I have been requested to make two sided black and white the default print option for our Xerox Printer. I was able to accomplish this and add some handy presets for the user to select other options like 1 sided and color. What I have found is unless I open the Show Presets... option and check Reset Presets Menu to "Default Settings" After Printing... Print jobs will use the last preset selected by the user... so if they selected color... the next job will print color as well. Selecting the option above does just what it says and reverts to the default after each print job. My question is... is there a plist or a command line flag to check this box? I did not see anything in the plist file for the printer or in lpadmin. Any assitance would be greatly appreciated.

On a specific device, the “Update Inventory” command is successfully sent and works normally.However, when the “Renew MDM Profile” command is sent, it fails with the following message:Error command: The new MDM payload does not match the previous payload. Mismatched key: CheckInURLBecause of this issue, the device cannot renew its MDM profile, and the expiration date is approaching.What is causing this problem, and how can it be resolved?

Curious if the the “Release” section of your Jamf School dashboard taking you to a missing link page. I get a 404. Seems like such an easy thing to fix so I just thought maybe I’m the only one experiencing it.Link it send me to - https://docs.jamf.com/jamf-school/documentation/Release_History.htmlLink “Release Section” seems like it should be sending me to - https://learn.jamf.com/en-US/bundle/jamf-school-release-notes/page/Jamf_School_Portal_Release_Notes.html  

Is there any way to get the password sync status from the new Self Service+ as Extension Attribute?Would be really nice to see if Google and the local user are in sync. Other ways to archive it are welcome 😀

Hi everyone,I’m trying to figure out whether it’s possible to distinguish between devices with a physical SIM, devices without a SIM, and eSIM devices using Smart Groups. I’m not sure if anyone else is seeing the same behavior I am.My Environment:Jamf Pro On-Prem 11.22.1-t1762179835791 (Windows Server)Devices under management:iPhone (China version) iPad (China version)What I try to Achive:Create Smart Groups that can identify:Devices with a physical SIM inserted Devices without a SIM card Devices using eSIMWhat I’ve tested so far:Using Phone Number: Some devices can’t retrieve the SIM’s phone number. Using Current Carrier Network: All devices running iOS 26 and later fail to return this field. However, devices that could read the phone number on iOS 18 can still do so after upgrading to iOS 26. Using Current Mobile Country Code and Current Mobile Network Code: These values are available for devices with a SIM card on both iOS 18 and iOS 26. However, I also found that unactivated eSIM d

Hi All,  If you need to add Licenses for a Jamf App from the Catalog, How do you action this process? Thanks in Advance 

Just wondering if anyone has seen this. The machine is Ventura (Mac OS 13.6) and trying to upgrade to Mac OS 14.1Machine is bound to an AD domain and the user has a secure token and is an administrator on the machine.  The user is logged on with a domain account i.e. a mobile account.  The machine is an M1I tried forcing the update/upgrade via Jamf using the MDM framework from the server as they are overseas but it got to the end of preparing and prompted them again

I have a problem in the selfservice-app. I cant delete the notifications of failed installations. Note as read doesnt do anything, too. https://ibb.co/ChknWR1

I'm seeing a number of Macs reporting that FileVault 2 is not enabled, despite the encryption state being displayed as Encrypted. I've also seen this sometimes change to show Enabled before reverting back to Not Enabled again. Is this a known issue? The machines appear to be completely fine and encryption seems to be on.

We have gotten some feedback from users that are working remotely about our Macs imaged through Jamf Connect. Users are seeing the message on their wifi, "Wi-Fi networks are currently unavailable." Users without hardline options are unable to login to the machines. We are currently using Jamf Connect v. 2.37.0 Has anyone seen this issue before and if so, how did you resolve it? Note: Potentially 16 machines affected as we halted production until we resolve this.

In our Azure logs, it shows the Jamf Pro Azure AD Connector authenticating with one of our administrator’s accounts multiple times per hour. I’ve tried looking into the documentation here: Azure AD Integration - Jamf Pro Documentation 10.43.0 | Jamf but I am wondering if this could work with a service account just to keep our user sign-in longs clean. Or if there are other best practices, I’m open to suggestions. Thanks!

Hi All,  I am trying to remove the phone icon and nothing is working.  This device does not have a SIM card, it uses Wifi only.  I have tried adding it to a Restrictions profile where I am removing all other system apps and it's the only icon that is not being hidden.  I am also applying a Home Screen layout and this icon is not one of the icons I wish to display in that policy.  What am I missing?Appreciate the help! 

Ninyo did a fantastic little article on update management with Blueprints. I just was hoping for some clarification on the process. I had setup a test blueprint just as spec’ed from the article and it doesn’t act the way I would expect.  I am using the Software Update Settings payload. It is configured with deferrals just like the article. I then go to “Computer Software Updates” and select the test group, select update, select “Download and Install” and “Install latest version based on device eligibility”. I can then see the update start to be queued on the devices Management pane.After 10 minutes an error appears on the management pane.OSUpdateStatus The client requested cancellation completed. 12 minutes ago    And it fails.I am able to update the device easily and instantly with the “Software Update” payload. I am a bit confused on what I am doing wrong. Other combinations in the Software Updates pane fail the same way.

Hi,we would like to have the apps compass and calculator on the desktop for students.In the layout of the configuration these are also displayed but not on the ipads of the students.How can I install the software?RegardsStefan

With 15.6 and beta macos 26The EA I was using for report back a macs SSID is now broken/blocked.Does any happed to have one that will works? Thanks #!/bin/sh# Jamf Extension attribute to return SSID## Check for SSID namewifi_name=$(ipconfig getsummary en0 | awk -F ' SSID : ' '/ SSID : / {print $2}')# Check if SSID is foundif [ -z "$wifi_name" ]; then    result="No Wi-Fi network found."else    result="$wifi_name"fi# Result for Jamfecho "<result>$result</result>"    

Hi,I want to migrate my on prem installation of Jamf Pro to a clustered environment. However I cannot find many resources about that topic. I could only find this Video on the training catalogue: https://trainingcatalog.jamf.com/cluster-jamf-pro-instances/251345Is there any written documentation on the topic? Or something made by the community?Kind regards

Hello,I wanted to install Freeform on our iPad, but unfortunately I can't find the app at Apple School Manager.What can I do?Best Regards,Ralph

Hi All,  Can someone help me with Global System Extension to the Global Protect package to be deploy from Jamf Pro to Devices? the Global System extension need to be excutable with the deploy as well? Thanks in Advance

I have a TV app I would like to prevent from updating, but when I try to uncheck the boxes regarding auto updates they are greyed out and fixed to checked: Did I enforce that somehow for all apps, or is there a way I can uncheck the box to automatically force app updates? 

This is a minor thing, but I’m trying to limit the amount of unnecessary popups that people are exposed to when logging in to our lab machines and I was wondering if there’s a way to set the “Welcome to Jamf Connect” splash screen that comes up when you log in to be off for all users? I know you can check a box to say not to display it again after the first time, but I’d rather be able to just set it to never show up.I thought the option in Jamf Connect Configurator to “Show welcome window” controlled this, but I have it unchecked and the welcome window still shows.

We use Cisco Secure Client. It has been deployed and works great but one thing bugs me, and that is as a managed login item, it starts windowed. I was looking for a way to have the application start as a background process. If there was a global way to do it, or if I’d need to start the application another way. Thanks!

We are restricting the ability to add non-corporate email accounts to the native Apple mail client (which is easy to lock down in jamf by locking the Settings) but we would like to offer Outlook for iOS app as an alternative to the native client.  So...couple of questions:1. Is it possible to push a config to the Outlook app so that is sets up the users Exchange email box?2. Is it possible to lock down the Outlook for iOS app so that users can't add additional email accounts?

We (finally) got zero-touch working this year, but the only issue is we’re only targeting new hires so far. What we ran into is existing Mac users getting a lease replaced machine don’t have an automated way of getting the software they use today installed on their new machines. They would have to go to ServiceNow and request it all again. I was wondering if anyone had any experience via the API or scripts to look at what they had installed on an old machine assigned to the same user and scope the new machine for the same software (using maybe an allow/block list for things like licensed software)?

Hey Everyone, I have been battling this issue for quite some time and have done rigorous testing but have sincerely hit a wall with this issue. My organization is prepping to remove Administrator access from all users on our macOS systems, this requires them all to be converted to a Standard user. (We have a "MakeMeAnAdmin" script in place in JSS we plan to utilize) MacOS: 14.3.1Jamf Connect: 2.32.0 We use Jamf Connect with Azure/EntraID so users can authenticate on login, we have the app roles setup for the app registration in Azure with two groups, MacUserAdmin-Entra & MacUserStandard-Entra with the correct roles tied to each (Administrator & Standard) The Problem:Whenever a user is moved into the group tied to the STANDARD role in Azure and attempts to login to Jamf Connect on one of our Macs they can enter the O365 email, PW, verify 2FA, but then hit a "Yellow Exclamation Point" box with simply an "Okay" button. Once you click "Okay" you are kicked back

Hi there,I'm not sure if this functionality exists for MacOS, but it does for Chromebooks, and it's pretty amazing, so we'd like to leverage it for our iMac labs at the very least, and if it works there maybe go org-wide with it. The problem is I'm not sure what method to attack this problem with.Currently our iMacs (like the rest of our Apple computers) are AD bound. Users log in with a mobile account, and use Enterprise Connect for password management.I know that Macs support Kerb/SSO authentication, and also that Google's SecureLDAP can work for macOS as well, but what I really want is for the login screen to show me a Classlink login page so users can sign in with a QR code badge.Since our Google accounts use Classlink as their IDP and show the splash page when you try to log into them via web browser, I started going down the rabbit hole of getting a test machine bound to Google Secure LDAP, thinking it might spawn a splash page for Classlink login. But now I'm realizing that mech