Created label for the installation of Dockanchor :dockanchor)name="DockAnchor"type="zip"downloadURL="$(downloadURLFromGit bwya77 DockAnchor)"appNewVersion="$(versionFromGit bwya77 DockAnchor)"expectedTeamID="4XW3W377NX";; I am getting the following error :Script result: 2025-11-13 15:44:54 : REQ : : shifting arguments for Jamf 2025-11-13 15:44:54 : INFO : dockanchor : setting variable from argument NOTIFY=silent 2025-11-13 15:44:54 : INFO : dockanchor : Total items in argumentsArray: 1 2025-11-13 15:44:54 : INFO : dockanchor : argumentsArray: NOTIFY=silent 2025-11-13 15:44:54 : REQ : dockanchor : ################## Start Installomator v. 10.9beta, date 2025-08-07 2025-11-13 15:44:54 : INFO : dockanchor : ################## Version: 10.9beta 2025-11-13 15:44:54 : INFO : dockanchor : ################## Date: 2025-08-07 20

Hi, I have an issue with one my macbooks. It is not checking in with Jamf since a week after it was enrolled. I’ve run the following commands on the affected macbook. Sudo Jamf ReconSudo Jamf policySudo Jamf checkJSSConecction   These haven’t fixed the issue. The macbook was enrolled by user-initiated enrolment by going to our server url /enroll Do you know what else I can do to resolve this issue thanks

Hi everyone,I need help understanding the correct way to disable password sync in Jamf Connect while still using Google Workspace authentication during ADE enrollment.Our current setup (Jamf Connect + Google Workspace + ADE) behaves like this: During initial login, the user signs in with their Google Workspace account Jamf Connect creates the local macOS user account based on the Google workspace account (First name and Last name) The initial local mac password is set to the Google password If the user later changes their Google password, Jamf Connect detects a mismatch and prompts:“Your local password and network password are different. Please enter your local password to sync.” Once the user enters it, the Mac password gets updated to match the new Google password What we want instead: Users authenticate with Google Wo

I am trying to test out Single App Mode so we can fulfill a request a user has when their new Ipad comes in. They want it to only allow access to Safari and not allow any websites except the sign in page they set up. I have been able to restrict other sites with no issues, but the Single App mode is causing me issues. I created a Configuration Policy and selected Safari from the Lock to App drop down. When I scope it to my test group, it does attempt to apply, but fails due to "The field “Identifier” contains an invalid value.". Even when I chose "Specify Build ID" and enter "com.apple.mobilesafari" as the build ID, I get the same error. This happens for all apps in the drop down.I have confirmed the Ipad is supervised and all other settings I set up have applied with no issues. It is just this one thing that will not apply.  Any assistance anyone can provide would be appreciated. 

We are using Jamf Connect and one of the Login Window configurations is to display an RTFD document with our EULA. Prior to version 2.45.0, and the big interface change, the Eula displayed like in the following image:On newer version it now displays like so:It seems the only way to center the text is to push the margins in the text document to something like the following. Left: 5.75” and the right 14.75” for the following result (I am still playing with it):We don’t want the text spanning the entire white space at it makes it more difficult to read unless the font

Updated to JSS 11.22.1 last week and I am no longer seeing a “New” button on the Computer->PreStage Enrollments page (it is there on the Devices->PreStage Enrollments page). Tried both Chrome and Safari with same result. Anybody else having this issue? I did hit the support portal to raise the issue but all I’ve gotten so far is “It works for me” which is less than helpful.

HelloIn the process of testing single sign on extension for managed Ipads, I have deployed the Authenticator app and the single sign on profile with following plist.SSO is working great on all apps except outlook, I think it has something to do with how Outlook use SSO/ auth method it uses. <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <!-- Existing Keys --> <key>AppPrefixAllowList</key> <string>com.microsoft.,com.apple.,com.jamf.,com.jamfsoftware.</string> <key>browser_sso_interaction_enabled</key> <integer>1</integer> <key>disable_explicit_app_prompt</key> <integer>0</integer> <!-- Managed App Config for Intune -->

Why is there an option to only scope this to 1 smart group? While every other policy that installs apps lets you scope multiple things. Or am i missing something? 

I was planning to send a message to end user through Swiftdialog via a JAMF policy but it has to be after a specified time like after 50 mins or 80 mins. Any way is there? I cant see any such flag in Swiftdialog, if anyone knows about it please let me know. 

Hi everyone,I’m trying to figure out whether it’s possible to distinguish between devices with a physical SIM, devices without a SIM, and eSIM devices using Smart Groups. I’m not sure if anyone else is seeing the same behavior I am.My Environment:Jamf Pro On-Prem 11.22.1-t1762179835791 (Windows Server)Devices under management:iPhone (China version) iPad (China version)What I try to Achive:Create Smart Groups that can identify:Devices with a physical SIM inserted Devices without a SIM card Devices using eSIMWhat I’ve tested so far:Using Phone Number: Some devices can’t retrieve the SIM’s phone number.

I have some policies which daisy chain from one to the other because they use the same Custom Event.  They are numbered at the beginning of each policy name just so I can control the order they execute.  The whole chain gets triggered by using an excellent script from Richard Trouton https://derflounder.wordpress.com/2017/04/08/running-multiple-jamf-pro-policies-via-custom-trigger/I’m trying them in Self Service+ and it looks like Self Service+ stops showing that the policy chain is still running.  When I check the jamf.log the policy chain is still running - it’s just Self Service+ that thinks it’s doneI mostly use this for an initial setup chain of policies so I can make sure they run in a particular order.Is there anyone else doing this sort of thing and have you seen this behav

We’ve got FUS disabled through a configuration profile, but it appears the menu bar/control center extra bypasses this setting. Users can enable the extra and then use it to switch accounts.Not a major security issue I don’t think, but my org doesn’t use FUS. Is there a way to block specific menu bar/control center extras?

Hi,I tried to find a similar request among the existing discussions, but I haven’t been able to locate this exact situation yet.(Newbie here, so please don’t judge too harshly!)At the moment, updates for basic apps from the App Store are failing to install, resulting in:Failed command – Unhandled exception.(Emptying the list would result in recurring errors) So far, I haven’t noticed any correlation between macOS versions (ranging from 14.7.2 to 15.6.1) or hardware (M1 to M4 Pro), since updates have stopped installing for everyone.From the installation logs, it looks like this (screenshot attached). 

Howdy everybody! Time for my annual post about how we all need to get our budgets prepped and ready to go for all the hardware we need to replace that Apple is dropping from its OS Compatibility list!I've modified my previous regex statement to take out the models that were lost to us this year to the latest macOS version. It looks like Apple is taking a big ole axe to the intel macs, minus only a couple of exceptions that seem to tie to the devices that were still being sold at the time of the M1 release. One tricky piece are the specific intel MacBook Pro's that Apple has listed. In that grouping are the MacBookPro16,x models, where x is 1,2 and 4, but not the 16,3 model, so keep that in mind. If anyone has details that contradict that, please let me know here and i'll quickly change the posted regex.I've tested this in my own Jamf instances to verify its returning the data that i'd expect to see, and am confident this will be able to match everything that is no long

Heads up to my fellow Jamf community. We've been seeing iPadOS 15.8.4 iPads when reprovisioned can't be enrolled to Jamf School.  This may affect Jamf Pro too.  The exact error is "Failed to retrieve configuration".  I reached out to Jamf support and they said they have been getting reports of this from others and that this has been observed across different MDM providers.  Jamf reached out to Apple regarding this issue and this is exactly what they told me: Apple did get back to us just a bit ago, and they have identified the issue (they did not elaborate on what the issue was). The release is not ready yet though and at this time they couldn't give me an ETA on when that would release. For now I created an internal Jamf Product Issue so we can track customers and I have attached this case to that ticket (PI136109). Hopefull

I’m unsure if this effects iPadOS 26.0 as I have just pushed out iPadOS 26.0.1 to devices this week.  We have a Single App Mode profile for TD Snap (though app doesn’t really matter).  After the device is rebooted it looks like on the home screen you can’t unlock the device.Swiping up just shows “No older notifications” but does not unlock the phone and take it to the Single App locked mode to TD Snap.Has anyone else experienced this?This iPad is on iPadOS 26.0.1.  Didn’t have this issue prior to the update.

Hello, We have been testing out Jamf Connect 3.5 the previous configuration we used with worked just fine with Jamf Connect 2.45.1 but after testing out Jamf connect 3.5 seems like no log in option appears during login it just shows the user. Normally we had options for SSO, local login, restart and etc. Thank you for any help in advance.

Does Jamf know when this will be resolved?  An important part of the logs are missing, and i haven’t heard any mention of a resolution.  Is there another way to find out who deletes machines or locks them?Also would like to point out that Details for all actions are blank.

Hi Everyone,Need your help if you have a script that can mount and unmount SMB the can be use as repository of screenshotsThank you.

In macOS 15, the new Private MAC address settings is enabled by default, and there is a new settings in Profile to disable it, BUT it's only for a spacified SSID. If you need a global setting to disable the Private MAC for all existed and new SSID, try to create a new policy to run this command: sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist PrivateMACAddressModeSystemSetting -int 1 It will not disable the Private MAC Address immediately, but it will work after forgot the network or reboot the computer.  

Hi All,Does anyone know a reliable method to adjust the default search provider in Safari on iOS - I am expecting it will be a custom plist.We need to shift the default search provider away from the usual google result, to “https://www.google.com?udm=14&q=<searchterm>”This forces the results into Web mode only, and prevents the AI overview returning results that are normally filtered out by Safe Mode set to Strict.Thanks

In the Other changes and Improvements from the release of 11.22 there was a mention that the deferral of updates with some payloads was deprecated with the 26’s and to use Blueprints going forward  However in the Configuration Profiles for both devices and computers it is not stated that this setting is deprecated.  

Does anyone know how to uninstall the DockUtil tool? We have been using the tool to set the Dock initially for users but macOS Big Sur does not list as supported so we want to remove it before our users upgrade. Thank you.

Mac Admins’ new favorite, MDM-agnostic, “set-it-and-forget-it” end-user messaging for Apple’s Declarative Device Management-enforced macOS update deadlines Overview While Apple’s Declarative Device Management (DDM) provides Mac Admins a powerful method to enforce macOS updates, its built-in notification tends to be too subtle for most Mac Admins.DDM OS Reminder evaluates the most recent EnforcedInstallDate entry in /var/log/install.log, then leverages a swiftDialog-enabled script and LaunchDaemon pair to dynamically deliver a more prominent end-user message of when the user’s Mac needs to be updated to comply with DDM-enforced macOS update deadlines.Features 76-second Test-drive Implementation Support

I have been tasked by our security team to limit the terminal app to only allow admin accounts to open it due to a vulnerability. Any suggestions or best practices/advice on this? I do not want to rescrict the app completely because we use it for troubleshooting but we want the standard user to be locked down as much as possible.