We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.
We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.
Real talk, real tools and real-time support from people who get it.
Real answers from Apple Admins like you
Find your way around
Share your thoughts
Submit your idea
🍻 Hey Mac Admins! Join us for an evening of good brews and great company at Ground Breaker Brewing (2030 SE 7th Ave, Portland, OR 97214)! 🕕 When? Around 6PM-ish until... whenever it winds down. Come hang and connect with your fellow PDX Mac Admins See you there! 🙌
Apple Intelligence is finally here now that iOS 18.1 and macOS 15.1 has shipped. However, many people and organizations want to know how they can block it. Apple Intelligence is an Opt-In service from Apple, so unless you Opt-In, there’s no concerns about AI, on or off device. Officially, Apple has provided the following configuration profile keys for the X.1 OSes for the preference domain com.apple.applicationaccess. allowWritingTools allowMailSummary allowGenmoji allowImagePlayground allowImageWand And DDM management of Math Notes. There’s also the key allowAssistant to disable Siri, which has become more intelligent with Apple Intelligence. Currently in the X.1 OSes, these are the features which are available and able to be restricted: Siri, Writing Tools and Mail Summary, even though there are controls for the other features not yet implemented. This will allow you to fully block those features. But is that it? …the answer is …No. So even if you implement all the Apple supplied res
Hi All, Windows admin here, thrust into a mixed environment consisting mainly of Mac’s. I’ve worked with Intune for a few years now, but Jamf/managing macOS is totally new to me. Looking forward to learning a lot, but I was wondering what everyone wishes they knew at the beginning of their Jamf journey?
At some point in your career as an Apple Admin, you’ve (most likely) inherited a Jamf instance and said either to yourself or out loud, “Huh, I wonder why they did that. I certainly wouldn’t do it that way” or “That’s not the best practice I was taught”. Caveat: There’s no such thing as best practice. The better concept is defining the best practice for your environment . This is where you get to step in and be the hero. It’s your job to take the environment, back it up first. Make sure you backup your instance and sync it to your free Jamf sandbox (If you don’t have one, talk to your rep). Once you’ve backed up and sync’d to the sandbox, I hope you’re noticing the theme here…you can get started with the H.E.R.O. process. Something not mentioned is the process of writing documentation. DOCUMENT, DOCUMENT, DOCUMENT. Write down everything from the current state, proposed changes, changes you made (with dates), how configs work, workflow processes, and everything else. The 1st thing after
Hi, I noticed that rather many of my Mac clients are not FileVault encrypted even though I have configured a configuration that should take care of that. Now I wanted to ask what is the best practice to enable FileVault on all my Macs. As far as I know there is an option to enable it via Policy and one via Configuration Profiles. What is the difference there and what is recommended?
Does the JIM use Apache Tomcat at all?
That’s right - there are brand-new swag options waiting for you in Jamf Nation Rewards! Check out your Jamf Account to see what’s new and start redeeming those hard-earned bytes. Not a member yet? Learn more and join here. And we’d love to hear - what are you saving your bytes for? Drop it in the thread 🧵! Here’s a sneak peek ⬇️ Explore the full lineup in Jamf Nation Rewards! Your rewards await 😎
We got Defender working on our Macs about a year ago - deployed via JAMF Pro and with configuration profiles. We are not bound to the domain and do not use JAMF Connect. I am trying to follow along with Microsofts documentation (Onboard and offboard macOS devices into Microsoft Purview solutions using JAMF Pro | Microsoft Learn) which seems to be written for setting this up from scratch rather than adding it in to an existing setup. It seems to be doing something as we are getting better feedback under Device Onboarding, but still not making much progress. Here is an example of the details in Device Onboarding in Microsoft Purview with the error messages before and the more informative messages after I have created the configuration profiles in JAMF from the above guide: View under Device Onboarding: Before the configuration profiles were updated: After the configuration profile was updated: In the documentation that I linked to near the top, there is a "Before You Begin section which
Hello all, I created a PPPC config profile to grant OneDrive full disk access. Jamf Pro says the config profile is successfully installed on my test Mac, but when I check Privacy & Security → Full Disk Access it shows that OneDrive does not have full disk access. Is it normal for this change not to reflect in settings or am I missing something/doing something wrong? For clarification I have made the config profile directly in Jamf Pro and using the Jamf PPPC utility and uploading the config profile into Jamf Pro afterwards. Thanks!
New 270 class for those interested ... Jamf 270 Course Jamf Certified Tech - Jamf Protect The Jamf 270 Course offers a core understanding of endpoint and network security for Mac and mobile devices with Jamf Pro and Jamf Protect. Our hands-on, scenario and example-based course environment is the optimal way to begin learning how to secure devices with Jamf. https://account.jamf.com/training-courses/jamf-270-course/available
I blocked the extension installation on chrome, with that un approved extension are blcoked but now I want to remove the un approved extension which is installed previously. Is there any way to removed it? I tried to remove the extension ID with script but in Chrome browser it shows corrupted not removing completely.
Hello community I'm looking for a solution to only allow self-service application installation, even for local admin accounts.I tried blocking the installation process, but unfortunately this also blocks self-service installations.
Some of our primary school students have just used the Jamf Student app to update all the apps on their iPads. The Jamf Student app updated, but now it's asking the students to log into the Student app with a .jamcloud.com account. Our students are 10 years old and do not have any online accounts, how do they now use the Jamf Student app if they aren't allowed a .jamfcloud.com account?
Since moving to JAMF Cloud, we’ve noticed that some time appears to be off. For example, I ran an Inventory Update manually on a computer, and the record in JAMF console shows that it was run 1 hour earlier than it actually was. Also, with Apple TVs we have records that say that the Inventory Update occurred up to an hour in the future. I’m not sure that this is causing an actual problem yet, but concerned that it could. Are there time zone settings we should see or anything? All of our client devices are in the same time zone (unless a client goes on a temproary trip or something).
Hi all, I try to create a user level configuration profile for ethernet (for 802.1x LAN authentication).So basically, the same we already use for WiFi. We currently use a computer lvl profile, which works without issues. But have to change it to user lvl because of the strong auth change Microsoft enforces soon. The settings should work but as soon as I click on save, the network payload vanishes. Without an error or any explanation… As said before, the WiFi profile (also user lvl) works like a charm. Any tips on why this might happen? BR Thomas
A lot of machines recently asked for the update of Slack helper tool.Is there a way to stop it from happening?Thank you!
What is the best way to export Management History and the "Inventory Update" log, given that we do not have JAMF Protect yet Instead of having to open each iPad entry and review its log individually, is there a way to export that data?
Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!
1 Question Answered
216 Questions Answered
30 Questions Answered
17 Questions Answered
15 Questions Answered
18 likes
15 likes
14 likes
13 likes
11 likes
Learn about our customer advocacy program that celebrates our most passionate customers.
Join the community to receive product updates, and share feedback.
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
