How do I alert people if their Macbook turned on for more then x days?

You can use extension attribute. Which will allow to identify the date when the device has been last restarted. Then use the extension attribute in a smart group.

#!/bin/bash

# get last reboot date and time
lastReboot=$( who -b )

# extract month, day and time
month=$( /usr/bin/awk '{ print $3 }' <<< "$lastReboot" )
day=$( /usr/bin/awk '{ print $4 }' <<< "$lastReboot" )
time=$( /usr/bin/awk '{ print $5 }' <<< "$lastReboot" )

# convert date and time to ISO date format
lastRebootISO=$( /bin/date -j -f "%b %e %l:%M" "$month $day $time" '+%Y-%m-%d %I:%M:00' )

echo "<result>$lastRebootISO</result>"

exit 0

Hope that helps.

Thank you,
I already created the EA concerning the Last Reboot date and paired it to a SCG that contains every Macbook that is on for more then x days but I'm struggling to followup on this with the notification part of the issue.

We couldnt find a way to do this either so we set out reboot policy to not run in business hours instead.

Nice!
Seems like it's working I'll test a bit and I'll let you know.
Do you think it's possible to add something like a maximum number of times you could defer the policy? Something like 20 times before the message changes and you only have 1 button to restart the device.
Thank you again :)

@DonCascone Depends on how you want to notify your end users. 

swiftDialog:
I would use a policy, scope it to the SCG and build out a swiftDialog (https://github.com/swiftDialog/swiftDialog) script to inform users.  This provides a lot of custom options to display the notification in a professional way.  I believe you can also do a "macOS Notification" style alert as well.

If you don't want to deal with installing swiftDialog you can just use Jamf's built-in binaries to throw up a popup window and do the same thing as above minus the fancy window customizations.

Jamf Helper Window:

AppleScript Notification:

As always run these scripts on a test machine before putting them into PROD.

You might want to look at https://github.com/SecondSonConsulting/Renew which is a very configurable and polished tool for reminding users to restart their Macs. The Wiki link on that page covers installation and configuration. It does require SwiftDialog for user notifications so if that's an issue for your org the examples previously posted using Jamf Helper would work.

you can try this with 5 deferrals and notification every1 hour 

#!/bin/bash

# Path to Jamf Helper
JAMF_HELPER="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper"

# File to keep track of deferrals
DEFERRAL_FILE="/var/tmp/restart_deferral_count.txt"

# Message and options
HEADING="System Restart Required"
MESSAGE="To complete essential updates, please restart your device. You can choose to restart now or delay until later. After five delays, a restart will be required."

# Initialize deferral count if the file doesn't exist
if [ ! -f "$DEFERRAL_FILE" ]; then
echo 0 > "$DEFERRAL_FILE"
fi

# Read the current deferral count
DEFERRAL_COUNT=$(cat "$DEFERRAL_FILE")

# Check if deferrals have reached the limit
if [ "$DEFERRAL_COUNT" -ge 5 ]; then
# Restart the device immediately after the fifth deferral
"$JAMF_HELPER" -windowType utility -title "$HEADING" -heading "$HEADING" -description "Restarting now to complete essential updates." \\
-icon "/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/AlertNoteIcon.icns" -button1 "OK" -defaultButton 1
sudo shutdown -r now
exit 0
fi

# Display the Jamf Helper window with two buttons
USER_CHOICE=$("$JAMF_HELPER" -windowType utility -title "$HEADING" -heading "$HEADING" -description "$MESSAGE" \\
-icon "/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/AlertNoteIcon.icns" \\
-button1 "Restart Now" -button2 "Later" -defaultButton 1)

# Check the user's choice
if [ "$USER_CHOICE" == "0" ]; then
# Restart the device immediately
sudo shutdown -r now
else
# Increment the deferral count and update the file
DEFERRAL_COUNT=$((DEFERRAL_COUNT + 1))
echo "$DEFERRAL_COUNT" > "$DEFERRAL_FILE"

# Notify user of remaining deferrals
REMAINING_DEFERRALS=$((5 - DEFERRAL_COUNT))
echo "User chose to defer restart. $REMAINING_DEFERRALS deferrals remaining."

# Sleep for 1 hour (or adjust this delay as needed)
sleep 3600

# Re-run the script to prompt again
"$0" # Calls the script again
fi

We use the support app for this: https://github.com/root3nl/SupportApp 

Renew on GitHub is great for this. It's MDM agnostic. It's also a good script to review and learn some things.

Hello,
I'm coming back to you since the script is working but even if our user restart the device the prompt continues to appear.
The script is the one below, do you have any tips for this issue? Maybe an inventory sync at the end of the script would solve the issue?

#!/bin/bash

# Path to Jamf Helper
JAMF_HELPER="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper"

# Message and options
HEADING="System Restart Required"
MESSAGE="Please restart your device, it's been turned on for too long. You can choose to restart now or delay until later."

# Display the Jamf Helper window with two buttons
USER_CHOICE=$("$JAMF_HELPER" -windowType utility -title "$HEADING" -heading "$HEADING" -description "$MESSAGE" \\
-icon "/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/AlertNoteIcon.icns" \\
-button1 "Restart Now" -button2 "Later" -defaultButton 1)

# Check the user's choice
if [ "$USER_CHOICE" == "0" ]; then
# Restart the device immediately
sudo shutdown -r now
else
# Postpone the restart and notify again in 1 day (optional customization)
echo "User chose to restart later."

# Sleep for 3 hours (or adjust this delay as needed)
sleep 10800

# Re-run the script to prompt again
"$0" # Calls the script again

fi

@DonCascone The problem with this script is that the "shutdown -r now" (the sudo in not needed when running a script from a Jamf Pro policy) shuts down the Mac immediately and which kills the jamf agent so the policy will never report that it completed running. You could change the command to "shutdown -r +10s" which will restart after a 10 second delay which may be enough for the policy to log completion (a full recon isn't necessary). Where a full recon may be necessary is updating the Smart Group used to target Macs to run that policy, and to update that you would want an inventory policy triggered at login.

I use this script and scope it using an extension attributes to machines that haven't restarted in 10 days or more

Extension Attribute

Adding a "&" to the end of the reboot command may allow the policy to fully complete in Jamf before the reboot happens.

When specifying a delay the shutdown command should return immediately without requiring a trailing &