Is there any way I could setup the netsus download directory (the apple updates) only save onto a folder in a different partition? I am running netsus on a xenserver vm with two disks, the 2nd disk/partition being higher in size.If not, is there any way to install the whole netsus program onto the 2nd partition, with a fresh installation of the vm? Thanks.

Hi Just starting to dig into VPP testing, i'd like to replace an application that was installed via the App store with the latest version that's delivered via the JSS/VPP, if i scope the Device Assignable app to a Mac that has an older version that was instaled from the app store it will not update, if i delete the older App Store version then the latest VPP one will install. I'm looking for a way to tell the difference between an appliaction that was installed via the App store and via JSS/VPP, looking at Mac App Store Apps in History it shows all applications regardless of how they were installed, is there anything that will identify a VPP installed application ? thanks,Andy

I'm looking for a way to schedule the execution of a script at a specific time. I have deployed computers in our environment that have the same Deploy Studio image on it (this was Pre-Jamf). On the image, there is a scheduled restart that happens daily at 11pm- configured under Energy Saver system preferences pane. On some occasions, any open Applications sometimes will interrupt the restart. I have the script that closes all applications but need it to now run shortly before the 11pm restart. I know I can use Automator and iCal but would like to avoid that if at all possible so that I'm relying on Jamf.

Getting The DEP service reported an error. (https://mdmenrollment.apple.com [403]) when I try to set up a prestage enrollment on an ipad currently. Any ideas? Gabe ShackneyPrinceton Public Schools

Hi all Im trying to create a script that will first generate a new FV2 recovery key then import the new key to McAfee's ePO using one of McAfee's commands. I've nicked a piece of @Sam.Fortuna reissueKey.sh script (thank you btw!) I've tried a few ways but i'm not sure how to take the result of the previous command and pass the variable into the McAfee import command, usually i'd use something like recoverykey=$(command here) but that doesn't work in this scenario. Can anyone advise how get the result of the changerecovey key command fdesetup changerecovery -personal so i can use it in the following command /usr/local/mcafee/mne/bin/MNEMacTool - -import-key RECOVERYKEYHERE the result of the command fdesetup changerecovery -personal comes out like this New recovery key = 'TH15-1SSO-NOTM-YKEY-JW8J-63JH' #!/bin/sh ## Get the logged in user's password via a prompt echo "Prompting ${userName} for their login password."

Hello, I have looked everywhere also on Apple itself, so I assume that these do not exist, but still ask for certainty.Is there a Macbook version with an HDMI port? I know that through a cable you can eventually use HDMI, but I'm really looking for a Macbook that can do this without a cable. So with an HDMI port if this exist. So who knows, or who has one, and who can tell me which Macbook I need.

Has anyone had any luck getting Kaspersky to install via policy on Mojave? I was able to get kesmac 10.2.0.267 for High Sierra to work just fine. But using the same method for kesmac 10.2.1.319B it does install but Kaspersky unexpectedly quits when you try to launch it after install.

Hi Guys I am having a rather frustrating issue with my FileVault policy. I have a configuration profile that Requires Filevault with a Personal Recovery Key, and is set to escrow it to our Jamf Server. New Macs then have a Filevault policy applied during enrollment. This simply applies my Individual Key at next login. It all seems to work fine- the Filevault messages come up at the next login saying that the encryption will be applied etc, however Filevault is not turned on. When I then run fdesetup status, I find that deferred enablement is enabled for the user, despite not having deferred enablement, or even having an option to do so. Has anyone else come across this? Any help would be greatly appreciated. Thanks

Hi, Short version: My database does not start anymore. It says "Error: failed to start the database: exit status 1060". Does anybody know anything about this? Long version: I decided to upgrade from Jamf Pro 10.14.0 to 10.15.0 today, but before I could do that I was going to backup the database as usual. I stopped Tomcat and entered the Java server tool GUI to perform the backup from there. However, I was greeted with a configuration password prompt that I have never seen before, and none of my documented passwords worked. So I ran .jamf-pro.exe config encrypt forgot-password to reset it, which resulted in no more password prompts. When I subsequently tried to backup the database, I get a strange error saying that the backup file already exists (which it doesn't). I also tried to save it somewhere else, but same error there. Then when I went to the MySQL tab in the server tool GUI, I see that the database is not longer running, and when I try to start it, I get: E

Hello, I'm deploying a new app that contains a .kext file. This causes the security exception window to pop up. I've created a Configuration Profile with an "apprroved kernel extension" section w/ the team ID to avoid the security messages. I need this profile to hit the systems before the install, to avoid the security message. Since I can't add a Config Profile to a policy, what is the best way to do the profile and app with one self service entry? It seems that packaging up the config profile and installing it with a postinstall script might be the best option here. Previous posts on this were fairly old, so I figured I would re-ask the question. Is this still the best bet?

Hello Folks, A JAMF newb here so.... I have purchased several iOS apps and had them imported into JAMF Mobile Device Apps, all except for MS OneNote. I have over 1000 of them purchased in ASM (and they are listed) but they just won't show up in Mobile Device Apps. I have purchased several other apps prior and since then, no problems.... any suggestions? Thanks in advance. OCCMacGuy

Any thoughts on why the "User Approved MDM" status reported in JAMF 10.4.1 might be "No", even though the MDM profile has been approved? I even checked DerFlounder's extension attribute for UAMDM status (for those of us who didn't wait for JAMF 10.3), and that does report the status correctly as "Yes". This means that the cool new notification to approve MDM persists for this client. No love even after an inventory update. 10.13.4 - enrolled via QuickAdd - non-DEP

Had anyone ever experienced this issue when an AD user tries to log into a freshly built machine and I go to Security & Privacy > Filevault > Padlock (Enter Admin Creds) > then click on enable users , you should get a window with the users that can be enabled and you click on their name and they enter their password , however when I click on Enable users nothing shows up so I'm unable to add the users to FV

So I need to repush both the stock voice memo app and apple books app to several users iPads. Unlike "Find My iPone" which allows for VPP licenses, those two stock apps don't seem to allow "purchasing" the free vpp codes. When I search the vpp portal it shows: "That item is not available.The item you searched for is not part of the Volume Purchase Program." How can I get these apps back on the iPads? Any help would be much appreciated

All,I'd like to make my local distribution point available to users on the BYOD wifi. As far as I can tell from the documentation, clients use 443 to communicate with the local distribution point. I created a firewall rule to allow port 80 and 443 from the BYOD to the LAN, but the policies to install packages are failing. If I allow any/any on that same firewall rule to packages install fine. What ports am I missing to make this happen?

In this release, Jamf is excited to launch Jamf Connect Configuration, a new app that allows administrators to automatically configure and create computer configuration profiles for other Jamf Connect apps. You can use Jamf Connect Configuration to do the following: • Select and specify Jamf Connect preferences• Test configurations• Save configuration profiles, which you can install locally or upload for deployment with a MDM solution• Open an already existing Jamf Connect configuration profile Jamf Connect Configuration is included in the Jamf Connect DMG and available for download in My Assets. For additional information, see Jamf Connect Configuration. Product EnhancementsJamf Connect Login 1.4.0 – You can now enable users to configure a WiFi connection from the login window by adding the AllowNetworkSelection preference key to your Jamf Connect login configuration profile. When set to true, AllowNetworksSelection displays the Network Connection button in the bottom-rig

Looking to have a script launch a TextEdit document or some kind of document with instructions for the guest user. This document will just let the user know about what services are available, any usernames or passwords they may need to access certain things and, of course, a warning that all their files and anything they have done in the Guest account will be deleted.

We just got a request to block users from being able to install programs on some public use Macs. My initial thought was someone set them up with admin rights but the account is a standard user. I though standard users could not install programs? The example they gave me and I tested was some kids would go to roblox.com and download/install it. This does indeed work as a standard user. What do I need to do to block this behavior?

Good morning everybody,we currently have the following problem.We have to upgrade some clients from macOS 10.10.5 to macOS 10.14.5 via imaging because APNS doesn't work for us. We downloaded the current installation image (macOS Mojave installieren) from Apple and created an installation image with AutoDMG. We have to upgrade some clients from macOS 10.10.5 to macOS 10.14.5 via imaging because APNS doesn't work for us. We downloaded the current installation image from Apple and created an installation image with AutoDMG. With AutocasperNBI I create the final image. This comes on a bootable USB stick.So far so good. Jamf starts, formats the SSD and installs all programs.BUT: After the first boot process the system partition is not found and it cannot be booted to completion.If I then boot again from USB stick or into recovery mode, the system partition is present and filled with data. I don't have any idea anymore why. This is tested on three clients.Do you have any tips for me?I

This error window is popping up on all of our Jamf Managed Computers. It started about 3 or 4 weeks ago. Sometimes it pops up during the enrollment process.Has anyone seen this or know what it is? It goes away when you click on it only to return later.

I've looked through jamfnation and the answer has always seemed to be ARD kickstart to enable Screen Sharing. That no longer seems to be viable moving forward starting with 10.14: sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -off -restart -agent -privs -all -allowAccessFor -allUsers Starting... Warning: macos 10.14 and later only allows control if Screen Sharing is enabled through System Preferences. I'm not seeing anything about it here either: https://developer.apple.com/enterprise/documentation/Configuration-Profile-Reference.pdf Am I missing something or is there no way to enable/disable Screen Sharing in 10.14 without having to physically click around on the computer?

Hi, One of my users followed the link in an Enrollment Invitation email.Unfortunately he only installed the CA profile and then quited the browser.When he now follows the same enrollment link to install the MDM profile he gets this error: Deleting the CA profile and do everything again doesn't help. Rebooting doesn't help.When I search Jamf Pro by serial number I cannot find his Mac. What can I do to enrol this machine successfully besides clean install his Mac ;)

Hi All, We have installed NoMAD and this welcome pop up comes up for every logged in user. Is there a custom configuration profile to suppress this behavior? In addition, is it possible to allow an automator custom workflow (saved as a .app) to run automatically with finder permissions. Thanks,Jared

I'd like to start preparing to upgrade our computers to Sierra and one of the major no no's is allowing the user to enable iCloud Desktop & Documents. Currently there is not a way (that I know of) to turn this off, but keep iCloud drive off. While I don't think that many of our users use iCloud Drive, I would like to set up an EA that could tell me how many users currently use it. Because I will be completely turning iCloud Drive off when users upgrade. The Plist that shows this is MobileMeAccounts.plist in ~/Library/Preferences/ The trouble is how to identify that it is enabled via a script. The key that shows if it is enabled is above the string. I can't seem to figure out how to look for it. Or maybe there is an easier way! <dict> <key>Enabled</key> <false/> <key>Name</key> <string>MOBILE_DOCUMENTS</string> <key>ServiceID</key> <string>com

What am I missing? I do this all the time yet I'm not finding my error. I've built a simple smart group.Criteria is ..( "Application title" is "Microsoft Remote Desktop.app" and "Application Version" is "10.3.0" ) I get zero results, yet I know I have clients with that version that have submitted inventory. Anyone have thoughts I where I'm missing it?