Is there anyone more familiar than I with Jamf's API who knows if I could script an alert (Slack or e-mail) for anytime a new computer enrolls?

Hi All, We're in the process of trying to "fix" all our machines that have either computer shipped MAS apps, or user installed versions. But we're having a hard time thinking of a good way to scope them. Scoping them to all computers results in any machine that already has the app just not installing the VPP version. Scoping to computers that DON'T have the app results in the computer falling out of scope after it has the app... which presents potential future issues (if Jamf ever implements "remove app when no longer in scope" for macOS, the computer would sit there and add/remove the app repeatedly). The "best" way I can think of is using the API to add computers to a static group that scopes the app... but this is super messy and last time I tried this the static group ended up clobbering itself (I believe jamf fixed this bug where adding/removing any members of a static group would cause the group to be recreated from scratch). So, how are people doing this in a rational way?

Hi, Found a variant of Minecraft that puts an invisible folder at the root of the local AD users home folder. It creates a folder called ".minecraft". I am not very good at scripts, and I don't want to accidentally screw things up. I know you can do a path to a file in a policy, but am not sure how to do that for every local AD user account. So just asking for peoples best practice to do away with this file. Thanks!

Hey all, what's your favorite way of packaging up software for deployment in Jamf? Is composer still the way to go or is there a better solution? I'm mostly focused on M1 versions of Chrome, Slack, and Chrome for new macs I'm deploying.

Hello,I created a configuration profile using the latest version of the PPPC Utility. The config file allows code42 CrashPlan to backup user data. I have deployed the profile via our JAMF server to all of the computers running code42 and macOS 10.14-10.15. It successfully deployed to most computers but a few are failing. When I looked at the failed computer's Management tab in Jamf, I can see the error on why it failed. This is the first time I have seen any config file fail on deployment and JAMF and don't know what is causing the error or a work around. I was wondering if anyone has seen this type of error and if they have a work around. In the payload (UUID: 8J90C2CA-AEBA-5406-9FG9-15789FE40QWR2), the key 'MediaLibrary' is not allowed. As a note MediaLibrary is set to Allowed in the config profile and the vast majority of our machines are accepting the config profile without error. I tried removing MDM from the affected computers the re-enrolling and approvi

Hello! We are currently deploying Microsoft ATP on our test Macs, but I have no way of knowing that it is working properly. Is there a test file that you all download to see if the antivirus is working?

Hey all, I am struggling to get this new AMR process down pat. I have a universal app that I need to install from a policy. the issue is rosetta2 isn't installed at this stage and while the app is ARM compatible the package isn't. Does anyone know a good write-up or app that can build a universal package. Packages cant do it. And I don't think composer does either. thanks in advance.

Case #: JAMF-2121564 (Incident Ticket) Happy Wednesday! After reviewing the Patch Management Software Title Definitions for Microsoft Office 16.44.20121301, the definition shows the Minimum OS is 10.13.6; I believe macOS 10.14.x is required per: https://macadmins.software Thanks.

We want to kick off the DEP Notify from non-DEP machines. It works but when it first launches you get a prompt that the file was downloaded from the internet and if you want to trust it. Is there a way to suppress that?

Anyone know how to do this ? If it's possible. I am looking for a way to store a list of Serial Numbers and Machine Names so that when my DEP Prestage devices come online they get the correct name without intervention, at the moment we can only get so far then we have to Set the Computer Name on the Machine record. We do not use the Serial Number or Asset Tag as part of the Naming Standard so I can't script round it or use an Inventory Preload

Hi, We are currently using Dell Data Protection (DDP) on our Macs to encrypt the drive and store the FileVault keys. We are looking to have Jamf take over encryption and storing the FileVault keys. For new Macs everything is working flawlessly, FileVault is turned on and the keys are stored in Jamf. On Macs running DDP we are able to deploy the script that prompts the user for their password and then stores the keys within Jamf. However once the keys are stored we are unable to uninstall DDP without first turning FileVault off, which causes problems for us. Does anyone have any suggestions on how best to switch from a third party encryption service to Jamf?

Has anyone ran DEPNotify on an M1 Mac and notice the Image command doesn't work? Just want to make sure it's not just me. I also notice in https://gitlab.com/Mactroll/DEPNotify/-/blob/master/CHANGELOG.md that DEPNotify was updated recently but the compiled/notarized download either isn't available yet or hiding somewhere that I haven't found yet.

Good day all. We finally got our M1 mac in to test on and aside of all the normal issues I expected with practically every package (pre rosetta install) our firmware password payload is having issues. Anyone else see this? Looks like the firmwarepasswd command does not work on the M1 Macs. If you run it with any of the arguments you just get the Man page saying you did the dumb. I am figuring due to the UEFI changes Apple has a different command for messing with UEFI PW's on M1 macs but I have not stumbled across it yet.

I am trying to set a variable based on if the user clicks OK or Cancel and I want forward the variable to a shell script so I know if I can proceed in the script or not. Does anyone know how to do this?

Hello beloved Jamf Community. As I'm no Scripting Expert, I humbly request if any i you could help me with the following script. I am looking for a Self Service option where the user fills in some text (most likely an asset tag number)Then In addition to what the user fills in, I need the following prefix to be added: A Prefix that is set based on the Site as per Jamf Inventory (NY for macs based in New York and UK for macs based in the UK etc etc)A Prefix that is set based on the Model of the Mac (iMac vs MB) So as a result it should be something like NYiMac0012345orUKMB0012346 Etc. Anyone can help me with this please?

Hey Guys, In our environment, we have 4 domain controllers in our domain, like test.com. Macs are joined to the domain using "test.com". Now, I want to know to which domain controller they are hitting. In windows, it is too easy just type "SET L" and you will get the logonserver. How to do this on mac? Thanks,Ashish

I had a requirement to run an application on all systems that would write report back to a server. I made the needed changes to the application's plist for our situation. The application ran and sent the report when double clicked. I then used packagemaker to package the application, and created a shell script to run post installation: open -a /path/to/application.app. After packaging, when the .pkg was run by hand - the application was placed where I intended, and the shell script ran, and we got a report... POLICY TIME.I then placed the .pkg in the JSS and tested running it as a policy. The package installed successfully. The application landed in the right place, as did the post install script. At the point the script was to kick off the application, it failed with:LSOpenURLsWithRole() failed with error -10810 for the file /path/to/application With the files in place - I still could drag the shell script to terminal and it would kick of the application. No, I don't thi

I'm not sure if this has been covered before but my searches didn't bring up anything so im giving it a shot. I am looking for a way to run multiple commands with one trigger. Essentially i'd like to run something like sudo jamf policy -event runImaging and have it kick off, in order: sudo jamf flushpolicyhistorysudo jamf policy -event loginsudo jamf policysudo jamf recon Is this something that is possible? Any assistance is greatly appreciated!

I have seen previous posts about the reminder from Self Service that tells people to approve their MDM profile. This seems pretty cool. My question is, do I need to initiate or turn on this feature? It's not working for me. Im personally am on 10.13.6 and Jamf is on 10.5 which is well past the required from what I've read. My test machine does not have the MDM profile approved so I know it's not working. We have a lot of machines that do not have their MDM profiles approved. It would be nice to get this working. We are in DEP but at only maybe 20% of our machines are DEP'd as we are new to the program. What am I missing here?

Hello, Since updating the script "OS_Upgrade.sh" a few hours ago, I have the following issues during an upgrade to Mojave: Error 23. Expired certificates while the installer was recently downloaded from the App Store and moreover, it works by executing the update manually. Error 16: "FV2 Status is not Encrypted" while Filevault is not enabled on the computers. Error 2: "Minimum required OS value is provided and the client's OS version is lower." When I update from a MacOS 10.13.6 to Mojave. Thank you for your help

Hello, I am having difficulty figuring out if there is a way to push out a LaunchAgent to multiple machines at the same time. I have a .plist file that I would like to have put into '/Library/LaunchAgents' for all of our machines in our environment. Does the JSS or Casper Remote provide a way to place a .plist file into '/Library/LaunchAgents' for multiple machines? It would be great if I can avoid placing the .plist file into this location manually (one-by-one). Thank you,-Alex H.

I'm sure I'm missing something easy but I cannot find a way to add non-apple apps to the dock via Jamf. Any suggestions?

We have implemented Jamf<>InTune Conditional Access successfully in the past, however, we are looking to remove the Conditional Access app and the association of Jamf <> InTune. I know how I would complete this process, but I am looking to see if anyone has went through this and discovered the least user-impactful way to complete this objective?

I need to generate a report or Inventory Search that lists all computers and the version of Safari they are running. I realize I can create an Extension Attribute for Safari Version, but since that information is already in the database, it seems redundant to have to add the Extension Attribute. Any ideas on how to get Safari Version into a report? Thanks,Reid

I'm been having a LOT of trouble scheduling a restart policy. Or even just a policy that immediately restarts whatever is scoped to it when the recurring check-in occurs. I've got a policy, "Restart All" intended to just restart whatever I scope to it. I've set the policy settings: Restart Options > Restart Immediately, but nothing happens. The scoped computers will sit on pending forever, never restarting. I included an inventory update, thinking maybe it will only restart after "doing something". Nothing happens. So, I've instead changed the policy to issue the command "shutdown -r +3", to issue a restart command but give a three minute delay to report back to JAMF that the policy succeeded.. Still - everything just sits at pending, never kicks off. Added a custom trigger, went onto one of the computers, and manually kicked off the policy via terminal. System restart after three minutes. Shows as successful in the policy log