Get Support
Recently active
I have several iPads that need unenrolled from our Jamf Pro MDM. Unfortunately, they have expired device identity certificates and recently expired signing certificates. Is there an efficient way to simply unenroll them? I’m a novice at this, so please ask me the necessary questions.
Hi,I'm trying to experiment with deploying Safari web apps to other devices for an IT environment.I can create a package of a Safari web app on my personal MacBook, and repeatedly deploy the package to my personal MacBook without issue. The Safari web apps are typically installed to ~/Applications, but I can install to the system /Applications folder, or even to a place like the user desktop, and it will work. The app will also work for different users on my personal MacBook.When I install the package to another computer, there is a pop up saying that says "You can't open the application because it may be damaged or incomplete."Are Safari web apps hard locked to a device, from something like associating the web app with hardware identifiers? Could changing the web app or an associated plist with the web app via a script resolve this issue, or do web apps have to be manually created per user? Or more importantly, does anyone know if Jamf will support creation of Safari web apps via Jamf
Hi all. AirDrop is enabled for use between our shared iPads. However, when transferring files, the iPads emit a beep, but no notification appears to accept the transfer. Do you have any insights into what might be causing this issue? The devices are running iPadOS 18.3.1.Thanks in advance for your help!
Sometimes when an app or profile is scoped to devices, they get stuck in a pending status indefinitely, but a blank push command will "wake up" the process and it will complete. I'd like a way to send a blank push to all devices if a major profile or app gets deployed to speed up distribution.I can pull up a smart group of managed devices, go into the action menu and send commands to the group, but sending a blank push is not an option as a remote command using this method. And I'm not interested in doing it on an individual device basis from the management menu.Is there a way to send a blank push remote command to all devices or a group of devices?Thanks,Rob
Hi all,Anyone have any skills with deploying NinjaOne to Macs through Jamf?I’m having some troubles deploying Ninja to my environment in Jamf pro. I’m deploying the pkg using a policy. I pulled the pkg direct from my Ninja admin site using their method of acquiring the necessary file. I’m also deploying a config file to allow the necessary streamer application to run in the background and quiet install (see screenshot for config.) Every time I deploy through Jamf, the NC Streamer file does not go to the device, and the device does not enter my Ninja console. When I manually install the same pkg without Jamf, the NC Streamer installs fine and the device is added as a local machine. I’m trying to figure out where I’m going wrong with my install and why this is isn’t working through Jamf. It’s just a simple PKG in a policy and a small config file.Please let me know if anyone has suggestions for me or if I need to provide more info.I have contacted NInja support already. They claim it’s a
Hello world. Mike here. I wanted to let you know that MUT v6.2.0 was released today! The biggest change you're probably excited for is that MUT now uses bearer tokens for all authentication of all API calls, which means it is fully ready for the deprecation of Basic Auth for the Classic API. There's also a new settings menu. You can access it from MUT > Settings. All existing settings (Allow untrusted SSL, delimiter selection, etc.) have moved to this new menu, and you'll notice a few new options as well. Of note, there is now an option to select a log level, so you can cut down on the chatter and only get errors if you're looking to troubleshoot an issue. Additionally, credentials are now stored in Keychain by default, as opposed to user defaults that they were stored in before. If you'd rather use the legacy method, it's available in the new settings menu--but know that (as always) password storage is not available in user defaults. If you choose to store credentials
I have one user who cannot log in through the LDAPS login at initial setup. No other user has this issue. Their username can be queried through the LDAPS search test and each field populates correctly. They have no issues with other platforms that use LDAPS. I have changed their password and it has made no difference. Are there restrictions that can be placed on a user that I am missing?
We've got a profile that blocks the social media category on iPads as per school policy. However, on some devices (not all) it's blocking Duolingo and Picsart as well. Duolingo is categorised as Education and Picsart Photo & Video. There's no other restrictions blocking apps.I've tried removing the user from Jamf and resyncing with ASM/reassigning to the device but it didn't work.Has anyone else seen this?
Having a strange issue with JAMF Connect computers. We use Google SSO at the login in screen and it works normally, however, when the user logs out you are not able to click in the email box to sign in again. A restart will fix it but wondering if anyone has seen this.
Hey Community,From now until Sep 26th, you’ll earn 20 BYTES in Jamf Nation Rewards just for subscribing to our Jamf Nation General Discussions!How? Easy:Head to the page linked above! Click the big blue Subscribe button. Stay in the loop on all things Jamf + Apple - and get rewarded for it!⭐️ BONUS TIME ⭐️For a limited time, get 50% off the bytes needed to redeem some of our newest swag. Imagine rocking that gear at JNUC!Not part of Jamf Nation Rewards yet? If you’re a Jamf customer, sign up through your Jamf Account (details here).Your swag is waiting…⏰Please note: You may not see your new points reflected in your Jamf Nation Rewards Account right away. We are currently in the process of reconnecting our updated Jamf Nation with Jamf Account. We appreciate your patience while we reconnect these programs.
Hello jamfnation, I have a question. I try to rename some user accounts to match the company pattern. We want to do this process as smooth as possible for the user and admins. Therefore I've written a script which checks values and asks the user several questions which in the end creates a plist with some variables. After that the script reboots the computer and uses Rich Troutons "First Boot Package Install" (script almost completely rewritten) to show a log to the user what is happening. At that window the script, which is started by a LaunchDaemon, uses dscl to change the homefolder, uses mv to move the homefolder and again uses dscl to change the username. Now my problem:In order for dscl or mv to be able to change the homefolder it needs access to it (PPPC). My script is signed and stays signed, and a PPPCP is in place to allow for my script to access Admin Files and/or All Files. I also tried the unsecure way and allowed /bin/bash access to AdminFiles/AllFiles.However it is not
We are trying to figure out why most of our Macs updated to macOS 15.6.1 after I used Software Update in Jamf Pro to enforce getting Macs updated to macOS 15.6. When I set the update to go out, I specifically selected 15.6, not 15.6.1. I always check a few Macs in the group I selected to update to verify that they received the correct scheduled update. I confirmed that they had received the scheduled update for 15.6. Right after pushing out another update command, I saw that my own Mac already runnning 15.6 displayed an alert that it would update to 15.6.1 at the scheduled time. We have a profile installed that defers updates for 21 days. I confirmed that it is working using Macs not yet updated to 15.6. They all show 15.6 in Software Update. Macs running 15.6 do not show updates available. I wonder if the enforced update is responsible for this. I was very careful to specifially select 15.6 as the update we wanted to run. Has anyone else seen this behavior?
We would like to restrict our admin user from installing any applications via installer files (pkg or dmg) on their Mac. There is a functionality in the configuration profile under Restrictions that allows us to check "Restrict the App Store," but this only prevents users from opening the App Store. They can still download package files from the web and install them. Is there any way to restrict admin users through a script or configuration profile?
We upgraded some of our iPads to ios 7 and are unable to disable iMessage and Game Center. We do not use Apple Configurator as we are a Windows school. The iMessage option IS disabled in the restrictions for this profile group but still shows up on the individual iPads. We deleted the profiles on the iPad and it still came back.
Jamf is showing as disconnected after changing the user group membership (Version 11.19.1-t1754574720728).We are getting the following alert:"Exception_Group is actively targeted in the scope of the objects listed below. Changes to this group membership may require more time to deploy than usual due to the increased network traffic associated with redeploying certain content. Jamf Pro may be unusable or unstable during this time."After this message, if we save the assignment changes, the user device gets disconnected and does not accept any sudo commands.
Did someone have the problem logging in from a computer and this window appear? Some computers on our system do throw this if our trainees are trying to log in. They are on the same network as other devices and this appears on multiple browsers.
Hi, I’m trying to manage our recurring license limit in Jamf School since we’ve just renewed a couple days ago. I’ve already released the devices from our organization and they don’t even show up in the Inventory > Devices menu anymore. When I select them under the License Assignment menu, I only get the option to “Assign a Perpetual License” and there’s no option to remove a recurring license: Thank you in advance.
This guide represents the synergy of the latest technologies from Apple and Jamf. It harnesses the power of the new Declarative Device Management (DDM) framework built into macOS 15 (Sequoia). This modern approach is unlocked by Jamf Pro version 11.8.0 or later, which introduces Software Update Blueprints. Critically, this entire workflow is powered by the Jamf Account SSO, which connects your instance to the cloud micro-services required for Blueprints to function, creating a truly modern administrative experience.The guide outlines the modern, three-part strategy for managing macOS 15 and newer in Jamf Pro. It leverages DDM via Blueprints for a reliable, automated workflow and is based on enterprise best practices for both aggressive and controlled rollouts.PrerequisitesBefore you begin, ensure your environment meets these minimum requirements:Jamf Pro: Version 11.18.0 or later. Target Computers: macOS 15 (Sequoia) or later. Device Supervision: Devices must be Supervised. Administrat
To prevent user from syncing Chrome data with their personal google account, a custom setting for Google Chrome can be set and deployed by Jamf Pro. Preference Domain: com.google.ChromePlist file content: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>RestrictSigninToPattern</key> <string>(?:.*@domain1.com|.*@domain2.com)</string> </dict> </plist> let's check the managed chrome policy status and the sync result.
Disabling an Existing Local Account for FileVaultLog in to the JSS with a web browser.Click Computers at the top of the page.Click Policies.On a smartphone, this option is in the pop-up menu.Click New images/download/thumbnails/5832871/New_icon.png .In the General payload, enter a display name for the policy. For example, “Disable Local Account for FileVault“.images/download/attachments/12979842/DEC_Policy.pngSelect a trigger and execution frequency.Select the Local Accounts payload and click Configure.Choose “Disable User for FileVault 2” from the Action pop-up menu.images/download/attachments/12979842/LocalAccounts_DisableforFV2.pngEnter the username of the user you want to disable for FileVault.(Optional) Select the Maintenance payload and then select the Update Inventory checkbox so that the FileVault-enabled status for the local account is updated in inventory immediately when the policy runs.Click the Scope tab and configure the scope of the policy.Note: If applicable, you can us
Anyone using TeamDynamix? We are looking at changing our ticket system however, we want something that is integrated with JAMF or at the least user friendly with JAMF. Any thoughts would be greatly appreciated
Hi everyone, I have an JAMF managed I-pad that we use for testing. I need to connect it to my Macbook pro to run debugging. When I connect it to the Macbook the Ipad does not show the Trust this computer pop up. Is there anything I can do to be able to see this alert in JAMF?
Hello everyone,With the release of macOS Sequoia, I’ve run into an issue with our podium iMacs that are connected to projectors. By default, they no longer mirror the display to the projector screen, even when using scripts or third-party tools from GitHub.Currently, I have to manually adjust the display settings to enable mirroring for each instructor who logs in.Has anyone encountered this and found a reliable solution or workaround?Thank you in advance for any suggestions!
I’m getting Jamf Self Service error loading content when accessing self-service to download apps.
Name and information link Available for Release date iOS 18.6.2 and iPadOS 18.6.2 iPhone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later, and iPad mini 5th generation and later 20 Aug 2025 iPadOS 17.7.10 iPad Pro 12.9-inch 2nd generation, iPad Pro 10.5-inch, and iPad 6th generation 20 Aug 2025 macOS Sequoia 15.6.1 macOS Sequoia 20 Aug 2025 macOS Sonoma 14.7.8 macOS Sonoma 20 Aug 2025 macOS Ventura 13.7.8 macOS Ventura 20 Aug 2025 CVE patched ...https://support.apple.com/en-us/100100
Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
