Just wanted to understand what the process is here: I placed an app in the Self Service Store, and I believe some students installed this app when they shouldn't have. I've scoped out the student devices from the original deployment (I always make sure to check "Remove app when profile is removed"). This should effectively remove the app from the student devices, correct? The licenses should free up and be able to be used on other devices?

Testing out Device-Based VPP (JSS 9.82/OS X 10.11.2&3) and after banging my head against the wall, tried switching from my non-admin to my admin account and things installed instantly. Is this normal behavior? Am I the only one who didn't know this? Our goal around device-based VPP was to deploy to standard users - not helping. Have other seen this? When using my standard account, I get presented with this prompt:

Hello JAMF Nation, I am trying to remote into our machines using JAMF Remote but I get the errors. I am also a noob JAMF Admin and was wondering how the JAMF Nation was doing the following: Enabling: Screen Sharing: Only these users: DOMAIN ADMINS - Computer settings: VNC viewers may control screen with password: $apassword AND Remote Login: Allow access for: Only these users: DOMAIN ADMINS This would be extremely beneficial for Remote Controlling these machines that I am unable to do at the moment. I am currently playing with the script JAMF has in the Scripts section of the forums but it's not working properly even after setting the correct variables.

Is there a way to verify a user enters the correct password and if they don't prompt for it again. I am making a Apple Script to enable FileVault for the logged in user. So I have a AppleScript that pop-ups a dialog box asking the user for their password with hidden text and I store that to a variable. I need to somehow to check if the password they entered their is correct and if its not, prompt the user to try again. Thanks!

I have taken over the role of Jamf administrator in our organization. When setting up a new Mac that is in DEP, during initial boot we enter the AD userid and password of the user who is getting the machine. Shortly thereafter, we are prompted to enter a user account for the Mac. We generally enter our admin credentials here, but sometimes we get a message stating that this account name is invalid. The reason is because the hidden admin account is already created. I've looked in out Jamf Pro server and I can't find any policy that could be creating this hidden admin account. Is there something in DEP that could be creating it?

So I'm using built-in Jamf Patch Management to manage Microsoft OneDrive. According to the definition received from Jamf, the latest version (19.x) is supported on Mac OS X 10.11: However, I'm seeing patching failures, because according to the installer states that macOS 10.12+ is required: Sure enough, on https://macadmins.software site, the OneDrive minimum OS has changed: So if you're OneDrive patch management policy is failing, that's why. I'll adjust my scope to account for this bug for now - does a support ticket need to be opened to get this definition fixed? Or does someone from Jamf monitor Jamf Nation for these types of discussions on patch management definition issues..? ~Ted

Wondering if anyone else has looked to use Yo to do their own version of Patch Management notifications to alert users an app needs quit in order to update. The upper management at our University isn't a fan of the time warning and then force quit (without a second warning) that is offered in Jamf's Patch Management so I'm trying to use Yo to notify the user the app needs to quit. I can get Yo to quit the app based on the action button or allow them to defer, but not sure how to have Yo also trigger the installation if they choose to quit. To get Yo to notify the current user, the script needs to run as the logged in user (who doesn't have sudo). This works for the notification and to quit the app, but sudo is then needed to use sudo jamf policy -event installCustomTrigger. I haven't played with customizing the actual app with Xcode, I only deployed the Yo pkg to a test machine and am calling on it with yo_scheduler. When yo_scheduler is called, it doesn't wait for your response in

Hi, I am pretty new on this forum, is there a way to deploy SfB for OS X / Mac OS and define that it wil automaticly sign-in with the outlook credentials. We have done this for Lync 2011 but pretty new to SfB. Thanks!

My issues seems to be present in 10.13 and 10.14. We have the login window configured to show text fields for username and password. If a user logs out, the normal login window will show up. If a user restarts the machine, it will show the last logged in user but only gives a password field, if you click help it asks to reset your PW using your recovery key. At the bottom there is only a restart and shutdown button. I am 100% sure file vault is causing this and it is troublesome for shared Macs. We can't expect a user to log out every time, they will shutdown the Mac most likely. There is not user switch button on the screen, I have it configured to allow user switch but it's not there. Is there something I am missing regarding this login window or FileVault in general?

Hi jamf nation, Hopefully anyone know that problem.I have updated our jamf pro on-prem from 10.8 to 10.11.1 today.For sure, I did the incremental update steps provided by jamf. (update db to InnoDB, upgrading to 10.10 and after that to 10.11.1) Now tables are not correct anymore: But if i take a look into the details of a host it is correct:Also the OS entries are correct. Does anybody has this problem too? Also when upgrading Software via Patch Management, it gets stuck after one update done.All I can see in the local log is that one policy is finished, but the next one never starts: (unless I restart Self Service) Tue Apr 23 15:59:00 hostname jamf[27059]: Checking for patch ID 26 Tue Apr 23 15:59:00 hostname jamf[27059]: Executing Patch Policy Microsoft PowerPoint Tue Apr 23 15:59:19 hostname jamf[27059]: Verifying package integrity... Tue Apr 23 15:59:23 hostname jamf[27059]: Installing Microsoft_PowerPoint_16.16.19041201_Updater... Tue Apr 23 16:00:28 hostname jamf[27059]: in

i want to not allow the user change screensave time, and how to set this item in jamf . have a good ideal to me! thanks.

We are in the process of moving some users to an Adobe Named User license. The only way I've gotten things to work is to do a clean uninstall of all previous Adobe applications which includes removing everything Adobe from the computer. I've been having to do this manually and as we ramp up I need to be able to do this in a script. I can script the Adobe Creative Cloud Cleaner Tool uninstall, but it still leaves Adobe files scattered throughout the file system. How can I delete the following:Any file or folder beginning with Adobe or beginning with com.adobe From the following locations:/Applications//Applications/Utilities//Library/Application Support//Library/Preferences/~/Library/Application Support/~/Library/Preferences/

I want to provide a better user experience in general for my users. I found a script that will gently remind the user to restart their machine every 2 weeks. I am adding that this week. My question is: Does anyone else have any ideas or suggestions on how I should use Jamf Pro to create a better end user experience? I do not need suggestions on the management portion. I am trying to add scripts, policies and CP's that create more features for End Users etc. All suggestions are welcomed.

First: This is not Apple approved. I know that, you know that, do it at your own risk. I do, this works fine.UPDATE: I have added my imager for download to the bottom of this post with instructions This is not a discussion about why or opinions :). Some of us have this need, this is a solution! Thought I would share as I have seen a number of folks looking for these answers. Some of you are just looking for a certain piece of this, and thats great. Some of you are looking for a way to make an imager and that is here too. If you want to take the whole thing and make a fully automated USB Imager than that is also here :). If you don't like imaging, don't want to use this, or don't like it. That is okay! We each have our own thoughts and way of doing things, this isn't for you :). If you are interested, dabble in this, or have other thoughts/ways to make it better PLEASE post and share below! APFS / High Sierra Imaging: (Steps 1 and 3 are assuming your machines h

Hi All, I currently use a script on logout in my labs that deletes the user's account. It keeps some local admin accounts but deletes the rest. All works great in my Sierra and High Sierra environments. However in my testing with Mojave it keeps the last user when I login in with another. Then if I was to log out it keeps that last one but deletes the previous one. Hope that makes sense. Login with USER ALogout USER ALogin with USER BIf I look in the users folder, USER A is still thereLogout USER BLogin with USER CIf I look in the users folder, USER A is gone but USER B is still there. Here is the script I am using. I actually got this form another user on the forum and thank you for that. for dir in /Users/* do if [ ! "$dir" = "/Users/admin" ] && [ ! "$dir" = "/Users/viscom" ] && [ ! "$dir" = "/Users/root" ] && [ ! "$dir" = "/Users/main" ] && [ ! "$dir&#

Hi everyone, I tried searching but couldn't find really an answer. Hopefully I can explain my situation clearly with my limited knowledge in english language. Is it possible to construct a policy to install software this way. I would like to have a policy that install specific software. Software is available to every computer so that our Administrators can log in to Self Service and start the install. For classrooms there would be a script for each room that would use the custom triggers to start install on recurring check-in if the software is missing. My goal would be to get rid of some policies. Currently we have two policies for each software; one for Self Service installation and one for automatic installation for classrooms. The problem I have is that on recurring check-in when the script runs, it checks for policies for custom trigger install_maya_2018 but cannot find any policies because it is limited to <LDAP_Administrator_Group>. I tested to also include root user

Hi all, I have successfully setup our company's network printer and our Macbook fleet can successfully send to printer queue. Obviously, there will always be a group of uses that are not satisfied with the outcome.Some users are complaining they can't select A3 size paper when printing. I am using generic PPD file when setting up printer within JAMF Pro.Does anyone know where (or if it's possible) to add in paper sizes available when selecting printing?

I am needing a script that can be added to our summer update configuration that will delete every user with the exception of admins. Anyone had any luck doing this? I have tried using Tom Larkin's script and it seems to remove the home directories from /Users how ever the accounts are still populated in SystemPreferences>Accounts. Any ideas? https://discussions.apple.com/message/12165862#12165862 dscl . -delete /Users/ dscl . list /Users | grep -v "_" #!/bin/bash UserList=`/bin/ls /Users | /usr/bin/grep -v "Shared"` for u in $UserList ; do if [[ `/usr/bin/dscl . read /Groups/admin GroupMembership | /usr/bin/grep $u -c` == 1 ]] then /bin/echo "Admin account detected skipping..." else /usr/bin/dscl . delete /Users/$u && /bin/rm -rf /Users/$u fi done

I'm looking for a way to assign a username like you can in JSS (Inventory > User and Location) but would like to do it via a dialogue box (oascript?) outside of JSS on a Mac via Self Service. We have our JSS synced with Active Directory (AD) via LDAP. When we enter a username in JSS, it will auto populate other attributes for that account from AD which is saving us time. This policy would be done by someone that doesn't have access to JSS but will have access to Self Service for prepping the computer for a user. This will probably have to be accomplished via the JSS API but not sure where to start. Anyone else doing anything like this?

Hi Everyone, Newbie HereI'm trying to replace an existing config xml file in the applications folder. I packaged the the new config file to add in the existing folder. I wrote a simple script to run before running the package to remove the existing xml file, but for some reason the exisiting file is not being removed #!/bin/sh cd /Applications/Adobe InCopy CC 2015/Plug-Ins/vjoon K4 rm -rf 'K4 Config.xml' Am I doing this wrong? Thanks in advance!

Hello, I've been messing with Managed Preferences in Chrome to setup Managed Bookmarks this has been successful. I followed the below article:https://www.jamf.com/jamf-nation/discussions/25882/deploying-managed-bookmarks-to-google-chrome-using-a-plist-and-configuration-profiles-with-custom-payloads However I looking to know how I can disable the Offer To Save Passwords option in Chrome using the managed preferences plist not sure what the <key> is <key>OfferToSavePasswords</key><false/> Thanks,

Hello, I sometimes need to throw a backup of our Casper production database into a dev environment to do some testing. However after installing JSS 9.32, I am getting an error "This is a non-master JSS web application. Upgrade your master web application before upgrading the non-master web applications." Unfortunately, disabling clustering prior to backup is not an option for me... any idea how to bypass this error?

I've created a Base Image doesn't include any additional software just a local admin user using Composer.Followed the steps from this article [https://www.jamf.com/jamf-nation/discussions/22840/guide-to-creating-sierra-base-image-from-a-to-z](link URL)Issue is after it images and boots to the HD there is no desktop background and upon checking the Library folder the permissions are all wrong.

Hopefully someone can help me answer this. Despite my best efforts I haven't been able to find one. We have a fully functional DEP setup with Prestage Enrollments working for macOS. We were a little late to the party with DEP so we're still working on getting all of our devices enrolled. On occasion we'll run across a machine that didn't get picked up by our bulk import of machines into the Apple School Manager for DEP enrollment and have to enter it manually. If we completely erase the machine AFTER entering the computer into the Apple School Manager, it works every time without fail. If however, we miss the DEP enrollment and add it to ASM after the machine has been erased, we have to erase the machine again even if the setup assistant has not completed running. Obviously a computer that has already been completely setup will need to be erased again, but if the Setup Assistant is not complete, it seems like you should be able to restart the computer, or step back all the way

Is there a way to avoid being prompted on iOS to install apps. I'd like for the apps to automatically install without being prompted. Prompt attached.