Hey Team!In the latest Jamf, opening Self Service changes its stock icon to whatever Branding graphic you define. What I'm looking to do is change the stock icon to match our branding image. I've done the following but currently stuck! -Created an icns image of the branding image -Command-I the Self Service.app and replace the Jamf image as well as replace the AppIcon.icns file in Show package contents>Contents>Resources -Took the new Self Service.app, packaged it up, deployed it, and on end user's computer nothing changed. Show package contents shows the new icns file so it does go through but I feel like its a cache issue at this point? -Clearing /Library/caches/icon caches didn't do the trick nor rebooting. Thoughts? Thanks!

Hi All! We are running into a weird issue. With our 10.13 and 10.14 machines, we are running into the issue where the following items are not shown to be configured during setup: Location Services Choose Your Look Touch ID They are selected to not be skipped (some of the only ones we want the user to configure) but they are not shown at all. Here's a screenshot: We also tested just turning them all on, and it's still skipped, not sure what's going on. Anyone else running into this issue? Cheers,Chris

Hello all, First off, any guidance is much appreciated. I have a security application that is installed upon enrollment. Scoped to that policy is a smart group that looks for devices that have removed that security application or if the application does not exist. What I am finding is that when a user removes the application and it becomes part of that group again, I am having to manually flush the log for that machine in order for the policy to run again. Is there a way to flush the log automatically when a computers enters that smart group? Execution policy is : once per computerSwitching to "on-going" would essentially run the policy every time it checks in. I could create a script added to an "on-going" policy that checks to see if the application exist and runs before the installer. Again, the script will run every single time it checks in. Thoughts?

Is an EA script able to output multiple lines of output? For instance, we want to display two attributes out of a plist file at /Users/loggedInUser/Library/Preferences/com.dms.echo.plist The plist file looks like this... <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>NSNavPanelExpandedSizeForOpenMode</key> <string>{712, 448}</string> <key>NSStatusItem Preferred Position Item-0</key> <real>881</real> <key>echoDays</key> <integer>30</integer> <key>echoing</key> <true/> <key>dmsEchoHasBeenLaunched</key> <true/> <key>supportLogging</key> <true/> </dict> </plist> We really only want the "echoDays" and "echoing" attributes displayed. Can a script format th

Hello does anyone have any information on whitelisting SystemPolicyAllFiles. This was discussed in the JNUC 2018 TCC session, but I don’t believe the presenter went in depth about accomplishing this. Is whitelisting SystemPolicyAllFiles restricted to individual applications, or is it possible to simply bypass all PPPC prompts by whitelisting SystemPolicyAllFiles?

I just setup a new Jamf Pro server running on Ubuntu Server 18.0.4 LTS. I followed the steps outlined in this article. I typed everything exactly as written. These steps worked seven months ago when I deployed another Jamf Pro server, so I'm confused why it's not working now. I can use Connect to Server... to mount the CasperShare, but it also mounts as read-only despite my using an account that should have read/write access. Has anyone else run into this? Does anyone have any ideas that may help?

I'd like to manage the Apple Measure App that came out with IOS 12, however, when I try adding the app to the list of applications, I can't find it on the list. The TV App had similar issues when it was first released but there was a work around for it. Has anyone found a similar work around for the Measure App? Great app, just very distracting for students. Thanks.

I'm on 10.3.1, and I need a command to check a computer's connection to the JSS in a bash script. I've read about the /usr/local/bin/jamf checkJSSConnection command, but is there a way to limit how many times it will check the connection before it times out? I'm writing a script where I want it to do one thing if there is a JSS connection and do something else if there isn't. #!/bin/sh checkJSSConnection=$(/usr/local/bin/jamf checkJSSConnection) if [[ $checkJSSConnection != *"The JSS is available"* ]]; then echo "run local script" sh /path/to/local_script.sh else echo "run JSS policy" jamf policy -event customtrigger fi If the JSS is available, it takes only a few seconds to confirm that. If the JSS isn't available it retries for 55-60 seconds, which is longer than I'd like it to take. Any ideas on how to get a quicker response? I talked with Jamf Support and they recommended using jamf recon instead, like this: #!/bin/bash -v checkJSSConnection=$(jamf recon) i

MacOS MOJAVE is supposed to be 5.7GB at this time it download only a 22.5 MB file that try to connect to APPLE recovery servers. does anyone know how to avoid it? i must download a full installer to create our images and update our distribution point.

I am having trouble with several remote Mavericks computers where the Policy that runs the Security Update 2015-006 is failing. I have a feeling it is a VPN disconnect issue before the computer can report to the JSS. At this point my only way to determine if the policy has run is an Inventory Report on "Receipts Information" using "Packages Installed By Casper". It would be very helpful to find a system file that suggests the Security Update was actually applied via an extension attribute or local search. Any Ideas on how to accomplish this?

We are suddenly seeing an issue with Papercut where a user will print to a queue, and then walk over to a printer they have always used (let's call it printer A), login and see the job they want to release, select it, and tell it to 'print'... Then nothing comes out. Later that day someone will notice it came out on another printer two buildings away (now known as printer B). When we go into Papercut and look at the job, it does in fact show that it was released at the printer two buildings away where it came out (B), and not where the person actually released it (A). This does not seem to follow any sort pattern of users or machines, all of which seems to work fine in other locations, at other times.

where can we find the variable of jamf built in for example $3(currentuser) $4(xxxx) or learn OS script. i can write bash a little. but not Apple script for example sudo installer -pkg ...... i want learn to write some script for apple script.

We are using the Classic API with basic authentication to gather inventory data. We were hoping for a more secure method of authentication if possible. Is it possible to set up Mutual Authentication with certificates to secure the REST API endpoints? Or should we just wait for the new Jamf PRO API with the assumption that there will be options for Token or OAuth based authentiation? Related:https://www.jamf.com/jamf-nation/feature-requests/7374/token-or-oauth-based-authentication-for-the-rest-api Thanks!

Everytime I run this code, following pkg installation will be started, which were already installed.

Hi We had a powershell script (pictured) that would Get information about Mobile Device Apps and who they were scoped to so that we could use this data else where. After one of the recent updates it has stopped working. Does anyone have any idea as to why this would be?

I feel like I am missing something in the GUI. I have a static group that I use to apply specific settings to systems temporarily. I have evidently forgotten to remove 7 of the systems from that group. How can I find the systems that are assigned in that group. I would not consider paging through my 6000+ systems to be a user friendly option. I can use the API's to get a list of these systems which again I would put into the not user friendly option. Am I just missing something obvious in the GUI on how to do this? Thank you

Hello, My DEP Provisioning workflow is predicated upon an OEM Apple Image as if it were right out of the box. Currently we internet recovery the T2 Mac back to an OEM Apple Image, at first boot DEP hits and it's back enrolled to our system, first script runs and removes the policy history of that machine & then it is Re-Provisioned. How are you "Re-Imaging" the machine back to an OEM Apple Image as if it were out of the box? What do you do besides Internet Recovery? I know it can be expedited (I hope & at least faster than internet recovery) Thanks!

I have a Default Configuration Policy that runs a script to trigger other policys in the correct order. But the Default Policy INSISTS on rebooting the machine in 5 mins, even though i have the reboot payload set to Do Not Reboot (mostly to test the issue at the moment). The problem with this is that there is another Policy that is set to run after this script...and it gets cut off half way through because it takes longer than 5mins... I tailed the jamf log and found its does this, right after completing the last step in the policy: Fri Oct 26 15:55:54 Jonathan's MacBook Pro (2) jamf[2635]: Blessing i386 macOS System on /...Fri Oct 26 15:55:55 Jonathan’s MacBook Pro (2) jamf[2748]: Background RestartFri Oct 26 15:55:55 Jonathan’s MacBook Pro (2) jamf[2748]: Removing existing launchd task /Library/LaunchDaemons/com.jamfsoftware.task.reboot.plist...Fri Oct 26 15:55:56 Jonathan’s MacBook Pro (2) jamf[2775]: Regular Restart SYSTEM CONFIG:JAMF 10.7.1-t1536934276MacOS 10.13.5

I am testing enrolling new Macs in DEP, applying a configuration profile and then using policy to push software and other things. Before we would setup the Mac normally, name the Mac and run the Casper Enroll package. I am trying to make it easier for our guys to deploy Macs. Right now DEP and the config profile does everything I want but I am still stuck naming the Mac manually and then binding to AD. Is there anyway to name the Mac during setup? I can't just have a generic name, we have very specific naming guidelines to identify the department and that it is a Mac. I would like to able to do this and have it bind to the domain so our Techs really have to do nothing really. I would also like this so I can hide the sharing preference pane as we have some users that find it necessary to change their Macs name.

I updated our JSS from 9.98 to 9.101 this morning, was running through some testing and noticed that on my iPad (iOS 11) self service shows "unable to connect". I can connect to the JSS from Safari with no certificate errors so the connectivity is there. Any clues as to what might be causing this? I checked the ciphers on Tomcat and they are configured as per the jamf article. <Connector URIEncoding="UTF-8" clientAuth="false" sslProtocol="TLS" sslEnabledProtocols="TLSv1.2,TLSv1.1,TLSv1" maxPostSize="-1" ciphers="TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,

is anyone also having Jamf Admin 10.7.1 Connection Error while using macOS Mojave?? connection error while connecting tohttps://....................(result 0)check your network connection and try again. my network connection is fine.

Recently we became aware of a known Adobe Fuse issue (https://forums.adobe.com/thread/2131616) that's causing the application to fail to launch. Apparently the only work around at the moment is uninstalling and reinstalling the application entirely. To create an on-demand fix for this issue for our students, I've cached a Fuse installer (/Library/Application Support/JAMF/Waiting Room/Fuse.pkg.zip) on the machines that are experiencing this issue. However, Casper Imaging automatically zips Adobe PKGs and I haven't found a way to via the command line to unzip these so that I can create a policy to install the cached Fuse PKG installer. I don't want to use the JSS "Install Cached" option as this will then delete the cached installer. This way students and teachers can run a reinstall policy from Self Service without needing to redownload the installer. Looking for help with scripting the unzip as I currently get the following error: bash-3.2# unzip -ofb /Library/Application Support

Hi everyone, I'm a bit of a beginner when it comes to scripts, and I'm running into this problem. I have to script in JSS, and when I assigned it to a policy and run "sudo jamf policy" it runs no problem. However, when it deploys at check-in I get an error code return of 1, and the policy fails. The application that uses this command is installed onto the computer. sudo sentinelctl set registration-token /Volumes/*/com.sentinelone.registration-token Any help would be greatly appreciated. I'm assuming I'm missing how JAMF handles scritps on the root level.

Hi all. During a monthly chat with my security contact regarding software version compliance, the difference between 2 High-C builds was called out, and I can't find out the difference between the two. Would any of you all have any info regarding why 10.13.6 has two builds, but the release date is the same? Screenshot below. Thanks.

Guys, we usually set Remote Management settings on our builds. Im trying to use the pre enrollment feature. Is there an easy way to set this with say a configuration profile? Or maybe with a composer package.Thanks