Hey everyone! Quick question. We are deploying MacBook Air’s in a school setting. The devices will be connected to school WIFI with a configuration profile. Do you think it is necessary to manually set WiFi at the top of the network service order? 

I have gotten as far as the OneDrive icon prompts and says “Your IT department wants you to backup your folders” and if they click the botton it does work, but I’d like to have this just forced with no choice. This is what I have setup as far as a policy {  "title": "Microsoft OneDrive Folder Backup",  "description": "Silently enable OneDrive Folder Backup for Desktop and Documents and prevent users from turning it off.",  "type": "object",  "properties": {    "KFMSilentOptIn": {      "title": "Tenant ID",      "description": "Microsoft 365 tenant ID used to silently enable OneDrive Folder Backup.",      "type": "string",      "property_order": 10    },    "KFMSilentOptInDesktop": {      "title": "Back up Desktop",      "description": "Silently move the user's Desktop folder to OneDrive.",      "type": "boolean",      "default": true,      "property_order": 20    },    "KFMSilentOptInDocuments": {      "title": "Back up Documents",      "description": "Silently move the user's Document

Greetings,Is there a way to determine the last time a policy was triggered?  I’m doing some clean-up in my cloud environment, and have several policies created by other people that I’m reasonably certain haven’t been used in a long while; like months or years.  Ultimately its my decision on whether to remove the policy or not, but having evidence to support that decision (and the knowledge of how to get that evidence anytime) is useful to me.

We have all our Users Synced from ASM.  Pupils will bring their own iPads from August.  These will not be Supervised but we would like them all to enrol in JAMF.Is there anything that could be done during Enrollment that would automatically associate the device with the correct User so that we can use JAMF Student?

Hey Everyone, I have been battling this issue for quite some time and have done rigorous testing but have sincerely hit a wall with this issue. My organization is prepping to remove Administrator access from all users on our macOS systems, this requires them all to be converted to a Standard user. (We have a "MakeMeAnAdmin" script in place in JSS we plan to utilize) MacOS: 14.3.1Jamf Connect: 2.32.0 We use Jamf Connect with Azure/EntraID so users can authenticate on login, we have the app roles setup for the app registration in Azure with two groups, MacUserAdmin-Entra & MacUserStandard-Entra with the correct roles tied to each (Administrator & Standard) The Problem:Whenever a user is moved into the group tied to the STANDARD role in Azure and attempts to login to Jamf Connect on one of our Macs they can enter the O365 email, PW, verify 2FA, but then hit a "Yellow Exclamation Point" box with simply an "Okay" button. Once you click "Okay" you are kicked back

We have the policies to install the following Office 2024 components in order during our prestage deployment:2024 Volume SerializerMicrosoft Excel 2024Microsoft PowerPoint 2024Microsoft Word 2024For the past couple of years, this has worked exactly as intended. The volume serializer is installed to activate the license, then the individual apps are installed one by one. After deployment these have also opened and been activated. However, over the last week or so, the activation is no longer applying. I’ve tried everything I can to try and deactivate the license/reactivate it from self service etc, but the only fix appears to be completely removing all office components, and reinstalling them - only then does the volume serializer work. I thought this might be as a result of the latest Office apps, so I reverted to using older versions of the pkg files but the problem remains. I even tried using the whole Office suite pkg but the same thing is happening. Anyone else seen this before?  

We cannot update our ipad 8 from ios to ios 26.5.2 because there is not enough memory available. There are 11,31 GB free. Only around 1 GB is used by apps. Only a few kb of photos and music. The huge part is iPadOS (2,88  GB reserved for updates, 12,11 GB iPadOS) and System files (4,63 GB).We are using jamf Now.Settings - General - Software updates says: More memory needed. … minimum 13,35 GB needed…How can I trigger this update? Can jamfnow helpl to free system mememory (cache etc)? 

We are deploying beyond trust jump clients on all of our macs and following the instructions by setting up a configuration profile to enable all screen sharing, disk sharing other settings on the backend through jamf without users being notifiied however still some of the users are presented with this which is annoying for the user as well as IT team . what could have been missing in the configuration profile . any help would be greatly appreciated  

In Jamf Pro, We have policies to install the 2024 Microsoft Office suite LTSC during our Provision policy which is a script that calls each policy to install individual pieces of software we want to install on a Mac.Here is the order for the Microsoft install we have 2 policies:1. Install 2024 Microsoft Office 16.106.26020821.pkg(This is the older version from February. Testing. I tried the lastest version too)2. Install Microsoft_Office_LTSC_2024_VL_Serializer.pkg(I have also tried swapping the order)Ever since I can remember this has worked exactly as intended. The Office suite is installed then the volume serializer is installed to activate the license. At first launch it opens to the templates/recent documents page.However, over the last couple weeks of testing, the activation is no longer applying. I’ve tried everything I can to try and deactivate the license/reactivate it, but the only fix appears to be completely removing all office components, and reinstalling them - only then

Hello! I hope someone can help me with this. I've look into several other links and it does not seem to work.We generally have the Sharing preferences disabled in our Jamf using the Config Profile. We have a certain group of people who needs Screen Sharing. While we can exempt them from Sharing preferences which allows Screen Sharing, this will open up the ability for them to enable File Sharing, Media Sharing, Content Caching, and so on. 1. Is there a way to keep Sharing preferences disabled and allow only Screen Sharing? 2. Is there a way to enable Sharing preferences, allow Screen Sharing but disable the rest inside the Sharing preferences (File, media, Content cache, Bluetooth, internet sharing, printer sharing...etc)I've tried the below but it doesnt seem to work. My test machine is on Sonoma.!/bin/bash /usr/libexec/PlistBuddy -c ‘Set :com.apple.screensharing:Disabled No’ /private/var/db/launchd.db/com.apple.launchd/overrides.plist launchctl load /System/L

Hello,Every year we roll out the current version of Logic to our student walk-up Macs. We have started working on next academic year's configuration, which we expect to include Logic 12.To our surprise, the way they handle the Extra Content has changed utterly. Instead of 1000+ PKG files, which we had a reasonably well-established mechanism for deploying, pulling down all the content now results in a single huge "bundle" file here:~/Music/Logic Pro Library.bundleThis is the worst-case scenario for us, because instead of having a single set of extra content installed to Logic proper, it wants each user to have their own copy of the vast extra content.We therefore want to move the content to a shared location, and they have a mechanism for doing that. My problem is that the location of the extra content is itself stored per-user. I obviously need to deploy the setting telling each user to look for the extra content in the shared location, rather than defaulting to the per-user location.I

Im testing Jamf/Entra Device Compliance. Everything is working as expected (Smart Groups, compliant/non-compliant criteria, Entra/Intune connector, etc). Now its time to focus on the actual registration workflow and policy logic to make it as painless as possible for my users.Does anyone have a customize workflow that improves the registration user experience? Popping up the Company Portal auth UI is not an elegant way to register our employees.🙏🏻

Hello, We are currently working on configuring Jamf Connect to get away from local AD binding. I have the initial login to macOS working (Google SSO Prompt and Duo MFA is working well.) After initial account creation when you’re prompted by Self Service + to sync your Google Account password to your local account, that is where it fails. The error is: “invalid password.”  In testing... any account outside or bypassed from Duo can query LDAP successfully. Accounts encompassed by Duo receive the same “invalid password” message via Self Service + or when running the LDAP query manually via terminal.  I’ve already spoken with Jamf support. They did some minor config changes, log searching, asked me to speak with Duo and then resolved the ticket. I have a support request into Duo at the moment but haven’t heard back. I’ve looked through both Duo’s policies and in Google Admin and haven’t come up with anything.  What am I missing? 

I thought I had this right, but I’m not getting correct results…..Processor Type - Like - AppleandArchitecture Type - Is - amr64andOperating System - does not match regex - ^26(\..*)?$Still finding devices running 26. Someone have a better way to write this?Appreciate any nudges in the right direction! 

Hi all, I was wondering if I'm the only one no longer able to load the https://macadmins.software/ site that was previously hosted by Microsoft? When I go there now from any device I get a GoDaddy page, so it looks like they didn't renew the site hosting perhaps? I used this site all the time to get the most recent packages for Microsoft software. Is everyone else seeing the same thing as me? If so, has anyone heard anything about this, if this will be coming back or if that's it? I know for a while now while the links all pointed to the most recent versions of software, the version numbers listed on the site were stuck on some old version from many months back, but it was still working to download the most current releases as early as this month.

How can I make it so after a set amount of time the device goes to a app and the app can not be exited until you fill out a sign in and after the set amount of time it "Signs you out" bringing you back to the form. ThanksIan Nelson

We have a lab environment where we explicitly want the screen saver / display timeout to be a specific time, but we don’t want the user to have to re-enter the password when the display wakes / screen saver exits.When we set a Configuration Profile with a Security and Privacy: General payload, we can successfully set Require Passcode to Unlock Screen to enabled and set to a specific time (Immediately, 5 minutes, 8 hours, etc.), and this works as expected.  But when we try setting it to “Never”, the target device updates and reverts to “Immediately”.  I’ve also tried setting it to “Immediately” to see if “Never” and “Immediately” were just swapped in the Jamf UI, but that wasn’t it.I’ve also tried using a plist file in a Application & Custom Settings payload with a domain of com.apple.screensaver as detailed from Apple’s documentation.However, this doesn’t seem to work at all, and the settings don’t seem to take effect.<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist P

Hi, I want to enable set time zone automatically using your current location radio button on system settings for all my org Mac on bulk. How do we get it, I want all the Mac date and time settings to be like it is on this image.

Does anyone have any insight to when (or if) Jamf Security Cloud will be available on MacOS and Windows?I see the options as not yet supported, but wondering if there is a timeline on that.   

I have JAMF pro cloud instance and when I enroll new device using PreStage Enrollment, all my 12 application installations show ''background items added" notification on the right side of mac devices. can we mute these notifications?

I am trying to install sophos through JAMF School and used their script.The script it working fine when running it on the mac as sudo, but when i try pushing it through JAMF, nothing happens.This makes me wonder if i am missing something, i seem to be unable to make the app run as an administrator/sudo user.Can anyone help?

Hello! We use Jamf School to manage our iPads. The last few months they have been dropping their wifi connection. They have been updated to the latest OS, have been erased and re-enrolled. I have looked through all the settings, and nothing has been changed. I am the only person who uses this system and I haven’t made any changes. Is anyone else having this issue?

Where is Jamf Chat Support?  I can't find anything anymore on their website.

The latest Microsoft OneDrive versions use a different Key for their Bundle Version in their Info.plist file and JAMFS Patch Management definition is generating an error.  The existing Attribute Extension jamf-patch-microsoft-onedrive searches for KEY="CFBundleVersion" in the Info.Plist of the /Applications/OneDrive.app/Contents folder. However, there is no such key. Looking in the Info.plist of my own installation I can find the key "Bundle Version" with version 23086.0423.0001 There is no way for me to Edit the AE to improve the results or redirect it to my own that's collecting the relevant information. Any ideas on how I could fix this?

I am currently getting to know more about the new Blueprint feature in Jamf Pro. Currently I can see that a blueprint has been deployed to 60 devices, 19 devices are pending and 1 device currently has got an error. How can I check which devices have already received the Blueprints components and which devices still need them?Thanks in advance!