I know this is a bit obscure, but does anyone know if there is a way for a policy to pull in the name of another policy, like as a variable. For example, policy 1 runs installing some package, does inventory, and then custom triggers policy 2. Policy 2 then outputs the name of policy 1 as a variable (or any way really) as info to be used in the policy. Again, kind of random and may not be doable, but figured I'd check. Thanks!Alex

Hi All, I'm at wits end with an API job that SHOULD set an extension attribute, but instead just comes back with a 409 error and no good info WHY. #!/bin/sh apiUser="user" apiPass="pass" jssURL="https://jss.example.com:8443" ea_number="91" serial=$(system_profiler SPHardwareDataType | grep 'Serial Number (system)' | awk '{print $NF}') name=$(curl -s "https://inventory.example.com/serial/$serial" | grep -A1 -o "Device name:" | tail -n1 | sed 's/^[ ]*//;s/[ ]*$//' | cut -d" " -f1) if [ ! $name ]; then name="Undefined" fi # Create xml echo "<computer><extension_attributes><extension_attribute><id>$ea_number</id><value>$name</value></extension_attribute></extension_attributes></computer>" | xmllint --format - > /private/tmp/ea.xml ## Upload the xml file curl -vvvfku "${apiUser}":"${apiPass}" "${jssURL}/JSSResource/computers/serialnumber/${serial}/subset/extensionattributes" -H "Content-Type: text/xml" -T /priv

Final is out...anyone using it? Care to share strategy? Are you using with or without AUSST? Self Service? TIA http://www.adobe.com/devnet/creativesuite/enterprisedeployment.html http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/devnet/creativesuite/pdfs/AdobeRemoteUpdateManager.pdf PS, I added "Adobe Renote Update Manager (RUM)" to the Third-Party Products page, but doesn't show up yet so I set this post to "AAMEE". Don

I installed a printer via self service, and it installed fine. Afterwards I went in and removed the printer manually, but the option isn't coming back up in self service to install the printer again. I'm assuming I missed a setting in the policy when I set it up?

We’ve taken on Jamf Cloud hosted and are having a few issues setting up the on prem LDAP Sync AKA “ JIM “ . Both Azure LDAPS Sync and JIM (Jamf Infrastructure Manager) don’t seem to work and I was just looking to see if anyone had the same deployment issue ? Were currently focusing on getting the On Prem Sync (JIM) configured as the Azure route may have some issues in regards to configuration and ongoing licencing. No matter what I try our cloud instance does not see our on prem server 2016 JIM in infrastructure managers Followed all the guides and still stuck

Hi Guys, I've probably watched Don't Forget Your Badge! | JNUC 2018 at least 20 times to understand Attribute Mapping. Are there any good tutorials for this? Myself, and some co-workers are trying to get smartcards to work with the SSO Kerberos Extension on macOS Catalina, and we know attribute mapping is the way to go vs fixed key mapping. Any guidance or help is appreciated!

Hi Guys, I've tried creating a few packages in composer to deploy, and I don't think I'm doing the permissions right. Should it be owner - root, and group - wheel? Thanks

Have a config profile to request a machine cert from our SCEP server, and was working fine until last night. All of a sudden, I am getting a "NSOSStatusErrorDomain:-603" error. Did not see a whole lot about this error on the forms, except about trying to restart the IIS and rebooting the SCEP server. Tried those, but am still getting the error. Anyone seen this before or have any idea why this would just all of a sudden start failing?

In working with @stevewood's excellent script I was able to get everything working, but some of the apps want a logout or reboot. I went to the Depnotify readme and plugged in the commands at the end of the script, but it seems to pop up right away with the restart (apps are still installing), and then the app just quits silently when the installs are done. elif [ "$TESTING_MODE" = false ]; then "$jb" policy -event "$(echo "$POLICY" | cut -d ',' -f2)" --forceNoRecon fi done echo "Command: Restart: Done provisioning the system for use" >> "$dnlog" Would it be better to just set the policy to reboot at the end?

I've read through the 8.3 manual and made sure I have all of the pre-requisites met that are listed. Yet when I create a config profile, or import one from the iPhone utility, I cannot see any of my 10.7 machines in the scope. What am I doing wrong?

Hello Jamf Pro peers! Fresh off the boat Mac user here. Are there any comparable tools to the Active Directory Users and Computers snap-in from Windows available on macOS Catalina and above? Thanks in advance!

Hi All, hoping for some help here. Looking to frankenstein together a script to add our admin account to FV2 as an enabled user. I've got a script that is currently working under the following conditions: Running locally in terminalRunning manually from Self Service It is not working when running automatically via JAMF policy. That is my goal at this point. The script is here: !/bin/sh Add ADMIN ACCOUNT to FV2.sh userName=$(/usr/bin/stat -f%Su /dev/console)prefix='SECRET HERE'pass=$prefix Get the logged in user's password via a prompt echo "Prompting ${userName} for their login password."userPass="$(/usr/bin/osascript -e 'Tell current application to display dialog "Please enter your login password:" default answer "" with title "ADMIN ACCOUNT FileVault 2 Key Escrow" with text buttons {"Ok"} default button 1 with hidden answer' -e 'text returned of result')" echo "Adding ADMIN ACCOUNT to FileVault" This "expect" block will populate answers for the fdesetup prompts that normall

Hi all!I activated the Notify part in Jamf Connect Login.Everything is fine BUT the Notify is applied each time I quit the session or reboot the computer.I understood Notify was applied once, during enrollment. What is my mistake?

Hi, Is there any relevance when you transfer a .pkg to Casper Admin and it appears as .pkg.zip?

Hi,I work for a large establishment with many students who use Mac Books etc. They do not have a managed service. We are manually adding there printers to there Macs which is time consuming. The printers use an smb address. I have tried composing the printer setup using composer but each time I run the .pkg it fails to add the printer. I've tried using a script using the lpadmin command with no luck. Having a .pkg to run on students macs would save a huge amount of time and hopefully would simplify matters. Any help appreciated Many thanks

Hi I have been at an issue for weeks with no solution in sight with attempting to make JAMF work to support BYOD devices with self enrolment using Google Suite as the LDAP server. The two main objectives of our JAMF setup is to:- Deploy profiles to BYOD Mac devices with users required to self-enrol and profiles deployed on group memberships.- Deploy purchase MAC applications to users based on group memberships. Currently we have JAMF setup to use GSuite as our cloud provider for both SSO and LDAP.We are able to successfully test that a user exists in Google Suite as well if the user exists in a Group as a member.This means we are able to create an LDAP group successfully as well as users are able to successfully enrol if they are a member of that group. Being a BYOD environment we have no way of knowing which user owns which device and the only way we can deploy profiles and applications is by LDAP group memberships. The challenges start when we attempt to deploy a profile/applica

I'm trying to provision SonicWall Mobile Connect Client 4.0.12.Our clients are locked down and when I try and configure the VPN client, I get an error from the VPN software saying Administrator Access Only.Has anyone done this successfully and if so - how?Thanks.

My organization is looking for ways to make our deployment workflow completely zero-touch as a response to the COVID-19 crisis. A little background: All of our Macs are bound to a domain. It is a large educational organization with multiple child domains, including a public-facing domain for our public-facing computing resources. Currently, the final step for setting up a Mac for staff is to have the end-user authenticate to the domain with their staff Active Directory credentials. Since our devices are deployed onsite during typical business operation, we always have the ability to authenticate. COVID-19 introduces a flaw in this process as we attempt to onboard new staff and provision computers to current staff as temporary loaners during the crisis. Does anyone have insight on how we can enable VPN authentication prior to login or some other workflow for preconfiguring mobile accounts? Anything you have, forum discussions, links to existing documentation, etc. is welcome. Thank

Howdy! I know what I am trying to do is possible, but i'm strugglin. We just did a very large Zoom AV deployment - we have 100s of iPads deployed as Schedulers and Controllers for the Zoom rooms. I created a Mobile Device extension attribute to store the Red Park MAC address for each iPad in JAMF. I have a spreadsheet with the iPad serial numbers and associated Red Park MAC addresses, I want to import that data into JAMF into the extension attribute that I created. My Spreadsheet is super simple and can be converted to csv. its formatted like this:Column 1 Column 2SERIAL# MAC ADDRABC1234 00:xx:00:xx:00:xx How can i do this without reinventing the wheel?Thanks in advance!

My team is in the midst of migrating machines from our current Jamf Pro Server (ver 10.7) which is on a physical machine to our new Jamf Pro Server (ver 10.22.1) which is a VM in our data centre. We have tried using Jamf Migrator but we realized that only the data gets migrated but the machine is not installed with the new MDM from the Jamf Pro Server (ver 10.22.1). While researching on the ways to migrate, we chance upon the following guide from Jamf (https://www.jamf.com/jamf-nation/articles/122/migrating-to-another-server) but all three choices are not applicable to us as we are setting up from scratch. Another method that we are trying to figure out is to push out a script which removes the current MDM, profile, etc. and within the same script, route the machine to enrol it to the new Jamf Pro. However, we are not sure on how to do this or if it is possible at all. If we would like to enrol these machines (approximately 1100) to the new Jamf with none or little user interventio

Hello! When we run the CIS 10.15 hardening guide, the user sees 2 Macintosh HD icons on the desktop. I'm aware of the changes with Catalina on splitting System volume and Data volume. At first I thought it had to do with the Jamf config profile/Finder payload that we use to show items on desktop. But even after I remove the config profile, 2 Macintosh HD icons remain. Is anyone else seeing this? Are you using a simple script to re-hide one of the Macintosh HD icons?

I haven't been able to find a definitive answer to this as I research Jamf Connect for our environment (although I suspect the answer is "no"), so I thought I'd double-check here. When you have Jamf Connect Login deployed and enabled, are you still able to log in to a Mac when that device is offline? Or is there no credential caching of any sort, and you must be Internet-connected for each login, no exceptions? Let's assume that a) this is not the first time that this user is logging in, and that b) this is a primary user for the computer (if this matters). We are using OneLogin as our IdP. Also, can the user enroll/continue to use Touch ID with Jamf Connect Login (assuming all regular Touch ID requirements, i.e. no Touch ID after reboot, length of time since last authentication, etc.) Lastly, I'm assuming that if we decide to use Jamf Connect Login ONLY for onboarding (with Internet connectivity), and afterwards transition to using ONLY Jamf Verify fo

Anyone had any luck creating a PPPC profile for the Teradici PCoIPClient.app ? I am not having a problem deploying the .app, I basically have a policy to place PCoIPClient.app in /tmp and then copy the .app into the /Applications folder. PCoIPClient.app launches, but after quitting, I get this (see the attached .png): TeradiciUSBRedirection wants to make changes. So here's what I get dragging PCoIPClient.app into PPPC Utility: com.teradici.swiftclient identifier "com.teradici.swiftclient" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] / exists / and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists / and certificate leaf[subject.OU] = RU4LW7W32C So that TeradiciUsbRedirection exists here: I have made a profile with the above information from the PPPC Utility, but it seems I get the same behavior with TeradiciUsbRedirection requesting administrator access to do something. Definitely have a case open right with the vendor but I figured

Hi Guys, We got the Kerberos SSO extension up and going on macOS Catalina, and so far so good on the initial login. After rebooting or just signing out and signing back in the extension says "Updating"... forever. Any ideas?

I have an extension attribute telling me if a configuration profile is installed and I have a smart group listing all the computers with this extension attribute. The problem is extension attributes populate with an inventory update (which we have set at 24 hours). Is there a way to trigger an inventory update when a computer gets the configuration profile so we do not have to wait?