I am starting to use Self Service to push out Office Updates (primary concern), Flash player updates, run RUM to update CS 6 installs...pretty much all updates (even Apple Software Updates soon). I do this by promoting the updates through a series of smart groups. Is there any good way to notify a logged in user that they have new Self Service items waiting? So far I'm having no luck with scripting a decent solution.

Hey Jamf Nation! We've just released Jamf Pro 10.45.0 Beta. This release includes new features and enhancements including Google BeyondCorp Enterprise integration enhancements, Failover Login URL Update for single sign-on Integrations,  App Installers deployment improvements and much more.  How to join the beta: We’ve also made some changes to the Beta enrollment process with our new Jamf Nation platform. Please enroll in the Beta Program under Product Feedback at account.jamf.com. Once you’re enrolled you’ll see a link to the Beta Forum. There will be a short delay between enrollment and Jamf Nation beta forum access - you will receive a notification in Jamf Nation to join the beta forum. Once you receive the invitation click on "Join this group Hub" to access the forum.   If you have any questions please email beta@jamf.com.  As always, the beta program is operated under non-disclosure, so please do not share any information regarding

I'm attempting to create a Smart Group for "desktop Macs." We have a number of different iMacs and minis in our environment. But it appears I have to choose from predefined models (e.g., "Model IS iMac Intel (21.5-Inch, Late 2015) OR Model IS iMac Intel (21.5-inch, Mid 2017)," etc., in order to start seeing the Smart Group get populated.I was hoping/expecting to be able to construct criteria such as "Model LIKE 'iMac' OR Model LIKE 'Macmini' OR Model Like 'MacPro'" since the official Model Identifiers under the hood all use such strings, and they're unique enough across product lines. That way it wouldn't matter what exact iMac or mini models I've got in our environment, and don't have to add new Model criteria when, say, the M3 minis start showing up at some point.I don't think I'm missing anything obvious, but it wouldn't be the first time something escaped my eye.

I'm trying to get a smart computer group running to check for Java/java version. I can't seem to get it working. I use the script below in an Extension Attribute and have the group set for "is not" Java 8 Update 131 build 11 Any ideas? #!/bin/sh version=`defaults read /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Info CFBundleShortVersionString` echo "$version"

Hi gang,I'm trying to accomplish two things with Self Service. One policy will open Google Drive (this I have working in my script) followed by launching the location in a new Finder window upon clicking (ie: //Users/$loggedInUser/Google\\ Drive/Shared\\ drives/) for when people tell me "they lost their Google Drive." This new finder window is the piece that is not working. My error says location does not exist even though it does. So sounds like a permissions error?For my next trick I want to have a policy that opens a PDF file stored on a shared Google Drive.I have tried lots of ways to script this which all work locally for me fine but not when calling the policy through JAMF. I'm thinking permissions here too. Maybe a PPPC that I need to allowed Files and Folders access to JAMF or something else?Thanks!

Hey JAMF People! Our management is wanting to have iPads come out of the box with the Free (Pages, Numbers, Keynote, iMovie, GarageBand,) removed from the iPad and made available only in Self-service. Looking for some suggestions. I'm pretty sure if we set-up a restriction for those apps, they would not be able to downloaded from Self-Service? They would just be forever restricted right? If they wipe the device using a JAMF reset or we wipe it with MDM reset it does not reinstall them, but it is adding an extra set to our "enrollment" work flow. These are kindergarten student iPads so it's been deemed too much to ask them to remove the apps themselves.  I guess the TLDR is there a way to remove an iPad app once, but not restrict it so it can be downloaded later through Jamf Self-Service?   Too bad you can't just "rm -rf" on an iPad right?

Both CIS and Tenable provide a configuration profile method to undo any hot corner set to disable screen saver.CIS uses <≠6>Tenable uses <!=6>Neither seem to work. Anyone have any luck with this?

hi all,Jamf just spin off 1 free dev sandbox for me and i am looking to copy everything from my production jamf pro cloud to this cloud dev sandbox using jamf migrator. I am new to github - so can anyone help me on how to use Jamf Migrator in github (https://github.com/jamf/JamfMigrator)?I download the zip code and extract it but could not find any apps inside

Jamf Pro ver 10.42.1I've created a CP to delete mobile accts but when I set the time (e.g. 1 day, 1 week, etc...) and save it, the CP reverts back to 0 hours.I have updated it several times and recreated a new CP with the same resultsI know there is a script to do this but I like to use CPs if possibleAny ideas on why

tl;dr: I want to write a script to monitor the log JAMF generates when executing a policy.We are deploying macOS updates by pushing the installer version we want down, then executing "/Applications/Install macOS Monterey.app/Contents/Resources/startosinstall" --agreetolicense in the Files & Processes policy module. The problem with this method is that there is no feedback shown to the user to provide the status/progress. I'm going to write a script to use in combination with Octory & octory-notifier to display the current progress. I'd like to use the policy log output as it is generated, and monitor it with less -f -n0|grep... to trigger whatever update I want in Octory.Is it possible to monitor the policy log as it's generated?

Hello,Can anyone get Google Chrome to install from the Jamf App Catalog? I have three different Macs, and it doesn't work on any of them. I get the error "Unqualified for App Installer" on all three. I am deploying Microsoft Teams the same way, which works perfectly without any issues. I've tried many things and continue to get the same error. Thanks in advance for any help!Steve

In the olden days (Catalina and prior) we used the Software Update option to let users install any Apple software updates available (this doesn't include upgrades like 10.15 to 11.x, but just 10.15.x to 10.15.x+). But obviously this doesn't work now with Monterey (apparently).I'm aware of configuration policies to force updates down onto machines, but we can't do that. We're a 24/7 organization with users in every time zone, and many do not have Silicon Valley quality internet (literally leasing lines from sheep herders in some countries or using mobile satellite terminals with bandwidth measure in KB not MB or GB). So we've trained the users to run the update regularly from our self service portal.I've tried using the Files and Processes with... softwareupdate -iaR...but that doesn't even seem to work for Monterey.Any suggestions? Can't use a caching server, as sometimes these are the only users of ours in a location. Maybe a policy to cache the update and then install but they s

Hello Everyone,We have a department paying for a language interpretation service that comes with a corresponding iOS app (LanguageLine Insight). Currently we have the iOS app set to automatically install on all devices for that department, and if anyone in that department wants to use the app they must contact the department administrator for the authentication (license) code. They chose not to have us configure the auth code into the app during deployment for unknown reasons.Other departments have shown interest in this app so we are now looking at purchasing a site license for everyone to use. In order to facilitate easier billing for each department, the company is going to provide unique authentication codes for each department. The department heads however have shown interest in having the authentication codes pushed out with the app.The app itself does not support this feature. It supports a single authentication code during deployment only. My question is, can I simply add multi

We had a massive issue where all Mac's all the sudden stopped working in Self Service. When a user tried to run a policy from the SS it would fail after 1-2 sec, we created a support case that ended up taking more than 2 weeks to find the issue. We removed all configuration profiles, all policies, and all installed programs - the issue was still there.Just wanted to make a post about this so if someone else has this issue this might be the solution.We where using Jamf's JIM a while back, about 8 months ago we closed down that server but forgot to remove the configuration from Jamf Pro. The Self Service issue started about 1 month ago so therefore we didn't connect JIM and the SS problem.After removing all JIM configuration from our Jamf Pro SS started working again. Ticket number: CS0915102

Setup Your Mac (1.7.0) benefits from the latest swiftDialog 2.1 features and easily allows Mac Admins to specify a minimum OS version to help mitigate zero-day attacksIntroductionApple’s Automated Device Enrollment helps streamline Mobile Device Management (MDM) enrollment and device Supervision during activation, enabling IT to manage enterprise devices with “zero touch.”Setup Your Mac aims to simplify initial device configuration by leveraging swiftDialog and Jamf Pro Policy Custom Events to allow end-users to self-complete Mac setup post-enrollment.Continue reading …

I am setting up Nudge to be deployed via the Jamf App Catalog to facilitate keeping it up to date, but it does not appear to be installing the LaunchAgent even though the listing says it will 1) is this (or should it even be) the intended behavior? 2) Who manages the Jamf App Catalog entries?  Honestly, I think having a separate Nudge Launch Agent in the App Catalog may be better (in order to Balance the ease of Auto-Updates and deployments vs managing the Agent separately if that is also wanted) 

Here is the script I am currently using. I would like to convert it to Jamfhelper so I can use a logo which using the below console output workflow does not allow.  Does anyone know how to convert this to use jamfhelper? #!/bin/bashuser=`/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }'`#get User IDuid=$(id -u "$user")#Display a message to the user and if they click OK it will open the Self Service Policy#Message I want to Display- Make labels in JamfmessageToDisplay="$4"policyIDtoExecute="$5"policyAction="$6"#This will use a here doc MUST PUT ENTER/RETURN AFTER EOF#EOF is an example. You can use ANY word.. IE SHUTTLECOCKbuttonClicked=$(launchctl asuser "$uid" /usr/bin/osascript << EOFbutton returned of (display dialog "$messageToDisplay" buttons {"Delay Upgrade", "Upgrade"} default button 1)EOF)echo "$buttonClicked"# For paramter six we are going to view or executeif [[ "$buttonClicked" == "Upgrade" ]];then/bin/launchctl asuser "$uid" /usr/bin/open "jamfselfservice

I have been trying to get a script working that will run jamf Helper and if the user agrees to the upgrade it will open Self Service at the policy and either view or install the app. So far I have the below which works. #!/bin/zsh ### msg="$4 $singleApp " singleApp="$5" jamfHelper="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" currentuser=$(stat -f "%Su" /dev/console) policyid="$6" action="$7" timeout="$8" title="Application Update" iconLoc="/private/var/tva/casper/scripts/mickey.png" userResponse=`$jamfHelper -windowType utility -title "$title" -description "$msg" -icon $iconLoc -button1 "Dismiss" -button2 "Upgrade Now" -defaultButton 0 -cancelButton 1 -countdown $timeout -timeout $timeout` #Self Service = 2 #OK = 0 if [[ $userResponse = "2" ]]; then su "$currentuser&

I'm trying to automate our deployment process using Jira webhooks and the Jamf API and webhooks.I want to generate a unique invitation URL when a user is added using our existing Jira workflow.Jira (fully approved) > Webhook to cloud function > Call Jamf API computerinvitations and send to user > Jamf webhook on computer added to site > cloud function to complete user setup. The docs for the computerinvitations endpoint are sparse (https://developer.jamf.com/jamf-pro/reference/computerinvitations). My particular question is related to the XML payload i need to pass in the request body. There is a sample in the docs, however I'm wondering what of this sample is required/mandatory and what is optional?For instance the SSH user/password and some other details are set at the org level in settings in "User-initiated enrollment". Also when setting the site in the XML payload, the invitation info in the portal does not show the site i set in the payload. Any help is appr

I have an app that sometimes can be problematic and will require a removal of the app off the iPad and then reinstall. It seems that currently when using the Self Service App, and tapping on "Reinstall" it does simply that reinstall overtop of the app.  I need to have Home Screen Layouts configured on these devices because I hide all apps minus a handful that I require and a few of the default apps. These iPads are quite locked down and I am hoping there is a good solid way to have this accomplished where Self Service will do a remove and reinstall.  

In doing some testing today I've uncovered a rather odd situation. In our environment, our computers flow in via DEP, through a prestage that creates a hidden local admin account. This is the same prestage we've always used since we started using JAMF. It seems the correct location for a hidden admin account home is /private/var.  I'm not sure if this is correct or not, but reading on the community I believe it to be correct.  For a hidden admin account called JSSAdmin, you'd obviously have the home folder as /private/var/JSSAdmin.This has not been my experience in the past.  Up until I'd say Big Sur, our hidden admin account has always resided in the /Users directory.  I noticed in doing some testing for Big Sur that the admin account had moved to /private/var. I assumed this was a change from Apple and moved on. Fast forward to today, and it seems like there's more going on. I have a machine I enrolled a month ago that has the admin account in /Users, and I h

We are looking into Digital Signage but we have an immediate need to be able to display a welcome type message on an AppleTV while offline. So if there a way to configure an AppleTV while online then have it display some type of custom welcome message on a TV while offline? We're looking at Carousel for Digital Signage but looking to get something for next week so not sure if I can get everything working with Carousel in that time. Any recommendations appreciated. 

Hello,We are moving MacOS units from JSS to Cloud. 1) Tried the JAMF Migrator tool. Moved Computers first, seemed to be working but not seeing the result in the Cloud instance. 2) Testing to move Static groups after, not working as the JAMF Migrator does not seem to pick up any (none show in the box), nothing moves. Version 7.1.2 3) I was reading the suggested moving order is Devices, Smart Groups, Policies. Anything else to add or that I may be missing? Anything to ensure we do after these have moved? 4) I was reading JAMF provides a Re-Enroll feat. Is this something I can download or JAMF provides? Thank you, 

Hello, I am currently making a group of kiosk machines with limited functionality. essentially, they will be using square links to scan qr codes. They will not be using the square app. Is there a way through web content filtering to establish allowing all links with the beginning of https://square.link/u/ and blocking all others?

Hi, Does anyone have a DN script with a solution to the above?? TIA