Let me start off by saying that we are a school site/district and all of our users are domain based of our network and not local user accounts. We upgraded one of our Mac labs to Mojave and quickly discovered an issue with the login screen. Once a user was logged into a machine and that machine either went to the screensaver or the user locked the machine to leave. No one could login to that machine. In previous versions of the macOS a new user could simple click on the switch user button at the bottom of the screen and log in. Now those options are gone. Is there something we may have missed when setting up our jamf profiles for these machines? I can't seem to find anything.

We are attempting to create a policy in self service that performs an upgrade. We use the macOSUpgrade.sh. After downloading the needed files, we get a "We were unable to prepare your computer for macOS Catalina: error (see attached). Our machines are FileVaulted. Not sure what's going on. It does not do this every time... even on the same machine.

Hi, I'm running a very basic script, which works, to change the local admin password on all our Macs. But, I want to know how to check if the currentPwd already matches the newPwd, and if so then it must exit. How do I do that? if [ currentPwd == newPwd ] then echo 'password is correct' else #change account password fi Thank you to @adolfsson for the initial idea: The Script below works but as you can see its not very 'clever' :-) Script: currentPassword="$4" newPassword="$5" accountName="$6" adminUser="remoteadmin" #Check that we are changing ONLY for remoteadmin if [ "$adminUser" == "${accountName}" ] then #Change management account locally on mac sudo dscl . passwd /Users/"${accountName}" "${currentPassword}" "${newPassword}" echo " Local Admin Account - Password changed! " #Report management account pass

Hi All - We just received a license for Camtasia 2019 for Mac, and in past years, I would run the installer through Composer, apply the license key, and then take the compare snapshot, export it as a DMG to Jamf Admin, and everything would work fine. Today I went to test the deployment and it looks like the install succeeds, but does not apply the license key, which I believe is hidden in a separate file. I have FUT and FEU selected since Camtasia usually drops files in User Folders such as Templates and Sample Projects, which appeared to work. Anyone have any suggestions on how to get this to work or better ways we could handle the install without giving out our license key?

We are a Volume Licensing Service Center customer and use the Volume Licensing Serializer for Office 2016. Whats the preferred workflow to upgrade to Office 2019 from Office 2016? Do I need to uninstall the Office 2016 suite first and then redeploy with Office 2019 and the 2019 VL serializer? Or can I deploy Office 2019 on top of Office 2016 together with the 2019 VL serializer?

I've read plenty about Jamf -> Jamf integration w/ Intune. However we are trying to go from Intune -> Jamf standalone -or- Jamf integration w/ Intune. Can someone point me in the right direction?One of the biggest concerns we have is a smooth/quick interaction for the end user.

Hey folks, This is relatively simple, but I haven't found a place giving a straight answer about it -Will writing passwords or other information inside CLI commands executed by policies be viewable in any log, text file, or any other output (including terminal)?This is regarding the user's side of things. If it appears in Jamf that's all good.

Has any one found a way to stop students from accessing the terminal? If so please let us know how you did so, Configuration profiles can block a whole folder at a time, but blocking the "Utilities" folder may stop other things from working.

Hi, we are trying to use a OSX 10.11 HTTP distribution point. We have installed 10.11 with all fixes and installed the server package and created a HTTP server point to the CasperDP directory. With a normal browser I can login to the server and download a package without any problems. However if I try to deploy a package via policy I get the following error: The network connection was interrupted while downloading the package from http://corpserver.domain/Packages/My-Templates.pkg. Attempting to reconnect... Downloading My-Templates.pkg... Downloading http://Corpserver.domain/Packages/My-Templates.pkg... Error: My-Templates.pkg is not available on the HTTP server. First I thought it was a HTTPS problem with a invalid certificate but even if I try it via HTTP port 80 I get the same error. Downloading this packed from this path works fine in a browser. Any ideals? Thanks Eric

Has anyone successfully got a configuration profile for blocking MS Edge extensions to work? Hint: it's not the same as chrome, as the key is: ExtensionInstallBlocklist Any help would be appricated. Thanks

Has anyone seen this before? I'm seeing it on several policies this morning that I had scoped to all computers and limited to a few LDAP groups each. When I go in to look at the policy the scope is now "specific computers" with no targets, but the LDAP group limitations are intact. No idea what would have caused it.

Ever since Catalina, I am unable to build packages with this app if using certain directories.. /var/tmp, /Library/LaunchDaemons, etc. Is there something I am missing in the PPPC Profile? Composer works just fine without complaints.. Maybe cp needs access to all folders, or terminal? I am an admin user and can create files in /Library/LaunchDaemons without needing authentication, so I am genuinely lost.

I am trying to create an extension attribute to gather the UPN for the current logged in user. I have followed the directions from the link below adjusting as needed, however I cannot figure out how to get the plist to populate anything inside of <string> </string>. I have to be missing something dumb, any ideas would be much appreciated. https://www.jamf.com/blog/help-users-activate-microsoft-office-365-and-configure-outlook-in-one-click/

Hi all, Wonder if any Mac admins out here have experienced this. Here's the scenario:- A Macbook has run out of battery, for whatever reason. The Macbook clock would have reset itself to it's basic time, which is year 01/01/2017 (we are currently Jun 2019).- The end user do not have admin rights, therefore cannot change the date and time.- From JAMF Pro, I tried to setup a policy/script to connect it to our company's time server, so it will get the correct date and time again.- But, having the date and time 2 or more years different, JAMF Pro can't communicate with this Macbook, and therefore nothing happens.- The only work around is to get a local-admin account, use this admin rights to unlock the System Preferences and manually correct this. So anyone know of a way to correct this date and time, without the end-user (without admin rights) bringing the Macbook to me ?

I have a script that prompts a user for input using apple script for their name within my bash script. It seems to work great, but if they do not answer the prompt in about 1 min it prompts again because of a loop I have. Each time it prompts, another window appears on top of the other. So I either need to kill the dialog and I can't figure that out, or have my loop not keep trying every min and I'm not sure how do that either. Below is what my script looks like. PromptDisplayName (){DISPLAYNAME=$(/usr/bin/osascript << EOFtell application "System Events" activate set DISPLAYNAME to display dialog "Enter Full Name: " default answer "John Doe" with icon note buttons {"OK"} default button 1 with title "Enter Full Name" return text returned of DISPLAYNAME as stringend tellEOF) Loop until Displayname is in the correct format until [[ "$DISPLAYNAME" =~ ([a-zA-Z]){3,}[[:blank:]]([a-zA-Z]+){3,} ]]doP

I'm very frustrated. I can't get App Store apps to install. If I go through the regular App Store, it still asks for a login & password (it used to NOT do that for managed apps.) If I use Self Service, it does one of two things: It SEEMS like it's installing, only nothing ever installs, then the Activity goes empty and the Home page says it's available to install again. Rinse and repeat. It changes to "Error," has a red bar at the bottom saying "Cannot connect to the Jamf Pro Server ..." then takes me to the App Store page for said app ... which won't install without an Apple ID. I've tried uninstalling Jamf and re-enrolling, but that doesn't work. Jamf says the licenses are being used, but they aren't being installed. I tried enabling/disabling Managed distribution as mentioned in another thread, but that didn't do anything. I also managed and reconned, but that didn't change anything, either.

So, I have 2 .mobileconfig files I wish to deploy, one is for the dock that I created and another to change the Desktop Wallpaper, how will i upload these to casper and deploy them through configuration profiles? Only need to go to 15 machines but want to get them pushed out asap! Any ideas? ThanksSimon

I'm extremely new to Jamf, mostly dabbling where other people have already set up the environment. We were working on setting up the pre-stage enrollment for our DEP iPads. DEP is working, the LDAP SSL connector is working, but when we get to the Remote Management authentication screen on the iPad, is it not accepting some people's credentials. The error message is "Your credentials are either missing or wrong. Try again." I've tried logging in with both the format of username, and username@email.com. I've tried resetting/recovering the iPad by connecting it to a computer. Using me as an example, on any iPad I try to enroll with the pre-stage authentication with my credentials, I get the error. But on the same iPad, someone else is able to authenticate properly and have it register. In the Jamf console, the only way to see the device is under the "Automated Device Enrollment" section in Global Management. It has not yet been assigned a name, and does not appear under devices.

I start the getting the SCEP configuration profile to work within ourenvironment now. But I think it requires variable to generate thecertificate the way we want it. It seems to be a lack of info regards variables to automate this.For example:If I put the below in SubjectCN=%AD_ComputerID%.mydomain.com I get computername$.mydomain.com (in my case Mac called air, so I getair$.mydomain.com) in the certs Common Name section. Also if I put the below in Subject Alternative Name Valuehost/%AD_ComputerID%.mydomain.com I get host/computername$.mydomain.com (in my case Mac called air, so I gethost/air$.mydomain.com) in the DNS name section of the cert But I would like to get the name without $ sign at the end. Is there a variable for SCEP configurationprofile payload toachieve this? I hope I have explained it correctly. I know jSS uses variables with exchange config profile like $USERNAME and$EMAIL (screen grab). So I am hoping that maybe there is a variable to getthe Mac hostname? I have

Can someone explain why I can have some machines get this error and not others? I have a lab where the policy I use to deploy and update Firefox failed on almost the whole lab except for a system or two. Those that failed had this error in the logs. I then used Casper Remote to try updating the same lab and all but one machine worked fine. The one that failed gave the same error message. I pasted the full log below. Sending Wake On LAN command...Opening SSH Connection to 10.2.6.37...Authenticating...Successfully authenticated.Verifying Computer's Identity...The MAC Address has been verified.Checking Operating System Version...Running Mac OS X 10.10.5 (14F1713)Verifying /usr/local/jamf/bin/jamf.../usr/local/jamf/bin/jamf is current (9.82)Verifying /usr/sbin/jamf.../usr/sbin/jamf does not exist.Verifying /Library/Preferences/com.jamfsoftware.jamf.plist...Preparing Policy...Downloading https://mdm.parkland.edu/caspershare/Packages/Firefox-45.0.2.pkg...Downloading https://mdm.parkl

Office 2016 and 2019 both use the same 16.X.X versioning right now, so my previous Office 2016 Installed smart group includes both Office 2016 and 2019. This didn't really matter before since I was only putting 2019 on completely new machines on 10.14. Now that we're prepping for wider deployment, I need to be able to track which machines have Office 2016 and 2019 separately. Is there a good way to build a smart group that includes only Office 2019 installs?

I have about 35 Macs in a old Jamf cloud and will be moving them to a new Jamf cloud. I have access to both and wanted to see if I could write a script to unenroll them and then reenroll them info the new Jamf. Majority of them are not DEP only 3 are in DEP. I thought I could have a script remove the MDM profile and jamf framework. Then do a enrollment through the shell with a enrollment only account. Thoughts about if this will work or not.

Hello, First of all, I am new to JAMF and I'm learning as I go and I hope I am able to describe this correctly.I created a DMG from a software cd in Disk Utility and uploaded it into Casper Admin. I went into Self Service and created a new policy for this program. Initially I wanted it to be installed a start up so I didn't have to touch 20 computers and I couldn't get it to work. Do I need a script for that? Next, I just made it available in Self Service and downloaded it manually from there. It completes and everything is there and it works, but it doesn't get installed into the computers Application folder. I uploaded an image to describe what I'm talking about. It gets put just outside the Applications folder.eAny help? This isn't the first time this has happened to me either. It's done it for an Epson driver, Exam4, VLC, Scratch. Is it because I'm not doing a snapshot? I thought if the installer was a .dmg I didn't need to take a snapshot. Thank you,Nicholas

I know this has been asked about a thousand times, but I wanted to try asking to see if there is info out there that I don't have. I SPECIFICALLY would like to get chrome on mac to say "Updates are disabled by your administrator." I do not want it to error out, or anything weird like that. I want to know if there is a definitive way on Mac to mimic what I am able to do with Chrome on windows. I get this on Windows with 1 registry key. I would LOVE to see this exact message on Mac devices. Thanks,Tim

Hi Everyone, What is the best way to update a Computer's Building, Room, and Department? I have some prompts that I used to select/enter in the information, so I have the variables ready. But I am not sure how to update those fields. Is it the Computer endpoint being updated, or is it using the Building/Room/Department as the endpoint? Thanks for any help you can provide!