Skip to main content

Tech Thoughts

Discover how Apple admins solve challenges, streamline workflows and drive innovation with Apple. Tech Thoughts features customer-authored content filled with firsthand experiences, practical advice and community-driven insights.

  • 85 Topics
  • 402 Replies
84 Topics
dan-snelson
dan-snelsonHonored Contributor
published in Tech Thoughts
Computer Compliance (1.9.0) Part 1Blog

This is a blog article originally posted on ​@dan-snelson ‘s personal blog, https://snelson.us/This article is split into two separate posts, so for the full article, please proceed to Part 2 Provide your users a "heads-up display" of critical computer compliance information via swiftDialogProvide your users a "heads-up display" of critical computer compliance information via swiftDialogBackgroundMore than six years ago,William SmithpublishedBuild a Computer Information script for your Help Desk; we implemented a customized version in the fall of that same year.Last week, during a conversation with one of our rock-star TSRs — whom I'll refer to as "John" — we decided it was time forswiftDialog-ized reboot.FeaturesThe following compliance checks and information reporting are included in version1.9.0, which operates in "test" mode by default. (ChangeoperationModetoproductionwhen ready to deploy in production.)Compliance ChecksmacOS Version Available Updates (including deferred updates) S

1821
tommypatzius
dan-snelson
dan-snelsonHonored Contributor
published in Tech Thoughts
Computer Compliance (1.9.0) Part 2Blog

This is part two of Dan’s blog, and it belongs with this ‘Part 1’ article.  # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # ## Check Available Software Updates# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #function checkAvailableSoftwareUpdates() {    notice "Check Available Software Updates …"    dialogUpdate "icon: SF=arrow.trianglehead.2.clockwise,${organizationColorScheme}"    dialogUpdate "listitem: index: ${1}, status: wait, statustext: Checking …"    dialogUpdate "progress: increment"    dialogUpdate "progresstext: Determining Available Software Updates status …"    sleep "${anticipationDuration}"    mdmClientAvailableOSUpdates=$( /usr/libexec/mdmclient AvailableOSUpdates | head -n 5 )    if [[ "${mdmClientAvailableOSUpdates}" == *"OS Update Item"* ]]; then        notice "MDM Client Available OS Updates"        info "${mdmClientAvailableOSUpdates}"    fi    recommendedUpdates=$(

460
dan-snelson
ben_whitis
ben_whitisEmployee
published in Tech Thoughts
Upcoming Change Device Compliance Integration for MacOS (SSO extension required)

Microsoft has announced plans to move storage of the Workplace Join Key out of the user’s Login Keychain and into Apple’s Secure Enclave:    Microsoft Enterprise SSO plug-in for Apple devices - Microsoft identity platform    Announced in March 2024, Microsoft Entra ID will be moving away from Apple’s Keychain for storing device identity keys. Starting in Q3 2025, all new device registrations will use Apple’s Secure Enclave. There will be no opt-out of this storage location.  Applications and MDM integrations that have a dependency on accessing Workplace Join keys via Keychain will need to start using MSAL and the Enterprise SSO plug-in to ensure compatibility with the Microsoft identity platform.    In the same document, Microsoft provides guidance on how to test the Secure Enclave today to ensure the change will be compatible with your environment when the change goes live:   If you would like to enable Secure Enclave based storage of

2836
topher72
mattjerome
mattjeromeJamf Heroes
published in Tech Thoughts
From Huh to H.E.R.O

At some point in your career as an Apple Admin, you’ve (most likely) inherited a Jamf instance and said either to yourself or out loud, “Huh, I wonder why they did that. I certainly wouldn’t do it that way” or “That’s not the best practice I was taught”.     Caveat: There’s no such thing as best practice. The better concept is defining the best practice for your environment.     This is where you get to step in and be the hero. It’s your job to take the environment, back it up first. Make sure you backup your instance and sync it to your free Jamf sandbox (If you don’t have one, talk to your rep). Once you’ve backed up and sync’d to the sandbox, I hope you’re noticing the theme here…you can get started with the H.E.R.O. process.     Something not mentioned is the process of writing documentation. DOCUMENT, DOCUMENT, DOCUMENT. Write down everything from the current state, proposed changes, changes you made (with dates), how configs work, work

1235
mattjerome
JeniA
JeniACommunity Manager
published in Tech Thoughts
Jamf Nation Upgrade: What you Need to KnowBlog

Last month, we announced through this Tech Thoughts blog article that Jamf Nation will get an upgrade later this summer. Well, friends...the time has come! On Friday, July 4, Jamf Nation shifted from its current platform to a new space, and we couldn't be more excited.  What you need to know about the migration  Any new content published on Jamf Nation between JUNE 23 – JULY 3 will need to be re-posted to the new site after launch. (If you got your answer in that timeframe and don’t care that it’s on the new site, that’s fine too!)   All content that was posted to Jamf Nation BEFORE JUNE 23 will migrate. No action needed!    Yes, your profile information will migrate.   Yes, your User Group information will migrate.    Yes, your postings to the job board will migrate.  It will ALL migrate. 😊    Improvements in the new space   We’re excited for you to come in and see the new space soon! Warning...it will look and feel different, this is by design. This upgraded version of Jamf Nation w

500
JeniA
jordy_witteman
jordy_wittemanContributor
published in Tech Thoughts
WWDC25 Recap, In-Person Experience and Key Announcements for IT AdminsBlog

Monday June 9 it was that time of the year, Apple’s World Wide Developers Conference kicked off with the usual Keynote where they introduce the new versions of macOS, iOS, iPadOS, visionOS, tvOS and watchOS. I was lucky enough to have obtained a ‘golden ticket’ through the lottery system and actually attend this event at Apple Park in Cupertino! As an Apple consultant and macOS developer at long-time Jamf-partner Root3, it was both very exciting and relevant for me to attend. I’d like to share my in-person experience while also highlighting key announcements, especially for Apple IT admins and how this may affect us this fall.  In-person experienceThe WWDC event for attendees is actually a multi-day event with most activities taking place from Sunday to Tuesday. It starts with a welcome reception at the historic Apple Campus at 1 Infinite Loop where you check-in, get your badge, happy Apple employees high-fiving and lots of photo opportunities. It’s a great start of the week to mingle

311
JoannaB
rastogisagar123
rastogisagar123Jamf Heroes
published in Tech Thoughts
Mastering macOS Troubleshooting with Jamf Pro: A Command-Line Approach

Managing macOS devices in a large-scale enterprise environment always need IT expertise. Even with a powerful MDM like Jamf Pro, IT admins often need to dive into the command line to truly get to the root of issues.    In this blog, we will walk through real-world command-line troubleshooting techniques for both macOS system issues and Jamf Pro management. Whether you're dealing with failing profiles, app crashes, or failed policies, this post has your back with real commands that work.  Getting Started: System Info at Your Fingertips    Before troubleshooting, gather critical system details:  Get system version:  sw_vers      List all installed system updates  softwareupdate –history      Hardware overview  system_profiler SPHardwareDataType        Check uptime  uptime      Check disk usage  df -h    Network Troubleshooting    Network issues

461
Jordy-Thery
JeniA
JeniACommunity Manager
published in Tech Thoughts
18 Years in the Making: The Next Generation of Jamf Nation Arrives This Summer

Back in 2007, Jamf customers started coming together – in email. It wasn’t the most advanced way to gather, but it worked. The purpose was to share knowledge. And for a few years, words of wisdom flowed as the list grew. Jamf Nation was forming and quickly outgrew its simplistic home. That's when Jamf’s founder, Zach Halmstad, shared a bigger vision. Jamf Nation would move to an online platform. In its new format it would:    Facilitate customer-to-customer communication  Facilitate customer-to-Jamf communication  Facilitate Jamf-to-customer communication    Fast forward nearly 15 years, and these are still foundational elements of Community at Jamf. But you deserve more than our current platform can offer. That’s why we’re excited to shift Jamf Nation from its current home to a new community offering this summer. Get ready for an elevated look, feel and overall experience. Be ready to:    Find what you need more easily  Experience

385
TSquared
peterlbk
peterlbkJamf Heroes
published in Tech Thoughts
Jamf Extension Attributes

As organizations scale their Apple device deployments, maintaining visibility, control, and compliance across endpoints becomes increasingly complex. Jamf offers a powerful yet often underutilized feature to address this challenge: Extension Attributes. These customizable data points enable administrators to extend the default inventory capabilities of Jamf Pro, creating a more detailed, flexible, and actionable view of managed devices.   What Are Jamf Extension Attributes?  Extension Attributes (EAs) in Jamf Pro are custom scripts or input fields that gather specific information about devices beyond the standard inventory data (e.g., OS version, hardware model, serial number). Admins can write scripts—typically in Bash, Python, or Zsh—that query system details during inventory collection. The results are stored in the Jamf database and can be used in smart groups, reports or policies.   For example, an EA can report whether FileVault is enabled, if a specific

129
rastogisagar123
ThomM
ThomMJamf Heroes
published in Tech Thoughts
Remediating DeepSeek Installations in MacOS

We have been tasked with blocking DeepSeek on all campus resources. Unfortunately, keeping users from running DeepSeek models locally on their Macs isn’t as simple as making a Restricted Software title in Jamf Pro because the models aren’t actually apps. What we can work with, however, is Ollama – the framework which DeekSeek models currently run under. If a user has installed Ollama, why not leverage that to check for the presence of DeepSeek LLMs? Our first step is identifying it. The command ollama list will list all the LLMs a user has currently installed. If we grep those results for deepseek, we can make a little script-based Extension Attribute to identify Macs with DeepSeek LLMs present. Next, make a Smart Computer Group for detections that looks something like this: Criteria “DeepSeek Check” – is not – (blank) AND Criteria “DeepSeek Check” – is not – Not Detected (You could probably get away with just one criteria where DeepSeek Check – is like – *deepseek* or do something w

274
ThomM
spesh
speshJamf Heroes
published in Tech Thoughts
The Edge Methodology: Leading with Curiosity and Courage

In the MacAdmin world, few names command the kind of respect Charles Edge does. Not just for his technical expertise, but for his relentless curiosity and generosity. After his unexpected passing in 2024, I found myself reflecting on a behavior I learned through Charles's actions. A mindset I've come to call the Edge Methodology. It's not a framework or a management technique in the traditional sense. It's a response to fear. A refusal to fake confidence in things not yet understood. And it's inspired by the way Charles lived: by digging in, learning with humility, and lifting up others in the process.  The Problem: Fear of Not Knowing At some point in our careers, many of us have worked in environments where saying "I don't know" felt like admitting defeat. Where curiosity was mistaken for incompetence, and asking questions risked being seen as unqualified.   I've definitely been there.    In those spaces, people would often bluff their way through techni

41
rastogisagar123
F
frantonEsteemed Contributor
published in Tech Thoughts
Zen and the Art of Jamf SSO

I’ve been silly busy learning lots of non Apple related stuff. However there does seem to be a need for a how to guide of sorts on how to implement Jamf’s new SSO requirements.  Back in the day, you set up a SAML integration from your IdP to Jamf Pro. Access group of users on one side, Jamf user accounts on the other and you called it done.  Jamf is changing how all this works. Instead of an integration per app, they are replacing everything with one OIDC connection from your IdP to their Jamf Account page. Every single SaaS app you then get from Jamf will then already be enabled for SSO, you just have to put the accounts in place. Essentially authentication becomes a once and done and the gating is done on the application side.  Any other speculation as to intent from Jamf here I think is complete hogwash.  This article has a Okta focus, because that’s the IdP I use. Your mileage will vary with other providers.  Before I get into the technicals I do need to po

481
F
JoannaB
JoannaBCommunity Manager
published in Tech Thoughts
Strengthening the Apple Admin Community Through User Groups

Last September, I joined the Jamf Community team to help build out a User Group program.  As I was getting to know the community, one thing was abundantly clear: Apple Admins have a lot to share and a strong desire to connect, especially in person.    It’s been an exciting challenge to work with admins across the globe and build a structure that supports in-person and online meetings. One of the many joys of working in Community is getting to help bring the idea of “Community” from something abstract to something tangible and real. I love supporting people who may have once felt alone —shouting into the void — find connection, clarity and camaraderie through programs like User Groups.  User Groups are a fantastic way to regularly connect with fellow admins, solve problems, talk shop and maybe even make some new friends along the way. While forums and Slack are great for quick questions and short conversations, nothing quite compares to the impact of meeting your pee

60
JoannaB
sdagley
sdagleyJamf Heroes
published in Tech Thoughts
User Initiated Scoping

There will probably come a point in a Jamf Pro admin’s duties when they find themselves with the need to provide a mechanism for users to add or exclude their Mac to the scope of a Configuration Profile or Policy via Self Service. An example would be so users could add themselves to a group teasing macOS Beta releases. Using the Jamf Pro API to add a Mac to a Static Computer Group might seem like the obvious way to do this, but per recommendations made in the Jamf Pro certification courses calling the API from arbitrary endpoints is not recommended. This article will describe an alternative mechanism to allow user initiated scope changes without using the Jamf Pro API.    The core part of this approach is what’s known as a flag file, and its existence on a Mac can be used to add the Mac to a Smart Computer Group which can be used a Scope Target or Exclusion. To create the flag file we’ll use a script to be called via a Script payload in a Self Service initiated Policy. To det

25
howie_isaacks
Jordy-Thery
Jordy-TheryValued Contributor
published in Tech Thoughts
My Favorite Apple Admin Community Conferences in 2025

Not too long ago, I wrote a Tech Thoughts article covering some of my favorite community resources. I wrapped up that post by mentioning a couple of conferences that might be worth your time. Well, it’s time to revisit those — because conference season is upon us! This list is heavily inspired by Jamf’s very own Armin Briegel whom has a fantastic page listing conferences and resources at scriptingosx.com/conferences — and he keeps it well updated!    A Quick Look Back  My personal favorite from last year was JNUC 2024 in Nashville. It was my second time attending, and I already knew a few folks, which made the experience even better. The networking opportunities are truly the highlight. Talking to like-minded professionals and getting insights into how different companies approach challenges — sometimes in very different ways — is incredibly valuable. Also, a special shout-out to the amazing @MusicCityMac Alan West, who was so welcoming and

144
Jordy-Thery
JeniA
JeniACommunity Manager
published in Tech Thoughts
Jamf Heroes: Applications open through May 2

Whether you’re new to Jamf Nation or have been here a while, it’s easy to see the Jamf community is different. But its secret sauce isn’t the platform, or even the strategy that facilitates its direction. It’s the people who fuel its growth. Those passionate customers – the ones who push Jamf to continuously improve, who come to our events and present on our webinars – inspired a program. In 2018, Jamf launched Jamf Heroes – an opportunity that gave customers a unique way to engage with Jamf, and each other.       Over the last seven years, the program grew. Jamf Heroes connected thousands of customers in meaningful ways that helped generate professional successes, grow genuine friendships and inspire more involvement in the Apple community. It thrived. Now we’re ready to take it to the next level and relaunch the Heroes program with a refreshed vision (and in a new home that’s coming soon)!     The program will offer customers:   &nbsp

56
JeniA
J
jrepaskyContributor
published in Tech Thoughts
Apple Admins, Meet the Modern Job Market: Lessons from My Recent Job Search

  This time, looking for a job was a bit different. In the past when you looked, there always seemed to be a few options out there you could choose from. At the very least, a list you could rank and go after a few based on priority. These days it seems you may still see what appear to be quite a few options out there, but unfortunately the times they are a changing as the saying goes. I don't want to sound dire, but between new factors that have chipped away at what you see and what you actually get. It's quite a bit more difficult out there right now. Because of that, I wanted to jot a few things down to see if I could help about my recent experience. So whether you're in the midst of your job search or about to embark on that journey, here are some observations that I think could help. Things aren’t totally what they appear to be. Between AI being tier zero to any job applicant, and the fact that companies are posting ghost jobs just to compile data, my first takeaway from that

24
S
Liam_Donnelly
Liam_DonnellyContributor
published in Tech Thoughts
Supercharge your Technical Knowledge at MacAD.UK

As someone who’s been part of the Apple admin community for a few years now, I’ve had the privilege of helping out the amazing team with MacAD.UK, both as an attendee and behind the scenes. In my day-to-day role as a Technical Lead for Workplace Solutions, I spend my time working with all aspects of our business with everything Apple and development, collaborating with fellow admins, sharing knowledge and supporting customers adopt Apple technology whenever I can.  MacAD.UK is a community-driven, session-led Apple-focused conference, has been a staple in Brighton for eight years. Bringing together world-class speakers, leading exhibitors, and top technical professionals from around the globe. Whether you're an experienced admin or just starting your journey, MacAD.UK is where the community comes together to learn, collaborate, and push the boundaries of what’s possible.  Why Attend MacAD.UK?  First and foremost, the ducks! (Ok, maybe not the ducks. More on

24
Liam_Donnelly
M
MarkMelaccioEmployee
published in Tech Thoughts
NYC Jamf User Group Celebrates 11 Years of Community and Collaboration

On March 20th, 2025, the NYC Jamf User Group (NYC JUG or “the JUG”) celebrated its 11th anniversary—a milestone that reflects the remarkable growth and resilience of the Apple Admin community. What began as a small gathering of 20 admins in Jamf’s old NYC office has flourished into a thriving network, now meeting at Apple’s 11 Penn Plaza location, with over 80 attendees regularly.A Look Back: From Humble Beginnings to a Thriving CommunityFounded in 2014, the NYC JUG was created to bring Apple admins together to share real-world Jamf experiences outside of official events. With early encouragement from Jamf supporters, including Henry Patel and Jonah Klevesahl (now at Apple), the group held its first meeting on February 18, 2014, after a few weeks of promotion on Jamf Nation.What started with 20 admins quickly grew through word of mouth. By the third meeting, the group had outgrown Jamf’s office, prompting Apple to offer their 100 Fifth

45
BookMac
Jared_Y
Jared_YJamf Heroes
published in Tech Thoughts
Revolutionizing Patch Management with Installomator

Content backfill required

777
Jordy-Thery
talkingmoose
talkingmooseCommunity Manager
published in Tech Thoughts
Finding Your Presentation Inspiration

A Read-only Friday post by William Smith You have no control over when you’ll get an idea.Yes, I do get my best ideas in the shower. Ready to go on a scavenger hunt? Getting through and beyond your own anxieties about presenting at a technical conference or meetup is the hardest part about presenting at a technical conference or meetup. Taking that first step to commit yourself to an uncomfortable (but worthwhile!) challenge begins your journey of a thousand miles. But I promise the rest will only feel like 500. 🫠 Now begins the execution: we need to first find ideas for a topic. What do I know that I can present? You may ask yourself, “What do I know that makes me an authority on anything?” Simply put, it’s your own experiences that your audience wants to hear. Notice the title of this post starts with “Finding”. Right now, it’s time to find your story. Don’t try to make something out of thin air. In the next blog post, I’ll talk about starting and developing your story. Every presen

32
DavidKindschi
BookMac
BookMacJamf Heroes
published in Tech Thoughts
Preparation for the Jamf 400 Course

The Jamf 400 course is the highest certification level in the Jamf training program and is designed for administrators who want to deepen their knowledge in scripting and automation. This course not only requires a thorough understanding of Jamf Pro and macOS but also the ability to independently analyze and solve complex problems.    What to Expect in the Jamf 400 Course?  The Jamf 400 course covers advanced topics and practical challenges. Key focuses of the course include Automation and Scripting:   Developing and implementing advanced Bash scripts and API calls to automate administrative tasks.  Prerequisites and Target Audience  To successfully complete the Jamf 400 course, intermediate to advanced scripting skills as well as familiarity with the Jamf API are required. The course focuses on deepening these topics and applying them in complex scenarios.  The course is designed for Experienced Jamf administrators who are already familiar wit

309
M
A
arminBriegelContributor
published in Tech Thoughts
Managing the default browser in macOS

Many organizations recommend or prescribe a specific web browser for their users. The user can change the setting in the user interface, even though it is not really obvious where to look. Many MacAdmins would like to pre-set this browser and the default during enrollment. However, there are several challenges associated with this in macOS. It would be really nice if Apple provided some means to manage this with a configuration profile. If you agree, please file feedback with your AppleSeed for IT account. While we wait for that, what can we do?   Use the browsers Most third party browsers have a built-in command option to set themselves as the default browser. Most Chromium based browsers (Google Chrome, MS Edge, etc.) can be launched with the --make-default-browser option: open -a "Google Chrome" --new --args --make-default-browser open -a "Microsoft Edge" --new --args --make-default-browser For Firefox, the options are different: open -a "Firefox" --new --args -silent -nosplas

1204
C
M
Mac-Lemur
published in Tech Thoughts
On Professional Development: Celebrating International Women’s Day on March 8th

When I was asked to write my thoughts down for a blog to celebrate International Women’s Day, my first reaction was, What the heck?! Advice, from me? More specifically, advice on professional development. Ha! I don’t even RTFM! Then, I had a flashback to 2019 when Jamf asked me to be on their first Women in Tech panel at JNUC. I’ll admit—I needed some encouragement from other admins, my leadership, and my team. I may or may not have gone into hiding when first asked to be on a panel. In the end, I wound up co-presenting with a fellow woman Mac admin on leadership, and it turned out to be a positive experience. After this quick montage in my head, I cast my doubts aside and realized, Okay, maybe I do have something to share. I can talk about a few key things in my career that I think could be helpful to other women out there. The 2025 UN International Women’s Day (IWD) theme is “For ALL Women and Girls: Rights. Equality. Empowerment.” This theme focuses on empowering the next gener

42
LysetteB
JoannaB
JoannaBCommunity Manager
published in Tech Thoughts
The Man Behind the Avatar

@AJPinto also know as Anthony James Pinto, is Jamf Nation’s number one community contributor. With some all-star stats like providing 289 accepted solutions, 2,607 posts and 1,145 kudos, it's likely that you’ve seen his name splashed around the community.   Jamf Nation, the world’s largest Apple Admins community, relies on the smarts and dedication of members to help advance and maintain this space as a valuable asset of learning and connection. People like Anthony make communities like Jamf Nation function in their highest level.   Let's take a peak inside Anthony’s brain and learn more about the man behind the avatar, shall we?  Tell us about yourself, Anthony  I am from LA and have lived all over the US. I settled down in central Alabama for reasons beyond me, met my wife and just sorta stayed here. My wonder lust never went away, and I love to travel and experience new places and new things. My preferred travel locations are places far a

23
K

Want to write for Tech Thoughts?

Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!

Submit A Blog Post
Terms & ConditionsCookie settings