I am new to the community. I have a configuration policy for AD binding. The policy has been in place for well over a year. There has been no changes to the Active Directory settings, however its giving failing messages. What's causing this?  

Hi Nation,Product Office Hours #6 - OS Readiness and BlueprintsNext session: Thursday, 17th Sep - 9am CDT / 3pm BST / 4pm CESTSpeakers: Katie English, Principal Product Manager and Mark Buffington, Senior Consulting Engineer, Apple TechnologiesRegister here: https://jamf.it/ProductOfficeHours 🧵 Got a question? Drop it in the comments below ahead of time if you want it on our radar, though you don't have to. We'll be taking questions live on the call! Anything we don't get to, we'll follow up right here within 24 hours.See you there!

Hello Jamf Nation!We’ve released Jamf Pro 11.33.0 beta. With this version we’re excited to announce OIDC-Based Single Sign-on for End Users!  For full details, check out the release notes after enrollment.How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Click “Join Community” to join the beta forum once enrolled. If you encounter an error on Jamf Nation joining the beta forum, please log into Jamf Nation and then click “Join Community” again. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks, Blueprints, and App Switcher. Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program! 

Hello fellow Jamf Admins,I would be extremely grateful if anyone has come across this App before (Hospital setting) called, “CBORD Mobile Inventory”. I am trying to add the App Config settings like I’ve done for plenty of our other Apps, but this particular App won’t give me a break. Below is a screen shot of what fields need to be filled out and the App Config I came up with and verified via AI. I am at a loss right now. The last thing we want is for our end-users to have to enter the data manually as that would be a nightmare. Any assistance would be very much appreciated. App Config I’ve tried (certain fields have been changed for obvious reasons). <dict>    <key>serverURL</key>   (<===== I have also tried “APIURL”)    <string>https://netmenu4.cbord.com/NetMenuAPI</string>    <key>appClientId</key>    <string>xxxxxddddfffcxxxxxxxx</string>    <key>region</key>    <string>us-east-1</string>    <key&gt

Those who know, really know. And they’re excited. In less than a week, Apple admins from around the globe will descend on Kansas City for one of the most-anticipated events of the year. JNUC 2026…we’re coming…and we have exciting additions. Let’s get into it. This year, you’ll experience an entirely new Jamf Nation booth. While I won’t give away the details, I’ll leave you with a riddle:  You've typed my name a thousand times to install something else.This time, say it out loud — and someone hands you a cup.Come back all three days. I'll have something new for you each time.No install required. Excited? We are. Lots of details (big and small) went into this year’s booth, so ensure it’s on your agenda. And don’t worry. Even if you forget, we’ll be hard to miss. And in true JNUC fashion, community will fill the halls. Friends, new and old, are waiting to meet you. But if talking to random strangers isn’t your thing, just remember:They’re there for the same reasons as you. Everyone wants

Today we are releasing a maintenance version of Jamf Pro; highlights include:Changes and ImprovementsJamf Pro 11.32.1 includes Tomcat 10.1.59. Jamf Remote Assist now includes compatibility for computers with macOS 27 or later.Resolved IssuesJamf Pro Server: Security IssuesJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI205872] Fixed: A known vulnerability in a third-party library (CVE-2026-56822, CVE-2026-55831,CVE-2026-59901). [PI222752] Fixed: A known vulnerability in a third-party library (CVE-2026-55858). [PI223203] Fixed: A known vulnerability in a third-party library (CVE-2026-73089). [PI-1654] [PI223696] Fixed: A known vulnerability in a third-party library (CVE-2026-41003).Jamf Pro Server[PI-1519] Fixed: Jamf Pro returns a 409 error when using referential smart groups with the advanced mobile device searches API endpoint. [PI-1580] Fixed: The device compliance workflow with Entra ID fails to register devices if an interactive sign-in

Hello,I’m looking at deploying Logic Pro to shared/classroom Macs using Jamf Pro and I’m trying to work out the best way to manage the Logic Pro Sound Library for multiple users.My understanding is that newer versions of Logic Pro use a single Logic Pro Library.bundle, which can be relocated to a shared location such as /Users/Shared/ and accessed by multiple macOS users.What I’m trying to establish is:Is the Sound Library installed on a per-user basis by default? If the full Sound Library is downloaded by one user, can other local users access those sounds without downloading them again? What is the recommended way to deploy/configure a shared Logic Pro Sound Library using Jamf Pro? Can the Sound Library download/installation be automated through a Jamf policy or script? Has anyone successfully deployed this configuration to shared Macs in an education environment? If the Logic Pro Library.bundle is moved to /Users/Shared/ can I default Logic Pro to look at this directory for new user

Hi there.Recently, I have been experiencing issues with system permissions on macOS when using Cisco AnyConnect VPN.Users are prompted to go to System Settings, then to the Privacy & Security settings. In many cases, they manage to find the required settings, but some users are unable to do so.I have pushed a Configuration Profile, but it seems that it is no longer working.This issue occurs with macOS 26 and Cisco AnyConnect client version 5.1.17.Do you think there might be a solution outside of Blueprint? I don't have a Jamf Cloud instance; I have an on-premises Jamf instance, and I haven't enabled SSO yet.Thank you. 

I'm creating an extension attribute, which I want to use as a criterion for a smart computer group. I want the group to contain only those for whom the extension attribute has a particular value.That is, if my criterion is "[name of extension attribute] [is not] [value I'm interested in]", then members of the group will include those that have a different value from the one I'm interested in, which is right, BUT ALSO all computers that don't yet have the extension attribute populated.For example, suppose my extension attribute is called ApplicationBlahInstalled, and based on the actions of a script, it will populate the extension attribute as either "Not Installed" or some data indicating where and how it's installed. I will therefore have 3 different possible states:1. ApplicationBlahInstalled is populated, and has the value "Not Installed"2. ApplicationBlahInstalled is populated, and has some other value3. ApplicationBlahInstalled is not yet populatedI need to detect machines that ar

We have a tech that needs setup to use Jamf Nation with our Company’s tenant. Please let me know if you require any additional information or if there is another way to attach him to the tenant.  Thanks,Nick Lumpkins

I have created a configuration profile in Jamf Pro for MacBooks that we are deploying as part of a prison education program. Because of the environment, these devices are locked down fairly tightly with several restrictions in place.We have deployed Swift Playgrounds to all of the MacBooks through Jamf, and the application is installing successfully and appearing in the Applications folder. However, when I go to Restrictions > Applications > Allow Apps within the configuration profile, Swift Playgrounds does not appear as an available application to select.Since the application was downloaded through Jamf and successfully pushed to the devices, I am not sure why it is not being recognized in the Allow Apps list.Do you have any suggestions on what I may be missing or how I can get Swift Playgrounds to appear as an available application in the restriction settings?Any advice would be greatly appreciated.

We have been testing 27 beta with every version and I'm not sure why so late in the beta cycle during beta 5 apple decided to add new pop ups. Currently I do not see a way to manage these.  

I recently had a test MacBook Air on which I had deployed Jamf Protect and also used Jamf Compliance Editor to generate CIS Level 1 controls for macOS Sonoma - all via Jamf Pro.Jamf Pro, Jamf Protect and the CIS Level 1 controls had all been successfully deployed and were operating on this laptop.As mentioned in the subject, the laptop battery ended up going flat. I therefore had plugin it in for a while to get enough charge to turn it on. Nothing unusual so far. The laptop as a result had also had its clock reset, again nothing unusual so far.When booted the Mac did not do a successful NTP sync to reset the clock correctly. This could be argued as being unusual. I am presuming this is because it was trying to do a secure e.g. SSL connection and because the clock was years incorrect that failed - certainly the web browser failed to load websites because of this and also the Jamf Pro agent was not able to sync to the Jamf Pro server for the same reason.Now where it gets more interesting

Let me bring you back to a version of me circa 2012–2015.I had been laid off from my job in a non-technical field. I wasn't in tech or IT at all, but I was a tech hobbyist. I'm sitting at home in my apartment looking at social media—what we would now call doomscrolling—and I come across a post looking for people interested in starting their own business fixing iPhones and iPads in their area.The hobbyist in me was very interested.That eventually led to me starting a small IT company where my bread and butter was fixing broken iPhone and iPad screens.My wife and I had just gotten married, and we moved out to the San Francisco Bay Area. Being in the heart of Silicon Valley, there was no shortage of broken iPhones and iPads (and eventually Samsung devices) to fix. But I could see a future where fixing five to eight phones a day would get tedious, and more importantly, wouldn't really scale financially.So I started the multi-year process of shutting down my company and focusing my career o

Good morning All,Been trying to get my new MAC Neo’s (one for now) to authenticate at the machine level to WIFI so we can control them.  We’re attempting to use the SSO extension, I actually have all of that setup.  But my issue is that I don’t have WIFI at the login screen on the Mac.  For the life of me I can’t figure out what I am missing or what I have configured wrong.  It all appears right.  The cert itself is deploying, and it does actually work to connect to WIFI and the SSID I have running.  But the moment I log out as the user I lose WIFI and no one else can sign in.  The Neo’s are going to be for a shared environment.  That's why I want WIFI to work at that level.  Any suggestions?

Hi! I need to create a profile that only allows students to access Google Classroom.  This will require also having some web access to finish the login process; has anyone else done this? 

For over 16 years, Apple admins have gathered at the Jamf Nation User Conference (JNUC) to learn, connect and discover better ways to manage and secure Apple devices. In its tenth year, the JNUC Diversity Sponsorship awards 10 individuals a full conference registration, a meet-and-greet with Jamf leaders, a networking happy hour and a $500 stipend to help cover expenses. We're looking for passionate people eager to learn and bring fresh perspectives to the tightest community in high tech.Applications close at 5 p.m. CST on May 1, 2026. Apply now!Read further to get all the details about Scooter and Alan's first-hand experience as scholarship recipients. SCOOTER’S STORYMy name is Scooter Kohler and I currently work at Alhambra ESD in Phoenix, Az. My journey with Apple hardware didn't start in a server room; it started in my daily life. I’ve been a MacBook user for the entirety of my adult life, drawn in by the clean hardware and stayed for the intuitive nature of the software. When the

I just wanted to share some feedback on setting up OIDC SSO with Jumpcloud. While the documentation was pretty good I do find the formatting quite congested, more spacing between steps would be good and not everything I needed wasn’t in the documentation such as the issuer URL which I used Gemini for the answer (https://oauth.id.jumpcloud.com/) if anyone is wanting to know.Other than that it’s all working and I can now get onto setting up blueprints for my devices. https://learn.jamf.com/r/en-US/jamf-account-documentation/JumpCloud 

Hi,i ran into a deadend, where i need your help =) We are currently trying to setup the content cache with parent-child config.A simple ping and netcat are succeeding.I have declared the settings as followed for example:parent: 172.10.10.1child: 20.20.20.1 While reloadSettings it is showing my parent as reloaded. But with “AssetCacheManagerUtil status”i get the output:Parent: (none)i actually cannot get it running.  

Is there a way to disable Notification Center completely? Or at least remove the "apps" in NC without students being able to add it back? We use LanSchool; Our math teachers are at a disadvantage since disabling "calculator.app" doesn't disable it in the NC. Restricting "calculator.app" via Jamf doesn't block it in NC, either. We're on macOS High Sierra, and the only thing I have found is the command line below (in quotes). However, I've found that due to Apple's BRILLIANT System Integrity Protection feature, you can't do this. You CAN turn SIP off, which would allow me to run the NC disable command, but can only be done in recovery mode via terminal; which of course, can't be done via Jamf. launchctl unload -w /System/Library/LaunchAgents/com.apple.notificationcenterui.plist killall NotificationCenter Any help would be really appreciated. Link on disabling, but doesn't work with High Sierra: https://gist.github.com/mikermcneil/10005651

Hi,I have an issue with Beyond Trust Bomgar client on Macs Managed with my Jamf Pro instance.I’ve made a Configuration Profile to allow Bomgar in the privacy settings, my test Mac got the rule but when i want to remote connect to my test Mac, i have to autorise 3 options.I saw many topic about this, but even if i made the same rule, it’s not working.If anyone has an idea? Thank you 

Do we need to re-enroll all of our computers to make users MDM capable? 

Today we released Jamf Connect 3.13.0; highlights include:  Changes and ImprovementsCompatibility with macOS 27 Golden Gate To reduce excessive messaging in log files, the logs for Jamf Connect no longer include Wi-Fi interface is undefined and Couldn't retrieve hint of key 'pref.XYZ': -60005 statements. To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Connect.Product DocumentationFor additional information on what's included in this release, review the release notes via the Jamf Learning Hub.

We have a few iMacs running Sequoia 15.5 and Jamf Connect that are going to black screens after you log in. Both local user accounts and IdP accounts are affected, but I can see the user folder is being created when we log in against our IdP, I get the account creation message but it just hangs on the black screen. Local admin account is having the same problem. I’ve tried uninstalling, restarting, and reinstalling Jamf Connect, but the problem persists. Uninstalling and logging in as a local admin user causes a beach ball to spin, but it sits there and doesn’t not progress. I’ve checked the config profiles and license and they’re all valid, and this isn’t happening fleet wide, just randomly.if I create a new user through Jamf, the user will create, but I can’t log into that account, it immediately dumps me back to the JC login window without any feedback. I can see the new user’s account by running dscl . -list /Users UniqueID but it still hangs. Resetting authchanger doesn’t help eit

Can someone help me how to block copilot app record option for corporate ios devices, i tried adding xml dictation on device apps> app configuration to block but did not worked