Hello Everyone,    I got a sudden challenge on my desk to get a BYOD system working for our comapny. From my knowledge there isn't a BYOD set up so to say for MacOS. I see user enrollment is the method for this and it enters a un-supervised state. My questions are: how do we differentiate in a smart group who has these machines to get certain policies? How do we remove company data if said user is offboarded for any reason (we don't want to leave the control to the user)? In anyone's experience, what are some best practices from your BYOD setup you have started in your company. I am a small team and JAMF isn't our expertise (working on getting help to dive deeper with MacOS Administration) so any help is GREATLY appreciated. Thank you!

Pro Tip:If you have a need to take action on a a number of devices, no need to put them into a group.Use the blank search and enter serial numbers separated by a comma “ , “ and “ “ space example:serial1, serial2, serial3, serial4, serial5You’re welcome.

Since this came up during our meetup:The name "Jamf" is a reference to Laszlo Jamf, a character in the novel Gravity's Rainbow by Thomas Pynchon. It’s not an acronym. It’s not rude. It’s not what happens when you type “f” really hard.Knowing is half the battle. . .

Need help with Jamf Pro API automation. We're trying to bulk update computer inventory records using the Classic API, but getting conflict errors when posting device information updates.Can authenticate and pull device lists fine, but PUT requests to update asset tags and department fields are failing. Need someone familiar with Jamf's API endpoints and bulk device management.Should be 2-3 hours remote work to fix the API calls and test bulk updates. Need working this week for our asset audit.

Hi all, so we’ve had multiple Macs (all M1 or newer) that have had Tahoe as an update and afterwards the keyboard is unresponsive - built in or external USB keyboard.  All you get is the ding noise and from reading, this can be an issue for some.   Also seems there is no way to block the installer, just defer is that correct?Well for now I’m trying to see if there is a solid workaround to fix the issue without a reinstall but so far came across nothing that worked for me :(  Anyone that knows about this issue, it would be great to get your input. 

Does anyone have any suggestions on how we can disable the "add to homescreen" feature in Chrome? Many students are adding games to their homescreen. 

Have you ever had to manage devices from a DEP instance you don’t control or even own? Or send DEP or BYOD devices to another campus where they need to be managed with a different MDM? This was the situation we encountered last year, and here’s how we solved it. Institutional ContextOur institution has expanded globally, adding new international campuses in Spain. These schools serve students from K–12, with management needs that differ significantly from those in the U.S. Because of local legal and operational differences, we chose to build independent technology stacks for each campus, modeled after our flagship U.S. campus. This provided consistency while allowing for flexibility.U.S. campus: Jamf Pro + Protect; BYOD model for students, DEP-managed devices for staff and faculty. Spanish campuses: Jamf Pro + Protect + Connect + Safe Internet; all DEP-managed, school-owned student devices.This design gave Spain the flexibility to support younger students in a day-school environment, w

Hello, Has anyone found a way to generate a report to find out if Screen Time is turned on on an iPad. From what I can tell that information does not seem to be available in Jamf Pro. Thanks! --Josh 

Has anyone gone through the process of creating a Configuration Profile Applications & Custom Setting  payload to restrict the AI options in iTerm2 (the prefs domain is “com.googlecode.iterm2”)? And if so, can you post the profile in this thread?Since I hate to re-invent the wheel I figured I’d ask before starting to build a payload for this from scratch…

Not sure when this would have occured, but i have verified on several devices. We are pushing out a printer using jamf and if you go into the “printers and scanners” section of system settings control panel, it says “no printers”. However if you go into an application, you can see the printer there. I can also see it when i run lpstat -p. Nothing has changed with this printer, we have been deploying it for years. So much be a new osx update that caused this.      any ideas? Its a bit of an oddity that i found while trying to diagnose a separate print quality problem for a user. Then i found that multiple macs in our environment do this. Perhaps someone has seen it before.  Also when did jamf forums search start sucking. I cant even sort by date of the post… yikes.

We have been using the following script as part of our deployments since Apple silicon became a thing (I did not write the script). It appears that the “--agree-to-license” no longer functions in Tahoe and appears to invoke “help” in policy logs. Manually running “softwareupdate –-install-rosetta --agree-to-license” also returns “help” contents. Has anyone else seen this? #!/bin/bash# Installs Rosetta as needed on Apple Silicon Macs.exitcode=0# Determine OS version# Save current IFS stateOLDIFS=$IFSIFS='.' read osvers_major osvers_minor osvers_dot_version <<< "$(/usr/bin/sw_vers -productVersion)"# restore IFS to previous stateIFS=$OLDIFS# Check to see if the Mac is reporting itself as running macOS 11if [[ ${osvers_major} -ge 11 ]]; then# Check to see if the Mac needs Rosetta installed by testing the processor processor=$(/usr/sbin/sysctl -n machdep.cpu.brand_string | grep -o "Intel")if [[ -n "$processor" ]]; thenecho "$processor processor installed. No need to install Rosett

Hi,I am looking for a way to restrict icloud login on managed macbooks to using managed apple ids only. Does anyone know a way of doing this?At the moment, even if we give a user a managed apple id, there is nothing we can do to stop them using a personal apple id on company macbooksthanks

Hello all, I know there have been a couple of topics around this already but I can't seem to find a solid solution for this. We are a university and have both user assigned and public apple computers and laptops. I would like todo one of the following:1. Prevent users from login into their personal apple ID's and lock the devices to only use our ITS apple ID (make sure they can not log out of it).2. Simply block the ability to sign into any apple ID.3. Force sign out users already signed into their personal apple ID's. I have tried to set this up using a configuration profile under Restrictions > Preferences but this does not work (once the profile is applied the section is still visible). I also don't like the restrictions method as this includes many other options I don't want to use (in Applications, Widgets, Media, ect).We are using Jamf PRO and Apple School Manager. Thanks!

I am looking for a script to remove old Jamf remote policies from Jamf cloud. We have several hundred of them I discovered after running Kmart tool. I found this one but I cannot get it to work. https://www.elliotjordan.com/posts/remove-remote-policies/ Thanks 

Just curious if anyone knows a way to disable ALL banner notifications. Just wipe them all out. I manage a few iMac labs and students really don’t need these things popping up for every single application they open. I can disable some specific ones with configuration profiles but it’s really hit or miss. Mostly miss. Thanks!

NoMAD has a bug on Tahoe, Whilst updated computers continue to work, new accounts appear to be unable to click on the NoMAD menu at the top of the screen.  Does anyone know a way to fix this?

Great success at our Benelux Apple Admins meet-up last last night! Thank you Mischa, Raf, Javier and Jonas for speaking and of course all attendees. On to the next one! 💪🏻 

Hello,we recently have the problem that the commands coming from Jamf Pro are stuck on the “pending” status. Not too long ago i tried to unmanage an iphone, which worked. But now its not possible to unenroll or to initiate commands in general without them being pending.Thank you in advance, i will put a screenshot of the problem as an example.Kind regards,Siraj 

With under-the-hood updates for macOS Tahoe 26, Mac Health Check (2.4.0) improves visual indicators for each of its various checks.https://snelson.us/mhc  

Anyone using TeamDynamix?  We are looking at changing our ticket system however, we want something that is integrated with JAMF or at the least user friendly with JAMF.  Any thoughts would be greatly appreciated

With 15.6 and beta macos 26The EA I was using for report back a macs SSID is now broken/blocked.Does any happed to have one that will works? Thanks #!/bin/sh# Jamf Extension attribute to return SSID## Check for SSID namewifi_name=$(ipconfig getsummary en0 | awk -F ' SSID : ' '/ SSID : / {print $2}')# Check if SSID is foundif [ -z "$wifi_name" ]; then    result="No Wi-Fi network found."else    result="$wifi_name"fi# Result for Jamfecho "<result>$result</result>"    

Hey Community!Whether you’re attending JNUC in person or watching from afar, we’re looking for a few amazing customers to take part in a quick 15-minute video interview during JNUC. As a thank you, participants will receive some exclusive conference swag 🎁. We’d especially love to hear from those who:✅ Work in Education or Healthcare OR✅ Are part of an organisation (any vertical) with 250–1,000 employees or 1,000–5,000 employees✅ Have experience with Blueprints, Compliance Benchmarks, or Endpoint Telemetry Your insights may be featured in:🎥 Promotional videos for JNUC🎥 Individual testimonials🎥 Customer success story highlights 👉 Interested? Comment below or email us at jamfnation@jamf.com to get involved. Not heading to JNUC but would love to share your story? Email jamfnation@jamf.com now!  Let’s showcase your story and celebrate your success at JNUC and beyond!

Hi dear Jamfies,  since im quite new to the whoe jamf environment and had to take over a whole functioning instance, i wanted to make Tahoe available via Graham Pugh’s “Erase-Install” script. The manual, i was left with described, that as first step, i have to create an entry via title editor and just copy and paste the information (with adjustments) from the earlier version. Now in my case, i cannot enable this title, meaning, it wont show up in Jamf Pro, please see attached screenshot. I also seem to fail understanding the note given, since the manual i was given from earlier coworkers does not mention any other steps besides copying and pasting the information on software title tab and requirements tab. Can someone help me out? Thanks in advance. 

Is it possible to create a Time Machine backup profile that limits the backup size depending on the clients storage. For example, if a Mac has 512gb storage I want to limit their backup size to 1TB but if they have 2TB storage I want to limit them to 4TB. Obviously I could create groups based on device storage size and apply a different config to each group. But I’m wondering if there’s some formula I could enter in the “Backup Size Limit” field or some other method to achieve this nicely. Thanks!

I think might be a Tahoe this? Multiple Macs in my environment have been having Self-Service+ crash whenever we run anything on it. It just closes itself with no error or explanation, and the subsequent policy doesn’t run. Tried on multiple policies with the same result on multiple different Macs, all on Tahoe (26.0). Had no problems with the Beta. Has anyone else seen this? I’ve deleted the keychain for Self Service+, re-installed, and deleted the cache for Self Service+ as well.Is this a known issue, by chance? Self Service+ version is 2.8