Using Jamf Pro. We have an extension attribute for App-Packs for grade levels (K-2, 3-5, 6-8). Is there an easy way to change this in bulk? I typically use MUT, but v6 doesn’t have Ext. Att as an option and Classic wont be compatible with MacOS for much longer. I even tried using the MUT on Jamf Extender but that didn’t work. Any help is appreciated. 

Hi Nation,Product Office Hours #8 - Jamf Setup Manager & ChecklistNext session: Thursday, 8th Oct - 10 am CDT / 4 pm BST / 5 pm CEST *please note this is one hour later than usual*Speakers: Armin Briegel, Senior Consulting Engineer ​@arminBriegel Register here: https://jamf.it/ProductOfficeHours 🧵 Got a question? Drop it in the comments below ahead of time if you want it on our radar, though you don't have to. We'll be taking questions live on the call! The Q&A transcript will be added to this thread post event.See you there!

Our infrastructure team is complaining about bandwidth congestion over the two 10 GBPS E-Lans.Has anyone moved from the 10 GBPS E-Lan to Dedicated Internet Access (DIA) or Cloud Connect to and experienced less congestion?

Hello,We are wanting to deploy software updates to our iPhones and iPads outside of business hours. However many of these devices use cellular when not onsite. A big concern is going over our data limit and being charged for overages. Is there a way to restrict OS updates to only occur if a device is connected over wi-fi?

 Hi all,I'm testing macOS 27 Golden Gate (26A428) before fleet deployment and I'm trying to hide the VPN section from System Settings using the com.apple.systempreferences payload with the DisabledSystemSettings key.Bundle ID used: com.apple.NetworkExtensionSettingsUI.VpnSettingsIntents (confirmed via pluginkit -m -A -v | grep -i vpn)What I've tried:Deploying a native com.apple.systempreferences payload via Jamf Pro (uploaded as a full .mobileconfig) Running sudo defaults write /Library/Preferences/com.apple.systempreferences DisabledSystemSettings -array "com.apple.NetworkExtensionSettingsUI.VpnSettingsIntents" manuallyIn both cases the profile installs successfully and the key is present, but the VPN section remains visible in System Settings.This worked correctly on macOS 26 Tahoe. Has anyone found a working bundle ID or alternative approach for macOS 27?Thanks

Hello Jamf Nation! On October 1st, we made exciting updates to Jamf Premium Support (blog here: https://www.jamf.com/blog/jamf-premium-support-technical-account-managers/. You still get the same expert help from our internal support team, including Tier 3 support, enhanced target response times, and 24/7 access to support, but with some added benefits. Let’s look at the highlights: Premium Support Tiers:  There are now five tiers of Premium Support, with the addition of Premium Support Titanium   Technical Account Manager: A Technical Account Manager (TAM) adds proactive technical guidance to help plan and implement your Mac or mobile strategy. There are three different types of TAMs available, dependent on the Premium Support tier:  Collaborative TAM: These Jamfs provide proactive technical advice and guidance to help you configure your Jamf environment and implement industry best practices. Available with Premium Support Gold and Platinum.   Integrated TAM: These Jamfs help plan and

Dear Community,i stumble upon the Topic:  I am currently facing the notorious "Peak Storage Overhead" / Storage Bottleneck issue while trying to update our fleet of 700 iPads (8th Generation, 32GB models). Even after a factory wipe, the Over-the-Air (OTA) update fails due to the system data footprint taking up too much space on these 32GB devices.I stumbled upon the topic where @cr4sh0ver mentioned a solution:"We changed our 'PreStage Enrollment' to require the latest OS before enrollment is processed. iPads go through normal enrollment process after the iPad has been updated..."Since we are running Jamf School (not Jamf Pro), I am struggling to find this exact setting. I know that we don't have "PreStage Enrollments" by that name, but rather Automated Device Enrollment Profiles (DEP) and Blueprints.Could anyone give me a quick, detailed step-by-step walkthrough for Jamf School on how to replicate this fix for a single test device?Where exactly in the Jamf School DEP profile (or elsewh

Hello everyone,Anybody able to advice witch way to go to get Singel Sign-On for our Apple fleet? Is it with only Single Sign-On extension in Jamf, Kerberos SSO extension via Apples site or any other?

I am trying to configure Content Caching with MacOS 27, and they deprecated the Content Caching through Configuration Profiles. The main goal is to automate ICS with iOS devices.I have a Blueprint setup, and I have enabled “Auto enable tethered caching” and set it to True. This will set the key “AutoEnableTetheredCaching” to 1. However, I don’t see a way to set “AllowTetheredCaching” to a 1 as well.Limited output from “defaults read /Library/Preferences/com.apple.AssetCache.plist”:    Activated = 1;    AllowCacheDelete = 1;    AllowPersonalCaching = 0;    AllowSharedCaching = 1;    AllowTetheredCaching = 0;    AutoActivation = 1;    AutoEnableTetheredCaching = 1;    CacheLimit = 0; 

I have a problem where some users are unable to enroll new devices in Jamf School. I use enrollment via Entra. After entering their email address and password, it just spins for a while and then returns to the Entra window saying, “You can’t sign in right now. Please try again.”When I check the sign-in logs in Entra, they show “successful” several times, but no failed attempts. However, this does not affect all users—some are able to sign in and enroll devices, which is what confuses me.Has anyone run into the same issue?

Environment:- Fleet of iPads enrolled as Shared iPad via Apple Business Manager- Managed via Microsoft Intune- Federated authentication with Microsoft Entra IDIssue:The "Recent Users" pre-sign-in screen (the screen shown before any user signs in, displaying recent user avatars) never times out or goes to sleep on its own, regardless of the Auto-Lock setting configured on the device. This causes the display to stay on indefinitely whenever the device is sitting at this screen, which is a significant battery drain concern for a shared-device fleet.Steps to reproduce:1. Enroll an iPad as Shared iPad via Apple Business Manager / Intune2. Sign out of any active user session so the device returns to the "Recent Users" screen3. Leave the device untouched at this screen4. Observe: the screen never dims or locks on its ownTesting done:- Tested with Auto-Lock set to 2 minutes on one device and 5 minutes on a second device- Both devices exhibited identical behavior: the Recent Users screen stayed

If you’ve ever looked at a question during an exam and suddenly forgotten something you’ve practiced dozens of times, you’re not alone. Exam anxiety is real, and it affects all of us differently. Jamf Training Courses include a certification process, and the thought of any exam can be stress-inducing. Even for an experienced Jamf Admin, there’s often a different feeling when you’re completing those tasks under a time pressure. The good news is that exam anxiety doesn’t have to prevent you from succeeding, and I wanted to share some strategies I’ve seen help students prepare with confidence and perform their best during Jamf Training Courses.During Your Training CourseParticipate in ClassThis might seem obvious, but one of the best strategies for preparing yourself for the exam is to actively participate in the Training Course. Follow along with the material in the way that you learn best, whether that’s watching the demonstrations before completing the lesson tasks or mirroring the dem

Hi All.Does anyone know if it is possible to restrict access to the hidden photo album or even the ability to hide photos in the first place?I’m surprised there isn’t a restriction setting within Jamf to disable access to this.Cheers

8th gen ipads have only 32GB of storage, 11GB are used for OS and 3GB for system data, so, if you want to upgrade from iPadOS 18 to 26 the update requires 20GB of storage available in order to update making it almost impossible to update. The only options I see is to “restore” iPad with mac device or configurator, but just imagine doing this for hundreds of iPads, so the other option is to NOT update.If you have\had this same issue let me know if you have found better options for this update and did you, your business or school district decided to stay in iPadOS 18 or not.

This year I had the privilege of presenting my first talk at JNUC after attending the previous three conferences. The talk grew out of extensive testing performed while troubleshooting problems in the environment where I was then working.Its central contention was relatively simple:Individually correct states do not necessarily produce a coherent system state.DNS can be correct. Identity can be correct. VPN can be correct. CASB can be correct. EDR can be correct. Individual Network Extension providers can all report that they are functioning normally.And yet the endpoint can still lack a reliably functioning path for MDM and its supporting transactions.I sometimes think of this as several independent republics, each functioning according to its own laws but without sufficient diplomacy between them. Every subsystem may be behaving correctly from its own perspective while the system as a whole lacks coherence.On macOS, this becomes particularly important because multiple security and ne

I work for a school county and all our iPads have some apps in single app mode and they are not auto-locking and the battery is draining fast.

I work for a school county and all our iPads have some apps in single app mode and they are not auto-locking and the battery is draining fast.

Hi Jamf Community,I’m looking for guidance on implementing Recovery Lock password rotation for existing Apple Silicon Macs already enrolled in Jamf Pro.Current SetupFor newly enrolled Macs, we have enabled Recovery Lock through PreStage Enrollment.This works as expected:Recovery Lock password is automatically generated. The password can be viewed from the device inventory in Jamf Pro. After the password is viewed, Jamf automatically rotates it after approximately 1 hour.Challenge with Existing MacsWe also have a number of Apple Silicon Macs that were enrolled before Recovery Lock was enabled in our PreStage configuration.For these existing Macs, I created a script that uses the Jamf Pro API with Client ID and Client Secret authentication.The script successfully:Authenticates to Jamf Pro. Retrieves the Mac’s Management ID. Generates a random Recovery Lock password. Sends the SET_RECOVERY_LOCK MDM command. Successfully enables/updates Recovery Lock on the Mac.This part is working as expe

Hi,I’m using a extension attribute for the latest macOS suppported on managed Mac in my Jamf Pro instance.The extension attribute i use is update for macOS Tahoe, but i haven’t found an update to support latest Mac and macOS 27.Could you help me?Thanks

We are a University with Apple School Manager and Federated Apple ID setup, devices managed by Jamf Pro. Recently we've seen an issue with new users signing in to our shared iPads. They sign in with the federated account details fine, are prompted to create a passcode as normal:Then, when logged into the iPad, when the screen locks then the prompt to enter their passcode to unlock it is not the same as the normal federated one, its a numerical keyboard only, so they have no way of entering the alphanumeric passcode they just created:I've found that resetting the users passcode within School Manager resolves the issue. But its not a workable solution to have to do this for an entire class during a teaching session. Has anyone else experienced this issue?

Does Jamf Pro 11.32.1 support Apple’s LiquidGlass Setup Assistant SkipKey in Mobile Device PreStage Enrollment/ADE? If not, when will LiquidGlass be included when “All” Setup Assistant Options are selected?

It’s all about community with JNUC. That is the biggest and most important thing I took away from JNUC 2026 this year, apart from all the technical stuff, of which there was plenty, but that isn't what this article is about. I had been to a JAMF Nation User Conference before, back in 2025, and it was great. This year was no exception, with one large distinction: it wasn’t my first JNUC this time. I was lucky enough to get to go this year via the “Diversity Sponsorship.” Which is, in very plain words, an amazing opportunity offered by Jamf to give tickets to a lucky few users who fall into any of the diversity categories. Myself, a trans woman living in the South, I fell into the LGBTQ+ area of the diversity spectrum. With the sponsorship, the other winners and I were able to attend a very thorough “Level Up!” class that was offered a day before the conference officially began. The class was great, full of information, and genuinely worth whatever they would have charged, plus more. Alo

Hi Nation,Product Office Hours #7 - JNUC Keynote Recap Q&ANext session: Thursday, 1st Oct - 9am CDT / 3pm BST / 4pm CESTSpeakers: Matt Benyo, Director, Software Engineering, and Tim Knox, Senior Consulting Engineer, Industry SolutionsRegister here: https://jamf.it/ProductOfficeHours 🧵 Got a question? Drop it in the comments below ahead of time if you want it on our radar, though you don't have to. We'll be taking questions live on the call! The Q&A transcript will be added to this thread post event.See you there!