Hey there! I have a problem where, randomly, the downloads from App Store are not working anymore. For example, I am trying to install 2 devices. Same OS. Word will install on one, and the other one says "AppStore request (submitVPPRequest) timed out". It does not make sense to me. 

Battery capacity under Hardware section shows 1% in Jamf Pro 11 (not sure if this issue existed prior).When I look in System Information, it's at 94%. 

Hi all,after the update to OS18, students can no longer receive files via airdrop on managed devices. They can, however, still send. And it does not seem to be a general OS18 issue. Anyone else have this issue?

Building a Jamf Cloud instance. Jamf 11.1.3Test machines is Sonoma 14.2. The machine seems to set up fine but doesn't get a machine certificate from my ADCS connector. The WiFi payload which would normally deliver it - gives 'unable to decrypt profile'(disregard the AD bind error. FWIW that's temporary because I'll be using Connect)The machine seems to set up fine but doesn't get a machine certificate from my ADCS connector. The WiFi payload which would normally deliver it - gives 'unable to decrypt profile'.

We have set up Single Sign-on via Azure, and it works like a charm.However, a couple of weeks ago, an alert popped up that the "Signing Certificate issued by SSO Identity Provider is expiring in .. days".I followed the instructions to "Visit your SSO Identity Provider to update the certificate", and the newly activated certificate is valid until June 2026.   But, the alert does not go away.   In the SSO settings, we originally linked to a URL for the Identity Provider Metadata Source; and, this URL did not change in Azure when the new certificate was activated.  I tried to replace the URL with the updated metadata file, but still no change in the alert. I suspect that the best practice for SSO certificate management involves updating it more than 30 days ahead of the expiration (30 days, being when the alerts started); and, since it progressed to the point of alerting, it can't be undone?   Having reached this point, however, I wonder what I can

Hi allFirst post on here, exciting times! So we have a deployment process with Jamf Pro that pushes out an admin account with LAPS enabled. All good there. Except we have a mac that has the account manually created, which is blocking LAPS from effectively working on this specific device when needed. Wondering how clean it is to either change name on this account or delete entirely from Jamf pro without the need to manually intervene on the mac?  I dare say this kind of post has occurred before so feel free to direct me there if so.  Thanks for the assistance everyone!  

has anyone had any success in packaging the iOS simulater from the xcode developer page with any success? 

Today we are releasing Jamf Pro 11.10. Highlights include: New Keys for System Extension PayloadJamf Pro includes two new system extension types for computers with macOS 15 or later. In macOS 15, end users can see and disable previously installed managed system extensions (e.g., endpoint security tools) through System Settings or Finder. You can use these new settings (Non-removable system extensions and Non-removable system extensions from UI) to prevent end users from removing these system extensions.If you use Jamf Protect, which runs as a system extension, Jamf strongly recommends configuring this new MDM setting to restrict users from disabling Jamf Protect.Note: This feature is also included in Jamf Pro 11.9.1 or later. App Installers Workflow ImprovementWhen using App Installers to install an app via Self Service, Jamf Pro automatically detects and updates the app regardless of the version installed on a computer in scope. (Previously, unknown versions were not updated.) An un

Is there no way to correctly add AirPrint printers with Jamf Pro?  I see that it's exceedingly easy with Jamf School, which we don't have (despite being a school.)  It's also exceedingly easy with iOS devices. But for some reason it appears to be impossible for macOS via Jamf Pro.I keep revisiting this over the years, and there's never been any updates.I'm paranoid because LPD is being deprecated and will disappear at some point soon, even though it's been years since the ominous warning showed up.I know that adding it via Terminal technically works, but it always has a generic printer icon.  I don't want it to technically work.  I would like the printers to have the correct icons associated with the printer name as a visual cue for the students.Am I missing something?  Or is this still not fully implemented for Jam Pro for the past who-knows-how-many-years?

please upvote if you agree   https://ideas.jamf.com/ideas/JPRO-I-740 the thinking goes like this i want to add Multiple poliucies and profiles to a group, or even a single machine, currently we have to go into each policy and profile to add the mac/group.   this request would allow us to select the device, or static/smart group, and then add the policy's/profiles to that group      

Hello Nation!Noticed an older Wake on LAN policy that we have here in our Jamf Pro is returning errors. The command that the policy pushes is systemsetup -setwakeonnetworkaccess on and this is the Result of the command:2022-03-25 10:57:04.301 systemsetup[90262:4178974] ### Error:-99 File:/System/Volumes/Data/SWE/macOS/BuildRoots/533514bb11/Library/Caches/com.apple.xbs/Sources/Admin/Admin-911/InternetServices.m Line:379setwakeonnetworkaccess: On My first guess was that the computers that were getting the error may have the setting already enabled, but after unchecking the Wake for Network box in the power settings and redeploying the policy to a device to test, it still returned the same result. When resorting to Google-Fu, outside of using a homebrew pkg or pearl, I mostly saw others use the same command as myself to enable wake on network. Did the newer macOS updates change anything that I am missing that would affect this, or is there any other method that doesn't involve homebr

Hello all, I have run into an odd issue here on two M1 MacBook Airs I'm working on. When proceeding to the Microsoft Azure sign in page for my school district, I get prompted with an error."Invalid Request: Error from request to URL: ,Error: the certificate for this server is invalid. You might be connecting to a server that is pretending to be "login.microsoftonline.com" which could put your confidential information at risk., STATUS: 0" I have checked the MacBooks in Jamf Pro and they have the correct certificates installed. It is also only happening to these 2 devices so I'm not sure what could be causing the inability to sign in through Microsoft Azure.

Anyone in JAMFnation use it? Pros Cons? How bad is it to implement and have you seen any degradation on the Mac's? Thanks in advance.

Trying to configure it in our environment but can not seem to find the configuration profile setting for it. The white papers says:To add suggested Managed Apple ID Default Domains that will display on the login screen, click + Add a domain and enter the domain names. Each school domain must include the top-level domain, such as .com, .edu, .org, and so on:https://learn.jamf.com/en-US/bundle/security-focused-jamf-solution-guide-education/page/Configure_a_Secure_Environment_with_Shared_iPad_Using_Jamf_School.htmlBut this is for Jamf School and we user Jamf Pro Cloud and the corresponding setting do not seem to exist (or I'm just looking in the wrong place. The setting do not seem to show in pre-stage settings or as a configuration profile. Anyone have a clue how to manage this in Jamf Pro?

Afternoon All.   Hoping someone can help have been trying to package Maya & Mudbox 2024 for serveral weeks and facing issues I think with the license demon not starting before its get licensed.I get below error from Jamf log connecting to Service failed: reading configuration file /Library/Application Support/Autodesk/AdskLicensingService/AdskLicensingService.data failed: open /Library/Application Support/Autodesk/AdskLicensingService/AdskLicensingService.data: no such file or directory connecting to Service failed: reading configuration file /Library/Application Support/Autodesk/AdskLicensingService/AdskLicensingService.data failed: open /Library/Application Support/Autodesk/AdskLicensingService/AdskLicensingService.data: no such file or directoryMy scripting ablity isnt up to much, I think I just need a few lines in my current script to ensure the license demon is running before the license process starts. Can anyone help? Have tried a few scripts on here but keep facin

Build an Configuration Profile for test purpose set home folder to https://www.apple.com Profile is installed but Firefox don't react to it at all.Used the policies.json from here https://github.com/Jamf-Custom-Profile-Schemas/JSON-Schema-for-Jamf-Pro-Applications-and-Settings-MDM-Payload/blob/master/Mozilla/Firefox.jsonFireFox is installed with InstallomatorScreenshot: What am I missing? 

Hello,Using JamfNow, I am able to enrol a Mac purchased via Apple business. (i.e. device was automatically inserted into ABM on purchase of device by Apple).I am able to use created blueprint within JamfNow to push the setup to the Mac.I have 1 issue, the status screen for the device says that Activation lock is not activated, when I look on the Mac looking at System Information I can see that activation lock is not activated.   I have tried the various combinations of activating Find My on the Mac, deactivating, wiping the Mac, reinstalling. I have gone as far as wiping the Mac by erasing disk and reinstalling OS around 10 times trying the various combinations without luck.I have even have gone as far as removing the Mac from JamfNow and ABM and trying to get activation lock to activate outside of the ABM without success.My understanding is that while a user cannot remove the management profiles, they could wipe the Mac and reinstall using their own Apple ID or if stolen the

Since there's no configuration profile options for the IOS Microsoft Edge browser, I assume the only option I have to do any customization is to add XML to the App Configuration tab within the Edge Mobile app page. Does anyone have or can point me towards official guidance on Edge settings options using this method?  Specifically, I am looking to disable Copilot in IOS Edge because it's driving people nuts in certain web-based apps. But it would be nice to have documentation on customizing any number of web browser settings if anyone has any. I've seen some references, but they all appear to apply to MacOS Edge and I need any information on configuration options for IOS Edge. Thanks!  

Hey Everyone! We are looking to send out documentation to our fleet on how to enable and use TouchID on their macOS system should they want to. That being said, I am having a hard time determining which macOS systems in our fleet even support it. I am not looking for if it is enabled, disabled, or if fingerprints have been registered just trying to see if the touch sensor technology is even there on some systems in our fleet. Can this be accomplished with an Extension Attribute? If so, can anyone point me in the right direction? I tried like every one of them suggested in this thread but not working on 14.5 Sonoma as an EA or linked to a Smart Group: https://community.jamf.com/t5/jamf-pro/touchid-extension-attribute/m-p/170024 Looking to avoid painstakingly going through each model and looking it up, hah. Thank You!

We woud like to be able to monitor for changes to the sudoers file on Jamf Pro devices, via Jamf Protect.We tried creating a new custom analytic, but it does not seem to work during our testing - no events are logged in the Alerts tab. Anyone know if there is an issue with our setup? It wont let me add a screenshot, so here is the 'predicate' in the Summary tab for the analytic:( $event.isModified == 1 AND $event.path ==[cd] "/private/etc/sudoers" )The 'Event Type' is 'File System Event'

I've run into an issue with using Company Portal to register Macs in Entra for compliance purposes. It SEEMS to be a permissions issue. My admin account can register them, but my Joe Schmoe user account with no privileges can't. What I can't wring out of Microsoft or Jamf is what type of permissions my normal account might need to perform this action. We use Intune, not Jamf, for our mobile device management and we have Windows machines there as well. I can register or enroll all of those devices just fine, in testing. And my Admin account works just fine. Shows the device, compliance syncs over. All the fun bells and whistles. But with my regular account, I get this incredibly generic error when trying to even sign into Company Portal from the Self Service registration workflow... Anyone have any ideas what permissions/privileges our standard accounts might need to register Macs in Entra for compliance?

Is there any application that can be used for the iPad and Macbooks to record the screen as it goes through ADE? I want to be able to use this for training purposes for our staff and IT department to make how-to. I have a bezel but it doesn't allow the ability to record the enrollment screen when enrolling a new device through our prestage. 

Can anyone explain why do some computers in Jamf drops the minor Operating System Version.ie.  If I have two M3 computers with macOS 14.7.0 build (23H124)One show in Jamf as 14.7 and the other shows as 14.7.0 We have seen this for many minor releases and help in fixing this anomaly would be appreciated as it messes up our reporting. 

Hi All,   Has anyone got the script enable the migrating local account with cloud identify (Azure), Pleas see link for more information:  https://learn.jamf.com/en-US/bundle/jamf-connect-documentation-current/page/Existing_Local_Account_Migrations.html Kind Regards

 Hi Jamf Nation, Is there a remote lock script that someone can recommend for a Mac in Jamf Pro that not managed? (Can only be deploy by Jamf Pro)Also is there a script to turn Mac's from unmanaged to Managed in Jamf Pro? Thanks in Advance Nation!