We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.
We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.
Real talk, real tools and real-time support from people who get it.
Real answers from Apple Admins like you
Find your way around
Share your thoughts
Submit your idea
Preparation:(First off, apologies for some screenshots being in Chinese—please bear with me.😫) 1. Download the Google Chrome sample profile https://storage.googleapis.com/support-kms-prod/cEFUygq5BzskDGN0nrhFFDZvAG5VFHa7meCi You must manually adjust the contents to set the update function to 1 or use my modified profile. <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <key>PayloadContent</key> <array> <dict> <key>PayloadContent</key> <dict> <key>com.google.Keystone</key> <dict> <key>Forced</key> <array> <dict> <key>mcx_preference_settings</key> <dict> <key>updatePolicies</key> <dict> <key>com.google.Chrome</key> <dict> <key>UpdateDefault</key> <integer>1</integer> </dict> <key>com.google.Chrome.canary</key> <dict> <key>UpdateDefault</key> <integer>1</integer> </dict> <key>global</key> <dict> <key>DownloadPreference</key> <string>cacheable</string> <key>UpdateDefault<
Today we are releasing a maintenance version of Jamf Pro; highlights include: Platform SSO Reporting Functionality for the Jamf Management Framework Jamf Conditional Access.app, which is part of the Jamf management framework installed on enrolled computers and used for device compliance with Microsoft Entra, can now report on Microsoft Entra ID Platform SSO registration status and provide additional information about the registration state, including device ID and user UPN. Resolved Issues Jamf Pro Server: Security Issues Jamf provides the CVE-ID for security issues with high or critical severity when possible. [PI141347] Fixed: A known vulnerability in a third-party library (CVE-2025-41249). [PI141349] Fixed: A known vulnerability in a third-party library (CVE-2025-41248). [PI141856] Fixed: A cross-site scripting (XSS) issue. [PI141857] Fixed: A cross-site scripting (XSS) issue. Jamf Pro Server [PI120484] Fixed: Jamf Pro's PreStage enrollment displays iOS 17.5 as an available minimum
We removed JAMF from a laptop but it failed to remove the MDM profile. Now, without JAMF on the machine, what is the best way to remove the profile?
Hi everyone, I’m currently exploring the world of cloud computing and container orchestration, and I recently discovered the Kubernetes and Cloud Native Associate exam. From what I understand, it’s a great starting point for anyone interested in Kubernetes fundamentals and cloud-native application development. I’d really like to hear from those who have already taken this certification. What are the main topics or skills covered, and how challenging did you find the exam? I’m also wondering if hands-on Kubernetes experience is essential before attempting it, or if studying theoretical concepts and basic commands is enough to build confidence for the test. My goal is to strengthen my understanding of modern deployment environments and gain practical insights into how Kubernetes fits into DevOps workflows. Any tips, study materials, or learning paths you could recommend would be greatly appreciated.
Hello, We manage iPads in Jamf Pro and i have a question if its even possible to transform a native app like Files or Preview into managed app. By default native apps like Files or Preview are considered as unamanaged application even though a device is managed by Jamf Pro. Since we have a restriction “Documents from managed sources open in unmanaged destinations” se to “Restricted” due to possible data leaks there is no option to work with managed files in app like Files or Preview, that’s a real shame. Due to this behaviour we have to just rely on 3rd party apps like OneDrive or Adobe Acrobat Reader which we can make managed because the are installed via VPP. Is there any option to use native apps for managed documes even with the restriction turned-on? So make a native app mamaged?
I just set up a new iPad for a teacher and after enrolment all apps that should be deployed are marked as Waiting for Licenses despite having hundreds available. Things I've tried to resolve: Restart iPad Refresh Apple VPP token Re-apply profiles Re-apply apps Reset iPad and re-enrol Nothing works. Still stuck on "Waiting for Licenses". Does anyone have any ideas about what I should do to resolve this?
Issue: Jamf Pro / Jamf Protect CIS Level 2 profile is blocking AirDrop on my MacBook. Profile: Sequoia_cis_lvl2-security.firewall Firewall: Enabled (incoming connections restricted) Stealth Mode: Enabled (ICMP responses blocked) Problem: With this profile active, AirDrop detects my MacBook but fails to connect. The firewall blocks incoming connections needed for transfers. Request: Looking for a way to allow AirDrop while keeping the CIS Level 2 firewall policy in place — ideally via a Jamf exemption or configuration tweak that preserves compliance.
This article is based off of the presentation at JNUC given by @tommypatzius , @Jordy-Thery and @glennu Our session at this year’s JNUC 2025 was designed to present a list of helpful tools available to Mac Admins of all skill levels and backgrounds. We know that everyone’s experience with Apple device management is different, so we’ve pulled together a collection of tools that are approachable, practical, and, in many cases, free. Many of them have a low learning curve, making them accessible whether you’re brand new to managing Macs or have years of experience. Our goal is that everyone walks away with at least one new tip, trick, or tool they didn’t know before. To make things clear and easy to follow, we’ve divided the tools into categories by function: Apple apps, Jamf tools, maintenance, setup & customization, notifications & support, and inspection tools. We took a closer look at a few specific highlights—Jamf Helper Constructor, Self Service+, and IBM Data Shift—before moving
Simple suggestion: Could you please integrate Jamf App Catalog in Mac Onboarding so we can deploy Apps from the Jamf App Catalog? Many Apps we deploy today in Mac Onboarding would be available through the Catalog but we currently need to deploy them as Policies.
We are experiencing an issue where a users, suddenly get signed out of their Google account and unable to sign back in. When they attempt to log in, password is not accepted. The strange part is that no one changed password — not the user, nor either of our Jamf admins or Google Workspace admins. local Mac password (which is supposed to stay in sync with their Google password through Jamf Connect) still works fine, but his Google account password no longer matches. To clarify: User was logged in normally and did not request or initiate any password change. Users unexpectedly signed out of their Google account. When attempting to sign back in, Google reports the password is incorrect. Their local password on the Mac still works and allows them to log in to their device. Jamf Connect is deployed, and their local and Google passwords had been synced properly before this incident. We verified that no password reset or forced password change was made from the Google Admin Console. Jamf Conn
So as of recently, our iPad 5th Gens are not able to enroll after factory reset to 16.7.12. We’ve had to do factory resets on iPads that are out of space. Our 6th and higher version iPad’s (17.7.10 / 18.7.1) appear to fine at the moment. Jamf Pro still claims to be supporting iPadOS 16, where JamfNow supports a minimum of 17.x. Has documentation not been updated regarding iPadOS 16? Not sure where to go at this point as we have a plethora of 5th Gen iPads still in our school environment.
How do we configure a computer smart group to show which computers have Touch ID configured/enrolled for locking/unlock? I’ve tried ChatGPT, Gemini, and Claude to help configure a computer extension to no avail.
Hi, Has anyone yet figured a way to write an extension attribute to report whether a device is TouchID capable or not? bioutil does not seem to give any indication of capability regardless whether it's run on a TouchID capable device or not. There doesn't seem to be anything returned by system_profiler to indicate. Struggling to find anything that could be leveraged... CheersDan
I’m unsure if this effects iPadOS 26.0 as I have just pushed out iPadOS 26.0.1 to devices this week. We have a Single App Mode profile for TD Snap (though app doesn’t really matter). After the device is rebooted it looks like on the home screen you can’t unlock the device. Swiping up just shows “No older notifications” but does not unlock the phone and take it to the Single App locked mode to TD Snap. Has anyone else experienced this? This iPad is on iPadOS 26.0.1. Didn’t have this issue prior to the update.
Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!
216 Questions Answered
30 Questions Answered
17 Questions Answered
15 Questions Answered
14 likes
12 likes
8 likes
Learn about our customer advocacy program that celebrates our most passionate customers.
Join the community to receive product updates, and share feedback.
Already have an account? Login
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
