I built my JamfPro server on a CentOS 7 VM. It is not a repo or distribution point just the apache tomcat server and the mysql server. It uses a lot more RAM that I was expecting. I started with 2gig and quickly noted it was using almost all of it. Took it to 4gig and again noted it was using almost all of it. Now I am running with 8gig but using 4.8 of the 8 gigs. I have the RAM 'to spare' so to speak on my VM host but I configured it this way trying to save resources. I can note that is uses more ram as we use the webUI more and more. Almost as if it using it but not freeing it once done. Anybody else have any insight or knowledge one this matter? I would love to take it down to 2 but 4 is fine. CPU usage is fine. Thanks in advance. *Side note, my master repo is running CentOS 7 as well (dedicated VM) but only 512meg of ram and running beautiful.

Hi, back again, got soms logs of one of our clients and it still seems after the Jamf Binary upgrades the devices checks for enrollmentComplete!Watch out with upgrading, i can trigger one of your workflows. Got an case open @jamf11 2019-03-26 16:02:57+01 lmos-08421 installd[1221]: ./postinstall: Submitting data to https://jss.local.nl.bol.com:8443/... 2019-03-26 16:02:58+01 lmos-08421 installd[1221]: ./postinstall: <computer_id>697</computer_id> 2019-03-26 16:02:58+01 lmos-08421 installd[1221]: ./postinstall: Getting management framework from the JSS... 2019-03-26 16:02:59+01 lmos-08421 installd[1221]: ./postinstall: Enforcing management framework... 2019-03-26 16:02:59+01 lmos-08421 installd[1221]: ./postinstall: Checking availability of https://jss.local.nl.bol.com:8443/... 2019-03-26 16:03:00+01 lmos-08421 installd[1221]: ./postinstall: The JSS is available. 2019-03-26 16:03:02+01 lmos-08421 installd[1221]: ./postinstall: Enforcing login/logout hooks... 2019-03-26 16:

I'm trying to make a smart group of macOS devices with Office 2019 installed. I'm trying to use a regex on the version number to differentiate between Office 2016 (16.16.x) and 2019 (16.17.x-16.2x.x). The regex is ^16.([0-9]|1[0-6]).d According to regex101.com, my regex is fine. However, when I try to save the smart group, Jamf throws me an error 'Uneven number of opening and closing parenthesis'. Does anyone have any ideas why Jamf is being cranky with my expression?

Are there other ways to deploy the PreStage Enrollment besides using the QuickAdd.pkg? I've installing the QuickAdd via ARD to get our 950+ computers in Jamf but there is about 30 computers that it won't install on. The goal is to make this silent without user interaction. Ideally, I would like to use ARD since I can "see" the computers and have full remote management permissions to manage them.

I have run into a strange problem where the screensaver settings seems to be greyed out and defaulting to start after 2 minutes. I have not created a configuration profile for the screensaver so confused where this is coming from. In testing the issue, I have created a separate configuration profile where I have added a login window setting to start the screensaver 5 mins after inactivity. Upon restart this does appear to work where the option in system preferences is greyed out but showing 5 minutes, however upon another restart/log in, this then goes back to 2 mins (and back and forth etc). Does anyone have any ideas what may be causing this problem?

Does anyone already know a payload code to restrict user from accessing the "Wallet & Apple Pay" menù in the System Preferences pane..?

Hello, I installed latest MS Office 16.23 March 2019 Update, got an error about Webex compatibility... then checked for latest Webex Meetings, it is still version 39.1.1.2. Is it just me doing something wrong, or known issue? Thanks!

Need some advice. I have a remote Macbook Pro that is not checking into Jamf, but is getting the new Configuration Profile settings pushed onto it. The user is reporting that the computer is online and accessing the Internet. What can be wrong?

Hi all, We use the custom search path option to collect inventory information about applications installed in the local user accounts on our iMacs.In the past, it used to display as /$username/Desktop/Spotify.app for example. Now, it's coming up at ~/Desktop/Spotify.app We use hot desks, so the computers can have many many users, and this makes it impossible to find out where these rogue apps are being stored. I have searched around but can't work out what has caused the change or how I can get it to display the username again. Has anyone else noticed this and can it be fixed? Thanks

I'm trying to create all of the available command line support for Enterprise Connect into Extension Attributes. How would I make the command: "/Applications/Enterprise Connect.app/Contents/SharedSupport/eccl -p adUsername" into an Extension Attribute?

Good Morning I have created a local account with Casper Remote then thru the JSS. In both cases, the account is created however the user cannot log in. I used the JSS to change the password with no luck.What could I be doing wrong? Thanks

I don't seem to have an uninstall option when making a policy with a package, I only get the options to Install, Cache and Install Cached, tried with both .dmgs and .pkgs and I've tried re-indexing those packages as well as uploading and indexing a new package, no luck. Anyone else run in to this issue before?

Has anyone been able to auto fill the domain and have the "Keep my Mac login and Active Directory passwords in syns" box checked with Enterprise Connect? I'm trying to find a way to have that autofill so when user's launch the app all they have to enter is their username and password. Thanks!

Hi mates. I have an rsync running with this command: /usr/bin/rsync -avbz --no-p --no-g --chmod=ugo=rwX --update --delete --ignore-errors --force --backup-dir="Deleted-$DATE" --exclude='.*' --exclude='Applications' --exclude='Downloads' --exclude='Library' --exclude='Movies' --exclude='Music' --exclude='Pictures' --exclude='Public' --exclude='Music' --progress --log-file="$log" "/Users/$currentUser/" "/Volumes/$share/Backup/" Basically does what it should do, like creating a Deleted-folder with current date suffix and move the stuff deleted on the source to there - so far so good. However, when it runs next time, it would create a new Deleted-folder and move the previously created Deleted-folder within it, likely because this Deleted-folder is obviously not present on the source at all (as it never was, in this form). This "nesting" would multiply the needed storage with each run, which I would obviously like to prevent. Is there any nice attribute I am c

I just upgraded from JSS 10.2.1 to 10.7.1 and I started powering up some of my tester Macs to make sure the new jamf files were being pushed out. All is well except for the fact that the 10.13.6 Macs give the alert in Self Service (according to this) but when I go to the MDM profile, there is no Approve button. There is no way to approve it?! How do I approve them and/or make the alert in Self Service stop appearing for 10.13 Macs? If it makes a difference, the line about "Functionality may be limited..." does not appear in the window for our MDM profile.

I have upgraded to 5.0 on my computer, but can't find it anywhere downloadable on the web so I can upgrade my deploy.

Hello, I'm tying to batch create new Extension Attributes via API using curl. I got my xml template by pulling down an EA by GETting an EA by ID and running through xmllint. I'm very new to using API calls. Hopefully someone can see what is going on here. When I run my code I get: curl: (6) Could not resolve host: POST curl: (6) Could not resolve host: HTTP/1.1 415 Unsupported Media Type Accept-Ranges: bytes Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Content-Type: text/html;charset=UTF-8 Date: Mon, 18 Mar 2019 15:47:45 GMT Server: Jamf Cloud Node Set-Cookie: APBALANCEID=aws.std-pagetia12-tc-5; path=/;HttpOnly;Secure; X-FRAME-OPTIONS: SAMEORIGIN Content-Length: 554 Connection: keep-alive <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Unsupported Media Type</p> <p>The server

Hello All, We have a good number of machines with 10.9.5, currently have a 10.10.5 upgrade in self service. Would like to make this upgrade non interactive. Example; Upon Upgrade Completion, Users are asked to enter an Apple ID or Skip the step. How do I hide this step so the upgrade is seemless? Thanks!

Not looking to reinvent the wheel, was wondering if anyone out there had a script or other method for mass assigning a certain device group to multiple classes? Right now I have about three dozen classes which need to have the same group of iPads assigned to them. This has to happen for four buildings. Short of doing each by hand was wondering if anyone had a better way or some insight they'd like to share? Thanks.

Hello, I wanted to bounce this by the community to see if others had this issue and how they got around it. I have a computer lab used by students, the Imacs are hard wired in for network, but I have found students are unplugging and hookng the wifi to their personal hot spot bypassing the webfilter on campus. I disabled Wifi, but now the instructor wants to use Air-Drop which requires Wifi. Is there a way to enable wifi but have it not connect to any SSID's or look for available SSIDs? From what I have read Air-drop just needs the wifi radio enabled for peer to peer, but doesnt need a network for it to work. Is there a setting in jamf? Thanks any help is appreciated!

Hi,I'm testing using the Sites feature in Jamf at our school. It looks like it would be a good fit for our organization and we would have a Lower school site for K-5, Middle school site for 6-8, and Upper school site for 9-12th grade.I could give the Technology coordinators in those divisions access to their site with a clean/uncluttered view of the devices they manage. They could even scope software to their devices and not create a help desk ticket... Or can they? On testing, I'm having a hard time figuring out how to do this with VPP software. For example both LS and MS divisions we use the paid Green Screen App. I buy the software in VPP and it shows up in my Jamf pro console under Mac store apps. Once I assign it to the LS site, it's unavailable to the MS site. Does anyone have a solution for this? If I can get past this one issue I think I'm a go for sites. Maybe individual Apple VPP accounts for each division?

Hi There, We have computers in our environment that have Cylance installed prior to 10.13.2 when the requirement to consent via System Preferences was Required Currently all computers get Cylance Protect upon enrollment. If a computer is fresh out of the box it typically comes with 10.13.1, so we haven't had to enable this setting before. 10.13.4. came out today, and the attached error message appears prior to the upgrade. Is there a way from a root level to consent to this application? I've already alerted our vendor of Cylance that this issue happens upon upgrade of 10.13.4. Since I have consented to Cylance running on this machine, I have closed and re-opened the application but it still does not function. I have not yet restarted.

First off thanks much to all who participate in this forum. Its a valuable resource and has saved my bacon several times.I am fairly new to the Mac platform (1 year) and recently passed my CCA. I know enough to be dangerous. What process and tools do you admins use when you have a need to push a system preference that is not part of one of Casper's Templates or Configuration Profiles. (That is my "teach me how to fish question") I am trying to package and distribute a setting that is found at [System Preferences, Keyboard, keyboard Shortcuts, uncheck everything under Mission Control]. (This is my "catch the fish for me" question) This is a required setting for the MN Secure Browser testing software we use in our school district here. Thanks in advance for any help and my apologies if this is covered in another thread that my keywords did not uncover yet. Paul

I've had a couple of t2 MBP's refuse to run OS and security updates on wired connections. We aren't blocking anything and it seems to run on wireless just fine. Is this how the t2 firmware functions? My educated guess is that the firmware for ethernet over usbc is not accessible in the preboot environment, but I'm having a hard time (imagine that) finding any Apple documentation to back this up. Or any documentation for that matter.

Hi all, I received a request from a client and I can't quite figure out if it is possible. Is there a way to disable camera usage in select apps while leaving it available in others? For example, I do not want my users to have camera access in Facebook but would like them to be able to use it for Facetime or a specific medical application. Can that be done with JAMF?