IBM normalized their installation namespaces on Mac/Windows, and changed where they store the license server settings inside a file called "/Applications/IBM SPSS Statistics/Resources/Activation/commutelicense.ini". I wrote a script to update this - its similar to the spssprod.inf file. On launch however I get this popup: Clicking "apply existing license" goes right into the app and checks out a license. The warning doesn't come back. I found that some setting (where I'm not sure) is stored in a file called "com.ibm.spss.plist" in the user profile preferences folder. I can't of course just copy this over to an existing profile because it has many hard coded paths to my user profile inside it. Anyone else run into this issue? I'll likely bounce the issue off IBM support, but I thought I'd ask here as well.

Has any one had the issue where Jamf Compliance editor is not creating the PDF in the Project folder? Not sure if there is something I'm doing wrong, but after taking my course, I was creating a plan for my current organization.    After creating the CIS LVL 1 benchmark, the PDF is missing within the build folder. Not sure if there is a way to get that report as it would be pretty useful.    Thanks for any insight. 

Hello everyone! Something strange happened about 32 hours ago - a main instance has disappeared from my Jamf account. I can't log in to <myinstance>.jamfcloud.com Does anyone of you had such case? It's really frustrating, because it stops all the work in our company - we can't do onboarding (Enrollments), help employees to solve their Jamf-related problems and so on... Jamf support replied about 13 hours ago. I have immediately answered their questions and since then, there is a silence from Jamf people's side. Is there any way to see, if this instance was deleted by someone, or not?

Today we are releasing a maintenance version of Jamf Pro; this release addresses the following product issues: Jamf Pro Server: Security Issues Jamf provides the CVE-ID for security issues with high or critical severity when possible. [PI126232] Updated a third-party library to resolve a known vulnerability. (CVE-2025-24970) Jamf Pro Server [PI125880] Jamf Pro users who migrated from an on-premise environment to a Jamf Standard Cloud-hosted or Premium Cloud-hosted environment using a custom URL and port 8443 will no longer experience authentication errors while using SSO through Jamf Account. [PI126314] Jamf Pro successfully populates data in the mdm_client database table, resolving an issue that prevented computers from receiving user-level commands and configuration profiles. [PI133965] Jamf Pro users in on-premise environments will no longer see reminders to enable single sign-on (SSO) through Jamf Account, which is only available in cloud-hosted environments. Jamf Pro System Req

Hi all,Im looking for a simple and easy buy user friendly way to restart a mac .. I know there is many options out there .. script .. jamf policy , DEP Notify . .. but have always had feedback from business saying that there are not very user friendly. I have been tasked to see if i can find a friendly way to restart with less user interaction or at least a deferral ..Any idea is much welcomed..rk 

I have a number systems where the Jamf Policy with user interaction messages are configured but only 1 of the systems with the policy assigned is not receiving the message.  Has anyone seen this before?  I have confirmed the policy is applied to the target Mac.

We set up policy using the user interaction tool allowing the user to defer the policy. Is there a way we can brand the notification with our icon? Is it possible to include weblinks in the notification as well? I poked around Jamf and Jamf Nation and wasn't able to figure this out. Thanks,

I am trying to create a policy that applies software updates for end users.  I want a message to be displayed to users only if a reboot is going to be required.  I assume this would be done in the user interaction field, under the "Restart Message" field.  The issue that I am confronted with is that I want the rest of the policy to be silent, the user does not need to know the task is running, or that software updates are being applied.Is it possible to simply leave the Start and Complete message fields blank, so no message is displayed?  Or will this cause an empty dialog box to be displayed? 

Hi team,Can we use the below setting to perform Force update of patches after 15 days? Basically if the users don’t install the patches from self service, we don’t, Jamf to perform force update. 

Is there a UI fix for Jamf Pro coming up? When my multiple tabs all get timed out and I log back into Jamf Pro all my tabs revert to the main dashboard. This is highly annoying, some I can click the the back button to get to the previous page, but this doesn't always work. Is anyone else having issues with this?

Hello,we like to configure Goodnotes for students without the AI-features. We also activated the auto-back-up-reminder and pre-configured a webdav-url.Can anyone help me with deactivating the AI-features? What do we need to add to make the AI-features configurable?This is our working Code:<plist><dict><key>LicenseKey</key><string>LICENSE CODE</string><key>GoodnotesVersion</key><integer>6</integer><key>ConfigurableFeatures</key><dict><key>ReminderToEnableAutoBackup</key><true/><key>WebDAVHostURL</key><string>WEBDAV DOMAIN</string></dict></dict> </plist>

@AJPinto also know as Anthony James Pinto, is Jamf Nation’s number one community contributor. With some all-star stats like providing 289 accepted solutions, 2,607 posts and 1,145 kudos, it's likely that you’ve seen his name splashed around the community.   Jamf Nation, the world’s largest Apple Admins community, relies on the smarts and dedication of members to help advance and maintain this space as a valuable asset of learning and connection. People like Anthony make communities like Jamf Nation function in their highest level.   Let's take a peak inside Anthony’s brain and learn more about the man behind the avatar, shall we?  Tell us about yourself, Anthony  I am from LA and have lived all over the US. I settled down in central Alabama for reasons beyond me, met my wife and just sorta stayed here. My wonder lust never went away, and I love to travel and experience new places and new things. My preferred travel locations are places far a

Hello, here is the scenario: We are pushing out a new version of a in-house app soon but we want to make sure that the end users don't use the old version of that app once the new version is deployed. This is more of a failsafe as the app should auto update for everyone but in the event it doesn't update for someone, we could block the user from opening that specific old version of the app. My plan was to restrict the app in a config profile then scope it to a smart group of users who have the old version. When the app updates to the new version, they would be removed from that smart group and would be able to use the app. My problem is the smart group criteria, it doesn't seem to work. The results always show 0 devices. It should show around 200 devices. This is what I'm trying: I even tried changing the "App Name" to "App Identifier" but I get the same results. Let me know what I could be doing wrong or if there is a better solution for this scenario. It's possible my plan here

Hello Guys,   We are using Jamf Pro as an on prem. Tomcat ssl certificate's expires very soon.I did renew the ssl  new certificate than restart tomcat service. But users were not able to connect to self service. Actually I deploy the new certificate to clients via  config. profile. I can see the current new Certificate in the keychain. For testing, test device was connected to self service when I set the new certificate to always trust.            

I've just added a new app to my Apple School Manager and have assigned 200 licenses. When I push this app out to an iPad it gets stuck on Waiting for Licenses despite there being more than enough available. Checking the status of the app says "Waiting for the volume purchasing licenses to be assigned. Install the app again." Doing this just results in it staying on Waiting for licenses again. This is the result of quereying the status of the app: Apple School Manager has assigned the license but still Jamf doesn't complete the install. Any ideas how I fix this? [edit] I've just tried pushing a different app to this particular iPad and have the same issue. The iPad is online and checked in with Jamf and working for everything else. Just can't push apps to it.

Hey all, I've been stuck on this for quite a few weeks. Our JSS servers were moved from one location to another. Since then we've had to redo numerous things. The last being TomCat. The boxes used to be behind a load balancer, now they are not. Anytime we navigate to our jss site, it says it is not secure over https and another issue is any policies with packages trying to push, fail due to it not being secure and not being able to make the connection. If I go into TomCat and "Change the SSL certificate used for HTTPS" -> Next -> I've tried "Generate a certificate from the JSS's built-in CA. Restarted the box. No different " Same steps as above, only this time, "Upload an existing SSL Certificate" -> our network guy pulled the cert we use for other servers. Anytime I try to upload, the second part where it asks for the password, it does not go through. This password works on everything else. Tried redownloading it from the s

This script works fine as an EA on 80% of our Mac's but returns Blank on the rest. The APP is thereAnd it we run this manually on the Mac it returns a result, but as an EA we get a blank.If it didnt work on all our Mac's I'd understand I'd made a mistake, but its only a handful, any ideas ?   #!/bin/bash ZScalerVersion=$(defaults read /Applications/Zscaler/Zscaler.app/Contents/Info.plist CFBundleShortVersionString) /bin/echo "<result>$ZScalerVersion</result>"   Thanks

Hello Jamf Nation! Our Jamf Nation vendor will be putting Jamf Nation into read-only mode in the evening of Monday March 3rd through Tuesday 3/4. During this time individuals will not be able to sign into the platform or make new contributions to the site. Sorry for any confusion, and thanks for your support as we work to continuously improve Jamf Nation!

We were using Jamf Connect with Azure/Entra for about a year without issue, it's only used on a small number of clients and I'm unsure how often the computers are actually used, but at the moment none permit authentication. I've trimmed down the config to the barebones, and even recreated the app registration in Entra without any change. Any user attempting to sign in sees Invalid Response Code 401 from https://login.microsoftonline.com and it gets no further. The original working plist for jamf.connect.login included, the following, but has been well trimmed down to just app registration IDs and secrets without any change. <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>AllowNetworkSelection</key><true/><key>BackgroundImage</key><string>/usr/local/share/jc.jpg</string><key>CreateAdminUse

Hi, I am trying to get a config to block all chrome extensions and allow only approved ones as I keep finding.I found some examples online but I am not too familiar how to proceed, I know the way to setup is in Configuration Profile and Custom Settings, but I don't know the exact way to set that up. here is an example I found but can someone show me how to implement it. thanks <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>DeveloperToolsDisabled</key> <false/> <key>ExtensionInstallBlacklist</key> <array> <string>*</string> </array> <key>ExtensionInstallWhitelist</key> <array> <!--Docs--> <string>aohghmighlieiainnegkcijnfilokake</string> <!--sheets--> <string>felcaaldnbdncclmgdcncolpebgiejap</string> <!--slides--></arra

We have a scenario I wasn't expecting.  So basically we are eliminating JAMF and going with InTune.  Know not a new story.  However as this was never expected, all BYO devices have "our" apps set to remove on unenroll and were installed thru VPP.  This is going to cause a lot of issues as the individuals aren't leaving but being asked to unenroll and then enroll in a different MDM.  If we set the apps to not uninstall when unenroll, what would happen?  So the apps I guess stay behind but...   1. Will they keep working? 2. If they keep working will they stop eventually? 3. Will they be able to get app updates? 4. Will the apps magically get tied to their own iTunes account? 5. Depending on above, if a user goes into their Apple App Store and installs the app while already on the device what will happen? Thanks.   JR

Hello, We need to have ways to troubleshoot SSO connections. It is activated on my beta instance since it's available. I log in though SSO, yet, Compliance Benchmarks or Blueprints tell me I need to log in through SSO... This is not only annoying, there is absolutely no way or log to understand why this happens. I can only imagine issues when this rolls out at scale. Who should I talk with to troubleshoot ?

I am trying to figure out a way i can use the profile command to remove a user profile that was installed by JAMF. The profile is used to add a AD generated user cert to connect systems to our . WiFi. For various reasons this cert breaks or gets removed. I was hoping to build something in self service user can use to remove the profile and re-add it forcing a new user cert to be generrated. But im having zero luck i get a profile not found error using sudo profiles -R -p "profiles ID" Error:profiles remove for identifier:'Profile ID' and user:'Username' returned -205 (Unable to locate configuration profile.)

Hi team,  Let me ask question for webfilter on port 8080. I set localhost for wihte list on restrictions profile with Jamf administrator role like that, however, when I access http://localhost:8080/ I cannot browse the website, which returned error screen. White list for browser <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>URLAllowlist</key> <array> <string>chrome://*</string> <string>localhost</string> 　 ←　here!   I checked process for port 8080 and there are some unknown webfilter processes besides java process which I would like to use. (Actually I tried to use Jenkis using localhost:8080 but couldn't....) # sudo lsof -P -i:8080webfilter 97579 root   74u  IPv6 0x3f2d9709054bb09e      0t0  TCP localhost:58811->localhost:8080 (CLOS

Hi All,GreetingsI am looking to set custom screensaver (Only 1 static image) in around 20 Macbooks enrolled in JAMF, I tried all the steps but nothing works so far.We have machines with Sonoma, Monterey, Catalina, and BigSur.