I need to make an extension attribute to check for a certain group on our AD. I can list all groups based on user but no luck basing it off computer name. Any ideas?

Hey everyone.  Looking to create a smart group, via an Extension attribute, that looks for every MacOS device that has the home folder 'test'.  So /Users/test.  Having trouble putting together the script for the extension attribute that can look or every device with this home folder.  Would appreciate some help.I then want to delete that home folder for all confirmed devices by scoping the smart group and using the command 'sudo rm -rf /Users/test'.  Does this seem like a reasonable way to accomplish this?I guess I could just blast every device with this command, but that seems a little unwise...  😉 EDIT- I got the script figured out (see below), but still looking for advice on best approach for deleting the home folder on devices that have it.  Thanks. #!/bin/bashif [ -d /users/ ]; thenecho "<result>Has test Folder</result>"elseecho "<result>Does Not Have test Folder</result>"fiexit 

Hello Jamf Nation, I am looking for assistance with an issues that has been slowly popping up over the last couple of weeks. When the iPads are being set up they are constantly getting the following error messages about "The SCEP server returned an invalid response" or "network error has occurred." We are currently running JAMF v. 10.26.0-t1605551305 with iOS devices ranging for iOS 13.3.1 to iOS 14.4.1. Our network is segmented into two networks. One is our secure network and one is our guest network. These devices are connected to connect to the guest network and after about two min they will fail with one of the below message and the only fix we have is to DFU restore the iPad and try again. We currently have 1000+ iOS devices and some of these devices are restored on a weekly basis for patient care. These devices are also used to assist with our Telehealth visits and JAMF Virtual Visits. Any help in resolving this issue would be greatly appreciated. We utilize JAMF Reset and JAM

I've been using a process that was developed by macmule. It's mostly still working across the various OS's. However, I'm trying to get it to sync to an external drive rather than an internal drive. When I point the script to the external drive, the script seems to be running prior to the drive being registered, so the script is creating a folder in /Volumes and starts replicating. The drive then finishes mounting, but has a 1 appended to the end which makes it the wrong path. I tried adding a sleep timer but it didn't seem to work (shown).I've tried'"/Volumes/Peg...."'and with various versions of ", `, and even manually putting the path in with \\ commands (.../Pegasus\\ -\\ SA) Here's how it's setup now.sleep 15 emailAlert=$(/usr/bin/rsync -avrpogz --delete --log-file=/private/var/log/rsync.log -e ssh ':"/Volumes/Promise RAID-File Share/CasperShare"' "/Volumes/Pegasus - SA") 

Might anyone have any experience deploying AnyConnect 3.1+ using Cisco's installer but without the Web Security module? Cisco mentions something in their documentation regarding a configuration file for the installer named ACTtransforms.xml but I cannot find any examples of this file, nor any info for how to create one. I have tried searching and have found no additional info. There is a script that can be run after the installation that will remove this module, but I'd prefer for it never to be installed in the first place.

We are seeing this popup here and there in our environment and I am afraid it will become more widespread. I have configured settings as recommenced to prevent it but it does not work. The worst part is clicking OK does not let the user continue, nothing happens. They are basically blocked from using any Office apps as you can't get pass this popup. We are also using the VL license. It started showing up with version 16.50.21061301. Has anyone else seen this? I tried solutions as recommended by Paul Bowden's PDF https://www.kevinmcox.com/2019/08/privacy-and-consent-changes-in-microsoft-office-16-28/ Config Profile looks like this: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <key>HasUserSeenEnterpriseFREDialog</key> <true/> </dict></plist> and I have also tried Paul's profile found here:https://g

Hi Jamf Nation! We’re excited to announce new enhancements are coming to the community! We don’t want to spoil the surprise, so we’re not sharing details…yet. But we do need your help. If you could hold your thoughts and not post new comments, answers or feature requests from 11:30 a.m. CST on July 12 through 9:00 p.m. CST on July 13, we’d be especially grateful. This will help us ensure nothing is lost while we implement some notable changes. Also, if you have content within the Jamf Pro Add-Ons space, we ask that you move anything you want to keep to another location (e.g., https://marketplace.jamf.com/, if your organization is in our Marketplace or on a personal GitHub page). Jamf Pro Add-Ons, and the content that lives within it, will no longer be available starting July 13. As a reminder, you can continue to access our Support team (https://account.jamf.com/support) through Jamf Account (https://account.jamf.com), should you have a question arise that can

Hi Guys, We are getting ready to deploy Pulse Secure to our Mac systems. Is there recommended process that host checker should look for to verify a system has our Jamf MDM installed and ultimately allow the connection? Hopefully this question makes sense :) Thanks!

We recently imaged about 250 macbook airs using casper imaging but later noticed that they all show up in JSS as Unmanaged. Is there a way other than recon that we can make them manage again ?

Starting to reference some Google Docs as bookmarks in Self-Service. However, Google complains that "The version of the browser you are using is no longer supported. Please upgrade to a supported browser." How often does the codebase get updated for this platform? Also, is there a way to force a self-service bookmark to launch a full browser on the user's system instead of the internal browser?

Hi, Sorry does someone have copy of the Zoom 5.7.0 IT Installer I could have? The current IT installer version being hosted by Zoom is 5.7.1 but we've version locked on 5.7.0 on our lab deployments for Mac and PC and I've missed the window to download the 5.7.0 version. Thanks in advanced.

We had a MacBook Air grow legs last week, and are trying to track it down. We enabled DEP and jamf was already installed. The new "owner" has updated from El Cap to Sierra and added a user account. The device is still checking in with our JSS. I am looking for a way to get the device to report it's GPS location. I found a number of github (whereami) and sourceforge (LocateMe) projects that do this from the CLI, but none of them seem to work under Sierra. I saw a post on discussions.apple.com from @jelockwood that he got Location Services working by modifying the plist, and I think I have that part working too. But the binaries I was able to get simply hang, or can't be built because they are using SHA1 signing, which is no longer allowed. Anyone have any ideas? Thanks!

I am trying to run macOS updates on some VM's I am testing. This is a new work flow for me with adding VM's for testing. I have modified the .vmx and added the following which lets the VM enroll in to JAMF, however macOS updates wont work. I think I am missing something still. When you check about this Mac it only has MacBook Pro, not MacBook Pro (16-in 2019) which is the HW model I am using in this case. I know updates are tied to the hardware information on the device, but it appears defining the model number is not enough. Any ideas on what I missed? I plan on also testing with Parallels but I am waiting on a license, any information for that would be helpful also. serialNumber = "VM0000000003" SMBIOS.use12CharSerialNumber = "TRUE" hw.model = "MacBookPro16,1" VM not showing all the hardware information Physical device showing as you would expect

Hi Team,I need some detailed instructions on how to implement this as everyone is coming back to office and we want to strictly enforce it.We created a COVID 19 questionnaire in Sharepoint that should be displayed when user login:Condition:If all the answers to the survey are No, User access is granted to machineif any of the answers to the survey is yes, user access is denied and he should be displayed a message to leave office.

Hi folks,I need some detailed instructions on how to implement this as everyone is coming back to office and we want to strictly enforce it.We created a COVID 19 questionnaire in Sharepoint that should be displayed when user login:Condition:If all the answers to the survey are No, User access is granted to machineif any of the answers to the survey is yes, user access is denied and he should be displayed a message to leave office.

At the moment I'm working on a solution to prevent all admins users (except one particular) from running sudo. I can add a specific user to sudoers by running: sudo -i echo '$username ALL=(ALL:ALL) ALL' >> /etc/sudoers Then I'd like to remove %admin ALL = (ALL) ALL within sudoers file which would just leave the above admin as the only sudo admin. However I cannot seem to find a way on how to remove/replace a particular string within sudoers. I'd like to make this into a script hence using visudo and manually adjusting won't work for me. If there a way to run visudo from script and adjust a particular line within sudoers that would be ideal. I've seen a possible solution here: https://www.ibm.com/developerworks/community/blogs/brian/entry/edit_sudoers_file_from_a_script4?lang=enwhich works in Linux. Is it possible to make it work in macOS?

I'd like to add the Self-Service icon to my users Dock's by default since we will be using this pretty heavily. I can add the Dock Item to Casper Admin, and create a policy to deploy it, and it does work. What I'd like to do however, is to deploy this through Configuration Profiles instead of by Policy. My main reason for this is simply for the instantaneuous addition of the dock item as soon as the device is enrolled. When I go into the Dock section of the Configuration Profile and add an Application, Self Service is not on the list. Any ideas or help?

Hi Does anyone have the Bundle ID and Team ID for Universal Audio UAD Driver for Apollo Sound interfaces.I need to release the Kernel Extension in a configuration Profile, but cant get the info until I can release it because the Mac is managed. Cheers

All our iPhones are managed with Jamf and my prestage enrollment profile has the setting enabled for "Prevent user from enabling Activation Lock". I sent an iPhone to Apple for diagnostic/repairs, and they sent it back right away with a letter saying the technicians couldn't run diagnostics because the device is locked by one of two programs; locked by Find My Iphone, or locked by a MDM tool and that I should temporarily unassign the device from the program. I'm unclear on what I need to do... should I delete it from Jamf (and lose the data associated with it), or unassign it from Apple School/Business Manager, or something else?

Hello everyone! We are currently in the process of updating our CA Secure Browsers for the upcoming standardized testing. It looks like the new requirement for the year is disabling screen shotting abilities. Has anybody done this? I'm not sure if it's something we can tackle with a computer-wide configuration profile so it will be easy to revert once testing is over. Below is a screenshot depicting the message we are getting. Secure Browser version 10.6 on macOS 10.14.2 "Mojave"

For some reason I can't get Composer to open. It was working just fine the other day and now it just says that it's not responding when I try to open the application. I have tried to remove the Jamf Pro applications and reinstall them and that doesn't work either. Any ideas?

Two days ago we had a user's M1 MacBook Air brought to us that wouldn't open Pages, Keynote, or Numbers. All three will open for about 2 seconds then crash and macOS will give the "Application closed unexpectedly" message and offer to send an error report. The error report begins with something like there being an exception with "fontassetdownloadmanager". I know Preview crashes when opening sometimes and has to have the Saved Application State cleared so it'll stop trying to open the file that's crashing it, but this doesn't fix this issue. We ended up wiping this M1 Mac with Big Sur 11.4 (previously was 11.2.3) and the apps suddenly work. Since then, we've had a second M1 Air user report he same issue, same error report, Big Sur 11.2.1. We've asked her to hold tight as we noticed there has been a recent update to Pages, Keynote, and Numbers about a week ago and we figured that update might've broken something. This morning I had a retiring teacher come in that purchased an M1

I ran into this odd issue with a new MacMini (Macmini8,1) with 10.14.3 preinstalled. I am testing NoMAD with NoMADLogin and I have the first user log in and that creates their account. Jamf Pro then runs a policy to encrypt the device with our institutional key and to add a EFI password lock. When I boot to the recovery partition, I find that I am unable to disable the EFI password in the Startup Security Utility due to “No administrator was found”. None of the local accounts are listed on the dropdown. I would think this occurs if the admin account is missing a securetoken but that’s isn’t the case as I was able to encrypt the MacMini. The only way I can disable the EFI password is to blow the OS away, enroll the device with MDM, then log in as the local admin account that is created during the prestage enrollment. Once I'm in the recovery partition, then the Startup Security Utility usually allows me to disable the password lock with this account. Has anyone experienced this?

My company just recently purchased jamf and I am the technical lead for deploying it out to our end users. I went through training with a jamf engineer. He informed that you can create a policy that can uninstall a piece of software in self service and we did that with Google Chrome as an example. When I tried setting it up with Firefox, I could not find the option to uninstall the software again. I have attached what the Google Chrome settings look like. When I try with Firefox, I only receive the install, cache, or install cached options. Could someone help me out? I can't remember how we did it the first time. Thanks!

Does anyone know how to uninstall the DockUtil tool? We have been using the tool to set the Dock initially for users but macOS Big Sur does not list as supported so we want to remove it before our users upgrade. Thank you.