I need to copy a preconfigured *.app from a Windows share over to the /System/Application folder on a Mac.Unfortunately, I've been beating my head against how to do this and haven't come up with much.I'm really hoping that someone who knows more than I do would know if there's anyway to load that *.app into Jamf and it push it down to a Mac?Otherwise I can probably script it, but since it's Windows it's not exactly as easy as an scp command to copy from "//{fileserver}/MAC INSTALLS/PcounterClient.app" over to "/System/Application".Any suggestions would be highly welcomed!

Hey there! If your users run into this issue https://kb.tableau.com/articles/issue/error-ora-21561-oid-generation-failed-connecting-to-oracle-from-mac"Error "ORA-21561: OID generation failed" Connecting to Oracle with a Mac"Tableau has a solution, edit the hosts file to include local computer name by adding the computer name to the end of the 127.0.0.1 lineWhich is wonderful! and helped us out. But we did not want users to have to edit this manually. So we made a script and deployed it to Tableau users via self service.  This script will add the entry, or remove it if the entry is already there. It uses jamf helper to show the user a nice notification window    #!/bin/bash # Dev

My institution is moving to named licenses for Adobe, so I am trying to figure out an easy way to package the Adobe CC Desktop installer, and install it on Macs campus-wide. Does anyone have any advice, or know of a way to do this? I've tried to package through composer and then push it via policy, but it never installs the app.Thanks!

Is it possible to create a WebLink in Jamf Pro and then to push that out to the desktop on all MacBooks?

Hi All,I'm trying to work through an issue I'm having binding in Jamf Pro.  The issue is specifically, the directory option "Allow Administration by" is not working.  This option allows AD groups like "Domain admins" to be automatically local administrators on the MacBook.The strange thing is if I use that same AD admin account and unbind/rebind manually, the "Allow Administration by" option works.Here's what we are doing.1. I created a Configuration profile in the Jamf Pro Console for AD binding2. I created a Prestage enrollment profile selected the AD binding Config. profile3. At enrollment, I can see the AD bind Configuration profile runs.4. once the computer is enrolled, I can log in via my AD admin login, but it does not have administrative rights on the computer. here's some more points of data:1. I ran the command dsconfigad -show.  Verified the "Allowed Admin groups" in the Advanced Opt

I've got a Macbook joined to AD that won't let the user update the OS. The user account is an Admin/mobile account because it's joined to AD and our other MB's don't have this problem, and allow users to kick off the update.  While I could push the update, I'd like to know why this isn't working for this one account and address it before it becomes an issue elsewhere.

I need some advice here but may be impossible...We've been using JAMF as a company for some time to manage Macs but today we had our first request for an iPad.So, I built out a prestage enrolment for iOS devices and asked my colleague to order the iPad through our apple ecommerce page that's linked to our ABM. HOWEVER, they accidently ordered through the standard Apple store.So, my question is... is there a way that I can now add this device to our ABM before it arrives so that I can see how the Prestage enrolment will behave??Thanks :)

We have MacBook Pros that are always on adapter power that have to process large amounts of data. We are finding that the graphics card keeps switching and need to be able to run a profile or policy that will disable the Automatic graphics switching without having to tell users to manually change it themselves. After much digging, we found that the following command would work. We created a policy and added the line to the Files and Processes module. pmset -a gpuswitch 1

I've done lot's of searching, but cannot seem to find any information on this.We are planning to upgrade our backend database from MySQL 5.7 to 8.0.The database is currently using the utf8 character set, which has been deprecated in favor of utf8mb4 in MySQL 8.0.Most other applications now support utf8mb4, does Jamf?  We would like to update the character set as part of the database upgrade. 

Leverage Jamf Pro Script Parameters to automate a multi-Sub-Estate installation of Sophos EndpointBackgroundDuring our monthly Sophos vendor meeting last week, we learned about updated documentation for Installing Endpoint Protection on Macs.The most intriguing information was the addition of a vendor-signed Configuration Profile to ease the sometimes confusing requirements for macOS Big Sur 11 and later.Continue reading …

Hello Everyone,We enable file vault on user's Macs, and some of them may use Mac by remote method.When they try to restart the computer, they won't be able to unlock file vault in person.So we write a script to help them restart their Mac and bypass file vault.But we have to ensure that they restart the Mac by using the policy in self service we made.Is there a way to pop up a menu or something when user click restart, to remind them doing this by self service item.Or even directly run the script when user click restart?Thanks!

Hi Gang,  am I doing something wrong? I am trying to control a specific preference for Wacom Desktop Center.  The preference is located as seen in the attached photo. Not in User Library>Preferences, but in User Library>Group Containers> EG27766DY7.com.wacom.WacomTabletDriver>Library>Preferences. I set up a configuration profile in Jamf Pro that looks like the attached 2nd photo, but it is not being enforced. I suspect that this is because the .plist file is not in User Library>Preferences, but within the file path above, but I am not sure how to tweak the configuration file, or if it is something that is just not possible. Any help?   

I am migrating iPads from JAMF to INTUNE.  One particular device is not showing up in JAMF yet it is showing managed by JAMF on the device.If I change the device MDM to INTUNE in ASM, will it allow me to erase and reset accordingly?  OR do I need to release from organisation and add again to ASM?Thanks.Peter.  

I'm creating a user from script and it works fine. You can unlock the padlock using the account, you can switch to the account in terminal and run things BUT the account will not log in!!!When logging in as the account it just hangs?!#!/bin/bash sudo dscl . -create /Users/testuser sudo dscl . -create /Users/testuser UserShell /bin/bash sudo dscl . -create /Users/testuser RealName testuser2 sudo dscl . -create /Users/testuser UniqueID 1050 sudo dscl . -create /Users/testuser PrimaryGroupID 1000 sudo dscl . -create /Users/testuser NFSHomeDirectory /Local/Users/testuser sudo dscl . -passwd /Users/testuser qwerty12345 sudo dscl . -append /Groups/admin GroupMembership testuserThis is the script its pretty straight forward!Does anyone know if the account needs to be added to the apple setup assistant or something else!?!?

My school has been using jamf School for around 1-2 years and in that time I was able to find some interesting bugs and exploits that can be used to for Example: delete browser history, change some settings bypass the search filter Etc.And this is why i wanted to ask if there is a way to report bugs and exploits directly to jamf.

We can create device groups and assign app licenses on a per-device basis but is it possible to do that on a per-user basis?  I'm not seeing that as an option.  I know that is something that can be done in Jamf Pro but if there's a way to do it in Jamf School, I'm not finding it. Thank you!

!/bin/bash rm -rf /Users/user/Documents/rm -rf /Users/user/Downloads/rm -rf /Users/user/Desktop/rm -rf /Users/user/Pictures/rm -rf /Users/user/Music/* exit 0 *Hi all, First time posting here, so apologies if this has already been posted before. We are currently using the script above to delete unwanted files created by students in our institution. However, we'd like to exclude a sub-directory called 'Apple Music Apps' within directory /Users/user/Music which has a file called 'LoopsDatabaseV09.db' which we don't want to delete. Any help is greatly appreciated Thank you

Hello, I'm looking to start tracking information about when machines were first enrolled. We re-deploy machines fairly frequently, and they're imaged (using Casper Imaging) each time they're re-deployed. I can see the last enrollment date in the machine's inventory, but that is re-set every time it's imaged (as expected). Is there anywhere I might find logs or history for enrollments, or any other way I might be able to track this? Thanks!

I know with MacOS 12.3 the Python version changed and the python call for current user did not work. I changed that when 12.3 was released a few months back and depNotify worked again. Now with 12.3.1 depNotify will not launch with enrollment. I have followed the solutions in the following post with no luck on this MacOS version. Anyone find a solution for MacOS 12.3.1??https://community.jamf.com/t5/jamf-pro/dep-notify-and-monterey-12-2-3-python-call/m-p/258525  

Under our current 10.11 non admin build for junior school students, whenever a student attempts to print they get the following error: You don't have permission to use the application "PrinterProxy" The PrinterProxy file that is trying to open is located in the following location:/Users/Library/Printers/PrinterName/Contents/MacOS/PrinterProxy /Users has been restricted from running any Applications on these machines. I am guessing this is a El capitan/10.11 issue because I have not seen this is any of our older builds. Has anyone else had this issue ? ThanksPaul

We recently resolved a situation where our VPP apps were giving false "No Licenses Available" errors because our token was in more than one location. The good news is that situation is mostly resolved. New devices are working fine, and Required VPP installs are going out like they should.The problem is that now anything we had previously made Available in Self Service is still affected. As soon as someone tries to install it, it'll fail due to that false No Available Licenses message. We won't know what app on what device is an issue until someone both tries to install it and complains to IT about it.We can fix an individual app on an individual device by excluding it from the scope, waiting a few minutes, and re-scoping it. This clearly doesn't scale. Jamf support seems to be at a loss on it as well.I'm sure I'm not the only one who has had to bounce back from this kind of mishap. Anyone have any ideas on how to get these apps back to working order without havi

The following script does not work in Extension Attribute but works with ran manually (with BBEdit)What am I missing#!/bin/bash SSKeychain=$( security find-certificate -a -c "Some Software, Inc" 2>&1 | grep labl ) if [[ -z $SSKeychain ]] then echo "<result>Some Software Certificate not installed</result>" else echo "<result>Applied</result>" fi

Hello,We're currently in the process of setting up a Jamf Pro cloud instance, and we want to link it to Azure, we have Jamf Connect set up and that works fine for pre-stage enrollments (enrollments from boots) and enforces users using their AAD credentials to log into a device. We're looking however to have users enroll company devices that are not in ABM, as well as force admins in Jamf Pro to use AAD credentials and force MFA for those logins.I have followed the following tutorial on linking AAD SSO and Jamf Pro: https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/jamfprosamlconnector-tutorial , however I am not sure I have it right or working, because when I test the SSO configuration through the "test this application" in the Azure portal, it comes back looking successful, but launches the <domain>.jamfcl

When I packaged Privileges 1.5.2 with Composer, I added a Postinstall-script that installs a privileges-helper.I tried App Installers to update Privileges to 1.5.3; it installed fine, but then the helper was still in version 1.5.2 and therefor did not work.Does anyone know a way to automatically install the latest helper after Privileges is updated via App Installers? you cannot add a postinstall-script to App Installers (yet?)

HI, policy contains uninstall package of an app and its stuck in pending state. not able to see any logs over there and app is still showing in user systems. any idea please