I'm using dockutil and loving it. But I'm hoping to accomplish one thing that may not be possible: Is it possible (with dockutil or otherwise), to add a network share point with a custom icon?

Add the process name of big sur and a message is optional here is a screenshot hope this helps anyone that needs it! Restricted software

Hello all. Since upgrade to Big Sur, the following EA script seems not to work properly anymore, as it always gives result "Not available". Any idea how to fix this? #!/bin/sh apiURL="https://xxx.jamfcloud.com/JSSResource/computers/udid/" apiUser="xxx" apiPass="xxx" MacAdd=$( /usr/sbin/networksetup -getmacaddress en0 | /usr/bin/awk '{ print $3 }' | /usr/bin/sed 's/:/./g' ) udid=$(/usr/sbin/system_profiler SPHardwareDataType | /usr/bin/awk '/Hardware UUID:/ { print $3 }') siteName=$(/usr/bin/curl -s -u ${apiUser}:${apiPass} "${apiURL}${udid}" | /usr/bin/xpath '/computer/general/site/name[1]/text()' 2>/dev/null) if [[ $siteName ]]; then echo "<result>${siteName}</result>" else echo "<result>Not available</result>" fi Thank you and best regardsChristian

Hi All, My company does not currently have an LDAP solution in place, but in the meantime I would like to implement a way for the user's full name from the local account to be automatically populated into the JSS Full Name or Real Name section of the computer profile. I've been scouring other threads, but I haven't found a definitive answer to what I'm looking for. The closest I've gotten so far is adding the local account username into the JSS. Thanks for all the help!

I'm working on upgrading from 10.12.4 to 10.15.7, and running into some trouble. I've set up a policy utilitzing the Catalina Upgrade script on Github - https://github.com/kc9wwh/macOSUpgrade My issue is that - the policy will try to download the installer three times, then fail due to a checksum error. macOS Installer Downloaded 3 Times - Checksum is Not Valid Prompting user for error and exiting... 0 Now, I don't really care about having this script kick off the other policy to download the installer. I've already got a policy for that, just drops the installer right into /Applications, and it works fine. I've already got it staged on all my computers, ready to kick off once I'm through with testing. I'm just looking for a GO button at this point. I just want to cut out all this automation for calling another policy to download the installer and verify the checksum, but I don't really know how. I've seen another poster with the same

Hey all, I got curl to download the QuickAdd.pkg directly from the JSS's enrollment URL but when it does download, it's a 1kb file and installer bombs out. Any thoughts in my syntax? cd ~/Desktop; curl -O -k -u jssUserName:jssPassWord https://my.jss.com:8443//flatpackagedownload/QuickAdd.pkg Basically, trying to script the download and install of the QuickAdd. I've tried as well using the -L option, but still downloads a 1kb file. As always, thanks in advance. -pat

I just updated my computer running Mojave to the latest Security and Safari updates. Ever since then when I am in the New Computer Package and click on Choose File I get no dialog box so I can't upload a package. I have noticed this same behavior for other websites also. I have no issues if I use Chrome so It appears to be something with Safari after the update. Any ideas on what might be the issue?

Hello! I'm trying to loop through a CSV of device serial numbers, extract those serial numbers as variables, use the variables and the API to get the JSS ID of the mobile devices as another variable, then use this new variable to execute some remote commands on the devices : #!/bin/sh while IFS="," read serial; do echo $serial jID=$(curl -sku $apiUN:$apiPW -H "Accept: text/xml" $apiURL/JSSResource/mobiledevices/serialnumber/$serial | xmllint --xpath '/mobile_device/general/id/text()' -) curl -sku $apiUN:$apiPW -H "Accept: text/xml" $apiURL/JSSResource/mobiledevicecommands/command/RestartDevice/id/$jID -X POST done < ~/Desktop/TestFile.csv However, whenever I run the script get the following errors : -:1: parser error : Document is empty My CSV is a .csv created in excel with a single column of serial numbers and no header. Is it possible that there is an error there? Or can I not loop and use these variables in the csv? The actual command I will be doing fo

First ever post! I would like to have a policy that places the installer in the Applications folder of macs in preparation for upgrading. One method I will use for Macs not yet on Catalina, is to create a package with the Install macOS Big Sur.app. When I place the installer app (a 12GB file) in Composer, the package it builds is only 15MB. I am using Composer 10.25.1 on a Catalina mac. Thoughts?

Departing employees have the option to buy their computer equipment at a fraction of the cost. Our offboarding process includes removing JAMF and leaving a user account as an admin. We recently got a message stating that the user cannot upgrade their OS (the message shown is an old version of ours). It appears as if the restriction is kept in a local cache and not removed upon removal of JAMF. Any ideas on what are we missing during offboarding?

Basically the title. We are moving on from Centrify but the existing mobile accounts still got the old Centrify search path. How do we change this? See image:

I have created 2 policies to install the 10.15.7 upgrade on systems that are on <10.15. The first policy Caches the installer.pkg and the second installs the cached package using the startosinstall command. I have configured the install policy to display a Start message, and deferral option. Restart options are set to "if package or update requires", and Maintenance is set to update inventory. I have also set a server side limitation to make the policy active after a specific date and time. I am testing on 2 machines and on each the start message pops up correctly, I select start now and in about 5 minutes the computer automatically restarts and the update installs. After the install and sign in with user, the Start message immediately pops back up and the only way to dismiss is by deferring the upgrade or starting. And therefore I am stuck in an endless loop of software upgrades. The interesting thing is on one of the machines the policy log shows as completed, but it con

Question for those running macOS Catalina I recently noticed that devices deployed with FV2 FDE require either a known user’s password or the FV2 Recovery Key when booting into the Recovery Partition. Has anyone here dealt with this scenario: Don’t know the user’s password Don’t have a known/working FV2 Recovery Key Here's the flow...1. Command+R+Power = Boot into Recovery Mode2. Answer Challenge Question: User Password or FV2 Recovery Key3. Wipe Disk/Reinstall macOS, etc. How does one get past this roadblock? Thanks!

I got an email last night, from Apple, regarding a replacement for the Volume Purchasing Program, Apple School Manager Apps & Books. It is fully described at this HT. We have 2 VPP tokens, and a couple of apps that got licenses on each token - one of those apps is paid. That makes distributing the paid licenses a little complicated. Well, one of the features of ASMA&B sounds like something that could help us unify into a single account. The Apple article states that our MDM vendor must support the new functionality, so my question is: Does Jamf Pro support ASMA&B?

Hey All, I'm running into an issue with PPPC where I can't install a profile because it must originate from a user approved MDM server? We don't use DEP here, but I've re-enrolled my machine to test with via UIE, clicked approve in system prefs, segmented profiles (I was planning on combining it with a kext profile for the same app), and I'm not sure what I'm doing wrong. Attached is a screenshot of what the PPPC payload looks like. Any help would be greatly appreciated so my team doesn't have to head here and click for every machine:

Is it possible to make an installer display the interactive installer dialog when deploying via self service?

Hey All,We just had a successful roll out of a one-to-one with MacBook Airs and I wanted to share some of what really worked for us. We started with imaging, which we use DEPNotify to prompt to name the computer and then run the installs for base software. (We asked Apple to setup our order but they had so many issues and delays that we canceled their setup and ended up setting up close to 2000 on our own using labs and our office, along with 100 Belkin ethernet adapters, and we ended up being able to image from 200-300 a day ). Our base system has Chrome, Firefox, Cisco Umbrella, Zoom, Adobe Creative Cloud (just the desktop app) and Microsoft Office Pro installer. I also install DockUtil and Desktopr to set each desktop and dock as they logged in. The last prep work I did was create a ton of TCC profiles to allow my various scripts and applescripts to work: We then had handouts where we kept all the machines on wired connections for the first login (still binding, dont ask) an

does anyone have this enabled in a policy ?does it actually work? Perform authenticated restart on computers with FileVault 2 enabledRestart FileVault 2-encrypted computers without requiring an unlock during the next startup so basically you have an encrypted mac, it's running a policy that requires a restart (software install policy, OS X update etc..), so when the policy 'restarts' the computer, the computer will bypass the 'encryption login lock' and go directly to user login screen ?

Hello there, I was wondering if there is a way to convert Mobile accounts from Open LDAP (Mac Server OS) to local accounts as I noticed that some of my users are not getting all policies/configuration profiles to work right and I assume its because of this. Thank you all. EDIT 1: Solution in comments below.EDIT 2: Once we removed the "mobile" from the accounts everything worked out fine.

Hi all, I'm having issues updating the DEP Token in the JSS. I always get the Error Message "Invalid results returned from Apple Service. All the Terms and Conditions are accepted, Time on the JAMF Server is correct. Does anybody have i hint to what is going wrong here? Any help appreciated.

I'm charged with standing up Jamf Pro on-prem and I need help understanding how internal Root and Intermediate certificates get deployed. Do these certificates have to be manually uploaded to Jamf Pro then distributed via configuration profile, or is there a way to do it via the AD CS connector? Thanks for the help.

We have a config profile with the setting "Restrict App Store to MDM installed apps and software updates" checked. On computers that only have Managed Distribution VPP apps, we're still getting a notification that there is an app that needs to be updated. When clicking on the notification, the app store is unable to open (as is desired). Is there something we can do to prevent these app store notifications?

Hello Team! We have some MacBooks which weren't added in Apple Business Manager( and as a result, in PreStage enrollment scope) and we used user initiated enrollment to add their MDM profile in Jamf pro. We managed to add them to the apple business manager later. The thing is, I want to check the "Automatically assign new devices" for PreStage enrollment so that when we buy new MacBooks, their enrollment would be automatically through that. But I'm afraid maybe it affects the previously bought MacBooks and erase their accounts. I wanted to know if that's the case, or it just affects the new purchase. As a general question, if a MacBook is being added to MDM using user initiated enrollment and and then being added to Apple Business Manager (and Jamf inventory, after the enrollment), does checking the "Automatically assign new devices" affects on that too or not (makes it go through PreStage enrollment or not).

Has anyone created an extension attribute to see if the McAfee Agent is managed or unmanaged? Originally i had made one looking at /Library/McAfee/cma/scratch/etc/log since it usually lists if the agent is managed or unmanaged there. But that log rotates out and may not have the necessary line always. There is also a SiteList.xml which lists all of the repositories, but i'm not sure if that is the best measure to know if a client is successfully managed or not. Existence of a keystore could be a possibility also... Any other locations to look at for the extension? Thanks

Just wondering if anyone else is seeing a crash when doing a full scan with Microsoft Defender? It momentarily pops up a message: "There's a problem with this App." The link in the message just takes me to the Microsoft Support Site, not to anything specific The message disappears and the app is reloaded. I can do a quick scan with no issues. OS is Catalina. I'm just in test stage so have only tried on two machines so far.