Hi there! Just checking if anyone has pro-tips! We currently have a management account on many devices with the same password, and that same local account is used for the helpdesk. What i am trying to achieve is;- Create a new hidden management account like "_management" on existing devices- Still have the ability to use Jamf Remote- When that is all done, set up macOS Laps for the helpdesk account. ( no help needed for this) What is the best way to achieve this? Already tried- Create custom QuickAdd.pkg with params -noPolicy -noManage to prevent triggering Enrollment and other policies, _management gots created, but then Jamf Remote keeps "authenticating". In the JSS the device state has changed to managed: _management- Create new local account with a Jamf policy and then make it hidden, edit device info and change management account, did it manually and the Actions option.- Use jamf binary to create a account, change management accounts through Actions or device inventory All f

I am trying to create an Extension Attribute to get the version of a file. The file appears to be a UNIX executable. I worked with the company and they said I can go to the terminal and type the following command:/Applications/sgtlabs/AristotleNT -version The following information is returned on screen:2019-04-09 09:04:45.127 AristotleNT[1101:15734]Version 7.3.0.1p Copyright (c) 2004-2018 Sergeant Laboratories Inc. I created the following script and added it to an extension attribute: #!/bin/sh ArisVers=$(/Applications/sgtlabs/AristotleNT -version) echo "<result>$ArisVers</result>" This does not do anything and the extension attribute remains blank. Looking for any help to extract and get just the version info from the output. Any help would be greatly appreciated.

For some reaason on our Jamf, it is showing all of our apps as 0 purchased and 0 in use but these have been working for years. has anyone else had this issue and is there a fix? I have already downloaded a new token from the VPP and I have tried to refresh the vpp content from the VPP accounts under settings. Any help appreciated.

Hello Team, We created a passcode policy and deployed around 75 macs to our business unit, but we have some problem in this the password has changed after rebooting the password it doesn't work. We've enabled FileVault. Password has changed successfully and works on the policy. Sometimes FileVault accepts the password after it asks username & password again We don't have AD server we were using for Jamf pro password policy configuration profile If any have an idea, please

Hey everyone, So I'm having a problem with Office 2019 activating. When I launch say word it prompts me to login instead taking me to the window where I can create a new blank document. I've gone to MacAdmins and downloaded MS Office 365/2019 build 16.26 and I already have a serializer pkg that works.I uploaded both the office and serializer software packages to Jamf.I setup the policy with both MS Office and the serializer and I even set the priorities of each software making sure that office installs first and the serializer second. I did a force run of the policy on a new macbook air and everything looks good from the terminal window, office installed first successfully and likewise the serializer. But then when I run say word it asked me to login. To test if the serializer was still good I ran it off of the USB key I have it on and then MS word brings me to the new document window which is where I want it to be. What am I missing? I also ran the serializer though composer first

Where I work has two separate desktop background policies: a standard one for all people and a custom one for certain departments. 10.9 really threw some spanners in the works when Apple shifted from MCX to their sqlite3 database to control this. However thanks to being persistently bugged by Casper warning email messages around 50+ times per day, I think I have it! I should point out there are solutions out there for this, but they're mainly for the Munki crowd and written in python and in one case, Ruby. I am not a Ruby man. Or Python. Anyway I like the idea of as few policies to do the job as possible. Also, as few scripts as possible too. So before I release this on my github ... here's what I have. #!/bin/bash # Script to set desktop background for students # Author : r.purves@arts.ac.uk # Version 1.0 : Initial Version # Version 1.1 : 23/04/2014 - Massive reworking to use applescript for 10.8 and below, modify the db for 10.9+ # Version 1.2 : 24/04/2014 - Removed ap

Is there a way to search for a specific user in the Computer Usage Logs? When this batch of laptops was rolled out (before I got here), not all of them got a proper naming convention (Bob's Macbook Pro.) We have a bunch just named Macbook Pro (37) with no information on the user. Over the last year and a half, we have fixed these as much as we can, but there are still about 150 that still aren't named correctly. This makes locating a laptop difficult when a student loses one. Thank you!

I've been searching for a list of board-IDs. There seems to be a list in the NBI (below) but no way to link to the specific models. I checked GSX as well, and unless it's hidden somewhere, I haven't been able to find it. Anyone have any idea where we can get this info? <key>SupportedBoardIds</key> <array> <string>Mac-031B6874CF7F642A</string> <string>Mac-F2268DC8</string> <string>Mac-50619A408DB004DA</string> <string>Mac-F2218EA9</string> <string>Mac-F42D86A9</string> <string>Mac-F22C8AC8</string> <string>Mac-F22586C8</string> <string>Mac-AFD8A9D944EA4843</string> <string>Mac-942B59F58194171B</string> <string>Mac-F226BEC8</string> <string>Mac-7DF2A3B5E5D671ED</string> <string>Mac-35C1E88140C3E6CF</string>

My company provided me a couple of Apple Mac Laptop(s) for testing purpose. I am 99% sure they are all enrolled in DEP. I would like to: (1) completely wipe these Apple Mac laptop(s)(2) re-install the Apple macOS Operatying System(3) re-enroll them in Jamf using the PreStage Enrollments. Before I completely wipe them, should I do anything with my Jamf Pro Admin Server? Example, should I clear any logs file or any records inventory for these Apple Mac Laptop(s) before I wipe them? I just want to be sure to do the correct process (best practice ) and avoid any complications such as duplicate records inventory etc. Side Note: (I am not sure if this is relevant to you) I found a section on my Jamf Pro Admin Server under Settings > Global Management > Re-enrollment and all the options are NOT SELECTED and under the option CLEAR MANAGEMENT HISTORY ON MOBILE DEVICES AND COMPUTERS is set to Clear pending and failed commands. Thank you in advance for your help and have a nice day.

When we start the Questar browser, I get a message to enable Siri, and then the browser has a message to disable Siri. I checked System Preferences and Siri is disabled. We are running MAC OSX 10.14.5.

Is it possible to do auto-login as root in High Sierra and/or Mojave - or that option is completely no more available? Integrity protection is off, I am able to login as root. But in System Preferences - Users - Login Options the "Super Administrator" name is not available under Automatic login list. Maybe some command line magic? Thanks!

Recently (about a week or 2) we have started getting Keychain errors and some apps stopped working properly (sometime they work, then other times not). If you launch them several times, the app will eventually will work to some extent. As some older posts in Jamf Nation, I have deleted all zero bytes files in the ~Library folder (Keychain Error 1.png) but no chain in the behaviour. Right now, it is only affecting our training classes but it is creeping into our production area.

Recently (about a week or 2) we have started getting Keychain errors and some apps stopped working properly (sometime they work, then other times not). If you launch them several times, the app will eventually will work to some extent. As some older posts in Jamf Nation, I have deleted all zero bytes files in the ~Library folder (Keychain Error 1.png) but no chain in the behaviour. Right now, it is only affecting our training classes but it is creeping into our production area. Jamf Server 10.16iMac 10.15.2 Catalina

Hi @mm2270 , First of all, thank you for this awesome script! We've been struggling with how to enforce critical OS updates (requires reboot) without being too invasive and your reboot scheduler script was just what we were looking for! I presented it to my boss and he was very impressed. His suggestion to me was to "brand" it to make sure our users know that this is something from our IT Department and not anything nefarious. It's easy enough to edit the text but how can I change the dialog box icons? I noticed at least 3 system images used: Restart.tiff, Info and Caution. I see where you're referencing Restart.tiff icon="/System/Library/CoreServices/loginwindow.app/Contents/Resources/Restart.tiff" so I changed the path to point to our logo but there was no change. I wouldn't even know how to begin to change the references for the other two icons. Any help would be very much appreciated! Thank you again!

I am running into an issue with Wifi during deployments. When the Mac is first booted and prompts for which wifi connection to use, we connect to the Corporate WiFi, which prompts for our credentials, and connects. During the JAMF deployment we push a profile for the same WiFi SSID. When that happens the WiFi gets disconnected and does not automatically reconnect, so the JAMF deployment fails.If I connect the Mac to a different WiFi SSID from the beginning, the JAMF deployment is successful without issue. So, my guess is that when that WiFi profile is sent to the Mac with te same SSID it is disconnecting and causing the issue, but I wanted to verify if anyone else is having the same issue.

I noticed today while opening up Self Service on iOS that I was presented with a new dialogue asking about Analytics and Crash Reports. Does anyone know if this can be disabled via the App Configuration profile that can be pushed out? I haven't found any information about this new dialogue, and Jamf Pro is showing the app as version 10.10.1. Our Self Service app is deployed via VPP (device assigned), and automatically set to update and force the app update on devices. Any information regarding this would be greatly appreciated. Thank you!

Hi, unfortunately we have 40 macOS Catalina 10.15.1 pilot devices affected by Kernal Panics. The Kernal Panics occur in combination with macOS Catalina 10.15.1 and Carbon Black Defense. Everything works as expected on 10.15.0.Are you updating your fleet to 10.15.1 and have Carbon Black Defense in place? hold your horses. Cheers,Thijs

Hello, Maybe I am not doing the right search but I am looking to Disable "Sign in to your Apple ID" for Catalina on a test computer. I added to the restriction list in the configuration profile but I can still access it. Has anyone else run into this? Is this the correct restriction to disable that area, Apple ID Preference Pane com.apple.preferences.AppleIDPrefPane? Do I need to add this to another restriction to fully disable it?

Greetings,I'm looking for recommendations on cloning our current "live" Jamf Cloud instance to create a testing (sandbox) environment. The server has been already created but it's in a "vanilla" state. Maybe there is a way to export/import settings...? In the immediate future, we are hoping to test API communication and then do more things down the road.

Is there a way of combining sites in to one group? Here is the example. I want to deploy an application, in one of the options i need to select a site name. if a computer in that site it will get that application. but what if i want to deploy the same application to a different computer that was assigned to a different site? I don't see an option of selecting multiple sites.

Does anyone know if dscl -delete still works in 10.14 (Mojave)? I have a script that converts a local user to a mobile one and it requires the local account be deleted so i script a "dscl . -delete /Users/username" but all I get is "delete: Invalid Path" and "<dscl_cmd>DS Error: -14009 (eDSUnknownNodeName)". However I have found that "sysadminctl -deleteUser username -keepHome" does work in 10.14 except for the last user with a securetoken.

We added macOS Catalina to restricted software, a month later I excluded myself from the restriction and I still get the "The requested version of macOS in not available". Anyone else had this issue or know what could be causing this? How did you resolve this? Thanks!!

Hopefully someone can point out what simple thing I'm missing here. I have a pretty generic self-service policy to install "R" (Statistical computing software). The policy is scoped to All Computers / All Users, excluding computers that already have R installed. No limitations set. The only other payload configured in the policy is an inventory update. For R, I usually just download the unmodified pkg, run the package manually and if everything looks good, I'll replace the pkg in the policy. I began testing the Catalina compatible version that was released in December and the package installed successfully on High Sierra, Mojave, and Catalina. However, when I added it to the self-service policy it almost immediately errored out with the message "Error: This computer does not meet the OS Requirements for the package R-3.6.2.pkg". This happened on all three versions of macOS I tested (HS, Mojave, Catalina) The kicker is, assuming the issue was with the new package, I put the previous

Anyone else experiencing weird behavior related to Self Service on their macOS devices? -iOS SS is functional-LDAP tests are successful-Ahead of the holiday, I don't want to experience any downtime Anyone else seeing the symptoms?

Hello, My company currently uses Blue Coat Unified Agent as a cloud proxy solution. My Fleet currently runs Mojave 10.14.6 and everything worked just fine until 12/26/2019. Apparently Symantec did maintenance on the agent and now it automatically goes into failure mode on MacOS Mojave. Symantec says that the "solution" is to delete and reinstall the Entrust.net Certification Authority (2048) which is not possible without disabling SIP. That is NOT a solution. Oddly enough the agent still works on 10.13.6 and 10.15.2. I've installed a fresh version of 10.14.6 (no other software installed) and the agent still crashes. Has anyone else run into this?