Hello,My organization has asked me to explore whether it’s possible to control macOS login behavior based on Active Directory group membership.The goal is to automatically log out a user if they belong to a specific AD group. Additionally, as long as the user remains in that AD group, they should be prevented from logging in to macOS at all. We would also like to block all local unlock methods (password, Touch ID, etc.) while the user is in that AD group.Is this type of workflow achievable? Does Jamf provide functionality that can enforce these restrictions?

I’d wanted to understand for a while how Apple structures its own support approach and what really lies behind the Apple Certified Support Professional certification. So I decided to take the exam myself. In this post, I’ll share how I prepared, which learning resources helped me most, and what I’d recommend to anyone planning to do the same. The Apple Certified Support Professional (ACSP) certification validates comprehensive knowledge in supporting and administering Apple devices. It’s designed for IT professionals, help desk staff, and administrators who regularly work with macOS, iOS, or iPadOS and provide daily end-user support. “This course introduces you to the knowledge, skills, and tools used to support and troubleshoot Apple devices in a large organization as a level 1 or 2 help desk

Hi Jamf Nation! Exciting news - the JNUC 2026 Call for Sessions is officially open through April 10!Thinking about becoming a JNUC speaker? Check out the Speaker Prospectus for all the details. We can’t wait to see your ideas - submit your session here! Questions? Email us at jnuchelp@jamf.com

How can I manage the new* AI Controlswithin Firefox with a Configuration Profile?Is there a way to configure it via a JSON?Thanks in advance!

I’m struggling, we’ve got a policy that disables uninstalling apps and system apps, and we have a policy that enables uninstalling apps and system apps.I’ve confirmed the Disable policy was removed from the device and the Enable policy was installed. I’ve confirmed no other applied policies are affecting those toggles (“remove apps” and “remove system apps”)For some reason, the device still won’t let us uninstall apps. What am I missing? We’ve restarted the devices and still no luck.

Has anyone determined a way to see how frequently Mac Apps is updating an application on a device? The scenario here is we’ve automated Chrome updates via Mac Apps. This is great and makes us IT admins happy. We have one user who complains his Chrome is being updated “almost daily”. Now I know this isn’t true but I want to capture logs to document how frequently his machine (or others) is updating apps.  Has anyone run into this situation before and seen a solution? Thanks,

Unable to complete file upload. fiie contents does not match file type in Jamf when uploading an automated device enrollment token from apple business manager

Hi, My JAMF ID is working and I can login at JAMF.com fine. I have existing accounts in JAMF Now and School. If I select JAMF now it logs me straight in. JAMF school sends me to the login page and none of my passwords work. requested a password reset and nothing ever comes through! Anyone else seeing the same?

Hi,    Our company WiFi uses user network creds to join, but the window that pops up for this has a certificate dropdown box (with several items available).  The users get confused and start trying these.   Is there a way to remove this box for at least this one SSID? Thanks in advance,    -Pat

Hi Jamf Champions,We have MC1223829 – Upcoming Conditional Access change: Improved enforcement for policies with resource exclusionsThis update states that if you have Conditional Access (CA) policies that are applied to all resources with excluded resources, and if those excluded resources have OIDC scopes or a

Today we released Jamf Connect 3.7.0; this release addresses the following product issues: [PI-923] Fixed: Authenticating via web view with Entra ID using a FIDO2 passkey prevents users from authenticating with Jamf Connect via the login window. [PI140159] Fixed: After two incorrect login attempts, the Jamf Connect login window fails to accept the correct password and prevents the user from authenticating after the lockout timer is complete. [PI152763] Fixed: The Sign In window displays two arrows that do nothing when clicked. Fixed: The installer for Jamf Connect does not force quit the Jamf Connect login window while deployment tools, such as Jamf Simplified Device Enrollment, are in use. T

Connect 3.4.0Self Service+ 2.12.0OS 26.1 Tahoe (Many other machines on 26.0.1)I can not get this prompt to close no matter what I do. Everything in the back end seems fine with my machine and my connection to Jamf, self service, connect, everything, it all seems fine. Anyone have any ideas?  I did not see this issue prior to updating OS from 26.0.1 to 26.1 and that is the only thing I can think of that may be triggering it. I have tried deleting associated keys and allowing them to regen, I have tried flushing and re-pulling Config Profiles and Policies. P&S settings are all good. I have fond that if I leave the window there for 30min or more, it will finally close after entering PW and selecting Always Allow, but then comes back up after Reboot.

We provide a pretty white glove service to our customers in that we run setup on every new IOS device, manually set some settings that our not manageable through an MDM, and decluttering the home screen of widgets and many native IOS apps.To be clear, I don’t want to remove or lock down the use of many native apps. I would like to remove all widgets, and remove the home screen SHORTCUTS to many native apps but leave the actual app itself available from the app library if needed.The goal is to deliver a device with a clean decluttered INITIAL layout device that has only the core native apps (such as phone, settings, messages, photos etc) and the required business apps on the main home screen page. After that, if a person wants to drag a shortcut to the calculator app (for example) out the home screen, they can do that from the app library.I realize that I can create a conf profile that HIDES apps, but I don’t want to do that because it removes access to that apps

Update 23 February 2026: Standard Cloud upgrades have been rescheduled for the weekend of 6–7 March 2026 (details below). We appreciate your patience with the revised schedule. Today we are releasing Jamf Pro 11.25; highlights include:Branding Self Service+ for macOS via Jamf ProYou can change the Self Service+ application name and icon using Jamf Pro and Self Service+ 2.15.0 or later if Self Service+ is set as the default end user application. Previously, modifying Self Service branding settings in Jamf Pro only altered these attributes in the Self Service classic application.Improvements for OIDC-Based Single Sign-On Through Jamf Account

Hey Nation,A lot of what makes this community great isn’t what we build, it’s what you all bring to it.The answers, the advice, the time you give to help someone else out, it doesn’t go unnoticed.I wanted to share a genuine thank you to everyone who contributes, supports, and shares their knowledge here ❤️.And what better way to show that than bringing my fellow Jamfs into it  👀.So, Jamf team, let’s shout out what we appreciate about our customers!I’ll start….Shoutout to ​@scooterkohler , whose enthusiasm and desire to learn have been clear since joining the community last year. You’ve thrown yourself into the Jamf Heroes program (so much so, you’re a featured highlighted Hero 👏🏼) and have already started a user group in your area to bring others together 🙌🏼. Thank you for your energy and willingness to

Hello!In the last 2 years, I have had some Macs lose all configuration Profiles (including the MDM profile) when they try to renew the MDM Certificate (and fail for some reason)Mostly that could be fixed cancelling the “Renew MDM Certificate”-Pending task in the Management-Tab and then have the User run “profiles renew -type enrollment”. But it surely seems like a bug, when the (non-removable) MDM profile is gone.Has anybody seen something similar and a fix for it?Bye, Frido. 

I am having an issue creating a  PreStage enrollment in Jamf Pro, The 'New' PreStage button hangs immediately on click. I have verified the ADE token is new and UIE is enabled. I just see a spinning wheel when I click New to create a PreStage enrollment for Computers. The Devices/ios one works fine. I did try chrome, firefox, safari browser, same issue.   

With Apple recently expanding access to the ABM/ASM API, I set out to recreate the GSX experience. By leveraging Jamf’s new MCP feature, Claude Code, and MUT, I believe I’ve come very close. Additional details are outlined below.Please visit the following Github repo for the latest version of Warranty Wrangler: https://github.com/brndnwds6/Warranty-Wrangler/tree/main#!/bin/zsh# ==============================================================================# Script Name: warranty_wrangler.zsh# Author: Brandon Woods# Date: February 23, 2026## Changelog:# February 25, 2026 — Added AppleCare+ support. Warranty Expires now reflects# the AppleCare+ expiration date when active coverage exists,# falling ba

Jamf Pro Dashboard (Open Source) — Looking for feedback + contributors Hi Jamf Nation — I’ve published an open-source Jamf Pro Dashboard project that connects to Jamf Pro and provides a clean, fast admin dashboard for at-a-glance visibility (the stuff we all end up checking repeatedly). Repo: https://github.com/flynn33/Jamf-Pro-Dashboard I’d love feedback (and PRs if you’re interested) on: What widgets/tiles you’d want most (smart groups, device counts, check-in failures, expiring MDM profiles/certs, etc.) Which Jamf Pro API endpoints you rely on daily Pain points you want a dashboard to solve  If you try it, tell me what you’d change or add — I’m actively iterating.

Hi folks,I’m doing an audit of our config profiles and would like to break our baseline configuration profile into multi profiles. Right now, we have a massive baseline profile. If I need to edit a specific feature or settings, the whole profile gets push out everywhere.I would like to create smaller profiles that are specific to subsets of settings so I have more granular control over updating settings and the distribution of those settings.For example I may have profiles like the following as opposed to one massive profile:Baseline- Network UsageBaseline- FunctionalityBaseline- Setup StepsBaseline- Hidden AppsI can certainly created those subset profiles now without any scope assigned. My question is whether people have suggestions on the best order of steps to accomplish this task without the world exploding :-)For example, if I replicate everything currently in effect within multiple profiles, and I scope those new prof

Hey Jamf Nation! Welcome to another edition of Things to Do for JNUC, 2026 Edition. This JNUC we’re heading to Kansas City, Missouri, so let’s make the most of it. Whether you’re travelling from near or far (I’m still coming from Canada!), here’s a curated list of activities to help you plan your trip. Locals - please share your insider tips! JNUC HighlightsJNUC Party: The Wednesday night bash is always a highlight of great music, food, and networking. Don’t miss it! Vendor Parties: Expect free drinks, tasty bites, and epic giveaways. Jamf Heroes Meetup: Details for 2026 aren’t out yet but keep an eye on Jamf Nation for updates. Official JNUC Info: https://www.jamf

You might know Sagar Rastogi (@rastogisagar123) from his helpful replies in Jamf Nation, or from some of his Tech Thoughts blogs (here, here and here). He’s a technical architect at TCS, and he was recently named a winner in the TCS Global AI Hackathon, the world’s largest AI hackathon with more than 280,000 participants across 58 countries. It’s a huge honor, so naturally we wanted to celebrate Sagar and share mo

Looking to disable the dot macOS added to let users know that an app may have access to their camera without disabling the camera itself. We user a fleet of Macs for high-end meetings and conferences, and need to disable this distraction during screen share moments. Can someone point me in the right direction for maybe running something in a policy like a script? 

I am suddenly having an issue with JAMF deployed apps. I’m only seeing the issue happening on 3 apps that are paid for. The apps deploy properly to the iPads but are now prompting the user to sign in to an Apple Account whenever the app is opened on the iPad. If they hit cancel it allows them to use the app but when they close out of it again, it will prompt the sign in again.Our VPP token in JAMF is not expired, the location is correct, Managed distribution for the app hasn’t changed since it previously been setup and working and we have enough licenses and this issue only suddenly started happening. I’m not seeing it on the free apps. Any feedback or direction would be great, thanks!

Hello All Happy New year.For those using Paltform SSO with Microsoft Entra, as anyone come across this error which seems to happen when Outlook has been left open for a period of time. It wasnt an issue before testing SSO. I though it had something to do with this setting in SSO config profile, but changing the value has’nt made much difference. ThanksTom​​​​​​​