Hi all, I have successfully setup our company's network printer and our Macbook fleet can successfully send to printer queue. Obviously, there will always be a group of uses that are not satisfied with the outcome.Some users are complaining they can't select A3 size paper when printing. I am using generic PPD file when setting up printer within JAMF Pro.Does anyone know where (or if it's possible) to add in paper sizes available when selecting printing?

I am needing a script that can be added to our summer update configuration that will delete every user with the exception of admins. Anyone had any luck doing this? I have tried using Tom Larkin's script and it seems to remove the home directories from /Users how ever the accounts are still populated in SystemPreferences>Accounts. Any ideas? https://discussions.apple.com/message/12165862#12165862 dscl . -delete /Users/ dscl . list /Users | grep -v "_" #!/bin/bash UserList=`/bin/ls /Users | /usr/bin/grep -v "Shared"` for u in $UserList ; do if [[ `/usr/bin/dscl . read /Groups/admin GroupMembership | /usr/bin/grep $u -c` == 1 ]] then /bin/echo "Admin account detected skipping..." else /usr/bin/dscl . delete /Users/$u && /bin/rm -rf /Users/$u fi done

I'm looking for a way to assign a username like you can in JSS (Inventory > User and Location) but would like to do it via a dialogue box (oascript?) outside of JSS on a Mac via Self Service. We have our JSS synced with Active Directory (AD) via LDAP. When we enter a username in JSS, it will auto populate other attributes for that account from AD which is saving us time. This policy would be done by someone that doesn't have access to JSS but will have access to Self Service for prepping the computer for a user. This will probably have to be accomplished via the JSS API but not sure where to start. Anyone else doing anything like this?

Hi Everyone, Newbie HereI'm trying to replace an existing config xml file in the applications folder. I packaged the the new config file to add in the existing folder. I wrote a simple script to run before running the package to remove the existing xml file, but for some reason the exisiting file is not being removed #!/bin/sh cd /Applications/Adobe InCopy CC 2015/Plug-Ins/vjoon K4 rm -rf 'K4 Config.xml' Am I doing this wrong? Thanks in advance!

Hello, I've been messing with Managed Preferences in Chrome to setup Managed Bookmarks this has been successful. I followed the below article:https://www.jamf.com/jamf-nation/discussions/25882/deploying-managed-bookmarks-to-google-chrome-using-a-plist-and-configuration-profiles-with-custom-payloads However I looking to know how I can disable the Offer To Save Passwords option in Chrome using the managed preferences plist not sure what the <key> is <key>OfferToSavePasswords</key><false/> Thanks,

Hello, I sometimes need to throw a backup of our Casper production database into a dev environment to do some testing. However after installing JSS 9.32, I am getting an error "This is a non-master JSS web application. Upgrade your master web application before upgrading the non-master web applications." Unfortunately, disabling clustering prior to backup is not an option for me... any idea how to bypass this error?

I've created a Base Image doesn't include any additional software just a local admin user using Composer.Followed the steps from this article [https://www.jamf.com/jamf-nation/discussions/22840/guide-to-creating-sierra-base-image-from-a-to-z](link URL)Issue is after it images and boots to the HD there is no desktop background and upon checking the Library folder the permissions are all wrong.

Hopefully someone can help me answer this. Despite my best efforts I haven't been able to find one. We have a fully functional DEP setup with Prestage Enrollments working for macOS. We were a little late to the party with DEP so we're still working on getting all of our devices enrolled. On occasion we'll run across a machine that didn't get picked up by our bulk import of machines into the Apple School Manager for DEP enrollment and have to enter it manually. If we completely erase the machine AFTER entering the computer into the Apple School Manager, it works every time without fail. If however, we miss the DEP enrollment and add it to ASM after the machine has been erased, we have to erase the machine again even if the setup assistant has not completed running. Obviously a computer that has already been completely setup will need to be erased again, but if the Setup Assistant is not complete, it seems like you should be able to restart the computer, or step back all the way

Is there a way to avoid being prompted on iOS to install apps. I'd like for the apps to automatically install without being prompted. Prompt attached.

hello collective, I'm hoping someone can help me with the following. I'm trying to make our deployment process as easy as possible and am looking for a way to differentiate between faculty/staff machines and shared student machines. in my script i have the following, but it just hangs then exits. any help would be appreciated. #!/bin/sh computerType=$(osascript -e 'Tell application "System Events" to return choose from list {"Students", "Faculty", "Staff"}' 2>/dev/null) if (( $? )); then exit 1; fi # Abort, if user pressed Cancel. if [[ "$computerType" == "Students" ]] ; then #sets computer department to student in JamfPro echo $computerType sudo jamf recon -department $computerType else userName=$(osascript -e 'Tell application "System Events" to display dialog "Enter Faculty/Staff User Name" default answer ""' -e 'text returned of re

Hi guys, I'm trying to improve our system adding the warranty expiry date to all computers in JSS without using Apple GSX. I had searched and tried a lot of things already, mainly with shell script, and I have finally understood how to use GET easily with curl. I can now get the computer information I want, however I wanted to insert the date using PUT but I couldn't understand how. I have followed this discussion https://jamfnation.jamfsoftware.com/discussion.html?id=5968 using xpath, which once again, helped a lot. Does anybody here use the API to PUT data into the system? Thanks in advance.Luis

Hello all, I'm looking to deploy Prey 1.7.3 to a test MacBook. An API key is needed at the time of install. How do I incorporate that key into an install workflow? Is there a script out there already that accomplishes this? I did a search and didn't come up with anything that worked. The Policy tries .pkg first, it fails, and then the command line API key afterwards. Thanks.

Hello All,At the end of the policy to be executed at enrollment, I display a dialog using jamfhelper in the background.However, there is a phenomenon that the dialog is closed arbitrarily. Is there a way to display the dialog in the background without closing the dialog in the policy executed at enrollment? Supplement) When the applicable policy is executed from Self Service, a dialog is displayed in the background The script displaying the dialog is below. #!/bin/sh JAMF_HELPER="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" JAMF_ICONS_PATH="/Applications/Self Service.app/Contents/Resources/AppIcon.icns" DIALOG_HEADING="Title" DIALOG_DESCRIPTION="message" "$JAMF_HELPER" -windowType utility -heading "$DIALOG_HEADING" -alignHeading center -button1 "OK" -defaultButton 1 -icon "$JAMF_ICONS_PATH" -description "$DIALOG_DESCRIPTION" &

Hi! Just curious if anyone has seen this. Recently our inventory display is messed up when searching computers, and seems to have appeared after the newest JSS. I've tried clearing and rebuilding the display but still getting the same thing. Thoughts on this? Thanks!

Hi Folks, We have run into a very simple error from a simple command: The command is nothing more than: "/Applications/Install macOS High Sierra.app/Contents/Resources/startosinstall" --applicationpath /Applications/Install macOS High Sierra.app --agreetolicense --eraseinstall --nointeraction When we run this, we first copy the macOS High Sierra onto the local drive and this is only being done on existing macOS High Sierra Macs running 10.13.4. We have all of our Macs enrolling via DEP and a pre-stage enrollment. With the local installer copied to the local Macs, we run this command to attempt to erase the drive and install a fresh copy of High Sierra. In our brief testing, we didn't have any issues. Now in our labs, we are attempting to do this for the first time with a larger number of Macs and some are working others not at all. Running the command in a local terminal window, we are also seeing this error, but the popup window asking to install a helper is showing so I susp

My company uses two different MDM's for managing iPads and Mac Laptops. Before you ask, I have already tried to get them to move the iPads over to JAMF with no success. :) Still working on that. The problem I have is that we have the iPad MDM set up as the default MDM server for DEP because we buy more of those. So when we buy Mac computers, they are being added to the iPad DEP. When we set up the Mac's, they are trying to be pushed the iPad MDM configs and it is presenting us with error messages. To solve this I am having to manually move the serials from the iPad server to the computer server. This works, but I would like to have them be put into their correct servers automatically. Anyone else have this issue? I have reached out to our Apple rep, but I was curious if others have solved this themselves.

Anyone built the payload for CrashPlan yet that wants to share out?https://www.jamf.com/jamf-nation/articles/553/preparing-your-organization-for-user-data-protections-on-macos-10-14

Hello all -Wondering if anyone has a script or similar to unlock the date & time settings for non-admin users? If so, could you please post it here so that we can test it in our environment as well? Not having much luck with my attempts. We are running some devices on 10.8.5 ML and 10.10.5 Yosemite. If the script works in ML that's awesome, focus is more on Yosemite at this point. Thank you in advance!

Hello, I need your help because Filevault will drive me crazy. We have about 1300 Macs (10.11.x to 10.14.x) We have only AD accounts (without admin permissions) and the only local admin account is the one that is using for Jamf management FileVault is not enabled and the only Secure Token account existing on MacOS 10.13.4+ is le Jamf management account. I need to be able to enable FileVault and make it as silently as possible to the end user. I read dozens of documentations including : FileVault-on-macOS-10.14-or-Later FileVault-on-macOS-10.11-10.12 But I can not do anything ...Errors, FileVault not enabled, ... Please, can you point me to the best way to proceed. Thank you for your help

We're in the process of completely abandoning user-based deployment (Yes I know, took us a 100 years). Do you deploy Apps solely on the Device name? Or do you still have an LDAP integrated and login with AD accounts to the iPads? Was thinking if it would be smarter to have people login with ADs. Thanks in advance

We have laptops that are encrypted with personal recovery keys that are escrowed in the JSS. I've had several users recently get locked out of their computer because their account somehow got dropped from being filevault-enabled. To re-enable them I'm running this on their machine: sudo fdesetup add -usertoadd SAD_USER After hitting enter, this is what happens in terminal: Enter the user name:ADMIN_USER Enter the password for user 'ADMIN_USER': Enter the password for the added user 'SAD_USER': If the ADMIN_USER is filevault-enabled, and I have SAD_USER's password, then it works. But I don't want to know SAD_USER's password. I want to use the personal recovery key, which I have. Pasting in the recovery key instead of the password results in an authentication error. In addition to making this work with the recovery key, I'd also like to be able to do it in one line, or somehow automate it. What am I missing here?

I have a python script that has values in $4 and $5. Currently, the $4 is getting called fine and working without issue, however I can't get $5 to work at all, it just never is evaluated and returns the literal string of "$5" instead of the value. I've tried setting it to a variable, using sys.argv[5], etc and I can't seem to get it to work.. Anyone ever run into a similar issue?

I've previously successfully used the directions from Mozilla to disable updates in our deployed installation of Firefox. However, starting with version 35 of Firefox, this method no longer seems to work. Upon launch the browser throws up the following error and quits on acknowledgement: Failed to read the configuration file. Please contact your system administrator. I'm using a 'Firefox.app/Contents/Resources/defaults/pref/authconfig.js' file with the following contents: pref("general.config.filename", "mozilla.cfg"); pref("general.config.obscure_value", 0); along with a 'Firefox.app/Contents/MacOS/mozilla.cfg' with the following: // Disable updater lockPref("app.update.enabled", false); // make absolutely sure it is really off lockPref("app.update.auto", false); lockPref("app.update.mode", 0); lockPref("app.update.service.enabled", false); // Set default homepage - users can chang

I searched yet didnt find an answer.How do I set Firefox to disable auto updates using Casper?Thanks for any assistance.

Does anyone have a solution for preventing wi-fi from shutting off when an incorrect passcode disables an iPad? It's very frustrating to have the option in JSS to clear a passcode for an iPad that desperately needs it, but I can't use it because the iPads shut off their wi-fi when they enter that state. Now the only option is to wipe it, as I can no longer get it to connect to iTunes to clear the passcode. Darn you iOS9!! Although I wonder... was it iOS9 that closed that loophole, or an update to iTunes? Next time I have one of these I'll have to see if I can dust off a computer with iTunes 9 or 10.