I wanted to start a thread to get a discussion going about how my fellow Higher Ed jamfers plan to deal with Adobe's change to licensing in CC 2019. We currently operate with an enterprise license and install all the CC apps in a bundle to our computer labs. In the past this was done with the CC packager and a serializer. Adobe has since made that obsolete in favor of User based licensing. So... we are now faced with the issue of ensuring that a user, after signing off of a machine, also gets signed out of any CC apps they had running. Thus making sure their that the next potential user is good to go. I'm curious if anyone is attempting a sort of "log off" script for Adobe CC apps or how the community in planning on handling these new Adobe bombshells.

Hey there. I've used the following command to allow non-admins to add and remove printers, but would like to know how to undo it:dseditgroup -o edit -n /Local/Default -a everyone -t group lpadmin I tried the following, but it did not reverse the effect:dseditgroup -o edit -n /Local/Default -a admin -t group lpadmin I've searched around and found lots of threads on how to enable non-admins to add printers, but no topics that discussed how to undo the change so any help would be appreciated.

I go into the "set" that I've createdOptions > Account Settings > Editand then follow the linkEdit the management account via the User-Initiated Enrollment settingsand change the password but not the account name.I run machines through the process and they still use the old password. Thanks for any workarounds.

Hey there! Quick question. I am testing NoMAD with quite a success. This is the initial test to then move to Jamf connect with Azure AD. Here is the first challenge I want to solve. Nomad works great when it comes to password sync and keychain management. However, our users are used to change their passwords via "Security Settings" or Change password from User Preferences. I noticed that if I change my local password locally and not with nomad, Nomad will still connect and the passwords are now out of sync. I would like to enforce users somehow to change their passwords via nomad. Not sure if blocking the entire user and security preferences is the best strategy. Any Ideas? how did you guys deal with this kind of situations? Changing the password locally creates a password miss-match with the AD password that will only resync if the user signs out and signs back in. Alternatively, I was thinking if there is an extension attribute that I can use to check if NoMAD is syn

Has anyone managed to successfully write a script for this?

I have a few Macs that will perform a log off or restart after being locked or asleep for a period of time. I haven't been able to catch it as it happens. There's no set time, except when the Mac goes to sleep or is in a locked state. If a user has an application running that is stopping the restart, there's a message that appears about the program stopping the Mac from restarting or logging off. They can cancel it and proceed with their work, but some cases it'll go through the process. I've check all my policies and configurations and can't find anything that would initiate a log off or restart, except system updates and OS upgrades. I have about 80 managed Macs and so far 3 Macs have been reported. One of them is mine that I work on. For my Mac, I'm not on 100% of the time unlike the others. I usually use my Mac for testing and Casper related work. Has anyone else seen this before?

We have a few scripts that rely on user-input dialog boxes that generate the following popup when executed via a Jamf policy on macOS 10.14.xI've attempted to create a TCC profile to pre-approve com.apple.loginwindow for com.apple.systemevents but it doesn't seem to have made a difference. Has anyone found a way to suppress this box?

Hello, I am new to using Jamf and Patch Management. I have installed Microsoft office, Word, PowerPoint, Outlook and Excel using a policy and Patches from Microsofts website and are already installed on Machines. Now these office applications are available in the Mac App store and VPP when I force Jamf to update the office apps will it update the applications that were installed as packages (PKG's) or will I have to remove the packages and then install the Office updates from the app store?

I have googled but cannot find a definitive answer to this. I have a customer that has a 'cart' with 30 iPads. He bought it before consulting IT. Basically, I discovered that it is a housing, two power strips and that is it. I ordered two of these: https://www.amazon.com/Manhattan-Products-161718-MondoHub/dp/B007RRTCUI/ref=sr_1_3?ie=UTF8&qid=1467121567&sr=8-3&keywords=manhattan+usb+hub With all 30 of the iPads plugged in, Apple Configurator only sees a random number that has been between 10-14 units. I am pretty sure this is a fight for current. After looking around, I have seen vague references to "Apple Certified" USB hubs but nothing concrete. Can anyone recommend a 30 port USB that can handle the job? TIA, /randy

Does anyone know if there is a way to do this in Yosemite? I ran opensnoop while changing preferences to see if I could figure out where it saves them to but didn't see anything being modified. I'd like to programmatically disable notifications at the lock screen for all items for all of our users. In Mavericks I had disabled Notification center. Being that JAMF moved their agent notifications to using it we no longer see those:-(. Hoping Yosemite is a little more configurable.

Hello I'm trying to modify a script I had for renaming computersThis is my current setup :I want to pull the current system name as the default answer. (system info)'s Computer name. This uses to work but not with this setup script. Reason I want this script is so if the user uses the cancel button it don't use the password as the computer name. thanks for any help or answers to this issue. Password for Local Account setid=$(osascript -e 'Tell application "System Events" to display dialog "Enter Account password:" with hidden answer default answer ""' -e 'text returned of result' 2>/dev/null) Set Computer Name while :; do # Loop until valid input is entered or Cancel is pressed. ComputerName=$(osascript -e 'Tell application "System Events" to display dialog "Enter Computer Name:" default answer " want current hostname here" ' -e 'text returned of result' 2>

Hi all,I'm trying to allow end-users to modify permissions on shared storage because group posix permissions are changing to read-only when they are copying/moving files/folder (preventing write permissions for the group). I'm trying to create a workaround so they can continue to collaborate until a longer term solution can be found. Currently, the script below is written to just work locally as a service/script, but running into permissions issues when run on files not owned by said user obviously - so hoping I can implement in Self Service with the user inputing the path to said files/folders so the script can run with the JSS admin credentials, and adjust the permissions appropriately without having the user to input admin credentials. Hoping self service could be a way to provide a more secure workaround, not revealing an admin password via script locally on the machine. -- for f in "$@"do chmod -R ug=rwx "$f" chmod -R o=rx "$f"

Currently we use the Guest User login on the library computers which works great but occasionally students forget to logout on their own. Normally we use the auto-logout if computers has been idle for more than 30min, but since Guest User has a dialog box warning before the logout I cannot get the Guest User to automatically logout. We do not use FV2. I am having difficultly figuring out a script to do any of the following: forcing a logout after idle time of 30 minutes, modifying the auto-logout to ignore the dialog box, or disabling the dialog box (I would prefer the dialog box stay for normal logout). Thanks, Edmund

Any idea what would cause an app to not be recognized by the PPPC Utility? Whether I try adding with the "+" symbol or drag and drop, the utility just does not want to play nice with one of our in house apps..

Our organization has successfully registered with Apple's DEP and I've got an admin account setup. I can successfully upload the public key to the DEP, generate a server token, and download the token. When I try to upload the server token to the JSS it hangs at 86%. I've tried different browsers and even tried generating a different server token but have not been able to integrate the JSS with the DEP. Has anybody seen similar issues?

Hello everybody, Please, can you tell me if it is possible, and if not, if there is a trick to add a custom comment or custom note for each computer on the JSS Web without having to go through Attribute Extensions ?Because if we use the Attribute Extension, the computer must be turned on to execute an inventory ... For example, some computers are in the Jamf inventory but have not been turned on for some time. We would like to add a comment in the JSS database without having to go through SQL commands. Thank you, and have a good day

Hi, We have a program that allows us to share file/folder paths through email at our company. These have been worked for many years. However, a recent change now interjected two prompts before the path will open. The first is a logon box to the server that's being linked. Which looks like this: Then you get presented to select the volume (which is not correctly selected by default). Which looks like this: For testing, instead of CLICKING the link in the email... I copied it into the connect to server dialog box. When doing this, it automatically opens the file or folder. This is the behavior we are used to, until sometime recently. I'm not sure exactly when this occurred and believe it's a security update from Apple that did it. Does anyone have any ideas what could cause this added level of security when a file/folder is linked into finder from another application? Any ideas on how to disable these prompts? Or, any ideas how to whitelist internal servers from these p

I keep seeing so many of you cool kids with your flashy CCA badges next to your names. I am feeling left out. How can I be cool like the rest of you?

Hi All, Looking for the best way to do this. Do I need to set it up via Exchange ActiveSync or can I use the Calendar payload on the configuration profile screen?

The title of the application and subject is listed, but in white text, and therefore unreadable. The description text is in black, so you can see that just fine. Anyone know if there is a setting somewhere I missed or how to fix this?

It just dawned on me after a couple of Airs have gone missing or have been stolen recently that we could use DEP to keep those devices enrolled. The info is certainly out there on how to reinstall the OS and thus remove the jamf binary. Are there any drawbacks to keeping your computers assigned to a pre-stage enrollment even after being deployed?

I am just getting started with EAs for computers, and I have one that I want to use, it is the following script; **#!/bin/shfmmToken=$(/usr/sbin/nvram -x -p | /usr/bin/grep fmm-mobileme-token-FMM) if [ -z "$fmmToken" ];then echo "<result>Disabled</result>"else echo "<result>Enabled</result>"fi** I have the EA setup as follows;Data type: StringInventory Display: GeneralInput type: Script And the above in the script field. I see it in the General area of the computer details, but nothing ever populates, the device is checking in every 15 minutes, but I can't see anything in the logs about this EA. What am I missing here? If I run this as a script in Self Service, I see the output so I am confident that the code is good.

Anyone have a script to toggle the Do Not Disturb option when a user logs in? I'm open for other suggestions as well.