With the depreciation of the “app usage” payload, where do we go in blueprints to hide/remove default apps (phone, calc, books, etc)? Been digging through and can’t seem to find a like for like.

Cannot update devices from iOS 27 to 27.0.1. All iOS 27 devices are still shown under iOS Update 27, even though they have already been updated to version 27. Only iOS 26.x devices can be updated to 27.0.1. 

New Terms and Conditions agreement in Apple Business Manager.I was a day late 😅

TitleHi Apple/Jamf admins,I purchased a MacBook Neo advertised and sold as brand new from a third-party seller.During initial setup, I discovered that the Mac is enrolled in Jamf/MDM and is showing organisation-management information. I was not informed before purchase that the device was managed by an organisation.I have contacted the seller and they have offered to exchange the device, but I’d like to understand what has happened before returning it.From an IT/admin perspective:What are the legitimate ways to determine whether the Mac is registered in Apple Business Manager/Automated Device Enrollment? How can I distinguish between a locally installed MDM profile and Automated Device Enrollment? If the device is in Apple Business Manager, does removing the MDM profile locally actually resolve the underlying enrollment? Can an Apple/Jamf administrator release the device from their organisation remotely? Could a genuinely unused/new Mac have been purchased by a reseller and subsequentl

can an admin PM please? i need some help with my account!thanks!

Unable to complete file upload. fiie contents does not match file type in Jamf when uploading an automated device enrollment token from apple business manager

Hi all,I wanted to share a tool I’ve been working on: AxM Jamf Sync.It syncs AppleCare warranty coverage and purchasing details from Apple Business Manager or Apple School Manager directly into Jamf Pro.This isn’t a new project — it’s been on GitHub for a while, but I hadn’t posted about it here. I’m sharing it now in case it’s useful to other Jamf admins.The current release is v3.0.Two ways to use it:GUIA native macOS app with:Sync management Dashboard views for Apple, Jamf Pro, or both Searchable and filterable device table CSV export Multiple environment support Built-in schedulingIt’s useful for initial configuration and getting a clear view of where your fleet stands.CLI:The same application binary can be run with --silent to perform a full sync without displaying the UI.It can be used with launchd, cron, or scripts, supports --env to target a specific environment, and returns exit codes for success, partial success, failure, cancellation, bad usage, and missing environments.Both

We're seeing a strange issue for a few weeks now.The active window starts to lose focus randomly, which is a bit hard to explain, but for example, while typing every 20 seconds the textfield greys out for 5 secs then it's active again, which makes it impossible to work as this doesn't stop.With the help of the following python script (Brian33 on Nov 18, 2022), we found that OneDrive always steals the focus for a few seconds:https://forums.macrumors.com/threads/active-window-loses-focus.2321723/The only fix currently is to close OneDrive and re-open it, but this needs to be done always once the Mac restarts.So I created a script to close and re-open OneDrive during login, but it would be great to find a real solution. Our OneDrive version is always the most recent one: 23.056.0314Anybody else facing those issues?  

Hi there!Our school uses Jamf Teacher with Jamf School and sometimes we encounter a problem. Teachers start lessons for the whole class and don’t account for students who aren’t present.  This is fine if a student is at home due to illness but becomes problematic if they’re in another course like a special support course.We’d love a feature that allows us to easily exclude absent students from pushing lessons.  Does anyone know a good workaround?Should I make a feature request somewhere else? RegardsManuel

I am trying to create a EA to report the status of the the following key in the Clients.plist.  This is what I have so far but it is not reporting properly.  Any help is appreciated.  TY #!/bin/bashABSlocationServices=$(sudo defaults read /var/db/locationd/clients.plist 2C4E4FD5-F029-XXXX-XXXX-XXXXXXXXXXXX:icom.absolute.ctesservice.ase:Authorized)if [[ "$ABSlocationServices" == "True" ]]; then    echo "<result>Enabled</result>"else    echo "<result>Disabled</result>"fi

I updated our Apple TV fleet to tvOS 27 last over a week ago only to get some complaints about audio quality being “staticky” when casting sound through Airplay.  After much troubleshooting, I discovered it was due to our Airplay security being set to “On WiFi”.  If I set it to “Everyone”, the sound quality improves but Bluetooth discovery gets enabled which is a concern for us as kids were scaring teachers by blasting music when they were alone in the room.Besides awaiting a fix from Apple,  how does anyone else handle Airplay security?  Does everyone just set it to “Everyone”? 

On Aug 18th, I changed over to the SSO integration in Jamf Pro Cloud. I have always had my SMTP server settings configured for email notifications on Smart Device Group Membership changes. I no longer receive those emails even though the box is still checked to do so. In the SMTP settings in Jamf Pro, I can send a test message and I DO receive that but just not any of the membership change emails that I want to. Is this a known issue or is there something I am missing? Any and all help will be appreciated. 

I really like using Blueprints/DDMs for macOS fleet upgrades. Apple is so close to finally giving us a solid mass update workflow, but in my opinion, two main flaws remain:Users get no clear feedback when an update installation is scheduled. Notifications are way too scarce and easy to miss. Users have even told me they sometimes only see them on the final day.To solve this at my company, I added a live countdown in the menu bar so everyone has a constant reminder that their Mac is scheduled for a restart and update. 48 hours before the deadline, it also sends persistent notifications every two hours, so I can be sure users are properly informed.I know other tools exist for this, but none of them quite hit the mark for me on UI/UX. After two months of fine tuning, the app is out of beta and I'm sharing the source code with the community. While I won't be taking feature requests, I'll do my best to maintain it and fix bugs as long as I'm using it myself.

With Apple recently expanding access to the ABM/ASM API, I set out to recreate the GSX experience. By leveraging Jamf’s new MCP feature, Claude Code, and MUT, I believe I’ve come very close. Additional details are outlined below.Please visit the following Github repo for the latest version of Warranty Wrangler: https://github.com/brndnwds6/Warranty-Wrangler/tree/main Warranty Wrangler — Setup & Usage GuideThis guide walks through everything needed to run warranty_wrangler.zsh, a script that pulls warranty and AppleCare+ coverage data from Apple Business Manager (ABM) or Apple School Manager (ASM) and produces CSV files ready for import into the Mass Update Tool (MUT).PrerequisitesA Mac running macOS Administrator access to Apple Business Manager or Apple School Manager jq installed — if you don't have it, install it with Homebrew: brew install jq openssl, curl, and xxd — all included with macOS by defaultStep 1 — Create a Working DirectoryCreate a dedicated folder to store the scr

For those that have printers to manage, thought I’d pass along that Jamf Printer Manager now supports Jamf School. In short the app will read locally installed printers and create a profile (printer payload) and package to upload into Jamf School. Documentation is available here.Thoughts/suggestions around making the app more useful are welcome.

I’ve noticed that I can’t send any more commands from Jamf Pro to devices after the iPadOS 27 update. It is requiring me a manual restart of the device in order for pending commands to go through. Is anyone else seeing this or is it just a new fluke?

I need some help and have a question regarding how this works. I’ve just started deploying software update settings via DDM in my Jamf Pro production instance. I currently want to deploy four different blueprints—similar to the configuration profiles I used previously. I noticed that the MDM profile contains multiple entries for device declarations related to software updates, and settings are enabled there that I only actually configured in one of the blueprints. For example, I want to disable “Background Security Improvement removal”; I have explicitly disabled this in one blueprint, yet the setting appears as allowed in the other entries within the MDM profile. Can anyone shed some light on this? Two blueprints are visible in my screenshots. In one, the removal of “Background Security Improvement” is prohibited, while in the other, it is not set at all.  

Hi,Pretty new to Jamf and Mac MDM but seem to have the handle on the majority of stuff. I’m having a single issue with the users enrolling the devices into PSSO during the simplified set-up. I am pretty certain it’s a Conditional access policy we have set within our tenant that blocks access to any cloud resources from Uncompliant devices. The guidelines suggest - “The User Registration app for Device Compliance created when you connected Jamf Pro to Intune must be added as an exclusion in any policy that may prevent users from registering their devices.”And from the logs I can see this is the exact application that is getting blocked on the policy.The problem, even if I add the exception for this application into this conditional access policy it will still get blocked.If I add the user to an Exception group, the device enrols perfectly fine. Not sure if anyone else has had a similar issue? 

Hello!  About a month ago, we started receiving messages from a few of our users that when they try to go to "Users & Groups" in System Preferences to change their password, they see a message saying "Users & Groups" settings are not available. These settings are controlled by a profile."  However, we have no profile in place that would completely lock the users out of that preference pane.  This has only happened on a handful of Macs, and we've been unable to determine a cause.  All of the machines in question are getting the same set of Configuration Profiles.  We've seen it on Macs running both macOS Sonoma and Sequoia.  The even stranger thing is that on at least one of the Macs, it just disappeared one day and the "Users and Groups" pane went back to working normally.  If anyone has an idea why this might be happening and what we can do to fix it, we'd love to hear about it.  Thank you!

Hi Jamf Pro Ninjas, I have getting this error. I have following links  https://learn.jamf.com/r/en-US/technical-articles/Deploying_the_Company_Portal_App_to_Mac_Computers No Luck→ Wipe device Twice→ deleted and recreate the profile twice → check the version(app is on latest version) and reinstall company portal Can you pleas assist me? 

It sounded quite simple, but it was not. Spend most of the day on it, with help of an AI that failed as well. Got the request to distribute 4 Office templates to our 45 users (Macbooks, Golden Gate 27.0). I used the latest Jamf Composer to make PKG’s, but somehow the install consistenly fails or runs fine, but does not install them. Using a script did not fix it. Neither the use of a DMG.Last year I did the exact same to install 26 font-files and that worked fine. Any clue what is going on?

I’m not sure if this has been reported yet, but Recon gets stuck on Locating hardware information (macOS 27.0), Gatekeeper status: App Store and identified developersThe machine I am using was upgraded to Golden Gate, not a fresh install. The software updates button is unchecked in Inventory Collection. This does not get stuck on any other OS version in my environment, seems to be a Golden Gate issue.Again, just wanted to get a post out there so a discussion can be started about it.

Hi Nation,Product Office Hours #5 - Jamf @ Jamf: How we Platform SSONext session: Thursday, 10th Sep - 9am CDT / 3pm BST / 4pm CESTSpeakers: Emily Kausalik (Dr.K), Manager, Client Platform Engineering and Adam Derrick, Sales Engineer IIIRegister here: https://jamf.it/ProductOfficeHours 🧵 Got a question? Drop it in the comments below ahead of time if you want it on our radar, though you don't have to. We'll be taking questions live on the call! Anything we don't get to, we'll follow up right here within 24 hours.See you there!

Hi, I’ve configured this Blueprint on the 14th September with a deferral of 90 days for macOS Golden Gate. I’ve only scoped macOS 15 & 26. I’ve only excluded my machine. Everything seemed fine but now today I check my dashboard and I see 2 user’s machine’s have been upgraded to 27. Why, how? I’m pretty annoyed now by this 

On Saturday, October 10, 2026, Jamf Cloud Infrastructure will be patched. During this time, you will be logged out of your Jamf Pro instance. The purpose of patching is to ensure that Jamf Cloud infrastructure and the database service are up-to-date, stable, and safe from security threats. Please see the times for our regions below. Hosted Data Region Date Start Time End Time us-gov-west-1 October 10, 2026 08:00 AM CT 12:00 PM CT