Please consider the following Script, delivered as the sole payload of a Policy "_DEV LWW Test:"#!/bin/bash sh -c 'sleep 300; echo good > /tmp/ok' &There are plenty of other Jamf Community posts (here's one and another one) which offer use-cases and success stories which involve forking a process to the background. Jamf Pro; Install & Upgrade methods for macOS Catalina is a particularly relevant thread for us. The Script above is a stripped-down, abstract version of a larger Script related to software updates.I have configured the Policy to trigger upon "Recurring check-in" and with Execution Frequency = "Ongoing." As shown in the attached picture, I see different results based on how the Policy and its Script are invoked:Automatically on the 15-minute check-in timer: The script runs without error (according to jamf.log and the Logs in the Jamf Pro web interface) but there is no sh -c sleep 300 process left running in the background.Manually via jamf poli

I recently saw this pop-up appear for a few seconds after a fresh boot of a 2020 Intel MacBook running macOS 11.6 Big Sur on Jamf Pro 10.29.2.-Exactly what process is taking place while this dialog appears. Is it a Recon inventory update?-What circumstances does this dialog appear?-Why is the Jamf process presenting a user-facing dialog in this situation?-Other than clicking "OK" is there a way to proactively hide this type of Jamf GUI pop-up? The Mac is in Apple Business Manager and fully managed/supervised by Jamf Pro. If I recall correctly, this particular Mac had been shut down and offline for a week or more (if that matters).I think I have only seen this once or twice in 5+ years. Finally was able to snap a photo of it.

Hello, Does anyone know how I might utilize the df -h command to create a report on hard drive sizes and how much of each drive is being used? Possibly an extension attribute??? Thanks! -- Adam VadalaInfrastructure Engineer | CareerBuilder773 353 2870 | adam.vadala@careerbuilder.com

Hi guys, still a bit new to JAMF, apologies, but thanks for the assistance so far! I don't have access to Composer yet, but I do have a working script that goes out to the web, pulls an xml (plain text config file for an application configuration) to the users machine, then places that xml file into the users application support folder. Works perfectly. However, I don't have a location that I can host this said xml file, therefore, I think I would need to create a package that have the file inside of it, has a script that places the file in the correct location, and have Jamf run that package after installing a certain application.  Or am I going about this the wrong way? Should I just have a script that creates this text file from within the script, saves it as an xml, and places it in the users application support folder? Would that be better? Pros? Cons? Thanks for any input.  

I've setup a SMB shared folder and can successfully connect to it from my Mac with the same username and password i have added in JamfPro, but it will not connect via JamfAdmin.  It tells me it is unable to mount the Distribution point.  Do you need Internet Firewall rules for Local Distribution points?  I would assume if a Mac is inside the network it would connect otherwise it would hit the fall back location which would be JamfCloud.  

Hi all, newbie to scripting and Jamf, so please bear with me here.  I would like to create a script that pulls a config file for our VPN client and places it in the users library/application support/application/config folder. I think the script would be as follows: #!/bin/bashcurl https://website.com/place/file.plist -o ~/Library/Application\\ Support/ApplicationName/Config/file.plistDoes this look like it would work to download to the users Library folder?  Edit: input the -o in the middle of the curl line, forgot to input that there!

Hi folks, This is my first post and pretty new to mac environment. I have solid experience on Windows. I'm trying to create 3 profiles on fresh mac image i.e 1st profile should have standrand, 2nd moderate rights, 3rd profile should have full admin rights.  I have tried many scripts from online , but none of them didn't give me any luck. Please direct me to correct direction i.e sample scripts\\references\\good articles. Your assistance in this matter would be greatly appreciatedThank you 

I've packaged Sketch so that we can push out. Is there a way to automate the registration? I haven't been able to fund anything on this to date.

When I double click the license key I get from Jamf for Jamf Connect it opens profiles on my mac, then say there was an error opening ...   Contact your network administrator for more information.  Now I am the network administrator and my therapists has tried hard to stop me from talking to the voices. LOL.  I'm new to Jamf so I might be doing this wrong.  I also am trying to upload the key to Jamf Cloud and it comes up with errors about Unknown Keys.  I've asked for a new License file from Jamf incase I got a corrupted one but the same thing happens on the second one.  I've also email support this but thought I would check with the community.  

We have some custom patch definitions defined in Title Editor, and this is my first time using it.  Our Mac admin, who recently left, had setup this definition, but it only had the one version. I went in and added a newer version, 2.12.02.1796.  After a few minutes our local (on-prem) Jamf Pro instance shows the new version listed.  But now, the Patch Report identifies all computers as being on the new version.If I open the inventory for any of these computers in JAMF Pro, and check its Applications list, the software version is 2.11.02.1765, as expected.How is Patch Management reporting all as 2.12.02.1796 ?If I create a Smart Group to look for 2.12.02.1796 then it accurately shows only the 1 machine i have actually installed the new version on. Thanks in advance

Hey everyone,I am not sure if this is a regurgitated topic, but I wanted to ask if there is any best practice, suggestions and/or ramifications for removing apps that are native to OS X, like FaceTime, Messages, Mail. We have Lync and Microsoft Outlook that we want to direct users more to. I've seen by searching in Google that changing the permissions or running rm -rf /Applications/[nameofapp].app are possible solutions to this. Appreciate the feedback.

Hey Guysvery new to JAMF, need some expertise.From yesterday evening, I noticed all our packages are showing Availability pending.nothing is getting installed when we enrolling the device.not sure if Jamf upgrade 10.32.2 has broken this. is it known issue to anyone else here in NZ?I have tried to re-upload the existing package with no success, it sits there but doesn't finish it.Thanks

Hi,My company is using Jamf to link Macs to an AD. I don't have the details but I can dig logs and product names if necessary. I recently got a new replacement Mac and got no clear instructions from IT on how to set it up. They just said to install what I needed and then run the Jamf enrollment. They didn't respond when I asked about Apple migration assistant.I used the Apple migration assistant to move all my data and config, then run the Jamf enroll and everything worked. Now I got a (periodic) notification to change my AD password, but it wouldn't allow me to change it using "Users and Groups" stating that it could not reach the server.I dig into console logs and found this:opendirectoryd default 11:39:37.407202+0200 opendirectoryd original node '/Active Directory/DIR/domain.com' does not exist for cached user '<private>' GUID 'E.....7' opendirectoryd error 11:39:37.409334+0200 opendirectoryd changing account policies and password is not allowed for offline accountIT

I need to look for four folders that should have been automatically added to each user's Documents folder. I wrote a simple script that should check if the folders exist. If they don't, it will run the Jamf policy that creates them. The problem I keep running into is that when I test the script, the results tell me that the folders exist even when they don't. Obviously I'm doing something wrong but I can't figure out what. Please help! The script is below. If I manually type a command the commands in Terminal, I can get an accurate response. The script tells me that the folders are present whether they are or not. What the heck am I doing wrong?#!/bin/sh ###Looks for PDF folders in a user's Documents folder. If the folders are not present this script will run the Jamf policy that creates them. currentuser=`/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }'` echo $currentuser pdfFolders=$( /Users/$currentuser/Documents/"PDFs for Client Reports" /Users/$currentuser/Documents/"PDF

I'm not sure why I'm struggling with this one as I"m sure it's easy but With Jamf Pro does anyone know how to enforce automatic OS updates? Mostly just want to make sure all my macs are getting security updates but I'm not seeing it anywhere.

Hey everyone, We've been offering McAfee to our students when they request AV, but apparently we're losing that option this December, from what my security team has told me. I'm being asked to research a free AV solution for Macs for our students (I think if we're offering AV we should be providing a paid solution, not pointing to some free option considering the amount of money they pay to attend school, but that's just my opinion). That being said, does anyone have experience with a free macOS AV that they would recommend? Thanks,Mike

We use a Windows print server and are successfully able to connect to it, add printers and ultimately print when setting up a printer manually on each mac. The printer is setup on the Mac using the "windows printer via spoolss" option when adding the printer. The URL is then smb://server.domain.com/PrinterShare. Everything works fine....A print job is successfully sent with no prompts for AD credentials at all.  I've configured the printer in JamfPro to use the same setup but when installed on Mac via self service, the print job stops and the printer is paused. When I retry, I am then prompted to authenticate with my AD username and password, and then the job goes through successfully. How can I properly setup a printer via spoolss in Jamf so that we are never prompted to authenticate with our AD credentials. Anyone got any thoughts?

Update 2021-09-22: Please check my other thread for the solution: https://community.jamf.com/t5/jamf-pro/upgrade-stuck-at-initializing-change-management/td-p/244134. This thread was stuck in admin approval and got released later.I upgraded tonight from 10.30.0 to 10.31.1 and it freezes at Initializing Change Management. I'm running on CentOS 7. I have not restarted any services or rebooted yet. I use jamfproinstaller.run like always. Everything went normal at the terminal – no errors.I checked the /usr/local/jss/logs/JAMFSoftwareServer.log and there is this one error:  2021-08-11 19:26:00,457 [ERROR] [erverThread] [gUncaughtExceptionHandler] - Uncaught Exception from thread InitializeServerThread - ManagerFactory [org.apache.logging.log4j.core.appender.rolling.RollingFileManager$RollingFileManagerFactory@6bfb2009] unable to create manager for [/var/log/JAMFChangeManagement.log] with data [org.apache.logging.log4j.core.appender.rolling.RollingFileManager$FactoryData@5330f439[p

I have a self service policy that installs an application. I added this application to the dock items with JAMF admin. I configured the policy, added the dock item to appear at the end of the dock.when the policy installs the application and adds the dock item, the dock item has a question mark instead of the application icon, and when clicked it obviously doesn't work to run the application. I see the application under /Applications and its correct. User will have to add it to the dock themselves. Has anyone had this issue? or know how I can resolve it? I would rather have it added to the dock when the policy runs instead of having the user deal with it.

Hello,We're updating our OneDrive configurations. I have it covered with placing the new PLIST on systems and quitting OneDrive. But I'd like to be able to relaunch it as the user who's currently logged in. Is there a script or process I could use for this?Thanks 

I'm looking to give a specific user access to flush specific computer logs on a policy. This is to allow SecOps to re-run policies that are set to once per computer. I set custom permissions as follows: Jamf Pro Server Objects > Policies > ReadJamf Pro Server Actions > Flush Policy Logs This allows the user account to view the Policy and the associated logs, but clicking the "Flush" button on the log does not take any action. They are able to "Flush All" on the logs, but that would defeat the purpose of being able to re-run the policy on one specific computer. If I also enable Jamf Pro Server Objects > Policies > Update, the user is able to flush specific computer logs on the policies, but I do not wish to grant them access to change all of the policies present in Jamf. From what I've read, the API isn't able to flush specific computer logs so I am unable to create a tool that utilizes the API for this goal. I'm hoping for any suggestions on the feasibility of my req

I've just now began to test doing erase installs on machines to make sure enrollment is working properly in Big Sur, however I'm noticing that no matter what I check in the "Setup Assistant Options" in the PreStage Enrollment, it just shows me the Apple ID option, and then cuts right to the desktop. So far I'm just testing on a 2015 MacBook Air, about to test a 2020 Air to see if having touch ID makes a difference. The big issue is the location piece for us, as I want that to be on so the time zone is correct, but it seems to just skip it altogether. I'm still wondering why we have more options for this on iPads than for the more robust Macs. Anyone else seeing this or have a work around?Gabe ShackneyPrinceton Public Schools

I am sure I am just missing something but how do you create icons for the applications that are in Self Service app? Such has Office or Panopto instead of it being a blank icon?

Hi All! I am trying to run a script to check if our PaperCut User Client application is actually running. I was using the below script on my machine and it returned the results as expected. *#!/bin/sh SERVICE=PCClient if ps ax | grep -v grep | grep -v $0 | grep $SERVICE > /dev/null then echo "$SERVICE service running, everything is fine" else echo "$SERVICE is not running" fi* But when I put this into JAMF as a policy to run the script, it falls over and returns this. Script result: grep: Support/JAMF/tmp/Check: No such file or directorygrep: if: No such file or directorygrep: PCClient: No such file or directorygrep: is: No such file or directorygrep: running: No such file or directoryPCClient is not running I assume this is because of where it is trying to run the file from. So I did some digging on here to try and find a script I could add to, to force it to run as the logged-in user. I found the one below and tried to edit it to work, but it get

Hey folks, apologies if this was posted previously but I could not find anything exact to my problem.Onto the topic, I have Macs on which I would like to force ethernet connection type instead of Wireless. So far I have been unable to create a search that would list which computers are on the ethernet connection and which ones are on the WiFi.I noticed when going into a computer directly through search that under Hardware tab there is entry called Primary Network Adapter Type:I was unable to locate that entry and create advanced search/report that bases on it, also creating extension attribute using Jamf template called Active Network Interface did not produce any results. To summarize, is it possible to generate list of computers and active network connection type using Jamf Pro dashboard only and after that enforce ethernet connection? Or this is something that must be done using scripting?