I am trying to make a smart group to see what computers have the PaperCut Client installed but i don’t see anything in the /Applications/PaperCut Print Deploy Client/ directory that i can select as the .app in the smart group. What can I use create this smart group?   

Hey All,Is it possible to change the timeout on a Jamf Cloud console session?We're on Jamf Cloud 10.42 using SSO to login to the console, if that matters.The main issue (among others), is that when performing a GSX lookup, the web session usually times out before the look up finishes.We have ~1400 workstations which takes at least 10-15 minutes to update, but more often than not results in a session timeout.  I've tried creating a SMART group where there is no Warranty info for the device, but the only options are Warranty Expiration is before/after or within a certain # of days.It does seem as though if I open a new JSS tab in the same browser window and work in there while the GSX lookup is ongoing in the other tab, that the GSX lookup session will not timeout.I did check the SSO settings, but it only has a Token expiration time, which is not what I'm looking for. Thanks for any thoughts.Phil

Sometimes you ask your self if you’re thinking right or not. But in this case I’m rather sure my thinking is correct but Jamf doesn’t understand or doesn’t work correctly. :)I’m make a smart user group that lists all computers with architecture type arm64 and with some exclusions. Se bellow. Without the exclusions it gives me 929, with the exclusion it should give me 918 but gives me the same as without exclusions.Am I thinking wrong or is something wrong with Jamf???  

I have logged on to Jamf Pro but the page is loading forever. Tried different browser but no luck.  

Hey Jamf NationWe’re excited to announce the release of Jamf Pro 11.21.0 beta. This release includes DigiCert One Certificate Payload Support for SAN values, Impact Alert Notifications for Deployable Objects, Support for new SkipKeys and more!How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Click “Join Community” to join the beta forum once enrolled. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks, Blueprints, and App Switcher.Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-beta areas of Jamf Nation. Use the Jamf Nation Beta Forum or contact Jamf via beta@jamf.com with any questions. Thank you to all who participate in this program!

How are people deploying Sopho's endpoint per macOS profiles? Are you creating smart groups for each OS and then assigning them to Sopho's endpoint profile for that OS? What happens when a user upgrades to another OS, do they get popups when old profile removes but does not have the new profile yet?

Hi, We are using Jamf to deploy Parallels to certain users.I guess that starting from Catalina it stopped working, it just fails. Installation failed. The installer reported: installer: Package name is Parallels Autodeploy Packageinstaller: Installing at base path /installer: The install failed. (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. An error occurred while running scripts from the package “ParallelsDesktop-15.1.1.pkg”.) When performing a manual install it asks for Downloads, Desktop and Documents access.Using the PPPC tool i've uploaded that config, but when opening it. The Documents access is not shown and cannot add it either.Could this be the issue? Anyone else having this issue?

Hello my boss wants me to help setup auto drive enrollment for our devices in my org i never done anything like this before but i’ve been doing some researchand i am confused on the whole jamf connect, we have a prestage enrollment created when computers are added to the group that will put them through the auto deployment which has been giving us issues for a while nowmy boss wants me to upload a jamf connect pkg file to the enrollment packages section on our prestage enrollment but i dont know how to do thatany help and advice on auto device enrollment within jamf would really help.

Are you doing work that excites you? Are you still learning and growing?These aren't easy questions to ask, but they're critical for a fulfilling career. The truth is, sometimes the most courageous thing you can do for your professional life is to recognize when a role or company no longer serves you.Don't be afraid to listen to that quiet voice telling you it's time for a change. It's not a sign of failure, but a sign that you've grown and are ready for the next challenge.Your career is a journey, not a prison. Have the courage to build the one you truly want.What was a sign that told you it was time to move on?Please share your experience in the comments. I am curious. 🤔

We’ve run into an incompatibility between Clever IDM that rosters/creates our Google student accounts from SIS data and Jamf cloud IDP. I am trying to fill data from Google attributes (Job Title “title”) into the “position” field within Jamf. My mappings are correct. Clever IDM writes these attributes into Google with a customType of “CleverIDM”, but Jamf only looks for entries with no customType.Example: "organizations": [ { "customType": "CleverIDM", "department": "Mathews High School", "title": "IMM1" }, { "customType": "", "title": "IMM1" } ]Any one have any options or have you ran into this before?Can Jamf use department/title where customType = "CleverIDM"?If not, could Jamf match on another attribute, such as employeeID using customType?

Anyone in here HA users?  How many of you all are using all local calls without any need for internet?What kind of cool stuffs are you doing?  I know this isn't JAMF related (per se - although you can do some pretty cool things with API and home assistant….maybe integrate things with JAMF instead of leveraging Routines?).Anyways, just curious of how many folks in here are home nerds as much as corporate nerds 😄

We continue in our efforts to streamline compliance benchmarks workflows and unify the reporting. Today, we are proud to announce two new highly demanded exports within the Compliance capability in Jamf Pro - something you have been asking for since the initial launch of Compliance in April.Auditing documentation: Holding the benchmark settings as configured by the admin, this set of documents is aimed to serve for compliance audits purposes. Those of you already using Jamf Compliance Editor or mSCP are familiar with these - now the adoc, pdf, html, and xlsx documents for each supported OS version are available right under Compliance Configuration tab in Jamf Pro. Compliance status: After enabling the computer-level compliance reporting in July, you can now export the overall compliance status, i.e. number of passing and failing computers for each rule in a benchmark, into csv file - very similar to the one produced by Compliance baselines in Jamf Protect. With this export, you can rep

Hello everyone, i did a test run for the jamf Class Assigner yesterday. After going through the steps in the documentation i got the app running in teacher and student mode.   But even though the teacher ipad is assigned to a teacher user (including managed Apple ID loged in on the Teacher device) i get "Teacher not assigned to device" displayed in Class Assigner.   i built a manual class in jamf school with a user assigned as teacher and tried importing a class from ASM with teacher and student rolls defined, same error.   Any help would be appreciated.

From @talkingmoose Many thanks again! • Regex looks for all Mac models compatible with macOS 26 Tahoe. May not be up-to-date with newly released models. https://gist.github.com/talkingmoose/3340d122ffd6b4fccb5f1319b7067f73• Regex looks for all iPhone, iPad, and Apple Watch models compatible with iOS 26, iPadOS 26, and watchOS 26. May not be up-to-date with newly released models.https://gist.github.com/talkingmoose/8626115822ca9f81463dd4e9e902ff9a

This article and many others can be found on Rich Trouton’s blog Der Flounder As part of Apple’s unveiling of Declarative Device Management (DDM) at WWDC 2023, Apple announced that DDM management included the ability to deploy MDM configuration profiles using DDM as the delivery mechanism in place of using MDM to deliver the profiles. Jamf Pro’s Blueprints leverages this capability to support device restrictions.Let’s see how this works using a device restriction configuration, using the example of setting the following Apple Intelligence management functions to false in order to block the corresponding Apple Intelligence functions on macOS:   Restriction Setting available in version Description Key Key value Default setting in macOS Allow Image Playground macOS 15.0.0 If key value is set to FALSE, prohibits the use of image generation. allowImagePlayground Boolean TRUE Allow Writing Tools

I’m wondering how others approach Macs that have become unaccounted for, lost or stolen?We have a fleet of approx 1500 - many that were purchased before any of the stuff currently involved in managing them were working for our organisation.Sometimes I’ll come across a Mac that is still checking into Jamf, but we have no record of who it belongs to and whether it was legitimatly bought-out or not.Othertimes we have Macs that have just been plain stolen.There’s another scenario on top of this where I’ll encounter Macs that check-in, so can seemingly run Policies but aren’t doing an inventory update, and won’t run Management commands. (the Wipe Computer command being one I’d find quite useful in particular)With that in mind, I put together a script to install a launch daemon that launches a script that agressively notifies the user that the device belongs to our org, and to contact our helpdesk - it blocks the screen out to the point the device becomes unusable. I am yet to deploy it thou

Hey All,We’ve been using a fleet of WiFi Only Apple TV’s as digital signage in single apple mode, we changed the configuration profile, and this appears to have disconnected all of them, while keeping them stuck in single app mode. Is there a way out of this? Kind Regards,Jarrah

I’ve been running a script in our labs for the last couple of years to do macOS updates after caching the installer onto devices, the script is this:/usr/bin/su -l ladmin -c "echo ADMINPASSWORD | /Applications/Install\ macOS\ Sequoia.app/Contents/Resources/startosinstall --nointeraction --agreetolicense --forcequitapps --user ADMINACCOUNT --stdinpass"This has worked perfectly fine, and continues to work on our iMacs and Mac Minis, but when I’ve tried to update our MacBooks from Sonoma to Sequoia I’m being met with this bizarre message:Result of command:Error: You must be root to do this…I don’t understand this at all, because as far as I was aware everything the Jamf binary does is already run as root. Is anybody able to shed any light as to why this is failing please?Much thanks!

Hello everyone, teachers use the Managed Apple ID but cannot download applications in the AppStore, the only apps that can be downloaded are the same as those from the selservice. Do you know a solution so that teachers managed Apple IDs have more possibilities? I use JamfPro, Thank you

I read somewhere that with iPadOS 26 we will have an option to manage Safari like set Bookmarks and other staff. Unfortunately when i want elaborate this more further i am not able to find any offical documentation from Apple or from Jamf on this topic. Has anybody experience with this? Does Jamf already implemented into console tools to manage Safari via DDM?

Hi,I'm trying to experiment with deploying Safari web apps to other devices for an IT environment.I can create a package of a Safari web app on my personal MacBook, and repeatedly deploy the package to my personal MacBook without issue. The Safari web apps are typically installed to ~/Applications, but I can install to the system /Applications folder, or even to a place like the user desktop, and it will work. The app will also work for different users on my personal MacBook.When I install the package to another computer, there is a pop up saying that says "You can't open the application because it may be damaged or incomplete."Are Safari web apps hard locked to a device, from something like associating the web app with hardware identifiers? Could changing the web app or an associated plist with the web app via a script resolve this issue, or do web apps have to be manually created per user? Or more importantly, does anyone know if Jamf will support creation of Safari web apps via Jamf

I created this small application to make it easier to retrieve the Bundle ID of a macOS app.Simply drag a .app file onto its icon in the Dock to display the app’s unique identifier and easily copy it to the clipboard.The link below includes both the AppleScript source code and the compiled, ready-to-use application.https://www.dropbox.com/scl/fi/74iqhkbs7cd7nfhi0fsn9/Bundle-ID-Droplet.7z?rlkey=a2kldrolexvix16z6hluvjpar&st=n999z5tv&dl=0Hopefully, this can help someone.

I wanted clarification on what HTTP response status code Jamf Pro will return if I call the /api/v2/mobile-devices endpoint when I only have a Jamf Computer license, and similarly, what status code I will get if I call the /api/v1/computers-inventory endpoint when I only have a Mobile Devices license.

Hi all,we just configured Jamf Protect, and it seems that the Macs removed from Jamf Pro were not removed automatically from the list on Protect.Is there a way to automatize the offboarding, or the only solution is to remove a device manually from both?Thanks,