Hello everyone! Since 12/14/25 we have been receiving the message “The VPN client agent was unable to set up monitoring of the VPN profile files” every few seconds. It doesn't matter whether VPN is connected or not. It feels like the message only comes when you open the Finder and then you can't get rid of it. Reinstalling the same version fixes the problem. Since Friday we have activated version 5.1.7.80 for the zero touch deployment. So yesterday I activated version 5.1.6.103 again. When you connect to the VPN for the first time, the app is updated to 5.1.7.80. Today I have the first client installed with version 5.1.6.103. Since it was connected, it also automatically updated to 5.1.7.80. So it can't be my newly created 5.1.7.80 pkg. maybe it's because of macOS 15.3.1? Have you ever seen this?    

Hey guys, I really struggle on probably something easy. We are partially using the erase tool from github to update some Macs in our fleet. So the easy way is a policy with the package and the command line like /Library/Management/erase-install/erase-install.sh --version=15.4.1 --reinstall --check-power --no-timeout --min-drive-space 20 --no-fs --rebootdelay 300 --power-wait-limit 300 --cleanup-after-use   My problem is that this policy, once completed, is showing failed. So it will start again popping up on the users macs. I read about the launcher script, but it failes too. I tried with the package and without, I tried the example script given by Github and the normal version. Hows the process? I would just like to have jamf confirmed that the installation is completed. Thanks!  

New to Jamf School. Handed out new pre enrolled iPads to teachers about two weeks ago and they were all connecting to the school Wifi and working fine. Suddenly about a week ago they stopped connecting to any WiFi network...even outside of school. Any ideas if something within Jamf could be causing this? We do not have Safe School.

Hi all,  I need to create a list of applications that all the devices have installed (only Macbook).Is there any way I can do this? I know I can see the device application Log (Computer>Inventory>Search>Select computer>History>application usage logs)but I need something easier... I don't need to know what each computer has installed but an overall thing. Any help? 

Hey all - is there an easy way to remove this from our macs. Have tried a few scripts which are failing to resolve the issue:

How can I join the mac admins slack? I tried Sign up for a new account | Slack but I don't have an email address in the macadmins.org domain. Can anyone here please invite me? I'm a relatively newer mac sysadmin, working on migrating from Intune to JAMF for my org. Would love to be a part of the community!

I've recently taken over JAMF duties at my company and have been asked to enable Strict Enforcement on our Zscaler Version 4.3.1 Currently the Zscaler app is deployed and asks for a password to quit the app or to sign out but lets users browse the internet when not signed in which is what we want to remove.   - Looking at JAMF I only see a configuration policy for an expired zscaler certificate - I attempted to push a configuration policy of com.zscaler.installparams that I found in the Zscaler documentation but when I reinstalled Zscaler from scratch nothing changed - I attempted a com.zscaler.zscaler plist configuration policy push as well - Tunnel version says 1.0 inside the app - If you think of something even if it is obvious please let me know I am looking to learn   How do you enforce this at your company and is a socket filter policy needed as well? I saw that mentioned / possibly some settings on the cloud admin portal.

I'm seeing a repeated entry in the jamf.log on client machines."no container info found for disk with id disk2s1"I have wiped the disk and then reinstalled the OS - maybe the cause?Anyone shed any light on this?

Hello. Does anybody have a  script that disables ipv6 over ethernet connections that works. Thanks  D

Is anyone able to get Groups working for privileges in Jamf Pro? I can add a group, search it via our Entra integration, but once its added, i still get access denied with the associated user im logging in with. The only way SSO will work is if i manually add each user. Jamf Support told me add the group as a standard group, matching the name 100%, which obviously still didnt work. Before i go back to support, curious if anyone here has run into something like this?

Bonjour, Avec Jamf Composer, nous avons le bug suivant : L'espace disque demandé pour un paquet est de 107 Go alors que le paquet à une taille de 155 Mo. Le paquet à été fait avec Jamf Composer 11.15.0 sur macOS 15.4.1.

Apologies if this is a basic question — I'm new to MDM administration. During the initial rollout at a new school location, the iPads get stuck after connecting to Wi-Fi and attempt to load the profile. The error message appears to be something like: "Timeout while reaching for profile" (translated from a different language). Troubleshooting so far: I spoke with the Wi-Fi administrator to ensure that the necessary ports are open, and the firewall shouldn't be blocking anything. I also tested with a different Wi-Fi network, but that didn't resolve the issue. I un- and reassigned the ADE profiles. The profiles are relatively small compared to those at other locations, so size shouldn't be the issue. Any suggestions for potential solutions or next steps would be greatly appreciated.

We allow our users from management level up to download apps as they need and we do not worry about controlling their backgrounds or layouts on their devices. If you restore from backup on a phone that was never in JAMF it will not show up in JAMF. If you restore from backup on a phone that was in JAMF after a restore it no longer actively communicates. Is there a way for these users to restore from backup and keep their new phones similar to the old? 

I’ve set up Jamf Connect, but the current login process feels too complicated for users. Right now, they need to: Then authenticate with their Entra ID password, And finally enter a local admin password to sync the network and local accounts. I don't understand what I configured wrong and why this is happening. As far as I understood from the forums and documentation, this should happen at the beginning when you need to synchronize the password, or when the password has not been synchronized.So it's most likely that the password is not synchronized? How can I troubleshoot it?

Greetings! We use FileVault through Jamf Pro and we also have a mixed bag of Intel and Apple Silicon laptops. As far as our Jamf Protect Complaince report, ALL of the Apple Silicon machines show as "Pass" and ALL of the Intel machines show as "Fail". I've been poking around online trying to figure that one out, but can't seem to find anything. Has anyone else experienced this phenomenon and found a fix? Thank you

Hi, I'm looking for a script or uninstaller for removing all Jamf components. My company made a decision to move to Intune, and we took the non-best practice route of manually moving devices (best practice is to completely reimage). Because of this the devices have Jamf residuals on them. We're simply looking to clean up after and remove any unlicensed elements as part of good due diligence. I did find one post suggesting use of a third-party uninstaller. Perhaps this is best over trying to come up with a script?

My team has been tasked with changing some settings for Safari and Chrome. We have to have the homepage set and then a second tab that's blank. We are able to successfully push these changes with a config profile, but of course this locks down the settings.   Has anyone had any experience with pushing settings like this and the user still being able to change the settings back if they want?   I tried scripting the changes and pushing to me device, but neither browser seems to care about the changes. Any advice would be much appreciated.   Thank you

 I have been able to determine if the application is enabled and running, just have not been able to create a script or guidance to help the user turn it back on without generating support tickets. I have seen this type of guidance demonstrated with a Jamf lead learning presentation.So what I want to do is create an alert that will guide a user to a self service help script that will either direct a user to or allow them to click a button to enable Jamf Private Access when it gets disabled. Anyone have any Ideas? I have not been fruitful in my search of information as of yet to be able to run JamfPrivateAccess using CLI or create the assistive guidance necessary.

Has anyone noticed that the latest version of Jamf Connect, version 2.45, now shows up at the very bottom of the screen as opposed to centered on the screen? Is this the norm now?

We run n-2 for our cloud instance, and we just upgraded to 11.14.1 this past weekend. Now I'm noticing when I command+click the PreStage Enrollment in a computer record to open it in a new tab (Chrome and Safari), I'm presented with a page that says "Automated Device Enrollment not configured". I can manually navigate to the PreStages fine and if I do a regular click on the PreStage in the computer record it opens fine, it's only when opening it in a new tab that I get the message. I had gotten in to the habit of using a new tab because I noticed clicking back after looking at the PreStage just reloads the PreStage page instead of bringing me back to the computer record for some reason. I also just noticed if you simply refresh the PreStage tab (say you want to see if a machine is assigned or not yet), or even click in the URL bar and hit return, you get the error message again. It's like it has to see that you clicked the link from a computer record for some reason.

Hi All, Does anyone have SnagIT Deployment Tool plist for Jamf Pro? Thanks Advance 

We are deploying ClickShare to all of our conference rooms and have run into an interesting deal. Naturally, when the program starts from the puck, after plugging it in to the Mac, it needs to be allowed to record the screen. For installed programs, I would just do a PPPC configuration policy.  But I can't get it working for this. I have tried to get the Team Id, and it responds that the Clickshare. App on the puck is not a valid program.  I tried using Path (Which I have not used before), and that doesn't do the trick either. I used the IDs on Barco support site, but that is for the installable app, and doesn't work for the puck app. Has anyone come across this? Thanks Dave

I know there's a number of discussion on it but haven't quite found the correct one. I'm trying to have a policy that will call a script to change computer name based upon users first letter and last name. Here's the workflow: -User will enroll via DEP. Enter in John Smith-DEP will look for SplashBuddy (SB) to run.-SB will do it's thing and will trigger all install packages.-one of the policies to kick off is to take the information set for the User name and change computer name to jsmith-mbp on the local macbook. Any help would be appreciated. Thank you

Hey guys, I am looking to get a smart group set up to notify me when Macs age out after 4 years for upgrades. I am doing this right now using the model and specifying the year they were made, but that just means every year I need to add a new field. Is there an easier way to do this?

Has anyone been able to package and deploy DeepFreeze Cloud clients? The only DeepFreeze discussions and papers I see are pretty dated (2011). I can successfully export a .pkg from the DF Cloud console, it is a zip file containing the .pkg and a plist. Nothing I normally do using either Composer (snapshot) or dragging and dropping into Admin works and will install correctly. TIA, /randy