Hi all, I used to get email alerts for every post, but have just realised I've not got them for a week or so... Is everyone else getting the alerts?

The built-in Apple software update payload that we can use in a policy will save a plist file to /Library/Application Support/JAMF called .userdelay.plist. The presence of this plist means that the user has selected one of the deferral options. It was easy to create an extension attribute that checks the file path above for the plist file, but what I would also like to do is track how long of a deferral the user selected. The text of the plist file is below. What I would like to do is make an extension attribute that will report the value for the key called "lastChosenDeferDate". <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>140</key> <dict> <key>deferStartDate</key> <date>2021-08-11T14:08:46Z</date> <key>lastChosenDeferDate</key> <date>2021-08-13T14:08:46Z<

I'm not a Jamf Cloud customer, but my understanding is that 10.31 was scheduled to be installed for Jamf Cloud customers this past weekend and it was cancelled very last minute. Can someone at Jamf provide a reason? Should on-premise customers who already installed 10.31 be concerned? Should we be holding off until 10.31.1 comes out?Please don't tell me to contact Jamf Support. I'm not the only customer who has this question and all customers would benefit from an answer.

Is there a way to restart the process of enrolling a new computer into jamf with the prestage enrollment? I have one macbook that wasn't assigned when first starting a set, or rather the wrong one got assigned.  I started them all up, set the country, language, put in the wifi, and on the one, it went to the privacy screen whereas the rest, started the enrollment process.   I corrected the mistake but it won't enroll now.  In the past, I have had to wipe to factory to get it do it again, but wondered if there was another way instead of having to do that, because I will have to reload the OS, iMovie, Garage band etc again on this if I go back to factory. Thanks in advanced.

HelloIs there a way to initiate an iCloud backup to a group in Jamf School? We're wiping 300+ iPads, and I need to make sure they're all backed up. I really don't want to do them one at a time 😇

Hello,we are using the support app https://marketplace.jamf.com/details/support-app/Trying to click on "Remote Support" ends with an error because of missing permissions.Our config looks like this - TeamViewer QS ist already installed:<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>CustomColor</key><string>#506d85</string><key>FirstRowLinkLeft</key><string>com.teamviewer.TeamViewerQS</string><key>FirstRowLinkRight</key><string>com.jamfsoftware.selfservice.mac</string><key>FirstRowSubtitleLeft</key><string>Share your screen</string>Any solutions for this problem? Thank you! 

Hi guys We use Goverlan in our company for remote screen sharing and troubleshooting. Up until now, this was only possible on Windows computers, but the latest version also has support for Mac. I deployed the Goverlan Reach Client without issues, but it does need some permissions, which I have some trouble activating remotely. These are the needed permissions. Users can manually review and allow these, but not all users are tech savvy enough to do this. Is there any way to allow these through Jamf?Thanks!Valérie

Has anyone worked in a distribution plan for this? I am having a little bit of a trouble figuring out a way to package and install on our workstations.

We're running 3 different versions of Maya in my labs (for reasons), and when I try to add all 3 versions to the dock using dockutil, it will only add the first one, and I get:Maya already exists in dock. Use --replacing 'Maya' to update an existing item item /Applications/Autodesk/maya2020/Maya.app was not added to Dock Maya already exists in dock. Use --replacing 'Maya' to update an existing item item /Applications/Autodesk/maya2022/Maya.app was not added to Dockthe apps all have the same name (but not directory), Maya.app. Their directories are:/Applications/Autodesk/maya2022/Maya.app /Applications/Autodesk/maya2020/Maya.app /Applications/Autodesk/maya2019/Maya.appIs there anyway to add multiple apps with the same name? The wiki for dockutil is sparse. I can add the app directories, but they go at the end of the dock, and have folder icons, so we're not sure students will notice them.  

i'm looking for clarity around filevault and network accounts (not AD!), mostly on big sur and m1 models.  until the introduction of silicon macs, i've been using a firmware password to provide some protection on machines that go walking for one reason or another.  now with our new m1 macs, it seems that my only option for any kind of hardware security is filevault.my issue is on shared laptop machines (school setting, laptops are in carts); i don't see a way of enabling filevault while allowing network users to consistently log in without making every potential network user a mobile account and enabling them as a filevault user - which is ridiculous and defeats the purpose of hardware security - if everyone can decrypt the drive, then encryption is worthless.with filevault enabled, after a reboot, the only user(s) who are able to log in are the filevault enabled users.  it would appear my 8021x/scep profile is ignored and i have no network access either (although wpa2 j

Hey, I am looking ideas to use Python to accomplish various tasks with Jamf. I am not sure where to get started or how powerful Python is with Jamf Pro.

New to Jamf, and Apple.. is there a way to change the self service app icon for iOS devices? I searched for a while and only find people talking about macOS devices, but nothing about iOS. Also is there a way to push a bookmark to iOS through Jamf? Possibly create out own App button inside self service so they can click that? Instead of opening safari. I am asking because our newest iPads are going to testers, and the special education department has asked if we can make it easy for staff to open the testing website.

We are setting up about 800 MBA devices. They grab the JSS policies and apps, which is awesome. But when going into JAMF I notice that a bunch of them say "_mbsetupuser" at USERNAME at LOGIN/LOGOUT. We use JAMF MUT tool and I wonder if this could spell disaster down the road or if the systems have not updated to JAMF. 

PlayOnMac got my attention because Microsoft Defender reports that it contains Malware.Does anyone have an experience with PlayOnMac?  I'm trying to decide whether it really is Malware or just that it has Wine or some othe Windows files inside the App

Hi all, trying this again, I am having some issues deploying Printer Logic via SS. I have tried to do as a script and have tried to do it has a package after capturing it with Composer. When someone in my test group clicks install in SS it says processing for about 5 seconds and says "this item is no longer available." I go to the logs and it doesn't even show that someone tried to run it as everyone scoped still show up as "pending". Below is the curl command that downloads and installs the app. Any and all suggestions would be greatly appreciated. curl -o /tmp/PrinterInstallerClientSetup.pkg "https://[yourDomain].printercloud.com/client/setup/PrinterInstallerClientSetup.pkg" && sudo installer -allowUntrusted -pkg /tmp/PrinterInstallerClientSetup.pkg -target / && sudo /opt/PrinterInstallerClient/bin/set_home_url.sh https [yourDomain].printercloud.com && sudo /opt/PrinterInstallerClient/bin/use_authorization_code.sh [AUTHCODE

Just wondering what people have experience of regarding a maximum number of files synced with OneDrive.I have a user on Big Sur and he has over 2 million files just under his OneDrive Documents folder and it seems to stop syncingwith no message about what the problem isIs this just being way too optimistic for what OneDrive can do?

For years I have followed the same procedure when I need to deploy an iOS app through Self Service:Log into the ABM account, click on Apps and Books in the sidebar and then start typing the name of the app in the Search bar at the top.Scroll through the list of the apps and find the one that I want and then fill out the quantity and then click the Buy button.In Jamf go to Devices -> Mobile Device Apps and add/modify the record for the app to make it available.I just went to perform the same procedure but Apps and Books suddenly has a very different behavior: instead of allowing me to search all of the apps on the Apps Store it is only showing me apps that I have already added to Jamf! So I can only see and search on the 63 apps that are already available to me.Is this some new "feature" in ABM? If so, how do I find and add new apps if I can't search for them in ABM?!BTW, I thought that something might be screwy with the account that I was using, so I logged into my ABM account for a

Hi everyone,I just wanted everyone's opinion on GSX and if it's something worth having for a smaller inventory base (< 250 devices). It seems pretty useful for things like automatically pulling purchase and warranty information, especially as we look to refresh systems, but I don't know if it's worth pursuing if the other benefits of the SSA don't really apply.Thoughts?

This would be ideal for our helpdesk/field technicians to launch the script from self service so when they are either remotely logged in or at the machine physically they can verify that the machine is in the correct site and check other things in the id page. I'm new to scripting so passing parameters ect is not my specialty.Something like this where jamf.com is our jss !/bin/sh /usr/local/jamf/bin/jamf recon | grep '<computer_id>' > '/private/var/jss_computer_id.xml' open -a /Applications/Safari.app https://Jamf.com:8443/computers.html?id='<computer_id>'&o=r I know this doesn't pass the computer_id, but it does put the id locally in the xml file

How do I get to Third Party Products now? This used to be the URL?https://www.jamf.com/jamf-nation/third-party-products/490/adobe-acrobat-dc-pro

Hi All,I'm looking to create a script that I can run to change just the first two letters of a Devices name. We currently use Building-student(or teacher) and barcode (all under 15 characters for our AD bind). Since moving to one-to-one this year, I need to move the 8th grade class to the high school. And since we renamed our Middle School I'd like to update the names on their devices as well. I used to run a script to change the last 5 digits of a device name to be the asset tag number, but have not used that in awhile and can no longer find it lol. Im sure I can grab the existing name, but not sure about modifying it to what I want. Gabe ShackneyPrinceton Public Schools

My company uses a cloud file service called Egnyte. We deploy it for our clients as well. One of the functions of Egnyte is that it will sync a user's Desktop and/or Documents folder with the user's private folder in Egnyte. This is very useful if we need to give the user a temporary Mac while theirs is being repaired. All we need to do is sign in their Egnyte account, and all of the files that they're hoarding on the Desktop will appear within the amount of time it takes for the files to sync over from Egnyte. I am just now learning how to create extension attributes, but this particular scenario has so far eluded me. The first thing I do is find out who the current logged in user is:currentuser=`/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }'`echo $currentuserNext, I tried entering: size=du -h /Users/$currentuser/Desktopecho $sizeThat command is meant output the size of the Desktop folder for the current logged in user. If I type:du -h /Users/$currentuser/Desktop/It outputs thi

Hi All,We are having some issues with iMacs in a school lab. We are updating them over the summer, and encountering a DNS issue that is preventing them from contacting Self Service. They are managed and supervisedThey are all AD bound, connected with profile to Wi-Fi using SCEP and DHCP. They can ping outside domains such as google.com, apple.com, and our internal DNS gateway and servers. When in Network prefs > Wi-Fi > DNS, our internal DNS is replaced by 127.0.0.1. If we delete that manual entry, it shows the correct DHCP DNS server for a few secs, then repopulates it with 127.0.0.1. Have tried the following:-Unbinding for AD and rebinding-New network location-Multiple Wi-Fi networks-Edited/replaced hosts and resolv.conf files-No software installed in lab or on the iMacs that can cause it-No one but our group has admin accounts/privileges Any ideas other than wiping?

HI Everyone, I could use your help.  I am trying to find the file to build an Extension Attribute that will contain the version number for SEP 14.3?  In all past versions, this was located in this path:  /Applications/Symantec Solutions/Symantec Endpoint Protection.app/Contents/Info.plist.  I can not find the version there. If you already have the EA built could you are the code with me. Thanks in advance

Hey,I'm looking for a better way to get all process IDs of all opened windows from a user then using this Applescript: osascript -e 'tell application "System Events" to get unix id of every application process whose visible is true and name is not "Finder"' I don't want to use AppleScript or not using System Events, because it needs to be "allowed" by the user or you need to create a PPPC profile, which i want to avoid.Any idea?