Get Support
Recently active
I just found myself in a really stressful situation. I’ve been transferred abroad for work and need to travel urgently, but my iPhone is locked to a carrier. Since it’s tied to that network, I can’t use a local SIM when I move, and unfortunately, I’m not able to request an official unlock from the carrier.This is turning into a big problem because I’ll need my phone right away for work and communication once I arrive.Has anyone been in a similar situation? Any suggestion will be appreciated :(
Hi We are just adding Jamf Connect using Cyberark; we are getting the following issue once the user has logged into the SSO client its double asking for the local password, would like to remove this. We have the setting set in the xml <key>OIDCUsePassthroughAuth</key> <true/> Does anyone have any other suggestions we can try? thanks.
We have upcoming maintenance on your Jamf Pro Server. Planned RDS software updates will be performed during the times listed below. During this time, services may be briefly unavailable. Region-specific updates will be provided via StatusPage. Larger databases may see slightly longer interruptions.All times in UTCSchedule:August 22–23: Non-production (Sandbox) – All regions August 29: Standard Hosted Servers Start Times.Hosted Data Region Time ap-southeast-2 15:00 ap-northeast-1 16:00 eu-central-1 23:00 August 30: Standard Hosted Servers Start Times. eu-west-2 00:00 us-east-2 05:00 us-west-2 08:00 September 5–6: Premium Hosted Servers (exact times TBD)
We are currently moving Microsoft 365 Tenants as part of a merger, which means one half of the new business needs the Microsoft 365 Apps to move to the new tenant. These devices are AD Joined but not Azure AD Joined. Has anyone come across a way to do this without resorting to deleting key chains, and asking users to reconfigure the Apps. Thanks
I am trying to make a smart group to see what computers have the PaperCut Client installed but i don’t see anything in the /Applications/PaperCut Print Deploy Client/ directory that i can select as the .app in the smart group. What can I use create this smart group?
Everyone loves good swag...and it means even more if it stands for something!Here’s some exciting news… For a limited time, Jamf’s Employee Resource Groups (ERGs) are thrilled to share special JNUC merch. And yes, it’s more than just a cool design. All proceeds from the purchase of these items goes directly to Food Bank of the Rockies. That’s what we call Merch that Matters! Head on over to the Threads for Good site to claim yours today! The store is open now through October 12, but be sure to purchase your swag before September 12 to receive it in time to wear proudly for JNUC (and beyond!).Link: Threads for Good | JNUC 2025
We’ve never fully standardized on having everyone in our org sync their Desktop and Documents folders to their OneDrive, and I’ve been working on getting that done recently. First step: create an extension attribute that shows the OneDrive redirection status on each Mac so I could build some smart groups.I kept it simple and just had it look to see whether the user’s Desktop and Documents folders were in their default locations, or if they had OneDrive in the file path of their locations. If it’s the former, it displays “Disabled.” If it’s the latter, it displays “Enabled.” If only one of the two folders are synced to OneDrive, it displays “Partial.”Just wanted to share in case this was useful for anyone else!#!/bin/bash# Extension Attribute to check if Desktop and Documents are syncing with OneDrive (KFM)# Author: John William Sherrod jwsherrod@mac.com# Version 1.0, Date: 08-28-2025# Get the currently logged-in user:loggedInUser=$(scutil <<< "show State:/Users/ConsoleUser" |
Hi All, Our District is aiming to use Macbook Air for our next laptop refresh. We have Jamf Pro and on our way to get a subscription on Jamf Connect. Anyhow, when I created a script under Policies, the name is not changing. The naming convention that I wanted to use for all the M1's should be M1-"Serial Number". The script that I've created is below;#!/bin/bash$ sudo jamf setComputerName -name $M1-$serialNumberscutil --set ComputerName $M1-$serialNumberscutil --set LocalHostName $M1-$serialNumberscutil --set HostName $M1-$serialNumberexit Please help?Thank you and have a great one!Sincerely,Cesar
I don't know about you, but my in-person conference skills need a brush-up. For me, it's been a little over three years since my last in-person. So here are some tips I've put together with some help from a few friends. If you are turning up on Monday before dinner, check the JNUC Slack Channel for any pre-conference get-togethers Monday night. The same is true every night. You can sleep when you get back home. This may be the only chance you get to talk to these people for some time. Go to the Keynote. It's the start of the conference, and at JNUC it starts well. I know it might be hard getting out of bed after the long flight the day before but do it. In fact, get into the conference venue for breakfast and a gossip every day before the first presentation. Talk to people. Don't be afraid to talk to anyone. The "hallway" track can be a great part of the in-person experience. Ask questions. Seriously, the presenters want questions and hope all the attendees go away with
Seems like the root path of when the script is run automatically is different.I have changed the path resolution to this now - currentUser=$(stat -f%Su /dev/console) userHome=$(dscl . -read /Users/$currentUser NFSHomeDirectory | awk '{print $2}') Will this solve my issue since i am looking up for some specific files in each computer?I am trying to confirm if it works on automated runs since it does on the manual ones (jamf recon) - but how do i trigger the policy for all computers using the jamf dashboard?
As some of you may know MS messed up the the last version of Defender and it does not let the install go forward because tamper protection is set to block. Usually it sets it to enable the install and then back on. Does anyone have an easy way to do this in Jamf. I am not great with scripting and the only way I see to do it is via a few policies.
Heads up to my fellow Jamf community. We've been seeing iPadOS 15.8.4 iPads when reprovisioned can't be enrolled to Jamf School. This may affect Jamf Pro too. The exact error is "Failed to retrieve configuration". I reached out to Jamf support and they said they have been getting reports of this from others and that this has been observed across different MDM providers. Jamf reached out to Apple regarding this issue and this is exactly what they told me: Apple did get back to us just a bit ago, and they have identified the issue (they did not elaborate on what the issue was). The release is not ready yet though and at this time they couldn't give me an ETA on when that would release. For now I created an internal Jamf Product Issue so we can track customers and I have attached this case to that ticket (PI136109). Hopefully an update that fixes this issue will come out soon. Jamf did say that they could reproduce my issue but had mixed results as one te
Hello, we have configured an 802.1X network profile with a scep profile that generates a machine certificate per computer. When connecting to the network we are forced to select the certificate. Isn't there a way to make the selection automatic?
Anyone have a good way to deploy this? Yes, we know it isn't supported except for individual installs - but seriously, when you are a school district and have over 100 Mac Labs - you have to find a better way. Need a little help on this one - we keep getting the Message: Secure Browser may be running from the original file download location.Any help on this one would be appreciated!
Previously, we deployed the following script to allow standard users to change the date and time without requiring admin credentials. However, this is no longer working on Sequoia devices. Can someone assist in enabling this functionality on Sequoia devices? #!/bin/bash # Allows any user to change the date and time on their Mac. /usr/bin/security authorizationdb write system.preferences.dateandtime.changetimezone allow /usr/bin/security authorizationdb write system.preferences.datetime authenticate-session-owner-or-admin exit 0;
Hey All,We’ve been using a fleet of WiFi Only Apple TV’s as digital signage in single apple mode, we changed the configuration profile, and this appears to have disconnected all of them, while keeping them stuck in single app mode. Is there a way out of this? Kind Regards,Jarrah
Hello,I am having trouble setting up device compliance in Jamf Pro. I followed the instructions found here: https://learn.jamf.com/bundle/jamf-pro-documentation-current/page/Device_Compliance.html but when I got to the part where I was redirected to the Microsoft Intune webpage, nothing happened. The Microsoft login window appears; I enter my email address and am then brought back to Jamf Pro with a "Registration Request" error and another warning below that states it is "Establishing connection" with directions to "Open consent URL." I click on the open consent URL, get to the Microsft login window, enter my Azure email address, and am then brought back to the Jamf Pro screen with these same two messages. I have Azure GA rights and have tried two different browsers (Safari and Edge) with no success. Has anyone else come across this issue? I figured that I'd try here before submitting a ticket with Jamf. Here is the error and warning messages Registr
If you haven’t read part 1, then click here and go back and read it. The next portion of Apple Intelligence is now shipping with macOS 15.2 and iOS/iPadOS 18.2. We now have Image Wand, Image Playground, Genmojis, ChatGPT integration, and a little more. To soothe all concerns quickly, Apple Intelligence is NOT powered by ChatGPT. It will never send data off to ChatGPT without first asking permission and that integration must also be enabled. Ok, now that that’s out of the way.Apple Intelligence now features image playground, Genmoji and moreWhat’s great is that all of these features have a way to be blocked. Apple has provided the following configuration profile keys for the preference domain com.apple.applicationaccessallowImagePlayground allowImageWand allowGenmojiAnd new as of Dot 2 releaseallowExternalIntelligenceIntegrations allowExternalIntelligenceIntegrationsSignInThe two new keys, as of the Dot 2 releases, must be deployed on the Dot 2 releases and higher versions. They may not
What to expect:• Apple will announce four new iPhones, including an ultra-thin model iPhone 17iPhone 17 AiriPhone 17 ProiPhone 17 Pro MaxApple Watch Series 11Apple Watch Ultra 3https://www.apple.com
Can someone help me with a script or payload any option to enable screensharing on specific app like Teams / Slack or Zoom - Automatically from Jamf or Mosyle- we are using Mosyle for managing MAC'sNote: User: With out manually clicking on it.If yes, please help me with the same.
We have a script to disable the macOS randomization, it’s been working prior to macOS 15.6. Since 15.6 it has not worked, it also does not work on the beta of Tahoe. The script would hard code the MAC randomization to OFF, and set the default for all new networks to “NOT SET” which then becomes “OFF”.Has anyone else experienced issues with MAC randomization on 15.6 or the Tahoe beta?
Hi Jamf Nation, we're thrilled to announce that compliance benchmarks capability in Jamf Pro is now generally available! This release transforms how your organization manage compliance across Apple devices, making compliance validation and enforcement simpler than ever before. Benefits At the heart of this new capability is a streamlined approach to security compliance: Quick Setup and Implementation - we've integrated both CIS Level 1 and Level 2 benchmark templates from macOS Security Compliance open source project (mSCP) to allow rapid deployment of compliance rules. Using compliance benchmarks, IT teams can quickly create compliance configurations across your organization. Flexible Options - IT teams can assess compliance status in monitoring mode before enforcing changes, allowing them to understand impact and prepare users. This provides a risk-free way to evaluate compliance status without disrupting productivity. Automated Remediation - when devices fall out of com
For the life of me I simply cannot get our Windows Virtual Print queues with Papercut working on MacOS (currently for us 15.6.1).I get the dreaded ‘unable to connect to printer’ error. and then its just stuck waiting. Here is what I’m doing.I set up the printer locally using the advanced tab and add it as smb://print.domain.local/printer-queuename I select the universal “Mac Printer” driver I downloaded from Fuji Xerox site (currently v 2.6). I do a test print. It works. But only once. It never works again. If I now add a second printer queue using the same method it doesn’t work. if I then go and delete the initial printer I added and re-add the steps I cannot print again that also doesn’t work. I’ve also added the following script in the hopes that kerberos will play nice. No joy.lpstat -p | awk '{print $2}' | while read printer; do echo "Setting Kerberos on ${printer}" lpadmin -p "${printer}" -o auth-info-required=negotiatedone Has anyone else experienced this? I am at a co
Is there a way to get set up a search to show any user without a device (iPad) assigned to them? I am trying to clean out our user database.
Hello,We are evaluating ways to enhance our IT support workflows and are particularly interested in leveraging customer support automation software alongside Jamf Pro. Our goal is to streamline tasks such as ticket creation, device status updates, and end-user communication without compromising service quality.Has anyone successfully implemented such integrations within a Jamf-managed environment? What challenges did you encounter and what measurable benefits such as efficiency gains or improved user satisfaction did you observe?Any recommendations for best practices or compatible tools would be greatly appreciated.
Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
