I need to look for four folders that should have been automatically added to each user's Documents folder. I wrote a simple script that should check if the folders exist. If they don't, it will run the Jamf policy that creates them. The problem I keep running into is that when I test the script, the results tell me that the folders exist even when they don't. Obviously I'm doing something wrong but I can't figure out what. Please help! The script is below. If I manually type a command the commands in Terminal, I can get an accurate response. The script tells me that the folders are present whether they are or not. What the heck am I doing wrong?#!/bin/sh ###Looks for PDF folders in a user's Documents folder. If the folders are not present this script will run the Jamf policy that creates them. currentuser=`/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }'` echo $currentuser pdfFolders=$( /Users/$currentuser/Documents/"PDFs for Client Reports" /Users/$currentuser/Documents/"PDF

I'm not sure why I'm struggling with this one as I"m sure it's easy but With Jamf Pro does anyone know how to enforce automatic OS updates? Mostly just want to make sure all my macs are getting security updates but I'm not seeing it anywhere.

Hey everyone, We've been offering McAfee to our students when they request AV, but apparently we're losing that option this December, from what my security team has told me. I'm being asked to research a free AV solution for Macs for our students (I think if we're offering AV we should be providing a paid solution, not pointing to some free option considering the amount of money they pay to attend school, but that's just my opinion). That being said, does anyone have experience with a free macOS AV that they would recommend? Thanks,Mike

We use a Windows print server and are successfully able to connect to it, add printers and ultimately print when setting up a printer manually on each mac. The printer is setup on the Mac using the "windows printer via spoolss" option when adding the printer. The URL is then smb://server.domain.com/PrinterShare. Everything works fine....A print job is successfully sent with no prompts for AD credentials at all.  I've configured the printer in JamfPro to use the same setup but when installed on Mac via self service, the print job stops and the printer is paused. When I retry, I am then prompted to authenticate with my AD username and password, and then the job goes through successfully. How can I properly setup a printer via spoolss in Jamf so that we are never prompted to authenticate with our AD credentials. Anyone got any thoughts?

Update 2021-09-22: Please check my other thread for the solution: https://community.jamf.com/t5/jamf-pro/upgrade-stuck-at-initializing-change-management/td-p/244134. This thread was stuck in admin approval and got released later.I upgraded tonight from 10.30.0 to 10.31.1 and it freezes at Initializing Change Management. I'm running on CentOS 7. I have not restarted any services or rebooted yet. I use jamfproinstaller.run like always. Everything went normal at the terminal – no errors.I checked the /usr/local/jss/logs/JAMFSoftwareServer.log and there is this one error:  2021-08-11 19:26:00,457 [ERROR] [erverThread] [gUncaughtExceptionHandler] - Uncaught Exception from thread InitializeServerThread - ManagerFactory [org.apache.logging.log4j.core.appender.rolling.RollingFileManager$RollingFileManagerFactory@6bfb2009] unable to create manager for [/var/log/JAMFChangeManagement.log] with data [org.apache.logging.log4j.core.appender.rolling.RollingFileManager$FactoryData@5330f439[p

I have a self service policy that installs an application. I added this application to the dock items with JAMF admin. I configured the policy, added the dock item to appear at the end of the dock.when the policy installs the application and adds the dock item, the dock item has a question mark instead of the application icon, and when clicked it obviously doesn't work to run the application. I see the application under /Applications and its correct. User will have to add it to the dock themselves. Has anyone had this issue? or know how I can resolve it? I would rather have it added to the dock when the policy runs instead of having the user deal with it.

Hello,We're updating our OneDrive configurations. I have it covered with placing the new PLIST on systems and quitting OneDrive. But I'd like to be able to relaunch it as the user who's currently logged in. Is there a script or process I could use for this?Thanks 

I'm looking to give a specific user access to flush specific computer logs on a policy. This is to allow SecOps to re-run policies that are set to once per computer. I set custom permissions as follows: Jamf Pro Server Objects > Policies > ReadJamf Pro Server Actions > Flush Policy Logs This allows the user account to view the Policy and the associated logs, but clicking the "Flush" button on the log does not take any action. They are able to "Flush All" on the logs, but that would defeat the purpose of being able to re-run the policy on one specific computer. If I also enable Jamf Pro Server Objects > Policies > Update, the user is able to flush specific computer logs on the policies, but I do not wish to grant them access to change all of the policies present in Jamf. From what I've read, the API isn't able to flush specific computer logs so I am unable to create a tool that utilizes the API for this goal. I'm hoping for any suggestions on the feasibility of my req

I've just now began to test doing erase installs on machines to make sure enrollment is working properly in Big Sur, however I'm noticing that no matter what I check in the "Setup Assistant Options" in the PreStage Enrollment, it just shows me the Apple ID option, and then cuts right to the desktop. So far I'm just testing on a 2015 MacBook Air, about to test a 2020 Air to see if having touch ID makes a difference. The big issue is the location piece for us, as I want that to be on so the time zone is correct, but it seems to just skip it altogether. I'm still wondering why we have more options for this on iPads than for the more robust Macs. Anyone else seeing this or have a work around?Gabe ShackneyPrinceton Public Schools

I am sure I am just missing something but how do you create icons for the applications that are in Self Service app? Such has Office or Panopto instead of it being a blank icon?

Hi All! I am trying to run a script to check if our PaperCut User Client application is actually running. I was using the below script on my machine and it returned the results as expected. *#!/bin/sh SERVICE=PCClient if ps ax | grep -v grep | grep -v $0 | grep $SERVICE > /dev/null then echo "$SERVICE service running, everything is fine" else echo "$SERVICE is not running" fi* But when I put this into JAMF as a policy to run the script, it falls over and returns this. Script result: grep: Support/JAMF/tmp/Check: No such file or directorygrep: if: No such file or directorygrep: PCClient: No such file or directorygrep: is: No such file or directorygrep: running: No such file or directoryPCClient is not running I assume this is because of where it is trying to run the file from. So I did some digging on here to try and find a script I could add to, to force it to run as the logged-in user. I found the one below and tried to edit it to work, but it get

Hey folks, apologies if this was posted previously but I could not find anything exact to my problem.Onto the topic, I have Macs on which I would like to force ethernet connection type instead of Wireless. So far I have been unable to create a search that would list which computers are on the ethernet connection and which ones are on the WiFi.I noticed when going into a computer directly through search that under Hardware tab there is entry called Primary Network Adapter Type:I was unable to locate that entry and create advanced search/report that bases on it, also creating extension attribute using Jamf template called Active Network Interface did not produce any results. To summarize, is it possible to generate list of computers and active network connection type using Jamf Pro dashboard only and after that enforce ethernet connection? Or this is something that must be done using scripting?

I am trying to deploy some books to a few student iPads. I have created the students in ASM but after syncing I cannot see them in Jamf School.I have checked "Enable synchronization with ASM"Checked "Create missing users"When I try to invite users to register with volume purchasing, I see "No managed Apple ID's found to invite".When I sync, I see this:Synchronization statusVolume Purchasing 1 user(s) and 316 app(s) synchronizedAutomated Device Enrollment: 199 placeholder(s) updatedApple School Manager: 1 location(s), 0 classe(s), 0 user(s) and 0 Managed Apple ID(s) synchronized Can anyone please advise me what I have missed please?

Hi!Has anyone managed to get information about the iMac computer's SSID running MacOS BigSur via extensions attribute. If so, how did you do it?Regards

Hi I was wondering if anyone had any tips on how I could create a profile to automate these steps when installing Bitdefender on Big Sur. https://www.bitdefender.com/support/changes-to-bitdefender-endpoint-security-for-mac-in-macos-big-sur-2626.html I want to remove the user interaction aspect if possible

Just wondering if anyone is having any success using Jamf Connect with macOS Monterey? Currently we are working through internal systems readiness with macOS Monterey beta testing, and when using Jamf Connect (v2.4.3) with Monterey many issues are being experienced.At present experiencing the following issues:If using the "tab" key to switch between username & password boxes the mac will lock up and requires to be powered off.When using Okta for SSO, Jamf Connect will not login using just a username, instead it requires a users full email address to be entered in to the username field.Authentication through Jamf Connect seems to always fail on 1st attempt but is then successful on subsequent login attempt.1st login attempt is only successful if network connectivity is disabled so that cached credentials are used.On M1 Macs, although Jamf Connect will authenticate successfully using Okta, before macOS desktop loads user is immediately logged back out unless network connectivity

Hi all,I'm trying to find a way to create a custom configuration profile for an app and distribute it to all our iOS devices. The manual only has a guide on how to do it in VMWare Workspace One (where you just copy and paste the whole string into a "custom" field).How do I do this in Jamf? Here's an example of what I need to distribute to all our iOS devices:<dict>  <key>FilterBrowsers</key>  <true />  <key>FilterSockets</key>  <false /></dict>Kind regards,Joni

Hi, Our company is wanting to roll out Microsoft Edge to all our Mac fleet and make it the default browser. This is to keep in line with our company's upgrade to Windows 10 pcs. Anyway, the default search engine in Edge is bing. We would like to change this to google so users are still using a familiar search engine. But I do not know go about setting this up remotely. And the other thing is changing default search engine manually is quite cumbersome, so writing up some instructions for end users to follow is not the way to go. So anyone know anything how to go about it? Thanks in advance.

The internet traffic between our managed macOS Mojave laptops and the Apple Software Updates website is blocked for security reasons. So I can not use the regular System Preferences - Software Update to update native macOS software.This is not an issue for me, because every time Apple release a Software Update, I wait a week or so and I visit the following URL https://support.apple.com/downloads and I download the specific package (in .dmg format), I save the .dmg package into a USB Stick and I update the macOS laptops and I am good to go.Now, the problem is that Apple just released an important security update https://support.apple.com/en-us/HT212808 just for Safari 14.1.2.My question is since that I believe this time it is just Safari the issue, is Apple going to publish just the Safari .dmg package update on the regular https://support.apple.com/downloads website? If not, how can I download just the Safari 14.1.2 in .dmg/.pkg format so I can install into our macOS Mojave laptop

Hi all, I'm receiving the following error when trying to save a change to the Restrictions Profile in Jamf Pro. I'm removing com.apple.DocumentsApp from the App Usage section showing apps not allowed so that the Files app becomes visible on the iPads. Note: I have put * to replace the actual url information. Unexpected Error Http failure response for https://*.jamfcloud.com/uapi/config-profiles/ios/f15a5a62-b203-499a-b2ef-1c2f74c4ba94: 500 OK This does not happen when saving changes to other configuration profiles (such as the layout of the home screen) etc. The rest of Jamf Pro appears to be working fine.

Long story short...the school I work for just revamped printing.  Printing is handled by PaperCut.  They emailed a link to download a mobileconfig file to install on the students' iPads.  I really don't feel like manually installing it on 500+ devices.  I'm looking through configuration profiles but don't see any option.

Hi guys I have managed several mac PRO.but there are curios thing about mac's serial number.some mac doesnt have serial number and its inconsistent.sometimes its 3 or 4 pls anyone tell me why or suspectedthank you 

Somehow JAMF is showing my teachers' Managed Apple IDs incorrectly, it is using the suffix our students have.  It gets that information from ASM, but ASM is correct and the sync isn't correcting it in JAMF.  A suggestion was made that I use a curl command to update these accounts in JAMF.  So I have tried, but so far have not been able to change anything.I am passing credentials of an Admin account.  And the connection works, as I can run a command to get information about a user.  From that command, I am also confident I have the correct ID #. The command runs, gives no error message, but changes nothing.  I have also attempted to change the Grade, just to see if that was possible and that also did not change the account in JAMF.  Below is two renditions of the command I am running from a Windows command prompt.  Any thoughts on why this would not work?  Bad syntex?  Do I have to enable API commands somewhere in JAMF?Thanks in advance.

If you buy Jamf Training pass,  1. Can you retake the test as many time as you want?  2. Can you also take many courses as you want?3.What is covered by Jamf training pass? Thanks!

I was attempting to reset ACL and permission bits to root:wheel 775 to a folder and all subfolder. Then add a specific user to that ACL list as well, let's say the username is Tim.So on a folder and all subfolders/files I want the following permissions: root (owner) 7 wheel(group) 5 everyone 5 tim 7 (read/write) I have been using: chmod -R +a <folder> "tim allow read,write" When it's all said and done, I want the finder window to NOT SHOW CUSTOM permissions and show simply "read/write". Second question: What is the command line option to "apply to enclosed items" in the finder menu? Let's say I wanted to perpetuate the current permissions to all subfolders/files. Is there an easy command to do this?