One of our agents locked a macbook via the remote lock command from Jamf Pro and did not record the pin.  One of our other agents then deleted the macbook out of jamf before releasing the lock. Now we have a bricked macbook that we have no way of getting into since we dont have reord of what the pin could be.   We are back and forth between Jamf support and Apple support to get this resolved.  Jamf says they cant do anything and Apple is saying it's on Jamf to remove the lock.   Any help here would be appreciated. 

Hello, Since MUT no longer works with a JSS instance using SSO authentication, do you know of any alternatives, please? I admit I'm a bit uncomfortable with API scripts. I need to create a static group with more than 500 devices 😁thank you

We currently use Okta SSO with Jamf Pro. Filevault is turned on for all our devices, which requires the initial local login. Then the next login is network credentials with SSO. Meaning, our users have to login twice. This works well, however we recently purchased Okta Device Access with the understanding that we could eliminate all logins for a passwordless user experience. I've been researching the ODA setup using Okta as a SCEP auth. I've read this would require all devices to be re-enrolled?  Has anyone gotten this to work with Jamf Pro to be passwordless? I've love to hear your experiences. Thanks!

Work within a school and looking to upskill the team on Jamf, we receive education pricing for Pro licences but can’t see anything about training. Is education pricing available or are we out of luck on that front?  

Hey there,    we are currently using Jamf School with approximately 4000 devices. After using shared iPads exclusively we implemented a 1 to 1 configuration in a couple of locations.  Everything worked well until the devices needed to be transfered to a new user.  Previously i assigned the profiles beforehand and users just needed to login with their Jamf credentials.  The iPad updated the name via information given by their jamf Account (%firstname,%lastname) and so on.    But i cannot get that login window on a previously used iPad for the life of me.  Even un- and reenrolling the device did not work.    Is there no other way of assinging a user but to use placeholders or manually assigning a user?    Thanks for your input! 

Hi there, I am very new to Jamf Pro. My school client needs to deploy PaperCut Print Client and Print Queues to the macOS devices in mass.  I don't want to use the PaperCut print deploy to deploy the print queues. May I know the steps or ways to get it done?

Hello everyone, Could you please suggest where I need to copy the files to make an email signature template available in Outlook for all Mac devices? Or is there another way to achieve this?

Hi all, I’m looking for a way to block or skip the “Update Mac Automatically” screen that appears during the Setup Assistant (screenshot attached). Is there a way to suppress or bypass this screen using a configuration profile? Any insight or guidance would be much appreciated! Thanks!

We are currently experiencing issues with our Jamf environment.Last week, we had a session with our Jamf supplier where we reviewed our setup and made some minor adjustments. However, since then, we’ve encountered problems specifically with Configuration Profiles. When scoping a computer, the status remains stuck on “Pending”. Occasionally the scope appears to work, but in most cases, it gets stuck.   Everything worked correctly before the session. We've verified that all Push Certificates are renewed and not expired. Could something have been changed during that session that would affect MDM or profile deployment?

Hello Everyone Looking for some help/advice.... So we have multiple SITES set up in out JAMF Pro Instance, but right now every device is using the same pre-stage enrollment and then we have to go in and move the devices from the main jamf pro to the proper site manually. Is there a better way to do this? I have seen some folks say that you can do it in ASM with a different token for each site but you need to change the devices at that level before they get enrolled. I am thinking this is the best way, wondering if anyone has experience with this?

Hi, Is there an updated way to install Avast via JAMF? I have search previous post but it seems its a long time ago and its not working anymore as per the last replies. Advance thanks.

Ever wondered what happens with your compliance benchmarks when mSCP gets a new version? If the change has any impact on the rules, once validated by Jamf quality processes, you will see a label Update available next to your benchmark. You then go into the benchmark details, open the rules, see what changed and simply apply the changes as you were making manual changes. Check the Release notes for more details and let us know how it works for you!

Is there a way to trigger an inventory update via an iPhone or iPad? Like on Mac where I can give that option in the SelfService.

I'm deploying Microsoft Defender web filter to Jamf managed Macs. It's working as expected when the computer is not connected to the corporate network but when in the office I'm having issues with traffic being blocked. I assume a firewall rule is required to allow the Defender Web Filter traffic out and to bypass the requirement to use the Corp Proxy. Does anyone know where Defender Web Filter sends traffic to? Is it just a case of allowing that traffic out on the firewall for these devices?

Anyone else already installed the developer beta? Jamf lists macOS 16 in inventory after an inventory update, but system report shows macOS 26.   I'm guessing this is something with how Jamf is pulling the version from the machine?   Anyone else seeing this?  

Hey Everyone, the announcements have happened, and now we admins get to do it all again! Hooray! I've modified my regex statement to take out the models that were lost to us this year to the latest macOS version. Thankfully the OS axe was kind to us this year and only cut off the MacBook Air 2018/19 models. Also per a previous suggestion (thank you @grahamrpugh) I added in the VirtualMac line as we can see those pop up in our environments depending on current controls, and if anything it'd be good to get reports on them. Having tested this against a known list of current (6/13/24) Model Identifiers, I'm confident that this regex should be able to match everything that is supported by MacOS Sequoia:   (^Mac1[3-9],\\b[0-9]{1,2}\\b|MacBook\\d{2}|MacBookAir(9|\\d{2}),[1-9]|Macmini[8-9],\\b[0-9]{1,2}\\b|MacPro[7-9],\\b[0-9]{1,2}\\b|iMacPro[1-9],\\b[0-9]{1,2}\\b|iMac(19|2[0-9]),\\d|MacBookPro(1[5-9]|2[0-9]),\\b[0-9]{1,2}\\b|VirtualMac)   You can create a smart group using this in o

Im looking for a way to use the API to bulk delete computers by serial number.    Im not seeing a way in the API to do this any more other than with device ID. So does any one know of a way I can find the device ID based on the serial number ? I know this gets the device deleted if I can query the Device ID.    curl -X 'DELETE' "$jamfProURL/api/v1/computers-inventory/${jamfProID}" -H 'accept: application/json' -H "Authorization: Bearer ${token}"  

To install Creative Cloud at my company, end users are directed to the Adobe Creative Cloud website (https://www.adobe.com/creativecloud/desktop-app.html). Every two weeks I get a report from our Security team listing device vulnerabilities. There's frequently a fair number of devices that need one or more Creative Cloud apps updated. I started emailing users individually, reminding them to update their Creative Cloud apps. Wondering if there's a better way, because emailing users and following up when they don't respond is too manual and too time-consuming. Curious how other admins approach this.

We are in a process of migration, where we need to migrate Network account with local account. Although we allow this setting in Jamf Login profile but still is not giving an option to connect local account with network account. With same profile we tested this multiple times and with multiple machines. Jamf Connect and Login version 2.45.0 Operating system Version: 15.5.0  

Hello! My JAMF on prem server was set up before I arrived. We need to get packages to users who are working remotely, and able to receive them without being on our VPN. Is it possible to use a remote, cloud based, package distribution alongside, or mirrored to our on prem distribution point? I want it to be the fallback if on prem is not available. So far I haven't gotten this to work. Thank you !

Back in 2007, Jamf customers started coming together – in email. It wasn’t the most advanced way to gather, but it worked. The purpose was to share knowledge. And for a few years, words of wisdom flowed as the list grew. Jamf Nation was forming and quickly outgrew its simplistic home. That's when Jamf’s founder, Zach Halmstad, shared a bigger vision. Jamf Nation would move to an online platform. In its new format it would:    Facilitate customer-to-customer communication  Facilitate customer-to-Jamf communication  Facilitate Jamf-to-customer communication    Fast forward nearly 15 years, and these are still foundational elements of Community at Jamf. But you deserve more than our current platform can offer. That’s why we’re excited to shift Jamf Nation from its current home to a new community offering this summer. Get ready for an elevated look, feel and overall experience. Be ready to:    Find what you need more easily  Experience

We have a verizon wireless business account and with it about 35 iphones. We are going over our data allowance every month and cannot increase the data limits because of the amount of lines we have under our current plan. We would like to limit on certain iphones the amount of data usage allowed. Can that be done?

The application name for Adobe Illustrator remains the same regardless of the version installed, which makes it challenging to identify specific versions based on the file path alone. I need to create an Extension Attribute (EA) that can detect different installation paths for Adobe Illustrator, such as: /Applications/Adobe Illustrator 2024/Adobe Illustrator.app /Applications/Adobe Illustrator 2025/Adobe Illustrator.app This will allow me to create a smart computer group in Jamf Pro and effectively scope updates for each version. I’ve tried the following script, but it doesn’t seem to be working as expected. Any advice on how to get this working would be greatly appreciated!      

Instead of seeing iOS 19 and macOS 16 at WWDC this year on June 9, Apple is planning for iOS 26 and macOS 26. It's a similar name convention for automakers. Like the Toyota Camry 2026.   Other Apple Operating Systems will follow suit.  iOS 26iPadOS 26macOS 26watchOS 26tvOS 26visionOS 26 Thoughts? https://www.macrumors.com/2025/05/29/ios-26-again-rumored/

We are currently moving Microsoft 365 Tenants as part of a merger, which means one half of the new business needs the Microsoft 365 Apps to move to the new tenant. These devices are AD Joined but not Azure AD Joined. Has anyone come across a way to do this without resorting to deleting key chains, and asking users to reconfigure the Apps. Thanks