*Trying to get ahead of OS27 and the devices that can’t update*We have a requirement that all Apple mobile devices can support the latest OS update.  Based on early reports, we will have 100+ iPads that won’t support OS27.  I need to be able to block those devices completely.  We have departments that will attempt to keep them, but I need to make sure they can’t use them.Current setup is Jamf Pro for MDM and Entra for compliance.  We currently use Smart Device Groups and Entra Conditional Access to block Microsoft apps from devices that don’t meet criteria to be in our compliance smart group.  I wasn’t sure if there is a way to completely block in Entra Conditional Access or if there is a way to wipe and ban the device in Jamf Pro.  If not, is there a way to block all apps or put it into a kiosk mode if it isn’t eligible for OS27?Any suggestions will be greatly appreciated!

I am gradually learning how to work with blueprints. I have had success managing software updates with blueprints, so I decided to try out restricting external drives to read-only access. I want to stop controlling this using Proofpoint DLP (which I think is crapware) and start controlling it with blueprints.After configuring the blueprint, I deployed it to one of my Macs, then connected two USB drives. Neither drive appeared on my desktop. I opened Disk Utility and found both there. When I clicked to mount each of them, they would not mount. I saw no errors. They just won’t mount. As part of my testing, I uninstalled Proofpoint DLP, which is being used currently to make external drives mount as read-only. Before scoping the blueprint to my Mac, I confirmed that I could mount drives and write to them. I just recreated this on a second Mac. It’s the same issue. Proofpoint DLP is removed. The blueprint is installed. A PLIST was created at /private/var/db/ManagedConfigurationFiles/DiskMan

I have JAMF pro cloud instance and when I enroll new device using PreStage Enrollment, all my 12 application installations show ''background items added" notification on the right side of mac devices. can we mute these notifications?

I am trying to install sophos through JAMF School and used their script.The script it working fine when running it on the mac as sudo, but when i try pushing it through JAMF, nothing happens.This makes me wonder if i am missing something, i seem to be unable to make the app run as an administrator/sudo user.Can anyone help?

Hello,I'm trying to understand the recommended workflow for a school using both Microsoft Entra ID federation and Apple School Manager / Jamf School synchronization.Current setup:Apple School Manager is already federated with Microsoft Entra ID. All Managed Apple IDs have already been created successfully. We currently have only one ASM location (the original/default location). Jamf School is already connected to ASM and synchronized with that location. Our goal is simply to create and synchronize classes/rosters for Apple Classroom and Jamf School.The issue:If I manually create my classes in Apple School Manager and assign students and teachers to them, everything works correctly after the synchronization between Jamf School and ASM.However, how should this be handled when using a OneRoster/SFTP import into Apple School Manager?When I enable SFTP / OneRoster synchronization from Jamf School to Apple School Manager, ASM creates a new location instead of associating the imported classes

I’m currently rebuilding our enrollment process and testing everything in a Jamf sandbox. So far it mostly works as expected, but I’ve run into an issue that I can’t fully explain.This is how my flow looks right now.macOS 26.2In PreStage Enrollment I deploy: JamfConnectLogin-3.5.0.pkg dialog-2.5.6-4805.pkg (used for Setup Your Mac) icons.pkg (icons used by Setup Your Mac) When it comes to configuration profiles related to Jamf Connect, I’m using: Jamf Connect License Jamf Connect Login (login window configuration) Jamf Connect Menu Bar The flow itself:I start the Mac, choose Enroll, and no local account is created during enrollment. After configuration finishes, I get the Jamf Connect login window (which is exactly what I want and how it works in production). I log in with Okta credentials, the local account is created, and then the “enrollment completed” trigger fires Setup Your Mac. Apps and scripts install as expected.However, at the same time I get a keychain prompt saying:

We use Jamf Pro and have an integration with Conditional Access to register Macbooks within Microsoft Intune.We have recently started receiving this error message and have not been able to resolve it. Who can help me think about how we can tackle this issue?

Hey everyone, new jamf admin here who inherited a mess and is trying to clean it up. I was hoping someone knew how I would be able to find out why my Mac apps are not downloading/installing to any devices. We used the cloud DP to install these apps and for the most part they would install with no real issue but over the last 2 weeks all of them seem to be stuck on “In Progress” and nothing we do moves it along. Does anyone have any advice on how I can find where the bottleneck is or point me in the right direction? I believe it may have to do with an outdated version of jamf connect that the previous tech never updated but since I’m still pretty new I am not sure. We’ve already checked the APN as well as making sure we have enough licenses but for some reason no apps want to download or install on any of our managed macs. 

Today we released Jamf Connect 3.10.0; this release addresses the following product issue:Fixed: When deployed with macOS Setup Assistant via Jamf Pro PreStage enrollment, the Jamf Connect login window may display preferences without their expected values instead of reviewing and caching all settings when the app initially loads. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

Apple’s Keynote is on Monday, June 8, 2026. Below are calendar reminders. Details: WWDC will bring the unveiling of major new software versions that will ship this fall, including: • iOS 27• iPadOS 27• macOS 27• watchOS 27• tvOS 27• visionOS 27 * Rumors indicate that Apple has three main focuses this year: the new Siri and other AI upgrades, Liquid Glass refinements, and bug fixes/performance improvements. KeynoteAdd to calendar Platforms State of the UnionAdd to calendar 

Hey Jamf Nation, 🚨 Big reward alert!!! 🚨 From June 1st through August 31st, enrol in a Jamf 200 Course and earn 500 points in Jamf Nation Rewards just for getting started. Once you complete your certification, you’ll pick up another 250 points! Up to 750 points, just for levelling up your skills! Here's how it works:Enrol in the Jamf 200 Course between June 1st and August 31st → earn 500 points Complete your Jamf 200 certification → earn an additional 250 pointsYou don't need to finish the course during the promotional period, you just need to enrol by August 31st to qualify for the initial 500 points. The extra 250 points will be awarded once you pass your certification, whenever that happens. Ready to dive in? Head to the Jamf 200 Course page to find out more and get enrolled. Want to prep before you start? Check out the Training page on Jamf Nation for tips and tricks, blog posts and insights straight from our Trainers. It's a great place to get inspired before you kick things off

Hi, I’m looking how to automatically set TimeZone on Macs after the enrollement step.How can i do this?Thank you

Hello! We use Jamf School to manage our iPads. The last few months they have been dropping their wifi connection. They have been updated to the latest OS, have been erased and re-enrolled. I have looked through all the settings, and nothing has been changed. I am the only person who uses this system and I haven’t made any changes. Is anyone else having this issue?

Hello everyone,i wanted to roll out our new custom TeamViewer Host and everything works except that our custom design with the company logo is not displayed. I did it exactly as in the instructions: https://hcsonline.com/images/PDFs/Jamf_Teamviewer_Host.pdf After the custom logo didn't show up, I kept searching and came across these instructions: https://community.teamviewer.com/English/kb/articles/50739-mass-deployment-on-macos#perform-an-assignmentThe groups and the membership works but unfortunately our custom layout does not. Am I missing something or have I done something wrong?  

I uploaded our vpptoken for volume purchasing and Jamf p7m token from Apple School Manager to Jamf and now our fleet of iOS devices are stuck in pending. I realized too late that I downloaded the tokens from a different apple ID than in previous years and I suspect this is a big no no. I went back and renewed the tokens with the proper apple ID, uploading them to jamf, but I think the damage has been done. I wiped one device and reenrolled it and it took all the policies and is currently checking in fine after my mistake. I did use the right apple ID for our APN renewal and so all of our laptops are updating and checking in as normal. Long short of it - is there anyway to fix this other than manually reenrolling all our iOS devices. Thankfully, we have a small fleet and this isn’t the end of the world, but if there is a workaround I’d greatly appreciate knowing it. 

There’s a certain irony in traveling 3,500 miles to Leiden only to feel like I was heading home.I’m a New Yorker now, living in Yonkers—a city that owes its very name to the Dutch. It comes from the title Jonkheer (or “Young Lord”), the nickname for Adriaen van der Donck. Back in the day, the area was simply known as “The Jonkheer’s land.” As the years passed and the English took over, “Jonkheer” evolved into “Yonkers.” So, when the opportunity came to attend MacAdmins-EU in Leiden, Amsterdam, it was an immediate “yes.” I wasn’t just visiting the “Old World”; I was tracing a line back to where the story of my hometown began. The Jordy Factor The spark for this trip started when ​@Jordy-Thery told me to “save the date” for the end of April. He couldn’t say much more at the time, but I was already sold. I’ve followed Jordy on the #macadmins Slack and LinkedIn for years, finally meeting him in person at an event in Nashville a few years back. He represents the soul of this community—a lea

Hi, With my On Prem Jamf Pro Instance, i’ve made a policy to fix a particular wallpaper on all my classroom iMacs.it works well on mosts of my macs, but i’ve a brand new one, the policy run successfully, the wallpaper is in the folder /users/shared/Wallpaper/xxx.jpg but the wallpaper don’t change on any user accounts.Is there something new i miss?

Just a compilation video to share I made years ago using Casper. 

Today we are releasing a maintenance version of Jamf Pro; highlights include:Resolved IssuesJamf Pro Server[PI-1294] Fixed: If the Jamf Pro enrollment signing certificate was renewed while Jamf Pro was on version 11.26.x, macOS enrollments fail with that signing certificate, regardless of the current Jamf Pro version. [PI-1306] Fixed: When using the SSO setup assistant, the Set up in Jamf Account button redirects to an incorrect URL. Note: Upgrades to Jamf Pro 11.28.x may take 2 hours longer than usual. For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Pro. Cloud Upgrade ScheduleYour Jamf Pro server, including any free sandbox environments, will be updated based on your hosted data region below. Review this guide if you need assistance identifying the Hosted Data Region of your Jamf

Is this now?  I love it! 

Where is Jamf Chat Support?  I can't find anything anymore on their website.

Hi there,We have a Jamf-Pro on premise instance.i’m looking how to install our EDR, packaged, during the enrollement step, using same process to install SelfService.Is it possible to do this?Thanks

Heads up to my fellow Jamf community. We've been seeing iPadOS 15.8.4 iPads when reprovisioned can't be enrolled to Jamf School.  This may affect Jamf Pro too.  The exact error is "Failed to retrieve configuration".  I reached out to Jamf support and they said they have been getting reports of this from others and that this has been observed across different MDM providers.  Jamf reached out to Apple regarding this issue and this is exactly what they told me: Apple did get back to us just a bit ago, and they have identified the issue (they did not elaborate on what the issue was). The release is not ready yet though and at this time they couldn't give me an ETA on when that would release. For now I created an internal Jamf Product Issue so we can track customers and I have attached this case to that ticket (PI136109). Hopefully an update that fixes this issue will come out soon.  Jamf did say that they could reproduce my issue but had mixed results as one te

Our Device Inventory is no longer displaying Static Group Memberships. I can see the devices in the Static Group, just not in reverse on the Device Inventory. Anyone got similar problems? Kind Regards,Mathew

The latest Microsoft OneDrive versions use a different Key for their Bundle Version in their Info.plist file and JAMFS Patch Management definition is generating an error.  The existing Attribute Extension jamf-patch-microsoft-onedrive searches for KEY="CFBundleVersion" in the Info.Plist of the /Applications/OneDrive.app/Contents folder. However, there is no such key. Looking in the Info.plist of my own installation I can find the key "Bundle Version" with version 23086.0423.0001 There is no way for me to Edit the AE to improve the results or redirect it to my own that's collecting the relevant information. Any ideas on how I could fix this?