I get a Lego block icon when trying to login to a Mac on a domain. It doesn’t happen on all computers. I recently wiped a MacBook, that I could log into, however, after enrollment... now I get the Lego block icon. I can log in with other accounts.I believe it has something to do with the AD binding and possible VPP issue (my logs have been flooded with VPP Invitation Usage notifications). I don’t know how to fix it.Any help, would be greatly appreciated.Thank you. 

I have been checking my Change Management logs .. and I have hundreds of VPP Invitation Usage logs - is this normal, is it causing other issues? 

Hi,We're starting to see a number of cases being raised internally about some of our Macs (all on macOS 15.1.1) having intermittent login issues.  Our devices are bound to AD and our users have been logging on fine for some time but now we're starting to get issues.  Sometimes the logins are fine.  Sometimes they take ~10 mins and sometimes they appear to stall completely (waited over 2.5 hours in testing) even on the same device.  The login screen appears to freeze (the time doesn't change) and you eventually get the spinning beachball.  SSH is still working and you can run a "jamf policy" successfully.  "Screen Sharing" reports that the user who has attempted to log into the device is the active user when you connect.Can anyone share some tips as to how we would start to investigate this sort of issue let alone resolve it???ThanksStuart

Morning,Anyone else experienced this issue since updating to Logic Pro 12 - We’ve got Jamf Pro at my org and currently push out Logic Pro via Apps store on Jamf which takes care of the updates and deployment to our various smart groups but since updating to version 12 yesterday we receive this error everytime we launch LP: The application cannot be used because the App Store authentication failed or no Network is available.Any ideas?Any advice or tips is greatly appreciated.

I am trying to create a Applications Usage Reports specially for Adobe App, I have tried:To create a usage report for a group of computers based on applications, you'll need to follow these steps:First, ensure Application Usage collection is enabled:Go to Settings > Computer management > Inventory collection Click Edit, then the Software tab > Applications Select "Collect Application Usage Information" checkboxNext, create a Smart Group for your computers:Navigate to Computers > Smart Computer Groups > New Add criteria using Application Title and optionally Application Version Configure operators and values to define your groupFinally, generate the report:Go to Computers > Search Inventory Create or select an advanced computer search with your criteria Click the Reports tab Sele

Hello there everyone, I have come across a very weird issue lately.Any policy that I add to Self Service+ fail to run, while if I open Terminal and run jamf policy -event TRIGGER it works like a charm.The policy does not matter it if includes a package or a script. It has been driving me nuts.Tried on different machines and re-installing Self Service+ app. Thank you in advance,Spyros

Hey everyone!We are relatively new to Jamf School and iPads in general for our district!We come from a Chrome environment so of course there are some abilities we had with GAC that we would like to emulate with Jamf School! Are we are to lock Chrome or Safari to only sign-in/authenticate with our @Domain accounts? Our fear is that students will just be able to login to any personal account and message/interact with each other that way (our admin is very pro-restricting student's virtual communication platforms).I appreciate any and all help!Thanks all,

Hey folks! Dropping in for another quick Self Service+ post on how to: determine available URL schemes for a macOS app (in this example, Self Service+.app) how to map policy URLs from Jamf Pro to the new schema and have the actions load within Self Service+ The Self Service app has historically supported URL schemes to automatically run a policy or open the app directly to a description of a given policy. Within the Self Service settings of an app policy in Jamf Pro there are installation and description URLs provided. Those URLs tie into URL schemes for the Self Service app, and can be launched in scripts and by sharing them directly via link.

With Jamf Pro 11.25, customize the application name and icon of Self Service+, adjust the session duration and inactivity timeout with Jamf Account enhancements, and use your Jamf Pro server to host enrollment information for account-driven enrollment!Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements.Thank you for your continued support and feedback!

Hi Jamf Folks,I use nginx file distrubtion server. It works, but I have errors in the nginx log everytime I install something via Self Service +```2026/02/17 12:54:16 [error] 13387#0: *1 open() "/<pathToPkg>/Package.pkg/index.bom" failed (20: Not a directory), client: <ip-addresse>, server: webserver.de, request: "GET /<pathToPkg>/Package.pkg/index.bom HTTP/1.1", host: "webserver.de"```When I download it via webbrowser or wget, I do not get an error.here is my nginx.conf```worker_processes  1;events {    worker_connections  1024;}http {    include mime.types;    default_type application/octet-stream;    server {        listen 443 ssl;        http2 on;        server_name webserver.de;        ssl_certificate     fullchain.pem;        ssl_certificate_key privkey.pem;        location /Packages/ {            alias /<pathToPkg>

We’re moving some devices from Jamf to Intune now when the new fuction with OS 26 is in place with School and Business Manager.We have encountered problems with two units so far, that you can't specify a date for the change. With that, it doesn't seem like they are being moved as intended and need to be deleted the old way. Does anyone know what could be causing this and/or if there is a solution?

Hey Nation,I’m normally not one to jump on a trend but this one was too fun not to! Who’s up for sharing theirs??Head to ChatGPT (I know it’s already open so shouldn’t take you long 😂) and ask: “Create a caricature of me and my job based on everything you know about me.”Here’s mine! Post yours in the thread 🧵! I can’t wait to see them all!!!

Hey There! Is there any way to obtain free voucher for Jamf 100 certification?

So as we approach the inevitable coming of Self Service + we have noticed something that would be great to remove if possible to bypass some potential issues.In the Mac menu bar the Self Service + icon does not go away no matter what at the moment, and it also has a “Get software” option in the menu that does not apply to us. So I have the following questions:1: Is there a way to automatically hide or disable the icon from showing up?or2: Is there a way to customize what menu options the icon has so that it is more applicable to different use cases where optional software deployed through self service is not a thing? 

 Even when Erase All Content and Settings is restricted, the option “Erase This iPad” still appears during sign out.Will it be possible to restrict this as well?The same behavior occurs even when using a Managed Apple Account...

  Your Mac is Ready for FileVaultFileVault keeps your Mac safe by encrypting your data andprotecting it with the password you use to log in. If youforget your password, you can use your Recovery Key toreset it.  

HI everyone,I am trying to implement JAMF Connect in our organization. I was able to successfully configure the OIDC, but while testing the ROPG, I am getting the attached error. I have confirmed that the client secret ID is correct, as the ROPG login is working for just one account. Also, all the users have been given access to the Enterprise Application. Any leads would be helpful. Thanks

Hi, I have a scenario where I want to use Entra ID during Automated Enrollment to authenticate end users and ensure Entra ID is the single source of truth for users and groups. I was also wondering whether if it would be possible to automatically create local accounts based on Entra ID.From what I have read, this is only possible with Jamf Connect. However, I've also heard that Jamf Pro has some IdP/SSO capabilities during enrollment, I'm trying to understand what can actually be achieved using Jamf Pro alone. If anyone with Jamf Pro expertise could clarify, I would greatly appreciate it. Thanks!

Has anyone successfully managed the following Safari settings via Jamf Pro (macOS and iPadOS)?• Hide IP Address from Trackers  • Prevent Cross-Site Tracking (I have disabled this in Safari on Macs with the “WebKitPreferences.storageBlockingPolicy” key.We are trying to determine whether these can be enforced through a configuration profile or other supported method, rather than relying on per-user changes. This is for lab or classroom environments,If you’ve implemented this, could you share:- Whether it’s working on macOS, iPadOS, or both  - The payload/key used (if profile-based) or the approach taken  Thanks in advance for any insight!

Hi everyone, we’re currently testing Platform SSO (Secure Enclave) in combination with the Kerberos Single Sign-On Extensionon our Macs (managed via Jamf Pro).Since enabling Platform SSO, we’ve encountered issues with password synchronization as well as Single Sign-On authentication for ADFS-based web applications. As soon as Platform SSO is enabled, users receive the following prompt either after some time or following a reboot:Password SynchronizationVerify your Active Directory and Mac passwords. If they do not match, your Mac password will be synced. The passwords are identical (local macOS login = AD password). However, this prompt appears repeatedly — and only when Platform SSO is active. Additionally, our

The criteria Postion in the User and Location for iPad users was removed. Not all user... Any ideas why?  I can’t find that anything was changed in Jamf. 

In macOS 15, the new Private MAC address settings is enabled by default, and there is a new settings in Profile to disable it, BUT it's only for a spacified SSID. If you need a global setting to disable the Private MAC for all existed and new SSID, try to create a new policy to run this command: sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.airport.preferences.plist PrivateMACAddressModeSystemSetting -int 1 It will not disable the Private MAC Address immediately, but it will work after forgot the network or reboot the computer.  

as a systemadmin I really like the Mac Apps updates , both Jamf App catalog and App store. But as a user (and all our users) we get annoyed by the popups. The announcement popup I can understand, but the thank you popup after update is really not needed I think.Would be great if we can disable that.

When creating a smartgroup, there’s a criteria for Last Enrollment. But it’s based on the enrollment date, which does not always have a value. Those machines seem to be excluded from any search which uses the enrollment date criteria. How do you search for machines with no enrollment date?

Hello all,   I am struggling getting OneDrive to silently sign in and redirect folders.  I have researched previous posts, and am using Microsoft's guide here: https://learn.microsoft.com/en-us/sharepoint/deploy-and-configure-on-macos to no avail. Here is my configuration policy below -- can anyone take a look and see what I'm missing?  I swapped out my real tenant ID with (Tenant ID) for the sake of sharing.  Thanks for your help.   <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1"> <dict> <key>KFMBlockOptOut</key> <True/> <key>KFMSilentOptIn</key> <string>(Tenant ID)</string> <key>KFMSilentOptInWithNotification</key>