Previously the script below from another message made it possible to have custom screensaver files (Photos) that would rotate.  This no longer works in macOS Sonoma.  Does anyone know a new method to have the screensaver call photos from a particular folder in somona via a script or another way.#!/bin/sh## get current useruser=`ls -l /dev/console | cut -d " " -f 4`## get macOS version(s)osMajor=$(/usr/bin/sw_vers -productVersion | /usr/bin/awk -F"." '{print $2}')osMinor=$(/usr/bin/sw_vers -productVersion | /usr/bin/awk -F"." '{print $3}')## set key items for screensaver/usr/bin/sudo -u $user /usr/bin/defaults -currentHost write com.apple.screensaver CleanExit -string "YES"/usr/bin/sudo -u $user /usr/bin/defaults -currentHost write com.apple.screensaver PrefsVersion -int 100/usr/bin/sudo -u $user /usr/bin/defaults -currentHost write com.apple.screensaver showClock -string "NO"/usr/bin/sudo -u $user /usr/bin/defaults -currentHost write com.apple.screensaver idleTime -int 60## c

I watched the presentation given by @chadlawson  and uploaded to the Rocketman Tech channel on YouTube (https://youtu.be/6xVmJqpbEHI) over the weekend. I decided to dive in and change a script that puts a machine into a static group (credit to @sdagley ) but whilst I can see that I'm getting a token, the computer is not going into the Static Group. The reason for changing from Basic Auth to Bearer Token Auth is because Basic Auth is deprecated so I'm trying to get this figured out before there's a panic.Just wondering if anyone can see where I'm going wrong or suggest a better way to do this? The first script below is my working script using Basic Auth and the second longer one is the one using Bearer Token Auth. The second script is mostly using code from Rich Trouton's blog on Bearer Tokens and I do get the Bearer Token but whilst I seem to have no errors, the machine is not added to the static group.#!/bin/sh # AddComputerToStaticGroup.sh # Adds the computer to a stat

Hello guys, I have an IBM ACS software which I need to package and show in Self service. This app doesn't have a regular dmg or an installer. It installs via a script:  Once the script runs, it puts the app in the Applications folder:   This is what the script does: #!/bin/bash # Description: # This script will install IBM i Access Client Solutions in the Applications folder on Mac OS X # # Usage: ./install_acs # args=$@ args_length=$# arg1=$1 prefix_arg1=${arg1:0:9} suffix_arg1=${arg1:9} printhelp="no" default_noparms="no" reset_start_over="no" quiet_mode="no" exclude_functions="no" install_type_shared="no" install_type_preset="no" declare source declare target declare old_target declare source_AcsConfig declare target_AcsConfig declare old_target_AcsConfig function copyProductFiles { echo "Copying product files" >> $HOME/IBM/install_acs_log.txt #Remove the old app so we don't leave cruft laying around. rm -rf "/Applications/IBM i Access C

Hey guys, I have no idea how to get out of this one. Any help is greatly appreciated. I support a High School and a University. The High School started using Jamf a few years ago. This year the University decided to finally get a MDM. They decided to use the High School Instance so I created Sites. This busted my Configuration Profiles. We use a Enterprise WIFI similar to eduroam. When I moved the lab computers to the site it lost the WIFI. I can't connect a Ethernet to USB-C connector because they are running Sonoma and you need to Allow to use Accessories. I can't login, more on that... In addition when I did a erase/install with the laptops last summer Jamf broke my Lab Admin account. It was working at first but then stopped. I created a case with them but they were unable to give me any answers. I thought it was LAPS but I never turned it on and confirmed it is not on. The recommended solution they gave me would be to wipe and re-enroll the computer (and delete the inventory record

Hello All, I am very new to Jamf Pro and Im trying to teach my self how to build packages and deploy them in our test environment.   I am having a problem with an app downloading to my Macbook using Jamf Pro  I have built the package and it shows up in Self Service.  But when I download it, it said Installed but it does not show installed on the MacBook. I checked the policy logs and it show it starts to install the app but then it closes the packages.  I have included the steps from the log [STEP 1 of 4] Executing Policy Steam [STEP 2 of 4] Downloading https://diamond.jamfcloud.com/jcds/downloads/steam.dmg... Verifying DMG... Verifying package integrity... Installing Steam... Closing package...

Hello, We have been doing different things for different packages. But what is the best way to superseed a policy/package? As in if a software releases a new version and you want to update the version you are using right now to the newer version. Mostly we have been creating a new package and policy, and then deleted the old package and policy.

How do you all keep your Mac Clients on the latest MacOS Version? Is there a way to force an Upgrade? Because the "new" Software Updates Option doesnt do anything for us. When we try to trigger updates on the Clients nothing happens. 

Does anyone have an extension attribute that will return the version of Jamf Connect a Mac is running? Our 'Patch Management' tells me we've got various out-dated versions floating around in our environment and I want to gather all of these into an Advanced Search or Policy so I can take action.

I have looked through the policies that are able to be created in JAMF and can't find anything related to what I am trying to do.   We have iMacs in classrooms connected to a projector and the iMac is defaulting to extend and would like for the default to be duplicate. Any suggestions?     

If Jamf Admin is being discontinued, How do we index a package without it for an uninstall?

OK, so I have a smart group that shows Macs that are on Mavericks but have not upgraded to 10.9.4 yet, and I have the Apple 10.9.4 combo updater in Casper Admin, and I have a policy that installs the 10.9.4 combo updater, scoped to the smart group that shows Macs that need the upgrade. This part I love, it's fantastic. The problem is that on an inordinately large number of attempts, the install fails, and the error every time is that the package could not be verified. But more than half the time it works with no verification error. This is an Apple updater, it's checksummed, there should be no verification issue here. So what's up, Doc ? Actual message from the log: Verifying package integrity... Installation failed. The package could not be verified. So why would it work on most machines, but fail on a lot of them? Will I need to disable verification to get it to work consistently? Is there some underlying issue I'm not aware of? Thanks for input.

Hi, Is anyone getting this error with the Jamf Connect Login window? We are Using OKTA and JAMF Cloud. I have logged a ticket with Support and we tried recreating the profiles(login, license, Jamf Connect), scoping and unscoping to specific machines etc. Each time I log off/restart the machine loses the license. Checked /Library/Managed Preferences/ and I can see the Jamf Connect plist(s) with the license keys. Can see my profiles in System Prefs. I know the license file is valid as it will sometimes license at random then 'disappears' after log off.

Hi all,I'm running in an issue concerning the installation of the OpenVPN app.Basically I've deployed the after converting the .app into a .pkg via Composer, and the app works just fine untill our users need to connect via profile. If the user tries to connect to the VPN they are greeted with an error. My issue is that, if I try to download the application using the original .dmg file (but that needs an admin login, that our users don't have) and run OpenVPN afterwards no error occurs and both the profile and the app work just fine 100% of the time.I think this leaves me with 2 options: either let our users download and install OpenVPN via .dmg but without any need for an admin password or I need to push to our users every file that the .dmg install on the computer and not just the .app.I'd really like to go for the first option since it could be useful in plenty other situations but sadly I don't know how to do neither of them.Thank you for the help!

I'm currently trying to setup a group of iPads to function as kiosks that are locked to a browser window that the user can't get out of. Previously for this we used a combination of an app called Managed View and Guided Access, however since we now have Jamf, we want to be able to configure this through Jamf Pro so that we don't need to manually setup iPads to function this way. I've followed all the documentation I could find relating to Single App Mode, however whenever I try to push out the config profile for enabling it I simply get a "failed" message in the Jamf Pro logs. This app definitely supports SAM and ASAM, so I'm confused why it is proving so hard to setup. I can get the app deployed and working just fine, however the config profile to limit users to just the app is proving to be very difficult. Any advice? I'm considering having a go at a different Kiosk app but the one I'm working with has better documentation than most.

 Hey Gang, I have gotten 1 computer out of 300 that refuses to finish a jamf recon (either at login or on demand).  I am pretty sure that my EAs are OK as the collection works perfectly fine on all of the other Macs.  I did try "jamf recon -verbose" and it did provide me a detailed listing, but that didn't tell me much info on where to start troubleshooting... Could it be a particular app or corruption that could be causing this?  I am looking for some ideas on what to try next...

I've been looking for a way to silently uninstall the zoom outlook plugin but everything I see is just running the uninstall.app. Is that the only viable option (remote connect and uninstall) or is there a better way to do it?

How are you updating your users to the latest version of Safari (17)? Mac Apps does not have Safari available and you can't add Safari to VPP, so I tried creating a package using composer and adding it to a Patch Management policy and pushing it that way, but that is not working. I also tried just creating a regular Jamf policy and adding the package there and pushing it out, but no dice even though the logs show it was installed successfully, but when the machine runs recon it still shows the old version of Safari, not Safari 17. I have Software Updates (System Settings>General>Software Updates) disabled because Restricted Software was not restricting users from going to macOS Sonoma, so this may have something to do with why I'm not able to update these devices to the latest version of Safari, but at this point It's just a guess.  Any help is greatly appreciated!

I am relatively new and not very knowledgeable when it comes to certificates.  About a year ago I successfully created our company's push certificate for JAMF Pro (cloud version), and it is about to expire in a couple weeks.  In attempting to renew our push certificate for another year I get the following message after I upload the new .pem file I downloaded from Apple.  "WarningExisting devices that are enrolled with Jamf Pro will no longer respond to push notifications." What does this mean?  What will happen if I complete the process as-is?  Will I need to re-enroll my devices?  Will they stop responding to JAMF?  Should I wait until the actual expiration date to create a new push certificate?   I believe I am using the same Apple ID, but is there a way to check or verify this?   Any help would be appreciated. Mark BishopCommunity Action, Inc. of Central Texas

Hey,What is the recommended way of handling compliance with the upcoming Sequioa release? I have used the Jamf Compliance Editor to create config profiles for Sonoma, which was very convenient, since the JCE let's you upload perfectly name config profiles for Sonoma and its predecessors.If I am not mistaken, the JCE does not currently support Sequoia, yet. For now, I have set major OS updates to be deferred by 90 days, so I can sort this out.How do you guys handle this?When is the JCE likely to be updated? Thank you for your help.Toby

We set our users to be Standard users on their Macs, and which prevents them from being able to delete Wi-Fi SSIDs. Sometimes, we've needed to allow them to do so, so we have a script in Self Service that will delete a known SSID when run.#!/bin/sh ## Get the wireless port ID WirelessPort=$(networksetup -listallhardwareports | awk '/Wi-Fi|AirPort/{getline; print $NF}') ## Run a SSID removal if its present networksetup -removepreferredwirelessnetwork $WirelessPort "NAMEOFTHESSID" 2>/dev/nullBut we've run into a situation where a work-from-home user wants to delete an SSID from their home network, etc. I was wondering if there's a way to a have a script that would allow the user to choose from existing "preferred wireless networks" SSIDs and choose which one to delete? That way, we could just have one "Remove Wi-Fi Networks" item in Self Service, and users could remove whichever one they want.

Following this weekend's update, I decided to start testing out the "Available in Self Service" option for App Installers.  This works great for machines that do not have the application installed already.  The problem is that App Installers that are set to Available in Self Service do not adopt previous installations of those applications unless the user goes to Self Service and re-installs the application using the App Installer route.Has anyone found a good method to get apps previously deployed by policies transferred to App Installers (Available) without forcing the end users to go into Self Service and re-install the program?

Hello everyone,Now when we have left our old eDirectory and are up en running with our Entra en AD I put together some Apple Scripts for mounting network volumes - home and shared. The scripts work okej but I think it would work even better if you made them as bash script instead. But I'm not good att bash at all. Maybe someone's willing to help me out? One of the scripts I've done look like follows:     set userName to short user name of (system info) set Share_Path to "smb://" & userName & "@our_server_address/home$/" & userName tell application "Finder" mount volume Share_Path open userName end tell      Thanks in advance,Jonas

We're having issues trying to install Unreal Engine in our lab of 25 Macs. I've been searching for a solution but have come up empty handed. I found an unanswered question from someone with the same problem in the Epic Games Launcher community, and I've borrowed his description of the problem, as he explained it better than I could:  We've installed Epic Games Launcher and Unreal Engine 5.2.1 on all of the Macs. When any other user logs in to use Epic Games Launcher and Unreal Engine, in the Unreal Engine section it asks to install Unreal Engine again, not recognizing that there is already a version installed. When you click Install it tries to install it to the exact same place and throws a ‘Directory must be empty’ error. (Obviously the directory isn’t empty because it already contains Unreal Engine)Unreal Engine is installed to the default /Users/Shared location, and permissions on the /Users/Shared/Epic Games and /Users/Shared/Unreal Engine folders (and their contents) ar

Morning We have few Macs which have failed escrow there FileVault key back to Jamf. I have setup escrowbuddy and this seems to be working well bringing these keys back.I can see the policy has run to setup escrow buddy the policy also inculdes defaults write /Library/Preferences/com.netflix.Escrow-Buddy.plist GenerateNewKey -bool trueI can see users have had a fresh login.While machines now do seem to have a vaild FileVault key. I'm seeing two issues. FileVault 2 Enabled being switch from enabled to Not enabled.  FileVault 2 Enabled set as Not enabled.This depsite the fact that the effected machines have a vaild Key, showing as encrypted and have a FileVault 2 enabled user.As anyone else seen this behaviour before?Thanks  Thanks

Hello All I am trying to Uninstall Zscaler i have script but for Uninstallation it is asking me password as below:Anyone have workaround for this?Note: It is not accepting user account password