documentation-current/page/Menu_Bar_App_Preferences.htmlI created a 16x16 png file and saved it as /user/local/icon.png Then I added these lines to the Profile, <key>MenubarIcon</key <string>/usr/local/icon.png</string> I quit Jamf Connect and when it relaunches, I just get a white square where the icon should be. The details of the image are not there. So it is trying to display it, but it just can't parse the file? When I click on About Jamf Connect, it also displays a small white square where the icon should be. I made sure the file had 755 permissions on it.  Is there a particular DPI or color pallet I need to set on the image? Is there something I

Hi everyone,I’ve recently started working in an environment using Okta for authentication with Jamf Connect deployed, and we also use Self Service+. At this moment we haven’t approved macOS 26.1 for all users yet, but a few people upgraded on their own and experienced the issue described in the Jamf Connect release notes:[PI143263, PI144134] Fixed:Jamf Connect presents a one-time prompt on computers running macOS Tahoe 26.1 beta, both on the login window and on the desktop:“Self Service+ wants to use your confidential information stored in “Jamf Connect” in your keychain.”Source: https://learn.jamf.com/en-US/bundle/jamf-connect-release-notes/page/Jamf_Connect_macOS_Release_Notes.htmlWhile investigating, I found that the affected u

Hello everyone, I come in search of a glimmer of hope.I am trying to use BeyondCorp Enterprise to enroll iPads on Jamf and be able to use G Suite with users under an advanced OU (Organizational Unit).Now, among the needs declared by Jamf, there is "Basic iOS mobile management enabled for your organization's Google integration."Has any of you ever managed this with the settings set to "advanced"? I fear it might not be feasible.

Hi everyone,I’m running into an issue trying to upgrade Jamf Connect across our environment and hoping someone from Jamf or the community has seen this before.Until recently, I was able to update Jamf Connect using the dropdown underSettings → Jamf Apps → Jamf Connect → Deployment and Update Settings.That list used to automatically show each new version as Jamf released it (for example, 2.44 → 2.45).Now the dropdown has stopped updating — it’s capped at 2.45.1, even though 3.4.0 has been released publicly for several weeks.I’ve tried to manually handle the upgrade:• Downloaded JamfConnectLogin.pkg (3.4.0) from account.jamf.com.• Uploaded it into Jamf Pro (Cloud Distribution Point).• Created a policy to deploy it to test devices an

Hello,we applied a FileVault policy, and it worked on every MacBook except one. We’re not receiving the FileVault key from that device, and the user keeps getting the policy pushed repeatedly.I also made the policy available in Self Service, but even from there it doesn’t work.What could be causing this issue?

Hi there, I cant find any documentation on this but is there any possibility of hosting documentation/videos in custom categories in self service? Other than having to script a download of documentation to home screen. 

Hey Everyone, I have been battling this issue for quite some time and have done rigorous testing but have sincerely hit a wall with this issue. My organization is prepping to remove Administrator access from all users on our macOS systems, this requires them all to be converted to a Standard user. (We have a "MakeMeAnAdmin" script in place in JSS we plan to utilize) MacOS: 14.3.1Jamf Connect: 2.32.0 We use Jamf Connect with Azure/EntraID so users can authenticate on login, we have the app roles setup for the app registration in Azure with two groups, MacUserAdmin-Entra & MacUserStandard-Entra with the correct roles tied to each (Administrator & Standard) The Problem:Whenever a user is moved into the group tied to the STANDARD role in Azure and attempts to login to Jamf Connect on one of our Macs they can enter the O365 email, PW, verify 2FA, but then hit a "Yellow Exclamation Point" box

When binding Macs to our domain we will import a computer cert so that the users Mac will be able to connect to our VPN and enterprise connect (can't do so without this cert). I have a user who is having this cert get auto removed from keychain and thus making him unable to connect to internal resources when working remotely. The cert that we import comes from our CA and is verified upon being imported.My question is, is there a way I can look and see how/why this cert was removed?