Hey Guys and Gals, So I'm tasked with procuring equipment for our Zoom conference rooms and my company wants an Apple TV and a Mac Mini in each room. The main use cases are Zoom meetings and being able to AirPlay to the TV in the rooms but does having both seem redundant? Can the Mac Mini suffice and thus we don't need the Apple TV's in these rooms or is there something else to it? My manager wants the Mac Minis for more "computer" use in these rooms so those will probably need to happen over the Apple TV option. Thanks all!

Hi, If we go with the JAMF Pro Cloud option does the SCCM Proxy Server component live on the cloud as well or is that component installed somewhere on premise?

Hi, I have a script:- #!/bin/sh /usr/local/jamf/bin/jamf policy -event soe (nb: also tried -trigger) This script is attached to a Policy that is available in Self Service. I can launch it from Self Service and I see in the logs "Checking for policy ID XXX..." but nothing actually gets fired off. If I run the command manually on the machine, it works just fine, just doesn't seem to work via script/self service.

Are the presentation slides for this event available anywhere?

Noob question Hello, we have LDAP integration in our Jamf instance. If I delete a user in AD assuming that there's paid apps/configurations scoped out to this user. Will this un-scope everything assigned to the said user? Thanks

I have no idea what this is or why it is a problem now. I am hoping that someone here may have seen this before. here are the results of recon scanMacBook-Pro-2:~ administrator$ sudo jamf recon -verbose verbose: Timeout: 10 verbose: Checking availability of <I removed this for privacy> verbose: The JSS is available.Retrieving inventory preferences from <I removed this for privacy>...Locating applications...Searching path: /ApplicationsLocating hard drive information...Finding extension attributes... verbose: Running script for the extension attribute Active Directory OULocating accounts...Locating package receipts... verbose: Found app: /Applications/Siri.appLocating software updates...Locating printers... verbose: Locating running services... verbose: Gathering auto login user verbose: Found app: /Applications/QuickTime Player.app verbose: Found app: /Applications/Chess.app verbose: Found app: /Applications/Photo Booth.app verbose: Found app: /Applications/Boo

Good morning everyone, I was wondering how everyone is handling setting up screen sharing remotely / by script on device enrollment. We used to run a script that would add our local admin account to the System Preferences > Sharing settings. It appears that starting in 10.14 (maybe 10.13) this ability was removed from the OS and we have been smacking our head against the wall trying to fix it. Is there a script or configuration profile that we should be using to add this account for screen sharing purposes? Based on my understanding, we can no longer use the kickstart resource to initiate this configuration change.

Last week we updated our JSS from 8.62 to 8.71. Since then, any Macs we image (Casper Imaging) fail to have the root account enabled. Enabling root as part of a configuration has been working for the past year or more. We use the command: /usr/sbin/dsenableroot -u admin -p password -r root-password in a script that runs "at reboot". Obviously password and root-password are not in the command line… Could be coincidence that it magically stopped working when we upgraded, but I am not a big fan of coincidence… On the other hand, how could the JSS version (and consequently the version of Casper Imaging we are using) cause this issue?Ideas?

Just received this email from Jamf about forthcoming changes to LDAPS in 10.11. We have serious concerns about how this change would impact our Jamf Pro cloud instance: Additionally, any LDAP server connections using LDAPS will require that the hostname of the LDAP server match the Common Name (CN) on the certificate that is uploaded to the Jamf Pro Server. A mismatch will prevent communication between the LDAP server and Jamf Pro Server. Posting what I replied to Jamf with, hope others may face the same issue and also voice concerns back to Jamf (and upvote Feature Requests related to SAML and SCIM)! Our internal domain that LDAPS binds against is a .local domain (over 20 years old AD!). This is not internet routable so there is no way for the hostname we give you on the Internet to match the common name. We can’t be the only ones that will face this issue! If you can match based on a SAN, we can probably make that work by adjusting our ADCS certificate template on our DCs that

Hi everyone, I am having trouble finding a way to do this via script, I would also like to stay away from Config Profile if I could. Is there a defaults command that can change the Login Window setting to be List of Users rather than Name and Password?

Hello nice people! I'm currently testing deploying printers using Casper, but I'm having a couple of issues. Deploying printers added by Casper Admin = "Hold for Authentication" Using the command line = "Printer Paused" Error logs shows: E [14/May/2015:10:23:35 -0500] [Job 5] Connection refused) Command I'm using: /usr/sbin/lpadmin -p "name of printer" -E -v smb://printerserver-forIT.mydomain.com -P /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Resources/Generic.ppd and /usr/sbin/lpadmin -p "nameof-IT printer" -E -v smb://printserver-namehere -P /System/Library/Frameworks/ApplicationServices.framework/Versions/A/Frameworks/PrintCore.framework/Resources/Generic.ppd These are network printers hosted on Windows Server 2012R2. Can someone shed some light on what I'm doing wrong?

When I am adding pkgs uploaded from Jamf Admin (local network distribution point) I then go to add the application to a policy, but for some reason the application will add twice sometimes or the interface will freeze. Any suggestions?

Hi there! Does anyone else out there track serial numbers of Apple keyboard/mice/trackpads? Is this something the inventory tracking in Jamf capable of? Thanks everyone!

I have users that have installed the Browsec VPN extension on the Chrome browser. This is allowing them to get around our filtering and monitoring software. Does any know if there is a way to block Chrome extensions. I have tried setting it as a restricted software using the app id name, but that has not worked. Any suggestions are greatly appreciated.

There is a handy program called Platypus that takes scripts (bash, perl, etc) and converts it into a working .app I have a bash script I wrote, imported into Platypus, and created an .app file. I've downloaded the PPPC Utility and attempted to import the custom .app file into the PPPC Utility but it will not accept it. I'm not sure why? Does anyone have any insight? I would appreciate it very much. Thank you in advance.

Someone had a script on here not too long ago and I can't find it now. Basically what it did was check to see if a specific wifi network was available it would switch to it. I'm looking to deploy this at my school to prevent students from switching over to our teacher network. Someone had some loose lips and the password spread. There was also a section of the script where if there was not network named "student" or whatever it would then do nothing instead. I.E. if the student is at home.

I am working on installing the DMG from https://download01.logi.com/web/ftp/pub/techsupport/cameras/Conference%20cam/FWUpdateRallyCamera_1.2.4.dmg. using Jamf Pro My question is simple, to run the installer I need to actually run a command line that calls something in the .app. Specifically I need to run the .app with an option --silentinstall. I am just stuck on how to do that, even with composer. I cannot find a "run this command" type setting I looked at: https://www.jamf.com/jamf-nation/discussions/25530/help-with-scripting-install-a-package-within-a-dmg but I just don't get it. More history on this: If I double click on the package it opens up the camerasettings.app that I then run. It creates a log file at ~librarylogslogitechdfu with a subfile of the install log. If I take the DMG and push it through JAMF pro, it shows that the file has been installed. However, if I look for the log file, it is not created (nor is the firmware updated on the device). If I add the .app

Hi Nation, I am a bit confused by the use of user smart groups within scoping.Some of our apps are made available in self service and only targeted to user smart groups. So the app appears in the self service on a device with a targeted user assigned to it but it isn't downloadable. No error message appear, it just doesn't do anything. The download is only possible when we set the targeting to all mobile devices, a single device or a device group.This happens with VPP-Apps, in-house Apps and configuration profiles as well. Did I do something wrong by only targeting to users?

Hi, Jamf user of 2 days, sorry if this is a simple one. Looking for advice on the best way to deploy a package. We have a policy to install a package to a smart group scope filtered on department. I'de also like to offer this to all computers in self service would i: Create 2 policies one to install to computers in the smart group and one to offer in self service OR Is there something clever that i can do in the one policy where it install to the smart group but only offers in self service to other computers? Thanks

I have LAPS currently setup in my environment and I would like to make another script that uses the password stored in the LAPS EA for running some commands. I am having a difficult time making a variable that is set to the stored EA in JSS. Any help would be great!

We've been setting up a lab and 4 of our 10 Mac Minis have old policy profiles on them even after being deleted from the JSS. I've booted into the recovery partition in hopes of using terminal to locate and delete these left over profiles. Normally I'd just re-image them but the teacher has software & files they don't want to lose. Does anyone have any suggestions on how to go from here?

hello, I just tried to configure my first patch management policy with Google Chrome and I got this notification on the scope. Should I stay the target like this because it will be automatically or should I change the scope to all computers? because I don't want to push the latest version to everyone, just to people with an old version of the application. I'm confused about this notification.

I've been trying to create a Composer pkg that places pre-configured Google Chrome settings into the User Template from ~/Library/Application Support/Google but when I deploy this package to my test machines the settings won't apply and going to the Chrome settings provides the following message of "Some settings were reset" So I know that other threads recommend using the Google Chrome Master Preferences via JSON coding but here's my dilemma: I must include an extension, Color Enhancer in this case, but this extension must also be disabled by default. Basically they only want the user the have the option to go to Extensions and enable Color Enhancer if they want. While I think there are ways to use the Google Chrome Master Preferences and also add an extension I'm not aware of how to programmatically disable an extension BEFORE the profile in ~/Library/Application Support/Google has even been created. To add to my problems the PC packager has this working on our Windows clie

does the 'display login window as name and password' get automatically set when the mac gets bound to AD ? if i wanted to have this for macs that are not bound to AD, is there a script to have it done, or a payload property somewhere?

Basically the title. We would like to prevent certain users from using Bootcamp on their Macs. I can't seem to figure out a way to prevent this. I know it sounds dumb but this is coming from above me, plus the thought of supporting 2 operating systems on one device doesn't sound fun.