Wondering if anyone else has seen the following behaviour and has a solution. I am requesting a system certificate from a Microsoft CA using the 'AD Certificate' payload within a configuration profile. The Mac is bound to AD and has the appropriate root trust certificates installed for the CA, however the request fails with the following error. This same profile works fine on our Mountain Lion clients so I am wondering is this a feature in Mavericks. Dec 10 10:33:03[2580:1]:ADCertificatePayloadPlugin.credentialsForDomain domainname = ETF; username = <deleted>$Dec 10 10:33:03[2580:1]:+ADCertificatePayloadPlugin.getCertificateFromServerDec 10 10:33:03[2580:1]:+GetCertificateFromCAServer credentials username = <deleted>$Dec 10 10:33:04[2580:1]:+GetCertificateFromCAServer gss_aapl_initial_cred status = 0Dec 10 10:33:04[2580:1]:+GetCertificateFromCAServer running as euid = 0Dec 10 10:33:04[2580:1]:+GetCertificateFromCAServer ca_name = <deleted>Dec 10 10:33:04[25

So, I have modified the classic LAPS API script to work over the new Jamf Pro UAPI (you can check it out it here: JAMF UAPI LAPS script ), did not realizing it will only work if jq binary is installed and working on the mac, so I am trying to put together a policy to install jq at enrollment complete and to push it to all the macs which don't have it currently installed. What I have tried:Package the jr binary from my work mac, where jq is installed and working from /usr/local/bin/ using ComposerTo make sure it will be executable, I added "Execute Command" to the policy: chmod +x /usr/local/bin/jq​  But if I check for it via: which -a jq or try running curl with jq pipe - it can't find it...I thought maybe $PATH is set incorrectly, but it looks alright to me:    akamenev@MacBook-Pro bin % ls -lh total 0 lrwxr-xr-x 1 root wheel 89B Sep 22 17:41 authchanger -> /Library/Security/SecurityAgentPlugins/JamfConnectLogin.bundle/Contents/MacOS/authcha

I am trying to make a software restriction to kill and remove Slack on macOS but for some reason it does not seem to be working. I have tried using slack.app and the service name which is just slack, the app just keeps running happily. Any ideas? I work for a financial firm that is extremely strict on management and they don't like Slack, it is what it is.

Hello, We are in the process of selling many of out 8th grade MacBooks to the students. We are marking them sold in our cataloging system and have run the removeframework (along with many other tasks), but we never figured out how to script deleting the device from the JSS. Using our cataloging system I can create a list of serial numbers for the devices to delete. Is there some way to use this list of serial numbers to automate deleting the devices? My quick look didn't reveal anything, but figured I would check. Thanks,Tim

If you participated last year, remember the fun little "side quest" for lack of a better term that Jamf provided last year to earn points? Go to this session... visit this booth... say hello to this person... What do you think this year's gonna be, if anything? I know I sure had fun with this part of it!

I'm trying to deploy LEGO Education Spike https://apps.apple.com/us/app/lego-education-spike/id1469183033. When I search it in Apple School Manager it shows up as both an iPad and Mac app (I've never seen this before). I purchased licenses but they are only showing up in the Mobile Devices Apps section in Jamf Pro. How do I get it to work for Macs as well? 

Hello everyone, I have a few machines in a lab environment where the primary iMac is attached to an external monitor. Once a new user logs into the machine, the external display automatically displays to the right of the primary iMac by default. Has anyone determined a way to set the iMac to view the external display from the left of the machine instead? Thank you in advance.

I've seen a number of postings regarding installing Sophos Central (including https://www.jamf.com/jamf-nation/discussions/12348/script-to-launch-sophos-cloud-installer which ultimately points to a derflounder post) but I'm not having any luck at all with getting things to work... Can someone help me out a bit? Have things changed since the referenced post?

Please consider the following Script, delivered as the sole payload of a Policy "_DEV LWW Test:"#!/bin/bash sh -c 'sleep 300; echo good > /tmp/ok' &There are plenty of other Jamf Community posts (here's one and another one) which offer use-cases and success stories which involve forking a process to the background. Jamf Pro; Install & Upgrade methods for macOS Catalina is a particularly relevant thread for us. The Script above is a stripped-down, abstract version of a larger Script related to software updates.I have configured the Policy to trigger upon "Recurring check-in" and with Execution Frequency = "Ongoing." As shown in the attached picture, I see different results based on how the Policy and its Script are invoked:Automatically on the 15-minute check-in timer: The script runs without error (according to jamf.log and the Logs in the Jamf Pro web interface) but there is no sh -c sleep 300 process left running in the background.Manually via jamf poli

I recently saw this pop-up appear for a few seconds after a fresh boot of a 2020 Intel MacBook running macOS 11.6 Big Sur on Jamf Pro 10.29.2.-Exactly what process is taking place while this dialog appears. Is it a Recon inventory update?-What circumstances does this dialog appear?-Why is the Jamf process presenting a user-facing dialog in this situation?-Other than clicking "OK" is there a way to proactively hide this type of Jamf GUI pop-up? The Mac is in Apple Business Manager and fully managed/supervised by Jamf Pro. If I recall correctly, this particular Mac had been shut down and offline for a week or more (if that matters).I think I have only seen this once or twice in 5+ years. Finally was able to snap a photo of it.

Hello, Does anyone know how I might utilize the df -h command to create a report on hard drive sizes and how much of each drive is being used? Possibly an extension attribute??? Thanks! -- Adam VadalaInfrastructure Engineer | CareerBuilder773 353 2870 | adam.vadala@careerbuilder.com

Hi guys, still a bit new to JAMF, apologies, but thanks for the assistance so far! I don't have access to Composer yet, but I do have a working script that goes out to the web, pulls an xml (plain text config file for an application configuration) to the users machine, then places that xml file into the users application support folder. Works perfectly. However, I don't have a location that I can host this said xml file, therefore, I think I would need to create a package that have the file inside of it, has a script that places the file in the correct location, and have Jamf run that package after installing a certain application.  Or am I going about this the wrong way? Should I just have a script that creates this text file from within the script, saves it as an xml, and places it in the users application support folder? Would that be better? Pros? Cons? Thanks for any input.  

I've setup a SMB shared folder and can successfully connect to it from my Mac with the same username and password i have added in JamfPro, but it will not connect via JamfAdmin.  It tells me it is unable to mount the Distribution point.  Do you need Internet Firewall rules for Local Distribution points?  I would assume if a Mac is inside the network it would connect otherwise it would hit the fall back location which would be JamfCloud.  

Hi all, newbie to scripting and Jamf, so please bear with me here.  I would like to create a script that pulls a config file for our VPN client and places it in the users library/application support/application/config folder. I think the script would be as follows: #!/bin/bashcurl https://website.com/place/file.plist -o ~/Library/Application\\ Support/ApplicationName/Config/file.plistDoes this look like it would work to download to the users Library folder?  Edit: input the -o in the middle of the curl line, forgot to input that there!

Hi folks, This is my first post and pretty new to mac environment. I have solid experience on Windows. I'm trying to create 3 profiles on fresh mac image i.e 1st profile should have standrand, 2nd moderate rights, 3rd profile should have full admin rights.  I have tried many scripts from online , but none of them didn't give me any luck. Please direct me to correct direction i.e sample scripts\\references\\good articles. Your assistance in this matter would be greatly appreciatedThank you 

I've packaged Sketch so that we can push out. Is there a way to automate the registration? I haven't been able to fund anything on this to date.

When I double click the license key I get from Jamf for Jamf Connect it opens profiles on my mac, then say there was an error opening ...   Contact your network administrator for more information.  Now I am the network administrator and my therapists has tried hard to stop me from talking to the voices. LOL.  I'm new to Jamf so I might be doing this wrong.  I also am trying to upload the key to Jamf Cloud and it comes up with errors about Unknown Keys.  I've asked for a new License file from Jamf incase I got a corrupted one but the same thing happens on the second one.  I've also email support this but thought I would check with the community.  

We have some custom patch definitions defined in Title Editor, and this is my first time using it.  Our Mac admin, who recently left, had setup this definition, but it only had the one version. I went in and added a newer version, 2.12.02.1796.  After a few minutes our local (on-prem) Jamf Pro instance shows the new version listed.  But now, the Patch Report identifies all computers as being on the new version.If I open the inventory for any of these computers in JAMF Pro, and check its Applications list, the software version is 2.11.02.1765, as expected.How is Patch Management reporting all as 2.12.02.1796 ?If I create a Smart Group to look for 2.12.02.1796 then it accurately shows only the 1 machine i have actually installed the new version on. Thanks in advance

Hey everyone,I am not sure if this is a regurgitated topic, but I wanted to ask if there is any best practice, suggestions and/or ramifications for removing apps that are native to OS X, like FaceTime, Messages, Mail. We have Lync and Microsoft Outlook that we want to direct users more to. I've seen by searching in Google that changing the permissions or running rm -rf /Applications/[nameofapp].app are possible solutions to this. Appreciate the feedback.

Hey Guysvery new to JAMF, need some expertise.From yesterday evening, I noticed all our packages are showing Availability pending.nothing is getting installed when we enrolling the device.not sure if Jamf upgrade 10.32.2 has broken this. is it known issue to anyone else here in NZ?I have tried to re-upload the existing package with no success, it sits there but doesn't finish it.Thanks

Hi,My company is using Jamf to link Macs to an AD. I don't have the details but I can dig logs and product names if necessary. I recently got a new replacement Mac and got no clear instructions from IT on how to set it up. They just said to install what I needed and then run the Jamf enrollment. They didn't respond when I asked about Apple migration assistant.I used the Apple migration assistant to move all my data and config, then run the Jamf enroll and everything worked. Now I got a (periodic) notification to change my AD password, but it wouldn't allow me to change it using "Users and Groups" stating that it could not reach the server.I dig into console logs and found this:opendirectoryd default 11:39:37.407202+0200 opendirectoryd original node '/Active Directory/DIR/domain.com' does not exist for cached user '<private>' GUID 'E.....7' opendirectoryd error 11:39:37.409334+0200 opendirectoryd changing account policies and password is not allowed for offline accountIT

I need to look for four folders that should have been automatically added to each user's Documents folder. I wrote a simple script that should check if the folders exist. If they don't, it will run the Jamf policy that creates them. The problem I keep running into is that when I test the script, the results tell me that the folders exist even when they don't. Obviously I'm doing something wrong but I can't figure out what. Please help! The script is below. If I manually type a command the commands in Terminal, I can get an accurate response. The script tells me that the folders are present whether they are or not. What the heck am I doing wrong?#!/bin/sh ###Looks for PDF folders in a user's Documents folder. If the folders are not present this script will run the Jamf policy that creates them. currentuser=`/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }'` echo $currentuser pdfFolders=$( /Users/$currentuser/Documents/"PDFs for Client Reports" /Users/$currentuser/Documents/"PDF

I'm not sure why I'm struggling with this one as I"m sure it's easy but With Jamf Pro does anyone know how to enforce automatic OS updates? Mostly just want to make sure all my macs are getting security updates but I'm not seeing it anywhere.

Hey everyone, We've been offering McAfee to our students when they request AV, but apparently we're losing that option this December, from what my security team has told me. I'm being asked to research a free AV solution for Macs for our students (I think if we're offering AV we should be providing a paid solution, not pointing to some free option considering the amount of money they pay to attend school, but that's just my opinion). That being said, does anyone have experience with a free macOS AV that they would recommend? Thanks,Mike

We use a Windows print server and are successfully able to connect to it, add printers and ultimately print when setting up a printer manually on each mac. The printer is setup on the Mac using the "windows printer via spoolss" option when adding the printer. The URL is then smb://server.domain.com/PrinterShare. Everything works fine....A print job is successfully sent with no prompts for AD credentials at all.  I've configured the printer in JamfPro to use the same setup but when installed on Mac via self service, the print job stops and the printer is paused. When I retry, I am then prompted to authenticate with my AD username and password, and then the job goes through successfully. How can I properly setup a printer via spoolss in Jamf so that we are never prompted to authenticate with our AD credentials. Anyone got any thoughts?