Our organization recently deployed Jamf pro to help us manage our Mac's and while for the most part theres been very few issues I haven't been able to fix myself there is one that has been plaguing us pretty badly. The Mac's enrolled in Jamf either through prestage or open enrollment do not have access to most of the accessibility options are not available for either the Admin or Standard users.                                                      Now being fairly new to Jamf and to Mac's in general im a bit lost as to what could possibly be doing this. Ive done some reading about the authorization Db and some of the plists but I am having a hard time finding anything specific to this section of the system settings. A few things that I have checked is within the restrictions section within Configuration profiles and made sure that the pane was e

Hi everyone, Does anyone know how to automatically set Microsoft Outlook and Microsoft Edge as the default apps on iOS? I've been researching this, and from what I’ve found, it seems the user needs to open the apps at least once and manually set them as default. Is that correct? Any input or workaround would be greatly appreciated! Thanks in advance.

Hello !I just noticed that for the iPads we recently bought that at the remote management step, I have the "Enroll this iPad" as usually but on some iPads, I have one more button named "Remove iPad from Organization". What is it about ?If it allows the iPad to be removed from Jamf and / or Apple Business Manager, I don't want it. I search about it but didn't find any usefull information. I would like to try to tap on it but I don't want to do something irreversible.Could someone give me informations about this and how to make this button disappear like on other iPads I have ?

Hello, I would like to know if you know how to disable Web Filtering on Forticlient VPN, please? Indeed, we use Forticlient VPN in my company. We need to install a configuration profile to set up the Filter Socket; otherwise, without it, the user gets a pop-up asking to install the Network Content Filter. The problem is that we have just implemented Jamf Security Cloud, and we have deployed a Jamf Security Cloud profile on the computers. Most of the devices don't have the Secure DNS of JSC activated, and according to Jamf support, this is because Macs can only handle one filter at a time, and other filters need to be removed or disabled. But as I mentioned earlier, if we remove the Filter Socket from Forticlient, the pop-up appears every time Forticlient is used. Otherwise, if we cannot find a solution, we will have to stop using Jamf Security Cloud, which I find unfortunate. Thank you in advance, and have a very good day.

Hi all, I am trying to work on a solution to setup a splash screen at the login for our fleet. The idea is when users log onto macs, a splash screen pop up with a user agreement message that by "logging into the computer you abite with terms and conditions etc". I created a config profile with a Login Windows Payload and in the banner I copied the user agreement message, but since the message is too long you cant see anything unless you scroll down. I also created a little app using Script Editor and packaged it, then created a config profile to add it to Login Items. but I need a better solution. I am hoping if someone has done it.   Thank you

Hi all,At System Settings -> Display -> Advanced -> Energy  you can this turn off or on  "Prevent automatic sleeping when the display" Any idea of this is possible to control this with Jamf? thanks  

I literally jumped out of my chair when I realized that this ages-old issue is going to be working now ;) I played around with this enhancement and it's not working for us unfortunately. These are the combinations that I tested:   These combinations are only returning one value instead of ~120 for my user: transitiveMemberOf.displayName as LDAP mapping, "Allow Attribute Multiple Values" disabled transitiveMemberOf.displayName as LDAP mapping, "Allow Attribute Multiple Values" enabled memberOf.displayName as LDAP mapping, "Allow Attribute Multiple Values" disabled memberOf.displayName as LDAP mapping, "Allow Attribute Multiple Values" enabled   These combinations are returning nothing (as expected, this was just tested to make sure I'm not missing something) transitiveMemberOf as LDAP mapping, "Allow Attribute Multiple Values" disabled transitiveMemberOf as LDAP mapping, "Allow Attribute Multiple Values" enabled memberOf as LDAP mapping, "Allow Attribute Multiple Values" disab

As we deployed new AppleTVs we got the old AppleTVs back, some were not MDM enrolled (teacher donated). Now we are tasked with enrolling those OLD devices in our MDM. Mostly we were successfull in adding the devices to our MDM (via USB-C), but, we have a hard time with some Wi-Fi ONLY AppleTVs that were found in the mix. The apple instructions for enrolling the Wi-Fi only devices with Configurator 2 don't make any sence: Connect Apple TV HD using Wi-Fi   Apples instructions require the AppleTV to be reset/erased and left at the "Hello" screen, then, Configurator needs to PAIR to the device in order to process the enrollment, but, there is no Wi-Fi setup on the device...??? ... Anyone has any bits of advice? is MDM enrollment not possible on Wi-Fi only Apple TVs?

We have a handful of applications that are required to be on our laptops at all times. Currently, we have smart groups set with criteria for the app not being installed and a policy scoped to that group. The downside is it only updates when an automatic inventory update is done every day. Has anyone done something similar that runs more frequently?

Morning all,   I've found an issue a BETA Jamf tenant where policies don't appear in Self Service if the execution frequency is set to once per user per computer Changing the same policy to one per computer makes the policy appear, and changing it back to once per user per computer means that is disappears again. When the policy isn't appearing, it works if I call it with the policy ID from the binary: sudo jamf policy -id n Anyone else seeing this? It means that once per user per computer policies aren't running in macOS Onboarding. Using SS Classic, if it matters, but it shouldn't as this is still supported until March 2026

Hi Everybody! Just throwing this one out there in hopes that someone has been in this situation before. This morning I had a report from a user that they couldn't connect to our secure Wi-Fi and upon investigating, I found that their Mac was no longer in the JSS/Jamf Pro Server (JPS?). Someone has deleted it!!! Do any of you know of any logs that may show when a Computer is deleted from the JSS/JPS and by whom? Obviously I can't check the Computer record as it is non-existent. I have of course asked the team if anyone deleted computer "X" and surprise surprise the response was "Nope, don't think so". Not looking to catch anyone out, just would like to know who to do some additional training with or in the unlikely event if there is no record of it being deleted, then maybe we have an issue with the JSS/JPS. Thanks in advance!

Hello all, We are working on leveraging the DDM managed-software-uodate API feature for pushing out enforceable updates to our endpoints. One of the issues we are seeing, however, is that some machines get stuck where the machine never updates but when I try to push and check a new plan, I get the error  EXISTING_PLAN_FOR_DEVICE_IN_PROGRESS  My question is, how do we go about canceling a plan that is already in progress?   Thank you, Alex Weiner

Hey all,I am using the script below to install Maya 2024 and activate it using a network license.  This is the script we used for the past 3 years.  I've made the necessary changes to the script (product key, year, server), double checked things a few times and still can't figure this out: #!/bin/sh#Instructions for next time#Copy installer app to /tmp using Composer package#Modify values below as necessary (Usually: year pKey and serial)#Make sure to check pkgPath1-10 match latest installer#Set variablesyear="2024"pkgPath1="/tmp/InstallMaya2024.app/Contents/Helper/Packages/Licensing/AdskLicensing-13.3.1.9694-mac-installer.pkg"pkgPath2="/tmp/InstallMaya2024.app/Contents/Helper/Packages/Licensing/adskflexnetserverIPV6.pkg"pkgPath3="/tmp/InstallMaya2024.app/Contents/Helper/Packages/Maya/Maya_AdLMconf2024.pkg"pkgPath4="/tmp/InstallMaya2024.app/Contents/Helper/Packages/Maya/LookdevX.pkg"pkgPath5="/tmp/InstallMaya2024.app/Contents/Helper/Packages/Maya/MayaUSD.pkg"pkgPath6="/t

We're testing Platform SSO with Entra, we can get the Intune machine to login & create new accounts, but it seems to be removing admin rights on the accounts if they were previously enabled (like our local admin account).  I recall jamf mentioned something about this being a potential issue - but I haven't found much on how to change the behavior.  Does anybody have any recommendations?  

Hello,I have been searching online and through forums but I cannot find any useful information on if anyone has gotten the desktop/folder automatic syncing to work for Mac devices via Jamf? The Plist configurations I am pushing is not working. All the previous posts concerning this topic have gone cold. Has anyone been able to successfully implement this configuration and if so, can you guide me on how to complete this process?    

So with the below permission, if we disable it like the below photo will we still have access to Blueprints and Compliance benchmarks? If so what are the negatives in doing so? An Enable authentication with Jamf ID setting has been added to Settings > Single sign-on > OIDC IdP integration, and is enabled by default in environments integrated with OIDC-based SSO in Jamf Account. You can disable this option to force users to use their SSO credentials to log in to Jamf Pro.

Can anyone advise what would happen if a policy name was changed? For example, if I needed to rename "10-Install Chrome" to "210-Install Chrome", would it remove the package that was installed by the first policy and reinstall the same package under the 2nd policy? And am I correct in assuming that removing a policy does NOT remove the installed app? We're renaming them so that we can properly sequence the policies (e.g. anything with 0XX are pre-app installations, anything with 1XX are required app installations, anything with 2XX are for specific labs, etc).

Hello, I keep encountering the problem that when I register iPads in our Jamf School environment, they install apps for a while and then freeze. (App status is "waiting") At that point, you can no longer control the device via Jamf School (e.g., refresh or restart). The devices were manually registered in Apple School using Configurator 2. Is this phenomenon known to you, or can someone help with this? Best regards

As this is already working correctly again, it's not really a super urgent issue and I mostly found it a minor annoyance that required a trip across town to my office from the site I was working at. Here's the scenario: I was working on a couple of iPads that for reasons I won't get into needed a physical touch. After wiping them through Jamf I noticed that Self Service and all the apps scoped to the smart group it was in were taking their sweet time installing. I looked up the device records in Jamf and saw that the apps wouldn't install because there were no licenses. I thought, "that's weird, there should be plenty," and checked in VPP, only to discover that *gasp* all our app licenses were zeroed out. Everything in the Content tab under all categories, just showed "0" for Total, In-Use, and Reported.Panicking slightly, I headed across town to my office and called Apple Support first while I got logged into ASM. The licenses were all there. So why aren't they being seen in Jamf

I noticed for our Shared iPads that screen recording is not available in the Control Center.  I don't seem to be able to change anything in Control Center either.  I have been trying to find if there's a restriction profile selection that is enabled that is stopping this but I'm coming up empty.  Maybe I'm missing something.  Has anyone else had this issue?

Did anyone attend the "Interactive Lab: Bring Lost Sheep Back to the Flock - Using Automation to Manage Your Fleet" session? If you have did you try out the script to see if it works?  I tried it on a test Mac but I don't see it populating the Jamf Management Framework even though the script says it completed successfully. Not sure what I'm missing here. I tried the original script posted in the session. NOTE: There is a typo in the beginning of the script 😉. Not sure how to get ahold of the speaker to have it updated. Says: #!/bih/bashShould say: #!/bin/bash Note: Some people were asking about a way to encrypt the generic Jamf Pro user account you have to create for this process so it doesn't show in clear text in the script. I followed the process used here to encrypt the password. Start at Step 3. I started with using Parameter 5 and left out the "Log Files" parameter. FYI, I did try the script as is to rule out changes I did but I had the same

In the Restrictions section of Profiles, I see an option for "Allow creation of VPN configurations". I have disabled this as I don't want our users to be able to add VPNs.  Is there also an option to disable deletion of VPN configurations?  Likewise, is there any way to prevent a user from just toggling the VPN off. Or perhaps automatically re-enabling the VPN if they do turn it off?

Hi All  Hoping someone can help.Have found a script for collecting log files using jamf pro API thanks @Travid  @david_maestre for updating the script to work with Jamf pro API I belive its based on this https://github.com/kc9wwh/logCollection which no longer seems to work. I belive due to changes in the API.Im getting the below errror is there anyway to make it work without needing Xcode, seems to be using some tools which are part of Xcode. My coding skills arent up to much so struggling to find whats bits of Xcode its using as dont appear to be reference in the script. no developer tools were found at '/Applications/Xcode.app', and no install could be requested (perhaps no UI is present), please install manually from 'developer.apple.com'. Failed to retrieve Jamf Pro Computer ID. #!/bin/bash ## User Variables jamfProURL="$4" jamfProUser="$5" jamfProPass="$6" logFiles="$7" ## System Variables mySerial=$(system_profiler SPHardwareDataType | a

Hi everyone, the first renewal of the radius cert is due in a month and I am not confident on how to do this without disconnecting all of our 250+ clients. I believe I have perhaps made mistakes regarding best practices. However, I had no other choice since all certs and network payloads needed to be in one profile. The Jamf Profile used to deploy the 802.1x auth contains: the RADIUS cert the CA cert the info about which cert template to use to issue a cert for any given machine the wired and wireless network configuration settings with the certificates used to connect. All certs are issued via the ADCS server to be able to renew automatically since MacOS and IOS would not be able to do this if done without it. As far as I understood it, it had to be done this way, (all in one approach) to be able to select the cert to use for any given network connection that the conf-profile is controlling. However, once I would re-redeploy this conf-profile, the clients would lose the connection

Hello All, I want to deploy updates to Ipads in non business hours probably between 1-4 AM, how can i achieve that. I am new to JAMF Thanks in advance