Skip to main content
Solved

Re-Scoping all the policies to a new Department

  • October 26, 2023
  • 5 replies
  • 47 views
J
Forum|alt.badge.img+3

We've decided to move our scoped policies and conf. profiles to smartgroups, as we realized this will save a lot of work in the long run. I don't seem to find an efficient way to do this, at the moment i have to go through every single policy and conf profile and change the scope manually, which isn't even the bad part, the worse is that i can't find a way to list all the policies scoped to one department.

When the policy is scoped to a few departments, it can't be found anymore in the search, it shows "2 computer groups, 2 departments" or something like that and that excludes the keyword from the search.

Any help/ideas would be highly appreciated.

Best answer by mdp

Hi johnjohn -- 

If you're looking to do this via the API, here's some Python code that'll list all the policies and configuration profiles scoped to a particular department:

https://github.com/MatthewPrins/Jamf/blob/main/Policies_Profiles_Department.py

    5 replies

    B
    Forum|alt.badge.img+6
    • bigben54
    • Contributor
    • October 26, 2023

    Like most everything with Jamf, there are a lot of ways to climb a tree, but here's one idea - you could add something to the policy that was a marker.

     

    A one liner like this in the files and processes/execute command field (obviously change the policy name to something meaningful).

     

     

    touch /Library/Application\\ Support/JAMF/policyxxx

     

     

     

    Then create an extension attribute script that looks for that and returns a result you can search against.

     

     

    #!/bin/bash printf '<result>' if [[ -f /Library/Application\\ Support/JAMF/policyxxx ]];then printf 'policyxxx' fi printf '</result>'

     

     

    Then use a smart group or a saved advanced search based on department and the extension attribute having that marker.

    Or you could for instance create a group that didn't thave that marker and use it to run the policy... so many ways to extend it.

     

    And if I can give you a tip on the re-scoping... in short, use the APIs. ;)

     

    J
    J
    Forum|alt.badge.img+3
    • johnjohn
    • Author
    • New Contributor
    • November 7, 2023

    This seems like an extraordinary amount of work. And i don't even completely understand what it does, but to set this ext att to every policy would take me hours.

    I will have a look into the API.

    I am still convinced there must be an easier way to show all the policies scoped for one Department. thank you nevertheless.

     

    M
    Forum|alt.badge.img+8
    • mdp
    • Contributor
    • Answer
    • November 22, 2023

    Hi johnjohn -- 

    If you're looking to do this via the API, here's some Python code that'll list all the policies and configuration profiles scoped to a particular department:

    https://github.com/MatthewPrins/Jamf/blob/main/Policies_Profiles_Department.py

    ---Matthew Prins -- Jamf Scripts @ Github
    J
    J
    Forum|alt.badge.img+3
    • johnjohn
    • Author
    • New Contributor
    • December 7, 2023

    Hi johnjohn -- 

    If you're looking to do this via the API, here's some Python code that'll list all the policies and configuration profiles scoped to a particular department:

    https://github.com/MatthewPrins/Jamf/blob/main/Policies_Profiles_Department.py


    This is pretty much what i was looking for and i can confirm it works. And as a bonus there's a bunch of other really useful scripts in that library

    M
    M
    Forum|alt.badge.img+8
    • mdp
    • Contributor
    • December 7, 2023

    This is pretty much what i was looking for and i can confirm it works. And as a bonus there's a bunch of other really useful scripts in that library


    Glad it worked for your situation!

    ---Matthew Prins -- Jamf Scripts @ Github
    Terms & ConditionsCookie settingsAccessibility statement