how great would this feature be, vote up if you haven't already! https://www.jamf.com/jamf-nation/feature-requests/5938/add-the-ability-to-repush-configuration-profiles

Since Jamf Pro was upgraded to 11.9.1 we are getting Profile installation failed message when configuring brand new iPads and also existing devices after erasing them.Screenshot of the error attached belowNo change on our environmentAny help would be appreciated. Thank you

Hi everyone.We are starting prestaged enrollment process for our employees enabling the locked recovery mode.I noticed that if the user gets the password wrong 3 times (filevault login), the Mac offers to restart in recovery mode to reset it. If the user accepts, he will remain stuck in recovery even after restarting, therefore he will be forced to contact us to carry out the reset procedure or get the lock key and then reboot in FV login. I would like to reduce the risk of this happening, what do you suggest I do? Is there a possibility to increase attempts or disable this prompted suggestion by MacOS?On the first 10 enrollments, we already got 2 cases. Maybe we're just unlucky :)Thanks.

Hello,I have a configuration profile set to enable FileVault upon enrollment & escrow the personal recovery key. This is working great, but here & there we had some keys not get escrowed, even after the computer inventory updated several times. I recently enrolled four computers and all four did not get their key escrowed. I am not sure what's going on - has anyone else experienced this? Each computer's encryption status is as follows:FileVault 2 Partition Encryption State: EncryptedPersonal Recovery Key Validation: Unknown The only remedy is to use Jamf's reissue FileVault key script, but that's not an ideal solution for my organization.

I have been using a Python script that uses a Google Sheet to locate serial numbers and match them up with names. When trying to use this with the M1 Mac's, it seems that the script isn't working as it should. Upon investigation, the script I was using was only updating the computer name, but not the two hostnames. On the Intel Mac's, this didn't seem to be an issue, but with the M1 Mac's, renaming via the script has become unreliable. More often than not, I have to manually rename the computers and manually add them to AD. Anyone have a better script for this? Here is mine that I cobbled together from other threads on Jamf Nation. #!/usr/bin/python ''' Rename computer from remote CSV using Jamf binary Pass in the URL to your remote CSV file using script parameter 4 The remote CSV could live on a web server you control, OR be a Google Sheet specified in the following format: https://docs.google.com/spreadsheets/u/0/d/1H9gsdRtmzb0v9TY8r47j8p8uUs

What is the best practice to deploy Jamf connect via pre-stage?I tried to push it via prestage, it installed Jamf connect app but not any of the agents or bundle. There is no login window for Jamf connect. When I run the same package via policy, it fixes the issue.

Think this has been posted before but hoping someone have come across recently. Im packaging this using a script I found on here somewhere Im getting below error which comes up while the script is running I have created a login item profile for this but still getting this pop up any idea.   #!/bin/zsh   ### Install Autodesk Apps and Licenses ### Maya & MudBox (2025)   ### 2025.07.19 -JonW     ### Silently installs apps and licenses - no user interaction required ### Uses stock DMG's from Autodesk - no pkg hacking or repacking required! ### Works at loginwindow for multi-user lab/classroom deployment ### Tested on both 2024 & 2025 app versions (macOS 13 & 14) AutoCAD, Maya & MudBox ### A complete uninstall of previous versions is recommended but may not be necessary, ymmv ### Script could use some error checking, logging and fine tuning ... will get that on a slower day       ### Ensure stock Autodesk install DMG's are set to CAC

How long should it take for changes made to block or allow something in the content filtering policy to push out to the devices?  Sometimes I make a change and it seems like it goes through to my test device almost immediately and other times it can take hours.  Is there a way to speed up this process somehow so I can test my changes in a reasonable timeframe?

Hello folks,I have a new M1 MacBook Pro, which I rolled out with DEP. English was selected in the language selection at the beginning of the Mac installation. I changed the language to German and then continued the installation. FileVault is enabled via jamf Connect Login Configuration Profile. Now I have the problem that the language was not changed to German on the login screen and the keyboard layout is still set to ABC. (But the language in macOS is German.) If I switch it to German, it's back to ABC after the next restart. In the past we were able to solve the problem by performing a macOS update. After the update, the language on the login screen was German again and the keyboard layout remained in German.sudo languagesetup -> 13 did not bring anything.Does anyone know the problem and has an idea? Cheers 

Hello Jamf, So around a month ago, a user reported that they were unable to log in after restarting. I had them show me the issue, and after logging into the jamf connect log-in window, the screen just goes black for about 30 seconds, then prompts them back to log-in window again. Turning off the wifi allowed the user to log in, but if he restarted, the issue was still there. This trickled down to a few more users, and I opened a Jamf support ticket. I tried all their troubleshooting and uploaded logs, config files, and system reports, and they saw nothing unusual. They also had me to set  "Enable Filevault" to false in our "Jamf Connect Login" config profile since it was already enabled via its own standalone config profile. I thought that was solved, but then one of our VP's reached out to me, stating that they were unable to log in and were having the same issue.  I checked our okta logs as I had a hunch that the issue was mfa related. I checked mfa usage reports

Hello all,I had a request to inventory all Edge extensions in our environment so we can consider whitelisting/blacklisting extensions. I was able to modify the script in this Chrome EA from Jamf's GitHub to fit our needs. Specifically, I needed to modify it to look at Edge's data folder and to check all users on the client instead of just the currently logged in one or last user. I'm providing my modified script below in case it's helpful to anyone else looking to do the same.#!/bin/bash # Setting IFS Env to only use new lines as field separator IFS=$'\\n' result="NA" createChromeExtList () { for userHome in /Users/* do user=`echo $userHome | rev | cut -d"/" -f1 | rev` if [ -d "$userHome/Library/Application Support/Microsoft Edge/Default/Extensions" ] then for manifest in $(find "$userHome/Library/Application Support/Microsoft Edge/Default/Extensions" -name 'manifest.json') do name=$(cat $manifest | grep '"nam

Hello,we are using Jamf School. The new system calculator App will feature AI Abilities.Will it be possible to block these AI features or the new calculator App as whole?Kind RegardsSebastian Fischer 

If I have users on macOS 14 Sonoma, can I push macOS 15 to them via software update within JAMF?

Hello,Does anyone out there have a script in Jamf I can use that can auto fill the "Update user and location" section. I need it to work for computers that are being setup and deployed for the first time as well as computers that have already been deployed and are current. 

For older Apple hardware that cannot run Mac OS Sonoma, how do you use jamf pro to install SSH version 9.8?OpenSSHAvailable for: macOS SonomaImpact: A remote attacker may be able to cause arbitrary code executionDescription: This is a vulnerability in open source code and Apple Software is among the affected projects. The CVE-ID was assigned by a third party. Learn more about the issue and CVE-ID at cve.org.CVE-2024-6387 

Noticed on the restrictions payload in configuration profiles that Media Restrictions are listed as deprecated after macOS 10.15. Does anybody know if there is an alternative method for blocking external drives in Big Sur?

If I run the command disable and prevent activation lock on a system that has activation lock enabled it does not disable it. Is this normal?If I run it on a system with out activation lock enabled it does prevent the user from enabling it. But would like to also disable activation lock on systems that people have logged into their apple id and enabled find my mac. 

A few months ago, I was able to use the Jamf API to obtain a computer's room assignment. I need to now get the computer's site. I don't care if I can only obtain the site ID or its actual name. I need this so I can avoid creating a separate installer package for the different regions in my company. I want the install script to first obtain the computer's site assignment and then choose the appropriate customization for each region. I thought this would be similar to getting the room assignment but apparently it's not. Does anyone know the correct way to do this?

Just got my first request for an ebook in the 10 years I've been using Jamf. Of course assumed it worked like normal Apps, but why would anything be that consistent or easy right? I understand we have to send an invite to the user which I have, however it doesnt seem to send. We are using Managed Apple ID's with ASM but the user cannot login to Books (message stating managed apple ids cannot log into to books or the appstore) and I dont see the invitation showing in self service, and I also tried checking all the check boxes for Automatically accept the VPP invitation for managed apple ids. If I look at the invitation status it shows..."Missing Managed Apple ID". The staff member is logged into their Apple ID in system preferences and Apple Classroom is working normally so again, no idea what else I need to do. But if they could just make this a bit more complex to manage...that might help. Gabe ShackneyPrinceton Public Schools

Hello all,I get the error"An error occurred while trying to determine if the Software License and Service Agreement has been accepted. You will be logged out in 5 seconds"After upgrading from 11.7 to 11.9.1 and restoring a newer database Any ideas?

In Patch Management Spotify is indicating that version 1.2.43.420 is the latest version even though 2 newer versions have been released since that one.  Can this be fixed to display the correct latest version. 

Provide users with detailed feedback while removing Acrobat’s Add-in from Microsoft 365 Background Each time Adobe Acrobat Pro is installed or updated, the Acrobat Add-in is silently added back to the Microsoft 365-related User Content Startup folders. The Add-in relies on external dynamic libraries, which we purposely disable by setting DisableVisualBasicExternalDylibs  to true: Unless non-Microsoft extensions are being used, set this value to true via a Configuration Profile to improve security. This causes users to observe error messages in the following applications: Microsoft Excel Microsoft Word Microsoft PowerPoint Continue reading …

Hello everyone,Now I'm about to go crazy when nothing works for me. What's the best way to backup, wipe and restore a mobile device (iPad)?In my case I need to backup all on a device, wipe it and get all photos, notes and so on back on the same device after wiping it.I've tried a some on a test device to backup on a Mac, wipe it and restore. Tried it two ways.1. Restore before anything else after wiping it.2. Signed in to Wi-Fi and remote control and the restoring.In one of the cases (think it was the second) I got some back but far from all. Didn't get Self Service for one example and far from all photos. In the other case it looked like I got all apps and so on back, but many of the apps hade a cloud in the bottom of it. Self Service had a cloud and when clicking it, it couldn't be downloaded. 

Our organization is not currently allowing AI software on any device, including using the built in CoPilot in Edge.  I found some documentation, but it isn't 100% clear on how to disable it.Anyone have an easy way to make this happen in Jamf?

I am looking for a way to fully disable Airdrop for CIS standard security reasons on our Macs, the typical defaults write com.apple.NetworkBrowser DisableAirDrop -bool YES removes the option from finder but this option still lives in the go menu and the CIS check continues to fail.  Any Ideas or special config profiles people have created?