Hey,I am looking for way to disable the newDisable Google Chromes KI-Modell Gemini Nanohttps://www.heise.de/en/news/Commotion-about-unsolicited-AI-file-downloads-in-Chrome-11285401.htmlDoes anyone have an Json ready that can manage this setting?Is there any other way, to disable this unwanted “feature” ?Thanks in advance.

Hey all. Rather than having to install and update Jamf Connect manually through policies after the black screen scare on Sonoma, i've been trying to have it deploy and update automatically through Mac Apps. However i find it is stuck on 'in progress' and never gets past that stage. Has anyone experienced this? It seems scoped to the correct group, i have attached my configuration settings in case anything seems odd there. Many thanks.

I know this has been a “feature, not a bug” for a while with Jamf App Catalog titles but it’s becoming enough of a problem that I would REALLY like a better solution.  The problem:Macs fall into a Smart Group being used for scoping of Jamf App Catalog titles Jamf App Catalog scoping does not reliably update with those recently added Macs unless you toggle the deployment off and back on again to force it to recalculate. (Count is differing by 100 or more Macs for some titles in our instance today.) Jamf Pro lacks any way to alert us that an App Catalog title needs refreshing, so we have to monitor every title’s deployment count manually to see if any of them needs a reset.I started a support “ticket” (i.e. JamfBot conversation) about this just in case there was a new checkbox or something somewhere I wasn’t aware of, and it informs me that everything is functioning as intended as far as documented solutions.  I’m in line for a human support agent to see if they have any pointers or undo

Hello again. I'm seeing a lot of older posts about this that are not relevant to Sonoma; most posts are from years ago. This is a 2 part question: I want to upload a Corporate image to be used for Desktop Wallpaper. I'll need this to be built into the "image" we use for MacBooks.2nd question, once picture is installed in the right folder, all I need to do is use the the "Lock Desktop Picture" setting in Restrictions and add the file path, correct? Any help is greatly appreciated. JAMF ProSonoma 14.4.1MacBook Pro 

Hello,I’m currently using Lost Mode in Jamf Pro to disable iPads / iPhones that are not returned to the IT Helpdesk.Occasionally, when these devices are returned, they have either run out of battery or have been restarted while still in Lost Mode. After rebooting, the devices are locked down; No WiFi, Ethernet (with working adaptor) or not connecting to Mac via Apple Configurator.Because the device is still in Lost Mode, the passcode cannot be entered, and the device is unable to check in with Jamf to receive the “Disable Lost Mode” command.This leaves the device stuck in Lost Mode unless it is restored via Recovery Mode.Has anyone found a way to:Ensure devices reconnect to a network after reboot while in Lost Mode, or Remove Lost Mode without requiring a full restore?For context:Devices are supervised and managed via Jamf Pro Enrolled via Automated Device Enrolment No cellular connectivity for iPads (Wi-Fi only devices)Any advice or best practices would be greatly appreciated.Thanks i

Hello, For software updates and the type of install action, does “Download and Install” reboot the computer automatically or will it allow the user to restart on their own to complete the installation?If it does reboot automatically, how is it different from the option to “Download, Install, Restart”?

Hi there,I have some machines with standard accounts and users are being prompted to install the helper tool which is frustrating them...I was under the impression that installing apps via polices / self service would prevent this from happening? The main culprits being ClickShare & Slack!  My apologies if this is basic stuff, I'm a Windows guy transitioning over to Mac! Any guidance is seriously appreciated. Thanks in advanced,K 

One of my users cannot register for platform single sign-on. She can complete step 1, which is to authenticate with her Mac login password.  Next, she can enter her email address. That’s when the process goes awry. After entering her email address, the window goes blank white. Behind it, we can see that Company Portal is doing something in the background. There’s the spinning progress icon. After seeing this, I removed and reinstalled Company Portal and ensured that the latest version was installed. She’s running macOS 26.3.1 and will have 26.4.1 soon since I just started enforcing that update. Has anyone seen this behavior and solved it? The PSSO login type used is Secure Enclave. We can’t do anything but cancel the registration. 

I am testing Connect 2.45 and have had a popup appear on the Login Screen.Its a really "Helpful" Popup. All it says is SecurityAgentHelper wants to make changes, and it asks for an Administrator username and password. None of my users are Administrators, so they will not be able to fill this in.Is this a bug? Is there a way to fix it so that it does not pop up? What process is it that wants this access? Thanks Paul  

PI-1152 involves the MDM Device Identity Certificate not being trusted on new enrollments after updating to version 11.26.PI-1153 concerns Device Identity Certificates being marked as untrusted in Keychain Access during enrollment in version 11.26.1.

Hi everyone, we are currently exploring the Jamf Security Cloud and it’s capabilities with Jamf Trust app.So far we were able to create a connection between our Jamf Pro instance to Jamf Security Cloud, along with Entra ID for IdP integration.Current configuration deploys a Jamf Trust activation profile to end devices via Jamf Pro. However, I was wondering if the Jamf Trust app automatically gets installed via the activation profile. Or is there another process we need to configure to deploy the Jamf Trust app to end devices (for Mac and iOS). I would appreciate any expert’s opinion on how a typical Jamf Security Cloud and Jamf Trust configuration and deployment would get configured on end devices. Thanks in advance!

Current customer wants subs to have access to manage the student devices. Anyone have a workflow for this? 

As of macOS Sonoma 14.4 using "/System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport --getinfo" no longer returns info about the active Wi-Fi connection. If you want to collect the active SSID for macOS 14.4 or later you can use the wdutil tool and here's an EA to do that:    #!/bin/sh # EA - ActiveSSID # # Note: Using wdutil instead of networksetup so I don't need to know what # interface is Wi-Fi # Returns the currently active SSID activeSSID=$(/usr/bin/wdutil info | /usr/bin/awk '/SSID :/ { print $NF }') echo "<result>$activeSSID</result>"  

We are deploying Xcode as a Mac App (VPP).  Apparently after updates it is requiring admin creds to accept the End User License Agreement.  I am stumped on how to fix this one.  There’s not much I think we can do with Mac Apps.-Pat

Hi everyone, we have recently bought a Brother MFC-L2800DW type printer and I was wondering what would be the steps to deploy it and configure it. It will be our first printer installation so we are very new to the process. CUPS and IPP and PPD shows up in many places.We want this printer to be a network attached printer and I think we need to also deploy a driver as well, I am assuming. I would appreciate any expert’s opinion on what would be the default way to configure a network attached Brother printer. Can we use macOS built in generic PPD file? Or We need to deploy something frmo Brother printer’s end? Thanks in advance.

With the recent release of the M5, we’ve been trying to connect MacBook Pro’s to our 802.1x secured Wifi Network.We’re using the same configuration profile that has worked on the rest of our fleet.  Our network team have looked at the logs and have determined the issue is on the endpoint side “WLC keep sending EAP-TLS request and no response from client”.Wondering if anyone else has encountered this issue and what if anything was done to fix it.Thanks

I was creating a configuration profile to setup a webclip that redirects to a URL. I accidentally put a name for the bundle ID: com.apple.webapp with an XYZ name and now Jamf has made that association and has changed or plugged in that XYZ name into all my other profiles that have that bundle ID. This created a bunch of orphan icons on a test device I was working on. How do I remove remove that? I am working to remove that bundle ID in all my Restrictions profiles, and will have to reset my devices. SOS! I am new to jamf, so def learning as I go. 

As I toy around with different app deployment ideas for our staff in Jamf School. I feel like I’ve hit an odd limitation.Can you only have a maximum of four App Installer apps appear in the Discover section? Can they be displayed in My Resources with the rest of the apps and packages? What do you do if you want to use more than four App Installer apps?This makes me think app installers while seemingly convenient are not the way. I was hoping to simplify our package management and updates form many things in trying to move from Jamf Pro to School maybe Appl Installer aren’t the way.I also thought I might use Installomator, but for apps I’d like to provide “on-demand” it seems I don’t have a good way to trigger their installation without policies being available. I’d be curious what others have settled on to address this or point out to me the obvious toggle I’ve missed somewhere!  

I am seeing a Keychain not found alert after I recently started enforcing OneDrive Desktop and Documents sync. This just happened on my newly enrolled test Mac after I registered platform single sign-on. The alert appeared as I was logging in to OneDrive. There is actually an entry in Keychain. I looked up the ID shown in the screenshot. Reset to Defaults is NOT the right choice. I found that unlinking the Mac from OneDrive and then signing in again helps, but this prompt came up as I was in the process of logging in. We use platform single sign-on so there is no password prompt. Has anyone else seen this and solved it? 

New and somewhat confused JAMF-user here, and thus: silly questions.I'm using Entra as my Cloud Identity provider and I'm trying to create a smart user group based on membership in an Entra-group (JAMF_KLA) in order to build configurations for said usergroups. But I cannot for the life of me get it to work (nor do I know if it's actually possible).Looked at the mapping of both the SUG and in the CIP-setup, and everything there looks like it should work. Can also do a test against various users, and it works (User that is in the Entra-group gets green checkmark, user that is not in group gets red checkmark). Which tells me that the lookup is working.I see that I can also add users from a Directory Service from the Settings-menu. However, is that only for admins/auditors? I see that there's an option for Enrollment Only. Does this mean that the imported users do *not* have access to the JAMF-console?

Hello,Google is our IdP for logging in to Jamf Connect Login. I am using Self Service+ which states that the local password is “In Sync”. If I change a users password in Entra (which then will sync to Google Workspace), the “in Sync” does not go away or update ever. If I were to reset the password locally though Self Service+ using the menu bar drop down (opens Entra password change portal) it then states that the password is out of sync and that I need to login again to Self Service+. Great! I login, it accepts the new password, and states that the password is “in Sync”. I am never prompted for the old password.If I log out of the user and log back in with the new password, I am successful at the Google SSO pane, but it then has a smaller Jamf Connect pane that asks for valid credentials, which is the previously set password. The local password will not update despite “being in sync”.I have to be doing something fundamentally wrong, any help would be really appreciated. 

EnvironmentJamf School Jamf Connnect 2.45.1 macOS Tahoe (26.1, 26.2)Issue - Keychain dialog popping up for Jamf Connect on restart or fresh login.I’ve read many reports of how to fix this by updating Jamf Connect to 3.0 or higher. The issue is that JAMF School guidance is not to go past 2.45.1 for Connect menu bar reasons and lack of access to Self Service+, etc...Our goal was to move our computers from Jamf Pro to JAMF School but this lack of support has me reconsidering, with such an unclear vision how Jamf Connect will be managed in the short-term or long-term. I’m holding back our fleet from updating en mass to Tahoe just because of they keychain dialog issue, when I would like them to be there.If anyone has a solution I’m all ears for how to work with this keychain issue.  

Hi Jamf Folks,I use nginx file distrubtion server. It works, but I have errors in the nginx log everytime I install something via Self Service +```2026/02/17 12:54:16 [error] 13387#0: *1 open() "/<pathToPkg>/Package.pkg/index.bom" failed (20: Not a directory), client: <ip-addresse>, server: webserver.de, request: "GET /<pathToPkg>/Package.pkg/index.bom HTTP/1.1", host: "webserver.de"```When I download it via webbrowser or wget, I do not get an error.here is my nginx.conf```worker_processes  1;events {    worker_connections  1024;}http {    include mime.types;    default_type application/octet-stream;    server {        listen 443 ssl;        http2 on;        server_name webserver.de;        ssl_certificate     fullchain.pem;        ssl_certificate_key privkey.pem;        location /Packages/ {            alias /<pathToPkg>/Packages/;            auth_basic "Downloads";            auth_basic_user_file /<pathto>/htpasswd;            types {                appl

I am interested in how we can automate some reports or feed data into a SIEM like Splunk of Jamf Connect activity.  The most important data point is when a user uses the privilege elevation feature.  Does anyone have any experience or advise on this? Thanks in advance,   -Pat

HiWe use Mac and Windows with Outlook in our schoolIn the group policy I can configure default fonts for Windows How can I configure Default Fonts for Mac for all the users in the organization Kind regards,