Hello everyone,We’ve encountered problems with personal hotspot in iOS/iPadOS 26.The option to activate it is dimmed on my colleges devices even though she has’t got any restriction profile. Before in OS 18 she used personal hotspot without password without any problem. Now she can (not the normal way) set a password for it but not activate the function/option. And she doesn’t seam to be alone with this problem. In my own case my devices don’t have the problem (have the same profiles as my college), if it matters I’ve always had a password set even when updating to 26.Anyone else encountered the same problem? Does it have to do with Jamf or the OS?       Bottom selection of search results. Password set at the option at bottom of search results. Top option of search results, the normal place.  

Okay we’ve never had this issue in the past.  The prestage enrollment naming requirements ALWAYS take precedence...but for whatever reason, this is not the case.  Workflow to replicate:Move device (currently named PS1-Serial) from one prestage to another  Perform “wipe” command from Jamf Enroll device under new prestage with new name PS2-SerialUnfortunately on step 3, the device ends up with a PS1-Serial name for whatever reason.  Did I miss a PI (product issue) behind this?  Is this known behavior? Or am I just losing it from the week of crazy JAMF PIs that I’ve found?!

Don’t forget to sign into your Apple Manager …• Sign into ASM and ABM for updated agreements• Banner: Settings->Global ->Automated device enrollment Accepting updated agreementsAfter Apple updates one of these agreements, any Apple Business Manager Administrator, Apple Business Essentials Administrator, or Apple School Manager Administrator must sign in to the program website to accept any new agreements. If you're an Administrator in Apple School Manager, sign in to https://school.apple.com. If you're an Administrator in Apple Business Manager or Apple Business Essentials, sign in to https://business.apple.com.  

Hello,I am having some troubles to connect Jamf Protect with Jamf Pro.Many computers don’t show up in Jamf Protect console despite having the policies generated by the Jamf Pro plan.I am currently debugging on one computer:the protectctl info -v command tell me the connection status is connected, the plan has the correct ID and the tenant point to the correct tenant.The only error I have is when running protect repair, I have a JamfProtect.ConfigProfileValidatorError error 1: no valid content filter profiles installed. (when verifying the daemon status)(I also have Jamf security cloud, and I tried with and without a content filter profile applied, both yield the same error)There are other computers on this plan that do show up in jamf protect console. What could be the issue and how to resolve this ?

Anybody have experience deploying the MyQ X Desktop Client through Jamf?

Now that Tahoe is out of beta, gremlins that I'd noticed earlier now feel more pronounced.  During Build testing I find myself frequently running through sudo Jamf recon ; sudo Jamf policyBut since moving to the release of Tahoe they’re just painfully slow to report data. It doesn't matter if it’s an upgrade from Sequoia to Tahoe or fresh install via IPSW.  Wired or wireless. ...S.L.O.W…  Is it just me?

Hello Everyone,    I got a sudden challenge on my desk to get a BYOD system working for our comapny. From my knowledge there isn't a BYOD set up so to say for MacOS. I see user enrollment is the method for this and it enters a un-supervised state. My questions are: how do we differentiate in a smart group who has these machines to get certain policies? How do we remove company data if said user is offboarded for any reason (we don't want to leave the control to the user)? In anyone's experience, what are some best practices from your BYOD setup you have started in your company. I am a small team and JAMF isn't our expertise (working on getting help to dive deeper with MacOS Administration) so any help is GREATLY appreciated. Thank you!

Pro Tip:If you have a need to take action on a a number of devices, no need to put them into a group.Use the blank search and enter serial numbers separated by a comma “ , “ and “ “ space example:serial1, serial2, serial3, serial4, serial5You’re welcome.

Since this came up during our meetup:The name "Jamf" is a reference to Laszlo Jamf, a character in the novel Gravity's Rainbow by Thomas Pynchon. It’s not an acronym. It’s not rude. It’s not what happens when you type “f” really hard.Knowing is half the battle. . .

Need help with Jamf Pro API automation. We're trying to bulk update computer inventory records using the Classic API, but getting conflict errors when posting device information updates.Can authenticate and pull device lists fine, but PUT requests to update asset tags and department fields are failing. Need someone familiar with Jamf's API endpoints and bulk device management.Should be 2-3 hours remote work to fix the API calls and test bulk updates. Need working this week for our asset audit.

Hi all, so we’ve had multiple Macs (all M1 or newer) that have had Tahoe as an update and afterwards the keyboard is unresponsive - built in or external USB keyboard.  All you get is the ding noise and from reading, this can be an issue for some.   Also seems there is no way to block the installer, just defer is that correct?Well for now I’m trying to see if there is a solid workaround to fix the issue without a reinstall but so far came across nothing that worked for me :(  Anyone that knows about this issue, it would be great to get your input. 

Does anyone have any suggestions on how we can disable the "add to homescreen" feature in Chrome? Many students are adding games to their homescreen. 

Have you ever had to manage devices from a DEP instance you don’t control or even own? Or send DEP or BYOD devices to another campus where they need to be managed with a different MDM? This was the situation we encountered last year, and here’s how we solved it. Institutional ContextOur institution has expanded globally, adding new international campuses in Spain. These schools serve students from K–12, with management needs that differ significantly from those in the U.S. Because of local legal and operational differences, we chose to build independent technology stacks for each campus, modeled after our flagship U.S. campus. This provided consistency while allowing for flexibility.U.S. campus: Jamf Pro + Protect; BYOD model for students, DEP-managed devices for staff and faculty. Spanish campuses: Jamf Pro + Protect + Connect + Safe Internet; all DEP-managed, school-owned student devices.This design gave Spain the flexibility to support younger students in a day-school environment, w

Hello, Has anyone found a way to generate a report to find out if Screen Time is turned on on an iPad. From what I can tell that information does not seem to be available in Jamf Pro. Thanks! --Josh 

Has anyone gone through the process of creating a Configuration Profile Applications & Custom Setting  payload to restrict the AI options in iTerm2 (the prefs domain is “com.googlecode.iterm2”)? And if so, can you post the profile in this thread?Since I hate to re-invent the wheel I figured I’d ask before starting to build a payload for this from scratch…

We have been using the following script as part of our deployments since Apple silicon became a thing (I did not write the script). It appears that the “--agree-to-license” no longer functions in Tahoe and appears to invoke “help” in policy logs. Manually running “softwareupdate –-install-rosetta --agree-to-license” also returns “help” contents. Has anyone else seen this? #!/bin/bash# Installs Rosetta as needed on Apple Silicon Macs.exitcode=0# Determine OS version# Save current IFS stateOLDIFS=$IFSIFS='.' read osvers_major osvers_minor osvers_dot_version <<< "$(/usr/bin/sw_vers -productVersion)"# restore IFS to previous stateIFS=$OLDIFS# Check to see if the Mac is reporting itself as running macOS 11if [[ ${osvers_major} -ge 11 ]]; then# Check to see if the Mac needs Rosetta installed by testing the processor processor=$(/usr/sbin/sysctl -n machdep.cpu.brand_string | grep -o "Intel")if [[ -n "$processor" ]]; thenecho "$processor processor installed. No need to install Rosett

Hi,I am looking for a way to restrict icloud login on managed macbooks to using managed apple ids only. Does anyone know a way of doing this?At the moment, even if we give a user a managed apple id, there is nothing we can do to stop them using a personal apple id on company macbooksthanks

I am looking for a script to remove old Jamf remote policies from Jamf cloud. We have several hundred of them I discovered after running Kmart tool. I found this one but I cannot get it to work. https://www.elliotjordan.com/posts/remove-remote-policies/ Thanks 

Just curious if anyone knows a way to disable ALL banner notifications. Just wipe them all out. I manage a few iMac labs and students really don’t need these things popping up for every single application they open. I can disable some specific ones with configuration profiles but it’s really hit or miss. Mostly miss. Thanks!

NoMAD has a bug on Tahoe, Whilst updated computers continue to work, new accounts appear to be unable to click on the NoMAD menu at the top of the screen.  Does anyone know a way to fix this?

Great success at our Benelux Apple Admins meet-up last last night! Thank you Mischa, Raf, Javier and Jonas for speaking and of course all attendees. On to the next one! 💪🏻 

Hello,we recently have the problem that the commands coming from Jamf Pro are stuck on the “pending” status. Not too long ago i tried to unmanage an iphone, which worked. But now its not possible to unenroll or to initiate commands in general without them being pending.Thank you in advance, i will put a screenshot of the problem as an example.Kind regards,Siraj 

With under-the-hood updates for macOS Tahoe 26, Mac Health Check (2.4.0) improves visual indicators for each of its various checks.https://snelson.us/mhc  

Anyone using TeamDynamix?  We are looking at changing our ticket system however, we want something that is integrated with JAMF or at the least user friendly with JAMF.  Any thoughts would be greatly appreciated

Hey Community!Whether you’re attending JNUC in person or watching from afar, we’re looking for a few amazing customers to take part in a quick 15-minute video interview during JNUC. As a thank you, participants will receive some exclusive conference swag 🎁. We’d especially love to hear from those who:✅ Work in Education or Healthcare OR✅ Are part of an organisation (any vertical) with 250–1,000 employees or 1,000–5,000 employees✅ Have experience with Blueprints, Compliance Benchmarks, or Endpoint Telemetry Your insights may be featured in:🎥 Promotional videos for JNUC🎥 Individual testimonials🎥 Customer success story highlights 👉 Interested? Comment below or email us at jamfnation@jamf.com to get involved. Not heading to JNUC but would love to share your story? Email jamfnation@jamf.com now!  Let’s showcase your story and celebrate your success at JNUC and beyond!