Skip to main content
Solved

Netskope Client is trying to modify a System Extension

  • April 30, 2024
  • 8 replies
  • 127 views
mwestaph
Forum|alt.badge.img+3

Hello,

I am getting this message when I attempt to uninstall or install Netskope from Jamf, which prompts me to elevate.

I have given both the Netskope and the Remove Netskope Client full disk access.

I am using the uninstall script for Jamf, provided by Netskope on their download page.

I don't know what more I can do to prevent the pop-up. Help?

 

Best answer by mm2270


As @jamf-42 mentioned, if you deploy a System Extension and don't set it to the Removable System Extensions under the System Extension Types dropdown, then when a script later tries to remove it, you'll get prompted to enter an admin username and password. That's just how it works.

    8 replies

    jamf-42
    Forum|alt.badge.img+17
    • jamf-42
    • Esteemed Contributor
    • April 30, 2024

    probably that the config profile for the system extension is not set to be removable.. 

    mwestaph
    Forum|alt.badge.img+3
    • mwestaph
    • Author
    • New Contributor
    • April 30, 2024

    probably that the config profile for the system extension is not set to be removable.. 


    Where is that setting?

    jamf-42
    Forum|alt.badge.img+17
    • jamf-42
    • Esteemed Contributor
    • April 30, 2024

    Where is that setting?


    ignore me.. was thinking something else.. paste the script here.. lets see what it does.. 

    mwestaph
    Forum|alt.badge.img+3
    • mwestaph
    • Author
    • New Contributor
    • April 30, 2024

    ignore me.. was thinking something else.. paste the script here.. lets see what it does.. 


    The password I'm being prompted for is the admin password, not the client protection password referenced in the script.
     
    #!/bin/sh
    ####################################################################################################
    #
    # Copyright (c) 2016, Netskope, Inc.  All rights reserved.
    #
    #
    ####################################################################################################
    #
    # SUPPORT FOR THIS PROGRAM
    #
    #       This program is distributed "as is" by Netskope, Inc team. Please contact Netskope support
    #       team.
    #
    ####################################################################################################
    #
    # ABOUT THIS PROGRAM
    #
    # VERSION : 2.0
    #
    # NAME
    # jamfuninstall.sh -- uninstall Netskope client app thru jmaf
    #
    #####################################################################################################
    # version : 1.0 , this script file is introduced for jamf based uninstallation
    # version : 2.0 , [2019-Oct-10] support added for password based uninstallation
    ####################################################################################################
     
    SCRIPT_NAME=`basename "$0"`
    echo "Param1 $1 Param2 $2 Param3 $3"
     
    function print_usage()
    {
    echo "Usage "
    echo " Uninstall without password"
        echo "   jamfuninstall.sh <dummy param 1> <dummy param 2> <dummy param 3>"
    echo " Uninstall with password"
        echo "   jamfuninstall.sh <dummy param 1> <dummy param 2> <dummy param 3> <password>"
    }
     
    if [[ $# -lt 3 ]] 
    then
       echo "Insufficient arguments."
       print_usage
       exit 1
    fi
     
    if [[ $# -gt 3 ]]
    then
    INPASSWORD="$4"
    fi
     
    /Applications/Remove\\ Netskope\\ Client.app/Contents/MacOS/Remove\\ Netskope\\ Client uninstall_me $INPASSWORD
     
    RETCODE=$?
    echo "Uninstaller exited with Return code : $RETCODE"
    exit $RETCODE
     
    jamf-42
    Forum|alt.badge.img+17
    • jamf-42
    • Esteemed Contributor
    • April 30, 2024
    The password I'm being prompted for is the admin password, not the client protection password referenced in the script.
     
    #!/bin/sh
    ####################################################################################################
    #
    # Copyright (c) 2016, Netskope, Inc.  All rights reserved.
    #
    #
    ####################################################################################################
    #
    # SUPPORT FOR THIS PROGRAM
    #
    #       This program is distributed "as is" by Netskope, Inc team. Please contact Netskope support
    #       team.
    #
    ####################################################################################################
    #
    # ABOUT THIS PROGRAM
    #
    # VERSION : 2.0
    #
    # NAME
    # jamfuninstall.sh -- uninstall Netskope client app thru jmaf
    #
    #####################################################################################################
    # version : 1.0 , this script file is introduced for jamf based uninstallation
    # version : 2.0 , [2019-Oct-10] support added for password based uninstallation
    ####################################################################################################
     
    SCRIPT_NAME=`basename "$0"`
    echo "Param1 $1 Param2 $2 Param3 $3"
     
    function print_usage()
    {
    echo "Usage "
    echo " Uninstall without password"
        echo "   jamfuninstall.sh <dummy param 1> <dummy param 2> <dummy param 3>"
    echo " Uninstall with password"
        echo "   jamfuninstall.sh <dummy param 1> <dummy param 2> <dummy param 3> <password>"
    }
     
    if [[ $# -lt 3 ]] 
    then
       echo "Insufficient arguments."
       print_usage
       exit 1
    fi
     
    if [[ $# -gt 3 ]]
    then
    INPASSWORD="$4"
    fi
     
    /Applications/Remove\\ Netskope\\ Client.app/Contents/MacOS/Remove\\ Netskope\\ Client uninstall_me $INPASSWORD
     
    RETCODE=$?
    echo "Uninstaller exited with Return code : $RETCODE"
    exit $RETCODE
     

    on the config profile for the system extension, how is this set? 

    On a TEST device, set this to Removable and try try the script again.. 

    Do not scope to production.. 

     

    mwestaph
    Forum|alt.badge.img+3
    • mwestaph
    • Author
    • New Contributor
    • April 30, 2024

    on the config profile for the system extension, how is this set? 

    On a TEST device, set this to Removable and try try the script again.. 

    Do not scope to production.. 

     


    mm2270
    Forum|alt.badge.img+24
    • mm2270
    • Legendary Contributor
    • Answer
    • May 1, 2024


    As @jamf-42 mentioned, if you deploy a System Extension and don't set it to the Removable System Extensions under the System Extension Types dropdown, then when a script later tries to remove it, you'll get prompted to enter an admin username and password. That's just how it works.

    L
    Forum|alt.badge.img+5
    • L-plateAdmin
    • Contributor
    • December 17, 2024

    As @jamf-42 mentioned, if you deploy a System Extension and don't set it to the Removable System Extensions under the System Extension Types dropdown, then when a script later tries to remove it, you'll get prompted to enter an admin username and password. That's just how it works.


    Just to confirm we think this needs to be done before deployment regarding setting the removable system extension profile? cant be don't before the removal process starts when the product is installed.

    Terms & ConditionsCookie settingsAccessibility statement