Hello All,    Just wanted to see if anyone else is experiencing this or has experienced this in the past. Our ABM is showing that it has not synced with Jamf since this update on March 18th. Since then we have not been able to automatically enroll any devices and due to this all of our purchased machines are not being enrolled at all and only show up in ABM. They are not showing up in Jamf despite them showing that they are connected to the Jamf server in ABM. Has anyone experienced this and does anyone know of a fix?

Need to disable Hand-Driven Reactions on MacOS (Thumbs up and 2 fingers on a meeting on MacOS can trigger fireworks, balloons, etc.) We are managing MAC devices from Mosyle tool (Alternate of JAMF) I want to disable this reaction feature for all the devices centrally on all the apps as this is Mac OS feature want to disable this feature on Mac centrally using a script. I know we can disable it by clicking on Green symbol and click on reactions when an app id open, but we want to disable this from Mosyle portal the reason we need a Script. Can someone help me with this.

Hello,   First off forgive me for my lack of understanding, I am new to Jamf and I just got thrown into the middle of it haha.   I am enrolling a new Ipad and it is enrolled in ASM and Jamf, but when it goes to install the managed profiles, two of them fail to install. It does not give any info other then that the status is failed.   Is there a way to see while they are failing?   Thanks, Matt.

Hi there,  This option was working till macOS Sequoia.  sudo defaults write /Library/Preferences/com.apple.loginwindow AdminHostInfo HostName This is working with a profile but now with macOS Sequoia it stops working.  Anyone see the same problem and is there a solution? Thanks

How to I change restrictions so that I can have ipads connect to any computer. I was able to do this before by selecting the trust button but this is not appearing anymore so now all ipads will not connect to any computer. I need this so that I can get photos off ipads to store on our server.

Hey all.  Is there a way to lock access to the WiFi settings on a macbook only during certain time periods combined with when a non-admin user is logged in?  We're having issues with our students using their hot spots and want to lock the computers to the campus WiFi durring class times.

I'm having serious performance issues with the 11.9.1 update (Jamf Pro Cloud). Any time I edit the scope of a profile the interface slows to a crawl and I get the dreaded "Poor network connection" pop-ups. It can take up to 30 seconds or more just to register keystrokes when filtering the list of computers and another 10 seconds or longer to select/add something. It was always slow/laggy working with profiles, but not like this. Anyone else?

I found an excellent script from Karthikeyan Marappan on his GitHub site for clearing out failed MDM commands.  Sometimes failed commands will prevent JAMF from allowing further policies to be pushed/deployed.  I took his script and put a nice GUI frontend on it   Initial welcome screen Results if no failed commands found Option for clearing out failed commands My repo link: https://github.com/ScottEKendall/JAMF-Pro-Scripts/tree/main/ClearFailedMDM

Hi- does anyone have a source for the Bluebook Exams installer package?  I can only seem to get it from the App store, and trying to build a package using Composer constantly fails.  (Building works, but the package doesn't work) Have to deploy to a student testing lab...   Thanks!

Hello, I am having an issue where my IOS devices (phones and iPads) are not updating inventory or updating any commands. All of my Macs however are running inventory just fine.  Most devices stopped doing inventory roughly a week ago however a handful continued for a few more days, and one single iphone ran inventory yesterday. I updated our on-premise jamf server, but this has not fixed anything. Any advice would be appreciated. Thank you,

Just noticed in Automated Device Enrollment that Asset Tag information loaded in the Placeholder is not showing up in the Device Inventory Details after enrollment. This has worked in the past but was wondering if anyone else has experienced this lately in Jamf School?

I am looking for a way to manage the settings to allow accessory (USB/Thunderbold). In the System Preferences are these settings available: Ask every time Ask for new accessories Automatically when unlocked Always But I didnt find any setting options in the following MDM command: https://support.apple.com/guide/deployment/manage-accessory-access-depf8a4cb051/1/web/1.0 Is there a different way to set this option to "Ask every time" ?

On March 20th, 2025, the NYC Jamf User Group (NYC JUG or “the JUG”) celebrated its 11th anniversary—a milestone that reflects the remarkable growth and resilience of the Apple Admin community. What began as a small gathering of 20 admins in Jamf’s old NYC office has flourished into a thriving network, now meeting at Apple’s 11 Penn Plaza location, with over 80 attendees regularly.A Look Back: From Humble Beginnings to a Thriving CommunityFounded in 2014, the NYC JUG was created to bring Apple admins together to share real-world Jamf experiences outside of official events. With early encouragement from Jamf supporters, including Henry Patel and Jonah Klevesahl (now at Apple), the group held its first meeting on February 18, 2014, after a few weeks of promotion on Jamf Nation.What started with 20 admins quickly grew through word of mouth. By the third meeting, the group had outgrown Jamf’s office, prompting Apple to offer their 100 Fifth

Through necessity, a need arose to enable users to be able to install Tableau Desktop on their Macs via Self Service. But with the app not currently being available in the Jamf App Catalog, a scripted process was devised to enable the installation of Tableau Desktop on a Mac, whilst ensuring the correct variant for CPU architecture (i.e arm64 on Apple Silicon or x86_64 in Intel based Macs) was deployed. After putting time into curating the script, I felt it would be good to share this with the community for anyone else who may need to deploy this within their environment:   #!/bin/bash cd "/Library/Application Support/JAMF/tmp" # Update variables. These shouldn't need to change for each update dmgname="TableauDesktop.dmg" pkgname="Tableau Desktop.pkg" apptoreplacerunningname="Tableau" # Determine CPU architecture for download arch=$(/usr/bin/arch) if [ "$arch" == "arm64" ]; then dmglink="https://www.tableau.com/downloads/desktop/mac-arm64" echo "Running process to download arm

Hello! Our school uses Jamf School. Now I got an advice from a student that the students have the opportunity to lock themselves in an app in the morning before our restrictions become active and thus make our restrictions on their iPad ineffective. That sounds very much like "single app mode" to me. A review of the activity protocol in Jamf School also revealed that an iPad rejected restrictive profiles because it was in "single-app mode," which was certainly not activated by the school admin (me). Questions: Is there a way to disable user-triggered single-app mode? Or, if this is already running on an iPad: Is there a way to end a student-activated single-app mode through Jamf Teacher or by the admin in Jamf School? I can't find anything about it at the moment. But that would really be an important function?

Hey everyone! Long time reader, first time poster.  I am trying to configure a custom analytic in Jamf Protect, that will create an alert, similar to the default analytics, in the "Alert's" pane. This one is a little too robust, in terms of what its creating alerts on. Basically, we are trying to create an analytic that can be used to audit against installed .app software on endpoints, as a way to maintain and ensure compliance with the software allow list. The predicate doesn't need to do anything other than alert when an application is installed. We want it to ONLY alert on the primary .app, and not a bunch of child folders or .apps associated with it. Any ideas on the best way to modify that predicate?   $event.type == 7 AND  $event.isNewDirectory == 1 AND  $event.path ENDSWITH[cd] ".app" AND NOT ($event.path CONTAINS ".Trash" OR $event.path BEGINSWITH "/Library/InstallerSandboxes/.PKInstallSandboxManager")  

I am working on creating some installer packages to run on some Macs that are not yet enrolled in my Jamf Pro server. For reasons outside my control, we need to install several apps on these Macs using the processes that would have ran had they been enrolled in Jamf Pro. The installer packages deploy all the install components, then they use a post install script to finish the install process. The post install scripts feed in tokens and licensing information. I am using a valid Apple Developer ID installer certificate. If I launch any of these packages, I can see that the certificate is there. I can also open them in Suspicious Package. It shows that the certificate is there and trusted. When I launch these packages on a Mac that is not the one I used to create them, I see this error: "Apple could not verify “NameOfMyPackage.pkg” is free of malware that may harm your Mac or compromise your privacy." I can run "sudo xattr -r -d com.apple.quarantine" followed by the path to the package.

Would love to hear some success stories.

I'm trying to utilize a script that will upload a file as an attachment to a computer. I'm trying to figure out the minimum necessary permissions to accomplish this. I used an admin account and was able to upload fine, but when I try to use a lower-privileged account, I get an HTTP 502 response code from the CURL command. Some of the permissions I think might be related already are:- Allowed File Extensions (Read)- API Integrations (Read)- Computers (Read, Update)- File Attachments (Create, Read, Update, Delete) I can't find anything in the admin guide or on the API page

borrowed the script from @bwoods and put some nice Swift Dialog UI on it.  Gives user notification of what is about to happen and notifications along the way.   #!/bin/zsh ###################################################################################################### # # Gobal "Common" variables (do not change these!) # ###################################################################################################### export PATH=/usr/bin:/bin:/usr/sbin:/sbin LOGGED_IN_USER=$( scutil <<< "show State:/Users/ConsoleUser" | awk '/Name :/ && ! /loginwindow/ { print $3 }' ) USER_DIR=$( dscl . -read /Users/${LOGGED_IN_USER} NFSHomeDirectory | awk '{ print $2 }' ) OS_PLATFORM=$(/usr/bin/uname -p) [[ "$OS_PLATFORM" == 'i386' ]] && HWtype="SPHardwareDataType.0.cpu_type" || HWtype="SPHardwareDataType.0.chip_type" SYSTEM_PROFILER_BLOB=$( /usr/sbin/system_profiler -json 'SPHardwareDataType') MAC_SERIAL_NUMBER=$( echo $SYSTEM_PROFILER_BLOB

Hello All,    We want to use superman to update our MacBook fleet but our higher ups want to make sure that this device is not malicious. Has anyone run into this before and point me to any confirmation that this software is not malicious. I know that many people use this to update MacBook fleet as Jamf built in software updates does not work on OS under 13 and asking users to update their devices never works. 

Hi there A quick question, hopefully. We have a new config that has been pushed to some users to test new APs and a new SSID. A couple of them have not connected automatically to the new SSID, despite valid certs etc in the payload and having successfully appeared in the keychain. In the config, there is a "trusted certificate" area, under the Trust section in 802.1x settings So a couple of questions- Any idea why some users didn't connect automatically despite the profile being there, and some people connected just fine? Can someone please explain what the "trusted certificates" does? If the user tries to connect manually to the SSID, they choose the cert to connect with, and then they have the pop up from Apple to say to confirm trust etc. The certs in the wifi part of the network config are ticked, so I would have thought there would be nothing to do- but some users are still being requested for manual authentication / connection.

Hi! Is there any way to allow an app DLP to capture the screen on macos without user involvement or notification?

Hi,we recently acquired a Jamf Pro license and wanted to build a update ring for certain softwares.Since Cisco Anyconnect is not available in Patch Management i thought i'll make a feature request.

Hi there,  I hope this message finds you well. I purchased a few apps from Apple School Manager earlier today. I can see the number of available apps was increased in manage licenses. I also received an email from the Apple Store that mentions Your recent VPP purchase is available. When I go back to mobile device apps on Jamf Pro, the number of apps in managed distribution did not increase. I checked, and no certificate was expired. Every certificate is still active. Please kindly advise on this case. Many Thanks, Jonathan