We got a student iPad which has an unusual behaviour.The user chooses an app from the student app to install it. After the installation I saw that the app disappears directly. It’s not hidden. It’s deinstalled. In Jamf it shows the App is installed.Any idea what causes this?

I was trying to deploy a screensaver custom on MacOS via jamf but wanted to understand how to do so ?

Has anyone gotten jamf2snipe working with Jamf Pro Cloud API Roles & Clients (OAuth client ID/secret)? All documentation I see is for Classic API, which is blocked here

We look forward to JNUC all year. Then - in the blink of an eye - it’s over. Even though we’re tired (really tired), we miss it. Well, friends, you can now relive JNUC in our recap video!📸 Check it out!👉🏻 Did you see someone you know? Tag them below!👉🏻 What highlight did you like the best? Let us know in a comment. 👉🏻 Just loved the video? Shout out our talented Marketing team!  Thanks for watching! I hope to see you next year!!! 

Hi everyone,I’ve recently taken over maintenance of the Jamf Protect Batch Delete project to bring it back to life and ensure it stays compatible with the latest Jamf Protect updates.The app now includes a few quality-of-life improvements most notably Select All and Deselect All buttons for easier batch management.I’ve also created a .zip release so the tool can be easily downloaded and used right away.I’d love to hear your feedback, feature ideas, or improvement suggestions to make the tool even better for the community.Feel free to comment here or open a new issue with your ideas!You can grab the latest version here:👉 Download Release v1.0Thanks for supporting this project let’s keep it alive together!— Bryanhttps://github.com/Layer-Group

An original version of this post has been shared to Patch Notes and Progress. Reflections from JNUC 2025 — automation, openness, and community taking Mac management to new heights. Denver, Colorado | October 6 – 9, 2025Day 0 — Travel and New ConnectionsJNUC 2025 in Denver was my first in-person Jamf Nation User Conference — and my first time ever on a plane. Over three days, I watched Jamf redefine what MDM means in an API-first world, connected with the Mac Admins community I’ve long admired, and saw firsthand how automation, identity, and community are working to shape the next chapter of Apple device management services. As mentioned in a previous post: Prepping for JNUC 2025, I had been awarded sponsorship by Jamf to attend this year’s Jamf Nation User Conference in Denver Colorado. Before I even left Pittsburgh, Jamf had already dropped next year’s headline: JNUC 2026 will be held in Kansas City, Missouri (Sept 23– 25), with early-bird registration open. JNUC 2026 to be hosted at

Hi everyone,I’m running into an issue trying to upgrade Jamf Connect across our environment and hoping someone from Jamf or the community has seen this before.Until recently, I was able to update Jamf Connect using the dropdown underSettings → Jamf Apps → Jamf Connect → Deployment and Update Settings.That list used to automatically show each new version as Jamf released it (for example, 2.44 → 2.45).Now the dropdown has stopped updating — it’s capped at 2.45.1, even though 3.4.0 has been released publicly for several weeks.I’ve tried to manually handle the upgrade:• Downloaded JamfConnectLogin.pkg (3.4.0) from account.jamf.com.• Uploaded it into Jamf Pro (Cloud Distribution Point).• Created a policy to deploy it to test devices and tied it to our existing PreStage.• Policy runs successfully, reports “completed,” but the actual version on the Mac remains 2.45.1 — both in Get Info and when checking the bundle version via Terminal.• I’ve confirmed the correct PKG is being used, deleted th

Previously, we deployed the following script to allow standard users to change the date and time without requiring admin credentials. However, this is no longer working on Sequoia devices. Can someone assist in enabling this functionality on Sequoia devices? #!/bin/bash # Allows any user to change the date and time on their Mac. /usr/bin/security authorizationdb write system.preferences.dateandtime.changetimezone allow /usr/bin/security authorizationdb write system.preferences.datetime authenticate-session-owner-or-admin exit 0;  

Hello, We have been testing out Jamf Connect 3.5 the previous configuration we used with worked just fine with Jamf Connect 2.45.1 but after testing out Jamf connect 3.5 seems like no log in option appears during login it just shows the user. Normally we had options for SSO, local login, restart and etc. Thank you for any help in advance.

Hello.  This is more of a Microsoft question, but i'm not having luck down that route yet. We want Jamf Cloud to manage all of our institutionally owned iPads with MDM.  We want Intune to manage all user-owned Apple devices with Application Protection Policies.  The problem is, users only have 1 account.  So if they sign into a corporate iPad, they get a mix of both Jamf MDM configuration profiles and Intune application protection policies on their corporate device.  We want the Intune Application Protection Policies to ONLY apply when a user signs in on a personally owned device, and not a Jamf managed device. I don't know if that is possible since scoping an Application Protection Policy is based on AD group.  If their ID is in that group then they get Intune App.  I don't see any other criteria to filter out a device if it is Jamf MDM managed. Has anyone run into this or found a solution? Thanks

anyone getting this Sync failed: Communication error. Awaiting next sync. ????when creating a new prestage enrollments ?what's the sync interval? even after the sync interval has passed it is still displaying this Sync failed message

We have enabled Azure AD as a Cloud Identity Provider, as well as Azure AD SSO. We also have some iPads assigned to a Prestage that features an Enrollment Customization that includes an SSO Authentication pane. The pane is displaying as expected on the device, and I can sign in through that pane using my Azure AD credentials.We have enabled "Collect user and location information from Directory Service" under Inventory Collection settings.However, the "User and Location" portion of the device inventory remains blank. We've gone through multiple wipe and re-enrollment rounds with this device, as well as an "Update Inventory" MDM command... nothing.Jamf Pro’s documentation says that assigning a user to a computer or mobile device can be done “during user-initiated enrollment (LDAP users only)” - does this not include the Cloud Identity Providers such as Azure AD? Or do we have something misconfigured somewhere?

If you are wondering what the “Login Window Size” Options of WIDE, COMPACT and MAX looks like for Jamf Connect. Here they are, especially for Okta on the login screen. Not the prettiest of Login windows but at least they will give you a good idea what to expect.This was changed in 2.45.1 I believe and is still the same in 3.2.0CompactCompact Settings for Login Window SizeWideWide Settings is the same as Compact, except stretched side waysMaxMax Settings covers the date and time.  

Tahoe now wants to put three default widgets on the desktop in the upper left corner (Calendar, Weather, Photos)  I don’t mind the weather and calendar widgets but the Photos widget will confuse people who are using this machine in a Lab setting. How can I control, remove or disallow them during or after setup?I looked through all the Configuration Profile settings but there doesn’t seem to be any way in the Jamf GUI to address this. Will it require a custom Configuration profile?Thanks!

Another significant update — now including detection of outdated Electron apps which can slow down macOS 26 Tahoe — to the practical and user-friendly approach to surfacing Mac health information directly to end-users via Jamf Pro Self Service Overview Mac Health Check provides a practical and user-friendly approach to surfacing Mac health information directly to end-users via Jamf Pro Self Service.Built using the open-source utility swiftDialog, the solution acts as a “heads-up display” presenting real-time system health and policy compliance status in a clear and interactive format.Administrators can customize the user interface using swiftDialog’s visual capabilities, making the experience both informative and approachable.The tool logs results for review, while not altering device configuration, and a new “Silent” Operation Mode makes Mac Health Check ideal for IT visibility without end-user intrusion.Continue reading …

Anyone else using DUO on Chrome and get this new Chrome "bug" to allow DUO to access devices on the local network? I put together a teeny Config Profile to allow local network access to duo security. I’m told it will work with other Chrome extensions, such as Okta Fastpas as well.Here’s what the Plist preview looks like:<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC “-//Apple//DTD PLIST 1.0//EN” “http://www.apple.com/DTDs/PropertyList-1.0.dtd”><plist version=“1.0">  <dict>    <key>LocalNetworkAccessRestrictionsEnabled</key>    <true/>    <key>LocalNetworkAccessAllowedForUrls</key>    <array>      <string>[*.]duosecurity.com</string>    </array>  </dict></plist>  Note: DO NOT neglect those box brackets if you’re using a wildcard.Create a new Configuration Profile in Jamf, Name it and apply Site and Categories as desired. Leave the settings to install on Computer Level and to Install A

I have been tasked by our security team to limit the terminal app to only allow admin accounts to open it due to a vulnerability. Any suggestions or best practices/advice on this? I do not want to rescrict the app completely because we use it for troubleshooting but we want the standard user to be locked down as much as possible. 

I am trying to troubleshoot some problems I am having with a few of my machines. I keep seeing this error in the log files and am not sure exactly what it means JMFCommons.JamfKeychain.JamfKeychainSecurityError.failedToReadJmfKeychainPassword  is what I keep seeing and I believe it is the root of all the other errors I am seeing. Can anyone shed some light on what causes this problem and how I can fix it. Thank you in advance

Does JAMF Sync suddenly require a your JAMF server to be cloud based?  I’m suddenly having issues syncing jamf sync to our on prem jamf server and it has an error referencing a cloud based server which we dont have.  

We experience blank/black screens after the Welcome to Mac screen. We performed a full reinstall via recovery, but experience the same again.Also tried to go into recovery, terminal, and remove /Volumes/Data/private/var/db/.AppleSetupTermsOfService but no success. Similar issues have been reported online - is there a fix for this?:https://www.reddit.com/r/mac/comments/1o3tt1i/does_anyone_know_why_its_stuck_on_the_welcome/ https://www.reddit.com/r/MacOS/comments/1kh2nbg/macbook_air_a2681_black_screen_after_welcome_to/

Today we are releasing a maintenance version of Jamf Pro; highlights include: Resolved IssuesJamf Pro Server: Security IssuesJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI135989] Fixed: A broken access control issue.Jamf Pro Server[PI120239] Fixed: A failed declaration storage service (DSS) health check during Jamf Pro Server startup can cause an unhandled exception that prevents the server from initializing completely. [PI143843] Fixed: When opening a mobile device configuration profile's scope and returning to the Options tab, the Scope pane remains on the screen and blocks the view of the Options tab. [PI143897] Fixed: Increased CPU usage may occur when the InstallMedia command is queued in large batches. For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Solutio

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

I am in a conundrum here.  Fresh out of the box I need all Office Apps deployed to our users.  Word, Excel, Outlook, OneNote, PowerPoint, Teams.  In the last wipe and reset on a device, it was taking forever for the apps to become available.  SelfService did not show them either as they are set to install automatically through the Jamf App Catalog.  I am looking for advice from the community to help me figure out the best method for deployment.  I need the apps to be there after deployment, my company requires them to be on the Current Channel and updated after each release of an update. I like having them visible in SelfService, but I do need the push method as well. Jamf App Catalog seems to limit this possibility unless someone has figured out a way around it.  I am not on SelfService+ as of now.  

Is there any way to get the password sync status from the new Self Service+ as Extension Attribute?Would be really nice to see if Google and the local user are in sync. Other ways to archive it are welcome 😀