Hello,I have noticed recently that searching for JAMF Nation articles on any mainstream search engine gives the results for those articles, but if you click them it brings you to the JAMF Nation home page instead of the article trapping the information behind the built in search.Is anyone else having this issue, or know what this is? Thanks

I uploaded the Protect plan to Jamf Pro configuration profile. I was wondering if Protect also works on devices? I tried to upload the same file to the devices but it ends up failing. If there is any documentation for deploying to devices, please point me to it!

When adding apps to Self Service (or even Self Service+) via Mac Apps, the applications descriptions are in German. I’ve ensured that English is set to the preferred language and enabled location service. This is being run on a test VM but I can’t for the life of me figure out why this would be the case?  

We recently migrated to Jamf Cloud and using Azure AD as our Cloud Identity Provider and Single Sign-On solution.  It works well enough, but we have a weird situation.  We're sticking pretty close to Microsoft's documentation on it, which can be found here.By default, the iDP maps userPrincipalName as the username.  That's a full email address in our environment, so we want to use onPremisesSamAccountName instead.  That works fine in the iDP in both testing and looking up users/accounts.We also need user authentication during the initial device enrollment via DEP.  We've gotten that added in by adding an Enrollment Customization that is just the SSO.Here's where it gets dumb.  If we now enroll a machine while the User Name mapping is set to onPremisesSamAccountName, the SSO during enrollment registers the device to just the userPrincipalName with no other user data.  The Pre-Fill Primary Account Information only puts in the userPrincipalName as the Us

Hello,on macOS 14, With PPPC Utility, i want to create a profil who allow the usage of camera and microphone on an .app. But when i open PCCC Utility or make it across web admin from Jam, there is not “Allow” option available in the select field.I read that the application must be without hardened runtime, but if i remove the hardened runtime, the app can’t be export via “Archive” → “Direct distribution”.Any idea ?

Heya awesome Mac admins! I am still relatively new to this whole Jamf thing and looking into setting up Jamf Setup Manager to install our apps before the user reaches the desktop. I am trying to follow guides and getting hung up quite a bit on step 1 of most them, “package Setup Manager”. This is kind of a loaded step. I have tried several ways of doing this. I have packaged the zip, which didn’t work. I have extracted the .zip to the desktop and then packaged, didn’t work. I have tried putting the extracted zip in different folders, then packaging from there with Composer, didn’t work. How the heck do I package this thing for deployment? The configuration from Jamf Pro is relatively straightforward, I just need some help making sure the actual files are in the proper places. 

Hello there, Is there any way to automatically enable Location Services for non-admin users? I know it is currently not possible to set up a PPPC, so I tried some scripts to enable this feature. For example:   #!/bin/bash #set -x ########################################################################################## ## ## Script to enable automatically Location Services on Mac ## ########################################################################################## ## Define variables location_enabled=$(sudo -u "_locationd" defaults -currentHost read "/var/db/locationd/Library/Preferences/ByHost/com.apple.locationd" LocationServicesEnabled) ## Check if location services is enabled. If so, we will terminate this script immediately. Otherwise, we will enable it. echo " $(date) | Checking if this macOS-device has Location Services enabled or not..." if [[ "$location_enabled" = "1" ]]; then echo " $(date) | Location Services are already enabled" exit 0 else ech

Tried to paste a screen shot into a discussion but no dice ....any thoughts?

Hi all,  We have quite a weird recurring issue with 3 mac devices. FileVault is set to enable via a configuration profile from UIE//ADE and this has been working good since we introduced Jamf. We are however having issues where the secure tokens assigned to these users are being removed? I was wondering if this is something that anyone else has seen? The accounts a mobile accounts from AD. All of the mobile accounts on the devices are struggling. The workaround currently is to sign in with the local account that was created for support (has securetoken key) and then log out. Falling short of disabling FileVault for these devices, is there anything else any one can think of? Thanks in advance!

My Google-Fu is failing me ... How can I enable the preference below from Terminal?

Hi,  We'd like to create an app/script that when run prompts the user to enter an asset tag and then automatically renames the device.I.e. asset tag 12345 renames the device to AG-MAC-12345 so that "AG-MAC-" is already predefined? Is this something that can be done with DEPNotify? TIA. 

Hello, So I’m curious about whether we need to have either an LDAP server setup or issue managed AppleIDs in order to utilize user-initiated enrollment.I made a user and user group in JAMF Pro thinking it would allow for enrolling a device and that I could give my end users a single set of credentials to then get the MDM profile and configuration to everyone. However during the enrollment, I get stuck on a page which mentions “Assign to User” with a blue magnifying glass and Enroll button which don’t seem to react, no matter what I enter. Perhaps this is not possible, but it’s what I’m hoping to find out here. Can I use a single JAMF Pro user to log in all my end users for user-initiated device enrollment? Or must we set up an LDAP server/get managed IDs?Context: We are doing a big push for new devices soon, and currently we have no self-enrollment, meaning our IT department would have to manually enroll every phone. We are looking for an alternative solution to avoid that. We do not u

I have been using docutil for many years at this point (along with BuildADock). It works great. I am building a new lab and it's a weird setup. Not every computer will have the same versions of software installed (mainly Adobe) for some stupid licensing issues. I'm wondering if there is a way to use wildcards in the docutil script? For example, I have three sets of computers that have either Adobe CC 2023, 2024, or 2025. The software installs are the same, but the version year is different. Rather than make different docks for all the variations in the lab, is there a way to use a wildcard so it puts whichever version of Photoshop onto the dock that is installed onto the computer?

is there any way to create an extension attribute that will contain audit of usb devices (storage) connected e.g. in the last month?

We have been using this profile to automatically connect to the corporate SSID. However, two days ago, I encountered an issue when I attempted to re-push the profile to a device—it failed to install.   Upon investigating the profile, I noticed an "Options" error that appears when the SCEP payload is selected. However, no specific errors are shown in the payload settings themselves. I tried to create a new profile but still error is there   Could you please assist in identifying and resolving the issue?    

Hi Jamf Nation, While we passed a custom URL from google drive to fetch icon for the setup manager, it appears to be broken. Point to be noted, we didn't do any icon package deployment. We just passed the google drive link to fetch the icon in configuration profile under Application & Custom Settings>Jamf Applications>Icon Source Any idea what I am missing here?  Thanks

There's plenty of posts regarding disabling AirPlay Receiver, but we actually want to ENABLE it. Our previous AirPlay solution, AirServer, is not being properly maintained by the dev, doesn't play nice on our network, and we have just about given up on it. I tried reversing @ljcacioppo 's solution for disabling the setting here, but when set to true, it doesn't toggle the setting on; it only allows the user to enable it. This is on Seqouia 15.5. Ideally, we would like the following things set via profile: AirPlay Receiver set to ON Allow AirPlay for Anyone on the Same Network Require password set to OFF (the user must click a popup to allow the connection so this is fine) Does anyone have a working solution for this?

Recently whenever i try to install displaylink manager via Installomator i run into this problem where it always fails at the package verification. Every other Installomator installation works perfectly fine only displaylink manager doesnt.Here is the output of Jamf:ERROR : displaylinkmanager : ERROR: Error verifying DisplayLink Manager.pkg error: DisplayLink Manager.pkg: rejected source=no usable signature 2025-06-16 10:07:02 : REQ : displaylinkmanager : ################## End Installomator, exit code 4Is there a problem with displaylink manager or is it a problem with me?

Hello! I am looking to disable the first "transfer your data" prompt before the enrollment screen on macOS. (Seqouia) When I wiped my device from JAMF PRO management portal after upgrading to Seqouia, I noticed BEFORE the enrollment screen, a "Migration Assistant" - "Transfer your data" prompt.  How can I disable this prompt before enrollment?  I have PreStage options disabled to NOT show transfer wizard (pictured) - confirmed the device is getting the proper prestage profile. And when enrollment pops up, and I finally enroll, I can confirm the migration assistant\\Transfer your data does not prompt.   

Hello, we use Cisco AnyConnect 5 on our Mac systems. The one feature I've been unable to get working so far is our VPN management tunnel. We have the management tunnel configured by an XML file on our Windows systems but I can't find any information on where exactly it should go in MacOS (we're running 13.5.2) or how I can use Jamf to push this profile to make sure the management tunnel connects, even before login if possible.Any suggestions?

Hi Guys,   I'm trying to deploy SentinelOne and followed all the steps in the HCSOnline PDF, but I'm still getting an error. I've attached a screenshot of the error. Any advice or help would be really appreciated! Thanks in advance!

Hello Jamf Community, My team is facing an issue where multiple managed Macs (running macOS 15.4.1 and 15.5) are unable to connect to the internet. This problem was first noticed around 10:00 JST on June 15th. We're using products from the Jamf Business Plan (https://www.jamf.com/products/business-plan/), although not all of them. We've observed that disabling DNS Settings under Network > Filters in macOS settings resolves the issue. Non-Jamf managed Macs are not affected, leading us to believe this might be related to Jamf's configuration. The issue occurs on both recently updated Macs and those that haven't been updated recently. Has anyone else encountered similar issues? We're looking for: Confirmation if others are experiencing this problem Potential causes Recommended solutions or workarounds Any insights or suggestions would be greatly appreciated. Thank you in advance for your help!

Hi All, We currently aren't using any tools like Jamf Setup Manager or DEPNotify. I was looking to implement these, but wondering what type of impact we will experience considering Classic Self-Service will be deprecated eventually. We aren't zero touch because we go through a pretty hefty onboarding with the user on their first day. We still will manually be touching the Mac quite a bit, so this hasn't been a priority. Can any of these tools work with Self-Service+? Any concerns I should have about setting this up considering classic Self-Service is going away? Thanks

One of our agents locked a macbook via the remote lock command from Jamf Pro and did not record the pin.  One of our other agents then deleted the macbook out of jamf before releasing the lock. Now we have a bricked macbook that we have no way of getting into since we dont have reord of what the pin could be.   We are back and forth between Jamf support and Apple support to get this resolved.  Jamf says they cant do anything and Apple is saying it's on Jamf to remove the lock.   Any help here would be appreciated. 

Hello, Since MUT no longer works with a JSS instance using SSO authentication, do you know of any alternatives, please? I admit I'm a bit uncomfortable with API scripts. I need to create a static group with more than 500 devices 😁thank you