Hi All, Does anyone know how to add Zoom Contact Centre Extension for Google Chrome via Jamf Pro?I guess that I will need to Bundle ID which I can’t find anywhere. Thanks in Advance!

Hello Everyone, I have recently completed Jamf 200 and I am trying to fix an existing issue which Employees faces time to time on Company Provided Mac.We have a Microsoft Device Compliance Policy in place, where User registered their Mac (once per computer policy in Self Service) to make the laptop complaint as of the criteria to access company resources.However, this Policy always get stuck in Pending status when checked over Jamf Admin Portal and device fails to become compliant and hence No access to company resources. When we try to run Sudo Jamf Policy - it does not show any policy to run.But when we run MS Device Compliance policy using the Policy ID it runs successfully and helps to register the device and access to company resources. Sudo jamf policy -id xxx As a workaround I want to make this policy (using Policy ID) available in Self service so that Employees can run it from there to fix the issue of their own. Can someone please suggest me the steps to make this Policy Avail

Hello Jamf Community, iam looking for a Script to uninstall the Cisco Client Silent.I have a script that does it, but the Users will always get a Pop-Up Message that the Socket Filter needs Admin Permission. You can ignore the window, and it is uninstalled, but I would like to have it more clean. Greetings TGD

It is very tedious going one device at a time to see if there are failed commands. Has anyone been able to create a Search that shows devices with failed commands?

I have a computer configuration profile for Proxies and Proxy Bypass list.The CP is deployed with Computer Level and Install automaticallyThe proxies settings work but when I verify the Proxies, they display with no issueThe issue is the Proxy Bypass list does not seem to work/display.  When I go to a website that is supposed to skip the proxy, they are blocked.In Jamf EA I get the Proxy Enable status, Proxy IP, and Port numbers (which displays the correct info) using command scutil --proxyIn another Jamf EA, I extract the Proxy List with command scutil --proxy.  I see the list but it doesn't looks like it's enabled.  Because of this issue (Jamf Pro since 10.16.x), I have been having to use Scripts to do this work. 

Good afternoon I have a weird issue that is coming at a horrible time!  I have 6 M1 2020 Mac Minis that are failing at retrieving enrollment profiles.  Nothing has changed in my environment, and I even just pulled 4 new M4 MacBook Airs out of the box to test.  The Minis were previously in a different lab (one that I just successfully reset 16 other computers in), but these 6 continuously fail to enroll.  Any ideas?

Hi everyone!I have a macOS machine running macOS 15 (Sequoia). I created a configuration profile with the “Single Sign-On Extensions” option configured with Microsoft Entra ID.This allowed me to register with Platform SSO natively on macOS, using the notification that popped up on my machine after installing the profile.However, that requires my users to manually click the notification and register. To make the process easier, I created a new configuration profile with Jamf Connect (com.jamf.connect.login), also configured with Microsoft Entra ID.Now users are able to see the Microsoft Entra ID authentication page on their login window. However, I was under the impression that once they connected at the login window, it would automatically register with Platform SSO - but it still requires them to go through that notification.Is there a way to achieve the auto-registration with the combination of the SSO extension/JAMF connect?

Hello. This is my code in .net.var client = new HttpClient();var jamfUrl = "https://{server}.jamfcloud.com/";var clientId = "xxxxxxxx";var clientSecret = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx";var byteArray = Encoding.ASCII.GetBytes($"{clientId}:{clientSecret}");client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Basic", Convert.ToBase64String(byteArray));var response = await client.GetAsync($"{jamfUrl}/apps/");response.EnsureSuccessStatusCode();var json = await response.Content.ReadAsStringAsync();But when I execute this to get the list of applications I get following response<!doctype html><html lang="en"> <head> <meta charset="UTF-8" /> <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png" /> <link rel="icon" type="image/png" sizes="32x32" href="/favicon-32x32.png" /> <link rel="icon" type="image/png" sizes="16x16" href="/favicon-16x16.png" /> <meta name="view

I had a few devices upgrade to iOS 26 and the homescreen layout is not working….has anyone ran into an issue with this? 

So we have Google LDAP connected to Jamf. It's working great for populating User & Location information, etc. However, I'd really like to leverage 'Directory Service User Group' to scope stuff. It just doesn't seem to be working. I've tried to do some reading and I've found people saying it's unreliable. When I go to Cloud Identity Providers > Google LDAP > and do a lookup of myself or others + and also search for a group name - it correctly returns that I'm a member of ___-staff group. There's a specific policy I want to exclude for this staff group. I can go to exclusions for this policy > Directory Service User Groups > search for the staff group I'm apart of > it finds it, and I add it. After doing that, I still see my computer as pending like it's still in the scope. User & Location info is accurate, my local account matches LDAP user name, etc. How are people future-proofing scoping? My other option is to hand-build Departments in Jamf that match Departm

Hi,I have recently deployed a new wifi cert for our wifi office network and I am testing it at the moment.Once I choose the network, it will ask me to choose a certificate or enter credentials. I choose the new certificate and then afterwards the “eapolclient” prompt pops up. I click Deny and then I am able to connect to the Wifi with the new cert. I am wondering if there is a way to either always click Deny, or during these network authentications allow it to have permissions to the System keychain. Also if someone has a way to allow users to use our new certificate without even having to choose the new cert themselves, that would be even better. What I am trying to do is to minimize the steps that users have to do to connect to our Wifi with the new certificate. On the configuration policy, I only have the p12 cert and the network part 

Hi! Looking for a way to disable the "Restart and show password reset options" as mentioned in https://support.apple.com/en-us/HT202860 We have firmware passwords set on our laptops (by policy the firmware password is only known to IT) and when a user clicks that, it gets stuck at the firmware password screen. Reboots go right back to the firmware screen. Unfortunately, with all the work from home, we can't just stop by to fix it. 

Hello,Before asking my question, I’d like to briefly describe our current environment:We are using Jamf Pro on-premises. MacBook devices are enrolled using the User-Initiated Enrollment method. During enrollment, a hidden local account named jamf is created on the machine. All devices are domain-joined, and FileVault is enabled. Users log in with their Active Directory (AD) accounts, which are configured as mobile accounts. Initially, we manually create a local admin account named support during setup. This ensures that both the support account and the user’s AD account are enabled for FileVault.Our security team has raised a concern because the support account currently uses the same password across all devices. They have requested that we either remove this account or implement automatic password rotation, similar to a managed account.Could you advise on the best approach? How do you typically handle this scenario?Additionally:Is it possible to add the jamf account to FileVault? Woul

New behaviour in iPadOS 17 - when you only define a lock screen wallpaper and do not define the home screen wallpaper and you do not click the check box to use the same image for lock and home, iPadOS 17 now magically makes home and lock screen identical. (Huh? That's not what I asked for)I filed an Apple Feedback Assistant ticket and they said it is "currently functioning as intended".It didn't do this in 16.So what's the issue? If you make a reasonably great looking lock screen wallpaper it is totally distracting as a home screen wallpaper. The app icons become too cluttered with the background - there's no visual sense of depth to separate. If you use the QR code, it looks terrible on every page.The consequence is that you have to allow changes to wallpaper and you have to choose a plain style home screen. Then if you want your beautiful lock screen to stay "locked" so that students don't remove it you have to play the restrictions dance in both Restrictions and the Wallpaper payloa

Hi All,  I am trying to remove the phone icon and nothing is working.  This device does not have a SIM card, it uses Wifi only.  I have tried adding it to a Restrictions profile where I am removing all other system apps and it's the only icon that is not being hidden.  I am also applying a Home Screen layout and this icon is not one of the icons I wish to display in that policy.  What am I missing?Appreciate the help! 

Instead of seeing iOS 19 and macOS 16 at WWDC this year on June 9, Apple is planning for iOS 26 and macOS 26. It's a similar name convention for automakers. Like the Toyota Camry 2026.   Other Apple Operating Systems will follow suit.  iOS 26iPadOS 26macOS 26watchOS 26tvOS 26visionOS 26 Thoughts? https://www.macrumors.com/2025/05/29/ios-26-again-rumored/

Do you have a naming convention for Smart Groups and Static Groups in Jamf as well as for iPhones and iPads?

HII apologize in advance if that question was asked but I cannot find answers :( I need to retrieve following information through API: 1. retrieve members through API from static computer groups - i need to list computer names that belong to specific computer groups.  All i'm able to find is how to list computer groups, but not how to retrieve members. # Endpoint to retrieve computer groups$computerGroupsUrl = "$jamfUrl/api/v1/computer-groups"# Request computer groups$responseComputerGroups = Invoke-RestMethod -Uri $computerGroupsUrl -Method Get -Headers $headers -ErrorAction Stop 2. retrieve members through API from smart computer groups - i need to list computer names that belong to specific computer groups 3. retrieve data through API from "reports" found under "Search inventory" 

Hi, Does any of you have a solution to synchronize all contacts from Active Directory and keeping them updated?While searching for a solution, I came across a post that suggested to have a shared Exchange account that would have all contacts stored, and add that as an extra account on all iOS devices. Is it possible to tell an Exchange profile to only sync contacts? If not, this is not an ideal solution in our case.Any ideas?

Like a lot of other Jamf admins I see a small number of Macs that have stopped checking in and sending inventories. I see some that appear to be having problems with MDM. I am curious about what everyone else is doing to solve these issues. Since we also use some other management agents I can see that a lot of the Macs that are having Jamf agent issues are working with the other management agents. They appear to be in use. I wrote a script that leverages the Jamf Management Framework redeployment API command. I was able to deploy it through Tanium to some systems that had stopped checking in and sending inventories. This has worked on some but not on others. For the systems having MDM issues, this may not work since the Jamf Management framework redeployment using the API needs MDM functionality to work. Here’s the current version of the script that I created.#!/bin/zsh --no-rcs:<<ABOUT_THIS_SCRIPT-----------------------------------------------------------------------------------

Student devices have had iOS 26 deferred until recently. They’ve been on iOS 18 until this month. But with the students finally upgrading the “Modifying wallpaper” restriction hasn’t been working as usual. They still can’t access the wallpaper menu in their system settings however when they press and hold to edit apps and widgets on their screen they can edit their home screen wallpaper from there. As a last ditch resort we can make a home screen layout payload but this locks in all app and widget customization. We have made and automated management action that will change the wallpaper every day but we do have some tenacious kids who continue to change it every day. Does anyone know another fix for this or maybe it will be something patched in the future? What would be really amazing is if they could restrict it so they cannot select photos but only pick the gradients or a solid color. but it doesn’t seem like they have that as an option for iPads

Hey,I am looking for a way to distribute Firefox Addons via Self Service …?The following Addon should be available in Self Service:Passwork Self-Hosted Extensionhttps://addons.mozilla.org/en-US/firefox/addon/passwork-self-hosted/?utm_source=addons.mozilla.org&utm_medium=referral&utm_content=searchDo I have to change anything else after the distribution as an PKG?How can I make sure that the installed Addon gets automatically updated?

Ninyo did a fantastic little article on update management with Blueprints. I just was hoping for some clarification on the process. I had setup a test blueprint just as spec’ed from the article and it doesn’t act the way I would expect.  I am using the Software Update Settings payload. It is configured with deferrals just like the article. I then go to “Computer Software Updates” and select the test group, select update, select “Download and Install” and “Install latest version based on device eligibility”. I can then see the update start to be queued on the devices Management pane.After 10 minutes an error appears on the management pane.OSUpdateStatus The client requested cancellation completed. 12 minutes ago    And it fails.I am able to update the device easily and instantly with the “Software Update” payload. I am a bit confused on what I am doing wrong. Other combinations in the Software Updates pane fail the same way.

We use Snow as an asset management system and would like to use a smart computer group to target machine’s for updatesWe have created the package, a policy and also a smart computer group.The SCG has criteria of:Application Title - is - Application Ver - is not. - latest versionPackage Installed By Jamf → is not → YourPackageName.pkgOur current issue is that even though it looks like “snowagent” is the application title, the Smart group shows 0 completers when clicking View. If I do drop app tittle and app ver, then it does show the machines that do not have the Package installed.So but this still does not push out the pkg to these machines.Any help on what might be wrong would be greatly received. Thank youAdam

Hi All,  Does anyone has a script for automate User, Email Address, Position and Department after enrolment?Thanks in Advances