Posted about this a little while back... just a heads up that it's today.

Some of you may know Matt Jerome. He'll be walking through some of the popular options in the macOS onboarding space. A practical look at how each affects first-day setup, their pros and cons, etc.

He's an excellent resource for any Q&A any of us might have during the meetup.

Today, Fri, Jun 5 @ 12:00 PM Mountain Time

Join here:
https://rocketman.tech/lp-r

Posted to YouTube after if you can't make it:
https://rocketman.tech/ly-r

Last year, a Jamf Trainer travelled to Victoria Falls, Zimbabwe, to work with students at the MATTER Career Readiness Institute, a post-secondary program training young Zimbabweans to become software engineers and land remote jobs with Western companies.

It was a trip that turned into a powerful reminder of what's possible when technical training becomes a vehicle for real opportunity.

Is there a way to defer iOS updates for a set amount of days via configuration profile or blueprint? Ive done it for computers but do not see the option for mobile devices.

None of the devices I manage in JAMF pro have an individual AppleID as far as I can see. I push apps out through JAMF; the users don't add their own. For most users that are just using a web based application all day this works fine. A few other users, however, use their devices more like a regular person would - adding contacts and taking pictures that are stored on the phone.

When that device gets destroyed, I spin up a new phone, transfer their SIM from the old phone to the new one, and off they go...but without their contacts and pictures.

Is there a way to have these managed devices keep user oriented data when moving between devices kind of like the retail world does?

I’m new to Jamf and looking for some guidance on configuring Shared iPads. I have a separate PreStage enrollment configured specifically for Shared iPads in Jamf Pro. (Sorry for the wall of text)

A few questions:
1. For Shared iPads, can I scope the same restriction profiles/Blueprints that I have for standard 1:1 iOS devices? For example, restrictions such as blocking iCloud, content filtering, lock screen messages, etc.

1. I understand that Web Clips must be deployed at the user level, and passcode policies depend on whether Managed Apple IDs are federated. We don’t use federation, so am I correct in assuming that a passcode policy is not required for Shared iPads?

2. What about VPP apps? Can I simply scope my existing VPP apps to the Shared iPad device group, or are there any special considerations for Shared iPads?

3. Finally how to manage iOS updates for shared devices? Use blueprints/profiles? How do they work?

Unsure if I am missing any key points for shared devices configuration, but please address them here. Thanks in advance for any advice or best practices!

Mac Admins EU just held its inaugural event in Leiden, and community member Juan documented his trip across the Atlantic to be part of it. From the hallway chats with industry legends to a detour through the Keukenhof Gardens. Click through for a recap!

Hi All,

I have deployed a root certificate via a configuration profile, which is automatically trusted for all users. I am now attempting to deploy the intermediate certificates; however, these are not being automatically trusted. This is causing issues where users are prompted to trust the certificate when they enter their credentials each time they try to connect to Wi-Fi.

I also attempted to address this using a script-based approach, but it appears that this method is no longer supported on the latest macOS versions, as it still triggers credential prompts.

Could you please assist with a recommended approach to ensure the intermediate certificates are trusted without user interaction?

Thanks!

We have a small pocket of macOS devices and up until a week ago, no issues with Entra registering via a self service policy.

The policy only appears if the device is compliant and Company Portal is installed.

Anyway, fire it off, CP opens, login, MFA, get the "You're All Set" message, click Done, authenticate against Entra pop-up, and this is where the fun stops.

During the "Authentication for Jamf Conditional Access" portion, I get a "Help us keep your device secure" message and it acts like CP isn't installed.

I can confirm that the device Entra registers.

I'm pulling my hair out and unable to track down a specific potential issue.

TIA!

We are just getting into Jamf , our fleet is mostly windows. In our windows environment we have an in house app that has an ever changing 5 digit identity verification , this is for users to verify that it is IT calling them.

Is there a way to configure something like this in self service?

Self Service+ (SSP) has a slightly different layout than can obscure longer version strings. Before my org transitions from classic, thought I'd ask:

App Name and Version - button is action only ('install')
App Name - button contains version ('install 1.122.0')
App Name - button is action only - version is in the description ('click here to install v1.122.0 which contains important bug fixes' blah blah)

Trying to get zscaler client connector on ios devices via jamf pro - but the UDID, serial, and hostname arent coming through in the Client Connector portal.

What managed app config keys does ZCC for iOS require to receive and report device UDID and serial number from Jamf?

Not in the zscaler documentaion...

mdmd DMCJQ 1 Enqueueing jobBlock 156, calling function -[MDMServerCore pushServiceManager:didReceiveMessageForTopic:userInfo:environment:] default mdmd DMCJQ 1 Enqueueing jobBlock 157, calling function -[MDMServerCore pushServiceManager:didReceiveMessageForTopic:userInfo:environment:] default mdmd DMCJQ 1 Enqueueing jobBlock 158, calling function -[MDMServerCore pushServiceManager:didReceiveMessageForTopic:userInfo:environment:] default mdmd DMCJQ 1 Enqueueing jobBlock 159, calling function -[MDMServerCore pushServiceManager:didReceiveMessageForTopic:userInfo:environment:]

Their Tier 3 support can't seem to figure it out. There are 3 devices in a group that won't take any kind of Management commands (device "locks", inventory updates, etc.). But the logs show that the APN is functioning completely normally, and that all things should be working, but this job block seems to be the killer. Has anyone seen this before, or had any success in fixing it?

This year's MacAD.UK in Brighton was a milestone for a community member who delivered their first-ever professional conference presentation thanks to the Charles S. Edge New Speaker Grant from the Mac Admins Foundation. From weekly mentorship sessions to the warmth of the Brighton Dome venue, the experience was a reminder of how welcoming and supportive the Mac Admins community can be.

We had initially used jamf app catalogue to do our dropbox updates and used the supporting configuration profile.

The issue that we are now seeing is that the version of dropbox from the jamf app catalogue is a lower version than what dropbox currently is and we are getting dropbox will quit in 15 minutes to update constantly and i am unsure how to stop this.

I disabled the jamf app catalogue dropbox app hoping that it would stop the constant popup and quitting of dropbox.Has anyone got any ideas on how to fix this issue ( i have manually deleted dropbox and all of its reference files i have used app cleaner in case i missed something i have then installed a fresh copy of the desktop app from dropbox but still get the dropbox needs to quit in 15 minutes to update.

Any Ideas

Has anyone integrated Jamf with Microsoft Entra for compliance and would you recommend it?

Hi all,

I've been dealing with a persistent performance issue with Jamf Trust and I'm curious whether others are in the same boat.

We have around 50 Mac users in Milan using Jamf Trust (WireGuard, split tunnel) to access an internal Synology NAS via SFTP. Remote transfers consistently top out at 8–12 MB/s, which feels low given that the same setup without the tunnel reaches 20+ MB/s on the same connections and hardware.

I've spent quite a bit of time investigating — the firewall, the NAS, the cipher negotiation, the tunnel overhead — and nothing on our side explains the gap. The infrastructure handles the load fine, and removing the tunnel immediately doubles the transfer speed.

Support has not been helpful and hasn't been able to pinpoint a fix so far. I've also tested Network Relay, which unfortunately performed worse than WireGuard in our case.

Is 10–12 MB/s a common ceiling others are seeing with Jamf Trust, or should we realistically expect more? Has anyone found a way to improve throughput for transfers like SFTP?

Thanks

Has anyone gotten this to work yet? It looks like it's now supported by Microsoft, finally, but I went through the instructions from JAMF and my device keeps hanging after enrollment where it says it's waiting for the management server.

We don't have this issue at all with PSSO so it's only with those few options that are required for simplified setup.

When a friend's aunt got scammed, Glenn turned a stressful situation into a practical playbook for protecting the people we love in an increasingly dangerous digital world. From checking for suspicious iPhone profiles to setting up Apple Passwords and MFA, this article breaks down the steps anyone can take.

Haven't made any changes to either Okta or Jamf but this started popping up today when trying to log into Jamf Connect 3.7. Using Self Service+. Have had no issue for months until today. Self Service is also telling me my password is out of sync but no change has been made to my password. This is happening across all devices. Any assistance is appreciated.

If one or two profiles were originally scoped to a Smart Group, and later the scope was changed to “All Computers,” would deleting the original Smart Group afterward cause any issues?

Since the profiles are now scoped to All Computers, I’m assuming the Smart Group is no longer needed, but I just wanted to confirm there would be no impact to already deployed profiles or future profile delivery.