I configured an iPad to behave like a kiosk, locked to Safari and a webpage.I set the Lock screen and hompage using a jpg with our logo (the image is primarily black). Now the webpage that the iPad is locked to is black, when normally it's white. What could be causing this? and how do I fix it?Not me in the image.....

Referring to this article I have run the command codesign -dr - /path/to/app and codesign -dr - /Applications/application.app for my program and I get a return answer of the executable location followed by Anchor Trusted. When I run the same command for Google Chrome I get the whole designate => part to create a PPPC payload properly. After digging into the plist I see that the signature is ????. I assume this means it isn't signed. I further assume that if it isn't signed I can't create a PPPC payload for it. I make that assumption from this article 1. The item being whitelisted must be code-signed So, If it isn't signed I can not use the built in PCCC option. (Is this assumption correct) Follow up. Can you use the PCCC Utility to do unsigned apps (in the process of testing)? Or I am just out of luck for those apps.

I feel like I'm missing something simple, but I couldn't find anything in search--or rather, I found a lot of things in search but nothing that was what I was looking for. For updates and patches from Adobe, Microsoft, etc., I create nice Self Service policies to install them and can upload and set icons for each policy. I also create separate "push" policies that prompts users to install the patches and updates in Management Action windows, but I cannot set icons for those in the policies themselves. I'm not sure where they're grabbing the icons from, but for some, like Flash, they are correct, and for others they are incorrect (most often using the Flash icon for some reason). Any ideas?

I've configured the script below to check if users have a specific Chrome extension installed. I thought is was working okay, but I found out if a user has signed into his or her Google account in Chrome, the extensions are kept in a separate directory. Is there some way to modify the script so both locations are checked? For users that are signed into their Google account, the file path is... "$currentUser"/Library/Application Support/Google/Chrome/Profile 1/Extensions/kehlnacjpfpmnkmhdladdicpbfpecfmh" The "Profile 1" directory will not exist for users that haven't signed into a Google account and that constitutes a majority of our users. #Identifies install status of DS Search Chrome extension #!bin/bash # Pulls the current logged in user currentUser=$(stat -f%Su /dev/console) if [[ -e "/Users/"$currentUser"/Library/Application Support/Google/Chrome/Default/Extensions/kehlnacjpfpmnkmhdladdicpbfpecfmh" ]]; then echo "<result>Installed</result>" else echo "&l

Hello JAMFers,I am using JAMF Pro and attempting to remove the NWEA Lockdown Browser.app from our devices before pushing out the newest version, but am having difficulty.I tried in terminal sudo rm -rf ApplicationsNWEA Lockdown Browser.app and nothing occursTo be sure I had stuff entered correctly I tried sudo rm -rf ApplicationsNumbers.app and that worked just ducky.I even removed the sudo to see if it would work that way as well, still nothing. I have done searches on JAMF and other sites of how to accomplish this, with no luck what so ever.

We're new to Jamf and I've been putting together a policy that's triggered by prestage enrollment on a clean installation of High Sierra (10.13.3) to get everything all set up in a convenient, hands-off way. Everything works beautifully except for giving the Administrator account full privileges to remotely manage the Mac. I'm using this script:https://www.jamf.com/jamf-nation/third-party-products/files/217/enableard-sh-enable-ard-and-configure-remote-management-settingsI've tried hard-coding the Target Username and using parameter 4. I know the script is running since Remote Management is getting enabled, but the "Allow Access for: Only these users: Box" remains empty. I thought maybe those commands just don't populate that box but sure enough, screen sharing doesn't work for the administrator account unless I manually add it to that Box. I've tried with various accounts, running the script while logged in, at login, and at startup.

I am trying to leverage the PPPC config in Jamf Pro to trust certain apps. I have been using PPPC Utility and it works great, but since Jamf has this feature I would rather use that. When setting it up, I can easily find the Bundle Identifier of the app but what the heck is code requirement? sorry if this has come up, I couldn't find any posts and it didn't seem the admin guide went into this too much.

Started up a netSUS v5.0 Ubuntu OVA about 2-3 weeks ago, and it still hasn't finished synchronizing with Apple. I only selected 10.12, 10.13 and 10.14 catalogs. When I look at the network traffic (iftop -n), it shows it's connected and running, but it will never go above 1Mb. Has anyone seen this before? It's config'd with a gig card, and I asked our network team if they throttle downloads from apple, and they said no.

Greetings, all! We're using "Restricted Software" to prevent unwanted in-place upgrades to Mojave when it is released next week. Since this'll be in testing for a few weeks or so before our organization approves the use of the new macOS, I wanted to use this restriction workflow. I just wanted to take a moment and verify the accuracy of the process name that I am using. What're your thoughts? Is this a good educated guess based on previous naming conventions for macOS installers that Apple has used?

So I have been trying to update Flash on our lab machines through a policy and an installer package with a postinstall script, because I want it to perform silently without needing user interaction. I have tried it through patch management with and without the postinstall script, but either way when logging into the machine the flash player updater icon pops up in the dock and then hangs. You can't logout of the machine unless you force close it too. I have also tried it with PPAPI and NPAPI flash separately because I thought that might have been the problem. I am new to JAMF and macOS but I have been using Linux based operating systems for almost 9 years, so I like to think I have a decent understanding of how these systems work I know my script is probably bad, but here it is. Take the adobe flash installers and make a flat package -> extract the 2 flash player installer's to /tmp -> postinstall Would this work better if I left them as a DMG? Does Patch Management even wo

Installing JPS onto an Ubuntu 18.04 VM. I have found /etc/mysql/mysql.cnf but it only contains two include lines. I added innodb_buffer_pool_size=5500Minnodb_file_per_table=1 At the point mysql refused to start. Removing the lines allowed it to start again. Suggestions?

Has anyone found a way to Disable Autoupdate, OneDrive Login, and Office 365 Login?

This item made me excited in the JAMF Pro 10.9 release notes: You can now add a package to a computer PreStage enrollment. This allows you to deploy the package to computers with macOS 10.14 or later during enrollment with Jamf Pro. The package is installed on computers before the user completes the Setup Assistant. ...and then this item made me depressed in the JAMF Pro 10.9 release notes: To deploy an enrollment package to computers, you must have a cloud distribution point configured as the master distribution point in Jamf Pro. Does this mean if your JAMF environment is entirely on-premise you're SOL to use this feature? If it is, I'm wondering what the rationale is behind that decision by JAMF... is this the beginning of a trend of cloud-only features in upcoming versions of JAMF Pro?

We must disable keyboard shortcuts for screenshots as a requirement for the state online assessment. In Sierra, these screenshot keyboard shortcuts have their own option under Keyboard > Shortcuts. Under Mojave, it has an additional option. How can we capture these keyboard shortcut changes? How do you deploy the change to an existing user account? I include a screenshot to show the new changes. Thank you.

Hey! I was wondering if there was a way to check if a group existed on a MacBook? Like : If [Group exists] then ( do this) else (do nothing) Is there any quick and easy way to perform this? My scripting skills are still developing so I appreciate any and all help!

Has anyone ever seen these from a Policy calling a Script that only uses JamfHelper? Script result: 2018-12-20 13:58:10.156 jamfHelper[3537:29215] isPrefsCreateCacheFromEnabledAndDefaultInputSources - can't find anything from GetInputSourceEnabledPrefs, use defaultASCIIKeyLayoutDict = {type = immutable dict, count = 3,entries =>0 : {contents = "InputSourceKind"} = {contents = "Keyboard Layout"}1 : {contents = "KeyboardLayout Name"} = British2 : {contents = "KeyboardLayout ID"} = {value = +2, type = kCFNumberSInt64Type}}result 0

Can someone explain why I would need Remote Apple Events enabled under Sharing in System Preferences? Other than running apple script from PC-1 to PC-2 (which I never do). I rather have it turned OFF -- but when reading the MAN pages I can only set it to ON or OFF -- I cannot set it to "Only these users" with a script. Before I turn it off globally I'd like to know if there is something I'm missing that would require me to have that on? Thanks

Hi All,I've been trying to find a "good way" of doing this and am coming up short - does anybody have a nice way of somehow showing progress or status from a terminal command in an osascript-created dialog? Is this even possible? :) I'm using rsync -avhP to get the progress and want to send that output to a dialog window if possible. We've got a departed user Self Service item that copies the user's home folder to our server and smb share copies are NOT fast - so I'd love to have some sort of progress for my techs running this. Any cool ideas? Thanks!mbezzo

I am having an issue with a policy that launches the script below. I grabbed bits and pieces from some other great script ideas out here! The issue is that when enacted and the computer restarts the policy is still shows as enabled and not completed. I have moved around the shutdown -r +5 command but still no love. Any thoughts? Thanks. !/bin/bash delayWhileScreensaver (){pidSaver=0while [[ $pidSaver != "" ]]; do sleep 5 echo "Looping, pidSaver=" "$pidSaver" pidSaver=$(ps -ef | "grep [S]creenSaverEngine" | awk '{print $2}')done} delayWhileScreensaver shutdown -r +5 level=$(/Library/"Application Support"/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper -windowType hud -timeout 300 -title "XXXX MAC" -heading "Critical Alert!" -lockHUD -countdown -button1 "OK" -button2 "Restart now" -description "blah blah blah." -icon /Library/"Application Support"/JAM

I have attempted to install the WebEx Meeting Center plugin via vendor .pkg and also tried compiling a custom package via Composer. Neither method has resulted in a working WebEx plugin. Here are some additional details: OS X 10.7.4Safari 5.1.7 Has anyone had success packaging/deploying/using this plugin?Appreciate any feedback.Thanks!

At some point after updating to Jamf 10.7 (and now 10.7.1) the Smart Groups I have referencing Patch Management versions don't seem to be updating correctly. Specifically, I have a Smart Group for "Firefox ESR is Less Than 60.2.1" using the Patch Reporting criteria. Just the one line referencing Patch Reporting: Mozilla Firefox Extended Support Release (ESR). Currently it is showing 569 members. However, when I go into the Patch Management tab and look at the details of Firefox ESR, it shows 2439 devices on lesser versions. I am seeing similar results in our Google Chrome groups. Before I open a support ticket, I figured I would post here to see if this is something that other people are seeing. I didn't see any posts, but that could have been just bad searching. Thanks, Tim

We have quite a fast network and really don't care if it takes awhile to download the initial app, so I'm concerned that now, again, Apple is making us have to jump through hoops to make one of their apps work. We use VPP to push all the apps to student use iPads which are all supervised. Anyone else seeing this message and have any workarounds? Gabe ShackneyPrinceton Public Schools

Hello! I'm still a beginner at bash and have been struggling to find the commands I need to write a script. The script needs to add a SSID to Preferred Network lists using WPA2 Enterprise with Mode: EAP-TLS and Identity: User Name. I can get the SSID on the list with WPA2 Enterprise using networksetup -addpreferredwirelessnetworkatindex <device name> <network> <index> <security type> What do I need to get Mode: EAP-TLS and select a certificate previously loaded in the Keychain with a standard format of "User Name" ?

Hi all, I can't help but be vague about this, because I don't know what's going on. Background: We are in an enterprise network, with proxies to block certain sites. This includes Apple. I have started rolling out macOS Mojave 10.14.2 to our users. I am up to around 20-30 Macbooks. These users are now coming back with feedback saying the network cuts out at random times, for Safari or Chrome. Sometimes Outlook email. I have upgraded my own Macbook just to get the same experience they do. After 2-3 days of use, I also notice this. The way to fix it is to reboot the Macbook. Kind of annoying. On average, people say they reboot 2 or 3 times a day. Has anyone else experience this? Or you are an administrator and have receive support tickets regarding this? I'm not a network guy, so don't even know how to diagnose this.