Skip to main content

Get Support

Get Support

10000 Topics
O
Oyster_raveNew Contributor
asked in General Discussions
Push .command to be executed as current user

Hey community, hope you're all doing greatI need your advice regarding a script I use locally on my laptop, but have some difficulties so deploy to all the other employees.Context :We're using Pritunl as VPN. It's a pain for everyone to log in 1Password (our password manager), search for their VPN credentials, and type them in to connect to Pritunl.I use a simple script which links the VPN profile to the credentials in 1password ("op" is 1password's cli).In use, I just have to click on the .command, it executes and open a popup for touchID (used to access 1password's content), gets the credentials with the name "vpn-companyname" and connect to Pritunl with this info.What would you recommend to do to deploy it to all the employees through jamf ?I tried to package it with Jamf composer, but Composer keeps the absolute path /Users/myusername/Desktop/VPNshortcut.command and creates it on the laptops I push the policy/package to... Which creates a new directory/user, so it's a bit of a mess

80
O
N
nikhil_sniperNew Contributor
asked in General Discussions
A
agyekum28New Contributor
asked in General Discussions
M
MehdiYawariContributor
asked in General Discussions
Software Update not available in corporate network

Hello everyone We have this problem that no macOS software update is available/visible in system preferences when the mac client is connected to corprorate network.if I want to download a macOS InstallAssistent.pkg directly from Apple (like this: https://swcdn.apple.com/content/downloads/63/49/032-84910A_3SSTBN1HDA/h89vitwfbzt54jcbwpfwkmrn12smedicny/InstallAssistant.pkg). Then it works without any problem.But Software Update arent visible/available in system preferences.When Connected to Internet directly (No Corprate network), the updates are then available in system preferences.AFAIK, there is no firewall rule blocking the connection. And yes we have also a proxy that could be causing this problem.The proxy-team claims that Apple servers are already listed in Allowlist and the proxy cant be a problem, as the download of a macOS package works.Does anyone have any idea how to narrow down this problem? What am I missing? 

130
M
D
DennisMXContributor
asked in General Discussions
T
TomDayHonored Contributor
asked in General Discussions
T
timlarsonNew Contributor
asked in General Discussions
Bigmike
BigmikeNew Contributor
asked in General Discussions
Flushes all logs for a given interval

Hi Folks, I am unable to get a log flush via API to work. Ideally going by the Classic API and Jamf recipe it should be something like this: curl --request DELETE \\--url https://yourserver.jamfcloud.com/JSSResource/logflush/policy/interval/0but I get an error! <html><head><title>Status page</title></head><body style="font-family: sans-serif;"><p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Unauthorized</p><p>The request requires user authentication</p><p>You can get technical details <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2">here</a>.<br>Please continue your visit at our <a href="/">home page</a>.</p></body></html> Here is my complete script jamfUrl="https://jss.url.com:8443"# Login Credentialsusername="username"password='mypassword' # Bearer Token Function. Get jamf's API token, extract the toke

50
Bigmike
_
__AMMContributor
asked in General Discussions
N
NetworldNew Contributor
asked in General Discussions
D
dela
asked in General Discussions
Allowing Air Drop & Handoff setting in JAMF Pro

Hello all, We allow our users to use AirDrop in our environment. I know Ventura has changed from System Preferences to System Settings. They also seem to change the Air Drop setting. It was previously a setting by its self and is now bundled together with Handoff so its AirDrop and Handoff.The problem is I can not get machines on Ventura to be discovered through Air Drop and the AirDrop and Handoff setting is grey out and says (These settings are controlled by a profile.)My Config profile allows Airdrop in both Media and Sharing Services. I have also allowed Handoff through the Restrictions --> Functionality screen.Even with those settings, I can not get AirDrop and Handoff to be configurable from the client side.Any thoughts??

1590
AVmcclint
K
klindasNew Contributor
asked in General Discussions
Jamf Connect Sync Corrupting FileVault Password?

I sporadically have users experience an issue where they attempt to update their password via Jamf Connect and it appears to work, but the next time they reboot and log in, the FileVault login does not accept their new nor their old password. This leaves them up a creek and the only option is to use the recovery key to get them back in. And in at least a couple of cases, we don't have the recovery key (they are "legacy" machines and FileVault was enabled well before we had Jamf in place so the keys were never escrowed) so the only option is to rebuild. I'm still working on the least intrusive way of enabling a local admin account for FV and enforcing LAPS on it. Anyone else see an issue like this and have an idea of what tree I should bark up?

120
Q
P
paul_loveNew Contributor
asked in General Discussions
N
Nate1Contributor
asked in General Discussions
Moving machine from one Prestage to another

Hey all!What are the implications, if any, of moving an imaged and in-use machine from one Prestage Enrollment to another? Our scenario:We have ~900 laptops all built with one of three prestage enrollments. Each new PE was setup over time with slightly more settings for our environment and only net-new machines were ever enrolled in the latest PE, so we have have a large mixture of each in our company. We have now built a 4th and if we reimage a machine the biggest pain is going into the PE scopes, unchecking it's old PE, then rechecking it in the new PE. We reimage 4-5 laptops per day so searching for the serial and doing this for each one would get tedious.Our hope is that we could uncheck all machines from the scopes in the three old PE's and just check all machines in the new one. That way they whenever we reimage them (either tomorrow or two years from now) they will image with the newest PE. Will unchecking those machines and rechecking them in the new one do anything?

830
N
M
MTFIDjamfValued Contributor
asked in General Discussions
R
rdeleonContributor
asked in General Discussions
E
EuwanhContributor
asked in General Discussions
U
user-BlcBrgVlFM
asked in General Discussions
B
Bias
asked in General Discussions
A
Anonymous
asked in General Discussions
cisco webex single sign on (SSO)

Hello community,we are using SSO via Microsoft Asher® AD.Now, we changed our Cisco Webex® to SSO, too. On our Windows Clients, SSO for Cisco Webex® is working, but not on our Mac® clients.I configured a configuration profile and a plist in Jamf Pro® for SSO with "Single Sing-On Extensions SSO for the Mircrosoft Office® applications is working well, but not for Cisco Webex® . The (Microsoft® ) logon screen is coming up, but the user credentials (the users email address and his password) are not automated filled. (When the user is starting an office application, like for example Excel®, the credentials will be filled in automatically).The application "Company Portal.app" is already installed on the Mac® client and the client is registered in MS Intune®.Is there anyone who can help me for setting up SSO for Cisco Webex® ?Thank you for your time and answer andkind regards,Michael

580
M
R
reidgContributor
asked in General Discussions
Microsoft Defender for Endpoint for Mac - New Command Line Syntax

In one of the recent Defender version updates, Microsoft changed the syntax used for the mdatp command line tool. We script this to determine Mac AV data via Extension Attributes.This link has the release notes for Defender for Mac: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-whatsnewThis link is a good reference for the command line options: https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/mac-resources#configuring-from-the-command-lineBelow are some of the scripts we use to build these attributes in case anyone is looking for the updated syntax. The first one is interesting since the definitions date used to be exported in epoch time and is now in a human-readable format.#!/bin/sh # If Microsoft ATP is installed, then get ATP definitions date if [ -f "/usr/local/bin/mdatp" ]; then result=`sudo mdatp health --field definitions_updated` dateresult=`date -j -f "%b %d, %Y at %H:%M:%S %p"

1400
D
R
RachelS
asked in General Discussions
SCCM Plugin pulling from Jamf failing to send to SCCM

I've gone through the guides and troubleshooting information for setting up Jamf SCCM plug-in version 3.6 and all seems to be going well until it reaches the send to SCCM part. I can see it pull from jss. I can also verify that the data in the XML file is correct. When using the helper tool, I receive a successful Sent to SCCM message. According to the logs, during the send to SCCM, there seems to be a check that fails everytime. The error on the log is as follows: 2018-03-15 13:48:52,678 [ 7] INFO Jamf.ProxyService.Plugins.SCCM.Utilities.Certificates - The registration status of the device 'Computername' SMSID: XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX in XXXX.XXXX.XXX' is 'Error', 2018-03-15 13:48:52,678 [ 7] ERROR Jamf.ProxyService.Plugins.SCCM.Utilities.Certificates - There was an error looking up the device Computername' SMSID: XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX in XXXX.XXXX.XXX' because either the client certificate is blocked or the registration message was inco

140
B
C
cyborghereNew Contributor
asked in General Discussions
J
jairodriguezNew Contributor
asked in General Discussions
M
ManivannanNew Contributor
asked in General Discussions

Want to write for Tech Thoughts?

Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!

Submit A Blog Post
Terms & ConditionsCookie settingsAccessibility statement