Has anyone ever seen these from a Policy calling a Script that only uses JamfHelper? Script result: 2018-12-20 13:58:10.156 jamfHelper[3537:29215] isPrefsCreateCacheFromEnabledAndDefaultInputSources - can't find anything from GetInputSourceEnabledPrefs, use defaultASCIIKeyLayoutDict = {type = immutable dict, count = 3,entries =>0 : {contents = "InputSourceKind"} = {contents = "Keyboard Layout"}1 : {contents = "KeyboardLayout Name"} = British2 : {contents = "KeyboardLayout ID"} = {value = +2, type = kCFNumberSInt64Type}}result 0

Can someone explain why I would need Remote Apple Events enabled under Sharing in System Preferences? Other than running apple script from PC-1 to PC-2 (which I never do). I rather have it turned OFF -- but when reading the MAN pages I can only set it to ON or OFF -- I cannot set it to "Only these users" with a script. Before I turn it off globally I'd like to know if there is something I'm missing that would require me to have that on? Thanks

Hi All,I've been trying to find a "good way" of doing this and am coming up short - does anybody have a nice way of somehow showing progress or status from a terminal command in an osascript-created dialog? Is this even possible? :) I'm using rsync -avhP to get the progress and want to send that output to a dialog window if possible. We've got a departed user Self Service item that copies the user's home folder to our server and smb share copies are NOT fast - so I'd love to have some sort of progress for my techs running this. Any cool ideas? Thanks!mbezzo

I am having an issue with a policy that launches the script below. I grabbed bits and pieces from some other great script ideas out here! The issue is that when enacted and the computer restarts the policy is still shows as enabled and not completed. I have moved around the shutdown -r +5 command but still no love. Any thoughts? Thanks. !/bin/bash delayWhileScreensaver (){pidSaver=0while [[ $pidSaver != "" ]]; do sleep 5 echo "Looping, pidSaver=" "$pidSaver" pidSaver=$(ps -ef | "grep [S]creenSaverEngine" | awk '{print $2}')done} delayWhileScreensaver shutdown -r +5 level=$(/Library/"Application Support"/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper -windowType hud -timeout 300 -title "XXXX MAC" -heading "Critical Alert!" -lockHUD -countdown -button1 "OK" -button2 "Restart now" -description "blah blah blah." -icon /Library/"Application Support"/JAM

I have attempted to install the WebEx Meeting Center plugin via vendor .pkg and also tried compiling a custom package via Composer. Neither method has resulted in a working WebEx plugin. Here are some additional details: OS X 10.7.4Safari 5.1.7 Has anyone had success packaging/deploying/using this plugin?Appreciate any feedback.Thanks!

At some point after updating to Jamf 10.7 (and now 10.7.1) the Smart Groups I have referencing Patch Management versions don't seem to be updating correctly. Specifically, I have a Smart Group for "Firefox ESR is Less Than 60.2.1" using the Patch Reporting criteria. Just the one line referencing Patch Reporting: Mozilla Firefox Extended Support Release (ESR). Currently it is showing 569 members. However, when I go into the Patch Management tab and look at the details of Firefox ESR, it shows 2439 devices on lesser versions. I am seeing similar results in our Google Chrome groups. Before I open a support ticket, I figured I would post here to see if this is something that other people are seeing. I didn't see any posts, but that could have been just bad searching. Thanks, Tim

We have quite a fast network and really don't care if it takes awhile to download the initial app, so I'm concerned that now, again, Apple is making us have to jump through hoops to make one of their apps work. We use VPP to push all the apps to student use iPads which are all supervised. Anyone else seeing this message and have any workarounds? Gabe ShackneyPrinceton Public Schools

Hello! I'm still a beginner at bash and have been struggling to find the commands I need to write a script. The script needs to add a SSID to Preferred Network lists using WPA2 Enterprise with Mode: EAP-TLS and Identity: User Name. I can get the SSID on the list with WPA2 Enterprise using networksetup -addpreferredwirelessnetworkatindex <device name> <network> <index> <security type> What do I need to get Mode: EAP-TLS and select a certificate previously loaded in the Keychain with a standard format of "User Name" ?

Hi all, I can't help but be vague about this, because I don't know what's going on. Background: We are in an enterprise network, with proxies to block certain sites. This includes Apple. I have started rolling out macOS Mojave 10.14.2 to our users. I am up to around 20-30 Macbooks. These users are now coming back with feedback saying the network cuts out at random times, for Safari or Chrome. Sometimes Outlook email. I have upgraded my own Macbook just to get the same experience they do. After 2-3 days of use, I also notice this. The way to fix it is to reboot the Macbook. Kind of annoying. On average, people say they reboot 2 or 3 times a day. Has anyone else experience this? Or you are an administrator and have receive support tickets regarding this? I'm not a network guy, so don't even know how to diagnose this.

Hi all, I was wondering if someone could shed some light or recommend an alternative method to execute the below. We have a number of Mac users who access network shares, and we are experiencing performance issues when being accessed by Adobe applications. I found the following article: https://support.apple.com/en-gb/HT208209 which will hopefully will resolve the issue. I have run the actions described in the article and it works if directly entered into terminal from a users account, im now stuck trying to deploy via jamf to the whole estate. There are 2 parts to the fix, part 1 is to run the command in terminal from the users account to disable reading the .DS_store files created by mac's, the second part which creates a nsmb.conf file. I was able to successfully create the nsmb.conf and deploy to the correct folder directory using the jamf tools. however i am having difficulty executing the first part of the process. using the snapshot tool i was able to see that the file is

Hi friends! We're just starting to use imaged machines with users and are noticing some behavior that we didn't experience before. Our usual set-up involves configuring the OS, binding to active directory, logging in with their network account which then creates an account on the machine, and then doing whatever else is needed for their profile. Usually that login appears in the Users and Groups pane in System Preferences. We've found, however, that since using Casper Imaging that when we log in with a local admin account on the device that the Network Account/User is not listed in Users and Groups. When I go into the User folder, their files and folders are there and were created. I'm not sure why this behavior is happening and was wondering if there is a configuration of some kind that I'm missing. Are there any other users out there that work in an Active Directory environment that configure similarly? Is there a way to ensure the account is being created

So eset has a script to install the agent which worked great. Now im getting a script error 1. I have no idea whats going on here. Im not getting alot of detail. Anyone else see this? Sending Wake On LAN command... Opening SSH Connection to 10.10.160.21... Authenticating... Successfully authenticated. Verifying Computer's Identity... The MAC Address has been verified. Checking Operating System Version... Running Mac OS X 10.14 (18A391) Verifying /usr/local/jamf/bin/jamf... /usr/local/jamf/bin/jamf is current (10.7.1-t1536934276) Verifying /usr/sbin/jamf... /usr/sbin/jamf does not exist. Verifying /Library/Preferences/com.jamfsoftware.jamf.plist... Preparing Policy... Executing Policy 2018-10-16 at 3:16 PM | jalcorn | 1 Computer Running script Eset Agent Installer... Script exit code: 1 Script result: Error running script: return code was 1. Submitting log to https://jamf.chathamfinancial.com:8443/ Finished.

Hopefully this is a quick and easy fix. Ive currently got a policy running from Self Service that installs the latest Google Chrome application and have a similar policy that installs the latest edition of Firefox. Both of these are on the featured page of our Self Service distribution panel. The issue i have been seeing on various machines is that when you install the Google Chrome policy and it completes, the Firefox install on the featured page of Self Service seems to disappear. It cant be searched for using the filter and the only way to get it back is to either refresh SS or restart it completely. Anyone have an idea as to why this might be happening? Thanks.

Hello, I have come across a situation on our district macbook airs where students were able to access Terminal and ssh into other machines. I blocked access for Terminal. However, this would not prevent them from using other tools to use ssh. I have found a few commands, such as (launchctl unload /System/Library/LaunchDaemons/ssh.plist), however this doesn't work as that plist is not under LaunchDaemons and I can't find it altogether. Does someone have knowledge how to lock these creative users out of launching any ssh command? Thanks so much in advance.

Hello, I have a simple script that informs users that they need to enable the securetoken of the local admin account. It works perfectly when I run it locally, but fails when I deploy it via Jamf. I keep getting the error message "Script result: 20:334: execution error: No user interaction allowed. (-1713)" My script is below: #!/bin/bash/ messageToDisplay="$4"policyToExecute="$5"policyAction="$6" buttonClicked=$(osascript << EOFbutton returned of (display dialog "$messageToDisplay" buttons {"OK", "Cancel"} default button 1)EOF) if [[ "$buttonClicked" == "OK" ]];thenopen "jamfselfservice://content?entity=policy&id=$5&action=$6"fi

I ran a script that included: sudo rm ~/desktop/"skoolbo" It worked on 4 our of 5 of my test machines so I assumed that the command was correct, but I keep getting: Script result: rm: /var/root/desktop/skoolbo: No such file or directory Why did the command work on some computers but not others, and what command should I have ran instead?

Howdy, I have a computer where the users password is out of sync with FV2. They remember the password, so they type in the FV2 password when booting up, then they type in the current AD password to get access to their account. I usually fix this issue by removing/re-adding the account from FV2 with fdesetup authenticating with the local admin account, but unfortunately the local admin account was never authorized for FV2. I have tried using the Users account to add the local admin, but fdesetup seems to want to authenticate with the login and FV2 password at the same time, which obviously doesn't work. Also, the recovery key was never cached on the JSS, so I can't use that to reset her password/add people to FV2. Is there a way to resolve this situation without having to reimage the machine?

I have a script I use to change passwords on my MAC's, what I'd really like to do is have the script check the password to see if it is different before attempting to change it.

Hi folks, we bought 1Password int the past via VPP.As AgileBits changed the way to purchase 1Password from App purchase to In-App purchase with version 7 we are not able anymore to buy 1Password 7.The reason is that as far as I know In-App purchases are not possible with Apples VPP. Can anybody help or has an idea what to do? Thanks a lot! Regards,Joe

Hi guys i tried sudo lpadmin -E -p printer_name but this disnt resume the printer. Has anyone else seen this in mountain lion?

With the introduction of Screen time, it would appear that we are now having trouble clearing restrictions set on IOS devices with IOS 12, is anyone else encountering this?

I am working on a script that will check if an application is present and then run some commands. I am trying to write this so that I can easily change it later for a different application so I am putting the application and the path in a variable. The problem I have run into is that there are spaces in the path and so I am having trouble getting the IF statement to work and other commands. I think it is just where and when to put quotes and the character. If I take out the variable and place the path directly everything is fine. Below is the main part I am trying to get working. If I can get that to work then I am sure I can get the rest of it. #!/bin/bash Apple_Installer="/Applications/Install macOS Mojave.app" if [ -d "$Apple_Installer" ]; then Installer_Version=$(/usr/libexec/PlistBuddy -c 'Print CFBundleShortVersionString' "$Apple_Installer"/Contents/Info.plist) else echo "Not Present" fi exit 0

Hi all, I've googled this a bit couldn't find what I specifically need. I want to run a script on every Macbook to see if each Macbook has been AD joined to the correct AD server. Via GUI, I'm referring to System Preferences > Users & Groups > Login Options > Network Account Server. I found something called dsconfigldap , but when checking it's available function, it is only for adding or removing from server. It doesn't have an option to check for its status of its value (what it's point to) Anyone got ideas? Thanks in advance.

We're seeing an issue where when we upgrade High Sierra machines to Mojave, all the existing profiles are there, but we can't add/remove profiles at that point. All Management Commands are stuck in Pending for our Mojave machines. Jamf Pro 10.8, anyone else seeing this?

In the past I came up with a little EA that would look into AD and see all of the SG's that a user was a part of. I could then scope access to that based on the result. This worked great, but now that we are migrating away from bound mobile accounts and into standard local accounts, I see that accessing AD is not working. Does anyone know if there is a way to still poll AD to see what groups a user might be apart of if they are on the network and on a local account? I've tried "ID" and "DSCL", but it says that the data source is no longer valid. Here is the script I used to use. It pretty much lists all SG's a user is a member of and then I GREP out the one that I am looking for. #!/bin/bash # Let's set some variables CURRENTUSER=$(/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }') SG=$(comm -23 <(id -Gn $CURRENTUSER | sed 's/ / /g' | sort) <(dscl . search /Groups GroupMembership USERNAME | grep = | awk '{pr