Thanks to Mr Larkin's awesomest script ever :) I have now managed to geta report for Users and Macs by using Extension Attribute as below. Login to your JSS Settings Inventory Options Inventory Collection Preferences Extension Attributes Add Extension Attributes Input Type: Populated by Script Then copy and paste the script below in to "Mac OS X Script Contents" section #!/bin/sh echo "<result>`dscl . -list /Users UniqueID |awk '$2 > 500 { print $1}'`</result>" Click "OK" Click "Save" In Inventory create new Advance Search and in Display Fields select the Extension attribute that you have created. Thanks again Tom Cem

Hello,We are facing issue with dmg files only on intel macs. The error msg is  " Error: An error occurred attempting to mount the package "ideaIC-2022.2.1-aarch64.dmg". ". But works fine with M1 Mac's. I had attached the logs screenshot .

Does anyone have recommendations for Mac OS-friendly hardware monitoring solutions? Whether they be custom scripts or tools within Jamf (preferred) or a 3rd party platform. I would like to be able to get alerts on common hardware and software issues such as: Hard drive capacity Fan status CPU/mobo temps Other critical hardware issues such as bad memory, bad HD sectors, etc. Application load time Application crash data I know Lithium was a great tool back in the day but I haven't seen much on this front in recent years. We currently use Zenoss Core for monitoring our server infrastructure, but it doesn't scale well to desktop compute. Any recommendations would be most appreciated, thanks!

I have traversed this site, looking for scripts or other means to provide users temporary admin rights. Most discussions provide two scripts, however, they do no show how to configure them from within Jamf JSS. One such example is from the github site JPDyson https://www.jamf.com/jamf-nation/discussions/6990/temporary-admin-using-self-service.My question is, how are these scripts set up in Jamf JSS, so that they will work? Or, if there is a better approach, that would be great to know...

I have a profile set to use Message as the screen saver. Dose anyone know how to set the message for the screen saver via script?Thanks

Hi there,I've had a request from our CISO about restricting the following command (and any others in the future):sudo -sWe still want to allow people to run sudo, but within their own shell, so restricting access to Terminal/iTerm2 is not an option.What we need to do is still allow people to run sudo commands, but not be able to open a root shell by using sudo -sAnyone have any ideas?

Hello,We're scheduling to update all our machines that can update to the latest macOS Monterey.Running across many issues, mac's prompt 'mac up to date' or 'no updates available', tried manually on the app store, but just keeps spinning.would love any advise

Is there a way to push out a new NTP server address to iPads? Our ISP has blocked access to all NTP servers in an attempt to mitigate exploits in the NTP protocol (there excuse) and the only on I have access to is theirs. I was looking around and could not find a way to push out a new server address...

Script works properly when launched from terminal, but fails after being executed as a policy. Self Service tries to open, then crashes. App version is 10.35.0, the OS it gets executed from is 10.14.6, fully patched. The same script fails on a manually upgraded Catalina as well. (Did it for testing purposes, just to see what happens; system is already running 10.15.7).     #!/bin/zsh #   ######################################## # Global Variables ######################################## loggedInUser=$( /bin/echo "show State:/Users/ConsoleUser" | /usr/sbin/scutil | /usr/bin/awk '/Name :/ && ! /loginwindow/ { print $3 }' ) # Get the current user - shell agnostic (sh, zsh, bash, dash) myJamfHelper="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" # Path to the jamfHelper binary - not part of PATH by default ########################################   ######################################## # XXXXXXX XXXX OIT Notification Variables

Hello, I am relatively new to working with JSS, but here is what I want to accomplish. I would like to set a Screensaver for all users that uses the Message screensaver with our custom text. How would I go about doing this? I assumed this would be a simple task, but there isn't any new information that I can find. Thanks in advance!

There was a few questions in regards to what artists were being played between sessions at the JNUC so I figured I would share that list and the reasons behind the choices. Since we are a midwest company every song that was played was from a local artist, either based or connected to the Twin Cities or Eau Claire, WI. If you liked any of the songs you heard I highly recommend purchasing albums from any or all of these artists as they are all stellar. Just another reason why we love the midwest as much as we do. JNUC - Artists: 4onthefloorAstronautalisAtmosphere The Bad PlusThe Beads Bob Dylan Bon IverBrother AliBuffalo GospelCalamity And The OwlCaroline Smith & the Good Night Sleeps Charlie ParrCloud CultThe Daredevil Christopher WrightDark Dark DarkDead Man WinterDessaDoomtreeFarewell MilwaukeeFat Maw RooneyGayngsThe God Damn Doo Wop Band Haley BonarHalloween, AlaskaHappy AppleHobo Nephews of Uncle Frank Hüsker Düi like you.The JayhawksJeremy MessersmithKid DakotaLifte

Hi everyone,To give a little context. The company I work for is doing our compliances and I need to ensure that the numbers of computers I have in JAMF are equal to the Crowdstrike console. Right the numbers are not right in Crowdstrike, lots of computers are not showing because of bad deployments, the version of Falcon and MacOS is not up to date, etc. So I'm trying to push the system extension profiles and full HD access and I often get those errors below.Even tho I uninstall Crowdstrike and still push those profiles, I get the same errors (below). I followed the instructions by the book from Crowdstrike here: https://falcon.crowdstrike.com/documentation/22/falcon-sensor-for-mac , nothing... I get errors. Is this a JAMF issue of Crowdstrike not being up to date with the MacOS? My environment is Mac with Monterey, Big Sur, Catalina and some Mojave. I still have lots of Intel and getting more M1 now. I get errors on Monterey with Intel and M1 so I don't know exactly what

Is this happening to anyone else?https://apps.apple.com/us/app/jnuc-2022/id1388365624  

Can't find on Apple Safari 13 installer. Available via Software Update, but I would like to package it in deployment policy. Please share download URL - Thanks! :)

Does anybody know how to get the URL to auto-populate when installing Anyconnect? I know it only takes a minute, but looking to get it added.

Happy Friday Jamf Community! I was wondering if it was possible to push a configuration profile as part of a policy. I built out the Wacom PPPC per this excellent post  and can scope existing Wacom users to it. My hope is there would be a way to link it to the install policy for any new installs.We have roughly 700 Macs enrolled in Jamf and currently 25 people needing the policy. I'd hate to have to push it to all 700 just to catch a small handful of people that may need to install it for the first time in the future. I appreciate any guidance you can offer.

Greetings Jamf Nation!Many organizations are likely running software updates on their fleets this week, as well as with new Jamf Pro versions. As a Jamf who knows a few things about macOS software updates and their various nuances, I want to share a couple tips, as well as explain a bit of what goes on behind the scenes in the macOS update process, specifically by way MDM commands on macOS 11.2 or greater.Some organizations deploy macOS updates leveraging a full installer and the startosinstall command, some will use tools to compel users to update on their own, and other will use Jamf policies or MDM commands to update.As the macOS 11.6 release is not yet distributed in a full installer by Apple, there can be some downstream consequences to an organization's preferred software update workflow, including issues updating to that version via MDM commands due to PI-009722, explained later in this post with workarounds. tl;dr – Summary is all at the bottom... Why MDM-based update

Has anyone had this issue before where packages in self service keep failing to install due to not being able to mount the distribution point? I can manually mount the distribution points on the machines and get into the folders but it keeps failing when trying to do so via self service to install apps. Currently running the latest OS and Jamf Pro 10.2.1. I have tried changing the user account on the distribution point for read and write access and sometimes that works to fix this but sometimes it doesn't. The time is correct on both the client machines and the server that jamf is hosted on.

Over the years, you, our Jamf Nation members, have given us feedback around how we could improve your community experience. And for that, we’re so grateful! It led to the remodeling of this very community last summer and allowed us to create more meaningful spaces for you to connect and learn from each other. But you want more, and we want to give you more! You (singly and collectively) communicated that you want a space within Jamf Nation where you can share deeper, more detailed technical thoughts. You want to hear more creative and common ways to use Apple and Jamf to achieve success in your environments. You want a technical blog space to share these ideas and workflows. Well, folks, we’re happy to announce we heard you, and we’re making it happen! We’re excited to introduce Tech Thoughts, a technical blog that’s dedicated to serving as a space where Jamfs and Jamf Nation members alike can share their expertise on important, time-sensitive technical topics. You are all a wealth of

Hi all,as 12.3 is out just couple hours I went and gave it a try on my lab machines. At first I was surprised taht JAMF Connect (2.10.0) was not shown at user login screen and instead I was presented with native system login. I have discovered that 12.3 is reseting login database and therefore to revert to JAMF Connect login screen there is a need to re-apply authchnager command. In my case I created smart group for all machines installed 12. and scoped policy which only has file and process payload defined with following command "/usr/local/bin/authchanger -reset -jamfconnect" to the smart group earlier created.Big thanks and creds to TTG and his guide: https://travellingtechguy.blog/re-enable-jamf-connect-login-window-after-major-macos-upgrade-monterey/

Hi  I recently found a device with an unknown profile installed by an user.  I don‘t know how to delete it or how to find devices with the same profile (smart group doesn‘t work)  

Hello,I am new to Jamf Pro and I am trying to configure a web clip to automatically open with the Google Sheets app. There is a way to open a google docs using googledocs://... with Google Docs apps.Is there a way that we can have a spreadsheet web clip to open up with Google Sheets?Any advice or work arounds with this?Thank you!

Cannot run Following on policy curl -o '/Users/Shared/agent.zip' https://ggd.masked/csm/profile/downloadMacAgent/id ; unzip -a /Users/Shared/agent.zip; cd /Users/Shared/AgentSetup; installer -pkg CAG.pkg -target /Gives me Error on PolicyResult of command:% Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 0 0 0 0 0 0 0 0 --:--:-- 0:00:01 --:--:-- 0 28 27.7M 28 8162k 0 0 4676k 0 0:00:06 0:00:01 0:00:05 4704k 100 27.7M 100 27.7M 0 0 11.8M 0 0:00:02 0:00:02 --:--:-- 11.9M Archive: /Users/Shared/agent.zip checkdir error: cannot create AgentSetup Read-only file system unable to process AgentSetup/. checkdir error: cannot create AgentSetup Read-only file system unable to process AgentSetup/CAG.pkg. checkdir error: cannot create AgentSetup Read-only file system unable to process AgentSetup/config.data. /bin/sh: line 0: cd: /Users/Shared/AgentSetup: No such file or directory installer: Error - the

Please let me know if you have problem with wifi connection to corporate network after upgrade macOS to version 12.5. Now in our environment every Macbook prompt users for credentials before connect to wifi instead of using installed certificate. In version 12.4 everything worked fine. I would be grateful for the tips. Thanks!

Hello, I am looking for a script for activating the right click for an apple mouse.Thanks for your help,