Can anyone tell me what I'm doing wrong? I'm trying to write a script that checks the version of macOS so I can have it trigger a Jamf policy based on the version of macOS that the computer is running. I wanted to account for all versions of Sonoma and all versions of Ventura.  I keep getting "integer expression expected" errors. I used shellcheck.net and it didn't find any problems. I'm testing this in CodeRunner. I also tested it in Terminal. I thought I knew how to do this! I have even looked at some other scripts that I have that use similar syntax. They work. #!/bin/zsh macOSVersion=$(/usr/bin/sw_vers | grep "ProductVersion" | /usr/bin/awk '{ print $2 }') echo "$macOSVersion" if [ "$macOSVersion" -ge 14 ] && [ "$macOSVersion" -lt 15 ]; then echo "This Mac is running macOS Sonoma" elif [ "$macOSVersion" -ge 13 ] && [ "$macOSVersion" -lt 14 ]; then echo "This Mac is running macOS Ventura" else echo "This Mac is running a macOS earlier than Ventur

I am working on a script that will produce an alert message using Swift Dialog if CrowdStrike has logged any malicious behaviors. This is meant for my support team who may be helping one of our users find out if CrowdStrike may be responsible for an issue they are having. I created a Self Service policy that runs the script. I was given this command from our CrowdStrike rep: log show --predicate 'process == "Falcon Notifications"' --last 1h I used this command to create a variable: detection=$(log show --predicate 'process == "Falcon Notifications"' --last 1h | grep "malicious behavior detected") If I simulate an incident of malicious behavior, the phrase that follows grep will appear in the log. Therefore, when I echo "$detection" it will output a result that contains that phrase. If the log doesn't have that phrase, the output of $detection will be nothing. Later in the script, I have a conditional statement:   if [ "$detection" ]; then echo "Malicious behavior detected" # Displ

Dear Community,we are switching from Meraki to Jamf and would like to trigger the "Erase all Content and Settings" function on our employees' Macs via the Meraki command line without the employee having to make an entry.Do you have any ideas on how we can implement this? I've currently found the following option:1. make the user an admin2. trigger the settingHere the employee still has to enter his user password:sudo dseditgroup -o edit -a username admin/usr/bin/su \\- "`/usr/bin/stat -f%Su /dev/console`" -c "/usr/bin/open '/System/Library/CoreServices/Erase Assistant.app'"

Is there a way to turn off the WiFi info button? Or at least limit it so that users cannot change the IP address to manual?

Hi , For some of our users jamf login window has stopped showing up, the users are only seeing mac user to login. OS version is Sonoma 14.0Jamf connect version is 2.30is anyone else having similar issue and can share a fix , i know re isntalling the profile might fix it but i dont want to perform last resort as first. Thanks,

Ok, Let me preface this by first stating that scripting is NOT my strong point.I'm attempting to install AWS CLI version 2 for all users per the instructions on: https://docs.aws.amazon.com/cli/latest/userguide/install-cliv2-mac.html#cliv2-mac-install-cmd Attempting to run the commands via policy result in an exit code 127. I've found a few posts about AWSCLI version 1, but none of the solutions seem to work. Any suggestions?

Hi, I'm looking to make a policy that will install AWS CLI, and have been running into a few problems. I originally tried via pip, but ran into permissions issues during the execution. I then tried via brew, however I am running into a roadblock there. Currently, I am able to successfully get brew installed via a script I found here. I then created another policy with the command 'brew install awsci', configured under files and processors-> execute comand, but get the response 'brew not found'. I accounted this to the command being run as root instead of the user, so I then tried to create a script (attached below) that would run as the current user. Unfortunately, it returned with: 'Script result: bash: brew: command not found' I am able to manually enter the command 'brew install awscli' from the logged in user via terminal, so I know that works...any thoughts on how to get this working completely via jamf? Thanks in advance

Today we are releasing a maintenance version of Jamf Pro. Jamf Pro 11.2.1 fixes the following product issue: Jamf Pro Server: Security Issues [PI116156] Resolved a broken access control issue for some enrollment workflows.   For additional information on what's included in this release, review the release notes via the Jamf Learning Hub. To access new versions of Jamf Pro, log into Jamf Account with your Jamf ID. The latest version is located in the Products section under Jamf Pro.   Cloud Upgrade Schedule Your Jamf Pro server, including any free sandbox environments, will be updated to Jamf Pro 11.2.1 based on your hosted data region below. Review this guide if you need assistance identifying the Hosted Data Region of your Jamf Cloud instance. If you would like to upgrade manually, navigate to https://account.jamf.com/products/jamf-pro and click Upgrade (Standard Cloud) or Schedule Upgrade (Premium Cloud) at the top of the page. Subscribe to product al

Hello everyoneSorry - I'm new to jamf.I need to create a policy that inserts a line in a config file.Do you have any ideas on how I should proceed here?Best regards

Hello,First time, long time.My organization has decided to move away from Carbon Black in favor of Falcon. I used CrowdStrike's directions and successfully created a config profile and a policy. Both have been tested and are working. My predecessor had created a policy to remove Carbon Black and it works as expected.My question - What is the best way to go about deploying this? My idea is to scope the config profile to every machine, create a smart group that identifies endpoints with the Falcon config profile installed, and uninstall Carbon Black. Then create another smart group that identifies endpoints with the Falcon config profile installed that do not have Carbon Black installed and scope the Falcon installation policy to the group. Once all endpoints have received the Falcon package, I will remove the old Carbon Black config profile.Is this the best way to do this or is there another method that you'd recommend?Thanks in advanced!

We have the problem that we cannot activate Jamf Trust on any of our Windows computers (all Lenovo devices).As described in the help, we install Trust via a "Generic UEM for Windows" installation.Trust is installed correctly, but activation does not work. We have also tried to insert the "Shareable link" directly into the application, but the same behavior, the message always appears, activation is not possible, please contact the administrator.But we cannot recognize any error. We have also tried different networks (Wifi & LTE) and also with cable.So it is currently not possible for us to roll out new computers, as protection by Trust on a Windows basis is currently not possible.We are currently working to identify next steps needed to move the case forward.

Hi Everyone  is there a way to push a url to all macbooks like webclip for IOS ? Thanks 

Hello, we use jamf pro to manage our macbook airs.One of our main concerns is we do not want students to sign in with a personal account when using chrome browser. I have been looking to see if that could be done using the google admin console and I have been told that I could create a configuration profile in jamf to do this. How can this be done with a configuration profile? Thanks

Trying to configure a login window message with configuration profile? Any ideas

Hello! I'm looking for a way to disable the audio on an iPad's lock screen. I'm having an issue where a student is watching a YouTube video with a timer set on a break, timer goes off, iPad gets locked, and the audio from the video that is able to still be played from the built-in player on the lock screen causes classroom problems. I've tried two Config Profiles that didn't work--one that restricts the Apple Music app, one that restricts AirPlay receiving--but I'm not even sure if doing this is possible. Would love to hear any solutions or insights anyone might have! Thank you.

Hi , We have recently updated our VPN and would like to update our host address for all macbook across the company through JAMF. I know we can package the profile.xml with cisco any connect installer and assign the profile to everyone but we dont want to go that path. Is there a way we can update the host address on all cisco any connect instances for all users much simpler way via jamf ?Thanks,

Hi everyone,I found some previous articles regarding a similar issue of a device being encrypted (shows on the device as encrypted) and JAMF Pro showing it has the Recovery Key. But JAMF Pro also shows it is not encrypted. I have been able to fix this by manually running the command sudo fdesetup changerecovery -personal and then doing a JAMF Recon. I wanted to script this, so I created a script to be run from self-service, but it just spins forever. I believe because it needs me to provide a username and password for an account that has rights to Filevault. How would I prompt for that in my script? #!/bin/sh# Change the recovery keysudo fdesetup changerecovery -personal# Force device to check into Jamfsudo jamf reconexit 0

I was having trouble getting ANY VPP apps to deploy on Big Sur machines. I discovered that in Big Sur, in the "Restrictions" configuration profile, I had to UNtick "Require admin password to install or update apps". This was not needed in Catalina, but VPP apps will not deploy on our Big Sure Macs unless this box is unticked. See attached screenshot. Hope this helps someone!

I package Figma desktop application after download the app as .dmg via composer and deployed thorugh policy with no issue. It was working fine on macOS Monterey but after upgrade to Ventura it is not working saying corrupted. I also tried to re-install from policy still get same error. But if I right click the app icon from docker and click "open" a new window pop up from there if I click open again that will launch Figma desktop and this need to do for the 1st time after upgrade. Any suggestion for that. Any one know how I can kipp Figma process running that way i will script to remove the Figma App from /Applications folder and re-install to see that resolve the issue or not.

Hi,  I am trying to deploy a new plist from JAMF but this one contains <array> and it failed to deploy.here the example :<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><array>  <dict>    <key>organization</key>    <string>company1</string>    <key>display_name</key>    <string>C1</string>    <key>onboarding</key>    <false/>  </dict>  <dict>    <key>organization</key>    <string>company2</string>    <key>display_name</key>    <string>C2</string>    <key>onboarding</key>    <false/>  </dict></array></plist> if I remove array ti

Good Afternoon!I'm not sure if someone could help me figure out what is going on with this. We are currently deploying the CrowdStrike Falcon Sensor in our environment, and have a policy that pushes out the install package and a script. The install package works without issue, but we are having some issues with the script.When the endpoint is licensed already, the script returns a failed status code and a status message as to why it failed in Jamf ("ERROR: The machine is already licensed"), but does not return that message in the script so we can tell it to succeed in the case that it is already licensed. #!/bin/sh # THIS SCRIPT LICENSES THE CROWDSTRIKE FALCON SENSOR RESULT=$(/Applications/Falcon.app/Contents/Resources/falconctl license "$4") echo " OUTPUT: ${RESULT} " Which results in the following:Script result: Error: This machine is already licensed OUTPUT: Any idea what is going on here?

Hi,every now and then I come across a Mac which stopped communicating with the Jamf server and Apple's MDM.As our MDM profile is non-removable I have the question how to uninstall it? Sending the MDM-removal command obviously will not work nor jamf removeMDMProfile.Any ideas?

Hi all,I have a machine consistently producing the error below in the jamf log - does anyone have any info that might help?jamf[925]: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.jamf.management.daemon.binary was invalidated from this process." UserInfo={NSDebugDescription=The connection to service named com.jamf.management.daemon.binary was invalidated from this process.}I've pasted the full loop of log entries below (starred out username).For context, the 'Google Chrome - Install & Update' policy is one of a few similar scripts that use Installomator (plus variables) to install some apps not on the Mac App Store.jamf[10839]: Checking for policies triggered by "recurring check-in" for user "*******"... jamf[10839]: Executing Policy Google Chrome - Install & Update jamf[10839]: Checking for patches... jamf[10839]: No patch policies were found. jamf[10839]: Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named com.jamf.manag

Does the new feature macOS Onboarding support Jamf App Installers? Why Using Installomator etc. for Basic Apps like Office365 and so on. But in the Settings of Onboarding there is no way to include App Installers or am looking wrong? And when I am going to use the new feature, do I have to put the policy in Self Service for initial Setup?

Hello,We're deploying MS Defender, but need some help with how to remove or hide the "Exclusion" option from MS Defender user interface, if it's possible. My current configuration "MDATP MDAV configuration settings" appears to enable to exclude a default path, but I prefer to not have "Exclusion" option available or visible.