If you are looking to manage a fleet of Apple devices at scale, Jamf Pro Cloud is one of theleading tools out there. Whether you are handling Mac, iPads, iPhones, or even Apple TVs, thecloud-hosted version of Jamf Pro makes setup and ongoing management so much easier, no on-premise servers, no manual patching, and security managed by the experts at Jamf. Below, Ibreak down the main steps to get up and running with Jamf Pro Cloud, share key concepts,real-world workflows, and actionable tips.Table of Contents1. What is Jamf Pro Cloud?2. How to Implement Jamf Pro Cloud3. Core Concepts ExplainedPolicies Configuration Profiles Smart and Static Groups Extension Attributes Scripts App and Patch Management The Self Service Portal Inventory and Reporting Security and Compliance Integrations and Automation4. Example Workflows 5. Best Practices What is Jamf Pro Cloud?Jamf Pro Cloud is a fully cloud-based platform for managing Apple devices. Everything runsover the internet; you simply log in to a

Has anyone tried to disable iCloud Private Relay? I'm using the Plist below, but it only hides the iCloud Private Relay option in the iCloud settings and doesn't actually disable it. I still found it to be ON. Has anyone else experienced this or found another way to disable iCloud Private Relay? <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>allowCloudPrivateRelay</key> <false/> </dict> </plist>  

Mac Apps, App Installers, Jamf Apps, Jamf App Catalog… whatever name you know it by, the feature found in your Jamf Pro server at Computers – Mac apps – Jamf App Catalog is a great tool for deploying and patching many commonly used Apps which aren’t available through Apple’s App Store. For the sake of clarity, I will refer to them as App Installers for the remainder of this post. App Installers do have some caveats which are documented here. Being aware of those is well and good, but even the most experienced admins can make mistakes. Jamf Pro will not alert you if you have done something like overlapped scopes for different deployments of the same App Installer title.If this occurs, that App Installer will likely cease to recalculate its deployment as more Macs are added to the Computer Group it is scoped to. If you toggle the “stuck” app’s deployment off and back on again, it’ll force it to recalculate and the Macs it was missing will begin to receive it.This overlapping scope behavi

Connect 3.4.0Self Service+ 2.12.0OS 26.1 Tahoe (Many other machines on 26.0.1)I can not get this prompt to close no matter what I do. Everything in the back end seems fine with my machine and my connection to Jamf, self service, connect, everything, it all seems fine. Anyone have any ideas?  I did not see this issue prior to updating OS from 26.0.1 to 26.1 and that is the only thing I can think of that may be triggering it. I have tried deleting associated keys and allowing them to regen, I have tried flushing and re-pulling Config Profiles and Policies. P&S settings are all good. I have fond that if I leave the window there for 30min or more, it will finally close after entering PW and selecting Always Allow, but then comes back up after Reboot. 

Tahoe now wants to put three default widgets on the desktop in the upper left corner (Calendar, Weather, Photos)  I don’t mind the weather and calendar widgets but the Photos widget will confuse people who are using this machine in a Lab setting. How can I control, remove or disallow them during or after setup?I looked through all the Configuration Profile settings but there doesn’t seem to be any way in the Jamf GUI to address this. Will it require a custom Configuration profile?Thanks!

We're making a behind-the-scenes improvement to how your Jamf products work together — no action needed, and nothing will be deployed to your devices as a result.Over the next several weeks, we're grouping the Jamf products you own — such as Jamf Pro, Jamf Protect, and Jamf Security Cloud — into a single "platform environment." This is the foundation for Jamf's future platform capabilities, letting your products work together as one connected experience. In most cases, we'll set this up for you; there's nothing to configure. If we can't, this has no impact on your current experience and we'll let you know in the coming weeks and provide you a way to create this Platform Environment in Jamf Account.What this means for you:Already connected Jamf Pro and Jamf Protect? Nothing changes. Your setup continues to work as it does today. Not yet connected? The two will connect automatically. Your Jamf Protect plans will appear in Jamf Pro, ready for you to review and deploy on your schedule. Set

When I first learned about Jamf Setup Checklist, I didn't view it as merely an optional companion to Setup Manager. In my mind, this was the rare movie sequel that genuinely had a clear, critical purpose.Setup Checklist was something our users needed. Something our technicians needed. And frankly, something I needed.🤔 Imagine this scenario…💻 Your user receives a brand-new MacBook Pro.The user opens the lid, glides through the beautiful Setup Manager workflow, and waits patiently as Jamf Pro onboards the Mac.⏰ 30 minutes pass. The Mac reaches the Desktop. The user is excited and ready to be productive on day one.So, they try to open Outlook. Error: No Internet connection.Okay… so they try to open Safari. Error: No Internet connection.😰 Minnesota, we have a problem. Panic sets in. What’s the Help Desk number again?Because this user is tech-savvy, instead of immediately calling support, they double-check the Wi-Fi connection and try the classic fix: toggling Wi-Fi off and on. Safari st

We’re using Return to Service to wipe a group of iPads with the Return to Service option enabled under ‘PreStage enrollments’.  Now seeing iPads that have Software Update blocked with this message.   Unable to Check for Update   These settings are not available while this device is configured for Return to ServiceThis message shows on iPads even after an erase using Apple Configurator.Two questions. This now the default for all devices that support Return to Service even if not used on all iPads? How do we install any Software Updates if blocked? Jamf’s AI answers are telling me the fix is to unmanage these devices.

heres what i wrote up https://ideas.jamf.com/ideas/JPRO-I-2200 please vote if you agree, or are like me and are just simply terrified that you're going to accidentally hit the delete key….

Morning, I’ve recently upgraded our Logic Pro from version 11.2.2 to 12.3I’m concerned about our students downloading additional sounds/loops via the sound library (and filling up the hard drive) as it seems they can now download sounds without an admin password Has anyone got anything setup that will prevent users from either being able to open the sound library or prevent users from downloading sounds?  Thanks 

Hi everyone,I've been working through a deployment of Platform SSO Simplified Setup on macOS 26 using Microsoft Company Portal 5.2604.1 (5.2604.0 or newer is required per documentation), and I've hit a wall with username/account name mapping that I wanted to share in case others are running into the same thing and could potentially provide some alternative options.---Our Setup- Jamf Pro 11.28.1- macOS 26- Microsoft Company Portal 5.2604.1 (deployed as a PreStage package)- Microsoft Entra ID- PSSO profile with Simplified Setup enabled (EnableCreateFirstUserDuringSetup + EnableCreateNewUserAtLogin both true)- Authentication method: Password- Associated Domains payload included in the same profile---The ProblemEverything works end-to-end — Simplified Setup fires during the Setup Assistant, the user signs in with their Entra credentials, and a local account gets created. However, the local account short name is being set to the full preferred_username value (e.g. John.Smith@company.com), w

In Acrobat Pro and Adobe reader the Generative AI upload is enabled by default and you have to opt-out if you don't want to do that. Here for more: https://helpx.adobe.com/acrobat/using/generative-ai.htmlFollowing script can be deployed with a policy and creates two plists which disables Generative AI in Adobe Reader and Acrobat Pro. #!/bin/sh # Adobe Reader /usr/libexec/PlistBuddy -c "Add :DC dict" /Library/Preferences/com.adobe.Reader.plist /usr/libexec/PlistBuddy -c "Add :DC:FeatureLockdown dict" /Library/Preferences/com.adobe.Reader.plist /usr/libexec/PlistBuddy -c "Add :DC:FeatureLockdown:bEnableGentech bool false" /Library/Preferences/com.adobe.Reader.plist # Adobe Acrobat Pro /usr/libexec/PlistBuddy -c "Add :DC dict" /Library/Preferences/com.adobe.Acrobat.Pro.plist /usr/libexec/PlistBuddy -c "Add :DC:FeatureLockdown dict" /Library/Preferences/com.adobe.Acrobat.Pro.plist /usr/libexec/PlistBuddy -c "Add :DC:FeatureLockdown:bEnableGentech bool false" /Library/Preferences/

Microsoft has announced plans to move storage of the Workplace Join Key out of the user’s Login Keychain and into Apple’s Secure Enclave:    Microsoft Enterprise SSO plug-in for Apple devices - Microsoft identity platform    Announced in March 2024, Microsoft Entra ID will be moving away from Apple’s Keychain for storing device identity keys. Starting in Q3 2025, all new device registrations will use Apple’s Secure Enclave. There will be no opt-out of this storage location.  Applications and MDM integrations that have a dependency on accessing Workplace Join keys via Keychain will need to start using MSAL and the Enterprise SSO plug-in to ensure compatibility with the Microsoft identity platform.    In the same document, Microsoft provides guidance on how to test the Secure Enclave today to ensure the change will be compatible with your environment when the change goes live:   If you would like to enable Secure Enclave based storage of

It would be extremely beneficial if there was a “automatic log-out” feature with JAMF Setup/Reset for iOS.We routinely have staff that do not logout with JAMF Reset and the iPhone is locked to their unique passcode. Can JAMF create the ability to initiate JAMF Reset automatically after 20 or so hours?  This will be a huge quality of life improvement if JAMF could implement this.

Hello Everyone while i am trying to registry any mac device with company portal it is saying get the app popup even device already have the latest company portal app installed, If anyone can help me to fix it  Note - it was working as expected two days back 

Today we are releasing a maintenance version of Jamf Pro; highlights include:Resolved IssuesJamf Pro Server: Security IssuesJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI144208] Fixed: A cross-site scripting (XSS) issue.Jamf Pro Server[PI-1394] [PI-1471] Fixed: The Jamf Pro API returns IDs instead of human-readable display names when the following criteria are used: Computer Group, Mobile Device Group, User Group, Assigned User Group, Assigned User. [PI-1404] Fixed: Jamf Pro fails to create a Jamf Pro Summary when backend activation code services are nonoperational. [PI-1429] Fixed: Directory services sync may fail when the directory service is very large. [PI-1430] Fixed: When Jamf Pro attempts to sync with directory services and the database goes offline, Jamf Pro fails to complete the sync or restart the sync when the database becomes available again. [PI-1441] Fixed: Directory service groups fail to sync when the database contains dupl

Hey Jamf Nation 👋🏼, Welcome back to our Jamf Nation Development Series! 🚀 Next up - we have a free learning workshop on Human - Centered AI Implementation. Register now → https://jamf.it/JamfNationEvents  Here’s what this session is about:  Most AI talks aimed at technical folks skip the part that actually matters. They obsess over the tools and forget the humans running them. This session does the opposite.You're likely already using AI in your environment, so this session won't cover the basics. What's worth talking about is the harder-to-Google stuff: how to use this technology responsibly, what it's quietly costing us, and how to get real value instead of just more to manage. It'll stay practical and honest, with room for your questions and your war stories.Here's what we'll dig into together:Keeping humans at the center, even in a highly technical shop, and why the people side of AI is always harder than the technology The environmental footprint of AI, the part almost nobody's

• Apple link:  https://support.apple.com/en-us/125615In macOS 28 and later, the Mac OS Extended file system format will be supported only for volumes (disks and other storage devices) that aren't encrypted. For future macOS compatibility, either decrypt or reformat any encrypted Mac OS Extended volumes.

Does anybody have a solution for teachers with managed iPads to mirror a Netflix Video from their iPad to the Classroom ATV ? Netflix account is a personal account, as the school does not have any.Thanks for your helpger

Hello everyone,we are experiencing an issue with our Apple School Manager / Jamf School environment and hope someone can point us in the right direction.EnvironmentApple School Manager Jamf School Privately owned student iPads Automated Device Enrollment (ADE) Current iPadOS versionConfigurationOur student iPads are managed using Apple School Manager.Each student has a Managed Apple Account. The devices are assigned in Apple School Manager and synchronized with Jamf School. Devices are enrolled using Automated Device Enrollment (ADE). In Jamf School, each device is assigned to the corresponding student as the Owner. The devices only receive: one general profile ("All iPads") without any restrictions configured two Wi-Fi profiles As far as we know, there are no additional restrictions or App Store policies configured.The issueAs soon as a student signs in with their Managed Apple Account under Settings, the same account is automatically used for the App Store.There is no option in the

On Saturday, August 8, 2026, Jamf Cloud Infrastructure will be patched. During this time, you will be logged out of your Jamf Pro instance. The purpose of patching is to ensure that Jamf Cloud infrastructure and the database service are up-to-date, stable, and safe from security threats. Please see the times for our regions below. Hosted Data Region Date Start Time End Time us-gov-west-1 August 8, 2026 0800 AM CT 1200 PM CT

Hey everyone! Quick question. We are deploying MacBook Air’s in a school setting. The devices will be connected to school WIFI with a configuration profile. Do you think it is necessary to manually set WiFi at the top of the network service order? 

Hi, we use a pretty basic blueprint to keep our devices up to date to the latest MacOS , we force it to install within 30 days. Without having to edit this Blueprint and redeploy, will the regular “Block” for the New MacOS Golden Gate work and only keep the updates coming for Tahoe until we unblock Golden Gate (usually for us is 90 days after it comes out.). 

Hey Jamf Nation!We’ve released Jamf Pro 11.31.0 beta. This release includes new Mobile Device Smart Group and Advanced Search Criteria, API changes and more, check out the release notes after enrollment.How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Click “Join Community” to join the beta forum once enrolled. If you encounter an error on Jamf Nation joining the beta forum, please log into Jamf Nation and then click “Join Community” again. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks, Blueprints, and App Switcher. Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program! 

Is there any good way to do this? I have some icons that were replaced with higher quality ones and I would like to remove the older ones, but there is no interface I know of in the JSS. I realize I can go into the icons table if needed but would prefer not to.