Is anyone else having issues with installing Office 365 from Self Service? Basically, Office apps are failing to start, kinda randomly. It seems to work on most of my test boxes but then fails on user machines. I did get one of my test boxes finally. Sometimes the app just does nothing, sometimes we get an error like the one attached. Odd because installing them manually never seems to have an issue. Makes me think I'm doing something wrong with Jamf. Policy logs all look fine.

Hi all, Anyone else have this same problem? I have created a macOS Big Sur USB installer. I boot into a Macbook (2017 or 2018 model) recovery partition, which would come up as either Mojave or Catalina recovery partition. When I type in "/Volumes/Install macOS Big Sur/Install macOS Big Sur.app/Contents/Resources/startosinstall" --agreetolicense --installpackage <microsoft office> --volume /Volumes/Macintosh HD This doesn't work because the older recovery partitions don't allow macOS Big Sur. I tried Opt+Cmd+R to try to download the latest recovery partition. Only then can I successfully install macOS Big Sur. But Opt+Cmd+R doesn't always work. I would like a method that works 100% of the time, even if it takes a bit longer to execute.

We're setting up NomadLogin for deployment and I'm testing right now. The AD connection is working, but all I get for the background and logo are white screen. I don't know where I'm messing up. Here's my script: #!/bin/bash # Preference key reference # https://gitlab.com/orchardandgrove-oss/NoMADLogin-AD/wikis/Configuration/preferences domain="rbschool.org" background_image="/rbsimages/nomadback.jpg" logo="/rbsimages/nomadlogo.png" # Set default AD domain defaults write /Library/Preferences/menu.nomad.login.ad.plist ADDomain "$domain" # Set background image defaults write /Library/Preferences/menu.nomad.login.ad.plist BackgroundImage "$background_image" # Set login window logo defaults write /Library/Preferences/menu.nomad.login.ad.plist LoginLogo "$logo" # Set security authorization database mechanisms with authchanger /usr/local/bin/authchanger -reset -AD # Kill loginwindow process to force NoMAD Login to launch /usr/bin/killall -HUP loginwindow exit 0 Any help is gre

Is there a way to inject AD UserID and User Full Name into Jamf Username: field and Full Name: field in the User and Location area? Or do I have to use Extension Attributes? Jamf 10.25.1

Forgive me if this has been discussed, but I am unable to find a thread on it. My company wants to deploy Acrobat Reader DC to all computers and they don't want the user to have to accept the EULA. Seems like Adobe doesn't make this easy to do. I would appreciate it If anyone can point me in the right direction. Thanks.

I want to display a message to users, and I want it to stay on the screen until they click a button to acknowledge the message at which point a URL will be opened with further information. I wrote a simple script to call jamfHelper to display the message and wait for the user to click a button at which point the script uses the open command so whatever app is configured as the handler for https will load the web page. Since I don't want the policy running this script to hang until the user acknowledges the message my script writes out a secondary script which calls jamfHelper, waits for the user to click, calls open, and then deletes itself. The primary script calls the secondary script with a & at the end to spawn it as another process. That works fine when the Policy running my script is triggered via sudo jamf policy - the message is displayed, the jamf process completes, and when I click the button in the message the web page opens and the secondary script is deleted. The beh

Hello all,I was told that except MAC, JAMF can manage Linux and Windows.I do not think this is correct as I do not find any info for it.But can someone confirm this?

Been using for a while, but are the actual options for this documented somewhere? Specifically looking to find out how to query result of user clicking a button within a policy dialogue.

Do I have to have the scope set up for all users/computers if I want apps to install on Jamf enrollment? I am a little confused on that one..

Is there an easy way to untick the checkbox for "Automatically keep my Mac up to date" I've created a plist for the options I'm interested in applying, but these only apply successfully when this box is unticked. In the main software update menu, there is a box for "Automatically keep my Mac up to date", when you click this and then click Advanced, all Advanced options are selected. When this is then deselected, the manage options I desire are selected. Essentially, I want updates to be downloaded but not installed unless they're critical, but bizarrely, there doesn't seem to be an easy way to do this with Jamf?

Greetings, all! I'm fine tuning a JAMF Helper script that I have in place to upgrade with an OS X installer using simple caching. Between the caching and the actual installation of the OS X installer, I want to use a JAMF Helper window to notify the end user of the process, allowing them to opt-in and opt-out. I am noticing that the notification (running at recurring check-in, once per day) is capable of running when no one is logged onto the computer. This displays the JAMF Helper window at the login screen and eventually just times out. Here is what I would like to accomplish, with your help: Echo that a timeout has been reached using "243 - The window timed-out with no buttons on the screen." Before the JAMF Helper command runs, check to see if the logged in user (loggedInUser=$(stat -f%Su /dev/console)) is actually logged onto the computer. #!/bin/bash /usr/bin/curl -s -o /tmp/elcapitan_icon.png http://assets.materialup.com/uploads/ec819071-7140-4c6d-89ac-81b712642fcb/512x51

I thought apps that installed kernel extensions were being replaced with system extensions in Big Sur, but from what I'm seeing Box Drive and Cisco AnyConnect (4.9) are still installing as kexts. I installed both on a freshly wiped Big Sur machine and both prompt to allow the extension to be installed, and after reboot kextstat | grep -v com.apple shows the 2 approved extensions, while systemextensctl list shows nothing. I have a config profile setup that was working on Catalina to automatically approve these kernel extensions but that doesn't seem to work on Big Sur. I've tried using just the team ID and the team ID + the bundle ID, and get the same behavior. I did check the "FIELD_ALLOW_NON_ADMIN_USER_APPROVALS" option, and can approve these as a non-admin at least. I've also set up an approved system extension config profile and have tried just the team ID and the team ID + bundle ID, and I still can't get these extensions to be approved a

Alright so I'm trying to create an Extension Attribute to get the version of Cisco AnyConnect on the machines. But I'm getting blank results, I setup Skype the same way and it seems to work fine. Does something look wrong? Data Type: StringInventory Display: Extension AttributesInput Type: Script !/bin/sh if [ -f "/Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app/Contents/info.plist" ] ; then VERSION=$( defaults read "/Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app/Contents/info.plist" CFBundleShortVersionString )else VERSION="Not installed"fi echo "<result>$VERSION</result>"

Hi, I am trying to figure out a way to find a mobile device by its IMEI with the API but I am running into issues getting Jamf to return the correct information. I'm working with this constraint because the department that handles the hardware in my org has scanned mobile devices into the property management system by IMEI, and that value is the only primary key I can currently use to relate the devices between various IT systems. For example, our property database has mobile devices listed with IMEI and asset tag. I would like to assign asset tags to devices in Jamf, but the only common field between the property database and Jamf is the IMEI. It is straightforward to pull a specific device by serial number or JSS ID, but the IMEI seems to be handled differently. Any assistance will be extremely appreciated!

According to Jamf's documentation, "By default, inventory is collected from computers using the “Update Inventory” policy that is created automatically when you install Jamf Pro. This policy collects inventory from all computers once every week. You can make changes to the default inventory collection policy at any time. In addition, if you want more control over inventory collection, you can create additional inventory collection policies as needed." I've been looking through the settings, and I see where I can change the frequency of check-ins, but I can't see how to change the frequency of inventory collection for computers without creating a new policy. Do I just need to create a new policy or is there a way to do this in settings? Any assistance you can provide would be much appreciated.

Hey so just wondering if anyone has a tutorial on how to install printer drivers with jamf. I inherited a jamf environment with no documentation. The existing printer drivers are of a type "pkg" but the ones i download from xerox are "dmg" or "man" files. I have tried adding these as a package to my printer install, but i dont think jamf actually does anything as it does download and "install" the dmg file but it happens in less than 1 second which i think is not likely working. I also cannot see any xerox drivers in the list. And then then printer says it has no drivers when i go to try and print. I have looked into making a PKG out of a dmg, but it seems really complicated and geared more towards applications. These are drivers. Does a guide exist for how to make the PKG into a DMG i can use? Lots of forums posts mentioning casper and composer to somehow make this file. I dont really know what those are, but seem like a paid product (casper) and a PHP package distribution framewor

When Big Sur came out, I used Restricted Software to restrict and delete the Big Sur Installer when it was attempted to run. Now I am removing that restriction on certain test computers by adding them to the Exclusions list under Scope. Unfortunately, doing this does not seem to un-restrict the installer immediately. Is there something else I need to do first (such as wait a certain amount of time, or run a recon, or restart)? Thank you very much.

After imaging 2016 MBP with a 10.12.1 image (built from the same model) the computer boots up and I immediately get a white square with a spinning gear for several minutes. Then I get the error above. There's no indication of what it's doing and I can't access the log to see what's wrong. The Mac is completely unusable because I have to shut it down or click Try again that never works. What the heck is going on? Anyone know what this is?

Long story short, a few months ago we changed CA's and found ourselves stuck with updating the existing wifi configuration profile. We ended up having to change the entire company's wifi SSID to get around this. (more info here - https://www.jamf.com/jamf-nation/discussions/23826/config-profile-question) We ultimately decided to deploy the wifi config profile through a script using the "profiles -I -F" command instead of configuration profile for fear of getting stuck in the same situation. While the cutover to the new CA server went relatively seamless, we don't have a seamless way of updating the wireless certificates. (it only works if the user goes through Self Service) What I'm looking for:I'm looking for a way to have seamless wifi certificate renewals. Here's the problem:Running the script as the logged on user through Self Service works 100%. It'll remove the old wifi cert, download a new wifi cert, then It'll create the com.

I saw an Extension Attribute "Current AirPort Network". How can I use this to list clients connected to a specific SSID. We have a School that we want to move all clients to the new SSID because the password was compromised (we are working on RADIUS authentication but not finished yet as we want to integrate it with the Lightspeed Rocket content filter) I pushed a script to connect them to the new SSID, and remove the old SSID from Preferred Network List. I scoped by Network Segment, once per computer. What I would like to do is, create a smartgroup with clients connected to the old ssid, and use it as my Scope. Run the policy ongoing until all of them is no longer with that smartgroup. I scheduled to deactivate the policy after 1 week and extend it if necessary.

I’m working on a computer currently that is having logon issues with one users account. The user logs into the computer it tries to login then goes back to the login screen. Has anyone ever seen this error and knows a fix?

Has anybody successfully create a licensed package for GraphPad Prism v 7a? Just curious to see what people's thoughts were in the process for this.

Hi =)We would like to pre-publish a network SSID via plist or script of possible which does eap-tls auth with a user based certificate ( due to mac is not AD bound, we use NoMAD ).Thanks to Nomad the certificate is already stored within the keychain.How to add preferred wirelessnetwork at index include Mode and Indentity?1) SSID default lan.test.comnetworksetup -addpreferredwirelessnetworkatindex en0 lan.test.com 1 WPA2E2) Mode = EAP-TLS ?3) Identification = user certificate ? Help me please =)

I have set up a pre-enrollment profile for iPads, but also have it to where multiple users can sign into the iPad. After initial setup, I am brought to the login screen, but there is no internet connection available to sign in to an account. There is nowhere on this screen to connect to a network either.

Hey All,I'm trying to script the Apple ID preference pane to open and have a command that works on the standard logged in user in terminal and in the past when I had gotten this, it was because the script was still trying to run as root, however I'm telling it to run as the logged in user and IM getting the above error "LSOpenURLsWithRole() failed with error -54 for the URL x-apple.systempreferences:AppleIDPrefPane"Below is the script, if anyone has a suggestion. #!/bin/sh currentUser=$(/bin/ls -l /dev/console | /usr/bin/awk '{print $3}') sudo -u $currentUser open "x-apple.systempreferences:AppleIDPrefPane" #sleep 150 #jamf recon exit 0 Gabe ShackneyPrinceton Public Schools