Hello,We have an LDAP server (Active Directory) configured on our JSS.We will move to Azure AD.For this, we have configured "Cloud Identity Providers" to integrate with our Azure AD.Everything seems ok with tests. We can query for groups, users and get "true" for membershipWe are trying to scope and limit policies (Self Service) to group memberships from AzureAD (via Cloud Identity Provider). I can search for the group and add it to the Limitations section of the policies.But when I try to test the policies on computers, the policies are not available when users connect to Self Service using the Azure AD accounts in the target groups.When we try with Active Directory groups, that works well but not with Azure AD groups.Do you know if this is normal? Can't scopes with Azure AD groups?We have Jamf Cloud 10.33.Thank you for your help

Self Service + with JAMF 11.18 adds a menu bar icon by default with no way to natively disable it from self-service. Does anyone have any menu bar techniques to remove icons that do not involve using third party apps? Thank you in advance  

This.  So much this.  Now if we could get granulated details of impact or history into the jamf app catalog for things such as “failures” or “unsupported”….Anyways, this is a step in the right direction for sure!

Is any one else having issues logging into the JNUC app? Even when I select “Forgot Password” I don’t receive an email to change it. 

Hello,I have a brand new instance of JAMF Pro, about a month old so nothing is expired. I have about 80 iPads and when I send a remote command it sits in the pending status until someone wakes the iPad. This is very inconvenient because it slows down work flows in the morning and causes Apps/OS to update during their work time. I have force app updates on and it checks every day at 4:00AM EST, but it never actually updates at that time.Is there any solution to this?

I am attempting to run npm installs via a script from self service. However there are nothing but errors, these installs work fine if run from terminal.Have tried the following:su -l $currentuser -c npm install aws-cdk-lib su $currentuser -c npm install aws-cdk-lib sudo -H -iu $currentuser npm install aws-cdk-libThese all return an error of "Script result: zsh:1: command not found: npm"Picking apart a brew install script I have, I noticed it referenced an exec file for the "brew" portion of the install command located in the /opt/homebrew/bin/brew folder. There is no such npm folder, so I had to improvise and found a similarly named exec file.Trying to replicate this I created the following:npm=/Users/${currentuser}/.nvm/versions/node/v21.1.0/lib/node_modules/npm/bin/npm cd ~ sudo -H -iu ${currentuser} ${npm} install aws-cdk-libThis returns the most educated error of "Script result: Could not determine Node.js install directory"I feel like I'm getting closer, but am hitting a wall

Hey folks,    I'm having trouble allowing users to use ChatGPT. We allow Apple Intelligence on all machines, and so have all the allow buttons ticked in the Restrictions profile, aside from 'Allow integration with external intelligence services (macOS 15.2 or later, supervised)'.   I've removed a few test machines from the scope of the standard config profile, and duplicated the Restrictions Config profile, and then only included a few test machines, and this time allowed integration with external intelligence services (macOS 15.2 or later, supervised). The initial ChatGPT entry is fine:   but I'm seeing a strange blue box that almost looks like you could press it.     If you try to Use ChatGPT with an account, it doesn't allow that too (last screen shot).   Has anybody else experienced this?

In our Jamf Pro integration, we use `GET /v1/computers-inventory` and `GET /v1/computers-inventory/{id}`. What’s new in the v2 version of those endpoints? Is migrating to the new version a matter of changing the number or is there anything extra that I need to take care of?I wasn’t able to spot any differences when consulting the API reference or the changelog. https://developer.jamf.com/jamf-pro/reference/get_v1-computers-inventory https://developer.jamf.com/jamf-pro/reference/get_v2-computers-inventory https://developer.jamf.com/jamf-pro/changelog/11200-changes https://developer.jamf.com/jamf-pro/changelog/11200-deprecations https://developer.jamf.com/jamf-pro/changelog/11200-additions

My Microsoft Tenant has started warning me to update my Webhooks URLs, the new URLs being longer (going past 255 characters, in case that’s a common limit). As a result, a couple of my workflows have stopped working (on the Microsoft side they’re not being triggered). Anyone know of any solutions, I’d rather not sign up for any risky url-shortening services.

Hey All,Running into an issue, I assume it’s simple, but I’m blanking as to what I am doing wrong. #!/bin/zsh --no-rcsclient_id="REMOVED"client_secret="REMOVED"url="https://REMOVED"##Gets Access TokengetAccessToken() { response=$(curl --silent --location --request POST "${url}/api/oauth/token" \ --header "Content-Type: application/x-www-form-urlencoded" \ --data-urlencode "client_id=${client_id}" \ --data-urlencode "grant_type=client_credentials" \ --data-urlencode "client_secret=${client_secret}") access_token=$(echo "$response" | plutil -extract access_token raw -) token_expires_in=$(echo "$response" | plutil -extract expires_in raw -) token_expiration_epoch=$(($current_epoch + $token_expires_in - 1))}checkTokenExpiration() { current_epoch=$(date +%s) if [[ token_expiration_epoch -ge current_epoch ]] then echo "Token valid until the following epoch time: " "$token_expiration_epoch" else echo "No valid token available, getting new token" getAccessToken fi}# I run the function h

Hi there, I have a strange issue with our office printer. The *.ppd file is not pushed to the devices when the printer is installed. I have followed this guide https://hcsonline.com/images/PDFs/Jamf_Printers.pdf but also used the Jamf Printer Tool to check if I am doing something wrong.  Here is the point where I am stuck:the path to the PPD is correctly created on the Macs but empty first I thought it is related to a wrong path (if you install locally the pkg, the path is  /private/etc/ppd/RICOH_IM_C3000_PS.ppd and when uploading the *.ppd in Computer Management > Printers , the path is /Library/Printers/PPDs/Contents/Resources/RICOH_IM_C3000_PS.ppd. This is also the path in the linked documentation above. Therefore I assume, it should also be used Worth to mention, the printer driver comes as DMG https://support.ricoh.com/bb/pub_e/dr_ut_e/0001343/0001343934/V11300/Ricoh_IM_C3000_C3500_C4500_LIO_1.13.0.0.dmg and I just mounted the DMG and took the *.pkg from it. I do not have to to

Everyone loves good swag...and it means even more if it stands for something!Here’s some exciting news… For a limited time, Jamf’s Employee Resource Groups (ERGs) are thrilled to share special JNUC merch. And yes, it’s more than just a cool design. All proceeds from the purchase of these items goes directly to Food Bank of the Rockies. That’s what we call Merch that Matters! Head on over to the Threads for Good site to claim yours today! The store is open now through October 12, but be sure to purchase your swag before September 12 to receive it in time to wear proudly for JNUC (and beyond!).Link: Threads for Good | JNUC 2025   

We have a set of scripts that keep all devices CIS compliant. On Catalina this snippet ensured the bluetooth menu was visible. #!/bin/bash #CIS 2.1.3 enable bluetooth menu bar if [[ "$loggedInUser" != "root" ]] && [[ "$loggedInUID" -ne 0 ]]; then btMenuBar="$(defaults read /Users/"$loggedInUser"/Library/Preferences/com.apple.systemuiserver menuExtras | grep -c Bluetooth.menu)" if [ "$btMenuBar" = "0" ]; then sudo -u $loggedInUser open "/System/Library/CoreServices/Menu Extras/Bluetooth.menu" fi fi Post Big Sur upgrade the /System/Library/CoreServices/Menu Extras/Bluetooth.menu file no longer exists and although I do see a bluetooth menu item on my screen, I can not for the life of me figure out how to open it from the command line. Any suggestions?

Hi,I want to migrate my on prem installation of Jamf Pro to a clustered environment. However I cannot find many resources about that topic. I could only find this Video on the training catalogue: https://trainingcatalog.jamf.com/cluster-jamf-pro-instances/251345Is there any written documentation on the topic? Or something made by the community?Kind regards

Has anyone had experience with a privilege management solution called "Admin By Request?" If so, how has it worked for you? I am also wondering if it's necessary to create config profiles for approving FDA and its system extension. (I generally create two config profiles for applications that require them: one for PPPC, and one for the system extension. I did create the profiles for ABR, but I don't want to deploy them if they aren't necessary.)

iOS 26 and macOS 26 is set for Monday, September 15.• https://www.engadget.com/mobile/smartphones/ios-26-ipados-26-watchos-26-and-macos-26-will-be-released-on-september-15-182024821.html

With the new operating system going live today, and the great work of mSCP community, you can rely on uninterrupted compliance of your fleet from the very beginning. All you need to do is navigate into your existing benchmark and open the Benchmark rules where you review the changes coming with macOS 26. Then save the draft, deploy the benchmark - and it's done! New smart groups covering Tahoe will be created and objects will be scoped to them. This covers also Macbooks that get updated at any time after the release. Check the Rules report tab to see the compliance status!For any newly created benchmark, the support is just there.Let us know how the new OS version works for you! 

Hello everyone,I’m having trouble configuring Microsoft AutoUpdate (MAU). I created a test profile, but the timer isn’t appearing. I suspect there might be an error in my configuration.Here are the details:Preference Domain: com.microsoft.autoupdate2<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"> <dict> <key>AcknowledgedDataCollectionPolicy</key> <string>RequiredDataOnly</string> <key>ChannelName</key> <string>Current</string> <key>DisableInsiderCheckbox</key> <true/> <key>EnableCheckForUpdatesButton</key> <false/> <key>HowToCheck</key> <string>AutomaticDownload</string> <key>IgnoreUIOpenAfterInstall</key> <true/> <key>UpdateChe

Hello Jamf Nation, I have not updated Jamf connect on my clients since 2.4.0, If I were to update now with the jump to 3.3.0 is it OK to make the jump, or should I step up versions.  I have not had a bunch of time to read through the release notes of each.A quick summary would be great. Thanks stiv

Hi Guys! Is there a simple, and effective way to change a hostname of a joined Mac via Jamf? We have a little bit too much "David's MacBook Air" going on :)

Hello all,  It looks like Private Browsing is no longer blocked by the Content Filtering Configuration Profile for iPads after the newest iOS update. Has anyone else run into this issue or does anyone know a work around to block Private Browsing on iPads through a different configuration?  Thanks!

• Combining Apple’s PSSO and Jamf Connect for Secure Mac Management• https://www.patrickphang.nl/index.php/2025/08/27/combining-apples-psso-and-jamf-connect-for-secure-mac-management/

Okay so I’m going to lead this off with a few things - we’ve been diving into the how on this product since we came across our first issue on Monday of this week and let me tell you, it wasn’t an easy find (thanks for my cohort for finding the issue).IF you’ve had SSP show up with no account management appearing (like seriously - disappeared, gone) and the Jamf Connect menubar gone…..and you have kerberos configured….then we are kin.What my cohort found is that in /Users/$currentUser/Library/Preferences/com.jamf.connect.state.plist, there’s a setting called PasswordExpirationRemainingDays.  IF this number is negative (e.g.: wasn’t able to check against AD to poll a new ticket), then Jamf Connect menubar will crash and the account management pieces in SSP will fail to load.Manually setting this to a positive number will cause another ldap poll to get the corrected information and all is better (until it happens again).  Seems to be a product issue in SSP/Jamf Connect, but I haven’t seen

What is the distinction between Simple and Multiple password types in the inventory field?

Hi All, so i’ve had an issue for a few months, I’ve been trying to find the bash command line to turn on accessibility keyboard, so looking around in ventura this was easy to do and now the location has now changed, main thing is i don’t where. As i work in a school some teachers want on screen keyboard when they connect to the white boards, so i wanted to add an option in self service to deploy a shortcut to the keyboard