Hi First post. We have a reading app the the children have found a back door to getting to google. Is it possible to block redirects from an app to google? Safari is not allowed but certain apps open in safari which is fine.   Hope this makes sense

I’m doing some testing with the SelfService+ app. For example, where can I configure the items highlighted in green? (See example screenshot.) Or are these settings not available yet — am I too early? Also at Account Management are there more options to show?   thanks

Is there any way to auto assign, or default template configure apps using a specific location for app purchases?   Let me give you the story and maybe you have a better approach:Department has a set of shared devices. They would like a way of managing and deploying apps to themselves automatically and they are not technical people.   Here is the approach that I was thinking. Manager logs into ABM, purchases required app for their location. That location vpp code has a template. The template sets the vpp distribution, scope, and install configuration. Is this possible or would I have to set this up myself as an automation on my side with api's?

Another script that grew out of necessity.  Apparently we don't have a global DL for all of the Mac users, so I had to extract all the emails from my JAMF server.  I know that there are utlities to export email addresses, but they export in XML format...I wanted something to export into the VCF file so it can be imported into Contacts, Outlook, etc. Script repo:  https://github.com/ScottEKendall/JAMF-Pro-Scripts/tree/main/BackupJAMFEmailAddress

Hello !I just noticed that for the iPads we recently bought that at the remote management step, I have the "Enroll this iPad" as usually but on some iPads, I have one more button named "Remove iPad from Organization". What is it about ?If it allows the iPad to be removed from Jamf and / or Apple Business Manager, I don't want it. I search about it but didn't find any usefull information. I would like to try to tap on it but I don't want to do something irreversible.Could someone give me informations about this and how to make this button disappear like on other iPads I have ?

Was having some trouble with our instance. Turns out it was multifaceted-part my org, and part a Jamf thing (apparently). Upgrade to 11.17 seems to have rectified things on the Jamf side.To that end I was trying to figure out how to script DDM sync, and seem to have gotten it sorted: #!/bin/bash JSS_URL="https://[your_jss_urll_here]"API_USER=""API_PASS="" log() {echo "[$(date '+%Y-%m-%d %H:%M:%S')] $1" >&2} fail_exit() {log "❌ ERROR: $1"exit 1} get_token() {log "🔐 Requesting Jamf Pro API token..."auth_response=$(curl --silent --request POST \\--url "$JSS_URL/api/v1/auth/token" \\--user "$API_USER:$API_PASS") token=$(echo "$auth_response" | jq -r '.token // empty')if [[ -z "$token" ]]; thenecho "$auth_response" > /tmp/jamf_token_error.jsonfail_exit "Unable to extract token. Response saved to /tmp/jamf_token_error.json"fiecho "$token"} get_all_ids() {local token="$1"local page=0local page_size=100local all_ids=() while true; dolog "📦 Fetching computer ID

Hello everyone, I am reaching out to ask if others have encountered the following issue with managed iPads in a Jamf School environment: Our student devices switch between a school profile during lesson hours and a standard profile outside of those hours (private usage). After the profile reverts from the school configuration back to the standard one, we have observed that either the Screen Time settings (such as app limits and downtime) are reset or the Home Screen layout is restored to default—sometimes both. Notably, these issues do not always occur together; on some devices only one of the two problems appears, while on others both are present. This situation is causing considerable inconvenience for our users and undermines a reliable device experience. I would like to ask: Has anyone else experienced similar issues? Are there recommended configurations or workarounds to prevent Screen Time settings and Home Screen layouts from being reset when switching profiles? Is there a

Hi,   I'm use the Patch management to manage updates for Firefox ESR. The current Patch Management definition is handling both 115.x & 128.x. I am using the report to create a smart group to handle the updates via a Installomator policy to install Firefox ESR which is the 128.x version. The Patch Management report is reporting 115.x as the latest version ignoring the 128.x as part of the definition. Is there a way to modify the report so that people can choose the version they are looking for? I know that if 128.x updates next it will be the latest version as the definition goes by the release date of either 115.x or 128.x. This is causing annoyances in my user base as update is running daily in some cases. Is there anything that can be done? Thanks,

Yesterday, we mistakenly removed a number of devices from one of our device groups in Jamf. As a result, profiles and managed apps were removed from those devices. After re-adding the affected devices to the original group, the profiles were successfully reapplied. However, we've noticed an issue with some apps: in Jamf, several apps now display the status message "Removal Deferred. Will be removed on 17-06-2025."We've checked multiple student iPads and confirmed that this message does not appear to be associated with any specific app—it seems to vary across devices. We're currently unsure why this removal status is being applied or whether the apps in question are at risk of being uninstalled on the stated date.We also found that if we pressed 'remove' on an app that has this message it either puts it back onto the Jamf Student App or back onto their home screen if they had it installed. However doing this for all the student devices affected would be very time consuming! I have a

We've had a request to deploy Streambox Media Player to our video editors so they can use it on their M1 Max MacBook Pro's:https://apps.apple.com/us/app/streambox-media-player/id1329435619Despite this App saying it's for tvOS, iOS & macOS, when I purchase it through Apple Business Manager, it goes into the Devices App Store in Jamf Pro, meaning I can't deploy it to the Macs. I've tried scoping it to the User and logging into Self Service but still doesn't show up on their Mac Self Service App Store.Does anyone know how to scope Apps designed for iOS but work on macOS (Apple Silicon) to Macs in Jamf Pro?

Hello everyone,Is there a Terminal command to retrieve the email address used during MDM enrollment ?Context: I need it to automate the GLPI agent configuration, where the entity assignment is based on the user’s email.

I have been trying to setup a new Mac Studio and i am getting a Login but will not let me continue i have tried different user and password combinations nothing working i have even tried deleting from Jamf Cloud and readding to cloud nothing changed.Any ideas would be good.  

Hello, I would like to know if you know how to disable Web Filtering on Forticlient VPN, please? Indeed, we use Forticlient VPN in my company. We need to install a configuration profile to set up the Filter Socket; otherwise, without it, the user gets a pop-up asking to install the Network Content Filter. The problem is that we have just implemented Jamf Security Cloud, and we have deployed a Jamf Security Cloud profile on the computers. Most of the devices don't have the Secure DNS of JSC activated, and according to Jamf support, this is because Macs can only handle one filter at a time, and other filters need to be removed or disabled. But as I mentioned earlier, if we remove the Filter Socket from Forticlient, the pop-up appears every time Forticlient is used. Otherwise, if we cannot find a solution, we will have to stop using Jamf Security Cloud, which I find unfortunate. Thank you in advance, and have a very good day.

Hi all, I am trying to work on a solution to setup a splash screen at the login for our fleet. The idea is when users log onto macs, a splash screen pop up with a user agreement message that by "logging into the computer you abite with terms and conditions etc". I created a config profile with a Login Windows Payload and in the banner I copied the user agreement message, but since the message is too long you cant see anything unless you scroll down. I also created a little app using Script Editor and packaged it, then created a config profile to add it to Login Items. but I need a better solution. I am hoping if someone has done it.   Thank you

I'm trialling PSSO at the moment, appears to work well, and the workflows are fairly good in terms of steps to follow post enrolment.  There is a prompt after Intune registration to use passkeys and passwords from Company Portal - a toggle on requiring manual intervention, does anyone know if this is configurable with plist/other Jamf config?Also, we're only using PSSO to improve auth to Microsoft products, I'm seeing wholly conflicting statements around extending that to macOS logon itself - has anyone done anything with this, i.e. override and control OS sign in/password sync, etc.

At the moment, site admins are not able to create or edit any configuration profiles with the SCEP payload, when an existing one is selected or created by a Site Admin, the page just loads the spinning loading wheel and finally errors out after some minutes. Is there a permissions setting that needs to be selected for this to work for Site Admins? Full admins work without issue, thanks.

I'm sure there is something silly I'm missing, but I was doing a test of exporting our list of devices from our ACE agreement and then using that to populate the mut template to update jamf.  It seems to grab teh serial number and Coverage number and populates it, but it leaves the Coverage End Date (aka Warranty Expiration) does not populate.  It shows properly in the preview of what will change, but it doesn't update field in jamf.  I checked the verbose logs and it doesn't show any failures.  I did see in the field that it was putting a specific time into the csv field once I expanded the field to see it.  I've tried with and without the specific time.      

Jamf Nation is about to enter a bold new chapter. We’re excited to launch a redesigned platform this summer to better support connections and help community members more easily succeed with Apple and Jamf. The upgraded community space will offer a refreshed look, easier navigation and more ways to interact – with Jamf and other Jamf Nation members.   Stay tuned for the official launch date, and get ready to enjoy a richer, more engaging Jamf Nation experience. Learn more here.

Back at it again with a (potentially) useful script.   This script is designed to extract all of the system scripts from your JAMF server. Why do you want to do this? Make a backup of your scripts in case your existing backup files is missing/corrupted (or you don't have one!) You inhereited a JAMF server from another person, and this can do a "brain dump" so you can review the scripts. Why not? It is another example of what you can do with API scripts.. Source: https://github.com/ScottEKendall/JAMF-Pro-Scripts/tree/main/BackupJAMFScripts   Welcome screen Process screen Errors screen if problems found:  

As many of you have requested, we have added the ability to change the benchmark mode (enforcement type) between Monitor only and Monitor and enforce, and also change the scope by selecting a different smart group. Editing of these settings works the same as managing benchmark rules - just open the created benchmark, make required changes, and click Deploy. Refer to the documentation if needed: https://learn.jamf.com/en-US/bundle/jamf-compliance-benchmarks-configuration-guide/page/Benchmark_Management.html Since compliance benchmarks is delivered into Jamf Pro as micro frontend, the new capability is available right away in all supported Jamf Pro instances!Looking forward to hear your feedback on the updates, and of course any general feedback on what is the next addition you would like to see.

Hi all,At System Settings -> Display -> Advanced -> Energy  you can this turn off or on  "Prevent automatic sleeping when the display" Any idea of this is possible to control this with Jamf? thanks  

As we deployed new AppleTVs we got the old AppleTVs back, some were not MDM enrolled (teacher donated). Now we are tasked with enrolling those OLD devices in our MDM. Mostly we were successfull in adding the devices to our MDM (via USB-C), but, we have a hard time with some Wi-Fi ONLY AppleTVs that were found in the mix. The apple instructions for enrolling the Wi-Fi only devices with Configurator 2 don't make any sence: Connect Apple TV HD using Wi-Fi   Apples instructions require the AppleTV to be reset/erased and left at the "Hello" screen, then, Configurator needs to PAIR to the device in order to process the enrollment, but, there is no Wi-Fi setup on the device...??? ... Anyone has any bits of advice? is MDM enrollment not possible on Wi-Fi only Apple TVs?

We have a handful of applications that are required to be on our laptops at all times. Currently, we have smart groups set with criteria for the app not being installed and a policy scoped to that group. The downside is it only updates when an automatic inventory update is done every day. Has anyone done something similar that runs more frequently?

saw this 3 times this week, pattern looks like a change in password, then MS authenticator shoots this up a few days later. using Jamf connect and entra integration,  reset MS office to complete deletion, no change, tried unenrolling, and re enrolling, cant do that at all... profile fails to install.    anyone else?    

I'm working with my mate AI, to write a clever script, to keep my kids in line from using VPN in the school, which will present them with any annoying re-petative pop up on their screen, when ever they engage the use of a VPN. it runs for 14 minutes on loop, running a 2 minute intervals check on if the local ip of the client, is within one of our networks subnets, and then checks for the reported current public IP from amazon, and if it doesn't come from one of our own, if it flags as being within one of our subnets and not with our public IP, it will proceed to prompt the end user, to turn off VPN, repetitiously, checking in every 3 minutes to see if the vpn has been turned off.basically they are using VPN to by pass, and play games in class, the constant prompt will ongoingly interrupt their games.its run every 14 minutes, so that next policy run, it will start over again. my issue is, I want it to run separately to the remaining polices, I want it to run the script seperate to