Does anyone have a step-by-step for creating a basic content filter for Mobile Devices? Looking through the documentation online it keeps sending me to how to set it up on macOS but not iOS/iPadOS.  Basic Question:  Does the filter name matter? 

Has anyone had any luck in blocking the Games app? The only thing that appears under “Restrictions>Apps” is Game Center and that does not block the new app. 

I just want to take a moment to say thank you.It was truly an honor to meet all the recipients and everyone who helped make the event happen. I’ll be honest — I was completely unprepared for how emotional it would be. I was genuinely amazed.Speaking with the JAMF executives and hearing their journeys was inspiring. The consistent theme of family and unity — that sense of inclusion and belonging to something greater than yourself — was powerful and real.I’m deeply grateful to have been one of the recipients. Thank you again for such an incredible experience.

Back from JNUC? Learned a lot of new things, haven’t you? Missed even more I guess…Don’t worry, let me remind you what news we announced in Compliance benchmarks! Review the Keynote, Commercial State of the Union, and dedicated Compliance sessions (once available) for more details.NIST 800-53 rev 5 BaselinesYes, those from mSCP - low, moderate, and high - are now available in the built-in capability in Jamf Pro. You can build a benchmark out of them TODAY - as always, we recommend to start with monitor only, and roll-out gradually from small test group all the way to the target population.Compliance ScoreUsing Compliance in Protect? Like the simple compliance percentage as an overall indicator? It is NOW in Jamf Pro as well! Each benchmark shows a compliance score that tells you the compliance status over the assigned computers to know how you are doing. Any questions? Curious about where we are heading next? Let me know! 

We migrated from on-premise Jamf Pro to Jamf Cloud, and recently some users cannot see the apps deployed from Mac Apps, while others can. We are using a single Smart Group, but we are puzzled as to why it does not appear on other machines, even on Zero Touch built devices.Do you have any idea why this is happening? And can you advise me on where I can troubleshoot this? Thank you so much.

Is there a way to force set the "Listen for" setting under Siri settings to Off?We have disabled the assistant overall, as well as applied a config profile blocking the use of Siri. However, when disabling the assistant via a plist edit, if the "Listen for" setting was set to anything other than Off when this change took place, the user now gets a popup stating "You do not have permission to use Siri" whenever they say something out loud that sounds remotely similar to "Siri". 

Some additional IP address have been included in the Outbound traffic from Jamf Cloud.  Please see the “Permitting Inbound/Outbound Traffic with Jamf Cloud” document located here:   Permitting Inbound/Outbound Traffic with Jamf Cloud - Technical Articles | Jamf

Hi everyone, I. HATE. PRINTERS. That being said, we have to work with them.  and... Canon does not make it easy. Here is what I was able to find out from several places online, in order to get this "installer" to actually work. So let's jump on to our Macs and get this over with.Downloading the "Installer"1. Log into your Uniflow Online (web)2. Start Printing (Side Bar)3. Install Printer Driver > Click [Download macOS printer driver] Navigate to Download FolderOpen SmartClientMac.iso > Open SmartClientMac Volume > Notice here you only have 1 file. But actually there are 4. 3 are hidden.On your Keyboard us the show hidden files shortcut: Command+Shift+.(Period)Getting Files in the Right LocationYou will now see 3 other files. We only need the SmartClientForMac.pkg and tenantcfg.plist files.Next, Go to Finder > Go > Go to Folder (Shift+Command+G)Enter 'private/tmp'Next create a new folder called 'uniflowclient'Which is now located in private/tmp/un

How do we configure a computer smart group to show which computers have Touch ID configured/enrolled for locking/unlock? I’ve tried ChatGPT, Gemini, and Claude to help configure a computer extension to no avail.

Has anybody figured out how to get Language Chooser to run at first boot?if I make my image from a Install OS X.app it seems to assume that since i ran that App in English that is the language I will want everybody to use, and well my customers tend to be Global. I can make it run, but it runs on top of setup assistant and well its ugly and can be problematic if people start clicking on setup assistant before language chooser appears. Any ideas would be greatly appreciated.

Hi,with MacOS 26 Tahoe Apple introduced the new Simplified Setup for Platform Single Sign-On. Both Jamf Pro and Jamf School support this new feature in theory, but I was not able to get it working with Jamf School using Microsoft Entra.Jamf School support says that it should just simply work, but both Jamf and Microsoft say that it is not yet supported (see Jamf and Microsoft).Has anybody been successful?

I am testing Connect 2.45 and have had a popup appear on the Login Screen.Its a really "Helpful" Popup. All it says is SecurityAgentHelper wants to make changes, and it asks for an Administrator username and password. None of my users are Administrators, so they will not be able to fill this in.Is this a bug? Is there a way to fix it so that it does not pop up? What process is it that wants this access? Thanks Paul  

Hello- Let me start by saying that I am unfamiliar with VMs. We are a 1:1 Apple School. One of our HS student’s is taking a cybersecurity class online and has requested I install Virtual Box on their MacBook, along with Ubuntu. What sort of security, privacy issues am I looking at here? We have JAMF Safe installed on all our computers. Will they be able to skirt our filters?

I wanted to see what are the options for example a user losing their password login and on the admin side resetting it. I’m aware there is FileVault and giving a recovery key but they messes up specific keychains and some other settings (portnox). I’d like to see if there is a way an admin can assist without that option. I’m planning to do a writeup after suggestions here and have documentation steps for a user.   

I just found out that Pre-stage Enrollment Customization Panes do not work at all with Return to Service.  How are people getting authenticated users with SSO (Cloud IDP with Entra is already setup with the connector as is Jamf Account), which translates to SSO on the device itself, also working with automatically assigned Prestage Enrollment and Return to Service?  Are there good resources for best practices?  I've found the documentation is lacking and Jamf 100 classes are basic. Support has mentioned Jamf Setup but that looks like it requires Shared iPads and I’d like to avoid those and we’re 1:1 with thousands of devices already.  I see mention of Microsoft Authenticator with the SSO App Extension - I have this set up in Jamf School in our current implementation already but I don’t see how this works in Jamf Pro without the Azure webclip login if I can’t use a Customization Pane with Return to Service - the latter being one of the primary reasons for the move.  Thanks!

We are using a PPPC profile to allow the Users to set the screensharing option by themselves. Until 26.01 it worked fine, but with 26.1 Beta the option is locked and marked as this option is set by your administrator. In Jamf itself we are only able to set the option to deny or allow the user to configure. Where we have set allow. If we remove the profile, the user needs an admin to set this option, but at least it is possible to set. Anyone experiencing the same? I already gave feedback to Apple about it.

I’ve been running a script in our labs for the last couple of years to do macOS updates after caching the installer onto devices, the script is this:/usr/bin/su -l ladmin -c "echo ADMINPASSWORD | /Applications/Install\ macOS\ Sequoia.app/Contents/Resources/startosinstall --nointeraction --agreetolicense --forcequitapps --user ADMINACCOUNT --stdinpass"This has worked perfectly fine, and continues to work on our iMacs and Mac Minis, but when I’ve tried to update our MacBooks from Sonoma to Sequoia I’m being met with this bizarre message:Result of command:Error: You must be root to do this…I don’t understand this at all, because as far as I was aware everything the Jamf binary does is already run as root. Is anybody able to shed any light as to why this is failing please?Much thanks!

Hi,I have had some issues with Jamf Pro 10.48 and had to revert back to 10.47. Unfortunately I am now stuck at the welcome screen at the welcomescreen at "Analyzing webhook_display_fields". I let it sit there for half an hour but it does not seem to do anything. When I try to restart anything it just breaks the database and I have to restore again.Has anyone had this issue and can tell me how to get out of this?Kind regardsAndreas Baumeister 

I (like others) use a smart group for students which lists devices that have “Apps Not In the App Catalog Are Installed”, in case some talented student is somehow able to download or sideload apps we don’t allow. I then use a configuration profile to hide all apps except those they downloaded/sideloaded, making their device near useless until they remove the offending app.Unfortunately with the iPadOS 26 update, Jamf Pro reports all the iPad default apps (camera, contacts, calendar, etc.) in the installed apps report. As these are default and can not be purchased through the app store, there is no way to add them to the app cataloge. So now every device that updates to iPadOS 26 will be considered to have unnauthorized apps on them. Not sure if this is a bug that Jamf will be able to fix, or if there is another work around to this.

Jamf School currently assigns users and devices based on the following premises:Each user is assigned a username, which Jamf School treats as a unique identifier. Devices are linked to users via this username.However, there is a design flaw in the current implementation:It is possible to create new users with an already existing username, either manually or via CSV import. Jamf School does not issue a warning or automatically adjust the username (e.g., by appending a number). The original user is silently deleted, and a new user with the same username is created. All devices previously assigned to the original user are now assigned to the new user. This behavior occurs across the entire Jamf School instance, including across different locations.Jamf School should enforce globally unique usernames across all locations.Since location managers can only view users within their own location, they cannot verify whether a username already exists elsewhere.Therefore, Jamf should implement a ce

Today we are releasing a maintenance version of Jamf Pro; highlights include: Platform SSO Reporting Functionality for the Jamf Management FrameworkJamf Conditional Access.app, which is part of the Jamf management framework installed on enrolled computers and used for device compliance with Microsoft Entra, can now report on Microsoft Entra ID Platform SSO registration status and provide additional information about the registration state, including device ID and user UPN. Resolved IssuesJamf Pro Server: Security IssuesJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI141347] Fixed: A known vulnerability in a third-party library (CVE-2025-41249). [PI141349] Fixed: A known vulnerability in a third-party library (CVE-2025-41248). [PI141856] Fixed: A cross-site scripting (XSS) issue. [PI141857] Fixed: A cross-site scripting (XSS) issue.Jamf Pro Server[PI120484] Fixed: Jamf Pro's PreStage enrollment displays iOS 17.5 as an available minimum OS ver

We removed JAMF from a laptop but it failed to remove the MDM profile. Now, without JAMF on the machine, what is the best way to remove the profile?

Hello,We manage iPads in Jamf Pro and i have a question if its even possible to transform a native app like Files or Preview into managed app.By default native apps like Files or Preview are considered as unamanaged application even though a device is managed by Jamf Pro.Since we have a restriction “Documents from managed sources open in unmanaged destinations” se to “Restricted” due to possible data leaks there is no option to work with managed files in app like Files or Preview, that’s a real shame.Due to this behaviour we have to just rely on 3rd party apps like OneDrive or Adobe Acrobat Reader which we can make managed because the are installed via VPP.Is there any option to use native apps for managed documes even with the restriction turned-on? So make a native app mamaged? 

I just set up a new iPad for a teacher and after enrolment all apps that should be deployed are marked as Waiting for Licenses despite having hundreds available. Things I've tried to resolve: Restart iPad Refresh Apple VPP token Re-apply profiles Re-apply apps Reset iPad and re-enrol   Nothing works. Still stuck on "Waiting for Licenses". Does anyone have any ideas about what I should do to resolve this?

Issue:Jamf Pro / Jamf Protect CIS Level 2 profile is blocking AirDrop on my MacBook.Profile:Sequoia_cis_lvl2-security.firewall Firewall: Enabled (incoming connections restricted) Stealth Mode: Enabled (ICMP responses blocked) Problem:With this profile active, AirDrop detects my MacBook but fails to connect. The firewall blocks incoming connections needed for transfers.Request:Looking for a way to allow AirDrop while keeping the CIS Level 2 firewall policy in place — ideally via a Jamf exemption or configuration tweak that preserves compliance.