Issue - Adobe Reader, when installed using the default “vanilla” method e.g., via Adobe’s public download, exposes users to In-app advertisements and upgrade prompts promoting Adobe Acrobat Pro features setting the expectation that all users are entitled to Acrobat Pro licenses. I created a plist file, but it isn’t working. Can anyone help me sort this out? I’d really appreciate it. Thanks in advance!

Hello everyone We are trying to deploy FortiClient VPN only from this link https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/76cde386-1f8c-11ef-8c42-fa163e15d75b/FortiClient_7.4_Jamf_Deployment_Guide.pdfthe Application installed perfectly but we have issue with configuration of the app1- To grant FortiTray permissions to load and grant network access.2- To grant full disk access to load the following FortiClient processesI have made the same as what they mentioned in the pdf but the user get popup to allow them.what I want is:1- These configuration only install if they install FortiClient.2- Not popup any thing to the user when install FortiClient to allow for permission3- If someone can

Hi,Some students iPads updated to iPad OS 26.2 can’t access to safari and then we tried to install chrome and get the same problem. Can’t reinstall only the app and if we try to erase the iPad and reinstalling get the same problem :(Thanks 

How to cleanly and properly uninstall Adobe Creative Cloud apps has been an ongoing Mac admin challenge for years. I recently came across this post by Anthony Reimer which details how to uninstall an Adobe app by it's sapCode and base install version number. I decided to see if that method could be automated to uninstall all currently installed Adobe apps. And it can!Instead of specifying a baseVersion, my script looks at "/Library/Application Support/Adobe/Uninstall" to find a list of Adobe apps currently available for uninstall. It then passes sapCode and current product version to the Setup executable.I've also included additional code to specifically uninstall Acrobat and the Creative Cloud Desktop app.I've only tested this on 2020 versions of Adobe apps so it may or may not be useful for older Creative Cloud apps. If you have some older installs ou

Today we are releasing a maintenance version of Jamf Pro; highlights include: Resolved IssuesJamf Pro Server: Security IssuesJamf provides the CVE-ID for security issues with high or critical severity when possible.[PI148977] Fixed: A security vulnerability in the Jamf Pro API.Jamf Pro Server[PI134850] Fixed: Packages with special characters in their filenames appear to upload successfully to the Jamf Cloud Distribution Service but are unavailable until renamed or re-uploaded.  For additional information on what's included in this release, review the

Hi, The available guide is for JAMF Pro. Any advice for JAMF School how to deplay the XML? Thank you

Hi,I am experimenting with Compliance in Jamf Pro. I setup CIS lvl 1 monitoring as a start and without any Azure connection. But somehow it keeps giving the error: “Management settings deployment failed”. We run 43 Macbooks, all rolled-out with DEP and correct registered in Jamf (and Protect). Any idea?

Hi Guys,We are facing very weird issue at our Orgs, where none of the packages are getting installed during enrollment for some devices. The issue is not for all the devices, and usually for few devices but been having this issue once in a while.All the packages are signed, and works perfectly fine for most of the device. And for god sake, we cant replicate this issue whenever we do a testing.Those devices who have issue with package installation, usually works once wiped and re-run the enrolment process.Does anyone have idea on how to get this sorted?

Hi all, I'm trying to upload a guidance from Compliance Editor to Jamf pro. I'm at the portion where it's asking for a client ID and secret. I haven't used the jamf API before and I know you need to create a API role first, but I'm not sure what privileges I would need for a compliance editor upload.

I am currently using an iphone 16 as a work phone and on our last cruise (MSC) the phone was not able to connect to the ship’s wifi.  I was told by the cruise line that it was because of Jamf protect running on my phone and that was blocking the phone from recognizing the wifi signal since it was a new wifi network.  I have had this same issue in the past while attempting to connect to a wifi network in a hotel or restaurant that was not a typical network for my phone.  I am trying to figure out if this is indeed correct or if there are settings on my phone that should be toggled on or off to allow it to access the internet through a wifi network that is not familiar to my device.  Any help would be appreciated.   

We are facing issue with screen recording permission. To unlock security and privacy the device is asking for admin username and password. First of all, we don't know who those admin creds are. Second, we want to allow all users to be able to access security and privacy. This issue arrived only after we configured jamf connect with Azure AD. Not sure how to resolve it.

Hi Jamf Nation, we're thrilled to announce that compliance benchmarks capability in Jamf Pro is now generally available! This release transforms how your organization manage compliance across Apple devices, making compliance validation and enforcement simpler than ever before.   Benefits At the heart of this new capability is a streamlined approach to security compliance: Quick Setup and Implementation - we've integrated both CIS Level 1 and Level 2 benchmark templates from macOS Security Compliance open source project (mSCP) to allow rapid deployment of compliance rules. Using compliance benchmarks, IT teams can quickly create compliance configurations across your organization. Flexible Options - IT teams can assess compliance status in monitoring mode before enforcing changes, allowing them to u

We currently are not syncing our ASM data over to Jamf.  We are, however, using Jamf Teacher in some small instances by mnually creating Classes.  We are manually creating rosters for a credit recovery classroom where students come and go.  The result in Jamf Teacher?  A Jamf Teacher roster that is not alphabetized.  The credit recovery facilitator sees students who were in there “first” by the IT department’s selection and Save.  Each new student added just gets appended to the end of the Jamf Teacher roster in the Jamf Teacher app.  This makes it a mess for selectively adding or removing lesson restrictions for an individualized experience.Has anyone figured a way around this?It would make sense for the app to have a sort option built in, but it doesnt!

I have 3 devices in my org that when they hit the JAMF Connect Login screen to MFA into the device it auto-reboots.  I do not have a chance to choose local login since it is instant. I'm not sure if it's a pending policy or JAMF connect causing the issue since it has not checked in since the reboot has started. I do not see any pending policies in the logs. I can't apply any current policies or check-ins since it reboots too quickly to check in to JAMF and or post a boot up trigger. 2021 M1 Macbook ProJamf Connect 2.45.0

JAMF Nation, I am trying to configure a plist file to disable Bluetooth Sharing. It appears this could be done in com.apple.Bluetooth in the "By Host" folder of preferences in finder. (Users/$user/Library/Preferences/By Host) I have come up with the following plist, when I push it via the JSS it is installed on the endpoint but the setting isn't enforced. Has anyone enforced this setting in this manner? Additionally I am aware of the JAMF Github with the CIS benchmarks and @franton Github with the benchmarks as well. I would just like to enforce this via config profile if possible. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PrefKeyServicesEnabled</key&

Hello Jamf Nation!We’ve released Jamf Pro 11.25.0 beta. This release includes Branding Self Service+ for macOS via Jamf Pro, Improvements for OIDC-Based Single Sign-On Through Jamf Account and more.How to join the beta: Enroll in the Beta Program under Product Feedback at account.jamf.com. Click “Join Community” to join the beta forum once enrolled. Please also check out this recent blog on Configuring SSO in Jamf Account prior to testing Compliance Benchmarks, Blueprints, and App Switcher.Email beta@jamf.com with questions.The beta program is covered by the Jamf non-disclosure agreement; please do not share any information regarding your testing on any public forum, including the non-bet

Hi All,we currently use Jamf School to manage our iPad estate.  it works great for what we use it for, but the goalposts have been changed on us.Moving forward, Cyber Essentials requirement are set to change so that our devices need to be trusted.  Our trusted IP address will no longer satisfy the requirements.  So we will need to add our devices to Microsoft Intune.  I believe that this is configurable with JAMF Pro, but not JAMF School.  Is this the case? Is this a feature that will be added in the near future?We are currently having to evaluate using Microsoft InTune as an MDM alternative to JAMF School if it cannot fulfill this requirement, and it is already covered in our Microsoft Licence.Any advice would be much appreciated.

We are using Jamf School to send a profile that blocks certain apps on student tablets from 8:30 AM to 3:00 PM. However, for the past few weeks, this profile—and all other profiles—activate as scheduled but then get removed by themselves after 5-10 minutes, causing a continuous loop of removal and reinstallation throughout the day. Has anyone experienced this issue or knows a solution to prevent profiles from repeatedly removing themselves?

I just found out that Microsoft Office has been automatically saving all files to the cloud for several months. I would like to disable this feature for my environment via Jamf Pro. I guess the easiest option would be to uncheck “Enable automatic saving by default” in Office via Configuration Profile. Where can I find the plist that controls this setting? Are there other ways to set this centrally via Jamf Pro? 

Hi everyone,I need help understanding the correct way to disable password sync in Jamf Connect while still using Google Workspace authentication during ADE enrollment.Our current setup (Jamf Connect + Google Workspace + ADE) behaves like this: During initial login, the user signs in with their Google Workspace account Jamf Connect creates the local macOS user account based on the Google workspace account (First name and Last name) The initial local mac password is set to the Google password If the user later changes their Google password, Jamf Connect detects a mismatch and prompts:“Your local password and network password are different. Please enter your local password to sync.” Once the user enters it, the Mac password gets updated to match the new Google password What we want instead: Users authenticate with Google Wo

We have one user with a Macbook Pro M1 Laptop. Big Sur is installed on the machine and the logged in user is a Mobile Account and has admin rights. File vault 2 is also enabled.Deployment was some month ago and everything worked fine. Two days ago the user approached me as he was not able to login with his account credentials at home. He was in the office yesterday and after I logged in with my local admin account everything was fine and he could work. So told him to also to update his Big Sur installation from 11.2.x to the latest version 11.5.2. But as he tried to enter his password the following screen states that Authentication is disabled.I grabbed this screenshot from the internet cause our dialogue is in German.Anybody have seen this? Where does this come from and how can we fix this? I would greatly appreciate your help.Thanks

Hello everyone!I’m currently going through a PCI audit process and we need to collect logs for specific events within macOS, we aim to do this with Jamf Protect (Telemetry, Analytics, Unified Logging, whatever fits best honestly). But having rather low success so far, given the amount of noise we get from, probably, too general predicates.Have you had to set this up? Do you have hints or tips (or, even better, your analytics/filters)? This is the list of events we want to get logged: a. all administrative actionsb. accessing audit trailsc. invalid access attemptsd. successful access attemptse. elevation of privilegesf. creation/deletion/changing an account with admin privilegesg. start/stop/pausing of audit logsh. creation of system-level objects Thanks in advance!

We have a few iMacs running Sequoia 15.5 and Jamf Connect that are going to black screens after you log in. Both local user accounts and IdP accounts are affected, but I can see the user folder is being created when we log in against our IdP, I get the account creation message but it just hangs on the black screen. Local admin account is having the same problem. I’ve tried uninstalling, restarting, and reinstalling Jamf Connect, but the problem persists. Uninstalling and logging in as a local admin user causes a beach ball to spin, but it sits there and doesn’t not progress. I’ve checked the config profiles and license and they’re all valid, and this isn’t happening fleet wide, just randomly.if I create a new user through Jamf, the user will create, but I can’t log into that account, it immediately dumps me back to the JC login window without any feedback. I can see the new user’s account by running dscl . -list /Users UniqueID but it still hangs. Resetting authchanger d

We're having an issue with the Jamf Setup app (iPadOS) displaying in single app mode. We've configured the app so that the user can enroll their device during the process with Entra Login. However, the Jamf Setup app requires Safari to display the Entra registration window. Unfortunately, when I launch the Jamf Setup app in single app mode, I can't enroll my device because the Entra registration window doesn't appear. I don't want to use the "restriction" profile to only allow Jamf Setup and Safari, because our users might simply browse with Safari without registering their device. Do you have any suggestions or experience on how I can lock my iPad in the Jamf Setup app and registering the device using Entra Login?

I am gradually learning how to work with blueprints. I have had success managing software updates with blueprints, so I decided to try out restricting external drives to read-only access. I want to stop controlling this using Proofpoint DLP (which I think is crapware) and start controlling it with blueprints.After configuring the blueprint, I deployed it to one of my Macs, then connected two USB drives. Neither drive appeared on my desktop. I opened Disk Utility and found both there. When I clicked to mount each of them, they would not mount. I saw no errors. They just won’t mount. As part of my testing, I uninstalled Proofpoint DLP, which is being used currently to make external drives mount as read-only. Before scoping the blueprint to my Mac, I confirmed that I could mount drives and write to them. I just recreated this on a second Mac. It’s the same issue. Proofpoint DLP is removed. The blueprint is installed. A PLIST was created at /private/var/db/ManagedConfigurationFil