Im looking for a way to use the API to bulk delete computers by serial number.    Im not seeing a way in the API to do this any more other than with device ID. So does any one know of a way I can find the device ID based on the serial number ? I know this gets the device deleted if I can query the Device ID.    curl -X 'DELETE' "$jamfProURL/api/v1/computers-inventory/${jamfProID}" -H 'accept: application/json' -H "Authorization: Bearer ${token}"  

We are in a process of migration, where we need to migrate Network account with local account. Although we allow this setting in Jamf Login profile but still is not giving an option to connect local account with network account. With same profile we tested this multiple times and with multiple machines. Jamf Connect and Login version 2.45.0 Operating system Version: 15.5.0  

Hello! My JAMF on prem server was set up before I arrived. We need to get packages to users who are working remotely, and able to receive them without being on our VPN. Is it possible to use a remote, cloud based, package distribution alongside, or mirrored to our on prem distribution point? I want it to be the fallback if on prem is not available. So far I haven't gotten this to work. Thank you !

Back in 2007, Jamf customers started coming together – in email. It wasn’t the most advanced way to gather, but it worked. The purpose was to share knowledge. And for a few years, words of wisdom flowed as the list grew. Jamf Nation was forming and quickly outgrew its simplistic home. That's when Jamf’s founder, Zach Halmstad, shared a bigger vision. Jamf Nation would move to an online platform. In its new format it would:    Facilitate customer-to-customer communication  Facilitate customer-to-Jamf communication  Facilitate Jamf-to-customer communication    Fast forward nearly 15 years, and these are still foundational elements of Community at Jamf. But you deserve more than our current platform can offer. That’s why we’re excited to shift Jamf Nation from its current home to a new community offering this summer. Get ready for an elevated look, feel and overall experience. Be ready to:    Find what you need more easily  Experience

We have a verizon wireless business account and with it about 35 iphones. We are going over our data allowance every month and cannot increase the data limits because of the amount of lines we have under our current plan. We would like to limit on certain iphones the amount of data usage allowed. Can that be done?

The application name for Adobe Illustrator remains the same regardless of the version installed, which makes it challenging to identify specific versions based on the file path alone. I need to create an Extension Attribute (EA) that can detect different installation paths for Adobe Illustrator, such as: /Applications/Adobe Illustrator 2024/Adobe Illustrator.app /Applications/Adobe Illustrator 2025/Adobe Illustrator.app This will allow me to create a smart computer group in Jamf Pro and effectively scope updates for each version. I’ve tried the following script, but it doesn’t seem to be working as expected. Any advice on how to get this working would be greatly appreciated!      

Hello,    I’ve noticed the wording for the following SU DDMs in blueprints contradicts Apple documentation. if enabled the Apple documentation implies the reverse of what Jamf says. ”If true, the device shows all software update enforcement notifications. If false, the device only shows notifications triggered one hour before the enforcement deadline, and the restart countdown notification.”   Again Apple documentation implies the reverse of what Jamf has said. “If true, a standard user can perform updates and upgrades. If false, only administrators can perform updates and upgrades.“   please can Jamf ensure all values and descriptions match Apple documentation, admins don’t really want to get into wordsmith battles of Apple states this but Jamf implements the reverse of what Apple states.

In regards to making sure the Computers application are updated I mostly use Mac Apps. From my experience, Mac Apps is much simple to configure (straight forward) than Patch Management. What is the scenario for Patch management is best to use over Mac Apps for patching?

As organizations scale their Apple device deployments, maintaining visibility, control, and compliance across endpoints becomes increasingly complex. Jamf offers a powerful yet often underutilized feature to address this challenge: Extension Attributes. These customizable data points enable administrators to extend the default inventory capabilities of Jamf Pro, creating a more detailed, flexible, and actionable view of managed devices.   What Are Jamf Extension Attributes?  Extension Attributes (EAs) in Jamf Pro are custom scripts or input fields that gather specific information about devices beyond the standard inventory data (e.g., OS version, hardware model, serial number). Admins can write scripts—typically in Bash, Python, or Zsh—that query system details during inventory collection. The results are stored in the Jamf database and can be used in smart groups, reports or policies.   For example, an EA can report whether FileVault is enabled, if a specific

So, this is way less technical than most Nation posts, and if that's out of line, I apologize. But as we build out JAMF Pro here, some higher ups/team members can't grasp the things that can be done with JAMF. What are the things that you're able to do with JAMF, either in the background or via Self Service, that garners the most feedback from your users?

Does anyone have a script or method that will deauthorize an office 365 seat when a computer is wiped? There is a pkg from Microsoft, which removes the license from the Mac, but doesn't remove that mac from the list of authorized devices on the 365 account.

I have had 2 MacBooks out of many so far, that the FileVault 2 Enabled Users is ciscoacvpnuser. This means that Encryption never turns on for the real user of the MacBook. 1. I would like to know why this local system account is being added here? I think the user isn't logging back in after the final install of the default applications (which includes Cisco Secure Client) and a required reboot). And somehow the ciscoacvpnuser account is being added. 2. Is there a way to remove this account in Jamf or push the user's account from the user's MacBook to Jamf? These are newly enrolled computers so Support has been contacting the users and wiping the computer and re-enrolling again.  We had a ticket open with Jamf but they did not have a resolution for the Support team. Thanks in advance!

We have been tasked with blocking DeepSeek on all campus resources. Unfortunately, keeping users from running DeepSeek models locally on their Macs isn’t as simple as making a Restricted Software title in Jamf Pro because the models aren’t actually apps. What we can work with, however, is Ollama – the framework which DeekSeek models currently run under. If a user has installed Ollama, why not leverage that to check for the presence of DeepSeek LLMs? Our first step is identifying it. The command ollama list will list all the LLMs a user has currently installed. If we grep those results for deepseek, we can make a little script-based Extension Attribute to identify Macs with DeepSeek LLMs present. Next, make a Smart Computer Group for detections that looks something like this: Criteria “DeepSeek Check” – is not – (blank) AND Criteria “DeepSeek Check” – is not – Not Detected (You could probably get away with just one criteria where DeepSeek Check – is like – *deepseek* or do something w

Hi everyone, We manage a fleet of approximately 1,500 M2 MacBook Air devices used by students. All student accounts are standard users with App Store access blocked. Applications can only be installed via Self Service. To prevent unauthorized software use, we've restricted app execution from the Desktop, Documents, and Downloads folders. However, students have found a workaround: they are dragging applications into the Dock and launching them from there. I’d prefer not to implement a policy that constantly removes unknown apps from the Dock, as it can negatively affect user experience. Has anyone encountered a similar situation? Are there any recommendations or best practices to prevent applications from being run via the Dock if they aren’t located in the /Applications folder or haven’t been approved via Self Service? Appreciate any advice or suggestions! Thank you.

We had a need to do an inventory of which of our Macs has Node.js installed and to display the Node.js version. I wanted to share this in case it's helpful for anyone else. Basically it checks to see if /usr/local/bin/node is present and if so it runs a command to display the version number. Here's the script: #!/bin/bash # Tests to see if Node.js is installed. If it is, it outputs the version number. If it’s not, it states that Node.js is not installed. if [ -f "/usr/local/bin/node" ] then echo "<result>`node -v`</result>" else echo "<result>Node.js is not installed</result>" fi

We had KFM enabled for our users, but since a couple of months the KFM doesn't seem to work anymore. We did a lot of troubleshooting, changing the plist, using a JSON file, using another JSON, changing from user to computer level but nothing seems to work.To troubleshoot the whole OneDrive issue, we are now trying to get the wizard for KFM to pop up. But even this isn't working anymore :(.Our last configuration file was created with iMazing which looks like this: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadContent</key> <array> <dict> <key>DisableHydrationToast</key> <false/> <key>DisablePersonalSync</key> <false/> <key>DisableTutorial</key> <true/> <key>EnableAddAccounts</key> <true/> <key>Enab

Jamf Connect in Entra Enterprise App the role has stopped working for Users (Standard User/Administrator), can someone help me look into this issue?

Hi everyone, I am new to Jamf and I am loving it so far. I am creating a managed local administrator account through the User-initiated enrollment settings and that is fine (already created a config profile for the rotation of the passwords). The problem that I am having is that in the prestage enrollment the users are assigned to be local administrators automatically and right now (from what I learned) the only way to make them standard user is to tick the options to create a local admin account in the prestage settings, but this will create 2 admins once the user is enrolled.    I am sure I am missing something, any suggestions?  

Our organization recently deployed Jamf pro to help us manage our Mac's and while for the most part theres been very few issues I haven't been able to fix myself there is one that has been plaguing us pretty badly. The Mac's enrolled in Jamf either through prestage or open enrollment do not have access to most of the accessibility options are not available for either the Admin or Standard users.                                                      Now being fairly new to Jamf and to Mac's in general im a bit lost as to what could possibly be doing this. Ive done some reading about the authorization Db and some of the plists but I am having a hard time finding anything specific to this section of the system settings. A few things that I have checked is within the restrictions section within Configuration profiles and made sure that the pane was e

Hey All...just finished what I call the "JAMF System Admin Tools"...this SwiftDialog based app will backup your SS icons, System Scripts, Computer EAs, Make VCF cards from your email addresses, show (& clear) failed MDM commands and backup your configuration profiles! Been working on this for a while, and I think it is ready for the masses. I will be added more features and tweaking the logging in the next few weeks. Let me know if you run into any issue or any feedback you want to give!   (I combined my failed MDM commands, SS Backup and VCF Cards standalone apps into one).  More coming soon... The following items are available to be backed up: Self Service Icons - Great to have a back when JAMF starts showing generic icons in Self Service. Failed MDM Commands - Export systems that have failed MDM commands so you can review them and optionally clear the failures System Scripts - Everything that is stored in Settings > Scripts Computer Extension Attributes - Export al

Hi All,   can someone let me know if how get local admin and Standard user working again with Jamf Connect?   Thanks in Advances

Best way to push contact list to iPhones Did a search here in JAMF Nation, not really much there... -A CardDav Server?-or a group email with a vCard file to import into Contacts app- Is there something that can be setup in Config Profile- iOS Outlook is the app we would be using and there seems no Config Profile for Outlook? the simpler the better.... thx in advance, John K

Hello! We're starting to use the new Self Service URL format for staff communication.Policies take the following URL format:jamfselfservice://content?entity=policy&id=792&action=view Due to Google Mail's stripping of application-specific hyperlinks, we have to create a PHP redirect that identifies the requested entity, id and action, then constructs the Self Service query. This works great! Now we'd like to create URLs that open Self Service and point to Library categories instead of specific Policies; is anyone aware of the format these links would use? I'd assume it's something along the lines of:jamfselfservice://content?entity=category&id=1 ... but obviously it's not that, and I couldn't find any documentation referencing the possible entity names. Thank you!

As you may know, macOS devices can break in numerous ways and stop behaving as expected in JAMF. Many of these scenarios have been fixed now that JAMF considers the device managed even without a management account. However, there's one covert issue that I've noticed recently that I'd like some help on both detecting and fixing, in some automated way.First, what's the problem? Well, difficult to say, but it manifests itself in the following way:When an MDM command is issued to the device, the command fails with the following reason:"The device token is not active for the specified topic."My assumption at this point is that the MDM profile on the client is somehow broken as this isn't a general problem. But anyway, is there some way we can detect these devices in bulk somehow? By search? By data in the JAMF DB? Or by looking for error messages in the jamf pro server logs?Now, once a method to identify affected devices has been found, how can this be remedied? Note that the JAMF agent is

Trying to push macOS 15 to a MacBook Air and am receiving the following error:UnableToFindUpdatesAndOutOfRetriesI was able to push macOS 15 to a MacBook Pro via Jamf Pro without any issues. Is there not an install package for macOS 15 for a MacBook Air at this time?