I'm seeing a repeated entry in the jamf.log on client machines."no container info found for disk with id disk2s1"I have wiped the disk and then reinstalled the OS - maybe the cause?Anyone shed any light on this?

Hello. Does anybody have a  script that disables ipv6 over ethernet connections that works. Thanks  D

We have a specific case where an App update is coming soon that we need to temporarily stop from happening on iOS devices. Currently, the app is set in JAMF Pro to install automatically for the iOS tablets, with "Schedule Jamf Pro to automatically check the App Store for app updates" set to on and "Automatically force app updates" set to on. All iOS devices are put into Single App mode running this specific app. What is the expected impact on the existing install base, if any, when we set the "Schedule Jamf Pro to automatically check the App Store for app updates" set to off and "Automatically force app updates" set to off. And additionally will that in fact stop the app from updating on all devices in the install base?  

Hi All, I have configured the Gateway access followed by the linkhttps://learn.jamf.com/en-US/bundle/jamf-connect-documentation-current/page/Creating_a_Quick_Connect_Gateway.html Connection was established between Linux and Radar portal but when I try to access Subnets through ZTNA it is not accessible. I have configured the Access policy with direct IP and subnets as well but no luck. I'm able to access Direct IP address application but subnets hosted apps are not accessible, please let us know if anyone come across this issue. Thanks

I'm looking to setup, add a domain (DRC WIDA testing) to a configuration profile with "Relaxed Domains" for our iPads. I don't see it anywhere I've looked in Jamf Pro configuration profiles, but Apple and WIDA have references to it. This would allow us finally to not have to manually toggle Cross-Site tracking to "on" on each iPad!!!!I've setup a custom configuration as described but I'm hoping there is a non-custom method that I'm just missing. This functionality is supported by a key in the Domains payload CrossSiteTrackingPreventionRelaxedDomains. From WIDA / DRC InsightCross-Website Tracking and Device SupervisionImportant: Sites using iPadOS 16.2 and higher no longer need to enable Cross-Website Tracking aslong as the device is supervised and the domains are relaxed following the instructions below. This can bedone using Automated Device Enrollment and MDM software or by using Apple Configurator.Note:Sites using iPadOS 16.1.2 and below must still enable Cross-Website Tra

Hi everyone, I’d like to raise a question and share some real-world challenges we’ve encountered regarding user switching on macOS devices enrolled via Jamf Pro and managed with Jamf Connect + Entra ID integration. Scenario: A Mac is enrolled in Jamf under one user (e.g., during setup), but then another user logs in and becomes the primary user of the device. This scenario is quite common in cases of device handoff, testing, or human error during deployment. Observed Issues: Incomplete Deployment of Policies and Apps: After re-enrollment (even with full device removal from Jamf Pro and Entra ID), not all policies or apps are being deployed properly. Device Registration & Compliance in Entra ID: Devices sometimes fail to register properly in Entra ID. Even if the device appears registered (sometimes duplicated 2–3 times), the "Compliance" status is either missing or errors out. After several re-enroll attempts and manually removing the device from all platforms (Jamf,

I Have updated my instance to 11.16 and here are some quick hits that are bugging me.  theres an option of monitor, and monitor and enforce. However there is no switch available to go from 1 to the other, you need to create a whole new set of rules, make your changes, then send it out. this needs to be looked at. once the monitor has been set (I didnt enforce quite yet) you get the results, how many machines pass or fail, there is NO WAY to see what machines fail, OR WHY they failed certain standards, this too needs to be looked at. using the advanced search fails to yield any results as there is no way to point to these standards in the search function when using JCE, profiles were added in the device management tab, using Jamf's CE, I dont have a CLUE where they're stored at the documentation contains NONE of the items i've listed above

Is anyone able to get Groups working for privileges in Jamf Pro? I can add a group, search it via our Entra integration, but once its added, i still get access denied with the associated user im logging in with. The only way SSO will work is if i manually add each user. Jamf Support told me add the group as a standard group, matching the name 100%, which obviously still didnt work. Before i go back to support, curious if anyone here has run into something like this?

Hello.Can anyone advise steps for SCIM Renewal please?I have looked over https://community.jamf.com/t5/jamf-pro/how-to-renew-scim-token-in-apple-business-manager/m-p/291373#M259451  and these steps don't match the options I see in ABM.I only see preferences, not settings  and I don't see any integration tab. I am set with the Administrator role in our ABM so believe this should show me all tokens.D 

Hi everyone,I’m currently reviewing the different methods for syncing Recovery Keys and I’m a bit unclear on the distinction. Could someone help clarify the differences between: Recovery Key stored via iCloud, and Recovery Key escrowed to the Jamf Pro Server? Specifically, I’d like to understand how each method works, the user experience, and any implications for security or recovery workflows. Thanks in advance for your guidance!

We are receiving this error from one of our policies that runs during enrollment. I am a little confused as to why we are receiving this error when a local admin is created during pre-stage. Has anyone else experienced this or has found a way to resolve this? 

We have Jamf Pro 10.34 hosted on-premises.  We have a single server and a single SMB share, running on Windows Server.We have some files that cannot be downloaded.  In Self Service, it says the file cannot be found, but it is there when we check the share and check Jamf Admin.  Other files work fine.  If we open a browser and just simply put in the URL to files in the share, most work but some do not.  On ones that do not download via Self Service, we get this in the logs:  Error: Package was not successfully downloaded. -1005Any help would be appreciated.   Thanks.

We're in the process of getting ready to implement JAMF Connect for syncing local accounts with Entra. Our current Wi-Fi is 802.1x PEAP where users sign in with their username and password, which we were told is not compatible. We're looking into certificate based auth using machine certs, but haven't found a clear answer on how to make this work. Our PKI is Microsoft ADCS, so we run up against the strong mapping requirements. We don't have SCEP right now and we are hoping to not open anything for inbound communication as we don't host anything on site anymore and have no real dmz for hosting things. We also don't want to bind to AD as that's pretty terrible. Has anyone gotten this set up in a similar environment? Thanks!

Hi all, We have a strange issue that i am hoping you can help with.  We have had around 10-15 instances where 802.1x WiFi and LAN profiles disappear from a users device.  To give some context, its a single profile with LAN and Wifi 802.1x networks with a single SCEP profile, the issue happens on all kinds of devices on different versions of Sonoma and Sequoia.    The profile shows as installed on Jamf and the device however the SSID is missing from known networks.  The fix is to exclude the device from the profile and then remove the exclusion and the profile reinstalls and all is good. We've logged a ticket with support and they have ruled out Jamf and said its an Apple issue and to log it with them. Has anyone else come across this and been able to resolve it?    Its so frustrating as its so sporadic and we cannot reproduce the issue on demand so its proving difficult to resolve. Thanks in advance.   

Does anybody know what could be wrong? I don't see Transfer to a work account for one Apple ID account, only Keep as a personal account. I had read https://support.apple.com/en-gb/102159 and checked every option. Once I saw Transfer to a work account, but I was told to update my Mac to the latest OS. After that, I had tried many times without success. It's giving only one option: Keep as a personal account. It wouldn't be a big issue, but the problem is that this Apple ID is used for an APN certificate.  

I'm trying to deploy Jamf Connect as part of a PreStage enrollment, and this should now be possible from an on-prem https: DP with no user authentication. I'm obviously not going to replicate my entire package portfolio onto an un-authenticated DP, so I must populate it manually (selective replication is only available for cloud). I've created manifest plists as per documentation and added these to Jamf Pro via the Settings - Packages page, and staged my packages and manifests on the enrollment DP, but cannot get them to deploy in PreStage. Mgt History reports them as being installed, but there are clearly not. Any ideas how to manually manage an enrollment Distribution Point?

We’re truly excited about MCP and can’t wait to explore its potential. The idea of using the MCP (Model Context Protocol) connected to Claude for managing enterprise devices through simple chats is incredibly appealing to us. If we were able to achieve similar functionality with JamfPro’s MCP, it would certainly be a fantastic solution.

Another script that grew out of necessity.  Trying to "encourage" users to restart their Macs at least once every 30 days to help with overall system performance, make sure all policies are installed, fix network related issues, etc. so I can with with this super simple Dialog notification that shows up once a week if they are in the "over 30 day uptime" smartgroup.  Users don't have to restart, but if they do, you can set a custom timer to do an automatic restart for them.  I used the AppleScript method of doing a restart so it will prompt the user to save their docs before a restart.  Script can be found here: https://github.com/ScottEKendall/JAMF-Pro-Scripts/tree/main/UpTime Regex I used to calculate 30+ days And the script parameters...you can control the uptime days and timer value.

I have deployed some printers using the profiles and now we need to remove them and add new ones.  How can this be achieved with Jamf School as there is no remove option.  Removing the profile does not uninstall the printer from the system pane on the users computer.

Hi everyone, I’m in the process of setting up Jamf Connect in our environment and would really appreciate some guidance on best practices for configuring the login window, especially when integrating with cloud identity providers (like Entra ID). There are a lot of options and functionalities in Jamf Connect, and I want to make sure I cover the most important ones - the "must-have" configurations for a solid and reliable user experience. If you could share: Your go-to plist keys or config profiles Example scenarios you've addressed What has worked (or failed!) in your setup …it would be extremely helpful 🙏 Thanks in advance! Looking forward to learning from the community.

Hello,I am trying to update our method of deploying out the essential sounds for GarageBand through Self Service. In the past, I had leveraged the Carl Ashley AppleLoops script (it worked great!). After Apple removed Python from the base installation of macOS, I had been limping along with installing Python on the devices that were needing the sounds. This has posed other complexities.Currently, I am testing out installing all of the sound packages needed for the Essential Sounds from a cached copy of those packages on the laptop. This has not produced the desired results yet. The user is still prompted to install the sounds when launching GarageBand. All of the sounds that should be available from the Essential Sounds are present in GarageBand. The loops have also been reindexed in hopes that would resolve the issue.I would appreciate any help that anyone has to offer.Thanks!

Hi all, I'm trying to properly configure Jamf Connect with Microsoft Entra ID (Azure AD) for a passwordless login experience using Microsoft Authenticator push notifications. Right now, when a user logs into their Mac using Entra ID with passwordless push approval (without entering a password), Jamf Connect always prompts them to set or enter a local password after the identity is verified. My goal is to avoid this step entirely — i.e., users authenticate via Authenticator app and immediately get logged in to the local macOS account, without being asked for a local password. Thanks in advance for any clarification or guidance!

Bonjour, Avec Jamf Composer, nous avons le bug suivant : L'espace disque demandé pour un paquet est de 107 Go alors que le paquet à une taille de 155 Mo. Le paquet à été fait avec Jamf Composer 11.15.0 sur macOS 15.4.1.

Apologies if this is a basic question — I'm new to MDM administration. During the initial rollout at a new school location, the iPads get stuck after connecting to Wi-Fi and attempt to load the profile. The error message appears to be something like: "Timeout while reaching for profile" (translated from a different language). Troubleshooting so far: I spoke with the Wi-Fi administrator to ensure that the necessary ports are open, and the firewall shouldn't be blocking anything. I also tested with a different Wi-Fi network, but that didn't resolve the issue. I un- and reassigned the ADE profiles. The profiles are relatively small compared to those at other locations, so size shouldn't be the issue. Any suggestions for potential solutions or next steps would be greatly appreciated.

We allow our users from management level up to download apps as they need and we do not worry about controlling their backgrounds or layouts on their devices. If you restore from backup on a phone that was never in JAMF it will not show up in JAMF. If you restore from backup on a phone that was in JAMF after a restore it no longer actively communicates. Is there a way for these users to restore from backup and keep their new phones similar to the old?