Hello all I am trying to put in some configs for our servers into the ~/.bash_profile and ~/.zshrc files of users. It will make connecting to our servers a bit easier for non technical folks with the use of aliases. I am writing a bash script that basically checks if the file exists, if it does it appends to the file, it the file doesn't exist it creates it and then adds the code block into the file. However while searching my own mac i do not seem to have the ~/.bash_profile file . Has anyone does something similar using a script and are there anything things to look out for when doing

Hi,  I'm trying to get a refund on the jamf 100 course, which I will repurchase and attempted. I, unfortunately, didn't have a chance to attempt it within 7 days. I've emailed traininghelp@jamf.com per the info page but just seem to get bounce back emails.  Angelo  

Hello All, What I did that appears to have broken this one machine:I was using this one student machine to create a new bootable external hard drive to be used in order to restore the ASR image. Naturally, the machine installed MacOS, booted to the external, and then tried to enroll. I thought "No, I don't want to enroll this time" since I was just creating a clean boot image. So I went into the "PreStage Enrollment Config" that this machine was assigned to and uncheck it's serial number. This allowed me to boot the machine a second time and not be grabbed by the PreStage so I could continue to customize my boot image - Good.Once stratified, I used the boot image to restore the ASR image onto the local hard drive and re-checked the machine with it's corresponding PreStage.The Machine booted and did the normal "There is a configuration for this machine" thing and it created the new user and logged into the desktop like normal.However, I noticed that the machine was not completing enrol

Hello everyoneI'm using execute command option in the Files and processes payload of a policy and want to run a small script ( 5 lines), I'm using a simple if statement to check whether a folder exists or not and create it, I'm getting a syntax error on the test client when I run it from Jamf however I tested and it works fine if I run it as a script from terminal so this issue is possibly the way I'm using semicolon, this could be done using script payload but I need to make it work this way.This is working as a script if [ ! -d "Path/to/location" ]thenmkdir Path/to/locationSleep 2touch Path/to/location/hello.plistelsetouch Path/to/location/hello.plistfi This is how I added it to files and processes payloadif [ ! -d "Path/to/location/" ] ; then ; mkdir Path/to/location/ ; sleep 2 ; touch /Path/to/location/hello.plist ; else ; touch Path/to/location/hello.plist ;

Good evening all, I work for a large university and am part of a team that manages a lot of Macs with jamf.  I live half an hour or so from work so I'm in the car a lot.  I'd like to know if anyone has favorite podcasts related to jamf or Macs that I could listen to on the commute?Thanks so much.A. Jay

Hello All,I work in a K-12 environment with Intel Macs and M1 Macs. I'm trying to get the Mac OS Monterey Installer package in Self Service and have standard account users be able to install it on their own without the use of our Admin password. I downloaded the Monterey Installer from Apple and then I followed the directions on page 14 of this document: https://resources.jamf.com/documents/technical-papers/Deploying-macOS-Upgrades-with-Jamf-Pro.pdf. I was able to create a package of the Monterey installer using Jamf Composer but I receive this error when trying to install it. I've also looked into some of the scripts that others have shared about Monterey but I'd rather use a package if possible. Has anyone been successful in deploying the OS package? Our students are still using Intel Macs and are standard users so I'm more concerned with getting it installed on theirs rather than our faculty who are admins on their M1s. Any advice? Thank you in advance.

Having issue with postinstall script that I cannot seem to spot. We have done this 100 times, but all of the sudden this package, recreated several times, fails. I have removed and added all spaces and line returns to get rid of anything odd.The package extracts files to a folder then the postinstall script executes MMC_Install.sh to perform the install. I know MMC_Install.sh is sound as I have tested outside capture. The issue is that postinstall fails to launch the sh command. I found the below in console install.log:2021-12-22 10:29:04-06 macos-10 package_script_service[533]: PackageKit: Executing script "postinstall" in /tmp/PKInstallSandbox.0LaYFY/Scripts/macdocusignedit-2.1.0.0-r1.9PgfhO2021-12-22 10:29:04-06 macos-10 package_script_service[533]: Set responsibility to pid: 525, responsible_path: /System/Library/CoreServices/Installer.app/Contents/MacOS/Installer2021-12-22 10:29:05-06 macos-10 package_script_service[533]: ./postinstall: /tmp/PKInstallSandbox.0LaYFY/Scripts/macdocu

Does CVE-2022-22963, Spring4Shell, affect any Jamf Products at all?Thanks!

Looking for a way to use a script, or some other method, to bulk set the Building & Department for IOS devices. I have 440 iPads being delivered in a couple of weeks going to 5 buildings scattered throughout the state.  Thank you.Kevin Sinclair

When I push a policy to deploy software in Catalina, the client system runs the policy, mounts the share but errors out while copying the package. Gets "cp: /Volumes/jamf-repo/Packages/Firefox 74.0.pkg: Operation not permitted" Anybody else having this issue? I have mounted the share in the GUI with the same user used by Jamf and I can access and copy the package. Kinda stumped.

Our users that have recently upgraded to Big sur 11.6.3 or 11.6.4 have had printing issues to our Ricoh printers.  Monterey 12.2.1 might also be affected.We are having to re-install the printer drivers for each user.   is anyone else experiencing this?Tim

Is there a way to set the display name for the Jamf Pro Webapp? Right now it shows the IP address of our secondary server and localhost for the primary. Ideally I would like to change these to the FQDN of the servers. Thanks!  

 Beginning with Outlook Build 16.58 (February 2022 update) Outlook will default to the New Outlook experience. But we want to default to the "Classic Mode" when Outlook will be started the first time after Onboarding. (User can switch to New Outlook later, if wanted. But it should first start with Classic Mode as default.)In this blog from macadmins, there's a solution for this:2. Can I configure the settings ahead of time so that my users don't see any change when 16.58 rolls-out?Yes. Your best option is to explicitly set the EnableNewOutlook preference to integer value 1. You can do this via the defaults command or through a Configuration Profile.The defaults command is: defaults write com.microsoft.Outlook EnableNewOutlook -integer 1 But this does not work for us. We created a Policy with the Office 16.58 package and entered this command as process. After onboarding and starting Outlook the first time, the new Outlook is set as default.Anybody know, how we can set this con

Hello folks, any chance to run Jamf CLI commands like "sudo jamf policy" or "sudo jamf launchSelfService" from a bash script? Thanks a lot|

Hello All, Any info on how to get Cisco AMP to install on machines. I have the DMG downloaded which has a pkg inside. I followed the instructions at this Jamf community URL:https://community.jamf.com/t5/jamf-pro/deploying-cisco-amp-v-1-9/td-p/213222  I tried just using the dmg as well with no luck, any hints or tips are really appreciated  

Can someone guide me or link to a resource? I have my pkg file (trying to put a webloc in the applications folder to then put in the dock). It is not letting me install this and is giving the error that "the package is trying to install content to the system volume." I am stuck, I've tried changing the path in Jamf Pro for the target drive to /Applications but that doesn't help....What do I need to do?

I would like to automatically force Allow access to the Microphone and Camera for apps such as Zoom and Chrome. As part of our security policy we have disabled users from accessing the security and privacy setting. Whenever they need to grant access to the mic or camera for a new app, we have to exclude their machine from this policy in JAMF, have them force pull the policy from their terminal, and then they go in and grant the permission access. We would then re-apply the policy back on their machine and have them force the policy in terminal once more. This is a tedious process that interrupts the workflow for all involved and simply does not scale with our growing user base. Is there a way to have a JAMF config profile push down the permission to automatically Allow access to the mic and camera for specific apps? I've taken a look at the PPPC config settings in JAMF and for the mic and camera it seems like it can only push down the Deny and not Allow setting. Is there a way arou

Hello allI am running into an issue where some machines do not have Securetoken, I have a script that seems to be working with M1 machines but not Intel machines. I tried uploading the script but it didn't show up right so its posed below Script to assign SecureTokens: START OF SCRIPT#!/bin/bash##########################Admin credentials##########################adminUser=$4adminPassword=$5#################################################################This will store the logged in user's name to a variable.#################################################################userName=$(/usr/bin/python -c 'from SystemConfiguration import SCDynamicStoreCopyConsoleUser; import sys; username = (SCDynamicStoreCopyConsoleUser(None, None, None) or [None])[0]; username = [username,""][username in [u"loginwindow", None, u""]]; sys.stdout.write(username + "\\n");')#################################################################################This will prompt the user for their password

No text available

I have a policy that automatically renames and binds systems to AD that runs on enrollment. I'd like to be able to run that policy for systems that are fresh out of the box. I'm able to scope systems to a prestage, but it doesn't seem like Jamf is able to scope systems to policies that haven't run their initial enrollment. Anyone have ideas?

I am looking to disable editing desktop and documents on our network and so far I am not having much look.Our Macs are linked to AD and people login with there AD accounts.We have a suite of Macs and want to make sure people save to network drives and not the devices.So either a script that runs on login and making it so that all accounts are setup as Guest accounts on the Macs would work I guess but not sure how to do this.I have used scripts like the following and they all work when logged into the device but error via Jamf.sudo -u $USER chflags uchg ~/desktopsudo -u $USER chflags uchg ~/documents The Errors  Script result: sudo: unknown user: chflagssudo: error initializing audit plugin sudoers_audit sudo: unknown user: chflags sudo: error initializing audit plugin sudoers_auditI was looking at ideally doing it via a login script as then I can exclude the admin account etc to make sure things can still be done if needed.    

So our organization is looking to have all users upgraded from Big Sur to Monterey. All machines in our organization are standard users, NOT administrators (minus IT of course). I've been trying out different methods and landed upon the erase-install by grahampugh.While this is *almost* perfect for the upgrade, the policy in JAMF never completes and always stays in "Pending".- The issue with staying in Pending is, while testing, the machines upgraded to Monterey successfully, but then the update runs AGAIN. We want to first have users manually install it via a policy in Self Service and then force push it to machines after xx amount of time (say a week after avail in Self Service).  Is there any possible way to get the erase-install policy to show as completed in JAMF OR is there another way to get machines upgraded to Monterey seamlessly? 

I have been using JAMF Admin.app to upload packages, set their Category (Application, Utility, etc) and index them. Last year some time I noticed that if I upload a .pkg, I can't index them until I save, quit the JAMF Admin.app, and then launch it again. Then it will allow me to set the Category and run an index. Weird - but I can deal with it as I am usually just updating a package or two and done.Today, I had multiple packages to test and upload and I noticed that after I uploaded all the packages, saved, and quit, when I opened it again and started setting the Categories and running index, some of the packages would fail to let me do an index and would give an error. I skipped them for now and set the Categories and saved and quit the app. When I launched it again, the categories I set had reverted back to 'uncategorized' and went back to being blue. I deleted the packages that were giving errors when I went to index them, and uploaded them again, set the categories again for the on

Hello, We were using that solution for setting Big Sur deployment policy in Self Service: https://www.jamf.com/blog/streamlining-your-macos-upgrade-process/As far as I understand, it doesn't work on M1 Macs because it requires password for restart - as well as similar modified script for Monterey . There is an error in execution log: Error: failed to authorize for installation. Provide a password with --stdinpass or --passpromptI am thinking to create temporary admin account for policy execution, then delete this account when Monterey is installed. Would you please help me to modify deployment command, where account name and password should be added? ##Start macOS Upgrade/Applications/Install\\ macOS\\ Monterey.app/Contents/Resources/startosinstall --agreetolicense --nointeraction --forcequitapps --pidtosignal $jamfHelperPID >> /var/log/startosinstall.log 2>&1 & Thanks! 

I need to deploy Cisco anyconnect VPN client on MAC endpoints, however post installation, it gives prompt to end user to allow the app from system preferences.I want to bypass this step so that post deployment end user does not have to go to system pref to allow the appXattr command i am using is sudo xattr -d -r com.apple.quarantine /Users/username/Downloads/AnyConnectClientwhere the AnyConnectClient is a folder where the anyconnect.dmg file residesHowever, the command is not working for me. post installation, it still asks for user to allow the app from system preferencesDoes xattr work on .dmg file? Do i need to install the app first then run the command and then give path to some app system file? If so, how do it create package of the installer which is free of this restriction?