Hi all, We have iPads at our school that we currently have managed using device based management (i.e. they do not have a managed apple ID). After a recent test about how to deploy Books (or iBooks) it appears we need to have the iPads signed in with Managed Apple IDs (MAIDs). We do not need users (we are a Primary school) to have their own MAID. So our plan is to have MAIDs, that are created in ASM, that are specific for the device (in order to allow deploying Books to the Books App). We would like to be able to remotely sign in the iPads to the MAID and were wondering if there is a way to do this in Jamf Pro since you can assign a User (which is created by an import from ASM - i.e. the MAID) to an iPad. Otherwise getting each individual iPad and signing them into their MAID is just ...painful.

Hi,is anyone having troubles with the checkmark "Enable Self Service User Login"? We tried several times to uncheck it but looks like that it keep self re-enabling every time.It is frustrating.

Hey Guys, Just wondering what you guys are using for EA on checking uptime on the macs. I did find this :https://www.jamf.com/jamf-nation/discussions/10009/uptime-or-last-shutdown-restart Curious to see if you guys have an EA that works to report back in Days/Minutes and works on macOS Sierra!

Hello JAMFNation! I'm a relative noob. My company has restricted DropBox via the "Restricted Software" feature in JAMF. How do I add LDAP users to the exclusions list? Not seeing an obvious answer to this elsewhere on JAMFNation. We already have a few LDAP users on the exclusions list for this restriction, I just need to add one more. But when I select "Scope" and then try add an additional exclusion, I get only the option to exclude computers, buildings, groups, or departments. Thanks!

Hello fellow Jamf Admins, I'm trying to GET a specific extension attribute and only output the specific result using the following script: curl -sku $jssUser:$jssPass -H "accept: text/xml" xml=$(https://$orgName.jamfcloud.com/JSSResource/computers/id/$jamfID/subset/extension_attributes) deviceType=$(echo $xml | xpath "//*[id=$deviceTypeEAID]/value/text()") This command works perfectly when running it in Catalina and below, but for some reason when I run it in Big Sur I get the following error: Script result: Usage: /usr/bin/xpath5.28 [options] -e query [-e query...] [filename...] If no filenames are given, supply XML on STDIN. You must provide at least one query. Each supplementary query is done in order, the previous query giving the context of the next one. Options: -q quiet, only output the resulting PATH. -s suffix, use suffix instead of linefeed. -p postfix, use prefix instead of nothing. -n Don't use an external DTD. I'm pretty junior when it comes to scripting, and I'm n

Hi, I am building a new Jamf Pro Server which is going to take over the old server once operational. Can I use the activation code when setting this up without any impact to the existing server? Thanks

My company is in the process of setting up PatchBot (https://github.com/Honestpuck/PatchBot) for all of our Jamf Pro cloud instances. Per the checklist, I've set up all of the necessary policies (both computer and patch), and am using Firefox as my test case. I made the Firefox.pkg override, and created the Firefox.ptch recipe using the new package argument, and made the corresponding override. Problems: when running the autopkg.sh script, we're running into issues with both of the custom processors, JPCImporter and PatchManager. JPCImporter fails with a 409 error. It times out after the 10 attempts to update the package. 2021-01-08 11:29:17 DEBUG package update attempt 11 2021-01-08 11:29:18 DEBUG Attempt failed with code: 409 2021-01-08 11:29:18 DEBUG URL: https://***.jamfcloud.com/JSSResource/packages/id/166 PatchManager also fails with a 409 error and doesn't update the patch policies. The script just halts at line 190 after the 409 is returned. 2021-01-08 11:33:52 DEB

Hi, so in SCCM i have applications and do detection method for an application. With jamf of course there are packages and package receipts. When you have an essential application like an antivirus how do you make sure it stays on the machine. For example if a policy is set for recurring check in but run once per machine. Like I could set it to ongoing but seems bad to reinstall the package all the time. Wish I could just do a check to see if the file is there and if its not reinstall.

Here's a fun one for you duti users out there... I'm attempting to use duti with this script to set defaults. The commands work when run locally, but when I attempt to use a script or a command in Files & Processes, they don't work. It also didn't work when added to the duti package as a postinstall script. 10.15.7 is the version of macOS; anyone seen this before? Might cdef behave differently? #!/bin/sh #makes outlook default mail program /usr/local/bin/duti -s com.microsoft.outlook mailto #makes outlook default calendar program /usr/local/bin/duti -s com.microsoft.outlook ics all #makes outlook default contacts program /usr/local/bin/duti -s com.microsoft.outlook vcf all

In Sub-Location the Update Button for Devices is missing. The functionality (if enabled for the users role) is accessible via the direct link. https://*.jamfcloud.com/devices/updates.html The link should be available in the sidebar if it is enabled.

Hi, On 24 september when macOS Mojave 10.14.0 released i decided to upgrade my own MacBook Pro that was on 10.13.6.The upgrade was successful and at that moment it seems to be there were no problems at all, until i shutdown my device and booted it up the day after. When booting, seeing the log-in screen and trying to login with my Managed Mobile Account it will get stuck on the black screen with Apple logo endless. On our devices we have a local account configured for IT support, and that account is working flawless. What did i try to solve it;- Reset PRAM- Clear user templates- Clear ~/Library/Preferences- Rename ./mbr_cache ./mbr_cache-old- Reinstall macOS Mojave from Recovery (installer 14.0.22)- Reinstall macOS Mojave from Internet Recovery (installer 14.0.18)- Disable FileVault 2- Disk repair Also grabbbed an other fresh 10.13.6 MacBook Pro, configured my account etc etc and kept it clean as possible, upgraded and same issue appears. When booting to Safe Mode i am able to lo

Hi, I'm new to JAMF and wondered if any of this talent pool could point me in the right direction with fixing my problem. I would my user to be able to download Office 365 apps from Self-Service. As of right now, the apps show up in self-service but only redirect the user to the app store, and they can't download apps with their Managed Apple ID's. Is there a way to bypass the store and have it automatically install the apps when they click install?

Based on a JAMF webinar I want to create a self serv item that would format the drive on a Mac and install Catalina. I have created a policy that deploys Install macOS Catalina.app to /Applicationsand a second policy that executes the command '/Applications/Install macOS Catalina.app/Contents/Resources/startosinstall' --eraseinstall --agreetolicense --forcequitapps --newvolumename 'Macintosh HD' --nointeraction & In theory, this should quite all open apps, restart the computer, wipe the drive and install macOS Catalina. All it does is create a new partition and dump the installer files in there. That's it! The Catalina package runs fine when I install it manually.What am I doing wrong here?

Has anyone tried enrolling a new Mac with Catalina (10.15.0) and it just hangs on "Retrieving Activation Record "?

I need to push out a VPN payload that has its DNS servers set manually (Advanced/DNS under VPN settings in System Preferences) Is there a way to set the DNS servers for a VPN via script or terminal command?

Hello, Im an intern and I have been tasked with trying to figure out how to get JSS to pull the Department field from AD and then they want me to create a Smart Group with the search criteria of Departments. I have looked all over JSS but I can't seem to figure out how to get AD to pull that information. In the system settings for the LDAP AD server Departments has the correct attribute but then when I search a user JSS is still not pulling the information from AD.

Hello everyone, Does anyone know how to accurately report on whether or not a parent has linked their app to a student device in Jamf Pro?I can see in advanced searches there is an option for parent link with a free text box, but not sure what this is expecting.On a test device I have, it showed three when a parent had linked and zero when they hadn't - but is it really that simple?!?!Or is that the number of parent apps linked to that one device?

Hi , I want to test a application in jamf using parameters.I am completely new to Jamf and scripting. sudo /Users/p/Downloads/ABCD Installer 8.app/Contents/MacOS/ABC Installer --quiet --update No --analytics No The above code works in terminal. How do I test same in Jamf ?How do I get to know the application path in Jamf ?and what should be the script ?is it going to be 1 line scirpt ?

I have looked at this a few times now and not gotten a clear answer. I need to have all the desktop systems in my site turning off airport so that we remove excess chatter on the network. I Have this currently working through Managed Prefs but would like to switch it to Configuration Profiles. I downloaded com.apple.MCXAirPort.manifest from Jamf Nation but not sure where to go from there. Ideas and directions on how to do this? I know I don't remember how to convert plsit to upload into custom either. Been a while since I have looked into this and any help with how to go about this would be appreciated. I don't really want to create a script would rather it be a profile I can force to the machine.

Trying to move away from QuickAdd.pkg, have LDAP working, user logs in and chooses their site, but they're still just getting a button to download a QuickAdd.pkg. That pkg installs, but the profile will not be installed in 11.0 and there's not even one in there to approve like there was in Catalina. Are there elements of this process I am missing? I expect it to download and install the Jamf certificate and the mobile profile, but that option never arises.

Hello, I'm working on a script which will allow you to copy files/folders to an end user's Mac. I've noticed that scripts which error out are flagged in red in the logs for the policy. What determines if a script errored out and is there anyway to force that? In this script I run a check to see if the destination path exists. If it does not, the script terminates with a non-zero exit code. When such an event occurs I'd like it highlighted as a Problem so that I can see which machines did not successfully copy a file. After testing it a few times on a machine where I knew the destination path did not exist, the logs were marked as successful even though the exit code was non-zero.

I've updated this Python script to work on Big Sur, using all of the python3 modules instead. Admittedly, I'm not a Python expert by any means, so this could be an issue with the code. The new, python3 version of the script can be found: here. In any case, I'm receiving the error Script result: macOS 11 or later required ! with exit code 134 upon executing the script on my machine via a policy invoked in Self Service. My environment: Python ver 3.9.1 Xcode command line tools installed macOS Big Sur 11.1 I couldn't find much about this online or on Jamf Nation. Has anyone run into this error before?

Does anyone know what the direct URL for the M1 version of Google Chrome is? I'm using the script that will always download the latest version so I'm trying to update it. Right now it's DownloadURL="https://dl.google.com/chrome/mac/stable/GGRO/googlechrome.dmg"Thanks!

UPDATE 2020-02-04: Microsoft has postponed the update again from March 2020 to the second half of 2020. UPDATE 2020-01-24: Microsoft has postponed the update from January 2020 to March 2020. For y'all who are binding your devices to Active Directory, you are going to have to make sure that the LDAP connections are encrypted from mid-January 2020. Microsoft will release security updates across the board that requires all connections to be encrypted. There are essentially only two things that need to be looked at: the Jamf Pro server LDAP bind options and, if you bind any of your clients, the client directory bind configuration. For the Jamf Pro LDAP binding options, there is a great guide to follow here. The client directory bind configuration, however, can be applied in different ways, but the most usual ways are by configuration profile or binding via CLI. At the moment, the payload called Directory in the configuration profiles has an option under Packet encryption called "ssl"

Been running in circles for a while with this. I can SSH successfully into an enrolled computer using our jamf management account: "ssh jamfadmin@ipadress" However if I try to use the local Administrator account "ssh Administrator@ipadress" I get the error "Connection closed by 10.200.0.103 port 22" after entering the password. I know for a fact I am entering the correct password because if I ssh in successfully with "ssh jamfadmin@ipadress" and then enter "su Administrator" and enter that same Administrator password, the account switches to Administrator as designed. What the heck am I missing here?