Is there any way to search in JAMF or create some sort of inventory report that can identify computers that have external hard drives attached? We'd like to be able to identify which of our users are using external drives and whether or not those drives are encrypted.

Silly question - If I download the Catalina.app and package it up with Composer - Upload it to my JSS, and then create a policy to cache it on a target machine do I want to choose that package and say "Cache" or "Install"? The reason I ask is that - wouldn't I want to "install" the PKG that I made so that it "places" the installer into the users applications folder? ...or am I overanalyzing this and I should just say "cache" - I was under the impression that that would put the PKG someone on the target machine but not "run" it

Hello, I'm trying to configure NoMAD through Jamf for all of the machines I run, but I'm running into a snag since the config has to be in the local users' home directory and I'm hoping someone here can provide some insight. I found a login script from a user (Thanks @PaulHazelden) last year which is listed here: AD_domain="your ad server" Realm="YOUR AD SERVER" # Write default AD domain defaults write com.trusourcelabs.NoMAD ADDomain -string "$AD_domain" defaults write com.trusourcelabs.NoMAD KerberosRealm -string "$Realm" defaults write com.trusourcelabs.NoMAD UseKeychain -bool "true" defaults write com.trusourcelabs.NoMAD SignInWindowOnLaunch -bool "true" defaults write com.trusourcelabs.NoMAD UPCAlert -bool "true" defaults write com.trusourcelabs.NoMAD UseKeychainPrompt -bool "true" My problem is that scripting this through Jamf results in the defaults command writing to the roo

Hi Is anyone else having trouble with getting reposado/margarita to service macOS Catalina? As far as I can see it still servicing Mojave and earlier fine but all Catalinas at present get a message "Can't load data from the Software Update Server". We are using the apache2 method from https://github.com/wdas/reposado/blob/master/docs/URL_rewrites.md I have cleared the contents of the .htaccess file and re-pasted the entirity of the example to ensure there aren't any typo's etc. Both reposado and margarita have been updated and apache (and the server) restarted. But still the same message. If I browse to the catalog url it opens in the browser and if i run the curl command it gives me what looks like the correct catalog. There are updates approved in Margarita which are not installed on the mac. Is there a simple trick that i am missing? Thanks Vinod

I would like to single out Macs named like "Whoever's iMac" but can't seem to create criteria that catches Computer Names with an apostrophe in them. Computer Name matching regex ['] or using Computer Name is like ' only returns one machine for whatever odd reason.

I have a user who is repeatedly getting prompted for Device Enrollment. The computer has an approved MDM profile, the device is checking in and running policies, and has all of the expected profiles. Yesterday I manually re-enrolled via our mycompany.jamfcloud.com/enroll site, but this morning the user informed me he is getting the prompt again. my next thought is to run sudo jamf removeFramework then manually re-enroll again, but wanted to see if there are any other ideas.

I need help with a script which can pull the first and last name of a user from the device and set this as their computer name, which is then reflected in Jamf Pro. I've had some success with the below script taken from another thread, but this only works for users with one first and last name. When someone with a middle name adds it to their account name, it doesn't add the surname, rather the first two names. #!/bin/sh #gets current logged in user getUser=$(ls -l /dev/console | awk '{ print $3 }') #gets named firstName=$(finger -s $getUser | head -2 | tail -n 1 | awk '{print tolower($2)}') lastName=$(finger -s $getUser | head -2 | tail -n 1 | awk '{print tolower($3)}') computerName=$firstName$lastName #set all the name in all the places scutil --set ComputerName "$computerName" scutil --set LocalHostName "$computerName" scutil --set HostName "$computerName" sudo dscacheutil -flushcache && sudo killal

Hello this should be fairly simple, but i am new to JAMF and i can't seem to figure out the issue.I am trying to do upgrade from HighSierra to Mojave. I have downloaded and cached the installer to Application folder. Created a second policy and running the following command under Files and Processes: /Application/Install macOS Mojave.app/Contents/Resources/startosinstall --agreetolicense Getting the following error message:Executing Policy Install Cached MojaveError: The package (Install macOS Mojave 10.14.6.pkg) could not be found.Running command /Application/Install macOS Mojave.app/Contents/Resources/startosinstall --agreetolicense...Result of command:/bin/sh: /Application/Install macOS Mojave.app/Contents/Resources/startosinstall: No such file or directory

Currently working on our Sierra deployment and i hate the "New to Mac?" notification that pops out. Is anyone suppressing this from popping up on their users and if so how did you accomplish that? Thanks in advance for any help.

Hi there! Just checking if anyone has pro-tips! We currently have a management account on many devices with the same password, and that same local account is used for the helpdesk. What i am trying to achieve is;- Create a new hidden management account like "_management" on existing devices- Still have the ability to use Jamf Remote- When that is all done, set up macOS Laps for the helpdesk account. ( no help needed for this) What is the best way to achieve this? Already tried- Create custom QuickAdd.pkg with params -noPolicy -noManage to prevent triggering Enrollment and other policies, _management gots created, but then Jamf Remote keeps "authenticating". In the JSS the device state has changed to managed: _management- Create new local account with a Jamf policy and then make it hidden, edit device info and change management account, did it manually and the Actions option.- Use jamf binary to create a account, change management accounts through Actions or device inventory All f

I am trying to create an Extension Attribute to get the version of a file. The file appears to be a UNIX executable. I worked with the company and they said I can go to the terminal and type the following command:/Applications/sgtlabs/AristotleNT -version The following information is returned on screen:2019-04-09 09:04:45.127 AristotleNT[1101:15734]Version 7.3.0.1p Copyright (c) 2004-2018 Sergeant Laboratories Inc. I created the following script and added it to an extension attribute: #!/bin/sh ArisVers=$(/Applications/sgtlabs/AristotleNT -version) echo "<result>$ArisVers</result>" This does not do anything and the extension attribute remains blank. Looking for any help to extract and get just the version info from the output. Any help would be greatly appreciated.

For some reaason on our Jamf, it is showing all of our apps as 0 purchased and 0 in use but these have been working for years. has anyone else had this issue and is there a fix? I have already downloaded a new token from the VPP and I have tried to refresh the vpp content from the VPP accounts under settings. Any help appreciated.

Hello Team, We created a passcode policy and deployed around 75 macs to our business unit, but we have some problem in this the password has changed after rebooting the password it doesn't work. We've enabled FileVault. Password has changed successfully and works on the policy. Sometimes FileVault accepts the password after it asks username & password again We don't have AD server we were using for Jamf pro password policy configuration profile If any have an idea, please

Hey everyone, So I'm having a problem with Office 2019 activating. When I launch say word it prompts me to login instead taking me to the window where I can create a new blank document. I've gone to MacAdmins and downloaded MS Office 365/2019 build 16.26 and I already have a serializer pkg that works.I uploaded both the office and serializer software packages to Jamf.I setup the policy with both MS Office and the serializer and I even set the priorities of each software making sure that office installs first and the serializer second. I did a force run of the policy on a new macbook air and everything looks good from the terminal window, office installed first successfully and likewise the serializer. But then when I run say word it asked me to login. To test if the serializer was still good I ran it off of the USB key I have it on and then MS word brings me to the new document window which is where I want it to be. What am I missing? I also ran the serializer though composer first

Where I work has two separate desktop background policies: a standard one for all people and a custom one for certain departments. 10.9 really threw some spanners in the works when Apple shifted from MCX to their sqlite3 database to control this. However thanks to being persistently bugged by Casper warning email messages around 50+ times per day, I think I have it! I should point out there are solutions out there for this, but they're mainly for the Munki crowd and written in python and in one case, Ruby. I am not a Ruby man. Or Python. Anyway I like the idea of as few policies to do the job as possible. Also, as few scripts as possible too. So before I release this on my github ... here's what I have. #!/bin/bash # Script to set desktop background for students # Author : r.purves@arts.ac.uk # Version 1.0 : Initial Version # Version 1.1 : 23/04/2014 - Massive reworking to use applescript for 10.8 and below, modify the db for 10.9+ # Version 1.2 : 24/04/2014 - Removed ap

Is there a way to search for a specific user in the Computer Usage Logs? When this batch of laptops was rolled out (before I got here), not all of them got a proper naming convention (Bob's Macbook Pro.) We have a bunch just named Macbook Pro (37) with no information on the user. Over the last year and a half, we have fixed these as much as we can, but there are still about 150 that still aren't named correctly. This makes locating a laptop difficult when a student loses one. Thank you!

I've been searching for a list of board-IDs. There seems to be a list in the NBI (below) but no way to link to the specific models. I checked GSX as well, and unless it's hidden somewhere, I haven't been able to find it. Anyone have any idea where we can get this info? <key>SupportedBoardIds</key> <array> <string>Mac-031B6874CF7F642A</string> <string>Mac-F2268DC8</string> <string>Mac-50619A408DB004DA</string> <string>Mac-F2218EA9</string> <string>Mac-F42D86A9</string> <string>Mac-F22C8AC8</string> <string>Mac-F22586C8</string> <string>Mac-AFD8A9D944EA4843</string> <string>Mac-942B59F58194171B</string> <string>Mac-F226BEC8</string> <string>Mac-7DF2A3B5E5D671ED</string> <string>Mac-35C1E88140C3E6CF</string>

My company provided me a couple of Apple Mac Laptop(s) for testing purpose. I am 99% sure they are all enrolled in DEP. I would like to: (1) completely wipe these Apple Mac laptop(s)(2) re-install the Apple macOS Operatying System(3) re-enroll them in Jamf using the PreStage Enrollments. Before I completely wipe them, should I do anything with my Jamf Pro Admin Server? Example, should I clear any logs file or any records inventory for these Apple Mac Laptop(s) before I wipe them? I just want to be sure to do the correct process (best practice ) and avoid any complications such as duplicate records inventory etc. Side Note: (I am not sure if this is relevant to you) I found a section on my Jamf Pro Admin Server under Settings > Global Management > Re-enrollment and all the options are NOT SELECTED and under the option CLEAR MANAGEMENT HISTORY ON MOBILE DEVICES AND COMPUTERS is set to Clear pending and failed commands. Thank you in advance for your help and have a nice day.

When we start the Questar browser, I get a message to enable Siri, and then the browser has a message to disable Siri. I checked System Preferences and Siri is disabled. We are running MAC OSX 10.14.5.

Is it possible to do auto-login as root in High Sierra and/or Mojave - or that option is completely no more available? Integrity protection is off, I am able to login as root. But in System Preferences - Users - Login Options the "Super Administrator" name is not available under Automatic login list. Maybe some command line magic? Thanks!

Recently (about a week or 2) we have started getting Keychain errors and some apps stopped working properly (sometime they work, then other times not). If you launch them several times, the app will eventually will work to some extent. As some older posts in Jamf Nation, I have deleted all zero bytes files in the ~Library folder (Keychain Error 1.png) but no chain in the behaviour. Right now, it is only affecting our training classes but it is creeping into our production area.

Recently (about a week or 2) we have started getting Keychain errors and some apps stopped working properly (sometime they work, then other times not). If you launch them several times, the app will eventually will work to some extent. As some older posts in Jamf Nation, I have deleted all zero bytes files in the ~Library folder (Keychain Error 1.png) but no chain in the behaviour. Right now, it is only affecting our training classes but it is creeping into our production area. Jamf Server 10.16iMac 10.15.2 Catalina

Hi @mm2270 , First of all, thank you for this awesome script! We've been struggling with how to enforce critical OS updates (requires reboot) without being too invasive and your reboot scheduler script was just what we were looking for! I presented it to my boss and he was very impressed. His suggestion to me was to "brand" it to make sure our users know that this is something from our IT Department and not anything nefarious. It's easy enough to edit the text but how can I change the dialog box icons? I noticed at least 3 system images used: Restart.tiff, Info and Caution. I see where you're referencing Restart.tiff icon="/System/Library/CoreServices/loginwindow.app/Contents/Resources/Restart.tiff" so I changed the path to point to our logo but there was no change. I wouldn't even know how to begin to change the references for the other two icons. Any help would be very much appreciated! Thank you again!

I am running into an issue with Wifi during deployments. When the Mac is first booted and prompts for which wifi connection to use, we connect to the Corporate WiFi, which prompts for our credentials, and connects. During the JAMF deployment we push a profile for the same WiFi SSID. When that happens the WiFi gets disconnected and does not automatically reconnect, so the JAMF deployment fails.If I connect the Mac to a different WiFi SSID from the beginning, the JAMF deployment is successful without issue. So, my guess is that when that WiFi profile is sent to the Mac with te same SSID it is disconnecting and causing the issue, but I wanted to verify if anyone else is having the same issue.

I noticed today while opening up Self Service on iOS that I was presented with a new dialogue asking about Analytics and Crash Reports. Does anyone know if this can be disabled via the App Configuration profile that can be pushed out? I haven't found any information about this new dialogue, and Jamf Pro is showing the app as version 10.10.1. Our Self Service app is deployed via VPP (device assigned), and automatically set to update and force the app update on devices. Any information regarding this would be greatly appreciated. Thank you!