Hello my boss wants me to help setup auto drive enrollment for our devices in my org i never done anything like this before but i’ve been doing some researchand i am confused on the whole jamf connect, we have a prestage enrollment created when computers are added to the group that will put them through the auto deployment which has been giving us issues for a while nowmy boss wants me to upload a jamf connect pkg file to the enrollment packages section on our prestage enrollment but i dont know how to do thatany help and advice on auto device enrollment within jamf would really help.

Are you doing work that excites you? Are you still learning and growing?These aren't easy questions to ask, but they're critical for a fulfilling career. The truth is, sometimes the most courageous thing you can do for your professional life is to recognize when a role or company no longer serves you.Don't be afraid to listen to that quiet voice telling you it's time for a change. It's not a sign of failure, but a sign that you've grown and are ready for the next challenge.Your career is a journey, not a prison. Have the courage to build the one you truly want.What was a sign that told you it was time to move on?Please share your experience in the comments. I am curious. 🤔

We’ve run into an incompatibility between Clever IDM that rosters/creates our Google student accounts from SIS data and Jamf cloud IDP. I am trying to fill data from Google attributes (Job Title “title”) into the “position” field within Jamf. My mappings are correct. Clever IDM writes these attributes into Google with a customType of “CleverIDM”, but Jamf only looks for entries with no customType.Example: "organizations": [ { "customType": "CleverIDM", "department": "Mathews High School", "title": "IMM1" }, { "customType": "", "title": "IMM1" } ]Any one have any options or have you ran into this before?Can Jamf use department/title where customType = "CleverIDM"?If not, could Jamf match on another attribute, such as employeeID using customType?

Anyone in here HA users?  How many of you all are using all local calls without any need for internet?What kind of cool stuffs are you doing?  I know this isn't JAMF related (per se - although you can do some pretty cool things with API and home assistant….maybe integrate things with JAMF instead of leveraging Routines?).Anyways, just curious of how many folks in here are home nerds as much as corporate nerds 😄

We continue in our efforts to streamline compliance benchmarks workflows and unify the reporting. Today, we are proud to announce two new highly demanded exports within the Compliance capability in Jamf Pro - something you have been asking for since the initial launch of Compliance in April.Auditing documentation: Holding the benchmark settings as configured by the admin, this set of documents is aimed to serve for compliance audits purposes. Those of you already using Jamf Compliance Editor or mSCP are familiar with these - now the adoc, pdf, html, and xlsx documents for each supported OS version are available right under Compliance Configuration tab in Jamf Pro. Compliance status: After enabling the computer-level compliance reporting in July, you can now export the overall compliance status, i.e. number of passing and failing computers for each rule in a benchmark, into csv file - very similar to the one produced by Compliance baselines in Jamf Protect. With this export, you can rep

Hello everyone, i did a test run for the jamf Class Assigner yesterday. After going through the steps in the documentation i got the app running in teacher and student mode.   But even though the teacher ipad is assigned to a teacher user (including managed Apple ID loged in on the Teacher device) i get "Teacher not assigned to device" displayed in Class Assigner.   i built a manual class in jamf school with a user assigned as teacher and tried importing a class from ASM with teacher and student rolls defined, same error.   Any help would be appreciated.

From @talkingmoose Many thanks again! • Regex looks for all Mac models compatible with macOS 26 Tahoe. May not be up-to-date with newly released models. https://gist.github.com/talkingmoose/3340d122ffd6b4fccb5f1319b7067f73• Regex looks for all iPhone, iPad, and Apple Watch models compatible with iOS 26, iPadOS 26, and watchOS 26. May not be up-to-date with newly released models.https://gist.github.com/talkingmoose/8626115822ca9f81463dd4e9e902ff9a

This article and many others can be found on Rich Trouton’s blog Der Flounder As part of Apple’s unveiling of Declarative Device Management (DDM) at WWDC 2023, Apple announced that DDM management included the ability to deploy MDM configuration profiles using DDM as the delivery mechanism in place of using MDM to deliver the profiles. Jamf Pro’s Blueprints leverages this capability to support device restrictions.Let’s see how this works using a device restriction configuration, using the example of setting the following Apple Intelligence management functions to false in order to block the corresponding Apple Intelligence functions on macOS:   Restriction Setting available in version Description Key Key value Default setting in macOS Allow Image Playground macOS 15.0.0 If key value is set to FALSE, prohibits the use of image generation. allowImagePlayground Boolean TRUE Allow Writing Tools

I’m wondering how others approach Macs that have become unaccounted for, lost or stolen?We have a fleet of approx 1500 - many that were purchased before any of the stuff currently involved in managing them were working for our organisation.Sometimes I’ll come across a Mac that is still checking into Jamf, but we have no record of who it belongs to and whether it was legitimatly bought-out or not.Othertimes we have Macs that have just been plain stolen.There’s another scenario on top of this where I’ll encounter Macs that check-in, so can seemingly run Policies but aren’t doing an inventory update, and won’t run Management commands. (the Wipe Computer command being one I’d find quite useful in particular)With that in mind, I put together a script to install a launch daemon that launches a script that agressively notifies the user that the device belongs to our org, and to contact our helpdesk - it blocks the screen out to the point the device becomes unusable. I am yet to deploy it thou

Hey All,We’ve been using a fleet of WiFi Only Apple TV’s as digital signage in single apple mode, we changed the configuration profile, and this appears to have disconnected all of them, while keeping them stuck in single app mode. Is there a way out of this? Kind Regards,Jarrah

Hello everyone, teachers use the Managed Apple ID but cannot download applications in the AppStore, the only apps that can be downloaded are the same as those from the selservice. Do you know a solution so that teachers managed Apple IDs have more possibilities? I use JamfPro, Thank you

Hi,I'm trying to experiment with deploying Safari web apps to other devices for an IT environment.I can create a package of a Safari web app on my personal MacBook, and repeatedly deploy the package to my personal MacBook without issue. The Safari web apps are typically installed to ~/Applications, but I can install to the system /Applications folder, or even to a place like the user desktop, and it will work. The app will also work for different users on my personal MacBook.When I install the package to another computer, there is a pop up saying that says "You can't open the application because it may be damaged or incomplete."Are Safari web apps hard locked to a device, from something like associating the web app with hardware identifiers? Could changing the web app or an associated plist with the web app via a script resolve this issue, or do web apps have to be manually created per user? Or more importantly, does anyone know if Jamf will support creation of Safari web apps via Jamf

I created this small application to make it easier to retrieve the Bundle ID of a macOS app.Simply drag a .app file onto its icon in the Dock to display the app’s unique identifier and easily copy it to the clipboard.The link below includes both the AppleScript source code and the compiled, ready-to-use application.https://www.dropbox.com/scl/fi/74iqhkbs7cd7nfhi0fsn9/Bundle-ID-Droplet.7z?rlkey=a2kldrolexvix16z6hluvjpar&st=n999z5tv&dl=0Hopefully, this can help someone.

I wanted clarification on what HTTP response status code Jamf Pro will return if I call the /api/v2/mobile-devices endpoint when I only have a Jamf Computer license, and similarly, what status code I will get if I call the /api/v1/computers-inventory endpoint when I only have a Mobile Devices license.

Hi all,we just configured Jamf Protect, and it seems that the Macs removed from Jamf Pro were not removed automatically from the list on Protect.Is there a way to automatize the offboarding, or the only solution is to remove a device manually from both?Thanks,

Hi, We have had quite a few calls into our service desk recently where users are unable to connect to known networks. Upon further investigation it appears that all known networks have disappeared from the device however the profile is showing as installed on the management profiles.    The workaround is to exclude them from the configuration profile and then re-add them which solves the issue, but this is becoming a bigger issue.   Has anyone been able to resolve?    Thanks Ashley

We have upcoming maintenance on your Jamf Pro Server. Planned RDS software updates will be performed during the times listed below. During this time, services may be briefly unavailable. Region-specific updates will be provided via StatusPage. Larger databases may see slightly longer interruptions.All times in UTCSchedule:August 22–23: Non-production (Sandbox) – All regions   August 29: Standard Hosted Servers Start Times.Hosted Data Region Time ap-southeast-2 15:00 ap-northeast-1 16:00 eu-central-1 23:00 August 30: Standard Hosted Servers Start Times. eu-west-2 00:00 us-east-2 05:00 us-west-2 08:00 September 5: Premium Hosted ServersAP-Southeast-2 19:00 - 22:00 UTC AP-Northeast-1 20:00 - 23:00 UTC September 6: Premium Hosted ServersEU-Central-1 07:00 - 10:00 UTC EU-West-2 06:00 - 09:00 UTC US-East-2 11:00 - 14:00 UTC US-West-2 14:00 - 17:00 UTC  We do not expect these upgrades to interrupt your day-to-day operations.

In the MacAdmin world, few names command the kind of respect Charles Edge does. Not just for his technical expertise, but for his relentless curiosity and generosity. After his unexpected passing in 2024, I found myself reflecting on a behavior I learned through Charles's actions. A mindset I've come to call the Edge Methodology. It's not a framework or a management technique in the traditional sense. It's a response to fear. A refusal to fake confidence in things not yet understood. And it's inspired by the way Charles lived: by digging in, learning with humility, and lifting up others in the process.  The Problem: Fear of Not Knowing At some point in our careers, many of us have worked in environments where saying "I don't know" felt like admitting defeat. Where curiosity was mistaken for incompetence, and asking questions risked being seen as unqualified.   I've definitely been there.    In those spaces, people would often bluff their way through techni

I don't know about you, but my in-person conference skills need a brush-up. For me, it's been a little over three years since my last in-person. So here are some tips I've put together with some help from a few friends. If you are turning up on Monday before dinner, check the JNUC Slack Channel for any pre-conference get-togethers Monday night. The same is true every night. You can sleep when you get back home. This may be the only chance you get to talk to these people for some time. Go to the Keynote. It's the start of the conference, and at JNUC it starts well. I know it might be hard getting out of bed after the long flight the day before but do it. In fact, get into the conference venue for breakfast and a gossip every day before the first presentation. Talk to people. Don't be afraid to talk to anyone. The "hallway" track can be a great part of the in-person experience. Ask questions. Seriously, the presenters want questions and hope all the attendees go away with

Not too long ago, I wrote a Tech Thoughts article covering some of my favorite community resources. I wrapped up that post by mentioning a couple of conferences that might be worth your time. Well, it’s time to revisit those — because conference season is upon us! This list is heavily inspired by Jamf’s very own Armin Briegel whom has a fantastic page listing conferences and resources at scriptingosx.com/conferences — and he keeps it well updated!    A Quick Look Back  My personal favorite from last year was JNUC 2024 in Nashville. It was my second time attending, and I already knew a few folks, which made the experience even better. The networking opportunities are truly the highlight. Talking to like-minded professionals and getting insights into how different companies approach challenges — sometimes in very different ways — is incredibly valuable. Also, a special shout-out to the amazing @MusicCityMac Alan West, who was so welcoming and

Death by PowerPoint started in the living room Willis H. O’Brien was a famous Hollywood special effects artist known for his pioneering work in stop-motion cinematography. While we may look at his special effects in the movie King Kong from 1933 as outdated compared to the special effects we see in contemporary movies, his work is still relevant. He gave his audience the illusion that a giant gorilla not only moved but climbed the Empire State Building, then the tallest building in the world. And he did it one frame at a time. Unlike stop-motion, though, special effects are nowhere near as tedious with today’s tools. Whereas O’Brien spent 150 hours to create one minute of animation on film, today, we have tools like Magic Move that generate animated transitions between slides in just a few seconds. Transitions and animations important for presentations. Why? A transition is a change from one slide to another. It signals a change in thought to the audience. But a good transition should

Ok, if the subject doesn't say enough, here is a little back ground. I've created a gofundme account for MacMule in hopes he will be able to attend this years JNUC. He was informed he would not be able to go to this years JNUC due to corporate issue(we all know and love those issues don't we). So for all of those of you who he has helped and those of you who use his AutoCasperNBI, he needs your help! He keeps calling me nuts for doing this, but I think as much as he has contributed to the community, we should help him. He stays up late each night(since he lives in England) to help out US mac admins from his house. He doesn't have to do this, but he does it for the love of the community, lets pay him back! MacMule's GoFundMe Page (*Note: to the jamf nation admins, if this is considered to be against the forum rules, my bad, just wanted to help out a fellow mac admin)

I need to uninstall Jamf Protect from a device running macOS 12, so I download the uninstaller and try to run it locally and also tried to push it from Jamf Pro. It fails with an error saying macOS 13 is required to run the uninstaller…..Anyone else dealt with this?Am I stuck with reimage the device? I’d rather not but will if I have to.

Hi All,  Did anyone have issues in accessing Blue Prints, from last few hours it say Error occurred ,try again later. my instance was hosted on Central Europe  

For the life of me I simply cannot get our Windows Virtual Print queues with Papercut working on MacOS (currently for us 15.6.1).I get the dreaded ‘unable to connect to printer’ error.  and then its just stuck waiting. Here is what I’m doing.I set up the printer locally using the advanced tab and add it as smb://print.domain.local/printer-queuename I select the universal “Mac Printer” driver I downloaded from Fuji Xerox site (currently v 2.6).  I do a test print. It works. But only once. It never works again. If I now add a second printer queue using the same method it doesn’t work. if I then go and delete the initial printer I added and re-add the steps I cannot print again that also doesn’t work. I’ve also added the following script in the hopes that kerberos will play nice. No joy.lpstat -p | awk '{print $2}' | while read printer; do    echo "Setting Kerberos on ${printer}"    lpadmin -p "${printer}" -o auth-info-required=negotiatedone  Has anyone else experienced this? I am at a co