Hey so just wondering if anyone has a tutorial on how to install printer drivers with jamf. I inherited a jamf environment with no documentation. The existing printer drivers are of a type "pkg" but the ones i download from xerox are "dmg" or "man" files. I have tried adding these as a package to my printer install, but i dont think jamf actually does anything as it does download and "install" the dmg file but it happens in less than 1 second which i think is not likely working. I also cannot see any xerox drivers in the list. And then then printer says it has no drivers when i go to try and print. I have looked into making a PKG out of a dmg, but it seems really complicated and geared more towards applications. These are drivers. Does a guide exist for how to make the PKG into a DMG i can use? Lots of forums posts mentioning casper and composer to somehow make this file. I dont really know what those are, but seem like a paid product (casper) and a PHP package distribution framewor

When Big Sur came out, I used Restricted Software to restrict and delete the Big Sur Installer when it was attempted to run. Now I am removing that restriction on certain test computers by adding them to the Exclusions list under Scope. Unfortunately, doing this does not seem to un-restrict the installer immediately. Is there something else I need to do first (such as wait a certain amount of time, or run a recon, or restart)? Thank you very much.

After imaging 2016 MBP with a 10.12.1 image (built from the same model) the computer boots up and I immediately get a white square with a spinning gear for several minutes. Then I get the error above. There's no indication of what it's doing and I can't access the log to see what's wrong. The Mac is completely unusable because I have to shut it down or click Try again that never works. What the heck is going on? Anyone know what this is?

Long story short, a few months ago we changed CA's and found ourselves stuck with updating the existing wifi configuration profile. We ended up having to change the entire company's wifi SSID to get around this. (more info here - https://www.jamf.com/jamf-nation/discussions/23826/config-profile-question) We ultimately decided to deploy the wifi config profile through a script using the "profiles -I -F" command instead of configuration profile for fear of getting stuck in the same situation. While the cutover to the new CA server went relatively seamless, we don't have a seamless way of updating the wireless certificates. (it only works if the user goes through Self Service) What I'm looking for:I'm looking for a way to have seamless wifi certificate renewals. Here's the problem:Running the script as the logged on user through Self Service works 100%. It'll remove the old wifi cert, download a new wifi cert, then It'll create the com.

I saw an Extension Attribute "Current AirPort Network". How can I use this to list clients connected to a specific SSID. We have a School that we want to move all clients to the new SSID because the password was compromised (we are working on RADIUS authentication but not finished yet as we want to integrate it with the Lightspeed Rocket content filter) I pushed a script to connect them to the new SSID, and remove the old SSID from Preferred Network List. I scoped by Network Segment, once per computer. What I would like to do is, create a smartgroup with clients connected to the old ssid, and use it as my Scope. Run the policy ongoing until all of them is no longer with that smartgroup. I scheduled to deactivate the policy after 1 week and extend it if necessary.

I’m working on a computer currently that is having logon issues with one users account. The user logs into the computer it tries to login then goes back to the login screen. Has anyone ever seen this error and knows a fix?

Has anybody successfully create a licensed package for GraphPad Prism v 7a? Just curious to see what people's thoughts were in the process for this.

Hi =)We would like to pre-publish a network SSID via plist or script of possible which does eap-tls auth with a user based certificate ( due to mac is not AD bound, we use NoMAD ).Thanks to Nomad the certificate is already stored within the keychain.How to add preferred wirelessnetwork at index include Mode and Indentity?1) SSID default lan.test.comnetworksetup -addpreferredwirelessnetworkatindex en0 lan.test.com 1 WPA2E2) Mode = EAP-TLS ?3) Identification = user certificate ? Help me please =)

I have set up a pre-enrollment profile for iPads, but also have it to where multiple users can sign into the iPad. After initial setup, I am brought to the login screen, but there is no internet connection available to sign in to an account. There is nowhere on this screen to connect to a network either.

Hey All,I'm trying to script the Apple ID preference pane to open and have a command that works on the standard logged in user in terminal and in the past when I had gotten this, it was because the script was still trying to run as root, however I'm telling it to run as the logged in user and IM getting the above error "LSOpenURLsWithRole() failed with error -54 for the URL x-apple.systempreferences:AppleIDPrefPane"Below is the script, if anyone has a suggestion. #!/bin/sh currentUser=$(/bin/ls -l /dev/console | /usr/bin/awk '{print $3}') sudo -u $currentUser open "x-apple.systempreferences:AppleIDPrefPane" #sleep 150 #jamf recon exit 0 Gabe ShackneyPrinceton Public Schools

We've got some security software that only consists of a single binary in /sbin and a launch daemon in /Library/LaunchDaemons Some of the installs were done by our security team manually (outside of Casper) and I've been asked to make it deployable. I need to make a smart group to manage which computers don't already have it and to make sure the software isn't re-installed on top of an existing install, but I can't figure out how to set criteria to look for the presence of either of those files. Does anyone have any pointers? (yes, I realize that this software won't work in El Capitan because it installs to /sbin, but we're waiting several months before upgrading anything)

I have configured passcode enforcement settings in my configuration profile, but the device does not seem to require me to change the passcode upon authentication, or during the initial setup.

Hello, I have been struggling with this error since our Jump Start. We have a service account that is to bind devices to our AD upon enrollment. Every time, both via policy or by going to user preferences I receive this error. My AD account works to bind the devices in User Groups but the Service account receives (plugin encountered an error processing request 10001). The service account CAN bind PC's to AD. Domain is NOT .local Computer name is under 15 characters.

I've been trying to distribute backgrounds to the M1 Macs for days. but unfortunately these M1s behave completely opposite to the Intels. Log says "Completed" but on the M1 is only a blue background instead of the distributed background. all Intel Macs have the new background loaded. I have tried both ways as PKG & DMG both are successful on the Intels, but not on the M1. what am i doing wrong ?

Hello,Is it normal to need to reinstall Jamf Connect after a macOS upgrade in order to get the Login component working again? It seems that after upgrading from Mojave to Catalina, or even applying an update in the same OS, that the Jamf Connect Login stops being active. The config is all still there, and the Jamf Connect app is still there in Applications, but the Mac goes back to the normal "bubble" login as opposed to our Google login. We have to then login and reinstall the Jamf Connect package to get the Google login back.Is there some way to get this automated?Or do we have some incorrect configuration?Thanks for any information you can give,Tim

After coming back from spring break on Monday and finding 5-6 people who left their MacBook Air unplugged and on, I found myself with users who couldn't connect to the 802.1X because of date and time issues. The users do not have admin rights. Nothing like setting the clock manually for people and rebooting. I decided to try tackling the problem in the form of a script. Said script would be triggered at login on an ongoing basis (in offline mode as the JSS itself may very well be unreachable at that point). It would be scoped to an all MacBooks smart group or any other relevant targets that the admin sees fit. It would work something like this below. I was actually able to find a file whose date is updated but otherwise not changed by the end user in the form of the XProtect definitions bundle. Any feedback or enhancements are welcome. I've tried it out on a computer by manually setting it's clock backward and it does seem to work. I haven't actually tried it using my JSS though. Ho

Hi guys I'm trying to get our Macs a bit more up to date and uniform, since they've gone virtually unmanaged for quite a while. I made a policy to install software updates from Apple's software update server. The restart option is selected to restart if a package or update requires it, and the user gets a restart message with the specified delay before the restart. Is it possible to give the user the option to delay this restart? For example giving them a message with the choice between 'restart now' and 'restart later' (with a later time specified).I know I can allow users to defer the policy, but is this possible for the restart as well? Thanks!

Just starting with Jamf Cloud. We have an On Prem file share DP which we intend to use for people on site so that's the Principal Distribution Point. Would the best way to make use of the Cloud DP be to make it the failover for the On Prem DP? That way if a machine can't reach the File Share it "should" fail over to the cloud one e.g. in the case of machines outside our network.

We are new to jamf and we started with the trial version of jamf pro. I saw that there really wasn't much I could do during the trial so we purchased the product. I activated the license, downloaded Jamf Connect installer but it's still in trial mode. I cannot figure out how to get the license info registered with the paid version. Is this built into the installer or is there an import feature. The CS group gave me a Dropbox of the files but there is no README. Could use some assistance. We scheduled a 1pm call with them as we really need to get their help getting this off the ground. Thanks in advance!

We use pre-stage enrollments to setup new Macs. One issue I've run into is with our CA Certificate for our Wifi network. If it installs before the Mac is bound to the domain it doesn't work. I have to remove the configuration profile, join it to the domain and then re-add the configuration profile. Is there a way to not let a configuration profile install until the computer is bound to the domain?

Does anybody know if there is a way to get a notification or email when a device is unenrolled? I know there is the webook feature, but is that the only way to get notified?

We use an S3 Cloud Share for packages that we can't install using scripts, and Jamf Pro running in AWS as well. We are now in the middle of starting to roll out Big Sur and would preferably do this through Self Service as our users are not administrators. Due to the size of the package (around 11-12gb), we couldn't upload the package through Jamf as we get an error message each time when trying to upload it. Therefore, it was uploaded directly to S3 and I can see the package there along with our other packages. Is there a way to make Jamf see this package as well? Currently I can see all packages but not that one. Unfortunately as I said, uploading it through Jamf itself or via Jamf Admin results in an error.

So I just today deleted the (legacy definitions) for Slack and Zoom in patch management. But the new ones are not populating at all. I also switched to the new definition for Firefox and chrome. Those are working properly. Has anyone seen that issue should I just go back to the legacy definitions?

I am trying to set up a VM to test JAMF Connect using Parallels 16 and Catalina. I have set up the VM to use the boot flags, devices.smbios.serial="C01VG0EFHGFVB"devices.mac_hw_model="MacBookPro15,1" The VM will enroll via the /enroll URL and show up under computers, it will then get the CA and MDM profile. Both of which show as verified. The computer record shows it as enroll but not managed and no other profiles will come down. If I run JAMF manage, it tells me the MDM profile is not approved. If I got back into the profiles pane. It is now unapproved. I have no idea how to fix this, I have never had an issue like this. Any Ideas?

We are replacing our fleet of classroom iPads with newer models.The new iPads have all been loaded in via DEP, and placed into PreStage Enrollment groups for each year/grade level. How do I get the new ones all going before unmanaging the old ones? Won't I exceed our Jamf Device Count? The plan had been to decommission all of the old iPads, then start up the new ones, allow them to enrol themselves and place them in the appropriate classroom.However, the delivery didn't arrive until after the holiday period and now we're faced with having no iPads for days while we roll over the new ones.