Afternoon, Just got a reminder that i need to migrate to the new Self Service + does anyone know how to do it? Thanks

Hi all,I've tried to install JCE 1.4 on a fresh laptop => selected macos => clicked on create new project => selected sequoia => clicked create => selected the folder => clicked save.Next step would be to be prompted for a security standard, but nothing happens.I tried it on 2 different laptops with the following OS:Sonoma 14.7Sequoia 15.0I also tried selecting the following OSs for the projects:SonomaSequoiaWith the same results.Can someone please confirm that its also happening for them? Thx! 

Hi Jamf Nation! 👋I'm excited to share an open source tool our team built: Jamf Docs MCP ServerWhat is it?An MCP (Model Context Protocol) server that gives AI assistants like Claude direct access to Jamf documentation from docs.jamf.com. Instead of copy-pasting documentation or switching between windows, you can ask your AI assistant questions and it will search and retrieve the official Jamf docs automatically.FeaturesSearch across all Jamf product documentation (Pro, School, Connect, Protect) Fetch full article content in Markdown format Browse documentation structure by product Built-in caching for faster responsesQuick Startnpx @get-technology-inc/jamf-docs-mcp-serverOr add to your Claude Desktop config:{ "mcpServers": { "jamf-doc

Hey everyone, Im suddenly running into an issue were I need all applications, both pushed by JAMF and others installed by the users, to have the option of “Scale to fit below built-in camera”. I could write a script to enable it for every app that we push but that is 1- not elegant and 2-wouldn’t hit any of the user installed apps.Does JAMF have a way to do this or has anyone been able to do something like this?  Thanks.

I couldnt find any clear answer about my question. For Self Service Classic, I set a custom install location (/Applications/Catalog.app).From what I read, once I enable Self Service+, the branding will carry over, but my custom install location won’t ? I’m planning to enable the “Use Self Service+ as the default end user application” option very soon, will it use my custom install location, or will it use a default one (/Applications/SelfService+.app) ? Thank you

Today we are releasing Jamf Pro 11.24; highlights include:OIDC-based SSO Through Jamf Account Enabled by Default for New Jamf Pro Instances All new cloud-hosted Jamf Pro instances are pre-configured to use OIDC-based single sign-on (SSO) through Jamf Account as the default authentication method for first-time access. This eliminates several steps of the Jamf Pro setup workflow and also ensures that new Jamf Pro instances have access to platform capabilities (e.g., blueprints and compliance benchmarks) immediately after setup.Note: This change only affects newly created Jamf Pro instances hosted in Jamf Cloud (not available for Jamf Premium Cloud Plus or StateRAMP environments). Automatic Jamf Protect Tenant Registration Jamf Pro can now automatically register your organization's Jamf Protect tenant to establish a secure connection between Jamf Pro and Jamf Protect. This eliminates the need to m

We heard you! From conversations with our students at in-person events such as Jamf Nation Live and the Jamf Nation User Conference, as well as reviewing the post-course feedback we receive, it became clear that you felt there was more we could do to help prepare those of you that have completed the Jamf 300 Course for the challenges that await in our expert-level Jamf Pro certification offering – the Jamf 400 Course.   So, what have we done about it? Well, we have a brand new and engaging resource to help you “Prepare for the Jamf 400 Course”!   This free, online learning experience includes a self-paced overview of the Jamf 400 Course along with a series of puzzles that when completed will help you prepare for the scripting challenges of the course. Included along the way are several resources to help you d

FYI Just got this error on all my machines after editing a policy. jamf policy → Mon Dec 07 14:45:17 My MacBook Pro jamf[909]: Enforcing management framework... Mon Dec 07 14:45:18 My MacBook Pro jamf[909]: Enforcing scheduled tasks... Mon Dec 07 14:45:18 My MacBook Pro jamf[909]: Removing existing launchd task /Library/LaunchDaemons/com.jamfsoftware.task.1.plist... Mon Dec 07 14:45:18 My MacBook Pro jamf[909]: Adding launchd task com.jamfsoftware.task.1... Mon Dec 07 14:45:19 My MacBook Pro jamf[909]: Creating launch daemon... Mon Dec 07 14:45:19 My MacBook Pro jamf[909]: Creating launch agent... Mon Dec 07 14:45:19 My MacBook Pro jamf[954]: Informing the JSS about login for user schattc Mon Dec 07 14:45:21 My MacBook Pro jamf[954]: Informing the JSS about login for user schattc Mon Dec 07 14:45:21 Schatt's MacBook Pro jamf[966]: Checking for policies triggered by "recurring check-in"... Mon Dec 07 14:45:23 My MacBook Pro jamf[966]: There was an

My organization is new to Jamf, and in recent years we’ve started to provision macOS devices. My question is how have other Jamf admins been managing asset tags? Ideally, I would like to have some automated method for generating an asset tag or computer number and assigning it to the mac during the prestage enrollment process. I’ve seen documentation for scripts assigning tags during the initial setup of the mac, but I find it concerning how this is relying on the end user to manually type it in rather than just automatically changing the mac’s hostname to its assigned name from a CSV: GitHub - jamf/Mac-Asset-Tag: A script that generates a GUI to accept a user input asset tag for the Mac. Any ideas would be greatly appreciated!  

With Jamf Pro 11.24, automatically register a Jamf Protect tenant with Jamf Pro, set default calling, messaging, and web browser apps on mobile devices using the Jamf Pro API, and filter scope for blueprints by group and platform type!Be sure to check out the Jamf Pro release notes for all of the exciting new features and enhancements.Thank you for your continued support and feedback!

Hi all, we use Automated Device Enrollment with Apple Business Manager.Suddenly, device registration in Jamf stalls. After user login and MFA confirmation (Entra ID), a small notification window appears asking, “Do you want to allow downloads on ‘login.microsoftonline.com’?”No matter what we select here, the process then stalls at “Retrieving enrollment profile.”We have already checked ABM, Intune/Entra ID, and Jamf settings (token), and all syncs are running.Does anyone else have any idea what the cause might be here?

Because I tried configuring a static IP address on the iPad, then connected it to a different Wi-Fi network. When I reconnected to the original Wi-Fi, the configured IP address was completely gone and it reverted to automatic DHCP.

Hi all, I’m looking for a way to block or skip the “Update Mac Automatically” screen that appears during the Setup Assistant (screenshot attached). Is there a way to suppress or bypass this screen using a configuration profile? Any insight or guidance would be much appreciated! Thanks!

Because I tried configuring a static IP address on the iPad, then connected it to a different Wi-Fi network. When I reconnected to the original Wi-Fi, the configured IP address was completely gone and it reverted to automatic DHCP.

Does anyone know how to get these metrics through EA?

Not sure when this would have occured, but i have verified on several devices. We are pushing out a printer using jamf and if you go into the “printers and scanners” section of system settings control panel, it says “no printers”. However if you go into an application, you can see the printer there. I can also see it when i run lpstat -p. Nothing has changed with this printer, we have been deploying it for years. So much be a new osx update that caused this.      any ideas? Its a bit of an oddity that i found while trying to diagnose a separate print quality problem for a user. Then i found that multiple macs in our environment do this. Perhaps someone has seen i

As an Apple Partner (I work for an Apple Premium Partner in Belgium) Managed Apple Accounts are a bit of a challenge. Last November we concluded our transition after a 2 year adventure. I’ll spare the details I cannot talk about and focus on what’s the same for everyone.There generally are 5 parts of your Managed Apple Account quest:1) Verify your domain2) Lock your domain3) Capture the domain4) Federate with your Identity Provider5) Provision new accountsBefore you get started with this, please know your why. Currently there are not that many reasons why you would absolutely - need - Managed Apple Accounts. Generally we only start the capture (and federation) part with customers of ours whom want to use Account Driven Enrollment (e.g for BYOD purposes). That being said we do advise any customer to verify and lock their domains to prevent issues in the future.Step 1: Verify your domainThe first par

Hi everyoneis it possible to get the result of the variable for configuration profile in lower case?Currently I have configured “Lock primary account information” with variables(see screenshot) The result of the variable is always in upper case. it is possible to change it to lower case? if yes then how? 

At the moment it seems that JAMF is unable to turn off private wifi addresses via configuration policy even though they have an option for "Disable MAC Address Randomization (macOS 15 or later)". After testing with JAMF and confirming this function does not work in setting this to OFF (there currently are no granular settings in the MDM framework for this), they recommended I raise a developer case with Apple for this. Shouldn't JAMF be doing this to allow this functionality in their MDM instead of us as a user?? Our vendor is incredibly upset and recommending we drop JAMF as a product due to their response on this.

Hello!In the last 2 years, I have had some Macs lose all configuration Profiles (including the MDM profile) when they try to renew the MDM Certificate (and fail for some reason)Mostly that could be fixed cancelling the “Renew MDM Certificate”-Pending task in the Management-Tab and then have the User run “profiles renew -type enrollment”. But it surely seems like a bug, when the (non-removable) MDM profile is gone.Has anybody seen something similar and a fix for it?Bye, Frido. 

Has anyone implemented Lights Out Management for Big Sur or Monterey? I can't seem to find any documentation whatsoever to proceed. Please help!

I have two reporting tasks in Jamf Pro that I dread every time I have to do them: Creating a Security Stack report Creating a report that shows which computers have a specific application installed and which do not What I’m trying to doFor the security stack, we have (for example) 5 security products that should be installed across our fleet.What I’ve been doing is exporting Computer Applications inventory and working from the CSV. The problem is the way Jamf structures the export: The application name appears once The rows beneath it (per computer) are blank until the next application name appears Those blank rows still represent devices that have the app installed, but the format makes filtering, automation, and reporting extremely painful I

I have just started using blueprints. My first blueprint enforces macOS Software Update settings and getting Macs updated to the latest macOS version that we are ready to put into production. In all my testing this is working very well. Unlike with policies and profiles, I don’t see a way to exclude computers. There are some “VIPs” that we treat differently (though I think everyone should be treated the same!) who I will likely have to exclude. I can do some manipulation with the groups that I scope the blueprints to but that will cause other management issues later on. Is there a good way exclude computers?

Hello everyone,Running into a weird issue that I’m not sure if is intended or not (Fairly new to JAMF). We have some user’s devices that had not been checking-in\pushing commands properly via Jamf Pro, mainly due to users not logging in. Received a few back after the users left the company and they are at the local Mac login instead of the Jamf Connect login screen. I can connect them to ethernet and send them commands from Jamf Pro, but they do not check-in and receive commands (wipe\lock\etc). If I log in past the local Mac login, they start receiving commands again and work properly. I can also still use recovery to wipe them, but they do not receive any commands or check-in until I am past that initial Mac login screen.Tried using Jamf Routines and a few other things to try and get them to check-in and receive the commands without having to login locally, but nothing seems to work until I get past that first local login or wipe them. Is this intended? Doe

Hi all, We are in the middle of configuring jamf Pro, and we need our MacBook users to have a standard account and then a secondary admin account, we are using Connect to link back to MS Entra and now wondering if it is possible to have a second account on the MacBooks for users to use as an admin account. All accounts would be created in Entra. Thanks