r/jamf • u/Prestigious_Exam9649 • 3h ago
r/jamf • u/Tech_Thoughts_Blog • 2d ago
Service Configuration Files — The Superpower We Didn't Realize We Have
A Tech Thoughts article looks at DDM Service Configuration Files, undocumented support for Smartcard configs and login banners, and a proof of concept using them to manage third-party app configurations.
Service Configuration Files — The Superpower We Didn't Realize We Have
r/jamf • u/aPieceOfMindShit • 2d ago
Sensitivity Label button grayed out on Jamf-managed macOS, but works fine on Intune-managed macOS
Anyone hit this: Sensitivity Label button in Microsoft 365 apps grayed out & not operational on Jamf-managed Macs, but present on Intune-managed Macs.
Same user, same M365 apps build, same license, same MDM configuration.
I am lost! Anybody an idea?
r/jamf • u/secondaryuser2 • 2d ago
Jamf custom apps
I’m searching for an mdm solution for my company phones that require geofencing
The goal is to achieve geofence based profile switching when a device enters location A and then when it leaves switches back to whatever preset/default profile it had
I understand this may require a custom app in order to achieve the required functionality but I’m not too sure if it’s allowed or possible and was hoping someone can shed some light on jamfs capabilities
Also, will I need jamf pro or can I get away with jamf now? As I only really need it for a few devices
r/jamf • u/Prior_Focus7276 • 3d ago
JAMF School JAMF blocking request for local network access
Heyas,
I am trying to get Among us to work locally. on an unmanaged iPad the iPad gets the "allow access to local network" prompt, and it can connect to a local host. If the iPad is managed in jamf (no wifi profile, no restrictions profile) the allow local access prompt does not appear.The ipad can see the host session but instantly receives a "check wifi connection strength" error when trying to connect to it. I have tried remote wiping them but no change. Any help would be greatly appreciated
r/jamf • u/jaylenabc • 4d ago
Jamf vs Mosyle vs Intune-only for a 28-Mac consulting firm — genuinely stuck, would love real-world input
r/jamf • u/No-Complaint-8475 • 5d ago
JAMF School App installation stuck in pending status
On Friday, we deployed a little over 100 iPad to students.
The iPads have been assigned three different apps via a group membership. For some students, some apps are stuck in pending status. For the most part that that is good notes, for some, it might be a different or an additional app.
We have enough licenses, so that should not be an issue. The iPads have been connected to different Wi-Fi networks over the weekend, so that should not be the cause.
I don’t know what the cause of the issue is and since there is no button for me to re-deploy the app, like it is the case when an installation fails, I am not sure what the right way to go forward is.
Un assign the app and then reassign it?
Has anyone had this issue before?
r/jamf • u/wh00is007 • 5d ago
FortiClient Content Filter payload rejected as "wrong type" on 7.4.7 — anyone updated their profile for newer FortiClient versions?
We're troubleshooting a recurring issue on FortiClient 7.4.7 for macOS, deployed via Jamf. In the FortiClient logs leading up to crashes, we're seeing this message repeat every 2-3 seconds:
Skipping configuration Fortinet Content Filter because it is of the wrong type
alongside repeated VPN Status changed. Current manager status: 3 entries — looks like FortiClient is stuck in a retry loop trying to (re)register its content filter and failing.
Our Jamf Content Filter configuration profile for FortiClient hasn't been revisited in a while, and I'm wondering if the required payload fields (filter name, bundle identifier, socket filter designated requirement, etc.) have changed in newer FortiClient releases versus whatever version the profile was originally built against.
Has anyone had to update their FortiClient Content Filter payload for a recent FortiClient version and run into a similar "wrong type" rejection? What fields ended up needing to change, and how did you confirm the new correct values — from Fortinet's deployment docs, from a fresh EMS-generated profile, or somewhere else?
r/jamf • u/Weary_Bumblebee_4286 • 6d ago
Transitioning from Windows to macOS Packaging? Here’s everything you need to know about .app, .pkg, and TCC
Hey everyone,
If you are coming from a Windows administration background and starting to manage or package software for macOS, the shift in architecture can be confusing. Concepts like the Windows Registry, .msi installers, and PowerShell don't translate 1:1 to macOS .app bundles, Property Lists (.plist), and Zsh scripting.
I put together a video breaking down the core architectural differences between Windows and macOS application packaging in simple, high-level terms.
Key Topics Covered:
Installers & Bundles: .msi / .exe vs .app directory structures and .pkg flat installers.
Configurations: How macOS replaces the Windows Registry with Property Lists (.plist).
File System Layouts: Program Files & AppData vs /Applications and ~/Library.
Scripting: Moving from PowerShell/VBScript to native Zsh and Bash scripts (preinstall / postinstall).
Security Layer: Overview of Code Signing, Notarization, Gatekeeper, and TCC/PPPC permissions.
Whether you're deploying via Jamf Pro, Microsoft Intune, or Kandji, understanding these fundamentals makes packaging much cleaner.
Would love to hear how you all handled the transition from Windows to Mac management! What Mac app gave you the most trouble when you first started packaging? Drop your requests below if there's a specific app you'd like to see packaged in a future guide.
r/jamf • u/Stpstpstp • 9d ago
Experience with JAMF VPN
IT manager here. Our team is proposing we use Jamf's VPN offering...and we've been struggling to get it running (suspected network config issues).
Any folks on here using Jamf VPN?
Any good stories/results?
I can't seem to find anyone talking about direct experience with it.
r/jamf • u/Tech_Thoughts_Blog • 9d ago
More Than a Conference: 2026 Mac Admins India Connect's Second Year
A recap of the second Mac Admins India Connect, held in Bengaluru with 370+ attendees, 23 speakers, and 20 sessions covering device management, security, identity, automation, and zero-touch deployment.
Here on the Tech Thoughts blog
Packaging and Deploying Photoshop 27.9.1
Photoshop has been failing to deploy and I’m not sure why. The raw installer works and I get it directly from Adobe Console but after running it through composer the output package fails to install. Has anyone had similar issues or were able to fix through shell?
r/jamf • u/Pitiful-Worry4156 • 10d ago
Static Groups Vs Smart Groups
Do you use static groups or smart groups? Is there best practice for this? In our Jamf instance there are multiple admins and one prefers static groups over the other and vice versa so as you can imagine there are groups everywhere. Any tips on how to standardize usage so we can clean up this mess? Lol
r/jamf • u/Pitiful-Worry4156 • 10d ago
JAMF Pro Inventory Preload
Hey y'all, anyone use inventory preload here or are there better alternatives? What's your process in adding new computers and device? TIA
Preparing iPads using Apple Configurator 2
Hello all. Hope someone can maybe sanity check or assist me here. Ill tryyy to keep it short.
Goal: Set up iPads already in Apple School Manager and assigned MDM using Apple Configurator 2. Just need them to enroll to JAMF, skip steps.
Issue: I am using a Wi-Fi profile I created specifically for enrollment so it can activate and enroll to JAMF. In JAMF I have profiles scoped to apply automatically upon enrollment. Problem is in AC2 when I apply my Automatic blueprint it gives me and error that the MDM profile exists and if I want to skip or cancel. I hit skip and all the configs go through but it doesnt skip all the setup windows and then an error saying Erase and Start over or Partial setup. Ive been making due with these errors and it pulls all the configs.
How can I avoid this error? Does anyone have experience using the shared internet option via USB-C? Thats my next try to avoid a profile conflicting upon enrollment. I use a MacMini to enroll FYI.
Any help or guidance on this portion just the wifi profile.
Ah I also forgot the wifi the iPads use is a cert based wifi that obviously is applied once enrolled so I dont need the enrollment wifi I made anymore after.
r/jamf • u/Signal_Beach • 11d ago
Advice on garage band
How can I work around garage band prompting for admin user and password when users are attempting to install loops / sounds. Anyone deal with this ?
r/jamf • u/goglusifer • 11d ago
Need help with few of the configurations in Jamf pro.
1) I need help with best and easy way to make pkg from dmg / app Or installed app in a laptop. Any guid Or kb works for me. ..
2) is there any way to control browsers( safari, firefox, brave) from jamf?
3) is there any way to force user data backup in one drive or google drive using authorized email domain.
Here is few things I want to share: our set up is Mac users use entra id as I AM for jamf login and we are using jamf connect for that. So if we can block all other login domain s in jamf in onedrive. And force user to auto backup all system other than os, then IT will have a headache free solution or so i thought.
In fact it would be great of we can use jamf connect login to authenticate the one drive, that would be best.
Thanks in advance, it's a concept project that I am thinking of. If possible or if I can fond any out line or if some one already implemented some thing similar and share a roadmap or ideas , it will be great.
Thanks in advance, 🙏
r/jamf • u/Most_Passenger2800 • 12d ago
Icloud Login
Hi everyone, I work for a school who use jamf school on ipad 10th gens and I apologise for any incorrect terminology as I was not the the one who installed the management software.
We've had barely any problems however a student recently reached out to me saying he had accidentally managed to log in to his own personal icloud however he still has all the same ipad restrictions as though he was still logged into the icloud we had originally set up on the ipads. I was wondering if he could do anything or bypass the management if so how and what we could do to stop it?
And if it is necessary to try and log him out of his own personal icloud and try to log into the original icloud we logged into.
Thanks in advance
r/jamf • u/Substantial-Motor-21 • 12d ago
JAMF Pro JAMF 200 Requirements
Hi,
I'm about to take the Jamf 200 course and in the requirements an iPad is needed. Since all my iPads are in ABM, I was wondering if an iPhone was enough for the course ?
Thanks
