on windows i can right click on a file or folder and choose "scan with cortex". i may just be an idiot... but how to you start a manual scan from a mac?

Thought I would share this incase anybody else needed to see if they had a certificate installed on the local machine. The variables can be set to look for a specific name of a variable and the location where it should be installed. Tested on 10.9 & 10.8 #!/bin/bash ## Used to check for a certificate & it's location. # VARIABLES cert_name="certname" desired_keychain="/Library/Keychains/System.keychain" if [[ `security find-certificate -c "$cert_name" $desired_keychain 2>/dev/null` ]]; then echo "<result>Installed</result>" else cert_search=`security find-certificate -c "$cert_name" 2>/dev/null | grep "keychain:" | awk -F """ '{ print $2 }' 2>/dev/null` if [[ $cert_search ]]; then echo "<result>Non-System Keychain: $cert_search</result>" else echo "<result>Not Found</result>" fi fi ex

Hello Community, At the moment we have 50 Macs. On all Macy, the user are local admin. On all Devices we have a local account with admin rights, too. Now we want to delete the local admin rights for all user. Only our local account geht local admin rights. My question is: Can every help me to delete the local admin rights with a script? That only our local admin get the admin rights? Many Thanks for help!Christian

Hello everyone,We starting to use/distribute Jamf Teacher. We don't have any problems with device at all. But when it comes to Macs the app gets installed but you can't use it. When starting it prompts for server adress, username and password as shown bellow.I think there's something we missed? For devices you need to configure with an app code. But shouldn't it be the same for computers?

Hi All,We suddenly have few Macs, after restart/shutdown, user not able to login to their account.All Macs are Filevault enable and users are default added into Filevault (we use AD – mobile account). Our local admin, is also Filevault user and disk owner. But we can’t even login as our local admin. It just will then show a black screen and then will loop back to the login page.We are able to temporarily fix this by reinstalling macOS (without erasing the disk).Has anyone experienced the same issue?There were no changes to any of our exsiting policies in JAMF.We are also using McAfee as our endpoint security, including the encryption as well.

I am looking for suggestions on the best way to disable the touch ID / fingerprint prompts that come up when a new user logs into a Mac for the first time.  This is specifically on an iMac with the new keyboards with the fingerprint reader, I'm not sure if this differs from the MacBook Pro so I thought I would mention that.

Hello right now I have the dock set via config profile. The users are able to add items just two things are unremovable. I want to switch to dock utility instead of config profile. The question is can I run a script to backup what their current dock is, remove the config profile and the apply this backed up dock?

Hi all,  I am new to jamf and still understanding the intricacies with deploying config profiles using smart groups. I have a config profile being deployed to computers via a smart group.  The smart group is defined as computers that dont have the config profile installed.  Its been working well, but due to changes in the way we are installing a particular application,  I no longer want that config profile active in the environment for net new devices but I dont want the profile removed from the computers that already have it.  How would I go about doing this?   thanks

Hi All,I received an email from Jamf pro that trial version is ready. However, I'm stuck at activation code screen and i'm unable to bypass it. Kindly help.

Hello all, I am trying to change which bash is used in scripts but having no success.I tried changing the shebang to:#!/usr/bin/env bashand changing the path to start with the folder of the correct path, but I still get the normal bash.I tried exporting that path on a lot of places to make sure root uses that path first.I even tried to change the shebang directly to the new bash path, did nothing. Is there a setting in Jamf that changes that? Or am I missing something?Thanks

Does anyone know of a way to report if Universal Control is turned on?

When I attempt to use the JAMF API to enable Remote Desktop using/usr/bin/curl --verbose --header 'authorization: Basic XXXXXXXXX' https://XXXXXXX.jamfcloud.com/JSSResource/computercommands/command/EnableRemoteDesktop/id/XXXX I get the following output ... Warning: Binary output can mess up your terminal. Use "--output -" to tell Warning: curl to output it to your terminal anyway, or consider "--output Warning: <FILE>" to save to a file. Then if I check System Preferences ... it's not set. Is there another way to get output to see where it's going wrong? I don't want to have to put the username/password in a script, hence using basic auth, but I'm not sure if that's why it's not working.  Any ideas?

Jamf noob here, I need to copy a file to a single mac computer in the /library/application support folder using Jamf Pro.  I have a copy of the file.  I have gone into settings- scripts and I'm trying to write a script with a simple CP terminal command, but how do I supply the file?  Do I need to create a package for that?  I should mention that I am working from home on a PC and don't have access to a Mac at the moment.  So I think that means I can't use Composer?

Looking at Computer Extension Attributes in Jamf Summary… at the end of every bash script is says ” Windows Script …” Just trying to figure out what that is about and should I be concerned about it at all? This does not show up when you look at the Jamf Pro editor for the script.   ========================================================================================== ID 4 Name ............. Last Reboot Enabled true Type ............. String Mac Script #!/bin/bash echo "<result>$(date -jf "%s" "$(sysctl kern.boottime | awk -F'[= |,]' '{print $6}')" +"%Y-%m-%d %T")</result>" Windows Script ... ========================================================================================== 

Hello!We have run into an issue with one of our profiles disabling communication to internal services, JAMF Pro and/or Apple for app downloads prior to completing initial enrollment for enterprise network policies.Is there a way to delay or stall a single configuration profile from installing until after a specified trigger (time idle, last app to download, rename, next restart etc.) for an iPad? Thank you

I've rolled out several new iPhones in the last week and the configuration state of iMessages is completely inconsistent from device to device. These are all phones that are the same model, same IOS version, same department profile. Some show iMessages in the settings app as editable to toggle on and off. Others show it greyed out. And the ones that have it greyed out, it's greyed out and enabled on some, and grey out and turned off on others. I have not been able to see any pattern in the behavior. In fact, I deployed 2 phones to people in the same office with the same work roles. The phones were set up at the same time, same model, same IOS, same department/profile etc. Both have the iMessage toggle greyed out. One is enabled and the other is turned off.Unless I am missing something, this is problematic because unless a message sender specifically sends a bare bones SMS message, the recipient will not receive it until iMessages is enabled. I have checked the status of the setting bef

Hi, I'm new to Casper (hi) and I'm a bit confused about the Policy FUT and FEU options. Do I just use Composer to capture user-level preferences etc. from whatever account I'm logged into, then create a DMG from the result, or do I have to place user items in a particular place? Is it possible to mix user files and non-user in the same DMG? Sorry for the silly questions, but this doesn't seem to be covered in the Casper manual. Cheers, a|x

Hello!I am a relatively new JAMF admin in my org, but have been with my organization for almost 10 years most of that in a helpdesk or Desktop support role. I work in a K-12  organization. For most of the time I've been here, after every summer we often have high number of iPads (close to 20%) that just drop out of communication with our JAMF pro instance (on-prem) and have to be reset and re-enrolled to be properly managed again.  I've gone a few rounds of support tickets with JAMF without much headway until a recent ticket that I opened. The support tech noticed that our APNS push certificate is getting renewed around the time that we come back from school and it was hypothesized if we renewed the push cert more towards the middle of the school year that all of the devices would have time to get the new MDM profile.  Does this make sense? To me, because the topic code string is the same on the old cert and the renewed cert, the iPad's shouldn't have to g

The company i work for (as a contractor) is requiring me to install JAMF on my *personal* laptop and iMac because of "compliance requirements". While i would usually refuse on principle (since these are my own devices), i am enjoying my job so i'm not really planning to challenge it.As these are my personal devices, i do my banking and have my personal data on them so i'm wondering what can they actually access through JAMF. IT told me they will not have access any personal data, and that i can continue using my personal AppleID but after reading what i could find online, i am starting to doubt that.Another reason is they are refusing to buy the apps i purchased that speed up my work, but they don't consider essential. So if i create a new AppleID, i would lose access to my music and all the apps that i use daily (both for work and my own use).I wonder what is the actual capability of JAMF and what will they be able to access. Will they be able to access my photos, browser history, rec

I am managing a few software titles through the JAMF Patch Management, but I'm unable to update the Definitions on my own. One of the titles has fallen a bit behind. Foxit PDF Editor is now on version 12.1.0.1229 and the last definition update was for 10.0.2.1028 from back in January. It now being late March, is there a way to update those definitions?

I'm looking for a way to remove photos and videos from an iPad without doing a full wipe. We have iPads at our 2nd campus, but they are all pre-DEP and it would be nice to be able to just clear unnecessary data from them at the end of each term without having to do a full wipe, then drive myself there and configurate them all and log in to them again.

Hello,Can you please tell me how you manage MDM Capable Users with Jamf Connect?We use Jamf Connect but on all of our computers the Capable Users MDM is empty.This is very problematic, because no more VPP applications, no more user level configuration profiles, etc...Our devices are enrolled DEP, MacOS 11 or more recent.The un-enroll and re-enroll solution is not acceptable with us, we have hundreds of new computers per month.I'm amazed that it's so complicated for such basic and important things.Thank you for your help

I have been trying to update patch policies today and when I edit and save the definitions, they are not saving. The interface also looks like it has been updated. Tried on 2 different Macs and no luck.Anyone else having this issue?

I'm currently experiencing difficulties in installing the MuseScore deployment package through Jamf Apple Device Management on MacOS Ventura Version. I have tried multiple installation methods, including using a Jamf Pro policy and manually installing the package through the command line, but the installation process keeps failing with various error messages. https://fmwhatsapp.one Here are some additional details about my setup and troubleshooting steps:I am using Jamf Pro version 10.32.1 and have created a policy to install the MuseScore deployment package (version 3.6.2) on multiple devices running MacOS Ventura Version (12.0.1).I have confirmed that the package is compatible with the Ventura version of MacOS by testing the installation on a few individual devices outside of Jamf Pro.I have also checked that the MuseScore deployment package is properly signed and notarized by Apple.When attempting to install the package through the Jamf Pro policy, the installation process

Our users routinely snarf things up playing around with printers, trying to add home printers or change queue names to work with Printopia; or things just get hosed. I'm working on a Self Service policy to blow away the printers and re-add all those scoped to the user. When I do this manually, I use the "Reseting printing system..." option accessed by right-clicking the printer list in the System Preferences pane. Is there a way to invoke this action from the command line so that I could script it? In 10.4 and 10.5 there was a PrintingReset.sh script in the Printer Setup Utility bundle, but that tool is gone in later releases. I'm aware that I can simply kill the queues via lpadmin and reset cupsd.conf, but I think the OS is doing a bit more to "fully" reset cups. If you watch the system log, clicking "reset printing system" invokes printtool (found at /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.fra