How do I force a login banner message to refresh? Basically I have a script that checks to see if all my policies have completed and if they have it then writes a message to the login banner using the following: defaults write /Library/Preferences/com.apple.loginwindow LoginwindowText "Enter your credentials" Once the message appears ideally this would tell our field techs that the machine is ready for people to log in and that all policies have completed. However after the defaults write /Library/Preferences/com.apple.loginwindow command runs no message shows up at the login window. If I log in and then logout (or restart the machine) the message shows up but the policy that writes the login banner message runs in the background when nobody is logged in. Ideally I would like the message to show up after I send the defaults write /Library/Preferences/com.apple.loginwindow command without having to reboot or physically log into the machine. Is there a background proce

Hi all,I'm struggling to come up with a good solution to what I can only imagine is a common one: We use a config profile to deploy a certificate for connecting to our wireless network. Sometimes users delete that issued cert accidentally. Sometimes there are issues and our support staff may need to delete the cert during troubleshooting. But - how do you get a new one issued? The device still has the config profile - it just needs a new cert. Do you Unscope and rescope the specific device (and absolutely positively make sure you don't accidentally click the "apply to all devices" option)? Do you duplicate the config profile and put a copy in Self Service? But then you'd have 2 profiles potentially on the device that do the same thing? Maybe you could remove the device from the scope of the other config profile when the Self Service one is run? But then, down the line, when you may need to update/change this config profile - how do you force it to those

Ideally I'd like to be able to push a package that will set color settings such as CMYK profiles and RGB settings as well as color management settings. Is my best bet to do this to use composer and then having that package fill user templates or should I be looking into scripting this? I'm not the best when it comes to scripting. Any insight would be appreciated. Thanks!

Is there a way to manage(lockdown) the ipad so that the student is only allowed to access google classroom and the school webpage?

Has anyone had success with the following command in 10.11? defaults write /Library/Preferences/com.apple.desktopservices DSDontWriteNetworkStores -bool true I've tried it at the global level (command above) as well as per-user and it doesn't seem to be having any effect. This is on 10.11.4 Thanks,Eric

I've exported an Apple script as a .app file which mounts network shares and runs constantly in the background. I've got a launch agent for the app with keep alive set, and in the info.plist file for the app i've set LSUIElement so that it's always hidden. That's all worked great, however, if a user holds down the control key while the script is running a prompt will appear with the app name asking if you want to run or quit the script: Does anyone know a way of preventing that? I'm sure it's probably something very simple but I can't seem to find anything about the control key causing this prompt for silent apps. Note: I'm sure someone will probably suggest using NoMad instead for share mounting, so I should probably mention here we have previously used NoMad and had a number of issues with it and eventually moved away from it in favour of this method, it just works better for us! Thanks!

Does anyone use the Privileges app provided by SAP in Self Service? If so, is it possible to grant admin credentials via a policy for a specific time to update just apps that are already installed on the machine? Basically we don't want users to install foreign apps without admin credentials, but we would like to grant them admin credentials to update their current ones. https://github.com/SAP/macOS-enterprise-privileges/releases Thank you.

We have Canon IR-AVD C7565 Printers attached to EFI RIP GX500. We have been seeing very slow print window load times when trying to print from any app. We narrowed the issue down to the driver, however I was wondering if anyone else uses/manages these EFI Fiery Rips. Maybe you don't use the EFI driver at all, if that is the case, which do you use?

As in our company we deploy standard local users, whenever they try to plug in a new external device like an ethernet cable, he must fill admin user credentials in order to activate the new peripheral. Is there a way to avoid this and give std user the rights to plug in any external device without being prompted for admin user/pwd?

Hi all, Need some pointers as to how to diagnose network error when connecting to network printers. I've been give a printer queue location. But no matter what I try, when trying to add this printer, I get the following error: From Finder, I also tried connecting viasmb://server hostname/printer queueipp://server hostname/printer queue Within the same company's network, when trying from a Windows laptop, the printer connection works. So, I'm guessing it's a Mac thing. But what exactly is it that is blocking macOS from connecting to a Printer? So far I have tried to manually setup the network printer via System Preferences > Printers. I also tried JAMF Pro's Printer settings.

I've been (easy job, I know) able to block Apps process through Jamf but...what if I'd like to hide those MacOs native apps which are present in the Applications folder..?? Like for example App Store, Calendar, Contacts..etc etc.. Like ever, thanks for your support guys!!

Hey,as you can see in the attached screenshot, i got some strange display error in the ui of Jamf.The provided informations won't fit to the tables. For example the "Model" shows up in the column of the "Last reported IP" or the IP-Adress will be show in the column "Last Check-in" What I already tried:- clearing browser Cache and restarting the whole Server- disabled all Inventory Display Options and re-enabled them- tried a different user -> other user account doesn't got the problem Someone got a tipp for me to or maybe got the some problem?

Hi, I've set up a couple of Red Hat Enterprise Server (6.8) VM's to mimic our real VM's for testing before we do a JSS 9.81 to 9.96 upgrade. One server is the Database server and the other is the JSS. The Database Server has MySQL Community 5.5.3 installed. I've successfully installed JSS 9.81 on one VM with it using the Database server for the JSS database. Everything looks good. Web App is running fine. I then try to do the upgrade using the linux installer and that all appears fine as well - no errors. I get this message on the command line at the end: The JSS has been installed.To complete the installation, open a web browser and navigate to https://is-04155-vm1:8443.The time it takes to upgrade depends on the version you are upgrading to and the size of your database. Do not restart Tomcat during an upgrade. I then go to my web browser and connect to the URL with the machine IP which is what I was using before - https://jss_ip_here:8443 but all I get is a message:

What's the best way to go about this? I saw people recommending mysides but xcode hates me and I can't compile it for some reason. Can someone put it up on dropbox or something? https://github.com/mosen/mysides Conversely is there a way to remove finder sidebar items using sfltool? If there is i'm not seeing a way. Thanks!

Hi All, I feel like I am missing something very simple here, but I can't seem to work it out. We have a DMG which pushes out B&W and Colour Presets for our printers. This was created a long time ago during our JAMF Kick Start and has worked ever since. We are replacing our printers shortly and will be using a Windows Printer Server. When I install the Print Server Queue, and then install the DMG, it installs our presets as desired, but they aren't set as default. This means users won't use them. So currently on MS Word it shows "Default Settings" under presets (below) but I want it to have "B&W" as the default as per below I have loaded up composer and taken a snapshot of me holding the ALT key and printing as B&W, created a DMG and pushed it out with the fill directories options ticked. I thought this would save the preference files, but it doesn't seem work. We can't really afford to go round and do this on 200 end user machines, and I'm sure it can be scripte

I'd like to upload .dmg file to the cloud distribution point via the JSS API. I tried uploading the.dmg file by executing the following API. curl -fku username:password https://mydomain/JSSResource/packages/id/0 -T test-dmg.xml -X POST curl -fku username:password https://mydomain/JSSResource/fileuploads/packages/id/68 -F "test.dmg=@test.dmg" -X POST And then, When I checked the package in JSS Settings > Computer Management > Packages,Uploading is not completed with the status "Pending" all the time. How can I upload .dmg file via the JSS API?I would like some information.

I built my JamfPro server on a CentOS 7 VM. It is not a repo or distribution point just the apache tomcat server and the mysql server. It uses a lot more RAM that I was expecting. I started with 2gig and quickly noted it was using almost all of it. Took it to 4gig and again noted it was using almost all of it. Now I am running with 8gig but using 4.8 of the 8 gigs. I have the RAM 'to spare' so to speak on my VM host but I configured it this way trying to save resources. I can note that is uses more ram as we use the webUI more and more. Almost as if it using it but not freeing it once done. Anybody else have any insight or knowledge one this matter? I would love to take it down to 2 but 4 is fine. CPU usage is fine. Thanks in advance. *Side note, my master repo is running CentOS 7 as well (dedicated VM) but only 512meg of ram and running beautiful.

Hi, back again, got soms logs of one of our clients and it still seems after the Jamf Binary upgrades the devices checks for enrollmentComplete!Watch out with upgrading, i can trigger one of your workflows. Got an case open @jamf11 2019-03-26 16:02:57+01 lmos-08421 installd[1221]: ./postinstall: Submitting data to https://jss.local.nl.bol.com:8443/... 2019-03-26 16:02:58+01 lmos-08421 installd[1221]: ./postinstall: <computer_id>697</computer_id> 2019-03-26 16:02:58+01 lmos-08421 installd[1221]: ./postinstall: Getting management framework from the JSS... 2019-03-26 16:02:59+01 lmos-08421 installd[1221]: ./postinstall: Enforcing management framework... 2019-03-26 16:02:59+01 lmos-08421 installd[1221]: ./postinstall: Checking availability of https://jss.local.nl.bol.com:8443/... 2019-03-26 16:03:00+01 lmos-08421 installd[1221]: ./postinstall: The JSS is available. 2019-03-26 16:03:02+01 lmos-08421 installd[1221]: ./postinstall: Enforcing login/logout hooks... 2019-03-26 16:

I'm trying to make a smart group of macOS devices with Office 2019 installed. I'm trying to use a regex on the version number to differentiate between Office 2016 (16.16.x) and 2019 (16.17.x-16.2x.x). The regex is ^16.([0-9]|1[0-6]).d According to regex101.com, my regex is fine. However, when I try to save the smart group, Jamf throws me an error 'Uneven number of opening and closing parenthesis'. Does anyone have any ideas why Jamf is being cranky with my expression?

Are there other ways to deploy the PreStage Enrollment besides using the QuickAdd.pkg? I've installing the QuickAdd via ARD to get our 950+ computers in Jamf but there is about 30 computers that it won't install on. The goal is to make this silent without user interaction. Ideally, I would like to use ARD since I can "see" the computers and have full remote management permissions to manage them.

I have run into a strange problem where the screensaver settings seems to be greyed out and defaulting to start after 2 minutes. I have not created a configuration profile for the screensaver so confused where this is coming from. In testing the issue, I have created a separate configuration profile where I have added a login window setting to start the screensaver 5 mins after inactivity. Upon restart this does appear to work where the option in system preferences is greyed out but showing 5 minutes, however upon another restart/log in, this then goes back to 2 mins (and back and forth etc). Does anyone have any ideas what may be causing this problem?

Does anyone already know a payload code to restrict user from accessing the "Wallet & Apple Pay" menù in the System Preferences pane..?

Hello, I installed latest MS Office 16.23 March 2019 Update, got an error about Webex compatibility... then checked for latest Webex Meetings, it is still version 39.1.1.2. Is it just me doing something wrong, or known issue? Thanks!

Need some advice. I have a remote Macbook Pro that is not checking into Jamf, but is getting the new Configuration Profile settings pushed onto it. The user is reporting that the computer is online and accessing the Internet. What can be wrong?

Hi all, We use the custom search path option to collect inventory information about applications installed in the local user accounts on our iMacs.In the past, it used to display as /$username/Desktop/Spotify.app for example. Now, it's coming up at ~/Desktop/Spotify.app We use hot desks, so the computers can have many many users, and this makes it impossible to find out where these rogue apps are being stored. I have searched around but can't work out what has caused the change or how I can get it to display the username again. Has anyone else noticed this and can it be fixed? Thanks