Enable Jamf’s AI-powered conversational assistant for Jamf Pro in Jamf Account, configure OIDC-based SSO using a new setup assistant in Jamf Pro 11.27, and add users from Jamf Account to Jamf Pro!Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements.Thank you for your continued support and feedback!

Unable to complete file upload. fiie contents does not match file type in Jamf when uploading an automated device enrollment token from apple business manager

The documentation from Cisco is pretty abysmal, it took me hours to finally make sense of it all. I made my own guide and an all-in-one config profile to use for deployment via Jamf. I hope this helps anyone in the future.  https://scribehow.com/shared/Create_Cisco_Secure_Client_Jamf_Installer_pkg__ODli2lu5QiyylY4S5aCvMQ

As of macOS Sonoma 14.4 using "/System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport --getinfo" no longer returns info about the active Wi-Fi connection. If you want to collect the active SSID for macOS 14.4 or later you can use the wdutil tool and here's an EA to do that:    #!/bin/sh # EA - ActiveSSID # # Note: Using wdutil instead of networksetup so I don't need to know what # interface is Wi-Fi # Returns the currently active SSID activeSSID=$(/usr/bin/wdutil info | /usr/bin/awk '/SSID :/ { print $NF }') echo "<result>$activeSSID</result>"  

Apple Intelligence is finally here now that iOS 18.1 and macOS 15.1 has shipped. However, many people and organizations want to know how they can block it.Apple Intelligence is an Opt-In service from Apple, so unless you Opt-In, there’s no concerns about AI, on or off device.Officially, Apple has provided the following configuration profile keys for the X.1 OSes for the preference domain com.apple.applicationaccess.allowWritingTools allowMailSummary allowGenmoji allowImagePlayground allowImageWandAnd DDM management of Math Notes.There’s also the key allowAssistant to disable Siri, which has become more intelligent with Apple Intelligence.Currently in the X.1 OSes, these are the features which are available and able to be restricted: Siri, Writing Tools and Mail Summary, even though there are controls for the other features not yet implemented.This will allow you to fully block those features. But is that it? …the answer is …No. So even if you implement all the Apple supplied restrictio

All the existing devices in our system stopped updating inventory on 21th-26th February. Any devices added since then are updating ok. How do we rectify this bug and what caused it? We cannot delete and start again on 200 devices.

Has anyone had to renew the built-in CA in Jamf Pro before and if so, mind sharing your experience with it?  I'm primarily curious how many devices ended up having to unenroll and re-enroll as a result of MDM profiles failing to renew.  With over 11,000 Macs in my environment, the suggestion shared by Jamf support by disabling automatic MDM profile renewals before renewing the built-in CA, then issue MDM renewal commands manually to no more than 100 devices at a time isn't realistic in my environment, especially when both the smart and the static computer groups aren't designed to group devices strictly by quantity into groups of 100 that easily.

We are deploying Xcode as a Mac App (VPP).  Apparently after updates it is requiring admin creds to accept the End User License Agreement.  I am stumped on how to fix this one.  There’s not much I think we can do with Mac Apps.-Pat

Apple's Terms and Conditons have been updated ...   

Hi everyone, we are currently exploring the Jamf Security Cloud and it’s capabilities with Jamf Trust app.So far we were able to create a connection between our Jamf Pro instance to Jamf Security Cloud, along with Entra ID for IdP integration.Current configuration deploys a Jamf Trust activation profile to end devices via Jamf Pro. However, I was wondering if the Jamf Trust app automatically gets installed via the activation profile. Or is there another process we need to configure to deploy the Jamf Trust app to end devices (for Mac and iOS). I would appreciate any expert’s opinion on how a typical Jamf Security Cloud and Jamf Trust configuration and deployment would get configured on end devices. Thanks in advance!

Hey all,Im using the JAMF Pro in house dock settings to remove apps though have hit a dead end with three Apple System Apps: Facetime, Apple TV and Apple StoreIm just wondering what is the best method for removing these last 3 from the dock. I have tried getting assistance from the JAMF Helpdesk and  even with their assistance we were unsuccessful in finding the correct path to remove these with the in house option.If anyone could walk me through another method I would be very grateful.

Hi all, I have a policy running a script and restart options enabled. A restart message is also in place under “user interaction”. Everything is working fine so far. However, if the script is triggering an exit code other than 0, I want to stop the policy without restarting and showing the restarting window. Ist that possible? Or is there any workaround? Thanks, Stefan

Hi everyone, we have recently bought a Brother MFC-L2800DW type printer and I was wondering what would be the steps to deploy it and configure it. It will be our first printer installation so we are very new to the process. CUPS and IPP and PPD shows up in many places.We want this printer to be a network attached printer and I think we need to also deploy a driver as well, I am assuming. I would appreciate any expert’s opinion on what would be the default way to configure a network attached Brother printer. Can we use macOS built in generic PPD file? Or We need to deploy something frmo Brother printer’s end? Thanks in advance.

We are a K-12 school district migrating from Jamf School to Jamf Pro I have already rostered our students and classes.Only able to begin device migration after school ends. As there can only be one MDM to rule them all. And our students and staff are still using Jamf School.I am starting to build our our profiles.I noticed that you must create separate profiles for iOS and MacOS. No way to share profiles between them? I was just thinking it would be nice to share for wifi/networks and what not.Working on trying to get our macOS profiles for wireless working after a device wipe.It does not seem to be working. Which will mean we have to hardwire these devices. Has anyone got this working. I have added the profile to the pre stage. But like I said, it doesn't seem to work on return to service.They Does any have some important tips, blockers and solution they would be able to share?

With the recent release of the M5, we’ve been trying to connect MacBook Pro’s to our 802.1x secured Wifi Network.We’re using the same configuration profile that has worked on the rest of our fleet.  Our network team have looked at the logs and have determined the issue is on the endpoint side “WLC keep sending EAP-TLS request and no response from client”.Wondering if anyone else has encountered this issue and what if anything was done to fix it.Thanks

Since NoMad has stopped working with the new macOS 26, we are looking for its replacement.We tried implementing JAMF Connect, but since we use ADFS, JAMF Connect is not compatible.Can anyone suggest any other replacement for NoMad, which can work as a password sync between Mac devices and our Entra environment.Thanks

Today we're opening the public beta of the Platform API Gateway – a single, unified way to access any combination of Jamf APIs, current and new. You manage all of it from the new Integrations space in Jamf Account.Jamf is no stranger to integrations. The Platform API Gateway takes that further – one place to manage access, one consistent way to authenticate, and a growing set of APIs that cover the full Jamf platform. Unify your workflows, reduce friction, and realize the full value of your Jamf journey.As Apple continues to grow in the enterprise, the way organizations build, automate, and integrate is evolving too. Workflows are becoming more extensible, more autonomous, and more agentic – and we want Jamf to be the foundation customers and partners build on to get there. The platform that manages and secures millions of Apple devices worldwide is opening up fully – rooted in what you know, built for what's next.This beta is the first step.What's available in the Platform API Gateway

I was creating a configuration profile to setup a webclip that redirects to a URL. I accidentally put a name for the bundle ID: com.apple.webapp with an XYZ name and now Jamf has made that association and has changed or plugged in that XYZ name into all my other profiles that have that bundle ID. This created a bunch of orphan icons on a test device I was working on. How do I remove remove that? I am working to remove that bundle ID in all my Restrictions profiles, and will have to reset my devices. SOS! I am new to jamf, so def learning as I go. 

I am having hard time deleting smart user groups, I get the spinning wheel when I click on delete. The groups are empt. So annoying! 

Hello, I’m hoping someone has some insight into this issue. I have two internal distribution points that run on Mac minis. They have both been up and running for several years. Recently, one of them stopped working after I renewed the SSL certificate. I accidentally let the certificate expire by less than a day. Now, after renewing the certificate, I can’t get it to serve files over HTTPS anymore.  Here’s what I have done so far:- Renewed the certificate several times- Verified that the certificate information is correct and matches what is listed in Jamf- Verified that the setting in my httpd.conf and http-ssl.conf files- Restarted Apache (multiple times)- Restarted the DP that is not working- Compared the settings of the DP that is working with the one that is not-re-entered the password for the jamfread account in Jamf and on the passwords file on the DP- Pasted the link for one of the files that fails to download into a browser window and confirmed that I can access and download th

Apple Business Manager is now just Apple Business.Remember to log in and agree to the new terms and conditions so that devices can continue to be added.https://business.apple.com/ 

Does jamf offer a better setting for how to find the Approximate location of the device (iPad) on the Jamf School system. Other MDMs show the location much better. Is there something that I am doing wrong? Please advise.I am using Jamf School.

I just got to 250+ “bytes”!  That XL Gamer Desk Tech Mat is so close…I am dangerously low on swag.  Seriously, I only have the jamf shirt I goyt when I got my CCT.-Pat 

I am seeing a Keychain not found alert after I recently started enforcing OneDrive Desktop and Documents sync. This just happened on my newly enrolled test Mac after I registered platform single sign-on. The alert appeared as I was logging in to OneDrive. There is actually an entry in Keychain. I looked up the ID shown in the screenshot. Reset to Defaults is NOT the right choice. I found that unlinking the Mac from OneDrive and then signing in again helps, but this prompt came up as I was in the process of logging in. We use platform single sign-on so there is no password prompt. Has anyone else seen this and solved it? 

Hi Guys,We are facing very weird issue at our Orgs, where none of the packages are getting installed during enrollment for some devices. The issue is not for all the devices, and usually for few devices but been having this issue once in a while.All the packages are signed, and works perfectly fine for most of the device. And for god sake, we cant replicate this issue whenever we do a testing.Those devices who have issue with package installation, usually works once wiped and re-run the enrolment process.Does anyone have idea on how to get this sorted?