Stopping Mac OS Update notifications any suggestions on how to do this process?

First, thanks to @rtrouton for bringing us the Privileges app. I'm trying to set the Dock Tile Timeout time via configuration profile, using the "DockToggleTimeout" .mobileconfig sample from GitHub. So far I haven't gotten the configuration profile to apply the setting. I discovered that changing this setting from the Privileges app reflects in the corp.sap.privileges.plist in the user's profile (specifically in UsersmyuserLibraryContainerscorp.sap.privilegesDataLibraryPreferences), and so I changed the configuration profile to apply at the User level instead of Computer. However once the configuration profile was applied, the .plist file was not changed to reflect this change. Any thoughts on what I might be doing wrong? This seems like it should be fairly straightforward.

Hi Everyone As you may or may not know, Microsoft is ending support for Office 2016 for Mac on October the 13th 2020 (see link below). At our company everyone has an Office 365 license, and all new Macs are deployed with the Office 365 version, however there are still a lot of users (we believe) that are still using Office 2016. I would like to create a report of which machines are still running 2016, but as 2016, 2019 and Office 365 confusingly all seem to have the same version numbers, this is proving rather difficult. My question is- does anyone have a clever way of differentiating Office 365 versions of Office from 2016 and 2019 in a search or a Smart Group? Thanks! https://support.microsoft.com/en-us/office/end-of-support-for-office-2016-for-mac-e944a907-bbc8-4be5-918d-a514068d0056#:~:text=Support%20for%20Office%202016%20for%20Mac%20ended%20on%20October%2013,will%20you%20lose%20any%20data.

When changing a port number assigned for Healthcare Listener incoming communication of the ADT message. After changing the port in JPS (jamfcloud), and verifying (/etc/jamf-im/hcl/com.jamfsoftware.hcl.properties) on the host running jamf-im, after the next sync. We did not see messages delivered to JPS from listener. Should the Infrastructure Manager host (running Healthcare Listener) be restarted? There are no restart/reboot recommendations or a section on best practice when changing the port assignment in the documentation.

A few weeks back Apple released a supplemental update (2020--005) for macOS Mojave then quickly pulled it because it was causing issues. They then fixed it and released it again. Regardless if a computer had the faulty or the fixed update, the system build will be "18G6032". I'm trying to populate an EA using Data Type = String and Input Type = Script. I will then create a SmartGroup that I'll be able to identify computers that need the new Supplement update AND that are on the 18G6032 build. Here is the script I'm using for the EA: #!/bin/bash if /usr/sbin/softwareupdate -l | grep -q 'Supplemental'; then echo "Present" else echo "Not Present" fi If I understand this correctly, I'm using the "softwareupdate -l" command to list the available updates and if the word "Supplemental" is found/not found it is supposed to populate the EA with Present or Not Present. When I run this from ARD to a remote computer it is working fine however when I put it in an EA, the field is bl

We are attempting to create an enrollment invitation to connect a few iPads purchased outside of our DEP agreement, but every attempt ends in failure. The result is always "There was 1 error sending invitation" with the status "Failed to send invitation". History doesn't show anything. Some previous posts direct to a resend option but I cannot find it. Anyone else having this issue?

Hi, Has anyone seen any permissions issues with API updates of computer records since upgrading to 9.81? We have a pre-existing script that changes the status of an extension attribute for a computer record. It seems that since we upgraded to v9.81, this has ceased working. The most useful part of the API output seems to be the line: <p>Error: Not authorized for a user PUT</p> I have checked the privileges for the API user and there seem to be 2 newer privileges: Computer Extension Attributes & User Extension Attributes. I have allowed Update for both of these (along with update on Computers already set), but still no joy. Any thoughts?Dan

Working with DEPNotify, and I'm wondering if you can have multiple prompt windows. Right now, We're limited to two text fields (right now, owner and asset tag), and 4 popups. I think I need one more text field (room number)... So was thinking of having multiple windows. Would be nice to start with just asking "Purpose" and Asset Tag (computer name is derived from asset tag). Purpose would then determine what info was asked on next "window". If it's a lab machine, we wouldn't ask owner, we'd just ask Department, Building, and Room. If it's a user machine, we'd also ask owner. Is this doable? Or should I start looking at Splashbuddy?

Hello everyone! I am looking for an easy policy to remove avast.. Thinking if someone has already scripted this out or figured out how to run avasts app without user interaction. The goal is to, remove avast before installing symantec and in the end, set a policy to remove avast if Symantec is installed for those that may be missed somehow. Thinking I can get my own script figured out, but wanted to see if others have already figured this one out. Thanks!

Hey Folks, I read all the depNotify posts here and followed along. My depNotify is working fine, same as my starter script. Here is what I did: Based on this guide ( https://github.com/jamf/DEPNotify-Starter#configuration-within-jamf-pro) I did following steps in our jamfPro:  1. I uploaded the installer package called DepNotify-1.1.5 according to the link above  2. I created the script called as the depNotify Starter  3. I created a policy and associated my package and script to that  4. I scoped that policy to our test computers. Everything works fine and the app starts right away once test user logs intp the mac in question. The problem/question for me is, how should I specify in the script which apps/policies are running at the moment? I found POLICY_ARRAY in the script and whichever I put there in the format of policy_name, id it gets displayed in the prompt for the test user. Should I add all policies(that mac is supposed to

Hi, justs starting down this Intune path. On a several test macs, I get the following error when I run the Self service policy to launch the Company Portal App and register the machine: Registration with Intune failed.Run the item again, ensuring your computer is connected to the internet. If you still cannot connect, contact your IT department.Details: Microsoft's Company Portal.app is not installed. The App is installed but the policy clearly it thinks it is not. The app was installed by downloading from the link provided on the macadmins page and then installed. Visually I can see it in Applications folder I'm using the macOS Intune Integration policy item for a self service policy Regarding Intune Integration - Conditional Access has been set up in Jamf Pro. Heartbeat is happening, a test of the connection works and also I can force the inventory to upload. Just wondering if anyone has seen this before or has any ideas?

Hi everyone, we need to see which apple id is being used on every device we have enrolled in jamf. For this I've created an extension attribute that seems to work but only for a few hours. I don't understand why but after a while it goes from this: to this: and if I run a sudo jamf recon it goes back to normal for another while but after sometime it keeps going bad. this is the script that I'am using: !/bin/bash appleid=$(/usr/libexec/PlistBuddy -c "print :Accounts:0:AccountID" ~/Library/Preferences/MobileMeAccounts.plist); echo "<result>$appleid</result>" exit 0 Do you have any suggestions or ideas about why this happening? Thanks in advance ps: I am pretty new to mac and jamf

I have a question regarding scripting. I'm trying to build a user account in an educational lab environment that's easy for some of our students to sign into that subsequently removes their data on logout (a la Deep Freeze). It warns the user this will occur and although I could just use a Guest account I'd like to try this first. I've accomplished most of what I'm looking to remove (though if I'm missing something please bring it up) but I can't find an answer to my issue in the forums. I can't seem to remove Safari data from session to session. This is the part I need help with:Any combination of the following commands (whether I insert into Files & Process or into Scripts after my other one) doesn't seem to have any effect and I'm not quite sure why: sudo bash -c "rm -f /Users/student/Library/Safari/History.db"; sudo bash -c "rm -f /Users/student/Library/Safari/LastSession.plist"; sudo bash -c "rm -f /Users/student/Library/Safari/HistoryIndex.sk"; sudo bash -c "rm -f /User

Update: September 23, 2020Today we are making a new release of Jamf Pro available to resolve issues impacting Volume Purchase Program (VPP) and mobile device management (MDM) functionality, including license assignment errors and hanging MDM commands. Your instance will be upgraded directly to 10.24.2 during your cloud upgrade window, as outlined below. /// Hi Jamf Nation, We are excited to announce that we are prepared to deliver same-day support for Apple's new operating systems as they become available! This release also includes a number of enhancements to user provisioning, enterprise workflows, and security and privacy. Read the full release notes here. Garrett Cloud Upgrade ScheduleYour Jamf Pro server, including any free sandbox environments, will be updated to Jamf Pro 10.24.2 based on your hosted data region below. Please note: your environment will be upgraded directly to version 10.24.2. Because we know that same-day support for new Apple operating systems is

After upgrading a couple of Macs to 10.15.7, I can now log in using my password when I unplug the Smart Card. I ensured the configuration profile with the payload to "Enforce Smart Card Use" is still installed. Now with the 10.15.7 update, I can unplug the Smart Card (screen saver kicks in) and log in using a password or Touch ID. Macs prior to 10.15.7 were fine, including Mojave, High Sierra. Anyone else seeing this?

I was directed to this web link: https://macops.ca/disabling-first-run-dialogs-in-office-2016-for-mac but when i look under /Library/Preferences/ I do not have com.microsoft.Word (excel,ppoint) but i have it under ~/Library/Containers/com.microsoft.Word/Data/Library/Preferences/com.microsoft.Word.plist am i supposed to add each of the .plist (word,excel,ppoint) to /Library/Preferences/ ???

Does anyone know how to hide the Shortcuts app on iOS so it doesn't show up on the Home screen? I've figured out how to hide the other apps I don't want visible, but can't figure out how to hide this one. I've got a Restrictions Configuration Profile set up, and I've hidden other apps in the iOS and tvOS > Applications section. I've added the Shortcuts app there. The only thing slightly odd about Shortcuts is that in the config profile the Bundle ID is is.workflow.my.app. I'm wondering if maybe the Bundle ID changed at some point to a com.apple domain. Anyone found a way to hide this app?

Has anyone had issues with the Canvas Teacher app on iOS caching to the iPad filling up all usable space? Only way we have been able to clear it out is by deleting the app and reinstalling. Any help would be appreciated.

Hi All, Does anyone know if there is a way to show a JAMF helper window depending on the amount of times a user has logged into the laptop. Basically I want JAMF helper to pop up for the first ten times a user logs in and display a message Would i be able to do this using maybe a check in policy, like the first ten check ins it displays the message?

So we're all remote yet may still be hiring and may need to roll out new hardware.All of our Macs are bound to AD and all users are mobile accounts.My question is how do I remotely have a user login to create a mobile account at login when outside our firewall. We don't have external access to our AD although we do have Azure AD if there's some way to leverage that. Any help is greatly appreciated.

None of our users are admins of their computers; however, some do have legitimate needs to run some terminal commands like tcpdump and a few others that can only be run as root. Is there a way to allow specific users to do that with whatever switches and paths they need to? Some of the commands need to be interactive so I can't just setup a single command in Self Service and run that as root.

I have a bunch of fonts that are in multiple Font Suitecase files. I can copy them into /Library/Fonts just fine but MacOS does not see them for use. I need to push these out as a .pkg with JAMF School. Thank you for any ideas!

I have a Catalina upgrade policy without --eraseinstall in the command. So computers running 10.13 or 10.14 can do in place upgrade to 10.15. No problems. I'm wondering if the --eraseinstall command is also added will this then result in the computer to then be unenrolled? since it's being erased I would think so, but I haven't tried it yet.

DEP previously configured using DEP, device then unchecked in DEP to not use DEP.Removed device from inventory. Removeframework command executed.All configuration profiles still listed.When i boot to an external boot drive it wont let me because of managed preference. How do i get rid of this so i can boot to external boot drive and wipe drive and install new macOS?

Anybody notice a change today in the interface to Apple School Manager / Apple Business Manager?