I'm trying to wrap my head around PPPC /TCC, I started streaming the log when a popup came up for zOutlookPluginAgent, but it didn't show any new information in the logs after I clicked Allow other than an fseventsd entry and apple.sandboxd... The only thing I can see in Privacy security preference pane is under Automation it's listed with a checkbox next to Microsoft Outlook When I went into PPPC-Utility and dragged in the plugin agent in question, it lists the identifier "us.zoom.pluginagent" which I already have a PPPC for on the machine. I guess my question is 1) does anybody have a premed PPPC for Zoom meetings and the Outlook Plugin they would be willing to share and 2) is there a way to look at the log (assuming it's the com.apple.TCC) and see specifically what this plugin is doing so I can fix my existing one?

Hello, I'm using the PPPC Utility to create a Config Profile to allow the Zoom app in the "Accessibility" section. I've created the config profile, and it's installing on my test computer without an error. However, the check mark still doesn't show up next to zoom.us in the Accessibility section. Should it be as simple as creating the profile and sending it to the laptop, or am I missing a step? Thanks, Noah

We have about 60 Mac Minis (2018/2020) in our datacenter. They are using "Sonnet RackMac Mini 2018 rack mounting chassis" which has a button on the front that actuates the power button to the Mini on the Back. This is fine when we go in to the datacenter, but as you can imagine my company ain't too happy about frequent datacenter trips to power fail workstations in a server environment. Anyone have any suggestions on some IP solution to offer remote power to Mac Minis?

We're working on a bit of an API project centered around building an app that would allow some of our lower-privileged users to update prestages for mobile devices using a tool that we provide. Using the new API, it looks like this should be possible, but, whenever we try to update the status of a device using an api call, we get an error 409: Optimistic Lock Failed . This happens even when we use the 'Try it' options through the API UI. This happens if we try to delete the scoping or modify it. Here's the API call (with variables): curl -X POST "$JSS_URL/api/v2/mobile-device-prestages/5/scope/delete-multiple" -H "accept: application/json" -H "Authorization: $token" -H "Content-Type: application/json" -d "{"serialNumbers":["$serial_number"],"versionLock":1}" Here's the return: { "httpStatus" : 409, "errors" : [ { "code" : "OPTIMISTIC_LOCK_FAILED", "description" : "Conflict", "id" : "0", "field" : null } ] Has anyone else seen this? Am I missin

Hi,Whats the best way to test the prestage autoenrollment? I've been branding and setting up scripts to install software etc. I've got a VMware machine installed with MacOS Catalina. Can I change the serial number of the VM to match one in ABM and work with snapshots? Or is there a better way? Thanks,

Below are 2 screenshots from today, one taken on my Intel laptop and the other from M1 MacBook Air. Both machines are connected to our campus network same Wi-Fi, the same VLAN, and the same firewall. But for some reason, the M1 laptop will not show ANY new macOS software updates! Before the 11.2.1 update, I had this issue with this same M1 laptop and the only way to get it to update is by reinstalling macOS from Recovery. Has anyone seen this before?

I need some help and guidance with the cleanup of the Outlook and Teams caching. Sometimes it is needed to delete those. So i made a script and want to publish is througt the selfservice App. So if our servicedesk advices someone to delete the cache, it can be done by the user. However, my scripting is not that great. I want to present a popup with 3 choices to the user. Clear Outlook cache, clear Teams cache or quit. The latter one if the user is curious :-) This is what i have so far but it errors out. What am i doing wrong or is there a better solution to this problem? #!/bin/bash # # # Clean up script! # # Task - Clear outlook address cache list! # Task - Clear Teams caching! # # #echo on if needed #set -x SURETY="$(osascript -e 'display dialog "Delete the cache files?" buttons {"Teams", "Outlook", "Cancel"} default button "Cancel" with icon stop')" if [ "$SURETY" = "button returned:Outlook

I am trying to identify the Apache2 version to scope systems that need an update, but I am experiencing some unexpected results. My EA script: #!/bin/sh result=`httpd -v | grep "Unix" | awk '{print $3}' | cut -f2 -d"/"` echo "<result>$result</result>" When I run as root on my test system, the result is what I expect to see:<result>2.4.46</result>But the EA result in JAMF pro is 2.4.41. A few details that may help: 2.4.41 is the version that ships with 10.15. I am leveraging MacPorts for the Apache2 update to 2.4.46. Any ideas are appreciated :)

I'm trying to get the most current version of Big Sur so I can add it to an installer script. Basically just checking if the user has the most current version of the installer before it runs. I have this so far but I am a noob at awk and grep commands. #!/bin/sh latestver=`curl -s http://itunes.apple.com/lookup?bundleId=com.apple.InstallAssistant.macOSBigSur&country=US | awk -F':' '/"com.apple.InstallAssistant.macOSBigSur", "version"/{print $3; exit}'` echo "Latest Version is: $latestver" I'm trying to get the 11.2.2 value into the latestver string. Any help would be much appreciated. Also, if anyone has a better way of getting the most current version number, I'm all ears. Thanks.

We've found this script extremely useful for removing Office 2011. Is there something similar floating around for Office 2016?

We have a school in our district that has Epson interactive projectors, which uses Epson iProjection software/driver. I have the driver installer working, however, I can't get the iProjection pkg to work. I originally just pulled the pkg file from the dmg, which did not work after I placed it in Self Service - it just errors out with this from the policy log Installation failed. The installer reported: installer: Package name is Epson iProjection Ver.2.22 installer: Installing at base path / installer: The install failed (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.) I know that this pkg installer has selectable options - could that be causing it to fail? If so, how can I pre-select options? With a script? With composer? How? I did do a snapshot pkg, but for whatever reason that failed as well. This campus tech is extremely busy with the new building, so trying to do what I can to assist him and didn't rea

Testing Big Sur with my existing Prestage enrollment and when I log in with the local admin account that is created by the prestage I am forced to change the password. No new password is accepted no matter what I try, so I can't log in. No error about complexity, the Reset Password box simply shakes. This has not occurred when I used this prestage on 10.13 or 10.14. I only have minimum passcode length and maximum passcode age set in the prestage profile. Any suggestions?

I've received a request to change a lab of iMacs over to Google Chrome as the default browser. The lab is currently equipped with Snow Leopard and Chrome is already installed. Safari is the default browser at the moment. I've attempted to do some internet searches on how to do this but come up short since I'm wading through tons of sites explaining how to change it via the gui. Has anyone done this via Casper or are aware of how I could implement such a solution? This needs to be something I can automate as I can see this getting requested in other labs soon. Thanks in advance.

Hi AllI used to have an ARD script that was able to report on installed Graphics Hardware on any mac hardware...typically I've misplaced this so wondered if anyone had tried this before or even better might have incorporated Graphics Card reporting into Casper Hardware inventory? Cheers

Hello, I'm trying to get the two commend below to display in Extension Attributes. cat /etc/passwd | grep '^.*:0:.*' | wc -l shasum /etc/sudoers | sed 'sX/etc/sudoersXX' thanks in advance.

Hi,I've have JamfConenct working with Azure AD but as soon as I deploy a policy to enable FileVault and escrow keys to Jamf server to the machines it breaks AD Azure connectivity. A reboot show the standard mac login screen and if I logoff the user I get a broken Azure AD screen. I've tried deploying FileValt first then JamfConnect but same problems. Any ideas? Regards,

I have received a notification asking me to change the password method for user-initiated enrollment for the jamf admin account to a random password. I have set the password to a specific password so that I know what it is in case I ever have to use it in an emergency, so I don't want to change to a randomized password. Can anyone explain why it forces you to set the password to random and how do I get rid of the notification?

Zoom 5.5.2 was released over the weekend, and I uploaded the new pkg to Jamf so I could have all Macs updated before my institutions classes started Monday. The new version wasn't listed and still doesn't seem to be. There are a few devices that auto-updated to 5.5.2, and those are all coming up as an unknown version now. Any ideas when the newest version will be listed in Jamf?

Hi everyone. I'm trying to find a way where I can add a bookmark 'URL' on chrome to all users, any idea?

So, odd use case I know, but here's my dilemma: Our privileged wifi is allowed via certificates that are installed via configuration profile, and they authenticate based on the machine being bound to AD. Sometimes, our users take their laptops offsite for periods of time, during which their AD password changes. The next time the machine touches our network, it breaks the privileged wifi and puts the laptop on our general network. The solution has been to delete the wifi profile, delete the keychain entry that our general wifi installs in the login keychain, and then reinstall the wifi profile. I'd love to come up with a solution that a user can do from Self Service, but the issue becomes: how do i get the wifi certificate back on the machine if it doesn't have internet? Would it be possible to use Composer to create a package that "installed" the wifi profile, cache it, and then create the Self Service profile that uninstalls the current profile, deletes the single keychain entry,

I have created VMware Fusion 11.5.1.pkg file by using Composer/Package tool. while I tried to install it in new Mac installed successfully when opening the VMware Fusion getting attached error. if I use the same package for upgrade the VMware fusion from older version to new version(11.5.1) it works. Does anyone know how to do this?Any help would be appreciated. Thank you

We just went through JumpStart for MacOS and I'm struggling to get our Chrome package to install properly. Maybe an issue with the package itself? We have a smart group to look for computers without Chrome installed. I did figure out that I had to install Rosetta 2 first, but the Chrome policy appears to be successful, but then Chrome just isn't installed. I added Chrome to Self Service and tried running it and it says it finishes, but Chrome is no where to be found.

At the beginning of the academic year, I pushed out version 15.35 and we lock most software updates during the semester to prevent any additional headaches. I opened Word last week and saw a nice banner at the top telling me to update my Office. I run a script during Office install that sets update checking to Manual and have never seen this banner until recently. I do not see any options in the GUI to not display this update banner. Does anyone know how to disable it?

What is the best way to package and deploy office 2019? Thanks

Has anyone taken a look at Aspera Connect 3.5.2.x? Owned by IBM, and until today not listed under Third-Party Products, it is distributed as an .app installer, with the requisite PKG icon, probably a hint that IBM thinks we won't notice. It has a 501 line .script (AppleScript) intrusive script embedded in it. It has an embedded flat *.mpkg installer, that has embedded scripts with such lovely syntax as: Apparently the person writing the preflight script doesn't believe in close quotes... if [ $is_admin = "yes" ] ; then echo removing system wide apps rm -rf /Applications/Aspera Connect.app rm -rf /Applications/Aspera Crypt.app echo removing system wide plugin rm -rf /Library/Internet Plug-Ins/Aspera Web.plugin rm -rf /Library/Internet Plug-Ins/Aspera Web.webplugin # this is for versioned plugin dirs rm -rf /Library/Internet Plug-Ins/Aspera Web* fi echo removing local user plugin rm -rf ~/Library/Internet Plug-Ins/Aspera Web.plugin rm -rf ~/Librar