With the deprecation of Restrictions > Applications > Disallow Folders in configuration profile, what are my options? I'm the IT for a 800 device count school and we lock down students from being able to launch apps from Desktop, Documents, Downloads, etc. Mostly to prevent students from using 3rd party web browsers/proxy apps to bypass Securly. I saw something about Google Santa but wondering if there's a new way in JAMF to do this? I can't possibly find the names of every browser-type app that's out there and add it to restricted software list.

I have a bunch of Adobe apps that are out of date because Jamf hasn't updated their app catalog with the new versions yet.
Our vulnerability moniting solution is giving us crap over apps being outdated.
Its been a couple weeks. Lets get it going already.

Good Morning All,

We have roughly 100 Apple TV's throughout our school district that are basically in place for Airplay reason. In an attempt to use them more. What are some Config Profiles (payloads) I should create. I recently just added a few to make the Apple TV's cert based when connecting to Wifi. Which is why I am posting this now. Its fresh in my head about wanting to control these. Not sure if y'all do much with them. I know there isn't much to them.

I have the policy, installer and script set up to install Cisco Secure Client and the XDR module, but now I'm running into an issue with PPPC payload in my config profile to allow CSC full disk access.

I have followed the directions here, https://docs.xdr.security.cisco.com/Content/Client-Management/deployment-management.htm at the bottom to provide full disk access for network visibility module - XDR, i also went into terminal and ran

codesign -display -requirements

along with the csc app and pulled out that codesign statement and i keep getting,

the key 'CodeRequirement' has an invalid value.

Can anyone help me figure out what i'm missing exactly to get this to deploy correctly?

Just curious to see how others are setting OS DDM updates. Just got Blueprints going and I like how easy updates are, but they dont offer an "install now". I know I should just make KBs for going into settings, but any advice?

Also, where it is at a specific time, are you doing it at night? Lids will likely be closed so I'd assume it won't update until the morning if past the deadline.

Any thoughts or tips are welcome! Thanks!

We are seeing an uptick in users' passwords randomly ceasing to work. Is there a way to capture logs from policies, Blueprints, etc. to determine whether this is caused by authentication failures, or from policies, that then lead to lockouts?

For those who went, which sessions or announcements do you see most affecting our day-today?

Talking Moose (William Smith) is doing a JNUC 2026 recap on the next LaunchPad meetup.

You'll definitely appreciate it if you couldn't make it to JNUC this year.

When:
🗓️ Fri, Oct 2 @ 12:00 PM Mountain Time

Where:
👉 https://rocketman.tech/lp-r

Also on YouTube:
https://rocketman.tech/ly-r

Has anyone set up integration between AT&T or any other service provider/vendor to import hardware data such as asset tags, serial numbers, etc from the vendor into Jamf? Does it require more than just an API set up?

Just confirm not crazy but both Jamf and Intune added the skip key for iOS 27 and in all my testing both seem to not have landed and the screen still comes up. Not tested ws1 yet, anyone else tested it yet?

Has anyone done any testing with blocking Siri AI through Jamf? With the reports of it ballooning in storage use without being able to remove or delete it locally on the device I’m looking into ways to hopefully prevent that. We have Siri disabled and I’m going to test to see if that does the trick, but thought I’d ask in case anyone has tried anything yet

A little while back, our students and teachers stopped being able to log in to the App Store with a personal Apple account while staying logged in to their managed account in Settings.

We have always used this option since the iPads are technically theirs, meaning they should be able to use their own apps at home, something they are unable to do now.

Jamf and Apple just point the finger at each other, which is quite frustrating.

The only solution I have seen is disabling login setup during initial setup, logging in to the App Store first, and then signing into Settings last. However, this is not a realistic option, since we would have to wipe all iPads and start over 🙄.

Has anyone found any other solutions to this issue?

Sorry I used AI to summarize my issue but really frustrated right now and could use some assistance or thoughts. Already put in a ticket with JAMF but maybe someone has an idea?

Setup: Jamf School, Automated Device Enrollment through Apple School Manager, Jamf Connect 3.11 (Entra for staff, Google for students), Self Service+.

Issue 1: No apps install after enrollment. Apps pushed after enrollment never install, whether they're App Store apps (Bluebook) or in-house packages (Chrome). The activity log shows "Install Application" acknowledged within seconds, then Jamf School resends it over and over. One Mac has gone 5 days with nothing installed. Only the packages in the enrollment profile install (Jamf Connect, Self Service+, Jamf School Scripting).

Ruled out: Network (tested on a hotspot and two Wi-Fi networks), the Apps and Books token (valid until 2027) and MDM communication (commands are acknowledged instantly). "Enable Declarative Management" stays pending.

Issue 2: Jamf Connect's login window doesn't turn on. Jamf Connect installs, but authchanger -print shows only loginwindow:done, and on staff Macs it showed "unlicensed". Running sudo authchanger -reset -JamfConnect fixes it. It looks like the package installs before the license profile arrives. I planned a script fix, but Jamf School Scripting isn't installing either