Hi everyone! I've been slowly building out our self service with software from VPP, scripts for updating and some help desk tools.
I was hoping you all could share some of the scripts and other tools you use for your users. There have been some older threads showing off their tools but they are a little sparse on how to make them work. One great one I saw, but have no idea how to get it to work, was an emergency backup to Google Drive.
I would love to see some scripts for updating Adobe CC and some other nifty scripts for helpdesk. Attached is what I have so far.
Cheers everyone! :)
@Naren What does your toolbox maintenance policy do exactly?
Hi
What key-chain reset script are you people using?
Thanks!!
@PE2000 - here's one that nukes the local keychain:
#!/bin/bash
## Placed by me
#current_user=finger -s -l | grep Login | cut -c 8-25
if test -e /Users/$USER/library/keychains/????????-????-????-????-????????????; then
echo "Local Items keychain found"
rm -rf /Users/$USER/library/keychains/????????-????-????-????-????????????
else
echo "No local items keychain found"
exit 1
fi
Could anyone share what they use for the reset or Fix Keychain scripts? I just started my jump start and am building out self service. Any tips or suggestions are welcome.
@scottb where is the
$USER
coming from?
@emily Can you possibly share the Gatekeeper script or the link where you got the Gatekeeper script? We have devs that would need that sometimes. As long as it is approved by our security first. Thanks.
@wildfrog
How does "Allow Printer Administration" policy work?
Thanks
Lots of pretty icons.
Can someone post their scripts or links to:
Optimize My Mac
Allow Printer Administration
Reset NVRAM
Computer Maintenance
Display Computer Information
Collect Diagnostic Logs
Optimize My Computer
... Toolbox Maintenance
Thanks to all the posts above, this is what is set up in my environment!
@emily Hello, What does your fix parental control policy do? I have found some issues after getting some computers off AD.
@fernandez.payen if possible can you please share the script for Screen sharing and also please what dose Remote Support dose in Self service ?
thanks a lot in advance
@Santosh
#!/bin/sh
sudo defaults write /var/db/launchd.db/com.apple.launchd/overrides.plist com.apple.screensharing -dict Disabled -bool false
sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.screensharing.plist
/usr/sbin/dseditgroup -o edit -a (ADMIN_ACCOUNT) -t user com.apple.access_ssh
Remote Support installs a QuickSupport application and launches it. Also provides a prompt telling the user to provide the ID and password to IT to authorize the remote session.
@fernandez.payen Could you share the script for Google chrome clean up?
@GabeDevOps
#!/bin/sh
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
#
# ABOUT THIS SCRIPT
#
# Written by: Fernandez Payen
# Created on: April 24, 2020
#
# Purpose: Closes application "Google Chrome". Locates all cache
# and cookies directly from saved location on mac and
# deletes them. Once completed, it relaunches Google Chrome.
#
# IMPORTANT: Google Chrome must be downloaded and installed.
#
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
#
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# USER VARIABLES
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# Get current user
CURRENT_USER=`ls -l /dev/console | awk '{ print $3 }'`
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# MAIN PROCESS
# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
# Close Google Chrome
killall "Google Chrome"
# Removes cache and cookies
rm -R /Users/$CURRENT_USER/Library/Application Support/Google/Chrome/Default/Cookies
rm -R /Users/$CURRENT_USER/Library/Caches/Google
# Relaunches Google Chrome
cd /Applications
open Google Chrome.app
Where can you find those nice icons?
@ neilrooney_old
Hi
How did you setup software update in self service?
on the back end?
many thanks!!!
This is mine. What does "Fix my internet" do? @fernandez.payen
@djquazzi Curious what your Maintenance, Internet Speed Test and Should I restart policies do?
Do any of you all have actual usage data on these policies? UX and adoption should be somewhat data driven though usage data. I am just curious because I am finding out my employees rarely use self service, or they don't use it at the rate I would expect. We do have a lot of automation in place though, so that is a factor for us.
@strayer
Maintenance
User caches,
User Saved Application State,
System Caches,
Turns Off Open windows after login,
Flush DNS,
Restarts,
Internet Speed Test
https://github.com/danielnovello/Jamf/blob/master/speed_test.sh
Should I restart
If machine has been up for X days, inform and restart
https://github.com/danielnovello/Jamf/blob/master/should_I_restart.sh
@tlarkin I wish jamf would make it easier to get stats from Self Service for the exact same reasons. We seem to maintain a lot of Sefl Service items but find users are fairly ignorant to it.
@tlarkin We used to require login to SS. I would then capture the AccessLogs in splunk. That was when we had an On-Prem JSS. Now that we are cloud, we've lost access to that kind of data.
We ship policy webhooks to our data platform, and self service is barely used at my Org. If people want an app they typically just go download it. They also want IT to just patch it. Looking at the data by policy ID (since jamf does not include self service == True/False in the hook) it is very low for the total number of policies ran. To give context though, we actively try to patch non running apps at every check in. So, obviously the automation is going to run a lot more than self service, but the number of self service policy execution is very low.
