We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.
We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.
Real talk, real tools and real-time support from people who get it.
Get answers from fellow admins
Find your way around
Share your thoughts
Submit your idea
I have been getting requests to provide all managed phones with a contact list. The config page allows me to access a CARDDAV server. I would like some suggestions on how to best set one up, perhaps a cloud solution. Thanks
Hello, So I’m curious about whether we need to have either an LDAP server setup or issue managed AppleIDs in order to utilize user-initiated enrollment. I made a user and user group in JAMF Pro thinking it would allow for enrolling a device and that I could give my end users a single set of credentials to then get the MDM profile and configuration to everyone. However during the enrollment, I get stuck on a page which mentions “Assign to User” with a blue magnifying glass and Enroll button which don’t seem to react, no matter what I enter. Perhaps this is not possible, but it’s what I’m hoping to find out here. Can I use a single JAMF Pro user to log in all my end users for user-initiated device enrollment? Or must we set up an LDAP server/get managed IDs? Context: We are doing a big push for new devices soon, and currently we have no self-enrollment, meaning our IT department would have to manually enroll every phone. We are looking for an alternative solution to avoid that. We do not
Was upgrading my on prem dev Jamf pro instanace today and was looking into Important notices for the last few releases. I noticed this: 11.14.0 Apple announced upcoming changes to the Apple Push Notification service (APNs) Certificate Authority (CA). Organizations using APNs will be required to update their application's trust store to include the new server certificate before 24 February 2025 to prevent communication disruption. For cloud-hosted environments, the root certificate is already trusted and validated. For on-premise environments, you may need to download and install the new SHA-2 Root USERTrust RSA Certification Authority certificate to your server's certificate trust store if it is not already trusted on your hosting infrastructure. For more information, see How to Download & Install Sectigo Intermediate Certificates - RSA documentation from Sectigo per Apple's announcement. Apple has a test server available to allow organizations to send push certificates to verify the c
Hi all, I'm fairly new to Jamf and recently completed the Jamf 100 course. I want to start testing to learn more, and I have a loaner Mac to use but I want to make sure I don’t accidentally affect anything in production. What’s the best way to safely test? Should I ask for a separate test instance from Jamf, or use VMs? Any tips or lessons from those who’ve been in a similar spot would be super helpful.
I have been using docutil for many years at this point (along with BuildADock). It works great. I am building a new lab and it's a weird setup. Not every computer will have the same versions of software installed (mainly Adobe) for some stupid licensing issues. I'm wondering if there is a way to use wildcards in the docutil script? For example, I have three sets of computers that have either Adobe CC 2023, 2024, or 2025. The software installs are the same, but the version year is different. Rather than make different docks for all the variations in the lab, is there a way to use a wildcard so it puts whichever version of Photoshop onto the dock that is installed onto the computer?
Hi All, Does anybody know if InTune Cloud PKI integration with JAMF works instead of the legacy setting up NDES on prem?
Join us for knowledge sharing, networking, and discussions with fellow Apple admins! 📅 When: Thursday, August 14th, 2025 ⏰ Time: 5:30 PM - 7:30 PM PT 📍 Where: WeWork, 2 Embarcadero Ctr, San Francisco, CA 94111 🎯 Focus: DevOps, Security, and Apple Management 🎤 Featured Presentations Homebrew: How to Unite Developers, IT Administrators, and Security Professionals Brandon Valentine from Workbrew 🔧 Homebrew fundamentals every IT admin should know 🛡️ How to turn Homebrew into an IT and security asset 📱 Best practices for managing it across your entire Mac fleet Challenges in NVD (National Vulnerability Database) Data Quality Shwena Kak, Security Researcher from Kandji 🤝 Networking & Discussions Connect with fellow admins, share experiences, and build valuable relationships in the Apple admin community. 🎉 Event Details 🍕 Food and drinks provided by Jamf and Workbrew 💡 Interactive Q&A sessions 🍎 Networking opportunities Event Sponsor Jamf and Workbrew
Join us for the exciting launch of the SF Bay Area Apple Admin User Group! Connect with fellow Apple administrators, share experiences, and build a stronger local tech community. Date & Time: Wednesday, May 28, 20255:30 PM - 7:30 PM PT Location: Fanatics Headquarters1 Franklin PkwySan Mateo, CA 94403 (About 0.7 miles or 17 min walk from Hillsdale Caltrain station) What to Expect: Network with local Apple admins A few short presentations Share best practices and experiences Get help with current challenges and solutions Share Apple Admin tech stack AMA's to the group on best practices Discuss open source tools Get feedback on location and meeting format ... and much more! Refreshments: Food and non-alcoholic beverages provided by Jamf Beer provided by gracious hosts at Fanatics Important Notes: 🔐 Building Security Requirements: All attendees must register with their full name for building access. Capacity: Limited to 40 in-person attendees - register early to secure your spot! Registra
Hello Jamf Community, I'm currently experiencing an issue with Jamf Remote Assist — I haven't been able to successfully connect to any Mac devices for the past two weeks. Each attempt either times out or fails with no clear error message. I've tried the following so far: Confirmed that Remote Assist is enabled in Settings. Restarted Jamf Daemon and the local Jamf app on the affected Mac. Verified network/firewall configurations (no changes recently). Tested on both Intel and Apple Silicon Macs with the same result. Has anyone else encountered similar issues recently?Is there any known workaround or reliable fix that could help restore functionality? Any suggestions or guidance would be much appreciated. Thanks in advance!
Hey folks, I worked on a script to deploy Autodesk 2026 (the one that uses the named user licenses). We don’t teach Mudbox, so that isn’t in the script...but Maya and AutoCAD is (along with Darwin..what a PIA to get working). I packaged the apps and deployed to /private/tmp/AutodeskApps… I have a lot of logging left in the script as Darwin is a royal pain and can fail at many different steps. I also made use of a lot of variables to hopefully make updating in the future easier. Oh, also did it in zsh. Hope you all find it useful, or at the very least, a good jumping off point! #!/bin/zshset -euo pipefail ############################# VARIABLES############################YEAR="2026"TMP="/private/tmp"APP_TMP="${TMP}/AutodeskApps"LOG="/var/log/autodesk2026_install.log" DMG_LIST=( "Autodesk_Maya_2026_1_Update_ML_macOS.dmg" "Darwin.dmg" "AdskIdentityManager-UCT-Installer.dmg" "Autodesk_AutoCAD_2026_macOS.dmg")PKG_FILE="AdskLicensing-15.4.0.13093-mac-installer.pkg"INSTALL_SUMMARY=() log() {
🚀 Job Opening: Data Engineer (Palantir is Mandatory)📍 Location: NJ / NYC / AtlantaW2 Candidates🕒 Experience Level: 7–10 YearsWe are looking for an experienced Data Engineer to join our team and lead the design and development of scalable, cloud-based data solutions.👉 Please share your updated resume along with your LinkedIn profile URL.The ideal candidate brings strong expertise in Palantir Foundry, a solid background in AWS, ETL pipelines, and familiarity with AI/ML integration in data workflows.🔧 Key Responsibilities:Design and implement scalable and resilient data pipelines and ETL workflows.Leverage Palantir Foundry for building data integration and transformation workflows.Integrate machine learning models into end-to-end data solutions.Work with AWS services like S3, Glue, Athena, Lambda, and Redshift.Collaborate across teams to optimize microservices-based data architectures.Implement and maintain best practices in DevOps, CI/CD, and containerized deployments using Docker a
Hi everyone, I'm currently facing an issue with AnyDesk deployed via Jamf across our Mac fleet. Initially, I set up an installation policy and a configuration profile for all Macs and users, and everything was working smoothly. However, I've noticed that whenever I add a new PC to AnyDesk and attempt to connect remotely to a Mac, I receive an "Access Denied" message. I understand this isn't the official AnyDesk forum, but I’m hoping someone here might have encountered a similar situation. I’m considering removing and redeploying the configuration profile to see if that resolves the issue—but I’m not entirely sure how to go about it. Would changing the scope to "specific computers" and "specific users" be enough? Could that potentially cause other problems? If anyone has suggestions or has dealt with something similar, I’d really appreciate your input. Thanks in advance for your help!
Anyone having a keychain issue and the onboarding window not opening automatically upon first login (newly imaged machine that hasn’t been logged into before)? Tried 3 times and get the same result. Self Service+ Version: 2.4.0Jamf Connect Version: 3.4.1Jamf Connect Preference Domain Version: 3.2.0macOS Version: 15.5 (24F74)
We need to add a new allowance to our VPN profile that is required for the newest version of our VPN client . I am trying to figure out what exactly happens on macOS when a profile gets updated. Does it remove all the settings the profile sets and reapply, or does it only add/remove changes. I would like it so people do not get kicked off VPN when the profile is updated (The addition to the profile only deals with login items.
Does anyone receive these emails, [HIGH] Alert for Sophos Central, when their computer is updated from one operating system to another, or at other random times? I was informed by Sophos that I would need to manage using static groups instead of smart groups, but that seems inefficient and not ideal.
Submit and vote on product ideas.
1 Question Answered
216 Questions Answered
17 Questions Answered
15 Questions Answered
20 likes
12 likes
10 likes
9 likes
8 likes
Learn about our customer advocacy program that celebrates our most passionate customers.
Join the community to receive product updates, and share feedback.
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
