I created a smart group for finding computers that have Box drive installed. the application title is Box.app. The results of the smartgroup are finding 19 macs, but only 2 have it actually installed. I go through each resulting computer in the smartgroup and check it's list of installed applications. Only 2 of the 19 have Box.app installed. I moved my test macs box.app to the trash and did a recon, and the smartgroup went down from 19 to 18. anyone else have a similar issue? Application Title HAS Box.appI also have a smartgroup for Box Sync, the application title is Box Sync.app and this is populating correctly. Application Title HAS Box Sync.app

Anyone have any luck with SecureAuth SSO integration with their Jamf Pro Software Server? I am not our SecureAuth engineer but I have been advised that they followed the Ping Identity (https://www.jamf.com/jamf-nation/articles/439/configuring-single-sign-on-with-ping-identity) guide for configuring SecureAuth as closely as they could and then I took care of the JSS side. When enabled, I am getting SSO error when hitting our instance. Here is the log information- Caused by: org.opensaml.common.SAMLException: Response doesn't have any valid assertion which would pass subject validation at org.springframework.security.saml.websso.WebSSOProfileConsumerImpl.processAuthenticationResponse(WebSSOProfileConsumerImpl.java:229) at org.springframework.security.saml.SAMLAuthenticationProvider.authenticate(SAMLAuthenticationProvider.java:87) ... 46 moreCaused by: org.opensaml.common.SAMLException: Assertion invalidated by subject confirmation - can't be confirmed by the bearer method

Hello, does anyone know how to include a custom image on a JAMF helper prompt. Im able to view the custom image we have for self service branding in ~/Library/Application Support/com.jamfsoftware.selfservice.mac/Documents/Images/brandingimage.png I tested with another user and they also have the image in that directory, but when I push the policy for JAMF Helper, the message displays but with no image below is the script #!/bin/sh /Library/ApplicationSupport/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper -windowType hud -icon ~/Library/Application Support/com.jamfsoftware.selfservice.mac/Documents/Images/brandingimage.png -title "Title" -heading "Welcome to JAMF Self Service" -description "You can use the JAMF self service portal to install software, update software or troubleshoot your device" -button1 "OK" -button2 "Cancel"

I am trying to use Casper Remote on an outside of the network computer to change its name. The computer recently checked in. When I select the computer -- advanced -- reset computer names , it comes up with computer not avialable. should this work if the computer is not on the local network ?

I have students (with non-admin rights) wanting to add their own personal printers at home, but they are prompted with the admin logon. How can I allow this? Can someone give me step-by-step instructions? I'm new to all of this! Thanks!

We are using Zscaler in our organization. Within the last few months we started seeing the error "You cannot control your own screen" when screen sharing or using ARD. We discovered this. OS - 10.14.6 AND 10.15.4 In terminal:host 'computername' = computername has address 10.3.10.23 computername has address 100.64.0.1 The issue is that our DNS is registering the 100.64.0.1 tunneling address to multiple computers. This second DNS is registered with Windows domain and appears on PC computers as well when resolving the hostname of the Mac computer(s) ifconfigutun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500 inet 100.64.0.1 --> 100.64.0.1 netmask 0xffff0000 If Zscaler is off, 100.64.0.1 IP goes away. Zscaler says talk to Apple. Zscaler's response:"Just before nsupdate there is some activity from opendirectoryd, which is responsible for working with Active Directory. Probably nsupdate was called from it as part of standard flow.Z

Good Morning We have the Office 2016 Volume license. I wanted to test the use of the VL Serializer pkg. I am unsure as to how the Serializer is supposed to work. When I install one of the office pkgs, then install the VL Serializer my Office apps are not active. Are my user supposed to "Activate" office even after installing VL Serializer?I do have the Office 2016 Volume Installer but want to have all my bases covered.What am I doing wrong? Thanks

Hello all, I am currently working on doing an in place update to our fleet of 200+ MacOS devices to bring them up to MacOS 10.15.6. However I am encountering trouble with trying to prevent Setup Assistant from running post-upgrade. Currently after the upgrade is complete and the user unlocks Filevault they are immediately met with the Setup Assistant window which walks them through setting up Siri, Privacy Preferences, Touch ID, ect. This is not ideal as most of the items it prompts for are already managed or restricted within our environment. I know DEP prestages provide the ability to suppress these elements from Startup Assistant, however we are currently not leveraging DEP for our on-prem instance and migrating our existing devices into using DEP is not very feasible currently (hoping to change this in the future). Based on my researching other threads it looks like the Setup Assistant is triggered based on the existence of the .AppleSetupDone file located in /var/db/ and the pr

I know how to manually download Defender. I was wondering if there is a way to download the up to date version on the command line?

I know this is a bit obscure, but does anyone know if there is a way for a policy to pull in the name of another policy, like as a variable. For example, policy 1 runs installing some package, does inventory, and then custom triggers policy 2. Policy 2 then outputs the name of policy 1 as a variable (or any way really) as info to be used in the policy. Again, kind of random and may not be doable, but figured I'd check. Thanks!Alex

Hi All, I'm at wits end with an API job that SHOULD set an extension attribute, but instead just comes back with a 409 error and no good info WHY. #!/bin/sh apiUser="user" apiPass="pass" jssURL="https://jss.example.com:8443" ea_number="91" serial=$(system_profiler SPHardwareDataType | grep 'Serial Number (system)' | awk '{print $NF}') name=$(curl -s "https://inventory.example.com/serial/$serial" | grep -A1 -o "Device name:" | tail -n1 | sed 's/^[ ]*//;s/[ ]*$//' | cut -d" " -f1) if [ ! $name ]; then name="Undefined" fi # Create xml echo "<computer><extension_attributes><extension_attribute><id>$ea_number</id><value>$name</value></extension_attribute></extension_attributes></computer>" | xmllint --format - > /private/tmp/ea.xml ## Upload the xml file curl -vvvfku "${apiUser}":"${apiPass}" "${jssURL}/JSSResource/computers/serialnumber/${serial}/subset/extensionattributes" -H "Content-Type: text/xml" -T /priv

Final is out...anyone using it? Care to share strategy? Are you using with or without AUSST? Self Service? TIA http://www.adobe.com/devnet/creativesuite/enterprisedeployment.html http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/devnet/creativesuite/pdfs/AdobeRemoteUpdateManager.pdf PS, I added "Adobe Renote Update Manager (RUM)" to the Third-Party Products page, but doesn't show up yet so I set this post to "AAMEE". Don

I installed a printer via self service, and it installed fine. Afterwards I went in and removed the printer manually, but the option isn't coming back up in self service to install the printer again. I'm assuming I missed a setting in the policy when I set it up?

We’ve taken on Jamf Cloud hosted and are having a few issues setting up the on prem LDAP Sync AKA “ JIM “ . Both Azure LDAPS Sync and JIM (Jamf Infrastructure Manager) don’t seem to work and I was just looking to see if anyone had the same deployment issue ? Were currently focusing on getting the On Prem Sync (JIM) configured as the Azure route may have some issues in regards to configuration and ongoing licencing. No matter what I try our cloud instance does not see our on prem server 2016 JIM in infrastructure managers Followed all the guides and still stuck

Hi Guys, I've probably watched Don't Forget Your Badge! | JNUC 2018 at least 20 times to understand Attribute Mapping. Are there any good tutorials for this? Myself, and some co-workers are trying to get smartcards to work with the SSO Kerberos Extension on macOS Catalina, and we know attribute mapping is the way to go vs fixed key mapping. Any guidance or help is appreciated!

Hi Guys, I've tried creating a few packages in composer to deploy, and I don't think I'm doing the permissions right. Should it be owner - root, and group - wheel? Thanks

Have a config profile to request a machine cert from our SCEP server, and was working fine until last night. All of a sudden, I am getting a "NSOSStatusErrorDomain:-603" error. Did not see a whole lot about this error on the forms, except about trying to restart the IIS and rebooting the SCEP server. Tried those, but am still getting the error. Anyone seen this before or have any idea why this would just all of a sudden start failing?

In working with @stevewood's excellent script I was able to get everything working, but some of the apps want a logout or reboot. I went to the Depnotify readme and plugged in the commands at the end of the script, but it seems to pop up right away with the restart (apps are still installing), and then the app just quits silently when the installs are done. elif [ "$TESTING_MODE" = false ]; then "$jb" policy -event "$(echo "$POLICY" | cut -d ',' -f2)" --forceNoRecon fi done echo "Command: Restart: Done provisioning the system for use" >> "$dnlog" Would it be better to just set the policy to reboot at the end?

I've read through the 8.3 manual and made sure I have all of the pre-requisites met that are listed. Yet when I create a config profile, or import one from the iPhone utility, I cannot see any of my 10.7 machines in the scope. What am I doing wrong?

Hello Jamf Pro peers! Fresh off the boat Mac user here. Are there any comparable tools to the Active Directory Users and Computers snap-in from Windows available on macOS Catalina and above? Thanks in advance!

Hi All, hoping for some help here. Looking to frankenstein together a script to add our admin account to FV2 as an enabled user. I've got a script that is currently working under the following conditions: Running locally in terminalRunning manually from Self Service It is not working when running automatically via JAMF policy. That is my goal at this point. The script is here: !/bin/sh Add ADMIN ACCOUNT to FV2.sh userName=$(/usr/bin/stat -f%Su /dev/console)prefix='SECRET HERE'pass=$prefix Get the logged in user's password via a prompt echo "Prompting ${userName} for their login password."userPass="$(/usr/bin/osascript -e 'Tell current application to display dialog "Please enter your login password:" default answer "" with title "ADMIN ACCOUNT FileVault 2 Key Escrow" with text buttons {"Ok"} default button 1 with hidden answer' -e 'text returned of result')" echo "Adding ADMIN ACCOUNT to FileVault" This "expect" block will populate answers for the fdesetup prompts that normall

Hi all!I activated the Notify part in Jamf Connect Login.Everything is fine BUT the Notify is applied each time I quit the session or reboot the computer.I understood Notify was applied once, during enrollment. What is my mistake?

Hi, Is there any relevance when you transfer a .pkg to Casper Admin and it appears as .pkg.zip?

Hi,I work for a large establishment with many students who use Mac Books etc. They do not have a managed service. We are manually adding there printers to there Macs which is time consuming. The printers use an smb address. I have tried composing the printer setup using composer but each time I run the .pkg it fails to add the printer. I've tried using a script using the lpadmin command with no luck. Having a .pkg to run on students macs would save a huge amount of time and hopefully would simplify matters. Any help appreciated Many thanks

Hi I have been at an issue for weeks with no solution in sight with attempting to make JAMF work to support BYOD devices with self enrolment using Google Suite as the LDAP server. The two main objectives of our JAMF setup is to:- Deploy profiles to BYOD Mac devices with users required to self-enrol and profiles deployed on group memberships.- Deploy purchase MAC applications to users based on group memberships. Currently we have JAMF setup to use GSuite as our cloud provider for both SSO and LDAP.We are able to successfully test that a user exists in Google Suite as well if the user exists in a Group as a member.This means we are able to create an LDAP group successfully as well as users are able to successfully enrol if they are a member of that group. Being a BYOD environment we have no way of knowing which user owns which device and the only way we can deploy profiles and applications is by LDAP group memberships. The challenges start when we attempt to deploy a profile/applica