The latest Microsoft OneDrive versions use a different Key for their Bundle Version in their Info.plist file and JAMFS Patch Management definition is generating an error.  The existing Attribute Extension jamf-patch-microsoft-onedrive searches for KEY="CFBundleVersion" in the Info.Plist of the /Applications/OneDrive.app/Contents folder. However, there is no such key. Looking in the Info.plist of my own installation I can find the key "Bundle Version" with version 23086.0423.0001 There is no way for me to Edit the AE to improve the results or redirect it to my own that's collecting the relevant information. Any ideas on how I could fix this?

“Tanoe," the script that blocks macOS updates, is primarily intended for Macs not officially supported by Apple (often used with OpenCore Legacy Patcher/OCLP), as well as macOS virtual machines.It also allows users to bypass the 90-day update window authorized by Apple via a configuration profile.I sent it to many contacts, and several were shocked to discover it was a terminal script.So, I created a Swift application with a graphical user interface (GUI), named "TanoeGUI," to simplify its use, especially for those unfamiliar with the command line. https://github.com/DrDonk/Tanoehttps://github.com/chrisbasse/TanoeGUI

Edited 4SEPT2024: Updated information with the release of Jamf Pro 11.9 for PSSO and Device Compliance.  Also added link to Jamf Pro documentation. Jamf Learning Hub Instructions: https://learn.jamf.com/en-US/bundle/technical-articles/page/Platform_SSO_for_Microsoft_Entra_ID.html Current Public Preview Limitations What is Public Preview

Hi Jamf Nation,Big news at Jamf. I'm thrilled to share that our Board of Directors has named Beth Tschida as Jamf's new CEO. Many of you already know Beth. She's been with Jamf for eight years, most recently as our CTO, and has served as Interim CEO since March.Beth has been at the heart of so much of what you rely on from Jamf: our cloud platform, our security portfolio, and our eight-year streak of same-day support for new Apple operating systems. She knows this community, she knows your work, and she knows that everything we build has to earn your trust.A quick word of thanks to John Strosahl, who led Jamf through our transition to private ownership earlier this year. John has been a great partner to this community, and we're grateful for everything he's done to set us up for what's next.Also important is what hasn't changed: our commitment to you. Managing and securing Apple at work is what we do, and with Beth leading the way, esp

We are building a Python application using the JAMF Pro REST API (OAuth2 client credentials) to send MDM restart commands to iPads. We are calling POST /api/v2/mdm/commands with a Bearer token and the following body: {"clientData": [{"managementId": "<device-management-uuid>"}], "commandData": {"commandType": "RESTART_DEVICE"}}. The API client has the following privileges assigned: Read Mobile Devices, Update Mobile Devices, Send Mobile Device Restart Device Command, Send MDM command information in Jamf Pro API, Send Blank Pushes to Mobile Devices, Update Mobile Device Inventory Collection, Update Sites, and Update Change Management. Despite all of these permissions being assigned, we are consistently receiving a 403 INVALID_PRIVILEGE: Forbidden response. The managementIdUUID is retrieved from the device detail endpoint /api/v2/mobile-devices/{id}/detail and confirmed correct. We have tried two s

Hi all, we use Automated Device Enrollment with Apple Business Manager.Suddenly, device registration in Jamf stalls. After user login and MFA confirmation (Entra ID), a small notification window appears asking, “Do you want to allow downloads on ‘login.microsoftonline.com’?”No matter what we select here, the process then stalls at “Retrieving enrollment profile.”We have already checked ABM, Intune/Entra ID, and Jamf settings (token), and all syncs are running.Does anyone else have any idea what the cause might be here?

Hi,with MacOS 26 Tahoe Apple introduced the new Simplified Setup for Platform Single Sign-On. Both Jamf Pro and Jamf School support this new feature in theory, but I was not able to get it working with Jamf School using Microsoft Entra.Jamf School support says that it should just simply work, but both Jamf and Microsoft say that it is not yet supported (see Jamf and Microsoft).Has anybody been successful?

I am currently getting to know more about the new Blueprint feature in Jamf Pro. Currently I can see that a blueprint has been deployed to 60 devices, 19 devices are pending and 1 device currently has got an error. How can I check which devices have already received the Blueprints components and which devices still need them?Thanks in advance!

On Saturday, June 6, 2026, Jamf Cloud Infrastructure will be patched. During this time, you will be logged out of your Jamf Pro instance. The purpose of patching is to ensure that Jamf Cloud infrastructure and the database service are up-to-date, stable, and safe from security threats. Please see the times for our regions below. Hosted Data Region Date Start Time End Time us-gov-west-1 June 6, 2026 0800 AM CT 1200 PM CT

Hello,We have two sites using Shared iPads. For no apparent reason, all the iPads switched to English and the saved documents disappeared. The students then changed the language settings, and the documents reappeared.Have you ever received feedback about this type of behavior?Kind regards,

Hello all,I wanted to ask for your thoughts on how Jamf Connect stores the Google Web Application credentials on end-user devices. I’ve always been of the mindset that credentials are secrets and should be stored safely. When I go onto any end-user device, I see that any user can view the plain-text credentials by opening the config profile. The credentials in question are the OIDCClientSecret and OIDCClientID. This was the result of just following the Jamf Connect Deployment Guide, and support tells me that this is normal behaviour, but I wanted to ask what others think. I’d appreciate any feedback or guidance you could offer.  Thanks,

Hey Jamf Nation 👋🏼,Big news: we just dropped a new reward in Jamf Nation Rewards!Redeem your bytes for a complimentary full-access ticket to Jamf Nation User Conference 2026, the premier event for Apple and Jamf admins to connect, learn and level up. Only 5 tickets are available on a first come, first served basis.Here's what you need to know:📅 When: September 23–25, 2026📍 Where: Kansas City Convention Center, Kansas City, MO🎟️ What's included: One (1) full-access JNUC conference ticketHead to Jamf Nation Rewards, find the JNUC 2026 ticket reward and redeem your bytes before someone else snags your spot. Once you've redeemed, a member of our Community Team will be in touch with next steps.A few important notes before you redeem:This reward is non-transferrable and may only be used by the redeemer. Bytes are non-refundable o

In April, I had the opportunity to attend MacAD.UK in Brighton for the first time. It was the conference’s ninth year and the tenth anniversary of the very first gathering, which made it feel like a special moment to be part of. Even more importantly, it was my first professional conference presentation, made possible by the Charles S. Edge New Speaker Grant from the Mac Admins Foundation. The MacAD.UK team also played an important part in making it possible for me to speak at the conference, and I’m incredibly grateful for that support. I had applied earlier in the year and, to be honest, almost forgot that I had done it. So

We migrated from on-premise Jamf Pro to Jamf Cloud, and recently some users cannot see the apps deployed from Mac Apps, while others can. We are using a single Smart Group, but we are puzzled as to why it does not appear on other machines, even on Zero Touch built devices.Do you have any idea why this is happening? And can you advise me on where I can troubleshoot this? Thank you so much.

At my current environment, we have an admin account and LAPS turned on.  As we know, LAPS doesn’t work for unlocking FileVault. We need an admin account to unlock file vault and log into so we can troubleshoot issues. I love the idea of LAPS but it doesn’t seem to be practical in our environment. Is the best thing to do is have a local admin account with a very complicated password. Also, we have it setup to only allow one ad account to log into the computer so using an ad account isn’t going to work either. 

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

I have a script that I wish to use to remove old user accounts on Macs that have no activity after a specific date. I have ran this script manually on various Macs that we have with no issues, however when I try running it via Jamf, it gets stuck on "Installed" for the status and never executes. Even when I run a simple "echo "test"" script, this results in the same issue, so it seems that I am unable to run any scripts at all. If I go to "Result of script execution" it says "Could not load any current execution, we will try again soon...". This has been going on for maybe several months now, if anyone has any ideas on how to resolve this, it would be much appreciated. 

We have a few iMacs running Sequoia 15.5 and Jamf Connect that are going to black screens after you log in. Both local user accounts and IdP accounts are affected, but I can see the user folder is being created when we log in against our IdP, I get the account creation message but it just hangs on the black screen. Local admin account is having the same problem. I’ve tried uninstalling, restarting, and reinstalling Jamf Connect, but the problem persists. Uninstalling and logging in as a local admin user causes a beach ball to spin, but it sits there and doesn’t not progress. I’ve checked the config profiles and license and they’re all valid, and this isn’t happening fleet wide, just randomly.if I create a new user through Jamf, the user will create, but I can’t log into that account, it immediately dumps me back to the JC login window without any feedback. I can see the new user’s account by running dscl . -list /Users UniqueID but it still hangs. Resetting authchanger d

2026 Jamf Nation Live (JNL) Commercial Roadshows are right around the corner, and we’re bringing a series of free, half‑day events to cities across the U.S. These sessions are designed for Apple admins, IT leaders, and anyone looking to learn, connect, and get hands‑on with Jamf. Each JNL event includes: Practical, real‑world workflows Live demos and technical deep dives Direct access to Jamf experts Opportunities to connect with peers in your region  Upcoming 2026 JNL Dates: New York City – April 14 Atlanta – April 16 Seattle – April 21 San Jose – April 23 Chicago/Naperville – April 28 Minneapolis – May 6  

Hello everyone!On every mac using JC3 / SS+, the “Local Account Password Expires” counter never shows a correct days number, no matter what I try.-Kerberos is valid.-Signed out and back into SS+.-Changing the PW using the integrated workflow WILL change the password, but the counter never changes. The new PW will be accepted with SS+ and JC.-New-to-that-computer users who login will show a seemingly “random” date that does not match the idP Thanks for any help y’all have!PS: Sorry if this is a common fix, I searched all sorts of threads but didn’t find anything that helped.  

Hello Everyone while i am trying to registry any mac device with company portal it is saying get the app popup even device already have the latest company portal app installed, If anyone can help me to fix it  Note - it was working as expected two days back 

Just a heads up of this issue for my fellow macadmins.  This will be fixed in a future Teams update but in the meantime the there’s a fix in the article.  We’ve confirmed it works.Article here:https://www.bleepingcomputer.com/news/microsoft/microsoft-blames-undismissible-teams-location-prompts-on-macos-update/amp/

Finished Jamf 100 and 200 courses. Should I continue on to 300 and 400? Is it that much more valuable for a school environment? Thanks. 

Hi all,I've been dealing with a persistent performance issue with Jamf Trust and I'm curious whether others are in the same boat.We have around 50 Mac users in Milan using Jamf Trust (WireGuard, split tunnel) to access an internal Synology NAS via SFTP. Remote transfers consistently top out at 8–12 MB/s, which feels low given that the same setup without the tunnel reaches 20+ MB/s on the same connections and hardware.I've spent quite a bit of time investigating — the firewall, the NAS, the cipher negotiation, the tunnel overhead — and nothing on our side explains the gap. The infrastructure handles the load fine, and removing the tunnel immediately doubles the transfer speed.Support has not been helpful and hasn't been able to pinpoint a fix so far. I've also tested Network Relay, which unfortunately performed worse than WireGuard in our case.Is 10–12 MB/s a common ceiling others are seeing with Jamf Trust, or should we realistically expect more? H

The Dinner Table Tech DeskLet’s be honest, we’ve all been there - so let me paint the picture. It’s the holidays, everyone is gathered around the table, you’ve managed to dodge most of the argument inducing conversations and you’re about to take that first mouthwatering bite out of <insert your favorite festive food here>. Suddenly someone pulls out their iPhone and says one of these (or many other) nightmare inducing phrases; ”Hey can I ask you a question about iCloud real quick?” or “Hey, how many Apple IDs should I have?” These questions are par for the course when you are the designated tech person both at work and at home. I’m having a little fun here and I know that we all do our best to help out that relative to the best of our ability and get them not only back up and running ASAP but hopefully also feeling good about their tech. It’s likely the reason we keep getting asked for help, because we are good at it (and be honest, you enjoy it at