Hi I am looking for a script to replace the Username in the inventory section with the Extension Attribute of "Last User Logged In".  In addition to add "@companyX.com" as a suffix to the user name.  This would help me greatly in getting Asset inventory for my company via Azure.  I am getting the Last User Logged In by Extension Attribute.  So if the "Last User Logged In" is john.doe , take john.doe and add @companyX.com and fill the Username in the inventory section as john.doe@companyX.com.  This would then poll Azure and I would get all the data I need.  Still looking for a way to not manually update the username field when deploying a Mac to another user.  My scripting skills are limited, apologies. Thanks,JT

Script to download the latest Citrix Receiver for Mac: #!/bin/bash ##################################################################################################### # # ABOUT THIS PROGRAM # # NAME # CitrixReceiverUpdate.sh -- Updates Citrix Receiver # # SYNOPSIS # sudo CitrixReceiverUpdate.sh # # LICENSE # Distributed under the MIT License # # EXIT CODES # 0 - Citrix Receiver is current # 1 - Citrix Receiver installed successfully # 2 - Citrix Receiver NOT installed # 3 - Citrix Receiver update unsuccessful # 4 - Citrix Receiver is running or was attempted to be installed manually and user deferred install # 5 - Not an Intel-based Mac # 6 - ERROR: Wireless connected to a known bad WiFi network that won't allow downloading of the installer # #################################################################################################### # # HISTORY # # Version: 1.0 # # - v.1.0 Luis Lugo, 09.05.2016 : Updates Citrix Receiver # ######################

Just making my views public on the decision to deprecate Jamf  Remote app in Jamf Prop 10.40 as I personally feel its the wrong decision.10.40.0Jamf RemoteJamf Remote has been removed from Jamf Pro.This includes the screen sharing workflow using Jamf Remote. Jamfrecommends to use TeamViewer for remote administration. For instructions on how to integrate TeamViewer with Jamf Pro, see TeamViewer Integration in the Jamf Pro Documentation.Having just completed a large deployment of the TeamViewer Tensor and its integration to Jamf Pro and Microsoft Intune, its really a poor substitute to the usability of Jamf Remote.While Jamf Remote lacked support for NAT and accessing devices off local LAN is made up for it for ease of use and its integration to Jamf Pro (it had a very similar ease of use like Apple Remote Desktop) and its ability to ad-hoc install a package or perform certain fu

After initial setup, when a users password is detected as a mismatch Jamf connect just pops up a little notification in the corner with vague (to a user) wording about IDP and local passwords mismatching.Is it possible to make the actual Jamf Connect window pop up and not be closed until the user re-links their passwords? I went through all the options on https://docs.jamf.com/jamf-connect/2.1.0/administrator-guide/Menu_Bar_App_Preferences.html and RequireSignIn is enabled but it seems that is just for first run.Alternatively can I specify the language in the notification so the user understands what is happening?

I am in need to integrate the Jamf Assets information to be available in the Zoho SDP Asset Module with all the informations like HDD Size,OS Version,Owner of the Device,RAM Size,Hostname, all other information in one place.Zoho SDP have one Scan_script.sh which creates the .xml file and upload it to the SDP Asset module where the logged in user information is coming as Empty for me.Do we have any other method to integrate Jam Pro Inventory with Zoho SDP Asset 

I see that we can select enroll autenticate method from local users from Jamf School or select Azure, LDAP or Google. At the moment we use local users from Jamf and that option let us to install some apps, someone that use Google option can tell us if we can personalize MacBook before enroll with Google account from Teacher? And another question, on iPads that we do shared for these new course, can login with Google accounts or only with Apple School accounts? Thank you for all

In the default profile we have pushed to our iPads in Jamf School, we have the restriction set to allow us to rename the iPad on the device itself.  However, it always get overridden from the name in Jamf School.  Is there a way to be able to rename the iPad and have Jamf School replicate that change???

I have a problem hopefully someone has come accross.We pushed out a custom screensaver using a script, I will post below. It worked on Monterey no problem, but when we pushed it to Ventura it broke something.Now any device using Ventura is locked to the "Ventura" screensaver. No matter which screensaver you try to use, it defaults back to Ventura. When selecting a screensaver it looks like it is going to work, even showing the preview in the small display. But then hit preview and its the Ventura screensaver.Anyone got any advice? # Get user logged into console and put into variable "user" user=`ls -l /dev/console | cut -d " " -f 4` osMajor=$(sw_vers -productVersion | awk -F"." '{print $2}') osMinor=$(sw_vers -productVersion | awk -F"." '{print $3}') sudo -u $user defaults -currentHost write com.apple.screensaver CleanExit -string "YES" sudo -u $user defaults -currentHost write com.apple.screensaver PrefsVersion -int 100 sudo -u $user defaults -currentHost write com.apple.screens

What is the theoretical maximum limit of a Jamf Pro Cloud instance? Could the system support say, 50,000 devices across 12 locations? Combination of laptops and iPads. Edit: This is to settle a debate and not for practical application. 

I am currently working on a process to upgrade all of our fleet (50% Intel, 50% M1 roughly) to Ventura.  As with every upgrade, I am losing my mind finding a good process that works.  All of our users are standard accounts on their devices and Filevault is mandatory.  I have a policy that temporarily elevates user to Admin (script), installs nudge suite (pkg), nudge branding (pkg), mist-cli (pkg) and then runs the Mist command (script) to download the Ventura installer and it places it in /Users/Shared/Mist with the normal “Install macOS Ventura.app” format.I would like to use front end this process with Nudge to make users aware of the upgrade and allow deferrals until they click Upgrade.  I have Nudge configured and working and it invokes a policy from Self Service that kicks off the upgrade script.Here is where I am losing it, when it comes time to issue the upgrade command, it doesn’t work, at least on M1 macs.  I have tried using the Erase-Install app to d

We have a mac where the user is admin and has a secure token but still can't install updates to the OSThe user account is an Active Directory Mobile Account and is the second user to log in. Any thoughts on what else to check or enable?

I am working on creating a "make me an admin" script. I know there are already some out there I can use, but I wanted to create this one myself. What I have working now is a script that will first check if the user is already an admin user. If they are, a Jamf Helper window will appear informing them that they are already an admin user. They can then dismiss the window by clicking "OK". The policy stops running after they click "OK". If they are a standard user, the script will elevate them to admin, and a Jamf Helper window will appear with a countdown to what ever time we define in parameter 4. Once the timer runs out, the script runs the command to remove admin rights. I have this working really well. Now I'm trying to add some extra features. What I want to do is detect any new admin users that the user who is elevated to admin creates. They may do this to circumvent our policy of keeping users setup as standard. I had one idea to output the current admin users to a text file befor

Hello everyone,I'm just trying to scope a Self Service policy to Azure AD group, after scoping the policy to the desired AD group under limitation the policy itself is not available in Self Service after a logging with AD id. We have Cloud Identity Provider enabled for this and the connection appears to be successful; is there anything I'm missing here?

Seeing an issue on newly imaged macs and new out of the box. They are Jamf enrolled manually, MDM profile installed, certs installed, forticlient installed, wifi cert installed, AD joined… throughout several reboots after each of these steps the MDM profile and other profiles go unverified and the ca certs disappear. The only work around so far has been removal of the device from Jamf then manually re-enroll which brings back the jamf cert but not the other ca certs needed. 

We've just started running into an issue where the system apps that are removable on iPads such as Notes, Maps etc will not install on their own after setting up an iPad. We have been able to successfully navigate around it by excluding the student from the config profile we use to restrict App Store usage, but in the past they've just been there and it hasn't been an issue. Is this a recent iOS update issue where they are no longer installed by default? If so, it seems odd that they would be trying to install at all if the app store restriction is whats stopping them at 'installing'.

I know it is 60 multiple choice question/ 60 mins, but what is the platform type you take it on? Example: Web Browser-Based and login or download program to bring you into a portal like Comptia to begin? ect.Will plan on taking it tomorrowHope this is right flairthanks!

I'm attempting to set up Onedrive KFM for my company.  I've read over the other posts regarding this topic and by all accounts appear to be mirroring what others are doing.Created and pushed a config to allow full disk access to Onedrive.appCreated a plist in Jamf Pro with requisite settings as outlined in the example belowI'm running into two main issues.The Privacy & Security tab doesn't update to show access granted, but it seems like it has been.The plist is not applied, or at least not applied entirely.  I was assuming it would appear in the library/preferences folder, but it is not.  Are plists created in this manner supposed to appear in a folder on the computer?  Has anyone run into these issues?  I'm able to set up KFM manually on the laptops, but automatic optin is not functioning as expected.<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

I have been working on my own "make me an admin" script. I recently got a version of this script working. It displays a Jamf Helper window with a countdown timer. When the timer runs out, the user is demoted back to standard. If the user is already an admin user, they will see a Jamf Helper window telling them that they are already an admin. These functions of the script are working exactly as they should. This morning, I added a new function. This one checks if the user created any additional admin accounts while they were an admin. The script is supposed to start out writing a list of the current admin users to a text file. After the user is demoted back to standard, the same command to write the current admin users to a text file is ran again, but with a different file name. I use a "diff" command to check the difference between the two text files with the list of admin users. When I test this new function separate from the rest of the script, my text files get created and the "diff

HiI've been using this function to decrypt api account password in one of my scripts, and i can see it failing to decrypt in some machines. Different versions of macOS, i really can't see a pattern. Anyone seen something similar?function decrypt_string() {apipass=$(echo "$encrypted_string" | openssl enc -aes-256-cbc -d -salt -base64 -A -S "$salt" -k "$passphrase" )} 

Trying to block our public SSID so students on school mac's cant join it and take it off our systems. Any thoughts?

Hi,When I issued a sudo pmset repeat wakeorpoweron MTWRFSU 08:00:00when I check it will show the correct.Repeating power events:  wakepoweron at 8:00AM weekdays onlyWhen I issue command sudo pmset repeat shutdown MTWRFSU 18:00:00 it shows only but missing the wakepoweron. Am I missing anything?Repeating power events:  wakepoweron at 8:00AM weekdays only

HI, I had a question regarding removing our current JAMF mdm profile and replacing it with a new one from new company taking us over. I'm trying to do this with as little user input as possible. I've tried creating a policy to drop off the new mdm profile then running the "remove framework" command to remove the current profile. I also had a script in the policy to run afterwards to install the new mdm profile. So far the only thing working with this process is the delivery of new package(mdm profile) and removal of current one. New profile isn't getting installed. Anyone try something like this before successfully? 

<Disclaimer> New to Jamf here. I am finding after I enroll the devices into my inventory that I need to go into the profile that it is assigned in the scope tab, I have to click the save button for it to install. Save thing with pushing Apps to devices. I have the Apps in the device group but until I go into the App and save it, it just says pending.. Any ideas?

Hi,This is more of a preventive post and a sort of a horror story on how Jamf Connect was accidentally pushed in our environment while it is still in testing phases with nobody from STAFF even expecting it... With new Jamf Pro JSS server - Jamf Connect can be updated/DEPLOYED directly from JSS global settings area, which we have learned the hard way. In my initial opinion this was only a maintenance/update feature, not an actual push to every mac and while afterwards I saw "for an initial deployment" in little grey letters - it should be in BIG RED LETTERS!  If anybody runs into a similar problem:1) Immediately switch Jamf Connect Version/Update Type to "None"2) Create a smart group which will check for Application Title: "Jamf Connect.app"3) Flush/Trigger Inventory Update policy on JSS to register all the macs which already received Jamf Connect ASAP4) Create a policy with every available trigger so it gets to every mac ASAP scoped to the Jamf Connect app present smart group

Does anyone have an example of pushing device specific configuration to a machine?Scenario: I'd like to populate a file on every laptop device that contains the content of certain extension attributes that are centrally defined and keep that regularly up to date when I make changes in the admin portal.Is there any means to do this? Everything I am seeing all seems to be geared around "shared" or "common" policies that are associated to machines/groups. I'm not looking to create 100 different policies each associated to one machine. I'm looking to populate based on actual attributes set on the device itself in the portal. Another way of looking at this - is it possible to have a policy that has "templated content" in it where the template values come from EA's set on the device?