We have successfully setup Jamf Connect menu bar icon to allow privilege elevation for just our technicians by using Roles with our OIDC provider Entra. The reason for this is that we don’t want standard users to be able to request or be full admins. There are times though when an admin needs to do something with admin rights under a users profile. With our solution the idea was that a technician could be on site or remote in and use the privilege elevation feature and sign in with their own credentials to make the standard user a temporary admin. Do what they need to do and end the session. However, this is where we run into issues. First, Jamf Connect stores an Entra token for the session. If you select the privilege elevation option again it will skip the pop up Entra sign in screen and move straight to the reason for elevation and make you admin. This token we know last for quite a while. We can see the three tokens in keychain and remove them and the Entra sign in s

Our students are cheating on test using the Keyboard setting “Show math results”.  I created a ticket with Jamf but they told me the only way to fix this is to use Blueprints but we are not set up with SSO.  Is there  another way of fixing this issue.  Some very important state test are coming and our students are spreading the word on how to cheat.

A complete, step-by-step deployment guide - including macOS Onboarding and Jamf ConnectAuthor: Meir ElimelechWith contributions from: Omer Ninyo / ​@Ninyo Why this guide exists – and who should read it Jamf’s move to make Self Service+ mandatory for macOS has prompted many organizations to re-evaluate their deployment and enrollment workflows. While Jamf’s documentation covers the supported installation and migration paths, real-world environments often include a mix of enrollment models, identity integrations, and timing-sensitive workflows that are not always addressed in isolation.This guide exists to provide a single, practical reference for migrating to Self Service+ across all common macOS scenarios — from brand-new enrollments to existing fleets, with or without Jamf Connect.It is intended for Jamf administrators, part

I would like to enable the apple seed for IT beta program using the Beta token from Apple school manager to allow a device to get betas with out needing to login with an Apple ID on the device.Reading documentation we are able to get the token using a script. But at that point Jamf is requiring you to use blueprints with this token. Since we are on prem we do not have access to bleuprints.Any way to deploy the token a device using a config profile? How are other MDM’s enabling this?

Since I could not find a solution or explanation for this error in the the great JAMF Nation / Google / Internet troubleshooting database, I would like to share one possible cause for Installation failed. The installer reported: installer: Cannot install on volume / because it is disabled. Background: Attempting to distribute package via policy in JSS. Received the error in policy log. The package is a .MPKG and being pushed through SMB. Solution: Turned out the software had a software requirement (could only run on Mac OS X 10.6 or later) and was failing on Mac OS X 10.5.x assets. I am also speculating that this error may occur if there is a hardware requirement issue as well.

Using Self Service, it says packages are installed - but they are not anywhere on the Mac. I can't see where anything is configured incorrectly.

Hello, has anyone come up with reliable easy way to disable Google Lens features?  Managed Macbook environment.  Students have access to Safari, Firefox, and Google.   Looking to disable Google Lens feature. 

Anyone know if there is a way to sync information such as purchase dates, enrollment dates, etc. from ASM to Jamf pro? We're looking at ways to track our warranty coverage without adding extra data attributes to track.

Hi ,i am new to JAMF, the JAMF implementation was done by a third-party resource. it was all fine till last week, suddenly when i try to enrol a device after the SSO login its got stuck in blank screen, pls guide me on how to check the logs and errors

Morning,Anyone else experienced this issue since updating to Logic Pro 12 - We’ve got Jamf Pro at my org and currently push out Logic Pro via Apps store on Jamf which takes care of the updates and deployment to our various smart groups but since updating to version 12 yesterday we receive this error everytime we launch LP: The application cannot be used because the App Store authentication failed or no Network is available.Any ideas?Any advice or tips is greatly appreciated.

Hello-I have 500 new iPads. I want 250 to be assigned to a standard prestage and I want 250 to go into a shared iPad prestage. Is there a way to do this in bulk, or am I stuck looking up serial numbers and assigning them to the prestage one by one?

I am trying to create a Applications Usage Reports specially for Adobe App, I have tried:To create a usage report for a group of computers based on applications, you'll need to follow these steps:First, ensure Application Usage collection is enabled:Go to Settings > Computer management > Inventory collection Click Edit, then the Software tab > Applications Select "Collect Application Usage Information" checkboxNext, create a Smart Group for your computers:Navigate to Computers > Smart Computer Groups > New Add criteria using Application Title and optionally Application Version Configure operators and values to define your groupFinally, generate the report:Go to Computers > Search Inventory Create or select an advanced computer search with your criteria Click the Reports tab Sele

Hello everyone,i wanted to roll out our new custom TeamViewer Host and everything works except that our custom design with the company logo is not displayed. I did it exactly as in the instructions: https://hcsonline.com/images/PDFs/Jamf_Teamviewer_Host.pdf After the custom logo didn't show up, I kept searching and came across these instructions: https://community.teamviewer.com/English/kb/articles/50739-mass-deployment-on-macos#perform-an-assignmentThe groups and the membership works but unfortunately our custom layout does not. Am I missing something or have I done something wrong? 

Does anyone know if there is a to turn this setting off without admin credentials?Through terminal command or config profile? Thanks!

How do I stop this pop up from always coming up. 

Recently, we have had an unusually high load on our network.After digging into the problem a bit, logs and such, our suspicions have targeted our Jamf environment (Jamf Pro Cloud). We have discovered that a lot of traffic comes from AWS and in logs we also see the text "appinstaller".Once a year, when schools start after the summer, we install and distribute Mac computers to students. Since the turn of the year 2023/2024, we have added automatic installation of M365 - Word, Excel, Powerpoint, Outlook and Teams. So we suspect that the hard load obviously has something to do with this.However, it would be interesting for us to get a report that shows what has been installed, when and to which computers (or to whom) within a specific date range.Is there any way to produce such a report in Jamf?

Hi Everyone, I've been working on a script, in Powershell, to create what we call a support area using the API. I know you're probably wondering why I'm using powershell so I will get that out of the way. Long story short, we are working on a Powershell script to automate the creation of various resources across several different systems. This includes Active Directory OUs, AD security groups, SCCM resources, etc. Jamf is just one part. The thought is to be able to specify what we want these resources named then let Powershell do the rest. We're using a web interface into our Powershell server so this could potentially do this from a webpage. We also use sites very heavily for organization of our Jamf resources. I've got most everything working properly except for one thing. We have a number of default policies that run on all our computers. A good example is enabling the Firewall. We have a subset of machines that have different firewall requirements and cannot us

 Anyone else come across this pop up? Our teachers are getting it, if we click on Open System Settings, it doesn’t provide an option to allow or deny OSXvnc-server. I am trying to find a way to block the pop up completely.

I've been having a problem for some time now with a few MacBooks that can't be enrolled. When I try to enroll them, I get to the authentication step, but when I enter the login details, after a short while I get the error message: “Enrolling with management server failed. The request timed out.” However, the problem only affects very few MacBooks, like 5 out of 1000. Other devices work, even when I enroll them at the same time. I have already contacted Apple Business Support about this. They said that the problem is probably with Jamf. What can I do to solve this problem?  

Unable to complete file upload. fiie contents does not match file type in Jamf when uploading an automated device enrollment token from apple business manager

As some of you may know MS messed up the the last version of Defender and it does not let the install go forward because tamper protection is set to block. Usually it sets it to enable the install and then back on. Does anyone have an easy way to do this in Jamf. I am not great with scripting and the only way I see to do it is via a few policies.

Apple Classroom on Teacher Macs in Jamf School - Possible without Managed Apple IDs?We're migrating from Jamf Pro to Jamf School. Previously had Apple Classroom working with Macs and iPads via ASM roster syncing from our SIS—no Managed Apple IDs needed.Current status in Jamf School:✅ Apple Classroom works on teacher iPads and student iPads ✅ Jamf Teacher app works on teacher Macs (shows rostered classes) ❌ Apple Classroom on teacher Macs won't load rostered classesTeacher Macs aren't receiving the Education Profile despite fresh enrollments. I suspect it's related to MDM-capable users, but can't confirm. Class data is clearly flowing (iPads get it, Jamf Teacher gets it), so it seems like a device-specific enrollment issue.Is Apple Classroom on teacher Macs possible in Jamf School without Managed Apple IDs?The solution seems tantalizing close based a on a checkbox still available in Jamf School -

I am suddenly having an issue with JAMF deployed apps. I’m only seeing the issue happening on 3 apps that are paid for. The apps deploy properly to the iPads but are now prompting the user to sign in to an Apple Account whenever the app is opened on the iPad. If they hit cancel it allows them to use the app but when they close out of it again, it will prompt the sign in again.Our VPP token in JAMF is not expired, the location is correct, Managed distribution for the app hasn’t changed since it previously been setup and working and we have enough licenses and this issue only suddenly started happening. I’m not seeing it on the free apps. Any feedback or direction would be great, thanks!

It must be 8 or 9 years ago that I started supporting customers with ZuluDesk (now Jamf School). This was my first step into the device management world. Before that, I was a repair technician.  As my curiosity grew, I was lucky enough that my employer allowed me to do the Jamf 100 and 200 courses. Managing iOS devices is all good and well, but with Mac you need a little more tools. Things like setting a wallpaper sound easy, but they actually require a bit more work than I expected.   Welcome to the world of Mac Admins! I discovered that for everything I wanted to figure out how to do, there is usually someone with the same question, and maybe they’ve already found a solution for it. Coming in as a completely new Mac Admin, it might be a bit difficult to find your way. But knowing the right peop

HelloI thought this was related CIS level 2 config which I have been testing but I have seen the same issues on Tahoe device which hasnt had any CIS level config applied.New admin users login via Jamf connect seem to get a Filevault pop up Im aware securetoken plays a role here.Has anyone else seen this with Tahoe its only effecting our labs as our Macbooks are encrypted by default.Thanks​​​​​