We are excited about recent updates that make Chrome on macOS easier to deploy and manage. Our work with the Google Chrome for Enterprise Team is ongoing, and this first release benefits not only Jamf Pro admins, but everyone who manages Mac at scale. Look for more information in the form of a blog, but here are the highlights: Updates to the installer - Chrome is now available as a PKG in addition to the standard DMG. This is the preferred installer format for mass distribution, and is available from the Chrome Browser Enterprise Installers website. Initial Support for Application & Custom Settings - Chrome Browser Cloud Management (CBCM) is a a single location to set Chrome policies on multiple platforms. Google simplified the process of deploying the enrollment token by leveraging Jamf's new Application & Custom Settings payload. This work comes from user feedback and @alexbauer from the Chrome for Enterprise Team is joining this thread to hear your thoughts! Chrom

Hi all,I'm running in an issue concerning the installation of the OpenVPN app.Basically I've deployed the after converting the .app into a .pkg via Composer, and the app works just fine untill our users need to connect via profile. If the user tries to connect to the VPN they are greeted with an error. My issue is that, if I try to download the application using the original .dmg file (but that needs an admin login, that our users don't have) and run OpenVPN afterwards no error occurs and both the profile and the app work just fine 100% of the time.I think this leaves me with 2 options: either let our users download and install OpenVPN via .dmg but without any need for an admin password or I need to push to our users every file that the .dmg install on the computer and not just the .app.I'd really like to go for the first option since it could be useful in plenty other situations but sadly I don't know how to do neither of them.Thank you for the help!

Hey everyone. I was recently asked to upgrade our GlobalProtect to 6.0.7. After some extensive searching on JAMF Nation I was able to piece a good script together that will add your portal connection(s) to the install. Create your package and the following script...#!/bin/shsudo rm -f /Library/Preferences/com.paloaltonetworks.GlobalProtect.settings.plist## Set the portal address for GlobalProtect#portalAddress="YOURCONNECTION"## Modify PLIST to reflect the correct portal address.#echo '<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>Palo Alto Networks</key><dict><key>GlobalProtect</key><dict><key>PanSetup</key><dict><key>Portal</key><string>'$portalAddress'</string><key>Prelogon</key><integer>0</integer></dict></dict></dict&g

Hi all - We got PSSO working with our Okta preview environment and thought the setup for our production environment would be easy using the article by Sean from Jamf. However, we are hitting the same issues during registration when after the user input their password, the registration is not available (see screenshot).  Also, I've noticed all articles references the okta preview environment. Has anyone gotten PSSO to work in their prod environment with a custom domain (e.g., companyname.com, login.companyname.com, etc.) vs. the standard company name.okta.com?  I have reached out to Okta who suggested we add desktop password sync in addition to their PSSO article and we are still having the same issue. 

We're in the process of configuring another Jamf instance for a separate group. One issue I'm running in to is with a specific package we created using Composer. After a tech enrolls the device, they run a self-service Audit Check and it checks to make sure the 6 security tools are running. When it runs, it copies a script to the /Shared folder and then runs the script. We use the same package in our Prod and QA site, but for the new site, when you run it, it always errors out. I've even tried creating the pkg again.Error Downloading https://xxx.jamfcloud.com/jcds/downloads/Audit_Script.pkg... Verifying package integrity... Installing Audit_Script.pkg... Installation failed. The installer reported: installer: Error - the package path specified was invalid: '/Library/Application Support/JAMF/Downloads/Audit_Script.pkg'.  

Hi,We have a computer lab, fully ethernet and we've always turned off wifi (using a simple JAMF policy running on startup) to avoid confusion.  We recently upgraded to Sonoma and have had reports of users complaining as the wifi is popping up asking for credentials persistently.  On further investigation we've noticed that if you turn wifi off, but then sign in with a new user, wifi is automatically turned back on.We can fix this by changing our policy to run on 'login' as well as 'startup' but just wondered if others had observed this behaviour, and if it can be attributed to Sonoma or some other update?Thanks,Lawrence

I have a 2019 iMac running Sequoia that uses the same Connect setup as 700 other systems that is showing this error message. It only seems to come up when logging onto the system using an ID that was created a long while ago. I tried using an account that hadn't been used on this system before and it works fine. And continues to work fine for that new ID. Nothing has changed in our EntraID configuration and it is currently working fine for systems in that lab as well as all across campus.  Any ideas?  

Does anyone possibly have a bash script to uninstall Cirrato? I have tried many things without success.I know that Cirrato isn’t a very common software, but I give it a try here anyway.

I'm currently trying to setup a group of iPads to function as kiosks that are locked to a browser window that the user can't get out of. Previously for this we used a combination of an app called Managed View and Guided Access, however since we now have Jamf, we want to be able to configure this through Jamf Pro so that we don't need to manually setup iPads to function this way. I've followed all the documentation I could find relating to Single App Mode, however whenever I try to push out the config profile for enabling it I simply get a "failed" message in the Jamf Pro logs. This app definitely supports SAM and ASAM, so I'm confused why it is proving so hard to setup. I can get the app deployed and working just fine, however the config profile to limit users to just the app is proving to be very difficult. Any advice? I'm considering having a go at a different Kiosk app but the one I'm working with has better documentation than most.

Hi.,In my organization, several Mac laptops are experiencing an issue where users enter the correct password, but receive a message stating, "Your account is locked. Try again in 3 minutes." We attempted to send an unlock command via Jamf Pro, but it did not respond or resolve the issue.As an alternative, we tried resetting the password using the recovery key, and it successfully resolved the issue.I'm not sure if the recent patches are causing this issue, but I wanted to give a heads-up. If anyone has any insights or suggestions, please share.All the devices are running macOS Sequoia 15.3.2.

Hey all, I have been using the tools at https://office-reset.com/macadmins/ for assisting with O365 and other office related issue. However, I was wondering if anyone has made a Microsoft Teams (Work or School) removal script? Office reset has a full office removal script, however it does not include he new Teams as part of the removal...  Main reason for wanting it is to get the mac back to a clean slate from the O365 perspective to troubleshoot some other issues. 

Has anyone experinced this?  Guest Accounts Stop Working After Update and cannot be Enabled via System Preferences or Terminal Command.  I am trying to contact Jamf to see if they can help.  If anyone has experienced this and have a solution please let me know:)

Hi, we are trying to find a solution to prevent the device name from changing after an iOS device is reset. With the PreStage Enrollment method "List of Names", each enrolled device receives a name from the predefined list (e.g., Device0001, Device0002...). However, when we reset and re-enroll the device, it gets a new name from the list instead of keeping the original one. We plan to label the devices with stickers showing their assigned names, so the current behavior is not ideal for us. Is there a way for Jamf to assign the device name as it does now, but without changing it after a new enrollment? Thanks in advance! Currently we have this workaround: We show the hostname on the lockscreen. 

After upgrading to iOS 18, students are seeing trusted certificates being removed from their iPads.  In our case, they are root certificates that get pushed via Jamf Pro during enrolment - one for wifi access, one is the JSS built in certificate.  (click on settings, about, certificate trust settings to see the certificates that get pushed)Is anyone else seeing this please?  We are seeing this sitewide, as the OS update rolls out.No fix at the moment other than wipe the device and enrol all over again to get the certificates back - not feasible when you have over 1000 iPads!

 Hey Gang, I have gotten 1 computer out of 300 that refuses to finish a jamf recon (either at login or on demand).  I am pretty sure that my EAs are OK as the collection works perfectly fine on all of the other Macs.  I did try "jamf recon -verbose" and it did provide me a detailed listing, but that didn't tell me much info on where to start troubleshooting... Could it be a particular app or corruption that could be causing this?  I am looking for some ideas on what to try next...

Hello everyone, I want to force the Microsoft login windows when the user enrolls a device.   I already archviced:Settings -> System -> Cloud identity providers -> Entra ID (Mappings test works) Settings -> System -> Single sign-on with SAML Settings -> System -> User accounts and groups -> Jamf Pro User Groups - > I got two Directory Service Groups for Jamf Pro Administrator access and Enrollment   The only thing that's left is the Error HTTPStatus:500 when I want to register a Mac. I don't want the whole bunch of extras of Jamf Connect with local/mobile account creation on the Mac etc..   Just the extra step as login to verify the user is an active member of the company.   Thanks a lot.

I've been asked to deploy some apps as managed on all our iPads - but some people seem to have the app with their own apple ID.   Does the 'convert unmanaged to managed' option fix that? Or is my only option to ask them to remove the one they installed?

I've been looking for a way to silently uninstall the zoom outlook plugin but everything I see is just running the uninstall.app. Is that the only viable option (remote connect and uninstall) or is there a better way to do it?

How are you updating your users to the latest version of Safari (17)? Mac Apps does not have Safari available and you can't add Safari to VPP, so I tried creating a package using composer and adding it to a Patch Management policy and pushing it that way, but that is not working. I also tried just creating a regular Jamf policy and adding the package there and pushing it out, but no dice even though the logs show it was installed successfully, but when the machine runs recon it still shows the old version of Safari, not Safari 17. I have Software Updates (System Settings>General>Software Updates) disabled because Restricted Software was not restricting users from going to macOS Sonoma, so this may have something to do with why I'm not able to update these devices to the latest version of Safari, but at this point It's just a guess.  Any help is greatly appreciated!

When I was asked to write my thoughts down for a blog to celebrate International Women’s Day, my first reaction was, What the heck?! Advice, from me? More specifically, advice on professional development. Ha! I don’t even RTFM! Then, I had a flashback to 2019 when Jamf asked me to be on their first Women in Tech panel at JNUC. I’ll admit—I needed some encouragement from other admins, my leadership, and my team. I may or may not have gone into hiding when first asked to be on a panel. In the end, I wound up co-presenting with a fellow woman Mac admin on leadership, and it turned out to be a positive experience. After this quick montage in my head, I cast my doubts aside and realized, Okay, maybe I do have something to share. I can talk about a few key things in my career that I think could be helpful to other women out there. The 2025 UN International Women’s Day (IWD) theme is “For ALL Women and Girls: Rights. Equality. Empowerment.” This theme focuses on empowering the next gener

I am relatively new and not very knowledgeable when it comes to certificates.  About a year ago I successfully created our company's push certificate for JAMF Pro (cloud version), and it is about to expire in a couple weeks.  In attempting to renew our push certificate for another year I get the following message after I upload the new .pem file I downloaded from Apple.  "WarningExisting devices that are enrolled with Jamf Pro will no longer respond to push notifications." What does this mean?  What will happen if I complete the process as-is?  Will I need to re-enroll my devices?  Will they stop responding to JAMF?  Should I wait until the actual expiration date to create a new push certificate?   I believe I am using the same Apple ID, but is there a way to check or verify this?   Any help would be appreciated. Mark BishopCommunity Action, Inc. of Central Texas

Hello, in our company, we automatically synchronize some SharePoint/Teams folders on certain Windows devices. Is there a similar solution for Jamf? Or does anyone have any ideas on how I could implement it best? Thank you in advance!

Hi everyone,Is there a possibility to set a configuration on Macs that allows AirDrop transfers, but only to other macOS (or iOS) devices, and not to others?Thanks!

Hello everyone we have a major performance issue with Jamf Teacher (Jamf over jamfcloud.com). In a class of 20 students, it sometimes takes over 10 minutes for the last iPad to receive the profile. Since there are also such problems with other online services, but the speed of the Internet connection is about the same everywhere in the building (measured), I think it could be due to the configuration of our network. Has anyone here perhaps had similar experiences and found a solution?  

Hello,I'm trying to find out if Jamf Pro has a audit log of users that log into Jamf Pro for administration and the actions they preformed?  Looking for a audit log to trigger alerts in Splunk for when a new "Standard User" is created or etc...