I am a system administrator for a school in Germany. We have received a ton of IPads this Year where the MDM was an old version due to it still allowing the App Store and removal of the MDM.We have already tried many things like resetting it or contacting the City Administration but nothing had worked until now. If you could help me that would be very kind of you

We have a user who wants to run iMovie and Music on an iPad managed by JAMF.  They want to make promotional videos with iMovie and use Music to create playlists for events at our on-campus art museum. Both require the user to sign in with an iCloud account to launch the App (correct me if I"m wrong, I'm not a wiz at all this).  I don't want to encounter Activation Lock with this iPad so I'm wondering if a Managed Apple ID is the solution or if an email address that we create for the user (and know the password once they use it to create an AppleID and iCloud account) is the correct method. WWW research has not yet revealed this particular situation; can someone wiser than me offer help?

I am having an issue that I think is somehow related to Safari and our proxy. We have had several reports of users traveling off-network and having issues with captive portals. The Captive Network Assistant.app window appears but it's blank and says: "The webpage couldn't be loaded". If I open Chrome or Firefox, and go to https://captive.apple.com then the Captive Portal appears and I can do whatever I need to access the WiFi SSID. If open Safari, I am unable to get to https://captive.apple.com. Has anyone run across this issue? I'm assuming the Captive Network Assistant is using Safari to try to show the Captive Portal... 

Hey all, got a question for you. We have recently been using Jamf on our clients' Mac devices. However, we have been using ncentral for years now. We love the ncentral agents' ability to monitor device statistics and the alert board for issues. My question; can we install the ncentral agent via Jamf Policy? The research I have done so far has indicated they are competing for products. I am still planning on testing this but wanted to see if anyone else had already gone through the process and can tell me if I am on a doomed quest or not.

There is a notification in the Jamf Pro console showing that the Push Notification cert will expire in x days, but I can't find the option to send me an email to prompt me to take action. I do not live in the Jamf console! If this does not exist, does anyone have any suggestions for implementing a reminder/alert/notification externally to Jamf?  Thanks! 

Today we released Jamf Connect 2.42.0. This release includes the following changes and improvements: Removal of Support for macOS 12.xJamf Connect no longer supports macOS 12.x. Computers with macOS 12.x or earlier will be unable to install Jamf Connect version 2.42.0 or later. Any automatic update workflows configured in your environment will no longer apply. Other Changes and ImprovementsThe Jamf Connect login window and menu bar now include Brazilian Portuguese as a supported language.   To access new versions of Jamf Connect, log in to Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Connect. Product Documentation For additional information on what's included in this release, review the release notes via the Jamf Learning Hub.  

Hi there,Does anyone have a working method of disabling FileVault maybe through a script? The FileVault user is not the prestaged local admin account but the users themselves. Most likely this will require input from the user which is completely fine.One of the ways of doing this I thought of but may not work is to enable FileVault on the prestaged local admin through a script and then turn off FileVault alltogether but I'm just checking if anyone else dealt with this issue in a more graceful way.

Hello All,Hope you all wonderful people having a nice and relaxing days.I am trying to package and deploy AutoCAD 2023 with Network server license but It is not working for me. I am using script from following sites with customising to our licensing server and pKey but still no joy:https://community.jamf.com/t5/jamf-pro/autocad-2021-deployment-with-network-server/m-p/229028Also try to customise the scripts from following site but didn't work.https://www.autodesk.com/support/download-install/admins/create-deployments/create-deployments-for-autocad-for-mac The issues that it is coming up with are like:Crashes while launching the app.Sometime after installation it starts to roll back!! And uninstalls AutoCAD folder from  /Application Folder.Doesn’t create data file then comes up with error can’t find the data file while doing activation.Any idea please.  

My district has been using Jamf School for several years now and we love it.  It is much better than the MDM we had previously, and made our transition to 1:1 very easy.  We are considering an upgrade to JAMF Pro to get access to possibly some more features.  I would love to hear some feedback from some who maybe have used or have knowledge of both and get your thoughts on whether we should do the upgrade.  What are some of the perks of pro that would make the upgrade worth it. Thanks in advance.

Hello community, currently having the issue that we have two different accounts (asm/jamf). for a better experience we want to consolidate these, but not sure what the correct way is and I can't find any relevant articles. all iPads on both accounts are DEP registered. 1. adapt the DEP registration from ASM account 1) to account 2) - then the devices automatically end up in Jamf? (if yes, can we do this on our own?) 2. remove the devices from an account (via ASM) and add them to Jamf via Mac and Apple Configurator 2 or is there another way? Thanks in advance.

I hope this guide proves as helpful to others as it has been for our organization! If you're looking to automate the creation of application restrictions, you're in the right place. Feel free to ask any questions—this process might not suit everyone, but I’m happy to share more about what we do here at the college. The community has been a tremendous help to me over the years, and I’m eager to give back in any way I can.# Jamf Restricted Software Automation Script # **Overview**This Powershell script automates the identification and restriction of unauthorized software in a Jamf Pro environment. It analyzes applications installed on managed devices, compares them to a whitelist, and restricts unauthorized applications exceeding a specified usage threshold. Additionally, it generates a log report and sends an email summary with details of restricted applications. **Features**Automated Restricted Software ManagementAutomatically identifies and restricts software not in the whitelist. **

I'm trying to add the $ASSET_TAG variable to a login window config profile payload and all I'm seeing on the lock screen is $ASSET_TAG. I can use other variables, but that one doesn't seem t work.

Hello Team, Need one info, we can see Flexera agent deployment working fine when we are running the installer command with enabling root account in CLI mode. But if I run the same command with another user account which is also an admin I mean having sudo privilege it doesnt work, now my question is, is it security violation to run the command with root account(sudo su, which switchs to root account with CLI prompt sh-3.2#)?  Apple doesnt recommend to enable root account in GUI mode, is it valid for root account in CLI mode or it is OK to use root account in CLI mode?

I created the Cisco Secure Client package (version 5.1.2.42) using the Cisco documentation . It was working fine, but now I am seeing the error "No connection to VPN service. Reattachment failed" (Screenshot attached). I don't know what could be the root cause. Any help would be appreciated.  https://support.umbrella.com/hc/en-us/articles/23515921165844-How-to-deploy-Cisco-Secure-Client-via-JAMF-MacOS

Hi everyone, I set a code every afternoon on the iPad of my daughter to set screen time limits. The iPad also has Jamf School to restrict the usage of applications while children are in the school. Every time I check in family, the code enforcement is gone.Either my daughter knows how to hack it, or Jamf is interfering with family. I would like to ask you, if you have experience something similar? Best regards, Paul 

Is there a way to disable Password Manager in Settings? I don't want users to be able to view passwords nor add a password to the password manager for iPad/iOS devices.

Hi, I want to migrate my on prem installation of Jamf Pro to a clustered environment. What are the best resources on how to proceed. Until now I dont have any knowledge on clustering, so a complete overview on what to do would be appreciated. Kind regards

Hey everyone, We're currently in a situation where we have users mixing their corporate/managed and personal/unmanaged apps on our devices (please don't ask why, it's a long story). Unfortunately, this leads to some of them being unable to back up personal data into their iCloud, as the app is seen as a managed app, and iCloud backups aren't allowed for managed apps.It seems to me the most straightforward solution would be to convert the apps from managed to unmanaged. But I can only find information going from unmanaged to managed. Does anyone know if it's possible to convert an app back to unmanaged once it's been managed and how to do that? Cheers,Phil

Just wanted to give a quick issue-resolution I came across; our Jamf School instance (set up by someone else) has an issue with apps for macOS lingering in the "Pending" status. I am new to MDM, but my initial thought was that it was due to multiple device groups calling on Google Chrome to be installed, we have an "All Mac's" group and a "Student Group" both having Chrome and multiple other apps scoped to them simultaneously. I had a machine I was erasing for a student and I found no apps were getting past "Pending", so I decided to attempt to manually place another app on there not typically given to students, and boom, all the apps started installing.  I have gotten most of them down, but there are still a few apps that are lingering now on "Installing", could that be due to those apps attempting to install themselves from multiple groups?

Just wondering if I missed something ... Could it be that Apps from the Mac App Store do not work with Smart Groups in Jamf Pro 11.11 ? Since changing the target for some MS Office Apps to a Smart Group, those Apps do not receive any Updates on the Macs in the scope of the Smart Group. The MDM Management history looks like this:   

Can you also send the invoice for ‘Jamf 170 course Certification’?

I'm deploying the following PLIST config to Macs but users can still sign into other OneDrive Business accounts and they can still disable folder backup. Is there anything wrong with the below config?   <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>AllowTenantList</key><array><string>482a4ef9-66e4-4e76-9f24-6da09a713ee5</string></array><key>BlockExternalSync</key><true/><key>DisablePersonalSync</key><true/><key>DisableTutorial</key><true/><key> KFMBlockOptOut</key><true/><key>KFMSilentOptIn</key><string>482a4ef9-66e4-4e76-9f24-6da09a713e5</string></dict></plist>

Dear all, on our Jamf Pro installation, an upgrade from 11.7.1 to 11.9 fails:   1. We first try to follow the instructions here to migrate from Java 11 to Java 21 which is required for Jamf 11.9: Jamf Lernzentrum -> We are not able to stop Tomcat ("failed to stop. exit status 5"). Nevertheless, the uninstallation of Java 11 works, also the installation of Java 21.   2. The installation of JAMF 11.9 also works with no errors.   3. Out Jamf instace https://jss.<domain>:8443/ is not available after the upgrade.   Any ideas?

Hi Jamf Community, I’m working on setting up an Extension Attribute (EA) to automatically detect devices with stuck MDM commands (e.g., commands that are pending or failed for an extended period). The goal is to use this EA as a trigger for a self-healing policy that runs once daily for affected devices. Here’s what I’ve considered so far: 1. API Approach: • I explored the Jamf API but haven’t found an endpoint that provides detailed or reliable information about stuck commands. • If there’s a way to identify such commands via the API, I’d love some pointers or examples! 2. Local Machine Logs Approach: • This seems like the most promising path. My idea is to check logs on the local machine for the last executed MDM command and flag devices where no command has been executed in the past 24 hours (or based on statuses). • Are there specific logs or methods Can I extract this information programmatically?   If anyone has experience implementing a similar solution or insights into l

Hey,  We have multiple sites in our Jamf pro because we are a group of companies. Now we want to assign sites during the prestage enrollment. So, when the user will connect a new laptop with the internet, then it should pop up an option with site names so the user can select which site he/she belongs. Based on that, he will receive the enrollment customizations and policies made for that specific sites.  It is working fine with user initiated enrollment but I can't figure out how to do that with prestage enrollment. Can anyone help? Thanks