I updated our Apple TV fleet to tvOS 27 last over a week ago only to get some complaints about audio quality being “staticky” when casting sound through Airplay.  After much troubleshooting, I discovered it was due to our Airplay security being set to “On WiFi”.  If I set it to “Everyone”, the sound quality improves but Bluetooth discovery gets enabled which is a concern for us as kids were scaring teachers by blasting music when they were alone in the room.Besides awaiting a fix from Apple,  how does anyone else handle Airplay security?  Does everyone just set it to “Everyone”? 

On Aug 18th, I changed over to the SSO integration in Jamf Pro Cloud. I have always had my SMTP server settings configured for email notifications on Smart Device Group Membership changes. I no longer receive those emails even though the box is still checked to do so. In the SMTP settings in Jamf Pro, I can send a test message and I DO receive that but just not any of the membership change emails that I want to. Is this a known issue or is there something I am missing? Any and all help will be appreciated. 

With Apple recently expanding access to the ABM/ASM API, I set out to recreate the GSX experience. By leveraging Jamf’s new MCP feature, Claude Code, and MUT, I believe I’ve come very close. Additional details are outlined below.Please visit the following Github repo for the latest version of Warranty Wrangler: https://github.com/brndnwds6/Warranty-Wrangler/tree/main Warranty Wrangler — Setup & Usage GuideThis guide walks through everything needed to run warranty_wrangler.zsh, a script that pulls warranty and AppleCare+ coverage data from Apple Business Manager (ABM) or Apple School Manager (ASM) and produces CSV files ready for import into the Mass Update Tool (MUT).PrerequisitesA Mac running macOS Administrator access to Apple Business Manager or Apple School Manager jq installed — if you don't have it, install it with Homebrew: brew install jq openssl, curl, and xxd — all included with macOS by defaultStep 1 — Create a Working DirectoryCreate a dedicated folder to store the scr

For those that have printers to manage, thought I’d pass along that Jamf Printer Manager now supports Jamf School. In short the app will read locally installed printers and create a profile (printer payload) and package to upload into Jamf School. Documentation is available here.Thoughts/suggestions around making the app more useful are welcome.

I’ve noticed that I can’t send any more commands from Jamf Pro to devices after the iPadOS 27 update. It is requiring me a manual restart of the device in order for pending commands to go through. Is anyone else seeing this or is it just a new fluke?

I need some help and have a question regarding how this works. I’ve just started deploying software update settings via DDM in my Jamf Pro production instance. I currently want to deploy four different blueprints—similar to the configuration profiles I used previously. I noticed that the MDM profile contains multiple entries for device declarations related to software updates, and settings are enabled there that I only actually configured in one of the blueprints. For example, I want to disable “Background Security Improvement removal”; I have explicitly disabled this in one blueprint, yet the setting appears as allowed in the other entries within the MDM profile. Can anyone shed some light on this? Two blueprints are visible in my screenshots. In one, the removal of “Background Security Improvement” is prohibited, while in the other, it is not set at all.  

Hi,Pretty new to Jamf and Mac MDM but seem to have the handle on the majority of stuff. I’m having a single issue with the users enrolling the devices into PSSO during the simplified set-up. I am pretty certain it’s a Conditional access policy we have set within our tenant that blocks access to any cloud resources from Uncompliant devices. The guidelines suggest - “The User Registration app for Device Compliance created when you connected Jamf Pro to Intune must be added as an exclusion in any policy that may prevent users from registering their devices.”And from the logs I can see this is the exact application that is getting blocked on the policy.The problem, even if I add the exception for this application into this conditional access policy it will still get blocked.If I add the user to an Exception group, the device enrols perfectly fine. Not sure if anyone else has had a similar issue? 

Hello!  About a month ago, we started receiving messages from a few of our users that when they try to go to "Users & Groups" in System Preferences to change their password, they see a message saying "Users & Groups" settings are not available. These settings are controlled by a profile."  However, we have no profile in place that would completely lock the users out of that preference pane.  This has only happened on a handful of Macs, and we've been unable to determine a cause.  All of the machines in question are getting the same set of Configuration Profiles.  We've seen it on Macs running both macOS Sonoma and Sequoia.  The even stranger thing is that on at least one of the Macs, it just disappeared one day and the "Users and Groups" pane went back to working normally.  If anyone has an idea why this might be happening and what we can do to fix it, we'd love to hear about it.  Thank you!

Hi Jamf Pro Ninjas, I have getting this error. I have following links  https://learn.jamf.com/r/en-US/technical-articles/Deploying_the_Company_Portal_App_to_Mac_Computers No Luck→ Wipe device Twice→ deleted and recreate the profile twice → check the version(app is on latest version) and reinstall company portal Can you pleas assist me? 

It sounded quite simple, but it was not. Spend most of the day on it, with help of an AI that failed as well. Got the request to distribute 4 Office templates to our 45 users (Macbooks, Golden Gate 27.0). I used the latest Jamf Composer to make PKG’s, but somehow the install consistenly fails or runs fine, but does not install them. Using a script did not fix it. Neither the use of a DMG.Last year I did the exact same to install 26 font-files and that worked fine. Any clue what is going on?

I’m not sure if this has been reported yet, but Recon gets stuck on Locating hardware information (macOS 27.0), Gatekeeper status: App Store and identified developersThe machine I am using was upgraded to Golden Gate, not a fresh install. The software updates button is unchecked in Inventory Collection. This does not get stuck on any other OS version in my environment, seems to be a Golden Gate issue.Again, just wanted to get a post out there so a discussion can be started about it.

Hi Nation,Product Office Hours #5 - Jamf @ Jamf: How we Platform SSONext session: Thursday, 10th Sep - 9am CDT / 3pm BST / 4pm CESTSpeakers: Emily Kausalik (Dr.K), Manager, Client Platform Engineering and Adam Derrick, Sales Engineer IIIRegister here: https://jamf.it/ProductOfficeHours 🧵 Got a question? Drop it in the comments below ahead of time if you want it on our radar, though you don't have to. We'll be taking questions live on the call! Anything we don't get to, we'll follow up right here within 24 hours.See you there!

Hi, I’ve configured this Blueprint on the 14th September with a deferral of 90 days for macOS Golden Gate. I’ve only scoped macOS 15 & 26. I’ve only excluded my machine. Everything seemed fine but now today I check my dashboard and I see 2 user’s machine’s have been upgraded to 27. Why, how? I’m pretty annoyed now by this 

On Saturday, October 10, 2026, Jamf Cloud Infrastructure will be patched. During this time, you will be logged out of your Jamf Pro instance. The purpose of patching is to ensure that Jamf Cloud infrastructure and the database service are up-to-date, stable, and safe from security threats. Please see the times for our regions below. Hosted Data Region Date Start Time End Time us-gov-west-1 October 10, 2026 08:00 AM CT 12:00 PM CT

I am trying use Exhibit to create a custom background on the AppleTV’s at my workplace, which has been working great, however, I have run into a road block. I want to have a slideshow in the front office/waiting room and, a static screen on all of the other TV’s. I have been trying to make Exhibit work, but I can’t find a solution none of them seem to work, or my organisation has blocked them, I wanted to see if anyone had any ideas.

I was excited to hear at Jamf Nation Live about this criteria “Username directory service group” for smart groups.We’re already Entra ID integrated so I was hoping it would be a breeze to put into practice. Our mappings are standard setup as per the doco. The username field in Jamf populated for at least some devices but I still get 0 results when using this criteria in a Smart Group.Has anyone had any luck using this criteria for scoping or did I get my hopes up a little prematurely? 

Hi everyone,We manage approximately 330 student iPads with Jamf School and have used Time Filter-based Safari restriction profiles for a long time.During the semester, we normally restrict Safari from 7:30 PM to 8:00 AM, and this setup had previously worked reliably across almost all student devices.The issue started after our summer break.During the semester, we used our normal Safari restriction profile. When summer break began, we switched to a different Safari restriction profile with the same restriction settings but a different Time Filter schedule.We used that vacation profile for about six weeks, and when the new semester began, we switched back to the original semester Safari restriction profile that had worked reliably before.That is when the problem suddenly started.At first, some grade-level groups were showing only about 4–11% Installed during the active Time Filter window.We are now seeing several different behaviors:Some devices have recent check-ins and successfully ack

Please change the category for Collegboard.org in Jamf Radar to Education ONLY.

Hi all, I did not see anything like what I needed so I created one. Below is a script to copy image files to a users local directory. It works fine, very basic, but I'd like to combine the two if statements and work out an exit code if the source files are not present. If anyone is bored out there???? : ) #!/bin/sh #Created by Brian LaMantia 6/1/2020 #Move FIS background images from /private/tmp to the current users Uploads folder in Teams. #Run after the images are deployed to the tmp folder then displays a message to the user. #If the package fails, do not display a message. #If you make this better, post a copy for me! #get current user currentUser=$(/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }') #Check if the images package was installed sourceFiles=/private/tmp/Teams #Check if Teams uploads folder exists teamsPath=/Users/"$currentUser"/Library/Application Support/Microsoft/Teams/Backgrounds/Uploads/ #jamfhelper path jamfHelper=/Library

Hey,since the last iOS update for iPads, I've noticed that the devices are still showing up under Devices > Update even after a successful update.In the activity log, I see that "AvailableOSUpdates" is not a valid request type.I haven't found a way to solve this problem yet. I'm using Jamf School. Regards

Hi Jamf Community,I’m reaching out as a frustrated parent dealing with managed iPads at my son's school, trying to permanently block specific apps like Instagram and Snapchat via Jamf Parent.Unfortunately, I've run into a wall with several limitations and confusing UX choices in the current implementation: Incorrect App Store Categorization: Blocking the "Social Media" category in Jamf Parent does not affect Snapchat or Instagram, as Apple/developers categorize them under "Photo & Video" or "Entertainment". However, Jamf Parent doesn't offer a dedicated "Photo & Video" category filter to toggle off, nor does it allow parents to manually recategorize or target individual apps for permanent restriction. No Permanent Single-App Blocking: In Jamf Parent, restricting individual apps seems strictly tied to a timer mechanism. UX / Translation Issues ("Clear after..."): The option labeled "Clear after [X] hours" is extremely misleading. In the German localized version, it translate

I need to update Docker to the current version across the fleet.  Rather than downloading, repackaging, and then deploying via policy, I saw the Jamf App catalog has a docker entry for it. My question is if I set it up as...target group: all managed devicesInitial Deployment: Self ServiceUpdate Method: Automatically UpdateWill thatnot push to devices that don’t have it installed update automagically to devices that do or will it update devices that only installed, initially, from self service?  

Does anyone know how to get rid of this option? I'm not very techy, but my daughter keeps bypassing onto bad websites by using this option. I'm using an image off the Internet as an example but this is exactly what it looks like. Thank you 😊  

Hello everyone,We're having problems with students changing the DNS configuration to access forbidden sites.Is it possible to block the Manual DNS option in JAMF Pro? See screenshot belowThank you in advance for your help.

Had a student this week figure out that if they look at the more information of the connected Wi-Fi that they could change the Configure DNS from Automatic to Manual and then provide a new DNS IP.  Which then jailbreaks our content filter.Any suggestions on how to enforce the Automatic setting of Configure DNS? There should be no reason for any of my students or staff to need to Manually configure this.