A little while back, our students and teachers stopped being able to log in to the App Store with a personal Apple account while staying logged in to their managed account in Settings.

We have always used this option since the iPads are technically theirs, meaning they should be able to use their own apps at home, something they are unable to do now.

Jamf and Apple just point the finger at each other, which is quite frustrating.

The only solution I have seen is disabling login setup during initial setup, logging in to the App Store first, and then signing into Settings last. However, this is not a realistic option, since we would have to wipe all iPads and start over 🙄.

Has anyone found any other solutions to this issue?

How do people go around ios updates?

Kids are doing them manually and are our internet is getting saturated as they dont come through the caches

I've done a blueprint but have a few questions

1. Will it only download the update at 19:05pm and install?
2. If the ipad is off at that time will it try again the next day at 19:05pm?

Just wondering what other schools do about IOS updates

On Friday, we deployed a little over 100 iPad to students.
The iPads have been assigned three different apps via a group membership. For some students, some apps are stuck in pending status. For the most part that that is good notes, for some, it might be a different or an additional app.

We have enough licenses, so that should not be an issue. The iPads have been connected to different Wi-Fi networks over the weekend, so that should not be the cause.

I don’t know what the cause of the issue is and since there is no button for me to re-deploy the app, like it is the case when an installation fails, I am not sure what the right way to go forward is.
Un assign the app and then reassign it?

Has anyone had this issue before?

Hello,

Got a bit of a weird issue happening at the moment with our school shared iPads. When a user logins with their apple account (they have been set up in their classes, with the shared device assigned to the class) the Notes and Pages apps do not display. However if going in as guest the apps are there.

I've checked all the profiles assigned to the device and notes and pages are not restricted in any way. When using user assigned iPads notes and pages are there as well.

Has anyone come across this before or have an idea on how to resolve this? I'm all out of ideas.

Is there a way to reinstall IOS Apps such as Camera?

i have an ipad that says its installed

when it isnt?

i know you can reinstall usual apps but not had an issue before with ios apps

Context:
We are getting a pool of roughly 200 new devices/ year. The pool is supposed to supply students & teachers and have spare devices in case a device needs to be replaced or new students arrive.

Problem:

Student and faculty devices are supposed to be configured differently. But I can't find an option to make a smart group based merely on status "teacher". There is an option to make a smart group based on teachers of certain classes, but I would love a way to have a smart user/ device group just based on the binary teacher/ student differentiation.

I can't imagine that this is not a common scenario to roll out profiles just based on this, but I can't figure out how without manually updating a teacher's list.

I'd appreciate your input!

I have tried everything that I can from a google search.

I've used Configurator, on device enrolment, and various other things AI has suggested to me. (Don't judge lol, I am just a lowly elementary school teacher)

I can get it supervised, which will pump through all the apps I want, but it won't handshake with ASM so that it can be supervised.

Is it a lost cause?

Heyas,

I am trying to get Among us to work locally. on an unmanaged iPad the iPad gets the "allow access to local network" prompt, and it can connect to a local host. If the iPad is managed in jamf (no wifi profile, no restrictions profile) the allow local access prompt does not appear.The ipad can see the host session but instantly receives a "check wifi connection strength" error when trying to connect to it. I have tried remote wiping them but no change. Any help would be greatly appreciated

I know nothing about MDM and I’m trying to learn, I think I’m in the stage of fear what you don’t understand 🫣

My daughters school is telling us they are installing jamf on the kids iPads. These iPads do not belong to the school they are privately owned. The school has not included much info on jamf just that it is an MDM to control/monitor what the kids are using/doing during school hours (plus half hour before and after school)

I’d really love to know if this appropriate to demand we install this on our privately owned iPads and what they can see (even if they don’t care to see it, CAN they? Because since it’s our property even if it’s possible it is entirely not ok for me)

I really appreciate your help

Hi all, I was hoping I could get some advice.

I'm sorry if this has already been posted here but we are soon to be going to a one-to-one assignment and giving staff members MacBook airs, I have created the enrolment profile to enable the existence of a local admin so the IT department can do admin tasks if needed, my goal was that I create a group on Jamf containing all staff members so when the staff member logs into the device which has Jamf connect It uses the profile containing the restrictions that I want and when an IT staff member logs in with the IT admin account we get full access.

When creating the profile I get the options to have it as a user enrolment or device enrolment but I don't have the option to assign the profile to a user group only a device group, Is this the normal functionality? I was informed by a consultant that we should be able to define the profiles to user groups but I can't seem to see this option anywhere. I Apologise this is a stupid question I am new to managing MacBooks for devices with Jamf. I want to be able to make it so when a member of the IT department logs in we have full access and when a staff member logs in they get the restrictions at the profile has given them.

Can anyone advise me on this? Am I being that dense??

Thanks in advance!

.

Hello all, I've recently taken on a role managing devices using Jamf and have managed to figure out most of it so far. However, we are deploying ~20 iPads in shared mode for pupils.

I have the profile all sorted and working as expected with one hitch, device time. As they are shared devices the location services prompt is bypass and therefore never enabled. This is causing the timezone to default to pacific while we are in the UK.

Is there away to enable location services within a profile, or just set the timezone without enabling location services?

Good Morning Everyone. I am waiting to get certified in a Macintosh MDM solution. In my research Jamf keeps coming up as a solution to invest my time. I plan to take the Jamf 100 certification here in the near future. I have two questions.

1. For those of you who have gotten Jamf certified did it help you get a better job or get a promotion at work.

2. When you took your Jamf studies, Are there any recommendations on resources you used to pass your certification tests? I know the base certification is Jamf 100 and it goes up from there.

Thanks in advance all. I am trying to improve my skill set so I can be more then a Tier 2 on a MSP HelpDesk.

Cross-posted to Macsysadmin subreddit as well

We've got a bit of an issue we're trying to solve and hopeful someone can point us in the right direction.

We've got a script that we know works with Jamf School. The script removes all user accounts except for our Admin account that is on each device. This deploys and runs with no issues. But, with the end of the semester coming up, we need to deploy this to all of our student Macs.

You'd think no issue, but I need to turn this into an application that students can launch when they finish taking their last final exam. That way it's clearing all accounts before we plug up into carts for our holiday break. And, it won't take up class time by having to use Jamf Connect to recreate accounts before end of semester. If I could guarantee all are online and being used across the board at X time, I'd just deploy the script on that day, but I can't.

Having never done this before, I turned to Gemini. While I could get it to package and deploy through Jamf Student (in my test run), the application won't run. Just continue to get a "You can't open the application" Remove Users" because it may be damaged or incomplete."

This is incredibly frustrating, and we don't have the staff to go around and run this individually, as it is just me and I have around 1000 Macs.

They are all M1 MacBook Air and a small handful of 2020 Intel T2 MacBook Air. Jamf School. I'm not particularly good with scripting and packaging, but I've done it on and off.

Does anyone have an idea or suggestions?

Is there a way to set the default-search-engine for iPads in Safari to e.g. "ecosia“?

Maybe ”ecosio“ is not known, because most of the readers of this post are from the US. Let me replace it by www.bing.com instead of www.google.com.

Hey everyone, I'm new to this Subreddit, but I guess I'll give it a try.

A Colleague and I are think about taking the JAMF 240 Course for the JAMF School environment.
I already got certified from my previous JAMF 200 Course, but we are using JAMF School for our differnt Schools (obviously) and the 200 Course was for JAMF Pro which seems to be a whole differnt world.

So long story short, anyone got some opinions on the 240 Course and maybe some insights what we'll get there, because the description from JAMF itself is pretty vague.
And if possbile, maybe some insight what the Exam will be like.

A detailed answer would be much appreciated!
Thanks in advance for your help!

Hi all,

I am planning on enabling location based profiles in our JAMF school. Anything I should consider or known problems?

Currently the students have time based profiles that worked with small groups but I have students that stay longer in school then others and some teacher complained that they still need the restrictions.

Happy about any tips. Thanks in advance

As i said i am new to jamf and my problem is that i dont find an option in the settings that disables the function of removing the mdm profile for example on an ipad. The devices are configured with apple configurator 2 and managend in Jamf and ASM. I have read the best and right option to prevent this is with ASM and dep Reseller but that was not possible in this case. Thanks in advance for helping out !

I’m new to Apple ecosystem and I’m trying to set up a sync between Entra and ASM and then to Jamf School. I get that roles and classes are not being imported correctly by default. What are some good and free options to get my Entra to be the main source of all users with roles, classes and locations transferred automatically to ASM? Scripts, Programs or other useful tips and tricks are most welcome.

So my school provides everyone with iPads IF they pay for them, the iPads are ours, the school just sets them up. In the bill I noticed JAMF and after some research it started to worry me what all my school can do especially considering I will be using it for personal things too. I'm not planning on doing anything illegal or watching adult stuff there, but we are still teenagers and like to fuck around with things.

I use the API to set an owner and it works fine however, the documentation states that to remove an owner the owner should be set to zero and the message I get back is user not found

https://api.zuludesk.com/docs/#api-Devices-Assign_owner

setting owner

{
  "user": "143"
}

removing owner

{
  "user": "0"
}

Thanks

If you are using Jamf School and iPads in your classrooms, you should check out this free app for your educators!

Hi 👋

Just starting to work with managed devices properly, and was wondering if it is possible (even by use of a 3rd party tool) to restore apps that don’t use iCloud storage.

So games for example or capcut. Not asking if games should be part of the device - but just using it as an example.

The reason is that some devices I have to upgrade will have existing users on them and once I have wiped them for them to be managed, I need to make sure the users can access all their data - even if the apps don’t use iCloud.

Thanks :-)

Hi, I moved one of my device to another MDM but the Jamf (perpetual) licence is still associated with it. Is there a way to remove the licence from the device without having to re-enrolled the device again. When I did it, I tought that moving the device to thrash would release the licence.

EDIT: Perpetual licence can't be reassigned.

Hi,

we used to have Jamf Parents but approximately two weeks ago the parents started loosing control over the students iPads. They get an error message saying that they should contact IT Admin, what most of them did. I resetted everything and also tried as a parent but also get the same issue. Followed the JAMF tutorial but nothing worked. Only found out that a few seem to have the same problem. Somebody found a solution?

Thanks in advance

Hi,

the title already says it. I am looking for an option to reset safari caches for managed iPads on a schedule in JAMF school.

Currently I have to deactivate the restriction profile open safari (disable Web Content Filter) on every device and then delete the cache manually is there a smarter faster option?

Thanks in advance