Hello Jamf Nation! With the increasing frequency of Chrome updates, IT teams must proactively patch critical vulnerabilities. After testing several deployment methods (including Installomator and the Jamf App Catalog), I believe the built-in auto-updater remains the best way to upgrade your browser fleet at scale without interrupting your users at the wrong time, and ensuring all previously opened tabs are restored for a seamless user experience.Continue reading… [Medium.com - free, no paywall] 

Hi Nation,Product Office Hours #3 - How we built AI Governance Next session: Thursday, 27th August - 9am CDT / 3pm BST / 4pm CESTSpeakers: Josh Stein, VP Product Strategy and Jon Malm, Principal Software ArchitectRegister here: https://jamf.it/ProductOfficeHours 🧵 Got a question? Drop it in the comments below ahead of time if you want it on our radar, though you don't have to. We'll be taking questions live on the call! Anything we don't get to, we'll follow up right here within 24 hours.See you Thursday 27th!

For years, MacAdmins have had to manage random service files (like ssh, pam, sudo, etc) with packages, scripts, custom agents, postinstall logic, or vendor specific workflows. In 2023 with macOS Sonoma, Apple introduced a feature that sort of slipped under the radar a bit on how it could be used…Declarative Device Management (DDM) added Service Configuration Files. Service Configuration Files give us a declarative, tamper resistant, native way to deliver text based configuration. Service Management Configuration files fixes managing text configuration files that live throughout the macOS, something traditional legacy MDM couldn’t do. That is boring in the best possible way. You set it, and it can’t be changed or messed with. But what if you could use it beyond Apple’s documented use cases…managing third party apps, or even building or own app that reads its configuration this way?To use Service Configuration Files you create a zip file of a configuration for certain services and then a

Has anyone started down this road of managing MacBook Neo’s with JAMF School? I have started testing and have encountered a couple of annoyances thus far. We are generally a Microsoft shop and use JAMF School to manage student iPads. As such, we are using JAMF Connect for student login to the devices on these devices as well.There seems to be an issue with the Neo’s not wanting to reconnect to wifi after a restart. Also, Keychain is asking for access to JAMF Connect password after installation. We have this same setup working on 10 iMacs at one school and they do not ask for Keychain access.Any thoughts or shared experiences would be great. Thanks.

Hi All. We noticed a lot of network bandwidth when using the Mac Apps installers via Jamf, and abnormally large sizes for application updates, such as Microsoft Excel. I asked Jamf Support in a ticket how big the update was for Microsoft Excel, going from 16.76 to 16.77 [for the Jamf Mac Apps installers], they said it was 1.23GB. But when using MAU (Microsoft AutoUpdate), the update size is much smaller (less than 100 mb).Another user commented on this a few years ago, but it was in reference to Jamf Patch Management (not Mac Apps installers). That link to that thread can be found here.Within that thread, the user links to a Mac Admins site, which showcases how big the current updates are for all Microsoft apps: https://macadmins.software/updatesize/You can see the update size for Excel is under 100mb, and nowhere near 1.2gb. It may be possible that Jamf is using the updater PKG provider by Microsoft, which by itself is around 1gb. If you scroll down on this page, under Update pac

Some users in my organization experience high CPU usage by Jamf Protect after updates to new macOS Tahoe 26.6.2.Does anybody experience the same? Is it a know issue?

Hi Nation,Product Office Hours #1 - AI Governance: What is it and what can we do with it?Next session: Thursday, 13th August - 9am CDT / 3pm BST / 4pm CESTSpeakers: Sam Johnson, Akash Kamath & Matt BenyoRegister here: https://jamf.it/ProductOfficeHours 🧵 Before the call, this is on you: drop your question in the comments below, and like the ones you want to see answered. Q&A is built entirely from what gets submitted and upvoted here, so if you don't ask it, it doesn't get covered live.No questions, no Q&A, it's that simple. Anything we don't get to, we'll follow up right here within 24 hours.See you Thursday 13th!

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issues:Jamf Pro Server: Security IssuesJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI186191] Fixed: A cross-site scripting (XSS) issue. [PI208395] Fixed: A cross-site scripting (XSS) issue. [PI209382] Fixed: The Jamf Pro installers include Spring Framework 6.2.18, which includes multiple vulnerabilities, including CVE-2026-41842 and CVE-2026-41855.Jamf Pro Server[PI148391] Fixed: After modifying the custom configuration PLIST for iOS shared device compliance, Jamf Pro fails to redistribute the updated configuration to target devices until they are re-enrolled.Note: This issue was resolved in Jamf Pro 11.31.0 and was inadvertently omitted from those release notes. Subscribe to Jamf Learning Hub contentWhen logged in to the Learning Hub, click the Subscribe button (bell icon) on the release notes page to receive email when that content is u

Hey folks! Just wanted to drop by with another bit of info that may be helpful when using the new Self Service+ application on your managed computers.  The app leverages macOS unified logging, so to grab logs you'll want to parse the log stream to get app activity.  One way to grab these files programmatically (as of version 1.2.0 of the app) is to use the Collect Troubleshooting Info option in the Help menu (or use the hotkeys ⇧ ⌘ L /Shift + Command + L) and the app will generate a zip file and save it wherever you specify.   For folks familiar with parsing the unified log on macOS, you can use Terminal to filter the log and look for Self Service+ events. To see events from the last hour would look something like this: log show --info --predicate 'subsystem BEGINSWITH "com.jamf.selfserviceplus"' --last 1h --style compact To stream activity from the app as it's running in real time you'd want to use an elevated log stream command, something like this: sudo lo

I often have different research groups that need to have admin access on their computers due to the type of work and research they are doing, but currently I don’t have a method to give them this access in the way they would like. Additionally, these research computers are shared between the primary researcher that can have admin access, and additional researches that cannot be given admin access.I use Jamf Connect with Entra SSO. Pre-stage enrollment creates all new users as standard users. When we use a command or trigger to elevate someone to Admin, this reverts to standard at their next login. Using Self-Service+, users can select temp admin access when they need it, but applying this to device means all users on the device have access, even those that shouldn’t, and applying it to a user makes it available to that user on any device, not just the device they need it on.I don’t know if there’s any other setting, configuration, or options I could use that would make this function t

Hey Nation!🎤 Free live workshop. Aug 19. Register now → https://jamf.it/JamfNationEventsHere's the deal. 👇JNUC is seven weeks out. Whether you're speaking on stage or just want to stop dreading the "can everyone see my screen" moment in meetings, this session is useful for anyone who presents, leads User Groups, or just wants to come across better in meetings and Zoom calls.We're kicking off the next session in our Development Series with Bryan Lemos, Senior Consultant at Decker Communications. Bryan coaches senior leaders at companies like Google, LinkedIn, Workday, and Pfizer (he's also worked with MIT and international heads of state), and he's tailored this session specifically for our community.You'll walk away knowing:The best ways to manage and overcome presentation nerves How to use the Behaviors of Trust™ to build credibility and connect with your audience, including executive presence, vocal tone and pace, and eye communication Storytelling methods that make your message me

Hi There, i would like to change local admin password via jamf, is that possible

Hello  Just wanted to understand how you’re using JSM for UIE. I noticed there’s a slight delay when triggering the Enrollment Complete policy for JSM. Self Service launches before the JSM policy is triggered/completed. Is this expected behavior, or is there a way to ensure the JSM policy runs first before Self Service launches?

From a small email distribution list to a formalized community forum, Jamf Nation has served as the premier online resource for Apple management enthusiasts for more than a decade. And recently, in case you missed the news, it hit a milestone - 300,000 posts. Jamf’s founder, and former CEO, Zach Halmstad, not only recognized the desire for customers to share ideas as a way to problem solve, but he also saw their need to connect as humans. So in 2012, he pitched an idea - Jamf Nation.   “Early on we witnessed the huge benefits our customers saw when they could ask each other questions and share their solutions,” Halmstad recalled. “Jamf Nation was the next step for us to ensure customers were successful.”In a 16-slide Keynote, Halmstad pitched his idea to his colleagues at Jamf. He shared the reasons to shift the company’s rapidly growing email distribution list to an online forum, citing communication as a main goal. (Slide from original deck shown below). Fast forward 12 years, a

Engage. Empower. Elevate.When we started Mac Admins India, the vision was simple: create a place where Apple IT professionals across India could learn from one another, build meaningful connections, and strengthen the enterprise Apple ecosystem.On 1 August 2026, the Apple IT community came together at Radisson Blu Hotel, Outer Ring Road, Bengaluru, for the second edition of Mac Admins India Connect. What began as an idea to bring Apple IT professionals together has quickly grown into India’s largest community-driven conference dedicated to Apple enterprise professionals.What began as an idea has now become India’s largest community-driven conference dedicated to Apple IT professionals.Community FirstTechnology conferences are often measured by attendance numbers, sponsors, or session counts. While those are important milestones, the true success of a community event is measured by the conversations that happen between the sessions.This year we welcomed 370+ attendees from across India

Hey folks, I worked on a script to deploy Autodesk 2026 (the one that uses the named user licenses). We don’t teach Mudbox, so that isn’t in the script...but Maya and AutoCAD is (along with Darwin..what a PIA to get working). I packaged the apps and deployed to /private/tmp/AutodeskApps… I have a lot of logging left in the script as Darwin is a royal pain and can fail at many different steps. I also made use of a lot of variables to hopefully make updating in the future easier. Oh, also did it in zsh.Hope you all find it useful, or at the very least, a good jumping off point!#!/bin/zshset -euo pipefail############################# VARIABLES############################YEAR="2026"TMP="/private/tmp"APP_TMP="${TMP}/AutodeskApps"LOG="/var/log/autodesk2026_install.log"DMG_LIST=( "Autodesk_Maya_2026_1_Update_ML_macOS.dmg" "Darwin.dmg" "AdskIdentityManager-UCT-Installer.dmg" "Autodesk_AutoCAD_2026_macOS.dmg")PKG_FILE="AdskLicensing-15.4.0.13093-mac-installer.pkg"INSTALL_SUMMARY=()log() {

In macOS Tahoe, the command to get the current AirPort network is not working as expected, and the SSID value is showing as <redacted>.Could you please suggest any alternative script or method to retrieve the currently connected Wi-Fi SSID name?This is required to help us deploy the Network Configuration Profile only when the Mac is connected to an out-of-office network.Thank you.

Hi All,Has anyone seen Jamf Self Service fail to run an otherwise-valid policy? Been looking at this for a whileWe use Alectrona Patch to install 99% of our Self Service apps with the below script. Whenever i run one of these policies through JSS i get an “Item Failed.” notification.  The symlink sudo patch install <id> works perfectly when run manually as root, so i think this is a Jamf error rather than a patch error, though i am speaking to them about it.#!/bin/zsh# Variablespatch="/Library/Application Support/Alectrona/Patch/patch"appName=$4# Check script parameter valuesif [[ -z "$4" ]]; then    echo "Missing Application parameter"    exit 1fi# Install App${patch} install ${appName} --silentif [[ $? == 0 ]]; then    echo "$appName installed successfully"    exitelse    echo "Install failed - error $?"    exit 1fiThe Jamf policy itself looks completely normal: enabled, no exclusions, no site restriction, ongoing frequency,  Running jamf policy -id X -verbose from terminal thr

An original version of this post has been shared to Patch Notes and Progress. Reflections from JNUC 2025 — automation, openness, and community taking Mac management to new heights. Denver, Colorado | October 6 – 9, 2025Day 0 — Travel and New ConnectionsJNUC 2025 in Denver was my first in-person Jamf Nation User Conference — and my first time ever on a plane. Over three days, I watched Jamf redefine what MDM means in an API-first world, connected with the Mac Admins community I’ve long admired, and saw firsthand how automation, identity, and community are working to shape the next chapter of Apple device management services. As mentioned in a previous post: Prepping for JNUC 2025, I had been awarded sponsorship by Jamf to attend this year’s Jamf Nation User Conference in Denver Colorado. Before I even left Pittsburgh, Jamf had already dropped next year’s headline: JNUC 2026 will be held in Kansas City, Missouri (Sept 23– 25), with early-bird registration open. JNUC 2026 to be hosted at

Today we are releasing Jamf Pro 11.31; highlights include:App Management Status Criteria for Mobile DevicesThis release adds an App Management Status criteria for mobile device smart groups and advanced searches. You can use it to find devices with unmanaged apps (e.g., App Name is X AND App Management Status is Unmanaged), or on its own to list all devices with any unmanaged app. For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. Subscribe to Jamf Learning Hub contentWhen logged in to the Learning Hub, click the Subscribe button (bell icon) on the release notes page to receive email when that content is updated (i.e., a new version of Jamf Pro is available). For more information about the Subscribe feature, see Jamf Learning Hub Watchlist. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Solutions section under Jamf Pro. Cloud Upgrade ScheduleYour Jamf Pro s

• Nearly 30 CVEshttps://support.apple.com/en-us/148281

We are in the middle of a refresh for school secretaries from iMac to MacMini and are noticing an issue where some MacMini’s are not checking in with Jamf, so we are not able to push anything out to them. We used Data Migration, with Time Machine data and restored from that. We did not move over previous JAMF hidden admin account, only the account need for the user. Any thoughts on what may be happening?

If not, you really should check out https://github.com/Jamf-Concepts/Jamf-Extender (and take a look at the other repos under Jamf-Concepts while you're there). Versions for Safari, Firefox, and Chrome/Edge are available.I’m not going to list all of the capabilities of the current version, but a few that I’ve found to be _extremely_ useful are:The capabilities of MUT accessible directly from the Jamf Pro console Identify how may times a Smart Group is used as a Target or an Exclusion  Convert unused Smart Groups to Advanced Computer Searches A Compare Profiles command to view the scope summary and which payloads are shared or unique (the settings in each payload are not displayed in the comparison however)Other areas where the extension adds capabilities are Blueprints, Jamf Security Cloud, and Jamf ProtectThanks to ​@Tribruin for calling out this very useful tool in the MacAdmins Slack #jamf-concepts-discussion channel

Hi Jamf Nation,Big news at Jamf. I'm thrilled to share that our Board of Directors has named Beth Tschida as Jamf's new CEO. Many of you already know Beth. She's been with Jamf for eight years, most recently as our CTO, and has served as Interim CEO since March.Beth has been at the heart of so much of what you rely on from Jamf: our cloud platform, our security portfolio, and our eight-year streak of same-day support for new Apple operating systems. She knows this community, she knows your work, and she knows that everything we build has to earn your trust.A quick word of thanks to John Strosahl, who led Jamf through our transition to private ownership earlier this year. John has been a great partner to this community, and we're grateful for everything he's done to set us up for what's next.Also important is what hasn't changed: our commitment to you. Managing and securing Apple at work is what we do, and with Beth leading the way, especially as AI reshapes how we need to think about w