I have been requested to make two sided black and white the default print option for our Xerox Printer. I was able to accomplish this and add some handy presets for the user to select other options like 1 sided and color. What I have found is unless I open the Show Presets... option and check Reset Presets Menu to "Default Settings" After Printing... Print jobs will use the last preset selected by the user... so if they selected color... the next job will print color as well. Selecting the option above does just what it says and reverts to the default after each print job. My question is... is there a plist or a command line flag to check this box? I did not see anything in the plist file for the printer or in lpadmin. Any assitance would be greatly appreciated.

As part of Apple’s unveiling of Declarative Device Management (DDM) at WWDC 2023, Apple announced that DDM management included the ability to deploy MDM configuration profiles using DDM as the delivery mechanism in place of using MDM to deliver the profiles. Jamf Pro’s Blueprints leverages this capability to support device restrictions. Let’s see how this works using a device restriction configuration, using the example of setting the following Apple Intelligence management functions to false in order to block the corresponding Apple Intelligence functions on macOS:For more details, please see below the jump.As of Jamf Pro 11.1

 Even when Erase All Content and Settings is restricted, the option “Erase This iPad” still appears during sign out.Will it be possible to restrict this as well?The same behavior occurs even when using a Managed Apple Account...

Your enrollment Profile MAY have expired. Try loading a new enrollment profile. I am not sure what to do with this. It is happening immediately following a reset and check in with Jamf. Any assistance is appreciated. 

​We currently have our students set an app age restriction of 12+ in our MDM  Today we came across an app, Grammarly Keyboard, that is now 13+ .  That causes the app to install and then immediately remove.   Our only other option in the MDM is 17+ Anyone else running into this issue? Any other apps in the 13+ category?

🎉 Happy New Year! 🥳 It is traditional to use the beginning of the year to make plans. Conferences and the associated travel require quite a bit of planning. I keep an overview of the larger conferences in the Mac and wider Apple management and security community on my website, but thought a bit of a more detailed overview might be useful.Whether you want to "just" attend or even hand in a proposal for a talk, here is a list of conferences this year with links to their websites. MacAD.UK: Brighton, UK, April 21–22This conference in Brighton on the British coast, south of London, has been bringing together Apple management professionals from the United Kingdom and all over Europe for several years. This year, they are moving to a new venue

Hey guys,we recently started to upgrade our deployed devices to macOS Tahoe. Since then many of our users have reported, that they can no longer take screenshots. The sound comes on but no screenshot was saved. After some research I found the culprit. For some reason the screen capture app thinks it has to save the screenshots as pdf files. But it can’t  display them in the mini-preview-window. So either setting needs to be changed. I didn’t want to do that manually, so here is my attempt at a script.Note, that this has to be run as the logged in user because the plist for screen capture is user bound.#!/bin/bashconsoleuser=`ls -l /dev/console | cut -d " " -f4`echo "${consoleuser}"currenttype="$(su - "${consoleuser}" -c 'defaults read com.apple.screencapture type')"if [ "$currenttype" != 'png' ]; then echo "Current type is not png! Changing to png now!"

Hi,I want to set multiple time servers (NTP) for my Macs, so that if one of them goes down or shows the wrong time the clients automatically switch to another one. Unfortunately this seems not possible out of the box. Does anyone have experience with this and can point me in the right direction?

On a specific device, the “Update Inventory” command is successfully sent and works normally.However, when the “Renew MDM Profile” command is sent, it fails with the following message:Error command: The new MDM payload does not match the previous payload. Mismatched key: CheckInURLBecause of this issue, the device cannot renew its MDM profile, and the expiration date is approaching.What is causing this problem, and how can it be resolved?

Hello, Our K–12 district has reached its purchasing limit for Apple devices directly from Apple for this year. However, we still have a need for additional iPads. I wanted to ask whether it is possible to use User-Initiated Enrollment to enroll devices that were not purchased through Apple (apple.com) (ex: CDWG.com, BestBuy.com etc.), and if so, whether there is any way to remove the “Remove Management” option from those devices. If removing the management option is not possible, is there a way to automatically enroll these devices into Apple School Manager using Apple Configurator? This way its supervised and fully manageable for the tech to push out updates and configurations.  Any assistance or guidance you can provide would be greatly appreciated. 

Has anyone been able to use Jamf Printer Manager 1.0.2 (or version 2.0) after switching to SSO login on your JPS? I’m trying to connect and I’m unable to authenticate after switching over. This is the first time using it since we changed, so it has to be the authentication setup.

Hi there! I've hit a bit of a wall. I've been asked to block YouTube Shorts for our students/users but leave the rest of YouTube open.We're running Jamf School + Jamf Safe Internet. I tried a custom rule for youtube.com/shorts, but it’s not working—likely because of how the traffic is vectored or how the API handles the "Reel" endpoints.Does anyone have a workaround for this? Are there specific domains/paths I should be targeting instead? Any links or tips would be huge. Thanks in advance!

Hello, Our K–12 district has reached its purchasing limit for Apple devices directly from Apple for this year. However, we still have a need for additional iPads. I wanted to ask whether it is possible to use User-Initiated Enrollment to enroll devices that were not purchased through Apple (apple.com) (ex: CDWG.com, BestBuy.com etc.), and if so, whether there is any way to remove the “Remove Management” option from those devices. If removing the management option is not possible, is there a way to automatically enroll these devices into Apple School Manager using Apple Configurator? Any assistance or guidance you can provide would be greatly appreciated. 

I'm looking to setup, add a domain (DRC WIDA testing) to a configuration profile with "Relaxed Domains" for our iPads. I don't see it anywhere I've looked in Jamf Pro configuration profiles, but Apple and WIDA have references to it. This would allow us finally to not have to manually toggle Cross-Site tracking to "on" on each iPad!!!!I've setup a custom configuration as described but I'm hoping there is a non-custom method that I'm just missing. This functionality is supported by a key in the Domains payload CrossSiteTrackingPreventionRelaxedDomains. From WIDA / DRC InsightCross-Website Tracking and Device SupervisionImportant: Sites using iPadOS 16.2 and higher no long

In the Other changes and Improvements from the release of 11.22 there was a mention that the deferral of updates with some payloads was deprecated with the 26’s and to use Blueprints going forward  However in the Configuration Profiles for both devices and computers it is not stated that this setting is deprecated.  

 I have a single machine that is active and online and running policy, but the inventory has not completed for any policy since May.  I am unable to remotely access this machine to re-enroll and I am unable to tell who is using it as the stale inventory record only shows the account of one of our local techs, who I have confirmed does not have the machine.Any ideas?  

Created label for the installation of Dockanchor :dockanchor)name="DockAnchor"type="zip"downloadURL="$(downloadURLFromGit bwya77 DockAnchor)"appNewVersion="$(versionFromGit bwya77 DockAnchor)"expectedTeamID="4XW3W377NX";; I am getting the following error :Script result: 2025-11-13 15:44:54 : REQ : : shifting arguments for Jamf 2025-11-13 15:44:54 : INFO : dockanchor : setting variable from argument NOTIFY=silent 2025-11-13 15:44:54 : INFO : dockanchor : Total items in argumentsArray: 1 2025-11-13 15:44:54 : INFO : dockanchor : argumentsArray: NOTIFY=silent 2025-11-13 15:44:54 : REQ : dockanchor : ################## Start Installomator v. 10.9beta, date 2025-08-07 2025-11-13 15:44:54 : INFO : dockanchor : ################## Version: 10.9beta 2025-11-13 15:44:54 : INFO : dockanchor : ################## Date: 2025-08-07 20

Hello,Is it possible to configure Custom Analytic if someone unenrolls their device from Jamf Pro (i.e., uninstalls the Jamf MDM profile)?

Have a weired Webex issue that started a month ago. When the user opens his Webex, to join a meeting, he get's the error message "Webex quit unexpectedly and you can click reopen, report or ignore. The first time it happened, we just did an uninstall/reinstall and it worked for a couple of weeks. It's happened a couple more times. I recently tried using the webex uninstaller, we also checked the webex dependicy folders they provided to make sure there wasn't anything left over. I updated webex on my Mac and it worked, so I created a package using composer, but it keeps getting the same error. Below is a script I found that the user ran and after the uninstall, he restarted an not luck after. I do see something about checking keychain and resetting the TCC permissions which I'll try today. #!/bin/bash# Get the currently logged-in userCURRENT_USER=$(stat -f "%Su" /dev/console)USER_HOME=$(eval echo "~$CURRENT_USER")echo "St

We are trying to load an in-house app into Mobile Device apps.  We started to make the new record, uploaded the file in archived app file, but had to cancel the attempt.  Trying a 2nd time, it reports there is already an ipa with that name.  Where can I go to delete that or can I just select that??  I did not find it in Settings > Packages.

Is there any way to get the password sync status from the new Self Service+ as Extension Attribute?Would be really nice to see if Google and the local user are in sync. Other ways to archive it are welcome 😀

Has anyone gotten jamf2snipe working with Jamf Pro Cloud API Roles & Clients (OAuth client ID/secret)? All documentation I see is for Classic API, which is blocked here

Hi Everyone,Need your help if you have a script that can mount and unmount SMB the can be use as repository of screenshotsThank you.

HelloIn the process of testing single sign on extension for managed Ipads, I have deployed the Authenticator app and the single sign on profile with following plist.SSO is working great on all apps except outlook, I think it has something to do with how Outlook use SSO/ auth method it uses. <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <!-- Existing Keys --> <key>AppPrefixAllowList</key> <string>com.microsoft.,com.apple.,com.jamf.,com.jamfsoftware.</string> <key>browser_sso_interaction_enabled</key> <integer>1</integer> <key>disable_explicit_app_prompt</key> <integer>0</integer> <!-- Managed App Config for Intune -->

Hi everyone,I’m trying to figure out whether it’s possible to distinguish between devices with a physical SIM, devices without a SIM, and eSIM devices using Smart Groups. I’m not sure if anyone else is seeing the same behavior I am.My Environment:Jamf Pro On-Prem 11.22.1-t1762179835791 (Windows Server)Devices under management:iPhone (China version) iPad (China version)What I try to Achive:Create Smart Groups that can identify:Devices with a physical SIM inserted Devices without a SIM card Devices using eSIMWhat I’ve tested so far:Using Phone Number: Some devices can’t retrieve the SIM’s phone number.