Hey everyone, I need to get a list of installed software on our ends users' macs .. the way I know of is by going to computers in Jamf Pro dashboard => Search => Export => I choose the file type => Applications then I get a list of software installed but this one also contains the build-in apps like Weather, Calendar .. etc I can filter it myself but thought to ask and see if there are better ways to get what I want. Thanks in advance

How is everyone handling making sure certain apps are always installed on macOS? For example, we have an emergency notification/management app that every computer has to always have installed. We have done this two different ways and I'm wondering if there's something better.   Option 1: Policy to install the app and then do inventory update. Trigger is recurring check-in and frequency is ongoing. Scoped to required groups and an exclusion set to a smart group with criteria that the app is installed.     Option 2: Policy to install the app. Trigger is recurring check-in and frequency is ongoing. Scoped to a smart group with criteria the app is not installed.    I feel like both ways create a lot of extra overhead on the server and the device with all of the inventory updates and if the app reinstalls itself multiple times before JAMF catches the inventory update, especially with multiple apps that are required on the device. I think option 2 with a frequency ch

Hi Jamf Nation,I’m reaching out to this great community for advice and suggestions as I prepare to launch a Jamf consulting business focused on macOS management, automation, compliance, and security. With over 10 years of experience in Apple IT and recent Jamf 400 certification, I’m looking to turn my expertise into a service that helps organizations streamline and secure their Apple environments. My goal is to support companies in areas such as: Jamf Pro setup and optimizationJamf Protect deployment and alertingJamf Connect integration with identity providersAutomation of routine tasks and workflowsCompliance reporting and endpoint security best practices I’d love to hear from anyone who has started a similar journey. Specifically, I’m looking for: Tips for setting up your consulting structure (freelance vs. LLC, contracts, billing tools)What services clients value the mostLessons learned from your first clients or projectsRecommendations for tools or templates you use (reporting, doc

I’ve implemented Jamf Trust in my test environment and would like to clarify its primary function. Could you confirm whether Jamf Trust is primarily used as an authentication mechanism, or does it serve a different core purpose?

How are y'all tracking and deploying these ever more frequent updates? For point releases we use Nudge, but have not found a way to do so for rapid security responses. Also, the following is not populating. we are on jamf pro release 10.47.0 in a cloud hosted environment. I had thought that this would be reported starting in 10.46 with declarative management (which is enabled). 

We have a configuration policy that requires all users to set a password. When a user forgets their password, the only option I have is to log in using the JAMF managed admin account to reset the user's password. However, when I attempt to log in with the JAMF-managed admin account, the configuration policy for password reset kicks in, prompting me to change the password upon first-time login. If I change the password, it will become static and will no longer be part of the rotation. What would be the solution to this issue?

I found this script very useful and extracting the list of application usage in the Smart Group.  #!/bin/bash # This script uses the api to gather all serial numbers of a computer group and then gathers application usage data for that mac. # each entry contains User data so, multiple lines will exist for each serial. one for each application. # exported report is stored in a coma sperated spreadsheet. # Please see end of script for terms ### # Environment Specific Variables can be left blank if passing parameters from jamf ### # hardcode here for testing api_user="" api_pass="" jamf_url="" # A Jamf Pro computer group (static or smart) that contains the client for which you want a report group_name='' # Number of days in report (using today as the end date...) days= # Check for passed parameters from jamf if [ "$4" != "" ]; then api_user=$4 fi if [ "$5" != "" ]; then api_pass=$5 fi if [ "$6" != "" ]; then jamf_url=$6 fi if [ "$7" != "" ]; then group_name=$7 fi if [

Hello all, Been busy lately...this time I created a system script to display nicely formatted Swift Dialog notifications that you can deploy to scoped users., includes timers, and images if you want. my Repo Link: https://github.com/ScottEKendall/JAMF-Pro-Scripts/tree/main/DialogMsg #!/bin/zsh # # Written by: Scott E. Kendall # # Created Date: 01/227/2025 # Last modified: 01/27/2025 # # v1.0 - Inital script # # Expected Paramaters: # #4 - Title # #5 - Full formatted message to display # #6 - Button1 Text # #7 - Image to display # #8 - JAMF policy to load image if it doeesn't exist # #9 - Notification icon name # #10 - Timer (in seconds) to wait until dismissal ###################################################################################################### # # Gobal "Common" variables (do not change these!) # ###################################################################################################### export PATH=/usr/bin:/bin:/usr/sbin:/sbin LOGGED_IN_USER=$( scut

Hello Jamf Community, My team is facing an issue where multiple managed Macs (running macOS 15.4.1 and 15.5) are unable to connect to the internet. This problem was first noticed around 10:00 JST on June 15th. We're using products from the Jamf Business Plan (https://www.jamf.com/products/business-plan/), although not all of them. We've observed that disabling DNS Settings under Network > Filters in macOS settings resolves the issue. Non-Jamf managed Macs are not affected, leading us to believe this might be related to Jamf's configuration. The issue occurs on both recently updated Macs and those that haven't been updated recently. Has anyone else encountered similar issues? We're looking for: Confirmation if others are experiencing this problem Potential causes Recommended solutions or workarounds Any insights or suggestions would be greatly appreciated. Thank you in advance for your help!

Hey Gang, Back again with some major improvements to my JAMF Admin tools.  The new v2 now supports API roles (not just ID & password), along with some other nice features: Now you can backup your Smart & Static groups (with natural language context) Smart group exports will show the conditions in the same way JAMF show the criteria Static groups will export the members of the group Create contact cards or compose emails to specific group members JAMF Pro API Token support As well as these existing items: Backup Self service Icons Retrieve / Clear failed MDM commands Backup System scripts Backup Computer EAs Backup Configuration Profiles Full details are on my GitHub site: https://github.com/ScottEKendall/JAMF-Pro-Scripts/tree/main/JAMFSystemUtilities

Hi All, We currently aren't using any tools like Jamf Setup Manager or DEPNotify. I was looking to implement these, but wondering what type of impact we will experience considering Classic Self-Service will be deprecated eventually. We aren't zero touch because we go through a pretty hefty onboarding with the user on their first day. We still will manually be touching the Mac quite a bit, so this hasn't been a priority. Can any of these tools work with Self-Service+? Any concerns I should have about setting this up considering classic Self-Service is going away? Thanks

One of our agents locked a macbook via the remote lock command from Jamf Pro and did not record the pin.  One of our other agents then deleted the macbook out of jamf before releasing the lock. Now we have a bricked macbook that we have no way of getting into since we dont have reord of what the pin could be.   We are back and forth between Jamf support and Apple support to get this resolved.  Jamf says they cant do anything and Apple is saying it's on Jamf to remove the lock.   Any help here would be appreciated. 

Hello, Since MUT no longer works with a JSS instance using SSO authentication, do you know of any alternatives, please? I admit I'm a bit uncomfortable with API scripts. I need to create a static group with more than 500 devices 😁thank you

We currently use Okta SSO with Jamf Pro. Filevault is turned on for all our devices, which requires the initial local login. Then the next login is network credentials with SSO. Meaning, our users have to login twice. This works well, however we recently purchased Okta Device Access with the understanding that we could eliminate all logins for a passwordless user experience. I've been researching the ODA setup using Okta as a SCEP auth. I've read this would require all devices to be re-enrolled?  Has anyone gotten this to work with Jamf Pro to be passwordless? I've love to hear your experiences. Thanks!

Work within a school and looking to upskill the team on Jamf, we receive education pricing for Pro licences but can’t see anything about training. Is education pricing available or are we out of luck on that front?  

Hey there,    we are currently using Jamf School with approximately 4000 devices. After using shared iPads exclusively we implemented a 1 to 1 configuration in a couple of locations.  Everything worked well until the devices needed to be transfered to a new user.  Previously i assigned the profiles beforehand and users just needed to login with their Jamf credentials.  The iPad updated the name via information given by their jamf Account (%firstname,%lastname) and so on.    But i cannot get that login window on a previously used iPad for the life of me.  Even un- and reenrolling the device did not work.    Is there no other way of assinging a user but to use placeholders or manually assigning a user?    Thanks for your input! 

Hi there, I am very new to Jamf Pro. My school client needs to deploy PaperCut Print Client and Print Queues to the macOS devices in mass.  I don't want to use the PaperCut print deploy to deploy the print queues. May I know the steps or ways to get it done?

Hello everyone, Could you please suggest where I need to copy the files to make an email signature template available in Outlook for all Mac devices? Or is there another way to achieve this?

We are currently experiencing issues with our Jamf environment.Last week, we had a session with our Jamf supplier where we reviewed our setup and made some minor adjustments. However, since then, we’ve encountered problems specifically with Configuration Profiles. When scoping a computer, the status remains stuck on “Pending”. Occasionally the scope appears to work, but in most cases, it gets stuck.   Everything worked correctly before the session. We've verified that all Push Certificates are renewed and not expired. Could something have been changed during that session that would affect MDM or profile deployment?

Hello Everyone Looking for some help/advice.... So we have multiple SITES set up in out JAMF Pro Instance, but right now every device is using the same pre-stage enrollment and then we have to go in and move the devices from the main jamf pro to the proper site manually. Is there a better way to do this? I have seen some folks say that you can do it in ASM with a different token for each site but you need to change the devices at that level before they get enrolled. I am thinking this is the best way, wondering if anyone has experience with this?

Ever wondered what happens with your compliance benchmarks when mSCP gets a new version? If the change has any impact on the rules, once validated by Jamf quality processes, you will see a label Update available next to your benchmark. You then go into the benchmark details, open the rules, see what changed and simply apply the changes as you were making manual changes. Check the Release notes for more details and let us know how it works for you!

Is there a way to trigger an inventory update via an iPhone or iPad? Like on Mac where I can give that option in the SelfService.

I'm deploying Microsoft Defender web filter to Jamf managed Macs. It's working as expected when the computer is not connected to the corporate network but when in the office I'm having issues with traffic being blocked. I assume a firewall rule is required to allow the Defender Web Filter traffic out and to bypass the requirement to use the Corp Proxy. Does anyone know where Defender Web Filter sends traffic to? Is it just a case of allowing that traffic out on the firewall for these devices?

Anyone else already installed the developer beta? Jamf lists macOS 16 in inventory after an inventory update, but system report shows macOS 26.   I'm guessing this is something with how Jamf is pulling the version from the machine?   Anyone else seeing this?  

Hey Everyone, the announcements have happened, and now we admins get to do it all again! Hooray! I've modified my regex statement to take out the models that were lost to us this year to the latest macOS version. Thankfully the OS axe was kind to us this year and only cut off the MacBook Air 2018/19 models. Also per a previous suggestion (thank you @grahamrpugh) I added in the VirtualMac line as we can see those pop up in our environments depending on current controls, and if anything it'd be good to get reports on them. Having tested this against a known list of current (6/13/24) Model Identifiers, I'm confident that this regex should be able to match everything that is supported by MacOS Sequoia:   (^Mac1[3-9],\\b[0-9]{1,2}\\b|MacBook\\d{2}|MacBookAir(9|\\d{2}),[1-9]|Macmini[8-9],\\b[0-9]{1,2}\\b|MacPro[7-9],\\b[0-9]{1,2}\\b|iMacPro[1-9],\\b[0-9]{1,2}\\b|iMac(19|2[0-9]),\\d|MacBookPro(1[5-9]|2[0-9]),\\b[0-9]{1,2}\\b|VirtualMac)   You can create a smart group using this in o