Hi all,  We have quite a weird recurring issue with 3 mac devices. FileVault is set to enable via a configuration profile from UIE//ADE and this has been working good since we introduced Jamf. We are however having issues where the secure tokens assigned to these users are being removed? I was wondering if this is something that anyone else has seen? The accounts a mobile accounts from AD. All of the mobile accounts on the devices are struggling. The workaround currently is to sign in with the local account that was created for support (has securetoken key) and then log out. Falling short of disabling FileVault for these devices, is there anything else any one can think of? Thanks in advance!

My Google-Fu is failing me ... How can I enable the preference below from Terminal?

Hi,  We'd like to create an app/script that when run prompts the user to enter an asset tag and then automatically renames the device.I.e. asset tag 12345 renames the device to AG-MAC-12345 so that "AG-MAC-" is already predefined? Is this something that can be done with DEPNotify? TIA. 

Hello, So I’m curious about whether we need to have either an LDAP server setup or issue managed AppleIDs in order to utilize user-initiated enrollment.I made a user and user group in JAMF Pro thinking it would allow for enrolling a device and that I could give my end users a single set of credentials to then get the MDM profile and configuration to everyone. However during the enrollment, I get stuck on a page which mentions “Assign to User” with a blue magnifying glass and Enroll button which don’t seem to react, no matter what I enter. Perhaps this is not possible, but it’s what I’m hoping to find out here. Can I use a single JAMF Pro user to log in all my end users for user-initiated device enrollment? Or must we set up an LDAP server/get managed IDs?Context: We are doing a big push for new devices soon, and currently we have no self-enrollment, meaning our IT department would have to manually enroll every phone. We are looking for an alternative solution to avoid that. We do not u

I have been using docutil for many years at this point (along with BuildADock). It works great. I am building a new lab and it's a weird setup. Not every computer will have the same versions of software installed (mainly Adobe) for some stupid licensing issues. I'm wondering if there is a way to use wildcards in the docutil script? For example, I have three sets of computers that have either Adobe CC 2023, 2024, or 2025. The software installs are the same, but the version year is different. Rather than make different docks for all the variations in the lab, is there a way to use a wildcard so it puts whichever version of Photoshop onto the dock that is installed onto the computer?

is there any way to create an extension attribute that will contain audit of usb devices (storage) connected e.g. in the last month?

We have been using this profile to automatically connect to the corporate SSID. However, two days ago, I encountered an issue when I attempted to re-push the profile to a device—it failed to install.   Upon investigating the profile, I noticed an "Options" error that appears when the SCEP payload is selected. However, no specific errors are shown in the payload settings themselves. I tried to create a new profile but still error is there   Could you please assist in identifying and resolving the issue?    

Hi Jamf Nation, While we passed a custom URL from google drive to fetch icon for the setup manager, it appears to be broken. Point to be noted, we didn't do any icon package deployment. We just passed the google drive link to fetch the icon in configuration profile under Application & Custom Settings>Jamf Applications>Icon Source Any idea what I am missing here?  Thanks

There's plenty of posts regarding disabling AirPlay Receiver, but we actually want to ENABLE it. Our previous AirPlay solution, AirServer, is not being properly maintained by the dev, doesn't play nice on our network, and we have just about given up on it. I tried reversing @ljcacioppo 's solution for disabling the setting here, but when set to true, it doesn't toggle the setting on; it only allows the user to enable it. This is on Seqouia 15.5. Ideally, we would like the following things set via profile: AirPlay Receiver set to ON Allow AirPlay for Anyone on the Same Network Require password set to OFF (the user must click a popup to allow the connection so this is fine) Does anyone have a working solution for this?

Recently whenever i try to install displaylink manager via Installomator i run into this problem where it always fails at the package verification. Every other Installomator installation works perfectly fine only displaylink manager doesnt.Here is the output of Jamf:ERROR : displaylinkmanager : ERROR: Error verifying DisplayLink Manager.pkg error: DisplayLink Manager.pkg: rejected source=no usable signature 2025-06-16 10:07:02 : REQ : displaylinkmanager : ################## End Installomator, exit code 4Is there a problem with displaylink manager or is it a problem with me?

Hello! I am looking to disable the first "transfer your data" prompt before the enrollment screen on macOS. (Seqouia) When I wiped my device from JAMF PRO management portal after upgrading to Seqouia, I noticed BEFORE the enrollment screen, a "Migration Assistant" - "Transfer your data" prompt.  How can I disable this prompt before enrollment?  I have PreStage options disabled to NOT show transfer wizard (pictured) - confirmed the device is getting the proper prestage profile. And when enrollment pops up, and I finally enroll, I can confirm the migration assistant\\Transfer your data does not prompt.   

Hello, we use Cisco AnyConnect 5 on our Mac systems. The one feature I've been unable to get working so far is our VPN management tunnel. We have the management tunnel configured by an XML file on our Windows systems but I can't find any information on where exactly it should go in MacOS (we're running 13.5.2) or how I can use Jamf to push this profile to make sure the management tunnel connects, even before login if possible.Any suggestions?

Hi Guys,   I'm trying to deploy SentinelOne and followed all the steps in the HCSOnline PDF, but I'm still getting an error. I've attached a screenshot of the error. Any advice or help would be really appreciated! Thanks in advance!

Hello Jamf Community, My team is facing an issue where multiple managed Macs (running macOS 15.4.1 and 15.5) are unable to connect to the internet. This problem was first noticed around 10:00 JST on June 15th. We're using products from the Jamf Business Plan (https://www.jamf.com/products/business-plan/), although not all of them. We've observed that disabling DNS Settings under Network > Filters in macOS settings resolves the issue. Non-Jamf managed Macs are not affected, leading us to believe this might be related to Jamf's configuration. The issue occurs on both recently updated Macs and those that haven't been updated recently. Has anyone else encountered similar issues? We're looking for: Confirmation if others are experiencing this problem Potential causes Recommended solutions or workarounds Any insights or suggestions would be greatly appreciated. Thank you in advance for your help!

Hi All, We currently aren't using any tools like Jamf Setup Manager or DEPNotify. I was looking to implement these, but wondering what type of impact we will experience considering Classic Self-Service will be deprecated eventually. We aren't zero touch because we go through a pretty hefty onboarding with the user on their first day. We still will manually be touching the Mac quite a bit, so this hasn't been a priority. Can any of these tools work with Self-Service+? Any concerns I should have about setting this up considering classic Self-Service is going away? Thanks

One of our agents locked a macbook via the remote lock command from Jamf Pro and did not record the pin.  One of our other agents then deleted the macbook out of jamf before releasing the lock. Now we have a bricked macbook that we have no way of getting into since we dont have reord of what the pin could be.   We are back and forth between Jamf support and Apple support to get this resolved.  Jamf says they cant do anything and Apple is saying it's on Jamf to remove the lock.   Any help here would be appreciated. 

Hello, Since MUT no longer works with a JSS instance using SSO authentication, do you know of any alternatives, please? I admit I'm a bit uncomfortable with API scripts. I need to create a static group with more than 500 devices 😁thank you

We currently use Okta SSO with Jamf Pro. Filevault is turned on for all our devices, which requires the initial local login. Then the next login is network credentials with SSO. Meaning, our users have to login twice. This works well, however we recently purchased Okta Device Access with the understanding that we could eliminate all logins for a passwordless user experience. I've been researching the ODA setup using Okta as a SCEP auth. I've read this would require all devices to be re-enrolled?  Has anyone gotten this to work with Jamf Pro to be passwordless? I've love to hear your experiences. Thanks!

Work within a school and looking to upskill the team on Jamf, we receive education pricing for Pro licences but can’t see anything about training. Is education pricing available or are we out of luck on that front?  

Hey there,    we are currently using Jamf School with approximately 4000 devices. After using shared iPads exclusively we implemented a 1 to 1 configuration in a couple of locations.  Everything worked well until the devices needed to be transfered to a new user.  Previously i assigned the profiles beforehand and users just needed to login with their Jamf credentials.  The iPad updated the name via information given by their jamf Account (%firstname,%lastname) and so on.    But i cannot get that login window on a previously used iPad for the life of me.  Even un- and reenrolling the device did not work.    Is there no other way of assinging a user but to use placeholders or manually assigning a user?    Thanks for your input! 

The application name for Adobe Illustrator remains the same regardless of the version installed, which makes it challenging to identify specific versions based on the file path alone. I need to create an Extension Attribute (EA) that can detect different installation paths for Adobe Illustrator, such as: /Applications/Adobe Illustrator 2024/Adobe Illustrator.app /Applications/Adobe Illustrator 2025/Adobe Illustrator.app This will allow me to create a smart computer group in Jamf Pro and effectively scope updates for each version. I’ve tried the following script, but it doesn’t seem to be working as expected. Any advice on how to get this working would be greatly appreciated!      

I have had 2 MacBooks out of many so far, that the FileVault 2 Enabled Users is ciscoacvpnuser. This means that Encryption never turns on for the real user of the MacBook. 1. I would like to know why this local system account is being added here? I think the user isn't logging back in after the final install of the default applications (which includes Cisco Secure Client) and a required reboot). And somehow the ciscoacvpnuser account is being added. 2. Is there a way to remove this account in Jamf or push the user's account from the user's MacBook to Jamf? These are newly enrolled computers so Support has been contacting the users and wiping the computer and re-enrolling again.  We had a ticket open with Jamf but they did not have a resolution for the Support team. Thanks in advance!

Hi everyone, We manage a fleet of approximately 1,500 M2 MacBook Air devices used by students. All student accounts are standard users with App Store access blocked. Applications can only be installed via Self Service. To prevent unauthorized software use, we've restricted app execution from the Desktop, Documents, and Downloads folders. However, students have found a workaround: they are dragging applications into the Dock and launching them from there. I’d prefer not to implement a policy that constantly removes unknown apps from the Dock, as it can negatively affect user experience. Has anyone encountered a similar situation? Are there any recommendations or best practices to prevent applications from being run via the Dock if they aren’t located in the /Applications folder or haven’t been approved via Self Service? Appreciate any advice or suggestions! Thank you.

Jamf Connect in Entra Enterprise App the role has stopped working for Users (Standard User/Administrator), can someone help me look into this issue?

Hi everyone, I am new to Jamf and I am loving it so far. I am creating a managed local administrator account through the User-initiated enrollment settings and that is fine (already created a config profile for the rotation of the passwords). The problem that I am having is that in the prestage enrollment the users are assigned to be local administrators automatically and right now (from what I learned) the only way to make them standard user is to tick the options to create a local admin account in the prestage settings, but this will create 2 admins once the user is enrolled.    I am sure I am missing something, any suggestions?