We enable Filevault 2 as part of our enrollment process. In order for Filevault to enable, the user needs to log out. We find that users aren't logging out on their own when they receive new machines, therefore recovery keys aren't being sent to Jamf on time. Is there anyway to force a log out once the enrollment is complete? Is there a log out script we can use for this?

Found some JN posts regarding removal of Adobe CS, but nothing specific for CS6 and the tools I have tried from Adobe aren't removing the full suite. Anyone have a script to share that nukes Adobe CS6? I need to deploy the CC version ASAP but CS6 needs to be removed first. Please share out and help ease the pain!

Any one have a good way to get a list of all installed software in my environment? We would like to generate a report on all the installed software we have on all our managed macs, don't care who has it, just need a list. I thought the jss summary could do something like that but it only seems to make the licensed softwares.

Hi, I have a problem with MacOS Mojave when I have 'Login Window' payload with "Show computer's administrators" unchecked. Computers with only administrator accounts can't log in because no login/password fields appears. Have you ever had this bug? MacOS 10.14.2Jamf Pro 10.7.1 (the same with 10.8 in Dev environment) Thanks

I read through the documentation and could not find the PURPOSE of such an installation.I'm assuming, from the name alone, it allows me to deploy root certificates from Active Directory? Is that all it does?

I've been playing with DEP and a teacher ipad with an icloud backup. I could not get the backup to restore and have the ipad in DEP so I gave up on that thought and went to restore it and reenroll manually though the jss enroll site, but now I continue to get the above message. I have wiped this ipad at least 7 times, it has no current profiles installed and now I cannot get it back onto management no matter what I do. The teacher does require the backup to continue with her work.Any ideas?Gabe ShackneyPrinceton Public Schools

A bit late to the game in wrapping my head around pushing out these settings. One question I have: when I create a policy and push it out to our Macs, do those settings show up in System Preferences / Privacy for me to verify the settings were applied? So far I haven't seen anything I have tried show up there. Even settings from mobileconfigs that I have downloaded from manufacturers, so I would assume they were accurate. Before I fall too far down this rabbit hole I wanted to see how I can verify that a setting was applied. Thanks, Tim

What happens if a computer is in use by a person, and you add the computer to a prestage enrollment group? aka they are actually working on the computer, BEFORE it is added to the prestage enrollment group

I'm in the process of migrating from an on prem Jamf instance to a Jamf Cloud hosted instance. One thing I just noticed is that I'm unable to rename any package uploaded to my cloud distribution point. With my on prem infrastructure, I'd often just rename an installer package in Admin to be the same as a newer installer, then upload the newer installer and replace the existing installer. That would make it so the newer installer would automatically replace the older in all existing policies, so no policies needed to be edited. I contacted Jamf about this and they said that's how Jamf Cloud currently works and there's no way to rename a package after uploading it. Has anyone else ran into the same thing and found a workaround?

Hello, I enabled email notifications for VPP applications, when no more licenses available or when an item is removed from the App Store. When I receive the email, we see the HTML tags. Do you have the same formatting issue on body of email notifications for VPP Applications ? I don't have this problem on all other types of notifications sent by our Jamf server. I'm using version 10.14.0 of Jamf Pro Thanks for your help

Hello, Please, do you know if it is possible to customize the message indicating that you have to approve the MDM when the UAMDM is not detected because the original message is not very meaningful for our users and they don't click on "Approve" button. Thank you for your help,

Does any one know how to suppress these two attached messages? Updated some test computers from 2016 to 2019 (16.28.19081202). First one pops up when a user logs in and the other one when a user launches an application... Is there already a config profile that can be pushed out that some one has created?

I haven't touched policies or config profiles in months. Recently we had two Macs, one Macbook Pro and one iMac that went through pre-stage, config and policy. After that's all done our Techs rename the device and add it to our domain. Well for some reason the computer name field has been grayed out and we can only access the computername.local so when they're added to the domain it will be added as "imac" or whatever. What kind of policy or config do I need to enable the computer name field? Both these Macs were running the latest version of Sierra.

Hey all, Apologies in advance if this questions comes across as thick-headed - I'm very new to Jamf and bash scripting in general. We have Visual Studio Code installed on our lab machines, and would like to use Jamf Remote to install some plugins for VScode. To do this, Jamf needs to be able to run code --install-extension foo.vscode.extension We've managed to add code cli commands to the path variable from Jamf remote by writing the following script: #!/bin/sh sudo touch /etc/paths.d/vscode sudo bash -c "echo /Applications/Visual Studio Code.app/Contents/Resources/app/bin > /etc/paths.d/vscode" This can be pushed to our machines and will work once the Macs are restarted, allow us to locally install vscode extensions via command line. The problem comes trying to push the vscode commands via Jamf remote - I don't think that Jamf (as root) can see the path variable to run the vscode commands. I think this will hold true even If I sudo -i into the same user that has the path

Hey folks! I am having an issue deploying a custom configuration profile created via ProfileCreator to Jamf Now. It deployed once to the computer before, and by the looks of it, will now not deploy again after some modifications. I deleted the old profile from Jamf Now and then uploaded the modified one, which is standard procedure. One thing to note is that when trying to install the configuration profile manually, I get a warning message (screenshot attached). Any ideas as to what may be the cause of this? *And if you don't mind, please upvote this feature request: https://www.jamf.com/jamf-nation/feature-requests/8826/ability-to-update-configuration-profiles Thanks, Jayke Here is the contents of the profile:<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <key>PayloadContent</key> <array> <dict&g

I enrolled a MacBook Air in our Jamf Pro instance, and prior to enrollment, the user unlocked the laptop with touch ID. Now, touch ID won't work. In my config profile, the "unlock with touch ID" box is checked. I even excluded the LT from the profile, but it still doesn't work. The user is able to create a new fingerprint through the touch ID panel in system preferences, but at the login screen isn't prompted to use it. This is a 2018 MacBook Air, 10.14.5, and is bound in AD. I know there are other posts about AD bindings breaking the touch ID, but the LT was bound before the Jamf enrollment and touch ID was working. Has anyone else experienced anything like this, or know of a way to fix it?

Hey everyone, I'm trying to mass login into 30 machines via Casper or ARD. The machines are sitting at the login window waiting for a username and password. I'm currently trying this, but it never logs in. Can someone help me with this? osascript -e 'tell application "System Events" to keystroke "LOGIN_NAME"'; osascript -e 'tell application "System Events" to keystroke tab'; osascript -e 'tell application "System Events" to delay 0.5'; osascript -e 'tell application "System Events" to keystroke "PASSWORDHERE"'; osascript -e 'tell application "System Events" to delay 0.5'; osascript -e 'tell application "System Events" to keystroke return' Thank you all very much.

Do you deploy Panopto at your site? Are you able to push the installer to a computer using common events? I used to do this very easily with the custom download from the vendor, but now am only able to get it to work via Self Service. Log files suggest a possible permissions issue with an account generated to manage the install. I'm not sure whether the change is High Sierra, the installer, or other.

I'm trying to perfect our DEP workflow for setting up new and old Macs for our company and things are a bit rocky. My current workflow is using SplashBuddy to show the end user a graphical update on the software that is being installed along with enabling FileVault encryption. This seems to work relatively well. I have a prestage enrollment set up that requires authentication before entering in their account, which pre-populates the new user with their account info. It seems like after upgrading to JAMF 10.7 that now there is no possible way to generate that user as a Mobile User. Or even make them a standard user. Instead, the account that is created is a local admin account. At our company we would ideally like Standard Mobile User accounts. Is that even possible any more with a DEP workflow? How do you guys do it? I have also tried to downgrade the local admin account to a standard account, but as soon as we do, their account is no longer able to log into the computer. We have

Hey guys,I have 2 Macs Pro (Let's say MacA already enrolled and MacB in the scope). The user reported that MacA isn't working well, so I made a Time Machine backup of MacA, and restored in MacB.However, it showed error "Device Signature Error - A Valid device signature is required to perform the action." on MacB when I ran "sudo jamf recon". Is there any way to automatically enroll after restore? Please help !!! The following steps I did:1. Make a Time Machine backup of MacA to external hard drive.2. Remove both Macs in Jamf.3. It showed error when I directly restored to MacB at boot up, so I normally boot up MacB, enroll and use Migration Assistant.4. Run "sudo jamf recon" and it showed the error. I already tried the following steps and it still doesn't work.https://www.jamf.com/jamf-nation/discussions/21616/restoring-from-time-machine

Hi, I have a deal for 2000 Apple TV, HERE THE CUSTOMER RESUQEST: 1- When his customer power on the Apple TV it must show his logo before TV OS interface. How can we do it? 2- Link each Apple ID connected to an Apple GIFT CARD to be automatically credited each month. How this possible?

Hello, new to Jamf. I'm coming from a monolithic imaging background using DeployStudio, and I'm trying to create a workflow for our particular setup. Our schools is now getting in laptops and desktops that can no longer be imaged, so our school is moving over to Jamf. We don't have ActiveDirectory or OpenDirectory, otherwise this wouldn't be a problem. :/ I searched the discussions, but I didn't see anything that was applicable to my particular situation. On all of our computers, we have 3 generic accounts: Teacher, Student, and CAASPP. CAASPP is the one I'm the most worried about, as the State testing software is so horribly written that you have to manually change a bunch of settings on a computer just for it to work, and that makes it impractical (impossible?) to do in a timely manner to over 400 Macs in the 1 to 2 weeks before testing when they inevitably change the browser and it has to be reloaded on all the machines. I'm just one person. :( I attempted to use Composer t

Yes! It's that time again. Just received 1420 new iPads and am adding them to my pre-stage.....one at a time.If I use the select all button, even if just for 10 devices on a page, I get the error when I save. If I click the same 10 devices one click at a time, the save works.I am on JP 10.9 and am upgrading to 10.10.1 next week. Can anyone tell me if this is fixed in the new version... or if they have a usable workaround?

Dear Masters!! Hoping this would be the great place of masters who can really help me with script or solution. I had a requirement to write computer Hostnames to JSS Static Computer Group. I would receive consolidated .xml or .csv file for admin rights from support groups. Now, I need a script to read computer objects from that .XML or .CSV file lookup for JSS inventory if computer hostname is available then that computer Hostname needs to be added to Static computer Group. Before adding new computer hostnames script should fist remove all existing computers from that group and then add new entries to it. Looking forward for responses on this post! Thank you!

We have a staff member that has just gotten married and now has a name change. I have never had to deal with this before within Active Directory and not sure how to proceed. Our username convention is the first letter of the first name and the full last name, ie. jdoe. If I were to change the username and name within Active Directory for this person what will it all affect? Is this the best method to do this, or should I be creating a new Active Directory user account? How do I change the mobile account username on their laptop to reflect this new username and name while keeping files, settings, etc. intact?