Hello-I have 500 new iPads. I want 250 to be assigned to a standard prestage and I want 250 to go into a shared iPad prestage. Is there a way to do this in bulk, or am I stuck looking up serial numbers and assigning them to the prestage one by one?

How do I stop this pop up from always coming up. 

Recently, we have had an unusually high load on our network.After digging into the problem a bit, logs and such, our suspicions have targeted our Jamf environment (Jamf Pro Cloud). We have discovered that a lot of traffic comes from AWS and in logs we also see the text "appinstaller".Once a year, when schools start after the summer, we install and distribute Mac computers to students. Since the turn of the year 2023/2024, we have added automatic installation of M365 - Word, Excel, Powerpoint, Outlook and Teams. So we suspect that the hard load obviously has something to do with this.However, it would be interesting for us to get a report that shows what has been installed, when and to which computers (or to whom) within a specific date range.Is there any way to produce such a report in Jamf?

Hi Everyone, I've been working on a script, in Powershell, to create what we call a support area using the API. I know you're probably wondering why I'm using powershell so I will get that out of the way. Long story short, we are working on a Powershell script to automate the creation of various resources across several different systems. This includes Active Directory OUs, AD security groups, SCCM resources, etc. Jamf is just one part. The thought is to be able to specify what we want these resources named then let Powershell do the rest. We're using a web interface into our Powershell server so this could potentially do this from a webpage. We also use sites very heavily for organization of our Jamf resources. I've got most everything working properly except for one thing. We have a number of default policies that run on all our computers. A good example is enabling the Firewall. We have a subset of machines that have different firewall requirements and cannot us

 Anyone else come across this pop up? Our teachers are getting it, if we click on Open System Settings, it doesn’t provide an option to allow or deny OSXvnc-server. I am trying to find a way to block the pop up completely.

I've been having a problem for some time now with a few MacBooks that can't be enrolled. When I try to enroll them, I get to the authentication step, but when I enter the login details, after a short while I get the error message: “Enrolling with management server failed. The request timed out.” However, the problem only affects very few MacBooks, like 5 out of 1000. Other devices work, even when I enroll them at the same time. I have already contacted Apple Business Support about this. They said that the problem is probably with Jamf. What can I do to solve this problem?  

As some of you may know MS messed up the the last version of Defender and it does not let the install go forward because tamper protection is set to block. Usually it sets it to enable the install and then back on. Does anyone have an easy way to do this in Jamf. I am not great with scripting and the only way I see to do it is via a few policies.

HelloI thought this was related CIS level 2 config which I have been testing but I have seen the same issues on Tahoe device which hasnt had any CIS level config applied.New admin users login via Jamf connect seem to get a Filevault pop up Im aware securetoken plays a role here.Has anyone else seen this with Tahoe its only effecting our labs as our Macbooks are encrypted by default.Thanks​​​​​

Hello I have started testing CIS level 2 for MacOS 26.I get this prompt as soon as the screen is locked I though it has something to do with screensaver but i have removed all CIS config and it still seems to be happening. Im guessing its some left over config somewhere but havent been able track it down. Does anyone know if there anyway to undo this, we use the snowagent and its possible that might be causing it  ThanksTom   

Hi So, we got a case in my school where we want to start restarting Apple TV on a weekly basis, Having an issue getting back to api after sometime, I’ve managed to get the GET command to read the smart group but have issues for find the correct command to reboot, can anyone help?

Hi everyone,I’m running into an issue trying to upgrade Jamf Connect across our environment and hoping someone from Jamf or the community has seen this before.Until recently, I was able to update Jamf Connect using the dropdown underSettings → Jamf Apps → Jamf Connect → Deployment and Update Settings.That list used to automatically show each new version as Jamf released it (for example, 2.44 → 2.45).Now the dropdown has stopped updating — it’s capped at 2.45.1, even though 3.4.0 has been released publicly for several weeks.I’ve tried to manually handle the upgrade:• Downloaded JamfConnectLogin.pkg (3.4.0) from account.jamf.com.• Uploaded it into Jamf Pro (Cloud Distribution Point).• Created a policy to deploy it to test devices an

Is there a control that we can set for how long it takes until Self Service+ will time out and require user login again? Thanks,Jim

Trying to install Dockutil during JSM but it fails. Based off the logs its because its attempting to install to the system (/usr/local/bin). My pkg was created in Composer with the appropriate R/W permissions applied to all elements of the pkg but still no luck. Any help is appreciated!

I’m fairly new to Jamf and inherited a Jamf Pro instance that I’m having to update/change as we get new devices and new software.  We have Adobe Creative Cloud pushed to all computers using Mac Apps, but need the Shared License pushed to just our public computers. Right now we have a policy to install the Shared License, but it fails each time it runs. I’m assuming this is because it’s already installing the regular license through Mac Apps. My question is, can I change the target on Mac Apps to be only computers that aren’t public (using a smart group) and it not affect computers that already have the app installed? I don’t want to mess with our staff’s computers by pushing out any updates or reinstalls that they aren’t expecting.Thanks in advance for any help!Kayla

Hi all 👋🏻 I’m planning on getting Self Service+ deployed to devices in my Jamf environment. Could anyone point me in the right direction on where to best place a policy for Self Service+ so it can be applied to enrolling devices during DEPNotify? Our current process is as follows: Setup AssisitantRemote Management Entra Sign-inMore set-up steps, Accessibility/Data & Privacy/Apple Intellegence/Choose Your Look DEPNotify UI pop-up to ‘Register Your Mac’ For devices already live in our environment, I’m planning on creating a policy that installs Self Service+ and uninstalls the classic variant. I’m on a tight deadline to get this on 240 devices before the 4th Feb, so any fast responses would be hugely appreciated 🙏🏻 Many thanks, Luke Mutlow

Hello!I have, hopefully, a simple question. For JAMF Connect we deploy the JamfConnectLogin and the JamfConnectLaunchAgent via packages but I noticed that JAMF Connect Login is available through the JAMF apps catalog. Can I replace pushing those two packages with just pushing the app from the catalog or does it actually just installs one of them and I would still need to push the remaining one as a package?Thanks

I'm trying out the new PCM Device Compliance feature for macOS and am running into a problem. When running the "Microsoft Device Compliance" policy, it launches Company Portal, I login and it seems to complete the registration without issues. When I lookup the device in InTune, it's not there at all. In Azure I see the following:Join Type: Azure AD registeredMDM: NoneCompliant: N/AI configured the feature according to this technical paper: https://learn.jamf.com/bundle/technical-paper-microsoft-intune-mobile-devices-current/page/Integrating_with_Microsoft_Endpoint_Manager_Introduction.htmlAny help would be appreciated.

Hey, how the title says.Last year around July our with jamf pro enrolled devices have started showing up in intune.So we enroll our devices via PreStage. Installs also the MS Defender and the Devices are onboarded in MS Defender Portal but managed locally via Configuration Profile via Jamf Pro.We also use Device Compliance with Company Portal and the SSO Extension.Defender Configuration and Company Portal (SSO Extensions) are untouched for a long time. The only thing we updated in the defender config (but never in the defender onboarding config) are extensions.So someone an idea why the devices are now visible in Intune too.The devices are showing up since beginning of defender onboarding in MDE Portal and since beginning to use Company Portal in Entra.I just try to understand what happened and what happens and why not all of our devices are visible in intune when all have exact the same configurations. Thank you in adv

I have a 2019 iMac running Sequoia that uses the same Connect setup as 700 other systems that is showing this error message. It only seems to come up when logging onto the system using an ID that was created a long while ago. I tried using an account that hadn't been used on this system before and it works fine. And continues to work fine for that new ID. Nothing has changed in our EntraID configuration and it is currently working fine for systems in that lab as well as all across campus.  Any ideas?  

Does anyone know if we will have the ability to get the new Creator Studio through ASM? I have a department head who has previously bought Final Cut for multiple labs using his personal apple id, and signed into EVERY SINGLE MAC using his ID, then signing out just to download Final Cut, With the new Creator Stuido, it would be much cheaper and we might be able to use a managed apple id.

Your configuration may need to be updated on your iPads.  On their tech call today they mentioned adding the device name to the config so that the name will show in the COS.  The info in their PDF did not make sense to me who is not a coder.  With some help from the Jamf AI this is the config that worked for me.  Make sure to change the ouIds to your COS Org Unit ID <dict>  <key>ouIds</key>  <string>1234567890</string>  <key>deviceName</key>  <string>$DEVICENAME</string></dict>

I have Garageband listed under Mac App Store Apps in my JSS. It has successfully installed on the end users accounts. However, each user now needs to go in and download the sounds library which takes quite a bit of time per user and hinders their use in the classroom. Is there a way to push the sounds library remotely?

It's not possible to perform patch management for After Effects 2026 Combined Definition. Is anyone else having this problem?When defining the smart group with older machines and versions of After Effects, no machines appear to be available for update.

Today we released Jamf Connect 3.6.0. This release includes the following:  Changes and ImprovementsThe Jamf Connect login window now includes Dutch as a supported language. The authchanger command-line tool now recognizes Microsoft's macOS Platform Single Sign-on (SSO), allowing administrators to safely use the authchanger -reset command without affecting deployments of macOS Platform SSO. For more information, see macOS Platform Single Sign-on overview in the Microsoft Entra documentation. In Jamf Connect Configuration, the Quit and Preferences options in the "Hidden menu items" section are now selected by default. Additionally, the About option is no longer available.  Resolved Issues

 Hello, Jamf Nation!   We’re kicking off 2026 by celebrating you, an incredible community of wickedly smart and super kind humans who believe sharing knowledge, and supporting each other, is what makes Jamf Nation special.   You’re invited to Celebrating Jamf Nation: A Kickoff to 2026 with special guest, Chris Schembra, on January 27. Featured in Rolling Stone, Fast Company and Entrepreneaur, Chris received global recognition for his unique approach to building community. He’s gathered Fortune 500 executives, NFL play