At my current environment, we have an admin account and LAPS turned on.  As we know, LAPS doesn’t work for unlocking FileVault. We need an admin account to unlock file vault and log into so we can troubleshoot issues. I love the idea of LAPS but it doesn’t seem to be practical in our environment. Is the best thing to do is have a local admin account with a very complicated password. Also, we have it setup to only allow one ad account to log into the computer so using an ad account isn’t going to work either. 

I have a script that I wish to use to remove old user accounts on Macs that have no activity after a specific date. I have ran this script manually on various Macs that we have with no issues, however when I try running it via Jamf, it gets stuck on "Installed" for the status and never executes. Even when I run a simple "echo "test"" script, this results in the same issue, so it seems that I am unable to run any scripts at all. If I go to "Result of script execution" it says "Could not load any current execution, we will try again soon...". This has been going on for maybe several months now, if anyone has any ideas on how to resolve this, it would be much appreciated. 

2026 Jamf Nation Live (JNL) Commercial Roadshows are right around the corner, and we’re bringing a series of free, half‑day events to cities across the U.S. These sessions are designed for Apple admins, IT leaders, and anyone looking to learn, connect, and get hands‑on with Jamf. Each JNL event includes: Practical, real‑world workflows Live demos and technical deep dives Direct access to Jamf experts Opportunities to connect with peers in your region  Upcoming 2026 JNL Dates: New York City – April 14 Atlanta – April 16 Seattle – April 21 San Jose – April 23 Chicago/Naperville – April 28 Minneapolis – May 6  REGISTER HERE If you have any questions about the events or registration, reach out anytime to jnlhelp@jamf.com.We hope to see you at one to see you at one of the stops!

Hello everyone!On every mac using JC3 / SS+, the “Local Account Password Expires” counter never shows a correct days number, no matter what I try.-Kerberos is valid.-Signed out and back into SS+.-Changing the PW using the integrated workflow WILL change the password, but the counter never changes. The new PW will be accepted with SS+ and JC.-New-to-that-computer users who login will show a seemingly “random” date that does not match the idP Thanks for any help y’all have!PS: Sorry if this is a common fix, I searched all sorts of threads but didn’t find anything that helped.  

Just a heads up of this issue for my fellow macadmins.  This will be fixed in a future Teams update but in the meantime the there’s a fix in the article.  We’ve confirmed it works.Article here:https://www.bleepingcomputer.com/news/microsoft/microsoft-blames-undismissible-teams-location-prompts-on-macos-update/amp/

Finished Jamf 100 and 200 courses. Should I continue on to 300 and 400? Is it that much more valuable for a school environment? Thanks. 

Hi all,I've been dealing with a persistent performance issue with Jamf Trust and I'm curious whether others are in the same boat.We have around 50 Mac users in Milan using Jamf Trust (WireGuard, split tunnel) to access an internal Synology NAS via SFTP. Remote transfers consistently top out at 8–12 MB/s, which feels low given that the same setup without the tunnel reaches 20+ MB/s on the same connections and hardware.I've spent quite a bit of time investigating — the firewall, the NAS, the cipher negotiation, the tunnel overhead — and nothing on our side explains the gap. The infrastructure handles the load fine, and removing the tunnel immediately doubles the transfer speed.Support has not been helpful and hasn't been able to pinpoint a fix so far. I've also tested Network Relay, which unfortunately performed worse than WireGuard in our case.Is 10–12 MB/s a common ceiling others are seeing with Jamf Trust, or should we realistically expect more? Has anyone found a way to improve throu

The Dinner Table Tech DeskLet’s be honest, we’ve all been there - so let me paint the picture. It’s the holidays, everyone is gathered around the table, you’ve managed to dodge most of the argument inducing conversations and you’re about to take that first mouthwatering bite out of <insert your favorite festive food here>. Suddenly someone pulls out their iPhone and says one of these (or many other) nightmare inducing phrases; ”Hey can I ask you a question about iCloud real quick?” or “Hey, how many Apple IDs should I have?” These questions are par for the course when you are the designated tech person both at work and at home. I’m having a little fun here and I know that we all do our best to help out that relative to the best of our ability and get them not only back up and running ASAP but hopefully also feeling good about their tech. It’s likely the reason we keep getting asked for help, because we are good at it (and be honest, you enjoy it at least a little)! This article i

Hey,I am looking for way to disable the newDisable Google Chromes KI-Modell Gemini Nanohttps://www.heise.de/en/news/Commotion-about-unsolicited-AI-file-downloads-in-Chrome-11285401.htmlDoes anyone have an Json ready that can manage this setting?Is there any other way, to disable this unwanted “feature” ?Thanks in advance.

Hey,I am looking for a way to pre configure the server address for the Nextcloud Client.Even in Version 33.0.4 does a Configuration Profile not work.This is the JSON that I use, but it does not work for domainscom.nextcloud.desktopclientorcom.nextcloud.desktopclient.mac <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"> <dict> <key>serverurl</key> <string>https://your.domain</string> <key>username</key> <string>$USERNAME</string> </dict></plist>Has anyone found out, how to get this to work?Thanks in advance.

Today we are releasing Jamf Pro 11.28; highlights include:Mutual TLS Authentication for WebhooksJamf Pro webhooks now support mutual TLS (mTLS) as an authentication type. With mTLS, both parties authenticate each other during the TLS handshake: Jamf Pro presents a client certificate to the webhook endpoint, and Jamf Pro validates the server certificate presented by the endpoint. This ensures that webhook traffic is both sent by a verified Jamf Pro instance and received only by a trusted destination, enabling secure workflows that require strong authentication at the transport layer, such as certain SCEP configurations. Title Editor Authentication ChangeJamf Pro now uses Machine-to-Machine (M2M) authentication to communicate with Title Editor instead of the Cloud Services connection. M2M authentication is available only for Jamf Pro cloud-hosted instances. Note: Upgrades to Jamf Pro 11.28 may take 2 hours longer than usual. For additional information on what's included in this release,

Hey all. Rather than having to install and update Jamf Connect manually through policies after the black screen scare on Sonoma, i've been trying to have it deploy and update automatically through Mac Apps. However i find it is stuck on 'in progress' and never gets past that stage. Has anyone experienced this? It seems scoped to the correct group, i have attached my configuration settings in case anything seems odd there. Many thanks.

I know this has been a “feature, not a bug” for a while with Jamf App Catalog titles but it’s becoming enough of a problem that I would REALLY like a better solution.  The problem:Macs fall into a Smart Group being used for scoping of Jamf App Catalog titles Jamf App Catalog scoping does not reliably update with those recently added Macs unless you toggle the deployment off and back on again to force it to recalculate. (Count is differing by 100 or more Macs for some titles in our instance today.) Jamf Pro lacks any way to alert us that an App Catalog title needs refreshing, so we have to monitor every title’s deployment count manually to see if any of them needs a reset.I started a support “ticket” (i.e. JamfBot conversation) about this just in case there was a new checkbox or something somewhere I wasn’t aware of, and it informs me that everything is functioning as intended as far as documented solutions.  I’m in line for a human support agent to see if they have any pointers or undo

iOS 26.5 finally brings E2EE for RCS. Just interested: Will that have any impact on your MDM? We are a small company and now able to natively allow messaging each other without the use of 3rd party apps. 

Jamf Pro 11.28 introduces new webhook authentication methods for improved security, and removes the user-initiated enrollment requirement for computer PreStage enrollments.Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements.Thank you for your continued support and feedback!

Some apps supposedly have built-in functions which are supposed to report whether the app itself believes it has full disk access and will then either indicate this or go straight to a process of requesting the user grant such access.The main app I am having an issue with is called Scribe and is an app which automates installing updated corporate email signatures for Apple Mail on a Mac.I have previously created a PPPC Configuration Profile in Jamf Pro and verified this has been successfully pushed out to my Mac. System Preferences → Privacy & Security does show an entry saying this has been configured via a Profile and is enabled, i.e. is clicked to the right and is ‘blue’.It should be noted that my own experience is that the TCC database if queried, only lists apps that have been enabled locally and not apps enabled via a Configuration Profile. In this case Scribe is listed in the TCC database and whilst I cannot remember for certain, it is highly likely I did enable it manually

Hi folks!Here’s a nice little quality-of-life improvement released just yesterday.If you’re a Jamf Cloud customer and want to change the 20-minute timeout period for Jamf Pro, now you can manage it by integrating with Jamf Account — using just a Jamf ID (identity provider not required). You can extend the timeout up to 24 hours.Basic instructions:Log in to Jamf Account with a Jamf ID associated with your organization. The organization must have a Jamf Pro instance.Click Profile. Click Security. Adjust the settings for Inactivity timeout (up to 1440 minutes or 24 hours)   Jamf Account > Profile > Security > Session Options Log in to Jamf Pro and click Settings. Click Single sign-on. Enable SSO Authentication and save. Copy your failover URL, and keep it available.   Jamf Pro > Settings > Single sign-on Ensure you have a Jamf Pro account whose email matches your Jamf ID.   Jamf Pro > Settings > User accounts and groups Open a private browser window or a different web

Hi guys, I’m the IT guy in my school and have been encountering this issue that happens to 2 of my IT Colleagues. Their classes disappear in JamF Teacher from time to time. However on my Teacher account that I am using for testing, it stays. Not too sure what is the cause of this.  I have been retagging them back to their classes and this has put a hold for us to integrate in our School. Anyone else has encountered this before and has a solution? 

So I have a strange notifications that only pop up If you start the SS.app This is standard but when you start the SS.app then the error appear in Notifications. Clear dont work also the old sudo rm -R ~/Library/Application\ Support/com.jamfsoftware.selfservice.mac/Dont work. When you close the App the number 1 in the dock also disappear.  If I login with another user there is no error so seems account related, Anyone idea how to fix this?thanks

Hello again. I'm seeing a lot of older posts about this that are not relevant to Sonoma; most posts are from years ago. This is a 2 part question: I want to upload a Corporate image to be used for Desktop Wallpaper. I'll need this to be built into the "image" we use for MacBooks.2nd question, once picture is installed in the right folder, all I need to do is use the the "Lock Desktop Picture" setting in Restrictions and add the file path, correct? Any help is greatly appreciated. JAMF ProSonoma 14.4.1MacBook Pro 

My device is stuck at DeviceConfigured. I have been having this problem more often. Everything on the back end in JAMF looks fine, but on the front end it just says "Awaiting final configuration”. This problem will persist for a long time. Does this happen to anyone else? Anyone have any ideas on how to fix this? It does not have any network issues. I tried pushing this command through using update inventory. I wiped it and restarted it multiple times.  

Hi,I really hope that someone here can help me with this. We have had this error for a few weeks now and I am getting a little desperate here. Jamf and Apple support have not been able to provide a solution either.Some of our Macs are getting the “Enrolling with management server failed. An unexpected error has occurred <HTTPStatus:502>”. I know that usually means communication issues, but with those Macs that cannot be the case because I can enroll different Macs under the exact same circumstances without any problems. Same time, same cable, same server, everything is the same. On the other hand those Macs always have that problem and it wont go away no matter what I do. I have already tried enrolling via a different network, moving them to a different site, enrolling them via a different PreStage enrollment and much more. Nothing worked. And really bad part is that this issue is spreading. At first only a hand full of my Macs were affected, but now almost 50% of the Macs I try

Hey Jamf Nation! 👋 🎤 Free live workshop: Keynote tips and tricks for your best presentation yet.👉🏼 May 27. Register now → https://jamf.it/JamfNationEvents Here's the deal. 👇Whether you just found out you're speaking at JNUC (congratulations!) or you simply want to level up your slide game, this one's for you. Better slides are useful everywhere - all-hands, team meetings, client calls, that side project you keep meaning to polish up. We're bringing in Rob Potvin (@rob_potvin) for 45 minutes of practical, no-fluff Keynote technique. The kind of session where you leave with things you can use the same day. You'll walk away knowing:• How to shape your slides so they're clear and compelling - not just full of content• How to draw the audience's eye exactly where you want it• How to use Keynote tricks like Magic Move so your transitions feel intentional, not showy• Where to source icons and imagery that look polished without a design budget• How fonts, spacing and contrast affect wheth

I am suddenly having an issue with JAMF deployed apps. I’m only seeing the issue happening on 3 apps that are paid for. The apps deploy properly to the iPads but are now prompting the user to sign in to an Apple Account whenever the app is opened on the iPad. If they hit cancel it allows them to use the app but when they close out of it again, it will prompt the sign in again.Our VPP token in JAMF is not expired, the location is correct, Managed distribution for the app hasn’t changed since it previously been setup and working and we have enough licenses and this issue only suddenly started happening. I’m not seeing it on the free apps. Any feedback or direction would be great, thanks!

I’m curious to know how other organizations are handling OS updates. Not so much in terms of applying them but more so in terms of testing. How long do you typically defer updates in your environment? What is your testing methodology and criteria for deployment?