Long story short, when AutoCAD is deployed via Self Service it completed. When I run a pop up asking for permissions for ~/Library/Autodesk on the profile that I run the installer on. I remedy this by giving read and write access to that specific profile. Once done AutoCAD runs along with other profiles. My questions is, can I run a script that gives everyone read and write access to that folder and link it to self service as an extra step in the deployment process? I keep looking but see that it's on a per user profile basis.

Hi, is there a way to install an application and activate the license on a class of computers with jamf pro ?Thanks 

Guys, need help in managing the admin access through script. I'm planing to have a script to put it on policy. In case user needs an admin access can run the policy from self service as and when required.however, that admin access can last longer for 5 - 10 mins. Kindly someone help me with the script with the timing. Thanks for understanding

I'm trying to figure out how to install apps for users that are not local admins. Of course they can install from Self Service just fine, which puts the application into /Applications.The problem is that many apps (Chrome, Firefox, Signal, etc.) will periodically try to update themselves, but the user does not have permissions to /Applications, so the app can't update itself.I was considering installing apps to ~/Applications insteadMaybe something like:Package action=cachethen a script that will runinstaller -pkg /Library/Application Support/JAMF/Downloads/application.pkg -target ~/ApplicationsBut I wanted to ask community first. Is there a "best practise" for installing apps so that non-admin users can update them?

We are starting to use Printerlogic for printer installing across the company.  Manually installing the pkg or via a Policy install from a script I found on the forums here it doesn't install the needed Safari extension.  Found 2 commands to run from Printerlogic's forum that enables it.sudo killall PrinterInstallerClientopen $(cat /etc/pl_dir)/service_interface/PrinterInstallerClient.appI tried adding the commands as Exexute Commands under Files and Processes in the Policy. Watching the install on a MacBook it looks like it works but when I open Safari and check the extension it isn't there.  I can then run both commands manually in terminal and it works as intended.  Has anyone else been able to successfully push out Printerlogic?

Hi,I believe I used to set the "Show item info" preference with a Configuration Profile in the Finder payload. Or the old Global Plist payload.Can't recall. It doesn't appear there anymore.Is anybody using a script to check this off? 

We have a fleet of iPads, some requests come in stating that they would like to print using AirPrint, now I know sometimes some of the printer's are not AirPrint enabled so we enable that functionality, and still AirPrint is non functional, we end up having to add the printer brand app to their iPads and manually enter in the IP on the app to have them use the app as like a middle man t print from the iPad - any remedy out there for traditional AirPrint to work as intended?

When will see Web Clips updated in Jamf Pro to include the TargetApplicationBundleIdentifier string so that we can set an app to open a Web Clip on iPadOS (e.g. set Google Chrome to open a Web Clip instead of Safari)?More information here:https://developer.apple.com/documentation/devicemanagement/webcliphttps://emm.how/t/ios-14-changes-in-configuration-profiles/1285/2 (scroll down to WebClip Payload)

anyone have a scripted solution, or profile setting that can be applied to Edge for Mac to auto open specific files, eg citrix ica files, Remote desktop RDP files etc.?It can be set manually per user within the Edge browser  (right click file in downloads - set to "always open files of this type"), but looking for a way to script and deploy via JAMF for all users across the Mac fleet.  tried using composer to capture the changes when its user-initiated but cant pinpoint the change, nor how to manage that.  Ideally would be via a PLIST, (defaults write per user or manageed preference). No options within current built in schema for Edge in JAMF Pro.   

Friends, We send mass os update command from JAMF to all mac users. Even the OS is update still user getting pop up to update OS. If user select to install now, again its appearing next day. We noticed, its poping up for ventura also. Note- when this pop up coming, its says you can differ 3 timesScreenshots attached,  Thanks .  

Hello guys, any news with screen recording privacy preferences via MDM in Big Sur/Monterey? Is there a way how to enable teamviewer recording without user allowing to? 

we have a policy to restrict access to "Users & Groups" under system preferences, but we do allow the user to be local admin, and I used to be able to use the following script so users can give themself local admin right from self service, but it stopped working.we are using MacOS 10.12.x (x=3,4,5,6) and 10.11.x (x=5 and 6) and JSS 9.96 does anyone have a different way of creating a self service policy so the users can make themself local admins ? thank you in advance for your help. #!/bin/sh if [ -z $3 ]; then currentUser=`stat -f '%Su' /dev/console` else currentUser=$3 fi # Add the current user to the local admin group on the Mac dseditgroup -o edit -a $currentUser -t user admin if [ "$?" == "0" ]; then echo "Successfully added $currentUser to admin group" else echo "ERROR: Unable to add $currentUser to admin group" exit 1 fi exit 0

 Is there any known issue or someone faced the issue?  

The Jamf cloud team is working on an effort to improve the infrastructure of the Jamf Pro cloud environment. This is part of a continued effort to always provide you with the latest features that are available from our Amazon Web Service (AWS) environment, most notably to improve reliability and scalability to reduce environment downtime and better serve you as a Jamf customer. As an incremental step in this process, we are planning to migrate all Client Sandbox Jamf Pro cloud instances on Saturday, December 10, 2022 which will require a small outage of any Sandbox instances. Note: this will NOT affect any Production instances. Thank you

So my new job uses Jamf Pro according to the policy. I was wondering if the policy description is all Jamf can actually do. Currently it does not say it is allowed to capture my screen. Does this mean it is impossible for jamf to capture my screen unless the policy is updated and sent out? I'm just trying to figure out what Jamf can and can't do and if I can figure out exactly what it has permission to do on the system.

Hello, Does anyone here already tried disabling password manager option in chrome using JAMF?

I'm wondering if anyone has a solution for upgrading Python? Our Vulnerability scans are picking up a vulnerability with older versions of Python on a number or our mac machines. It appears Python 3.9.4 resolves this. When I install the package for 3.9.4, it installs, but leaves the older Python Launcher folder in /Applications, and I assume some framework stuff elsewhere? I'm not a python user and am afraid to remove that older folder out of fear(and also believe there is more to python than just that folder) of "breaking" something. We have a lot of dev users in our environment. Thanks for any input on how to accomplish this upgrade.

Hi everyoneCan someone suggest me a good script to change my mac's name to "username-serialnumber" ?Thanks

I thought I'd post this here in case any one ever needs it, as we've had quite a few issues getting this working!If you don't know what Komprise is, then check out their website.Essentially, it's a data management/migration/archiving solution that can do things like take any data that hasn't been accessed in 3+ years and archive it off to cheaper storage, leaving a symlink in its place. When the user then clicks on that symlink it goes off and retrieves the data.To get the symlinks to work you need an Automounter Service installed on client devices. For Windows we didn't have any issues getting it installed, just deploy the package. However for macOS we ran into a few issues.If you try and make a package in Jamf Composer it won't work. The after snapshot doesn't pick up some files for some reason, and we went back and forth with this before finding there were some files missing that stopped things from working correctly.The trick is (much like FortiClient), to deploy a package before t

Any advantages in using a custom trigger to trigger policies vs. using their IDs? Just curious if I can skip a step in adding all the policies I want to call in the script a custom name when they already have an ID attached to 'em. Thanks!

I have a large amount of iPads I am trying to enroll. All of them have already been changed to jamf in apple school manager as the MDM, and the enrollment profile was setup during the training, however, i've suddenly started running into this problem that wasn't happening before. First it happened on just a couple yesterday, and now today it's happening on all of them.After connecting to wifi and tapping next on remote management, iPads are now suddenly asking me to enter my credentials for my university. I have tried my apple, LDAP, and jamf credentials but none of them work. The "require credentials for enrollment" checkbox is off in pre-stage and were never on. These iPads were previously enrolled in an apple profile manager server and we are erasing them all to move to jamf.Any help is greatly appreciated.This is the same problem it seems, but no answer: https://community.jamf.com/t5/jamf-school/error-when-enrolling-ipad/m-p/245610

Hi.Can anyone advise why scripts are failing to remove non crop apps?I have recently added several policies to jamf pro to remove non corp apps.Policies \\ Scripts added for.App Books RemovalApp Chess RemovalApp FaceTime RemovalApp Garage Band RemovalApp Home RemovalApp iMovie RemovalApp Migration Assistant RemovalApp News RemovalApp Photo Booth RemovalApp Podcasts RemovalApp Stocks RemovalApp Time Machine RemovalApp TV RemovalApp Weather Removal copyI followed another script I found on JAMF Nation  :  /bin/rm -rf /Applications/*.app   ( where * is application name )For example :   /bin/rm -rf /Applications/Books.appI also tried with system in the file path:  /bin/rm -rf /System/Applications/Books.appThe scripts run on the macs but don't actually remove the app(s).The log file below is for the script set to remove Books app.  I have not added the whole log file due to this post not being able to exceed 20,000 characters. Log is ful

I am currently studying for my Jamf 100 and have ran into a couple question on the Jamf 100 practice test and I am not sure I understand the material or understand the questions. Can you all give me a hand?Supervision is available as part of a computer PreStage Enrollment configuration. a. True (my answer)b.False  (answer according to the answer sheet) Which method can be used to enroll a mobile device with Jamf Pro? a. Apple School Manager  (correct answer according to the answer key)b. Recon c. Volume Purchasing of Apps and Books d. User-Initiated Enrollment  (my answer)

Would just like to see some input on how other manage adobe CC Normally the Adobe RUM take care of the updates within the version like version 21.2 to 21.3But how about going from 21 to 22 that needs a new full installer, as adobe does not seems to have a normal update mechanism for that So create the package at adobe admin console. But do you then unpack etc this package or just keep it as it is and upload to jamf ? And what communication do you use to upgrade- jamf helper or just self service item? Hope some can give some best practise on this

Many software publishers provide static (non-changing) links that always point to the latest release.Consider this download link for Zoom:https://zoom.us/client/5.12.9.13190/zoomusInstallerFull.pkgIt works, but it always downloads version 5.12.9.13190, even if a newer version is available. Now, consider this download link.Zoom (Intel): https://zoom.us/client/latest/Zoom.pkg As the name suggests, it always points to the latest release. You can use that URL with a Universal Installer script (like the one found here) to create a Jamf policy that never needs to be updated.Similar static links are available for lots of other apps, but they're not always easy to find.That's why I created this thread.  It is my hope that others will share these static links here, so that this thread can be a continuing resource to Jamf Admins.Here are a few more.Zoom (Apple Silicon):https://zoom.us/client/latest/Zoom.pkg?archType=arm64Coconut Battery: https://coconut-flavour.com/downl