Hello all, I'm trying to edit a .plist file to for Symantec Cloudsoc Reach agent application. editing the .plist file will automatically open the default browser for user authentication. The Reach agent gives you the option of automatically launching the default browser to initiate user authentication with CloudSoC. Otherwise, the Reach agent uses its own pop-up window to prompt the user to click the authentication URL to initiate the login process. On Mac, I would have to give the ShowAuthPopup key a string value of 0 in the ReachAgentConfig.plist file at the following location: /Library/Application Support/ReachAgent/ReachAgent.app/Contents/Resources/ For example: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>ShowAuthPopup</key> <string>0</string> &

I used the Adobe CCP to create an uninstaller, and it generaated a binary executable file, as shown in attached pic. Anyone know the best way to deploy such a file?

I was watching a Jamf webex and saw a policy to update asset tag via self service. I really like the idea for support staff. Has any one done something like thing? Am going to guess its done via the API.

Hi, I'm trying to report on which of out machines don't have Meraki Agent installed. I have created Extension Attribute and used a Smart Group but its not showing any machines as having Meraki Agent. What am I doing wrong? The script works in Terminal #!/bin/bash PROFILE_ID="com.meraki.sm.mdm" if ( /usr/bin/profiles -P | /usr/bin/grep -q $PROFILE_ID ); then # Profile is present echo "<result>True</result>" exit 1 else # Profile isn't there, need to install echo "<result>False</result>" exit 0 fi

Hello, We upgraded to JSS 10.14.1 Friday, just before 10.15.1 dropped. We have a few 10.11 clients, so opted for 10.14.1 until we bump off the final El Capitan machines. Can anyone confirm 10.11 clients are working with JSS 10.15.1? I am not looking to re-enroll 10.11 Macs, just hoping current clients still function with JSS. Thanks, and may the force be with you.

Beginner scriptor in need of some assistance. I basically pieced this script together from two other scripts, it fails when I run this and works when separated. This is the error I receive when running the script, which I'm guessing is a syntax error. Any help would be greatly appreciated! Script exit code: 2 Script result: /Library/Application Support/JAMF/tmp/Delete User Profiles Older than 1 day: line 19: unexpected end of file Script #!/bin/bash # Delete User Profiles in /Users. Exclude the 'Shared' account. oldUsers=`find /Users -type d -mtime +1 -maxdepth 30 | cut -d"/" -f3` for oldUsers in `ls /Users | grep -v Shared` do if [[ $oldUsers == `ls -l /dev/console | awk '{print $3}'` ]]; then echo "Skipping user: $username (current user)" else echo "Removing user: $username" # Optional, removes the account dscl . delete /Users/$username # Removes the user directory

Hello All, I know this has been discussed elsewhere but the discussions are older and I am wondering if anyone has found a better solution: I am trying to configure 4 Scholastic Reading Apps on iPads. 2 of the Apps (Stage B: Read180 and SRI) accept and hold the Site ID with no issues but SRC and rSkills will not hold the Site ID. A previous thread suggested adding a script in the App Configuration on JSS but this has not worked for me. (previous thread: https://jamfnation.jamfsoftware.com/discussion.html?id=11922) Scholastic is unable to replicate the problem on their end and my teachers are getting very frustrated. Does anyone have any suggestions or anything that has worked for them?

Hi guys I am tryin to blocked some certain SSIDs. I was wondering if someone ca help me with variable for all the SSIDs. so far this works #!/bin/sh # Prevent Access to RLSPOT001 SSID=`/System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport -I | grep ' SSID:' | cut -d ':' -f 2 | tr -d ' '` if [ $SSID = "RLSPOT001" ]; then /usr/sbin/networksetup -setairportpower en1 off fi # Prevent Access to RLAVID001 SSID=`/System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport -I | grep ' SSID:' | cut -d ':' -f 2 | tr -d ' '` if [ $SSID = "RLAVID001" ]; then /usr/sbin/networksetup -setairportpower en1 off fi # Prevent Access to RLSHEE001 SSID=`/System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport -I | grep ' SSID:' | cut -d ':' -f 2 | tr -d ' '` if [ $SSID = "RLSHEE001" ]; then /usr/sbi

Hi! We're deploying Backblaze to our users so they can be backed up. They gave me a line to go in a script to set the private key for the users automatically. What's the best way to get this working? The part they gave me was, "/Library/Backblaze.bzpkg/bztransmit -setprivkey none <hexencodedkey>" with the <hexencodedkey> going to be filled in with what we want to use.

Hello guys, i know this question have been asked and answered. I have been reading a lot of posts on here and there is no universal step by step instructions that i could find. People are saying that some times script is not working, or the results are not consistent in the environment. I am new to all of this. I have been tasked to upgrade some of the devices that still on High Sierra to Mojave and it needs to be done via self service.I don't want to assume that those devices have Mojave cached, therefore i think i would need to create a package that would get pushed to Application Folder ( I am trying to find out how to do that, so far no luck)Second i know for a fact that users do not have admin rights, so this needs to be taking in to consideration when doing upgrade. I know there are multiple links to a script that is about a page long on GitHub and there are one liners commands that can perform the upgrade. Given my scenario which route should i take? Long Script or one liner? A

I realise I am leaving this a little bit late with Catalina just around the corner, but what I really need is to be able to produce a spreadsheet of what 32 Bit Apps are installed on my Mac fleet, with details of which Mac they are on etc. I am suprised there is not more chat on here about this- hopefully it's because there is an easy solution which I've overlooked! I have rrouton's script to create a document on each Mac detailing the 32 bit Apps https://derflounder.wordpress.com/?s=32bit but I can't get this to work as an EA as others seem to be doing. How is everyone else managing this? We do a lot of scientific computing here, and I suspect there are many 32 bit apps in use. Thanks in advance!

Hello, Our JSS ran out of space over the weekend. I've cleared some old log files and rebooted. Now the JSS is stuck at " Checking for tables to rename..." I figured before opening a support ticket, I'd check here to see if there was something quick to try.

Please excuse the length - part of this post is brainstorming for my own benefit. and part of it is documenting what all I have tried. Environment:10.8/10.9 client machines10.6.8 OD serversOpenLDAP serversJSS 9.32Mobile accounts with no syncing (so just local storage) The client machines are currently bound to the 10.6.8 servers. A previous admin was using createmobileaccount scripts to create mobile accounts, and I found this was causing problems where credentials were not being cached on the client machine. I know the documentation all says that the credentials should be cached on first good login when the server is available, but I could image machines with the createmobileaccount script, log into the mobile account while connected to the network, and then be unable to log into the account if I pulled the ethernet cable. This was resolved when I went to a Configuration Profile pushed down to the client machines. Mobile accounts were being created correctly and the credentials wer

I had a fun experience yesterday going from 10.8 -> 10.14 on redhat linux. Long story short I had to revert to 10.8. I worked with support on it and apparently there are some problems upgrading to 10.14. Has anyone got it working? If so, what OS is your Jamf Pro hosted on, along with the version you were upgrading from. Thanks in advance!

We can query users that our in our on-prem LDAPS server within Jamf Cloud just fine, but when we enable Require Authentication for Prestage Enrollment and the user enters in their LDAPS account on a new Mac, the computer thinks about those credentials for ~10 minutes before finally accepting them. However, if the password is entered incorrectly, it's immediately marked as wrong without waiting for 10 mintues. It's kind of ridiculous. Not sure what I can do to reduce that waiting time for end users

Having an issues with a user on site who is using a mac with a local account however wants to be able to print to our network printers. I have added the printer on his machine and the first time typed in his domain credentials in and saved it in the keychain I then tested that all jobs were being sent correctly. However, after a few hours they are having the Hold for Authentication error and when clicking on this to be prompted for their password again get nothing. I have checked in the keychain and all details are correct. The only thing i can think of is that the local accounts username is different to their domain username. Could it be trying to use this username instead after a period of time? Any Help would be greatly appreciated.

Is there any way to search in JAMF or create some sort of inventory report that can identify computers that have external hard drives attached? We'd like to be able to identify which of our users are using external drives and whether or not those drives are encrypted.

Silly question - If I download the Catalina.app and package it up with Composer - Upload it to my JSS, and then create a policy to cache it on a target machine do I want to choose that package and say "Cache" or "Install"? The reason I ask is that - wouldn't I want to "install" the PKG that I made so that it "places" the installer into the users applications folder? ...or am I overanalyzing this and I should just say "cache" - I was under the impression that that would put the PKG someone on the target machine but not "run" it

Hello, I'm trying to configure NoMAD through Jamf for all of the machines I run, but I'm running into a snag since the config has to be in the local users' home directory and I'm hoping someone here can provide some insight. I found a login script from a user (Thanks @PaulHazelden) last year which is listed here: AD_domain="your ad server" Realm="YOUR AD SERVER" # Write default AD domain defaults write com.trusourcelabs.NoMAD ADDomain -string "$AD_domain" defaults write com.trusourcelabs.NoMAD KerberosRealm -string "$Realm" defaults write com.trusourcelabs.NoMAD UseKeychain -bool "true" defaults write com.trusourcelabs.NoMAD SignInWindowOnLaunch -bool "true" defaults write com.trusourcelabs.NoMAD UPCAlert -bool "true" defaults write com.trusourcelabs.NoMAD UseKeychainPrompt -bool "true" My problem is that scripting this through Jamf results in the defaults command writing to the roo

Hi Is anyone else having trouble with getting reposado/margarita to service macOS Catalina? As far as I can see it still servicing Mojave and earlier fine but all Catalinas at present get a message "Can't load data from the Software Update Server". We are using the apache2 method from https://github.com/wdas/reposado/blob/master/docs/URL_rewrites.md I have cleared the contents of the .htaccess file and re-pasted the entirity of the example to ensure there aren't any typo's etc. Both reposado and margarita have been updated and apache (and the server) restarted. But still the same message. If I browse to the catalog url it opens in the browser and if i run the curl command it gives me what looks like the correct catalog. There are updates approved in Margarita which are not installed on the mac. Is there a simple trick that i am missing? Thanks Vinod

I would like to single out Macs named like "Whoever's iMac" but can't seem to create criteria that catches Computer Names with an apostrophe in them. Computer Name matching regex ['] or using Computer Name is like ' only returns one machine for whatever odd reason.

I have a user who is repeatedly getting prompted for Device Enrollment. The computer has an approved MDM profile, the device is checking in and running policies, and has all of the expected profiles. Yesterday I manually re-enrolled via our mycompany.jamfcloud.com/enroll site, but this morning the user informed me he is getting the prompt again. my next thought is to run sudo jamf removeFramework then manually re-enroll again, but wanted to see if there are any other ideas.

I need help with a script which can pull the first and last name of a user from the device and set this as their computer name, which is then reflected in Jamf Pro. I've had some success with the below script taken from another thread, but this only works for users with one first and last name. When someone with a middle name adds it to their account name, it doesn't add the surname, rather the first two names. #!/bin/sh #gets current logged in user getUser=$(ls -l /dev/console | awk '{ print $3 }') #gets named firstName=$(finger -s $getUser | head -2 | tail -n 1 | awk '{print tolower($2)}') lastName=$(finger -s $getUser | head -2 | tail -n 1 | awk '{print tolower($3)}') computerName=$firstName$lastName #set all the name in all the places scutil --set ComputerName "$computerName" scutil --set LocalHostName "$computerName" scutil --set HostName "$computerName" sudo dscacheutil -flushcache && sudo killal

Hello this should be fairly simple, but i am new to JAMF and i can't seem to figure out the issue.I am trying to do upgrade from HighSierra to Mojave. I have downloaded and cached the installer to Application folder. Created a second policy and running the following command under Files and Processes: /Application/Install macOS Mojave.app/Contents/Resources/startosinstall --agreetolicense Getting the following error message:Executing Policy Install Cached MojaveError: The package (Install macOS Mojave 10.14.6.pkg) could not be found.Running command /Application/Install macOS Mojave.app/Contents/Resources/startosinstall --agreetolicense...Result of command:/bin/sh: /Application/Install macOS Mojave.app/Contents/Resources/startosinstall: No such file or directory

Currently working on our Sierra deployment and i hate the "New to Mac?" notification that pops out. Is anyone suppressing this from popping up on their users and if so how did you accomplish that? Thanks in advance for any help.