Now that here are all new Keynote, Pages, and Numbers app that have Premium features locked behind a subscription model, I’m curious how everyone is handling that. We’ve always automatically installed those apps on ever Mac, and Keynote is very heavily used within our organization.If we do nothing, users are locked into version 14.5 forever and never get any new features or bug fixes. We could optionally deploy both 14.5 AND 15.1, but it’s gross having two versions of each app installed. Or, we can rip the bandaid off and remove the old version and deploy the new version to everyone.Tradeoffs everywhere! Interested in learning what others are doing or considering doing.

Looking for an independent macOS admin for paid diagnostic work.We have multiple Apple Silicon Macs on macOS Tahoe.Adobe InDesign 2025 launches but never initializes its user support folder:~/Library/Application Support/Adobe/InDesign/24.0Scripts panel is disabled.Reinstalls and permissions have been exhausted.Issue predates InDesign 2026.Suspect macOS TCC or user-profile related issue.Initial focus is diagnosing and fixing this problem.If it’s a good fit, there is likely other macOS / systems work we could use help with.Remote session is fine. 

I'm needing to delete a ton of Smart Device Groups but they all have apps associated to them.  How can I delete these groups without having to go into each one and remove the apps first.  I have 80+ groups and do not want to do each one manually.

Good day all,I’m deploying the google chrome extensions using the below.Installing the forced extensions work (regardless if there is a user logged in to chrome or not)However, one of my test computers doesnt have the user logged in to chrome and that blocks all extensions, even the ones in the allow list.And when Im testing against my every drivers that Im logged in, I have the opposite effects. Im allow to install all extensions. and none of them are getting blocked.I different set of eyes would be appreciated. I wish it was like some of the other post where people wait and then it works, but for me it hasnt been the case.  

I had a use case that it would have been extremely nice to be able to use an advanced search or smart group to be able to gather data about computers in specific sites. However sites aren't meant to be scope-able per Jamf, and that really made my life difficult. Specifically I was looking for unmanaged computers in the "none" or "Full Jamf Pro" site, and there is no way to make a search for this. I did some searching and saw several posts of folks who wanted Jamf to make sites a useable criteria, but saw that Jamf specifically said it was not planned (https://www.jamf.com/jamf-nation/feature-requests/1365/smart-computer-groups-based-on-site). I was able to create a workaround for this and thought I'd share. I first made a custom extension attribute named "Site" with a string data type and a text field for the input type. Then I was able

Hello, I'm new here, I'm a student I got a school ipad and I was able to download absolutely any app I want. I signed in to an apple account then I use spotlight to find an app : like MailChimp or candy crush and when the result from the app store is showed I can press the get button that will install the app. App store is restricted on the device but using spotlight can bypass this. Maybe I'm not in the right place but just wanted to report this bug. I'm on iPados 26.1

We are starting to use Figma and their installer is a stub installer which is a pain. They give some very base instructions for deployment. We want to use architecture specific builds and there is a "script" for accessing those. My scripting is very basic and I need a little help with getting the resent version acquired from one command into the argument for the download command. I can run them individually without issue manually replacing the latest_version with the "latest_version"here are the commands provided.latest_version=$(curl -fsSL "https://desktop.figma.com/mac/version.txt")intel_url="https://desktop.figma.com/mac/Figma-${latest_version}.zip"apple_silicon_url="https://desktop.figma.com/mac-arm/Figma-${la

Hello everyone,We currently have Macs that are joined to Active Directory and managed via Jamf Pro. We’ve recently noticed that whenever a piece of software or an application is outdated and an update is initiated, the system prompts for an iCloud (Apple ID) login. This was not the case previously.We have already tried restricting the Apple ID preference pane and iCloud via Jamf, but the issue still persists.Has anyone else experienced this, or does anyone have insight into what might be causing it and how it can be resolved?Any advice or suggestions would be greatly appreciated.

Duplicated title is not allowed

Issue - Adobe Reader, when installed using the default “vanilla” method e.g., via Adobe’s public download, exposes users to In-app advertisements and upgrade prompts promoting Adobe Acrobat Pro features setting the expectation that all users are entitled to Acrobat Pro licenses. I created a plist file, but it isn’t working. Can anyone help me sort this out? I’d really appreciate it. Thanks in advance!

Hello everyone We are trying to deploy FortiClient VPN only from this link https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/76cde386-1f8c-11ef-8c42-fa163e15d75b/FortiClient_7.4_Jamf_Deployment_Guide.pdfthe Application installed perfectly but we have issue with configuration of the app1- To grant FortiTray permissions to load and grant network access.2- To grant full disk access to load the following FortiClient processesI have made the same as what they mentioned in the pdf but the user get popup to allow them.what I want is:1- These configuration only install if they install FortiClient.2- Not popup any thing to the user when install FortiClient to allow for permission3- If someone can

Hi,Some students iPads updated to iPad OS 26.2 can’t access to safari and then we tried to install chrome and get the same problem. Can’t reinstall only the app and if we try to erase the iPad and reinstalling get the same problem :(Thanks 

How to cleanly and properly uninstall Adobe Creative Cloud apps has been an ongoing Mac admin challenge for years. I recently came across this post by Anthony Reimer which details how to uninstall an Adobe app by it's sapCode and base install version number. I decided to see if that method could be automated to uninstall all currently installed Adobe apps. And it can!Instead of specifying a baseVersion, my script looks at "/Library/Application Support/Adobe/Uninstall" to find a list of Adobe apps currently available for uninstall. It then passes sapCode and current product version to the Setup executable.I've also included additional code to specifically uninstall Acrobat and the Creative Cloud Desktop app.I've only tested this on 2020 versions of Adobe apps so it may or may not be useful for older Creative Cloud apps. If you have some older installs ou

Today we are releasing a maintenance version of Jamf Pro; highlights include: Resolved IssuesJamf Pro Server: Security IssuesJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI148977] Fixed: A security vulnerability in the Jamf Pro API.Jamf Pro Server[PI134850] Fixed: Packages with special characters in their filenames appear to upload successfully to the Jamf Cloud Distribution Service but are unavailable until renamed or re-uploaded.  For additional information on what's included in this release, review the

Hi, The available guide is for JAMF Pro. Any advice for JAMF School how to deplay the XML? Thank you

Hi,I am experimenting with Compliance in Jamf Pro. I setup CIS lvl 1 monitoring as a start and without any Azure connection. But somehow it keeps giving the error: “Management settings deployment failed”. We run 43 Macbooks, all rolled-out with DEP and correct registered in Jamf (and Protect). Any idea?

Hi Guys,We are facing very weird issue at our Orgs, where none of the packages are getting installed during enrollment for some devices. The issue is not for all the devices, and usually for few devices but been having this issue once in a while.All the packages are signed, and works perfectly fine for most of the device. And for god sake, we cant replicate this issue whenever we do a testing.Those devices who have issue with package installation, usually works once wiped and re-run the enrolment process.Does anyone have idea on how to get this sorted?

Hi all, I'm trying to upload a guidance from Compliance Editor to Jamf pro. I'm at the portion where it's asking for a client ID and secret. I haven't used the jamf API before and I know you need to create a API role first, but I'm not sure what privileges I would need for a compliance editor upload.

I am currently using an iphone 16 as a work phone and on our last cruise (MSC) the phone was not able to connect to the ship’s wifi.  I was told by the cruise line that it was because of Jamf protect running on my phone and that was blocking the phone from recognizing the wifi signal since it was a new wifi network.  I have had this same issue in the past while attempting to connect to a wifi network in a hotel or restaurant that was not a typical network for my phone.  I am trying to figure out if this is indeed correct or if there are settings on my phone that should be toggled on or off to allow it to access the internet through a wifi network that is not familiar to my device.  Any help would be appreciated.   

We are facing issue with screen recording permission. To unlock security and privacy the device is asking for admin username and password. First of all, we don't know who those admin creds are. Second, we want to allow all users to be able to access security and privacy. This issue arrived only after we configured jamf connect with Azure AD. Not sure how to resolve it.

Hi Jamf Nation, we're thrilled to announce that compliance benchmarks capability in Jamf Pro is now generally available! This release transforms how your organization manage compliance across Apple devices, making compliance validation and enforcement simpler than ever before.   Benefits At the heart of this new capability is a streamlined approach to security compliance: Quick Setup and Implementation - we've integrated both CIS Level 1 and Level 2 benchmark templates from macOS Security Compliance open source project (mSCP) to allow rapid deployment of compliance rules. Using compliance benchmarks, IT teams can quickly create compliance configurations across your organization. Flexible Options - IT teams can assess compliance status in monitoring mode before enforcing changes, allowing them to u

We currently are not syncing our ASM data over to Jamf.  We are, however, using Jamf Teacher in some small instances by mnually creating Classes.  We are manually creating rosters for a credit recovery classroom where students come and go.  The result in Jamf Teacher?  A Jamf Teacher roster that is not alphabetized.  The credit recovery facilitator sees students who were in there “first” by the IT department’s selection and Save.  Each new student added just gets appended to the end of the Jamf Teacher roster in the Jamf Teacher app.  This makes it a mess for selectively adding or removing lesson restrictions for an individualized experience.Has anyone figured a way around this?It would make sense for the app to have a sort option built in, but it doesnt!

I have 3 devices in my org that when they hit the JAMF Connect Login screen to MFA into the device it auto-reboots.  I do not have a chance to choose local login since it is instant. I'm not sure if it's a pending policy or JAMF connect causing the issue since it has not checked in since the reboot has started. I do not see any pending policies in the logs. I can't apply any current policies or check-ins since it reboots too quickly to check in to JAMF and or post a boot up trigger. 2021 M1 Macbook ProJamf Connect 2.45.0

JAMF Nation, I am trying to configure a plist file to disable Bluetooth Sharing. It appears this could be done in com.apple.Bluetooth in the "By Host" folder of preferences in finder. (Users/$user/Library/Preferences/By Host) I have come up with the following plist, when I push it via the JSS it is installed on the endpoint but the setting isn't enforced. Has anyone enforced this setting in this manner? Additionally I am aware of the JAMF Github with the CIS benchmarks and @franton Github with the benchmarks as well. I would just like to enforce this via config profile if possible. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PrefKeyServicesEnabled</key&

Hello Jamf Nation!We’ve released Jamf Pro 11.25.0 beta. This release includes Branding Self Service+ for macOS via Jamf Pro, Improvements for OIDC-Based Single Sign-On Through Jamf Account and more.How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Click “Join Community” to join the beta forum once enrolled. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks, Blueprints, and App Switcher.Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-bet