Is anyone able to get Groups working for privileges in Jamf Pro? I can add a group, search it via our Entra integration, but once its added, i still get access denied with the associated user im logging in with. The only way SSO will work is if i manually add each user. Jamf Support told me add the group as a standard group, matching the name 100%, which obviously still didnt work. Before i go back to support, curious if anyone here has run into something like this?

Bonjour, Avec Jamf Composer, nous avons le bug suivant : L'espace disque demandé pour un paquet est de 107 Go alors que le paquet à une taille de 155 Mo. Le paquet à été fait avec Jamf Composer 11.15.0 sur macOS 15.4.1.

Apologies if this is a basic question — I'm new to MDM administration. During the initial rollout at a new school location, the iPads get stuck after connecting to Wi-Fi and attempt to load the profile. The error message appears to be something like: "Timeout while reaching for profile" (translated from a different language). Troubleshooting so far: I spoke with the Wi-Fi administrator to ensure that the necessary ports are open, and the firewall shouldn't be blocking anything. I also tested with a different Wi-Fi network, but that didn't resolve the issue. I un- and reassigned the ADE profiles. The profiles are relatively small compared to those at other locations, so size shouldn't be the issue. Any suggestions for potential solutions or next steps would be greatly appreciated.

We allow our users from management level up to download apps as they need and we do not worry about controlling their backgrounds or layouts on their devices. If you restore from backup on a phone that was never in JAMF it will not show up in JAMF. If you restore from backup on a phone that was in JAMF after a restore it no longer actively communicates. Is there a way for these users to restore from backup and keep their new phones similar to the old? 

I’ve set up Jamf Connect, but the current login process feels too complicated for users. Right now, they need to: Then authenticate with their Entra ID password, And finally enter a local admin password to sync the network and local accounts. I don't understand what I configured wrong and why this is happening. As far as I understood from the forums and documentation, this should happen at the beginning when you need to synchronize the password, or when the password has not been synchronized.So it's most likely that the password is not synchronized? How can I troubleshoot it?

Greetings! We use FileVault through Jamf Pro and we also have a mixed bag of Intel and Apple Silicon laptops. As far as our Jamf Protect Complaince report, ALL of the Apple Silicon machines show as "Pass" and ALL of the Intel machines show as "Fail". I've been poking around online trying to figure that one out, but can't seem to find anything. Has anyone else experienced this phenomenon and found a fix? Thank you

Hi, I'm looking for a script or uninstaller for removing all Jamf components. My company made a decision to move to Intune, and we took the non-best practice route of manually moving devices (best practice is to completely reimage). Because of this the devices have Jamf residuals on them. We're simply looking to clean up after and remove any unlicensed elements as part of good due diligence. I did find one post suggesting use of a third-party uninstaller. Perhaps this is best over trying to come up with a script?

My team has been tasked with changing some settings for Safari and Chrome. We have to have the homepage set and then a second tab that's blank. We are able to successfully push these changes with a config profile, but of course this locks down the settings.   Has anyone had any experience with pushing settings like this and the user still being able to change the settings back if they want?   I tried scripting the changes and pushing to me device, but neither browser seems to care about the changes. Any advice would be much appreciated.   Thank you

 I have been able to determine if the application is enabled and running, just have not been able to create a script or guidance to help the user turn it back on without generating support tickets. I have seen this type of guidance demonstrated with a Jamf lead learning presentation.So what I want to do is create an alert that will guide a user to a self service help script that will either direct a user to or allow them to click a button to enable Jamf Private Access when it gets disabled. Anyone have any Ideas? I have not been fruitful in my search of information as of yet to be able to run JamfPrivateAccess using CLI or create the assistive guidance necessary.

Has anyone noticed that the latest version of Jamf Connect, version 2.45, now shows up at the very bottom of the screen as opposed to centered on the screen? Is this the norm now?

We run n-2 for our cloud instance, and we just upgraded to 11.14.1 this past weekend. Now I'm noticing when I command+click the PreStage Enrollment in a computer record to open it in a new tab (Chrome and Safari), I'm presented with a page that says "Automated Device Enrollment not configured". I can manually navigate to the PreStages fine and if I do a regular click on the PreStage in the computer record it opens fine, it's only when opening it in a new tab that I get the message. I had gotten in to the habit of using a new tab because I noticed clicking back after looking at the PreStage just reloads the PreStage page instead of bringing me back to the computer record for some reason. I also just noticed if you simply refresh the PreStage tab (say you want to see if a machine is assigned or not yet), or even click in the URL bar and hit return, you get the error message again. It's like it has to see that you clicked the link from a computer record for some reason.

Hi All, Does anyone have SnagIT Deployment Tool plist for Jamf Pro? Thanks Advance 

We are deploying ClickShare to all of our conference rooms and have run into an interesting deal. Naturally, when the program starts from the puck, after plugging it in to the Mac, it needs to be allowed to record the screen. For installed programs, I would just do a PPPC configuration policy.  But I can't get it working for this. I have tried to get the Team Id, and it responds that the Clickshare. App on the puck is not a valid program.  I tried using Path (Which I have not used before), and that doesn't do the trick either. I used the IDs on Barco support site, but that is for the installable app, and doesn't work for the puck app. Has anyone come across this? Thanks Dave

I know there's a number of discussion on it but haven't quite found the correct one. I'm trying to have a policy that will call a script to change computer name based upon users first letter and last name. Here's the workflow: -User will enroll via DEP. Enter in John Smith-DEP will look for SplashBuddy (SB) to run.-SB will do it's thing and will trigger all install packages.-one of the policies to kick off is to take the information set for the User name and change computer name to jsmith-mbp on the local macbook. Any help would be appreciated. Thank you

Hey guys, I am looking to get a smart group set up to notify me when Macs age out after 4 years for upgrades. I am doing this right now using the model and specifying the year they were made, but that just means every year I need to add a new field. Is there an easier way to do this?

Has anyone been able to package and deploy DeepFreeze Cloud clients? The only DeepFreeze discussions and papers I see are pretty dated (2011). I can successfully export a .pkg from the DF Cloud console, it is a zip file containing the .pkg and a plist. Nothing I normally do using either Composer (snapshot) or dragging and dropping into Admin works and will install correctly. TIA, /randy

What I want to achieve: Enroll AppleTV 4ks (with only HDMI port) in Jamf School and add them to ASM via Configurator 2. My Steps so far: Followed the Apple documentation: https://support.apple.com/en-au/guide/apple-configurator-2/cada1ba9dab1/mac Renamed my Phone Hotspot to "Apple Store" (no Password) and the Apple TV and my Mac with Configurator are both connected to the network (both devices connected with some data traffic) AppleTV does not show under paired devices This AppleTV is new and has never been configured (Thats why I used the free "Apple Store" Wifi Trick) Other devices, including other Apple TVs with USB Port show under Paired devices in the same Wifi Additional Question: Is it even possible to enroll an AppleTV without a USB Port to ASM + Jamf School.I rechieved a Tipp, that it is only possible when the AppleTV has never been configured. The Wifi Pairing with the older A.TVs only worked, because I went to the settings of the "Test-AppleTVs" and entered a code.

Hi,so in a couple of weeks Google will shut down basic auth for gmail SMTP (Transition from less secure apps to OAuth ).As this is how we (and probably many other Jamf Pro customers) set up our Jamf Pro in the cloud to send us notification mails, we are now strugeling to find a way for the future.Has anyone (without an other mail server besides Google) found a solution jet?Or has anyone heard of OAuth support for Jamf Pro smtp settings?Kind regards, Matthias

We have a little under 200 Departments in Azure AD. I would like a bulk way of adding these to Jamf under Settings - Network - Departments.  Don't tell me I have to add them manually, It is unacceptable in this day and age that you have to add a field one by one. Is this something Jamf Support can import on the back end?  I can't believe there isn't an import button after using Jamf for 6 years now... I see an export button, gee thanks! Jamf is great but this was just forgotten for some reason :-(

Good afternoon,I need to deploy Blender to a couple of computer labs.  Since its a drag and drop application, how do I prep this for deployment without a package?

Hey everyone Since a couple of Sequoia releases the version of Safari is not being updated on our Macbooks !  As example this morning I've updated my (enrolled) machine to Sequoia 18.4 but my Safari remains on version 18.2 (19620.1.16.111.6, 19620). Of 88 devices (all up to date with macOS -> 15.3.2) 77 devices only have Safari in version 18.2 ! softwareupdate -l doesn't show any available updates. Does anyone else have seen this behavior ?

Has anyone else had issues with a very slow to load dashboard with Jamf Pro 11, nothing I seem to do improves the load time as well as information that was present before, like build number etc... are all missing, which is fine, but it does make it give you less information and with slow load times it's just very cumbersome to use now.Any potential fixes for this, cleared cache, incognito, different browsers, no hardware acceleration, different OS, nothing seems to work on load times.

Hello! At the school where I work we are planning to convert the mobile user accounts (connected to AD) to local user accounts, and make them admins.I saw the fantastic script on rtrouton's GitHub. I tested it on a test machine and works like a charm, though the issue I have is that it asks for user input, and trying to push it via policy in Jamf, it simply waits. So the question is: is there a way for me to achieve this via Jamf Pro, without the use of Jamf Connect (we currently don't have it)? Thank you

I created a script that prompts users to run the latest macOS update. The script works perfectly when run through a policy, so there are no issues with the overal functionality of the script. The policy is scoped only to Macs that are not yet running macOS 15.4. We have not decided to allow updates to 15.4.1 just yet. I noticed that the policy ran on a Mac running macOS 15.4. It's likely that this Mac had not yet ran a current inventory that would have put it in the macOS 15.4 smart group, which would have excluded it from running the policy. I decided to add a function to the script to check the current installed macOS and then compare it to the required macOS version. If the Mac is already running 15.4 or higher, I want the script to exit without doing anything. The idea is to run this function before doing anything else. If I fill in "15" for "reqosMajor" and "4" for "reqosMinor", this works perfectly. I put this function into a script by itself to test. Each time the function runs

  Hi everyone,Has anyone recently tried using the softwareupdate --fetch-full-installer --full-installer-version 15.4 command—either directly or through a Jamf policy? This applies to any version, not just 15.4. I tried running it earlier today and consistently got the error: “Install failed with error: Update not found.” I’m not sure if Apple has changed something behind the scenes, but it doesn’t seem to work anymore. I came across this recent discussion where someone else ran into the same issue:https://discussions.apple.com/thread/256042015?sortBy=rank