Anyone know how to do this ? If it's possible. I am looking for a way to store a list of Serial Numbers and Machine Names so that when my DEP Prestage devices come online they get the correct name without intervention, at the moment we can only get so far then we have to Set the Computer Name on the Machine record. We do not use the Serial Number or Asset Tag as part of the Naming Standard so I can't script round it or use an Inventory Preload

Hi, We are currently using Dell Data Protection (DDP) on our Macs to encrypt the drive and store the FileVault keys. We are looking to have Jamf take over encryption and storing the FileVault keys. For new Macs everything is working flawlessly, FileVault is turned on and the keys are stored in Jamf. On Macs running DDP we are able to deploy the script that prompts the user for their password and then stores the keys within Jamf. However once the keys are stored we are unable to uninstall DDP without first turning FileVault off, which causes problems for us. Does anyone have any suggestions on how best to switch from a third party encryption service to Jamf?

Has anyone ran DEPNotify on an M1 Mac and notice the Image command doesn't work? Just want to make sure it's not just me. I also notice in https://gitlab.com/Mactroll/DEPNotify/-/blob/master/CHANGELOG.md that DEPNotify was updated recently but the compiled/notarized download either isn't available yet or hiding somewhere that I haven't found yet.

Good day all. We finally got our M1 mac in to test on and aside of all the normal issues I expected with practically every package (pre rosetta install) our firmware password payload is having issues. Anyone else see this? Looks like the firmwarepasswd command does not work on the M1 Macs. If you run it with any of the arguments you just get the Man page saying you did the dumb. I am figuring due to the UEFI changes Apple has a different command for messing with UEFI PW's on M1 macs but I have not stumbled across it yet.

I am trying to set a variable based on if the user clicks OK or Cancel and I want forward the variable to a shell script so I know if I can proceed in the script or not. Does anyone know how to do this?

Hello beloved Jamf Community. As I'm no Scripting Expert, I humbly request if any i you could help me with the following script. I am looking for a Self Service option where the user fills in some text (most likely an asset tag number)Then In addition to what the user fills in, I need the following prefix to be added: A Prefix that is set based on the Site as per Jamf Inventory (NY for macs based in New York and UK for macs based in the UK etc etc)A Prefix that is set based on the Model of the Mac (iMac vs MB) So as a result it should be something like NYiMac0012345orUKMB0012346 Etc. Anyone can help me with this please?

Hey Guys, In our environment, we have 4 domain controllers in our domain, like test.com. Macs are joined to the domain using "test.com". Now, I want to know to which domain controller they are hitting. In windows, it is too easy just type "SET L" and you will get the logonserver. How to do this on mac? Thanks,Ashish

I had a requirement to run an application on all systems that would write report back to a server. I made the needed changes to the application's plist for our situation. The application ran and sent the report when double clicked. I then used packagemaker to package the application, and created a shell script to run post installation: open -a /path/to/application.app. After packaging, when the .pkg was run by hand - the application was placed where I intended, and the shell script ran, and we got a report... POLICY TIME.I then placed the .pkg in the JSS and tested running it as a policy. The package installed successfully. The application landed in the right place, as did the post install script. At the point the script was to kick off the application, it failed with:LSOpenURLsWithRole() failed with error -10810 for the file /path/to/application With the files in place - I still could drag the shell script to terminal and it would kick of the application. No, I don't thi

I'm not sure if this has been covered before but my searches didn't bring up anything so im giving it a shot. I am looking for a way to run multiple commands with one trigger. Essentially i'd like to run something like sudo jamf policy -event runImaging and have it kick off, in order: sudo jamf flushpolicyhistorysudo jamf policy -event loginsudo jamf policysudo jamf recon Is this something that is possible? Any assistance is greatly appreciated!

I have seen previous posts about the reminder from Self Service that tells people to approve their MDM profile. This seems pretty cool. My question is, do I need to initiate or turn on this feature? It's not working for me. Im personally am on 10.13.6 and Jamf is on 10.5 which is well past the required from what I've read. My test machine does not have the MDM profile approved so I know it's not working. We have a lot of machines that do not have their MDM profiles approved. It would be nice to get this working. We are in DEP but at only maybe 20% of our machines are DEP'd as we are new to the program. What am I missing here?

Hello, Since updating the script "OS_Upgrade.sh" a few hours ago, I have the following issues during an upgrade to Mojave: Error 23. Expired certificates while the installer was recently downloaded from the App Store and moreover, it works by executing the update manually. Error 16: "FV2 Status is not Encrypted" while Filevault is not enabled on the computers. Error 2: "Minimum required OS value is provided and the client's OS version is lower." When I update from a MacOS 10.13.6 to Mojave. Thank you for your help

Hello, I am having difficulty figuring out if there is a way to push out a LaunchAgent to multiple machines at the same time. I have a .plist file that I would like to have put into '/Library/LaunchAgents' for all of our machines in our environment. Does the JSS or Casper Remote provide a way to place a .plist file into '/Library/LaunchAgents' for multiple machines? It would be great if I can avoid placing the .plist file into this location manually (one-by-one). Thank you,-Alex H.

I'm sure I'm missing something easy but I cannot find a way to add non-apple apps to the dock via Jamf. Any suggestions?

We have implemented Jamf<>InTune Conditional Access successfully in the past, however, we are looking to remove the Conditional Access app and the association of Jamf <> InTune. I know how I would complete this process, but I am looking to see if anyone has went through this and discovered the least user-impactful way to complete this objective?

I need to generate a report or Inventory Search that lists all computers and the version of Safari they are running. I realize I can create an Extension Attribute for Safari Version, but since that information is already in the database, it seems redundant to have to add the Extension Attribute. Any ideas on how to get Safari Version into a report? Thanks,Reid

I'm been having a LOT of trouble scheduling a restart policy. Or even just a policy that immediately restarts whatever is scoped to it when the recurring check-in occurs. I've got a policy, "Restart All" intended to just restart whatever I scope to it. I've set the policy settings: Restart Options > Restart Immediately, but nothing happens. The scoped computers will sit on pending forever, never restarting. I included an inventory update, thinking maybe it will only restart after "doing something". Nothing happens. So, I've instead changed the policy to issue the command "shutdown -r +3", to issue a restart command but give a three minute delay to report back to JAMF that the policy succeeded.. Still - everything just sits at pending, never kicks off. Added a custom trigger, went onto one of the computers, and manually kicked off the policy via terminal. System restart after three minutes. Shows as successful in the policy log

I get an error when I try to download Big Sur from both Terminal and directly from the App Store. The error is "Update not available | The requested version of macOS is not available because this update is managed by your system administrator. I did have an App Restriction but I remove that and make sure to run a recon. Anything else I'm missing?

Hi guys im trying to get my AD deparment. So when i do dscl /Active Directory/RUFUS_DOMAIN/All Domains/ -read /Users/tkimpton i want to be able to get my department dsAttrTypeNative:department: Information Systems Problem is im having problem outputting just Information Systems. Can anyone help me? Thanks

A little off topic, but Campus Security is tired of getting lost USB drives. They are on a little campaign with the computer labs on campus to remind students to remove their USB drives. One request is to have the computer remind them. Before I attempt to re-invent the wheel, does anyone have some sort of logout script that would detect if there is a USB drive and to remind the user to remove it? --Gretchen

Hi, I have been using the same set of scripts for the past 3-4 versions of Mac OS which will redirect the users profile folders (Desktop, Documents, Downloads, Movies, Music & Pictures folders) to the users Active directory home folder. I mount the home folder in the users profile and then create symbolic links to the various profile folders to folders within the AD home folder. If i select each of these folders, i can see the contents that is stored on the network home folder (e.g. if i click on the documents folder, it shows me the contents of the documents folder which is located on the AD home folder) The problem is the desktop (although it redirects ok) it does not show the files on the actual desktop. If i try to copy a file to the actual desktop, I get an error of "The operation cant be completed. An unexpected error occurred (error code -8055)" So in a nutshell, everything appears to redirect ok when i browse the actual folders within the local user profile, but not

Hello, In order to have the time to check that every of our apps is compatible with the new upgrade, I've used the "restricted software" to prevent users from upgrading to Big Sur. At the same time, software update are set to automatic so they can still get security updates. But obviously, Apple is trying to force user to use they brand new OS, so they notify user about downloading it. Is there any way to prevent that ? Users won't stop reaching to us because they can't install an update.

I want to scope a VPN install at a AD security group. Can this be done and how?

It's been awhile so I completely forgot how to convert an iPad that was original not purchased under the Business Manager to a DEP iPad. I know you have to use the Apple Configurator.

As the subject states.... in macOS Big Sur they have officially killed the --ignore flag, now what do we do? I imagine we can still restrict major version updates, but what happens if there is a incremental update that needs to be restricted for whatever reason?

How does the "Defer software updates for X days" thing work? Does it count days from the release of an update OR does it count the days from when the computer is made aware of the update? Here's the scenario:- I have the setting set to defer 1 day.- a Mac checks for updates and there are none available on this day- The Mac is shut down - Apple releases an update the next day.- 5 days later the mac is turned on Should that Mac be able to install the update right then since it has been more than 1 day since the update was made available? I would think so. However, in practice I am seeing that the Mac still says that the computer "is running the latest software update allowed by your administrator" until at least the next day (day 6). I haven't been able to find any clarification on how this process works. The way it's working now is not how I need it to work.