Hi everyone,I’m trying to set a default font in Microsoft Outlook (macOS) using Jamf Pro, and I’m running into some trouble.By default, Outlook uses Aptos, but I’d like to change it to Book Antique, which is already available on the device.What I’ve tried: I attempted to use the 3rd-party tool OutlookFontPoke by Paul Bowden @ Microsoft. Here’s what I did:• Deployed the OutlookFontPoke script and TemplateRegDB.reg via a package (both located in /private/tmp/OutlookFontPoke-master).• Created a policy in Jamf that:• Extracts the current logged-in user• Fixes permissions• Run the command as that user: sudo -u "$loggedInUser" /private/tmp/OutlookFontPoke-master/OutlookFontPoke 'Book Antique' '11.0pt' 'black' Issue: Despite several variations of the above, I keep getting this error in the script logs:WARNING: Registry DOES NOT exist at path /Library/Group Containers/UBF8T346G9.Office/MicrosoftRegistrationDB.reg. Attempting to create...mkdir: USER/Library/Group Containers: No such file or dir

Our infrastructure team is complaining about bandwidth congestion over the two 10 GBPS E-Lans.Has anyone moved from the 10 GBPS E-Lan to Dedicated Internet Access (DIA) or Cloud Connect to experience less congestion?

 Hi all,I'm testing macOS 27 Golden Gate (26A428) before fleet deployment and I'm trying to hide the VPN section from System Settings using the com.apple.systempreferences payload with the DisabledSystemSettings key.Bundle ID used: com.apple.NetworkExtensionSettingsUI.VpnSettingsIntents (confirmed via pluginkit -m -A -v | grep -i vpn)What I've tried:Deploying a native com.apple.systempreferences payload via Jamf Pro (uploaded as a full .mobileconfig) Running sudo defaults write /Library/Preferences/com.apple.systempreferences DisabledSystemSettings -array "com.apple.NetworkExtensionSettingsUI.VpnSettingsIntents" manuallyIn both cases the profile installs successfully and the key is present, but the VPN section remains visible in System Settings.This worked correctly on macOS 26 Tahoe. Has anyone found a working bundle ID or alternative approach for macOS 27?Thanks

Hello Jamf Nation! On October 1st, we made exciting updates to Jamf Premium Support (blog here: https://www.jamf.com/blog/jamf-premium-support-technical-account-managers/. You still get the same expert help from our internal support team, including Tier 3 support, enhanced target response times, and 24/7 access to support, but with some added benefits. Let’s look at the highlights: Premium Support Tiers:  There are now five tiers of Premium Support, with the addition of Premium Support Titanium   Technical Account Manager: A Technical Account Manager (TAM) adds proactive technical guidance to help plan and implement your Mac or mobile strategy. There are three different types of TAMs available, dependent on the Premium Support tier:  Collaborative TAM: These Jamfs provide proactive technical advice and guidance to help you configure your Jamf environment and implement industry best practices. Available with Premium Support Gold and Platinum.   Integrated TAM: These Jamfs help plan and

Dear Community,i stumble upon the Topic:  I am currently facing the notorious "Peak Storage Overhead" / Storage Bottleneck issue while trying to update our fleet of 700 iPads (8th Generation, 32GB models). Even after a factory wipe, the Over-the-Air (OTA) update fails due to the system data footprint taking up too much space on these 32GB devices.I stumbled upon the topic where @cr4sh0ver mentioned a solution:"We changed our 'PreStage Enrollment' to require the latest OS before enrollment is processed. iPads go through normal enrollment process after the iPad has been updated..."Since we are running Jamf School (not Jamf Pro), I am struggling to find this exact setting. I know that we don't have "PreStage Enrollments" by that name, but rather Automated Device Enrollment Profiles (DEP) and Blueprints.Could anyone give me a quick, detailed step-by-step walkthrough for Jamf School on how to replicate this fix for a single test device?Where exactly in the Jamf School DEP profile (or elsewh

I am trying to configure Content Caching with MacOS 27, and they deprecated the Content Caching through Configuration Profiles. The main goal is to automate ICS with iOS devices.I have a Blueprint setup, and I have enabled “Auto enable tethered caching” and set it to True. This will set the key “AutoEnableTetheredCaching” to 1. However, I don’t see a way to set “AllowTetheredCaching” to a 1 as well.Limited output from “defaults read /Library/Preferences/com.apple.AssetCache.plist”:    Activated = 1;    AllowCacheDelete = 1;    AllowPersonalCaching = 0;    AllowSharedCaching = 1;    AllowTetheredCaching = 0;    AutoActivation = 1;    AutoEnableTetheredCaching = 1;    CacheLimit = 0; 

I have a problem where some users are unable to enroll new devices in Jamf School. I use enrollment via Entra. After entering their email address and password, it just spins for a while and then returns to the Entra window saying, “You can’t sign in right now. Please try again.”When I check the sign-in logs in Entra, they show “successful” several times, but no failed attempts. However, this does not affect all users—some are able to sign in and enroll devices, which is what confuses me.Has anyone run into the same issue?

Environment:- Fleet of iPads enrolled as Shared iPad via Apple Business Manager- Managed via Microsoft Intune- Federated authentication with Microsoft Entra IDIssue:The "Recent Users" pre-sign-in screen (the screen shown before any user signs in, displaying recent user avatars) never times out or goes to sleep on its own, regardless of the Auto-Lock setting configured on the device. This causes the display to stay on indefinitely whenever the device is sitting at this screen, which is a significant battery drain concern for a shared-device fleet.Steps to reproduce:1. Enroll an iPad as Shared iPad via Apple Business Manager / Intune2. Sign out of any active user session so the device returns to the "Recent Users" screen3. Leave the device untouched at this screen4. Observe: the screen never dims or locks on its ownTesting done:- Tested with Auto-Lock set to 2 minutes on one device and 5 minutes on a second device- Both devices exhibited identical behavior: the Recent Users screen stayed

If you’ve ever looked at a question during an exam and suddenly forgotten something you’ve practiced dozens of times, you’re not alone. Exam anxiety is real, and it affects all of us differently. Jamf Training Courses include a certification process, and the thought of any exam can be stress-inducing. Even for an experienced Jamf Admin, there’s often a different feeling when you’re completing those tasks under a time pressure. The good news is that exam anxiety doesn’t have to prevent you from succeeding, and I wanted to share some strategies I’ve seen help students prepare with confidence and perform their best during Jamf Training Courses.During Your Training CourseParticipate in ClassThis might seem obvious, but one of the best strategies for preparing yourself for the exam is to actively participate in the Training Course. Follow along with the material in the way that you learn best, whether that’s watching the demonstrations before completing the lesson tasks or mirroring the dem

Hi All.Does anyone know if it is possible to restrict access to the hidden photo album or even the ability to hide photos in the first place?I’m surprised there isn’t a restriction setting within Jamf to disable access to this.Cheers

8th gen ipads have only 32GB of storage, 11GB are used for OS and 3GB for system data, so, if you want to upgrade from iPadOS 18 to 26 the update requires 20GB of storage available in order to update making it almost impossible to update. The only options I see is to “restore” iPad with mac device or configurator, but just imagine doing this for hundreds of iPads, so the other option is to NOT update.If you have\had this same issue let me know if you have found better options for this update and did you, your business or school district decided to stay in iPadOS 18 or not.

This year I had the privilege of presenting my first talk at JNUC after attending the previous three conferences. The talk grew out of extensive testing performed while troubleshooting problems in the environment where I was then working.Its central contention was relatively simple:Individually correct states do not necessarily produce a coherent system state.DNS can be correct. Identity can be correct. VPN can be correct. CASB can be correct. EDR can be correct. Individual Network Extension providers can all report that they are functioning normally.And yet the endpoint can still lack a reliably functioning path for MDM and its supporting transactions.I sometimes think of this as several independent republics, each functioning according to its own laws but without sufficient diplomacy between them. Every subsystem may be behaving correctly from its own perspective while the system as a whole lacks coherence.On macOS, this becomes particularly important because multiple security and ne

Hi Jamf Community,I’m looking for guidance on implementing Recovery Lock password rotation for existing Apple Silicon Macs already enrolled in Jamf Pro.Current SetupFor newly enrolled Macs, we have enabled Recovery Lock through PreStage Enrollment.This works as expected:Recovery Lock password is automatically generated. The password can be viewed from the device inventory in Jamf Pro. After the password is viewed, Jamf automatically rotates it after approximately 1 hour.Challenge with Existing MacsWe also have a number of Apple Silicon Macs that were enrolled before Recovery Lock was enabled in our PreStage configuration.For these existing Macs, I created a script that uses the Jamf Pro API with Client ID and Client Secret authentication.The script successfully:Authenticates to Jamf Pro. Retrieves the Mac’s Management ID. Generates a random Recovery Lock password. Sends the SET_RECOVERY_LOCK MDM command. Successfully enables/updates Recovery Lock on the Mac.This part is working as expe

Hi,I’m using a extension attribute for the latest macOS suppported on managed Mac in my Jamf Pro instance.The extension attribute i use is update for macOS Tahoe, but i haven’t found an update to support latest Mac and macOS 27.Could you help me?Thanks

We are a University with Apple School Manager and Federated Apple ID setup, devices managed by Jamf Pro. Recently we've seen an issue with new users signing in to our shared iPads. They sign in with the federated account details fine, are prompted to create a passcode as normal:Then, when logged into the iPad, when the screen locks then the prompt to enter their passcode to unlock it is not the same as the normal federated one, its a numerical keyboard only, so they have no way of entering the alphanumeric passcode they just created:I've found that resetting the users passcode within School Manager resolves the issue. But its not a workable solution to have to do this for an entire class during a teaching session. Has anyone else experienced this issue?

It’s all about community with JNUC. That is the biggest and most important thing I took away from JNUC 2026 this year, apart from all the technical stuff, of which there was plenty, but that isn't what this article is about. I had been to a JAMF Nation User Conference before, back in 2025, and it was great. This year was no exception, with one large distinction: it wasn’t my first JNUC this time. I was lucky enough to get to go this year via the “Diversity Sponsorship.” Which is, in very plain words, an amazing opportunity offered by Jamf to give tickets to a lucky few users who fall into any of the diversity categories. Myself, a trans woman living in the South, I fell into the LGBTQ+ area of the diversity spectrum. With the sponsorship, the other winners and I were able to attend a very thorough “Level Up!” class that was offered a day before the conference officially began. The class was great, full of information, and genuinely worth whatever they would have charged, plus more. Alo

With the depreciation of the “app usage” payload, where do we go in blueprints to hide/remove default apps (phone, calc, books, etc)? Been digging through and can’t seem to find a like for like.

Cannot update devices from iOS 27 to 27.0.1. All iOS 27 devices are still shown under iOS Update 27, even though they have already been updated to version 27. Only iOS 26.x devices can be updated to 27.0.1. 

New Terms and Conditions agreement in Apple Business Manager.I was a day late 😅

can an admin PM please? i need some help with my account!thanks!

Unable to complete file upload. fiie contents does not match file type in Jamf when uploading an automated device enrollment token from apple business manager

Hi all,I wanted to share a tool I’ve been working on: AxM Jamf Sync.It syncs AppleCare warranty coverage and purchasing details from Apple Business Manager or Apple School Manager directly into Jamf Pro.This isn’t a new project — it’s been on GitHub for a while, but I hadn’t posted about it here. I’m sharing it now in case it’s useful to other Jamf admins.The current release is v3.0.Two ways to use it:GUIA native macOS app with:Sync management Dashboard views for Apple, Jamf Pro, or both Searchable and filterable device table CSV export Multiple environment support Built-in schedulingIt’s useful for initial configuration and getting a clear view of where your fleet stands.CLI:The same application binary can be run with --silent to perform a full sync without displaying the UI.It can be used with launchd, cron, or scripts, supports --env to target a specific environment, and returns exit codes for success, partial success, failure, cancellation, bad usage, and missing environments.Both

We're seeing a strange issue for a few weeks now.The active window starts to lose focus randomly, which is a bit hard to explain, but for example, while typing every 20 seconds the textfield greys out for 5 secs then it's active again, which makes it impossible to work as this doesn't stop.With the help of the following python script (Brian33 on Nov 18, 2022), we found that OneDrive always steals the focus for a few seconds:https://forums.macrumors.com/threads/active-window-loses-focus.2321723/The only fix currently is to close OneDrive and re-open it, but this needs to be done always once the Mac restarts.So I created a script to close and re-open OneDrive during login, but it would be great to find a real solution. Our OneDrive version is always the most recent one: 23.056.0314Anybody else facing those issues?  

Hi there!Our school uses Jamf Teacher with Jamf School and sometimes we encounter a problem. Teachers start lessons for the whole class and don’t account for students who aren’t present.  This is fine if a student is at home due to illness but becomes problematic if they’re in another course like a special support course.We’d love a feature that allows us to easily exclude absent students from pushing lessons.  Does anyone know a good workaround?Should I make a feature request somewhere else? RegardsManuel

I am trying to create a EA to report the status of the the following key in the Clients.plist.  This is what I have so far but it is not reporting properly.  Any help is appreciated.  TY #!/bin/bashABSlocationServices=$(sudo defaults read /var/db/locationd/clients.plist 2C4E4FD5-F029-XXXX-XXXX-XXXXXXXXXXXX:icom.absolute.ctesservice.ase:Authorized)if [[ "$ABSlocationServices" == "True" ]]; then    echo "<result>Enabled</result>"else    echo "<result>Disabled</result>"fi