Hi dear Jamfies,  since im quite new to the whoe jamf environment and had to take over a whole functioning instance, i wanted to make Tahoe available via Graham Pugh’s “Erase-Install” script. The manual, i was left with described, that as first step, i have to create an entry via title editor and just copy and paste the information (with adjustments) from the earlier version. Now in my case, i cannot enable this title, meaning, it wont show up in Jamf Pro, please see attached screenshot. I also seem to fail understanding the note given, since the manual i was given from earlier coworkers does not mention any other steps besides copying and pasting the information on software title tab and requirements tab. Can someone help me out? Thanks in advance. 

Is it possible to create a Time Machine backup profile that limits the backup size depending on the clients storage. For example, if a Mac has 512gb storage I want to limit their backup size to 1TB but if they have 2TB storage I want to limit them to 4TB. Obviously I could create groups based on device storage size and apply a different config to each group. But I’m wondering if there’s some formula I could enter in the “Backup Size Limit” field or some other method to achieve this nicely. Thanks!

I think might be a Tahoe this? Multiple Macs in my environment have been having Self-Service+ crash whenever we run anything on it. It just closes itself with no error or explanation, and the subsequent policy doesn’t run. Tried on multiple policies with the same result on multiple different Macs, all on Tahoe (26.0). Had no problems with the Beta. Has anyone else seen this? I’ve deleted the keychain for Self Service+, re-installed, and deleted the cache for Self Service+ as well.Is this a known issue, by chance? Self Service+ version is 2.8

Is there really no longer a way to sort Jamf Discussions by date??? Finding something from 8 years ago at the top of the list is not helpful.  

Hi all, We have a situation where we need to remove some iMacs from our Jamf instance, but we need to keep Logic on them. We have purchased Logic through Apple School Manager and it feeds into our Jamf with those purchases, so I’m assuming they will have to be connected to Jamf in some way to get the app. We need these Macs to be offline and standalone as they are old and no longer supported, so we don’t want to risk having them on the network (we’ve previously been a victim of a ransomware, so network integrity is critical now). My question is, is there a way to release the Logic licences we have purchased through Apple School Manager as, say, install codes or VPP codes (I’ve checked Jamf Pro and there is no VPP codes under Managed Distribution) so we can install them individually, or do we have to have them on Jamf to get the licences? Many thanks,Ben

I am wondering if anyone could help with a process for automating with JAMF a way to click on settings for both zoom and VIA  after the install has happen.  Both applications need system preferences adjusted in order to use the product and we need help figuring out how to get JAMF to do this after the app is installed.  Any help is greatly appreciated.        Thank You

We are seeing issues with machines that have broken AD binds, is there a way to automatically remove the profile and reinstall it, or can I just add those machines from a SmartGroup into the scope?

Helpful app that I ran across in Slack. Nice GUI to show you the configuration profiles installed on your macOS client.It’s helpful in pointing out deprecated keys. It also shows you duplicate keys, which is helpful. For example, if you have duplicate keys restricting macOS Deferral updates. • Link: https://github.com/ninxsoft/LowProfile  Want to see what is inside the Configuration Profiles that are installed on your Mac?  Curious to know what a Configuration Profile will enforce / change on a device before actually installing one?  Tired of having to manually un-sign Configuration Profiles, only to have to flex your XML parsing skills to find out what is inside?  Maybe you just want to qualify that your MDM vendor is creating Configuration Profiles the way you expect?

here's my problem:-a user tries to change his/her password and it fails because the mac lost trust with AD, I'm able to send configuration profiles, do a "sudo jamf recon" works fine, except the mac is not bound, even though in Directory Utility it shows its bound. -after unbinding and rebinding everything works fine.(fyi: macs are on 10.11.6 and 10.12.x with JSS: 9.96) I'm trying to avoid having to do that manually.How can I do that using a script if a mac is actually bound to AD? thank you for your help.

Jamf Compliance Editor v1.5.0 • https://github.com/Jamf-Concepts/jamf-compliance-editor  

Hey all,Working on a script that prompts the user for information. Once complete, I set the script to ask the user if they would like to enter another response. If yes, a policy is triggered to call the script again. I seem to be getting an error. I believe it is because you can’t trigger a policy that is already running.I’m aware I can make the loop within the script. Just want to confirm that this is not possible. Has anyone run into this or found another option?

I recently spent some time working on a script to deploy AirPrint printers as we’ve got a few of them on our campus that don’t have driver support from the manufacturer, meaning AirPrint is the only option. I wanted to share what I’ve come up with in case anyone else is in need of this. All you have to do is change the details in the “Printer details” section at the top of the script to match your printer’s IP address, location, and display name. I’d also recommend modifying the PPD path slightly to give it a more specific name than just printer_driver.ppd. Example: break_room_printer_driver.ppd. Note: For this to work, the Mac needs to be on the same network as the printer since it queries the printer to gather the information to create the PPD file. The result is that you can deploy an AirPrint printer to your Macs via Jamf Pro complete with the icon and everything!   #!/bin/bash # Adds a printer via AirPrint. # Author: John William Sherrod - jwsherrod@mac.com # Version 1.0: 02

Students in our School figured out, that Widgets and Focus cancel restrictive Settings you set with Jamf. For example: With an other Focus you can change your Homescreen and use Widgets. If you lock the Screen with an App like Classroom you also can get around the Screenlock by clicking a Widget like the clock.Is it possibly to block Focus or at least Widgets on other Focuses?

Hey all,So I know we can use Jamf Connect or even just a script for elevation to admin for a standard user. Has anyone attempted to creating some form script that would require the user to enter a validation code provided for the admin rights before granting rights?The work flow would look something like this, SS policy that prompts for a code. The code would then verify against “something” - maybe an API call. Once it could verify the number it completes the script that elevates permissions temporarily.Im not sure where the script could validate the code from though. Maybe just a parameter that the Helpdesk could enter upon request?Thoughts?

Hello everyone, you can probably help me with a request.I created a configuration profile for software updates in Jamf Pro, and I enabled "Automatically install app updates from the App Store" because I always want to have the latest updates for apps installed from the App Store.However, there is one app that I don’t want to update automatically, and that’s Xcode. This app must not auto-update, because newer versions of Xcode don't always work for our developers.I deploy Xcode via the Mac Apps - App Store section. In the settings, I disable "Automatically force app updates", but it still seems to update on its own.Do you have any idea what I could do?Jamf support told me that since it’s an app installed from the App Store, it’s not possible to block automatic updates for that app only.Any ideas?Thanks all

Looking at a JAMF instance that  has this policy that runs once a day on recurring checkin. (scoped to ALL 4K+ macs)it’s just a files and processes: softwareupdate -ad --verboseI feel this policy is totally unnecessary. OS X caches updates BY DEFAULT. I’m watching this in real time on a workstation using jamf policy -verbose and it’s just sitting there doing nothing but burning up bandwidth cycles and preventing software install policies that the customers actually want from ever running.  

Testing out GlobalProtect for our Mac users and running into this keychain issue. We are using a local Certificate for authentication but the machine wants to use the system keychain every time GP tries to connect. The goal is to have the users never have to authenticate or enter a password after the local cert is installed. I have already amended the ACL to include the GP app but the keychain still wants to be accessed. I am also using an administrator account, but still am prompted. If I manually unlock the System keychain from the keychain menu I am still prompted when I try and connect. Thank you for any help or tips someone may have.

A notice in “Other changes” in the 11.20.0 Release Notes mentionsApple deprecated the following keys in macOS 26*, iOS 26*, iPadOS 26*, and tvOS 26*. This change deprecates the Defer updates of settings in the Restrictions payload for computer configuration profiles and the Defer software update setting in the Restrictions payload for mobile device configuration profiles.This is not currently noted in the Restrictions profiles for devices or computers.  They mention using Blueprint builder to manage deferrals going forward.   Time to test Blueprints once we get past the last deferrals  or 26 apparently.  

Hi all. AirDrop is enabled for use between our shared iPads. However, when transferring files, the iPads emit a beep, but no notification appears to accept the transfer. Do you have any insights into what might be causing this issue? The devices are running iPadOS 18.3.1.Thanks in advance for your help!

On Saturday, October 4, 2025, Jamf Cloud Infrastructure will be patched. During this time, you will be logged out of your Jamf Pro instance. The purpose of patching is to ensure that Jamf Cloud infrastructure and the database service are up-to-date, stable, and safe from security threats. Please see the times for our regions below. Hosted Data Region Date Start Time End Time us-gov-west-1 October 4, 2025 0800 AM CT 1200 PM CT  

Important notice: This version is intended only for on-premise environments. Jamf Pro 11.20.2 will not be mass deployed to Standard Cloud environments or posted on Jamf Account for manual hosted upgrades. Today we are releasing a maintenance version of Jamf Pro; highlights include: Resolved Issue Jamf Pro Server: Security IssueJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI141565] Jamf Pro 11.20.2 includes Tomcat 10.1.44, resolving a known security vulnerability in a third-party library (CVE-2025-48989). For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Pro.  

I have a Configuration profile to set the wallpaper to the corporate wallpaper, but that give error on MAC OS 26 Tahoe.Any one with the same problem?

Hi there,I'm looking for some assistance please in coming up with a solution to sharing organisation contacts to 100+ iPhones as read-only.In our current setup we're hosting the contacts on a Google account and have configured the Contacts payload in JAMF with the Google CardDav server which works great, however is NOT read-only, meaning end users are able to add/modify/remove these shared contacts which we do not want...I've faffed around with different solutions such as CoContacts, however am yet to come up with a solution that works. Any assistance is greatly appreciated!!P.s we have no allegiance to Google contacts and are only using it as a temporary stop-gap, but happy to switch to another platform if it will allow for read-only contact sharing that can be deployed via JAMF. Thanks again.

As the subject says, if I have auto update for a VPP app for iOS is set to disabled, new version comes out, app updated on one device, users verify the new version is good to go, how do I send the update to a thousand devices at once?  In our WS1 environment it’s simple, I just select the radio button next to the app and click Update.

I’ve tried testing a few times with Tahoe Beta and now Release and can’t get a Platform SSO to trigger an account creation. I’m tried just scoping profiles to target workstations, adding the profile as well as adding the profile to my Pre-stage.  What am I missing? PSSO works great once an account is created, however I can’t get the Tahoe specific options to occur.