Hey everyone,I've been working on a side project for a while and figured I'd share it here in case it helps someone else.At work I kept getting techs asking how to change the same stuff on iPads: groups, asset tags, assigned user, clear passcode, lost mode, wipe, etc. In Jamf that's all spread out over a bunch of different tabs and screens, and it can get overwhelming for some techs, especially the newer ones. So I built a simple web app that puts it all on one page.What techs can do from it:Search an iPad and see the important info in one place Change department, building/room, assigned user and asset tag Add or remove the iPad from static groups (you can limit which groups they see, like only ones that start with "Tech-") Restart, update inventory, clear passcode Enable/disable Lost Mode Wipe the device, either a full wipe or Wipe with Return to Service. They have to retype the serial to confirm, so nobody wipes the wrong one by accidentHow it works:Techs sign in with their own Jamf

Hello,I have deployed a package through Jamf and made it available in Self Service. However, the installation fails for users running macOS Monterey 12.The logs show the following error :Verifying DMG...Verifying package integrity...Installation failed. The package could not be verified.The package installs successfully on other macOS versions, but fails specifically on macOS Monterey 12. I have already tried re-uploading the package to Jamf, but the issue still occurs.Could you please advise on what might be causing this issue and how we can resolve it ?Thank you.

I wanted to provide feedback and a suggestion for something which could be improved, but I can't find any way to do it. The built-in AI tells me to come here and go to a section that doesn't seem to exist, which is extremely helpful. LOLAnyone know?For the record it is to allow reordering of smart group criteria as currently if you want to make a change such as adding a new OR rule at the top of the smart group you have to delete everything below it first - so suggestion is to allow drag to reorder which seems so stupidly simple I am amazed they have never done it!

Hello everyone! I didn’t want to open a new topic and was looking for the similar one, but could not find it. Before I open a support ticket, I would like to hear from the community, if it’s a know issue… or it’s just my MDM-Fleet member, who faced this issue.‘Management Commands’ disappeared from one of my MacBook’s Inventory Record (Management Tab). I was not able to get it back. Tried to redeploy the Jamf Management Framework for enrolled device (*.jamfcloud.com/api interface), but it didn’t help. The laptop seems to be synchronized with Jamf, but the problem is that if I want to wipe this exact laptop, I don’t have Management Commands section, where I click ‘Wipe Computer’ command. Does anyone of you face this issue before?By the way, this laptop is in another country, so the only possibility to wipe it, is to physically get it in my hands.Thanks a lot for your attention 

The commands will stay stuck in Pending and the device would be under the university network. Once I connect the device to a hotspot, the commands will go through. I have talked with the networking team and they have said that everything should be allowed under the university’s network when it comes to APNs, but I feel like there is something missing. I’m unsure if there is a profile or certificate I have to do for our university’s wi-fi, or what are the list of questions I can ask our networking team to officially confirm that push notifications are going through for iOS devices. For MacOS devices under the university wi-fi, management commands do go through at least, so I feel like this is a iOS specific issue that I need to somehow prove to the networking team to change something even if they claim they did.

Are you familiar with or have you used MacPAR deLuxe?For a long time, it was a go-to tool for creating and using PAR2 files, which can repair corrupted files using parity data. PAR2 files are primarily used on Usenet servers (newsgroups).The problem is that the application was developed solely for Intel-based Macs and appears to have been abandoned since 2018. Furthermore, the announced removal of Rosetta 2 in a future version of macOS effectively rules out its use on Apple Silicon Macs.PAR2Manager can help you solve this problem. Developed natively for Apple Silicon Macs (while remaining compatible with Intel Macs), this open-source application allows you to create, verify, and repair PAR2 file sets.GitHub : https://github.com/chrisbasse/PAR2Manager

Wondering how others are handling the transition from PPPC Profiles to DDM Blueprints.  For this example I’ll use Zoom. The PPPC that’s pushed out has Accessibility: Allow and ScreenCapture: Allow standard users to allow access.For Blueprints under App Settings, then App privacy the permission defaults are configured for Accessibility: Allow, Camera permission: Allow, Microphone permission: Allow.  There is no option for ScreenCapture in Blueprints yet. So is the recommended action to push the Blueprint prior to users upgrading to MacOS 27 (right now all of our devices are on 26 and we’re just testing 27).  Then also to keep the PPPC in place for the ScreenCapture feature, and if it’s being kept in place are you stripping out the Accessibility setting in the PPPC once all users are upgraded to MacOS 27 and the Blueprint is successfully pushed to all devices?

Anyone have experience with BYOD iPhones and iPads enrolled in Jamf via Profile-based Device Enrollment method? Can you issue a wipe command to factory reset them? This Apple support page indicates yes, you can, but I’m hearing otherwise from some people positing that feature’s not available on Managed devices, only Supervised devices...https://support.apple.com/en-lb/guide/deployment/dep08f54fcf6/web  

Hi Nation,Product Office Hours #9 - AI Governance: JNUC recap & Deploying BlueprintsNext session: Thursday, 15th Oct - 9 am CDT / 3 pm BST / 4 pm CEST Speakers: Josh Stein, VP, Product Strategy and Matt Benyo, Director, Software Engineering Register here: https://jamf.it/ProductOfficeHours 🧵 Got a question? Drop it in the comments below ahead of time if you want it on our radar, though you don't have to. We'll be taking questions live on the call! The Q&A transcript will be added to this thread post event.See you there!

 Hello,One Apple TV can't install a device-assigned Disney+ app. The other four devices in the same group installed it fine.DETAILS- Jamf instance: retailinnovations.jamfcloud.com- Device: "Batcave 3", Apple TV 4K (3rd gen), serial K2Q7CXQHWH, tvOS 27.0, mobile device ID 324- App: Disney+ (com.disney.disneyplus), Jamf mobile device app ID 86 ("Disney+ - Batcave"), Site "Batcave"- Volume location: "BATCAVE VPP". The Apple Business organizational unit is "BATCAVE", with 5 licenses purchased.- Seat count: both Apple Business and Jamf show 5 of 5 in use, 0 available.- Error: INSTALL_APPLICATION fails with ManagedDevice.error 2605, "No license was found for app 'com.disney.disneyplus'".- Other apps from the same location (DirecTV, Netflix, Paramount+) installed on this device without problems.WHAT I'VE TRIED- Cancelled the failed command and sent Update Inventory, then let Jamf re-send the install. This failed at least four times, most recently at 23:23 UTC on 2026-10-18.- Removed the group

Hello Jamf Nation!We’ve released Jamf Pro 11.34.0 beta. This release includes OIDC-based single sign-on for end users, action logging for destructive device actions and more!  For full details, check out the release notes after enrollment.How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Click “Join Community” to join the beta forum once enrolled. If you encounter an error on Jamf Nation joining the beta forum, please log into Jamf Nation and then click “Join Community” again. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks, Blueprints, and App Switcher. Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who

 I had a user get this notification after a reboot (required after an update). Any idea if this is coming from macOS or Jamf Protect? This managed MacBook already had Jamf installed a while ago so wondering why it popped up again. Also, the user was concerned Jamf is doing all this on their MacBook behind the scenes. Thanks. 

Heads up to my fellow Jamf community. We've been seeing iPadOS 15.8.4 iPads when reprovisioned can't be enrolled to Jamf School.  This may affect Jamf Pro too.  The exact error is "Failed to retrieve configuration".  I reached out to Jamf support and they said they have been getting reports of this from others and that this has been observed across different MDM providers.  Jamf reached out to Apple regarding this issue and this is exactly what they told me: Apple did get back to us just a bit ago, and they have identified the issue (they did not elaborate on what the issue was). The release is not ready yet though and at this time they couldn't give me an ETA on when that would release. For now I created an internal Jamf Product Issue so we can track customers and I have attached this case to that ticket (PI136109). Hopefully an update that fixes this issue will come out soon.  Jamf did say that they could reproduce my issue but had mixed results as one te

While this may be old news, I have a conversion utility app available in my GitHub.  I’ve gotten really good responses with great results from it.  I’m working on getting another version of it out to support profile conversions, a more user friendly “GUI” of the json that’s generated, and multiple selectable groups.It operates solely on the platform API and leverages the jamf-cli binary to do the heavy lifting.Give it a gander if you want.  Be sure to test test test!https://github.com/jawheelr/Blueprint-Conversion-Utility

I am trying to renew my licenses but I am unable to because they expired more than two months ago. How can I renew them?

Hey Jamf Nation!We’ve released Jamf Pro 11.31.0 beta. This release includes new Mobile Device Smart Group and Advanced Search Criteria, API changes and more, check out the release notes after enrollment.How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Click “Join Community” to join the beta forum once enrolled. If you encounter an error on Jamf Nation joining the beta forum, please log into Jamf Nation and then click “Join Community” again. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks, Blueprints, and App Switcher. Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program! 

I work for a school county and all our iPads have some apps in single app mode and they are not auto-locking and the battery is draining fast.

We are currently deploying some AI governance policies and have found that the policies I’ve written for Claude desktop do not translate to the claude.ai browser site. Working with my team to get Jamf Extender deployed. First image is a successful block in the Claude Desktop app, second is in the browser.  I expected some parity between the desktop app and the browser site, but I don’t see an option to configure the site specifically in the AI policies portal. Is there something I’m missing? Would Jamf Extender help with this? 

Hi.We’re using Jamf School as MDM (so please do not tell me all the wonderful things available in Pro 😅 ).Setting up MacBook Neo’s as new student devices. We want to block applications as: FaceTime, iMessage, Phone, iPhone mirroring during enrollment. As of today the only “half ass” solution is the “Safelist and Blocklist” payload, but this is deprecated :  Are there any other good solutions for getting this to work?

Hi everyone,I recently built a small native macOS utility called App Signing Inspector to make it easier to inspect applications and create application-execution declarations for the new macOS 27 Declarative Device Management controls.I started working on it while testing the macOS 27 beta because gathering the correct signing information and manually building declaration JSON was becoming repetitive and easy to get wrong.What it doesThe Inspector lets you select a macOS .app bundle and displays information such as:Bundle identifier Application version and build Executable path Signing ID Team ID Signing authorities Complete designated requirement Hardened runtime status Gatekeeper assessment Locally reported notarization status Apple Silicon, Intel, or Universal architecture classificationThe separate Policy Builder lets you combine multiple applications and rules into a complete com.apple.configuration.app.settings declaration.It currently supports:Allow and deny rules Signing ID and

We have been using Jamf Setup with Entra SSO for a year now. Since the begining one of the first steps required is to log into Microsoft authenticator and register the device to the tenant using an account with cloud device administrator access. At JNUC I asked one of the sessions and they thought that requirement has been removed. I look at the documentation but I am not seeing any configuration changes but any device we setup still requires that step. Can anyone point to what I need to change to no longer require that registration step?

If you have ever answered a question in Jamf Nation at the end of a long workday, helped a coworker finally get a workflow running, shared a script with a peer, or shown up to a user group meeting with tips or questions, this one's for you. Jamf Heroes is designed for people who are passionate about helping the broader Mac Admin community thrive with Apple. It's a space to share, learn, grow, collaborate, and give back to the Apple admin world. Three community members share their perspectives on the benefits of the Jamf Heroes program and how it has helped them find success in their careers.   Hear from Heroes Chris Hafner, a longtime Hero, stays in the program year after year for a variety of reasons. While they have evolved over time, the crux of it is the human connection and the solid relationships he has built. "It's the people and the positivity! It's a collection of people, and Jamfs, who have really come to support each other in a very positive discussion group to move not only

Today we are releasing Jamf Pro 11.33; highlights include: Per-Device Declaration StatusThis release adds per-device declaration status for compatible Jamf Cloud environments, so you can view the status of every declaration deployed to a device. Use per-device status to verify and troubleshoot blueprint deployments from a single device record.Note: This feature has also been enabled in Jamf Pro 11.32.0. For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Pro. Cloud Upgrade ScheduleYour Jamf Pro server, including any free sandbox environments, will be updated based on your hosted data region below. Review this guide if you need assistance identifying the Hosted Data Region of your Jamf Cloud instance.To upgrade manually: Log in to Jamf Account, click View details on the Jamf Pro tile,

Take a quick look at new declarative configurations in blueprints, support for sites in blueprints, and support for macOS 27 Golden Gate in compliance benchmarks.Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements.Thank you for your continued support and feedback!

So It seems Apple has removed some MDM control of macOS updates in macOS 27 and they are only allowing using DDM commands to do this.Wanting to know if the Defer Major macOS updates MDM profile setting will work in macOS 27 or is this gone too? (I would assume that deferring upgrading to 27 will still work since older versions of the OS still support MDM update control. This is more about the future) I see with Jamf 11.29 that the download & schedule install is now DDM and works on prem but what we are really looking for is a way to continue Defer Major macOS updates for 90 days. We are not in Jamf cloud and not really looking to move.