Hi Jamf Champions,We have MC1223829 – Upcoming Conditional Access change: Improved enforcement for policies with resource exclusionsThis update states that if you have Conditional Access (CA) policies that are applied to all resources with excluded resources, and if those excluded resources have OIDC scopes or a

We provide a pretty white glove service to our customers in that we run setup on every new IOS device, manually set some settings that our not manageable through an MDM, and decluttering the home screen of widgets and many native IOS apps.To be clear, I don’t want to remove or lock down the use of many native apps. I would like to remove all widgets, and remove the home screen SHORTCUTS to many native apps but leave the actual app itself available from the app library if needed.The goal is to deliver a device with a clean decluttered INITIAL layout device that has only the core native apps (such as phone, settings, messages, photos etc) and the required business apps on the main home screen page. After that, if a person wants to drag a shortcut to the calculator app (for example) out the home screen, they can do that from the app library.I realize that I can create a conf profile that HIDES apps, but I don’t want to do that because it removes access to that apps

Hey Nation,A lot of what makes this community great isn’t what we build, it’s what you all bring to it.The answers, the advice, the time you give to help someone else out, it doesn’t go unnoticed.I wanted to share a genuine thank you to everyone who contributes, supports, and shares their knowledge here ❤️.And what better way to show that than bringing my fellow Jamfs into it  👀.So, Jamf team, let’s shout out what we appreciate about our customers!I’ll start….Shoutout to ​@scooterkohler , whose enthusiasm and desire to learn have been clear since joining the community last year. You’ve thrown yourself into the Jamf Heroes program (so much so, you’re a featured highlighted Hero 👏🏼) and have already started a user group in your area to bring others together 🙌🏼. Thank you for your energy and willingness to

Hello!In the last 2 years, I have had some Macs lose all configuration Profiles (including the MDM profile) when they try to renew the MDM Certificate (and fail for some reason)Mostly that could be fixed cancelling the “Renew MDM Certificate”-Pending task in the Management-Tab and then have the User run “profiles renew -type enrollment”. But it surely seems like a bug, when the (non-removable) MDM profile is gone.Has anybody seen something similar and a fix for it?Bye, Frido. 

Jamf Pro Dashboard (Open Source) — Looking for feedback + contributors Hi Jamf Nation — I’ve published an open-source Jamf Pro Dashboard project that connects to Jamf Pro and provides a clean, fast admin dashboard for at-a-glance visibility (the stuff we all end up checking repeatedly). Repo: https://github.com/flynn33/Jamf-Pro-Dashboard I’d love feedback (and PRs if you’re interested) on: What widgets/tiles you’d want most (smart groups, device counts, check-in failures, expiring MDM profiles/certs, etc.) Which Jamf Pro API endpoints you rely on daily Pain points you want a dashboard to solve  If you try it, tell me what you’d change or add — I’m actively iterating.

You might know Sagar Rastogi (@rastogisagar123) from his helpful replies in Jamf Nation, or from some of his Tech Thoughts blogs (here, here and here). He’s a technical architect at TCS, and he was recently named a winner in the TCS Global AI Hackathon, the world’s largest AI hackathon with more than 280,000 participants across 58 countries. It’s a huge honor, so naturally we wanted to celebrate Sagar and share mo

Looking to disable the dot macOS added to let users know that an app may have access to their camera without disabling the camera itself. We user a fleet of Macs for high-end meetings and conferences, and need to disable this distraction during screen share moments. Can someone point me in the right direction for maybe running something in a policy like a script? 

I am suddenly having an issue with JAMF deployed apps. I’m only seeing the issue happening on 3 apps that are paid for. The apps deploy properly to the iPads but are now prompting the user to sign in to an Apple Account whenever the app is opened on the iPad. If they hit cancel it allows them to use the app but when they close out of it again, it will prompt the sign in again.Our VPP token in JAMF is not expired, the location is correct, Managed distribution for the app hasn’t changed since it previously been setup and working and we have enough licenses and this issue only suddenly started happening. I’m not seeing it on the free apps. Any feedback or direction would be great, thanks!

Hello All Happy New year.For those using Paltform SSO with Microsoft Entra, as anyone come across this error which seems to happen when Outlook has been left open for a period of time. It wasnt an issue before testing SSO. I though it had something to do with this setting in SSO config profile, but changing the value has’nt made much difference. ThanksTom​​​​​​​

I've noticed since we upgraded to Jamf Connect 2.4.1 last week that when I restart my computer that I am getting 2 login screens. We are using FileVault, so the expected behavior is the standard Mac login screen. We have Jamf Connect setup so that at logout you get a custom Jamf Connect login screen. Instead, I get the standard Mac login screen, I enter my password, I am taken to another login screen (with my desktop background instead of the generic Big Sur background) and I can enter my password or use touch ID to login. Thoughts? Anyone else having this?

☀️ Hey All! Our Marketing team is putting together a short video for social media to recognize Apple's 50th Anniversary, and we'd love to include a few customers in the video. If you’d like to participate, take a look at this Vouch request link to get a better understanding of what’s needed:https://app.vouchfor.com/c/Of0SDkUYpd?senderId=3ZKGbIfEhK We can’t guarantee that all submissions will make it into the final video, but if yours is fun/unique in some way, you have a good shot. 🙂 Deadline to submit: Friday, Feb. 20 Thanks, as always, for being a part of the Jamf story!!!❤️ Jeni

I just got access to jamf pro with the partner program, how am i supposed to enroll my own mac to be able to test with it?

As the title says, I just got access to blueprints and eager to start learning this, but right away i notice im missing things.  Jamf chat box told me thisYou'll need the Cloud Services Connection (Read) privilege in addition to your existing Blueprint permissions. This privilege is required for app installation functionality within Blueprints. To resolve this, you can: • Contact your Jamf Pro administrator to add the Cloud Services Connection (Read) privilege to your user account • If you have a custom privilege set, ensure it includes both Blueprint permissions and Cloud Services Connection access Once these privileges are added, you should be able to access app installation features alongside the declarative configurations you're currently seeing.Now after checking everything and confirming with Chatgpt,  I am being told App installations in Blueprints are not Enabled at the Tenant Level.  Something about being a Backend feature flag.   i am unsure

 From mid-November through the final weeks of the year, many IT teams shift into a different rhythm. Projects wrap up. User demand slows. Emergency tickets still happen, but the pace usually lightens. This quieter stretch creates one of the best opportunities to build new skills, strengthen existing ones, and earn certifications that keep you growing.  Technology does not slow down when the calendar does. Platforms update, security threats evolve, and new tools enter the stack faster than most teams can adopt them. Staying sharp takes intention. If you wait for the “perfect time” to learn something new, it rarely comes. But late Q4 offers a natural runway that is easy to miss if you are not looking for it.  Using this time for learning sends a clear signal to yourself and your team. It shows that continuous upskilling is not a checkbox, but a habit. Whether you manage devices with Jamf, work in security, support end users, or build infrastructure,

 We’re a year into Apple shipping Apple Intelligence (though technically still in Beta) but Apple hasn’t shipped a clear matrix of which features are on-device vs. require Private Cloud Compute (PCC). If you haven’t read part 1, then click here and go back and read it. And then follow up and read part 2, by clicking here. But what if… all that information was hiding on your very Mac in a system diagnostics, your Mac quietly generates a Model Catalog inside sysdiagnose that lists feature availability, languages, and — critically — which resources are server-side! For those that do not know, you can run a system diagnostics and explore the zip file created to potentially fi

🎉 Happy New Year! 🥳 It is traditional to use the beginning of the year to make plans. Conferences and the associated travel require quite a bit of planning. I keep an overview of the larger conferences in the Mac and wider Apple management and security community on my website, but thought a bit of a more detailed overview might be useful.Whether you want to "just" attend or even hand in a proposal for a talk, here is a list of conferences this year with links to their websites. MacAD.UK: Brighton, UK, April 21–22This conference in Brighton on the British coast, south of London, has been bringing together Apple management professionals from the United Kingdom and all over Europe for several years. This year, they are moving to a new venue

As part of Apple’s unveiling of Declarative Device Management (DDM) at WWDC 2023, Apple announced that DDM management included the ability to deploy MDM configuration profiles using DDM as the delivery mechanism in place of using MDM to deliver the profiles. Jamf Pro’s Blueprints leverages this capability to support device restrictions. Let’s see how this works using a device restriction configuration, using the example of setting the following Apple Intelligence management functions to false in order to block the corresponding Apple Intelligence functions on macOS:For more details, please see below the jump.As of Jamf Pro 11.1

Earlier this week, our Community team brought members of Jamf Nation together for a special event — an hour of inspiration, celebration and gratitude. World-renowned keynote speaker, author and all-around good guy, Chris Schembra, led the conversation: Jamf Nation 2026: The Power of Human Connection.  As the largest online community of Apple admins in the world, Jamf Nation members understand the power of connection. They’ve been using it to move mountains in the Apple space for the better part of two decades. But as the environment around us changes, Chris challenged the group to consider mindset shifts that could lead to even better outcomes. He encouraged them to move both fast and slow, referencing the Emilia-Romagna mindset of “holding the tension of opposites to achieve world-class excellence.” He asked, Where in your life do you need to go slower? Where in your life do you need to go faster? How do you hold the

It must be 8 or 9 years ago that I started supporting customers with ZuluDesk (now Jamf School). This was my first step into the device management world. Before that, I was a repair technician.  As my curiosity grew, I was lucky enough that my employer allowed me to do the Jamf 100 and 200 courses. Managing iOS devices is all good and well, but with Mac you need a little more tools. Things like setting a wallpaper sound easy, but they actually require a bit more work than I expected.   Welcome to the world of Mac Admins! I discovered that for everything I wanted to figure out how to do, there is usually someone with the same question, and maybe they’ve already found a solution for it. Coming in as a completely new Mac Admin, it might be a bit difficult to find your way. But knowing the right peop

Enrolling in a Jamf Training Course is an exciting step in expanding your skills, but once your class is scheduled on the calendar, you might wonder: How should I prepare for training? What devices should I use? How should I set up my workspace? While Jamf will send you important setup instructions prior to your course beginning, here are additional preparation steps and strategies you can take to ensure you’re fully ready to succeed. 1. Review the Student Setup GuideOne week before your training begins, you will receive an email from Jamf Training with important details about your course. This email will look like the following:   This email will contain:Instructions to log into Jamf Account to view customer requirements an

Originally posted in MacAdmin Musings Why I Try to Stop Working Before Everything Is Finished For a long time, I treated the end of my workday as a finish line.I’d keep going until the problem was solved, the task was complete, or I was too drained to continue. If something was still broken or unanswered, I felt pressure to push through it before logging off. Ending the day with loose ends felt like failure, like I wasn’t completing my tasks.Over time, I realized that approach was quietly working against me.Not because unfinished work is bad, but because how you leave work unfinished matters. The Hidden Cost of Draining the Tank When you work until you have nothing left, you don’t just end the day tired. You also m

Jamf Pro has superior automation and scripting tools. Jamf School has a simple interfaces and blueprints. Do you feel the loss of customizable security features and scripting is worth the trade off for the tools given by Teacher and Student apps?

Hello all you IT Rockstars! I’d like to get some of your thoughts on Patch Scheduling.  Since there are so many tools available to use with Jamf Pro, it really gives us a wealth of options for customizing. What and When:The way I look at things, there are 3 basic categories of patching urgency on macOS.Feature:           Non-Security OS Patches, New macOS versions, and specific software that is a deliberate manual rollout.  Example: corporate VPN software.  This is something that we would want uniform version across the fleet.  These are planned and don’t have a standard cadence.Critical:           Security OS Patches, Zero-day patches, and other applications that the security issue addressed by the patch is important to your organization.  I am thinking of having these install once a week, short deferral period, force update within 24 hours.Routine:          B

Starting in March, you will no longer be able to log in to Jamf School using a Jamf School account. Instead, you will need to log in using Jamf ID or single sign-on (SSO) through Jamf Account. Note: This post will be updated when a specific date for the change is determined. To receive updates for this post, click Subscribe.  What you need to know: ✓ Already using Jamf ID or SSO through Jamf Account to log in? You are good to go—no further action is needed. ✓ Don't have a Jamf ID yet? 

Hey Jamf Nation,Your favourite time of year is just around the corner...the JNUC Call for Sessions! 📣This year, we’re doing something a little different for our Jamf Nation community. We’re bringing the inner workings of JNUC and the session selection process straight to you!Join us for a live session with two of our very own JNUC session team, where we’ll cover:• Tips and tricks for submitting a standout JNUC session• The 2026 subject themes• When the Call for Sessions officially opensWe’ll also hear from a community member and past JNUC presenter, who’ll share how their session idea came together and what they learned along the way. 🗓️ Date: Wednesday, February 25⏰Time: 9–10 a.m. CST / 10–11 a.m. EST / 8–9 a.m. MST / 7–8 a.m. PST / 3–4 p.m. GMT / 4–5 p.m. CET / 8:30–9:30 p.m. IST / 11 p.m.–12 a.m. SGT / 12–1 a.m. JST+1🚨 REGISTER HERE ➡️