Is there some simple thing I can look for on a system to decide if they are using Office 2019 or Office365?

We have Macs and iOS devices in use by developers and they periodically need to enter an AppleID to install or update apps from the app store or Self Service. Is there a way to bypass this with Jamf Pro? If not, I would like to know how others handle this type of thing on your instance? Like, would it be better to lock down iCloud and any sharing and allow users to use there personal appleids in app store only? Or would it be best to create an appleid for each device and assign it to the user? OR... Would it be easier to create one appleid for every 5 computers or 1 for every 10 ios device?  Really hope someone can help here. Device deployment and App management is, I assume, supposed to be far simpler than what I am making things out to be, LOL Thanks in advance, Cooley

Just wanted to walk through a scenario with file vault. I have user A login with Jamf Connect to Mac and setup file vault. User A works for a few months then gets a better job and user B starts. User B logs in with Jamf Connect Creds. Does FileVault need to be reset for User B?

Hi, I'm having trouble getting this script working. It test successfully when running the script locally on my machine, but when run through the JSS the change default location isn't working, screenshots still go to Desktop, and the script throws no errors. Any suggestions? #!/bin/sh loggedInUser=$( ls -l /dev/console | awk '{print $3}' ) sudo -u $loggedInUser defaults write com.apple.screencapture location ~/Downloads mv /Users/$loggedInUser/Desktop/Screen* /Users/$loggedInUser/Downloads 

Is someone willing to help me out? I've been using a similar script for google drive for sometime now. But with the release of backup and sync I can't seem to make this work. #!/bin/sh -x logfile="/Library/Logs/jss.log" user=`ls -l /dev/console | cut -d " " -f 4` PRODUCT="Backup and Sync from Google" # installation /bin/echo "`date`: Installing Backup and Sync for $user..." >> ${logfile} dmgfile="image.dmg" volname="Install Backup andy Sync for Google" url="https://dl.google.com/drive/InstallBackupAndSync.dmg" /bin/echo "`date`: Downloading $PRODUCT." >> ${logfile} /usr/bin/curl -k -o /tmp/image.dmg $url /bin/echo "`date`: Mounting installer disk image." >> ${logfile} /usr/bin/hdiutil attach /tmp/image.dmg -nobrowse -quiet /bin/echo "`date`: Installing..." >> ${logfile} cp -R /Volumes/Install Backup an

Hello, I recently migrated an employee to a new laptop. I used migration assistant to migrate the files over to the new machine. I ensured I removed all MDM profiles with the old machine to ensure certificate from the previous machine don't land on the new computer. The new computer was DEP device so it enrolled it self before the migration started The migration was successful however the new computer isn't taking management tasks. Check screenshot of management commands pending. These commands have been pending for days now. Odd thing, the computer updates inventory and check in entirely fine Here's what I tried Command Runsudo jamf reconsudo jamf managesudo jamf policysudo jamf enroll -prompt (to see if the CA certificates will help)

Just thought I'd throw this out there since it was driving me nuts. Had a bunch of Teacher machines not showing any classes in Apple Classroom. Finally realized that it was because we migrated from an older local server to a new cloud hosted server and none of the pushed apps are actually being managed. So my solve was to make a policy to remove the Classroom app then run a recon which would push it back. Gabe ShackneyPrinceton Public Schools

Hey all,I'm trying to confirm the behavior I'm seeing.Right now I have the 10.15.7 Catalina installer scoped Via the app store to self service. I've helped a few staff members click on the install button for this for self service and then it downloads the installer to their computer. Then once it completes, it shows the open button in self service. Once this is clicked, it used to ask for an admin users name and password to start the install process, but now it seems to let the user run though the upgrade with out prompting for this. Is this how it works now? Is this a new feature? If so then great and I can just scope the Catalina update to 10.15 through self service and not have to worry about it. I just know when I've scoped the Mac OS Installers previously through the app store, it still required an admin to run it. Gabe ShackneyPrinceton Public Schools

Hey all,I've been starting to play around with putting an acceptable use policy pop up during the login process. Unfortunately we cannot afford JAMF connect, and I don't love the Apple Policy Banner that displays each time the machine reboots. I'd rather have a pop up (maybe with JamfHelper) that states the AUP and then gives the option to accept it during the first login. Then at least I'd have a log file showing the policy ran and they clicked accept. Anyone doing this sort of thing already so I don't have to build it from scratch? Currently we are using DEP notify to do the naming of the computers and cannot have end users dealing with this step of the process, but I do know that depnotify has this feature as well. I'm also aware of the enrollment customization piece, however since it cannot accomplish the naming of our computers, it's still not a good solution. Gabe ShackneyPrinceton Public Schools

Anyone encountered this issue before? How can we get it to show the correct fonts properly?

Hello,Is there a way to delete duplicate certificates? - Today we push out our AD & Wifi certificate with a configuration profile, and had to do some minor changes on the settings for the certificate. The result is we now have two certificates with exactly same name $SERIALNUMBER.Domain.Companyname.comand we would have to delete the older one, something like "...delete certificates created before December 16th.." Is there any "smooth"" way to do this?

Hi all, we want to deploy some 'Software-Stacks' e.g. 'Software-Stack IT' which installs Remote Desktop and iTerm2. We already tried a Policy which installs all needed Packages. It works without a problem, but it has one small downside: If the by the Stack installed Software (iTerm2) is also available in Self Service as a standalone Installation, the Item is not marked as 'Installed'. The Button stays at 'Install' and does not switch to 'Reinstall'. So i am on the search for some kind to initiate the self service install via a script or something. My idea was to let the Software Stack only execute a Script which call Self Service to install the needed package. 'open "jamfselfservice://content?entity=policy&id=86&action=execute"' sadly did not work. Any other way? Thank you very much!

I need to make an extension attribute to check for a certain group on our AD. I can list all groups based on user but no luck basing it off computer name. Any ideas?

Hey everyone.  Looking to create a smart group, via an Extension attribute, that looks for every MacOS device that has the home folder 'test'.  So /Users/test.  Having trouble putting together the script for the extension attribute that can look or every device with this home folder.  Would appreciate some help.I then want to delete that home folder for all confirmed devices by scoping the smart group and using the command 'sudo rm -rf /Users/test'.  Does this seem like a reasonable way to accomplish this?I guess I could just blast every device with this command, but that seems a little unwise...  😉 EDIT- I got the script figured out (see below), but still looking for advice on best approach for deleting the home folder on devices that have it.  Thanks. #!/bin/bashif [ -d /users/ ]; thenecho "<result>Has test Folder</result>"elseecho "<result>Does Not Have test Folder</result>"fiexit 

I've been using a process that was developed by macmule. It's mostly still working across the various OS's. However, I'm trying to get it to sync to an external drive rather than an internal drive. When I point the script to the external drive, the script seems to be running prior to the drive being registered, so the script is creating a folder in /Volumes and starts replicating. The drive then finishes mounting, but has a 1 appended to the end which makes it the wrong path. I tried adding a sleep timer but it didn't seem to work (shown).I've tried'"/Volumes/Peg...."'and with various versions of ", `, and even manually putting the path in with \\ commands (.../Pegasus\\ -\\ SA) Here's how it's setup now.sleep 15 emailAlert=$(/usr/bin/rsync -avrpogz --delete --log-file=/private/var/log/rsync.log -e ssh ':"/Volumes/Promise RAID-File Share/CasperShare"' "/Volumes/Pegasus - SA") 

Might anyone have any experience deploying AnyConnect 3.1+ using Cisco's installer but without the Web Security module? Cisco mentions something in their documentation regarding a configuration file for the installer named ACTtransforms.xml but I cannot find any examples of this file, nor any info for how to create one. I have tried searching and have found no additional info. There is a script that can be run after the installation that will remove this module, but I'd prefer for it never to be installed in the first place.

We are seeing this popup here and there in our environment and I am afraid it will become more widespread. I have configured settings as recommenced to prevent it but it does not work. The worst part is clicking OK does not let the user continue, nothing happens. They are basically blocked from using any Office apps as you can't get pass this popup. We are also using the VL license. It started showing up with version 16.50.21061301. Has anyone else seen this? I tried solutions as recommended by Paul Bowden's PDF https://www.kevinmcox.com/2019/08/privacy-and-consent-changes-in-microsoft-office-16-28/ Config Profile looks like this: <?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <key>HasUserSeenEnterpriseFREDialog</key> <true/> </dict></plist> and I have also tried Paul's profile found here:https://g

Hi Jamf Nation! We’re excited to announce new enhancements are coming to the community! We don’t want to spoil the surprise, so we’re not sharing details…yet. But we do need your help. If you could hold your thoughts and not post new comments, answers or feature requests from 11:30 a.m. CST on July 12 through 9:00 p.m. CST on July 13, we’d be especially grateful. This will help us ensure nothing is lost while we implement some notable changes. Also, if you have content within the Jamf Pro Add-Ons space, we ask that you move anything you want to keep to another location (e.g., https://marketplace.jamf.com/, if your organization is in our Marketplace or on a personal GitHub page). Jamf Pro Add-Ons, and the content that lives within it, will no longer be available starting July 13. As a reminder, you can continue to access our Support team (https://account.jamf.com/support) through Jamf Account (https://account.jamf.com), should you have a question arise that can

Hi Guys, We are getting ready to deploy Pulse Secure to our Mac systems. Is there recommended process that host checker should look for to verify a system has our Jamf MDM installed and ultimately allow the connection? Hopefully this question makes sense :) Thanks!

We recently imaged about 250 macbook airs using casper imaging but later noticed that they all show up in JSS as Unmanaged. Is there a way other than recon that we can make them manage again ?

Starting to reference some Google Docs as bookmarks in Self-Service. However, Google complains that "The version of the browser you are using is no longer supported. Please upgrade to a supported browser." How often does the codebase get updated for this platform? Also, is there a way to force a self-service bookmark to launch a full browser on the user's system instead of the internal browser?

Hi, Sorry does someone have copy of the Zoom 5.7.0 IT Installer I could have? The current IT installer version being hosted by Zoom is 5.7.1 but we've version locked on 5.7.0 on our lab deployments for Mac and PC and I've missed the window to download the 5.7.0 version. Thanks in advanced.

We had a MacBook Air grow legs last week, and are trying to track it down. We enabled DEP and jamf was already installed. The new "owner" has updated from El Cap to Sierra and added a user account. The device is still checking in with our JSS. I am looking for a way to get the device to report it's GPS location. I found a number of github (whereami) and sourceforge (LocateMe) projects that do this from the CLI, but none of them seem to work under Sierra. I saw a post on discussions.apple.com from @jelockwood that he got Location Services working by modifying the plist, and I think I have that part working too. But the binaries I was able to get simply hang, or can't be built because they are using SHA1 signing, which is no longer allowed. Anyone have any ideas? Thanks!

I am trying to run macOS updates on some VM's I am testing. This is a new work flow for me with adding VM's for testing. I have modified the .vmx and added the following which lets the VM enroll in to JAMF, however macOS updates wont work. I think I am missing something still. When you check about this Mac it only has MacBook Pro, not MacBook Pro (16-in 2019) which is the HW model I am using in this case. I know updates are tied to the hardware information on the device, but it appears defining the model number is not enough. Any ideas on what I missed? I plan on also testing with Parallels but I am waiting on a license, any information for that would be helpful also. serialNumber = "VM0000000003" SMBIOS.use12CharSerialNumber = "TRUE" hw.model = "MacBookPro16,1" VM not showing all the hardware information Physical device showing as you would expect

Hi Team,I need some detailed instructions on how to implement this as everyone is coming back to office and we want to strictly enforce it.We created a COVID 19 questionnaire in Sharepoint that should be displayed when user login:Condition:If all the answers to the survey are No, User access is granted to machineif any of the answers to the survey is yes, user access is denied and he should be displayed a message to leave office.