Hi all, I was wondering if someone could shed some light or recommend an alternative method to execute the below. We have a number of Mac users who access network shares, and we are experiencing performance issues when being accessed by Adobe applications. I found the following article: https://support.apple.com/en-gb/HT208209 which will hopefully will resolve the issue. I have run the actions described in the article and it works if directly entered into terminal from a users account, im now stuck trying to deploy via jamf to the whole estate. There are 2 parts to the fix, part 1 is to run the command in terminal from the users account to disable reading the .DS_store files created by mac's, the second part which creates a nsmb.conf file. I was able to successfully create the nsmb.conf and deploy to the correct folder directory using the jamf tools. however i am having difficulty executing the first part of the process. using the snapshot tool i was able to see that the file is

Hi friends! We're just starting to use imaged machines with users and are noticing some behavior that we didn't experience before. Our usual set-up involves configuring the OS, binding to active directory, logging in with their network account which then creates an account on the machine, and then doing whatever else is needed for their profile. Usually that login appears in the Users and Groups pane in System Preferences. We've found, however, that since using Casper Imaging that when we log in with a local admin account on the device that the Network Account/User is not listed in Users and Groups. When I go into the User folder, their files and folders are there and were created. I'm not sure why this behavior is happening and was wondering if there is a configuration of some kind that I'm missing. Are there any other users out there that work in an Active Directory environment that configure similarly? Is there a way to ensure the account is being created

So eset has a script to install the agent which worked great. Now im getting a script error 1. I have no idea whats going on here. Im not getting alot of detail. Anyone else see this? Sending Wake On LAN command... Opening SSH Connection to 10.10.160.21... Authenticating... Successfully authenticated. Verifying Computer's Identity... The MAC Address has been verified. Checking Operating System Version... Running Mac OS X 10.14 (18A391) Verifying /usr/local/jamf/bin/jamf... /usr/local/jamf/bin/jamf is current (10.7.1-t1536934276) Verifying /usr/sbin/jamf... /usr/sbin/jamf does not exist. Verifying /Library/Preferences/com.jamfsoftware.jamf.plist... Preparing Policy... Executing Policy 2018-10-16 at 3:16 PM | jalcorn | 1 Computer Running script Eset Agent Installer... Script exit code: 1 Script result: Error running script: return code was 1. Submitting log to https://jamf.chathamfinancial.com:8443/ Finished.

Hopefully this is a quick and easy fix. Ive currently got a policy running from Self Service that installs the latest Google Chrome application and have a similar policy that installs the latest edition of Firefox. Both of these are on the featured page of our Self Service distribution panel. The issue i have been seeing on various machines is that when you install the Google Chrome policy and it completes, the Firefox install on the featured page of Self Service seems to disappear. It cant be searched for using the filter and the only way to get it back is to either refresh SS or restart it completely. Anyone have an idea as to why this might be happening? Thanks.

Hello, I have come across a situation on our district macbook airs where students were able to access Terminal and ssh into other machines. I blocked access for Terminal. However, this would not prevent them from using other tools to use ssh. I have found a few commands, such as (launchctl unload /System/Library/LaunchDaemons/ssh.plist), however this doesn't work as that plist is not under LaunchDaemons and I can't find it altogether. Does someone have knowledge how to lock these creative users out of launching any ssh command? Thanks so much in advance.

Hello, I have a simple script that informs users that they need to enable the securetoken of the local admin account. It works perfectly when I run it locally, but fails when I deploy it via Jamf. I keep getting the error message "Script result: 20:334: execution error: No user interaction allowed. (-1713)" My script is below: #!/bin/bash/ messageToDisplay="$4"policyToExecute="$5"policyAction="$6" buttonClicked=$(osascript << EOFbutton returned of (display dialog "$messageToDisplay" buttons {"OK", "Cancel"} default button 1)EOF) if [[ "$buttonClicked" == "OK" ]];thenopen "jamfselfservice://content?entity=policy&id=$5&action=$6"fi

I ran a script that included: sudo rm ~/desktop/"skoolbo" It worked on 4 our of 5 of my test machines so I assumed that the command was correct, but I keep getting: Script result: rm: /var/root/desktop/skoolbo: No such file or directory Why did the command work on some computers but not others, and what command should I have ran instead?

Howdy, I have a computer where the users password is out of sync with FV2. They remember the password, so they type in the FV2 password when booting up, then they type in the current AD password to get access to their account. I usually fix this issue by removing/re-adding the account from FV2 with fdesetup authenticating with the local admin account, but unfortunately the local admin account was never authorized for FV2. I have tried using the Users account to add the local admin, but fdesetup seems to want to authenticate with the login and FV2 password at the same time, which obviously doesn't work. Also, the recovery key was never cached on the JSS, so I can't use that to reset her password/add people to FV2. Is there a way to resolve this situation without having to reimage the machine?

I have a script I use to change passwords on my MAC's, what I'd really like to do is have the script check the password to see if it is different before attempting to change it.

Hi folks, we bought 1Password int the past via VPP.As AgileBits changed the way to purchase 1Password from App purchase to In-App purchase with version 7 we are not able anymore to buy 1Password 7.The reason is that as far as I know In-App purchases are not possible with Apples VPP. Can anybody help or has an idea what to do? Thanks a lot! Regards,Joe

Hi guys i tried sudo lpadmin -E -p printer_name but this disnt resume the printer. Has anyone else seen this in mountain lion?

With the introduction of Screen time, it would appear that we are now having trouble clearing restrictions set on IOS devices with IOS 12, is anyone else encountering this?

I am working on a script that will check if an application is present and then run some commands. I am trying to write this so that I can easily change it later for a different application so I am putting the application and the path in a variable. The problem I have run into is that there are spaces in the path and so I am having trouble getting the IF statement to work and other commands. I think it is just where and when to put quotes and the character. If I take out the variable and place the path directly everything is fine. Below is the main part I am trying to get working. If I can get that to work then I am sure I can get the rest of it. #!/bin/bash Apple_Installer="/Applications/Install macOS Mojave.app" if [ -d "$Apple_Installer" ]; then Installer_Version=$(/usr/libexec/PlistBuddy -c 'Print CFBundleShortVersionString' "$Apple_Installer"/Contents/Info.plist) else echo "Not Present" fi exit 0

Hi all, I've googled this a bit couldn't find what I specifically need. I want to run a script on every Macbook to see if each Macbook has been AD joined to the correct AD server. Via GUI, I'm referring to System Preferences > Users & Groups > Login Options > Network Account Server. I found something called dsconfigldap , but when checking it's available function, it is only for adding or removing from server. It doesn't have an option to check for its status of its value (what it's point to) Anyone got ideas? Thanks in advance.

We're seeing an issue where when we upgrade High Sierra machines to Mojave, all the existing profiles are there, but we can't add/remove profiles at that point. All Management Commands are stuck in Pending for our Mojave machines. Jamf Pro 10.8, anyone else seeing this?

In the past I came up with a little EA that would look into AD and see all of the SG's that a user was a part of. I could then scope access to that based on the result. This worked great, but now that we are migrating away from bound mobile accounts and into standard local accounts, I see that accessing AD is not working. Does anyone know if there is a way to still poll AD to see what groups a user might be apart of if they are on the network and on a local account? I've tried "ID" and "DSCL", but it says that the data source is no longer valid. Here is the script I used to use. It pretty much lists all SG's a user is a member of and then I GREP out the one that I am looking for. #!/bin/bash # Let's set some variables CURRENTUSER=$(/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }') SG=$(comm -23 <(id -Gn $CURRENTUSER | sed 's/ / /g' | sort) <(dscl . search /Groups GroupMembership USERNAME | grep = | awk '{pr

Feel like this is a dumb question - but my search hasn't yielded anything obvious. I work in government Mac environment. I can ARD/JAMF Remote/Screen Share into any Mac hardwired onto my network. When users are on their laptop, I can't figure out a good way to do so. All my users use VPN when offsite. Their computers are enrolled in my JSS, but is there a way to reliably remote into their machines if I need to? Inter-office I would just find them in ARD or type their IP into screen sharing... how can I do it for laptops on offsite wifi (but behind our VPN)

Hi!We have a couple of In-House apps deployed to iPads as "Install Automatically / Prompt User to install". These applications seems to be reinstalling now and then.. In the attached image I have been sending blank pushes to provoke it. Does anyone else experience this behavior?

I've got a situation where I need to temporarily uninstall the Stateful Firewall from McAfee Endpoint Security on a Mac for testing. I know the /usr/local/McAfee/uninstall EPM command will uninstall the entire suite, but I need to only remove the StatefulFirewall. I can't seem to find a guide anywhere that tells me what the trigger is for each module /usr/local/McAfee/uninstall xxx I saw a list many moons ago but I can't find it now to save my life. Can anyone point me in the right direction?

Since the changes to the binary and locations of I can no longer run any commands via apple remote desktop Any ideas?

Using the built in VNC server, we have users who connect to macs and sometimes forget to disconnect. I would love to have a way to manually kick off any connected VNC connection. I know you can do this with RealVNC, but I cant find a way to do it with the built in VNC server. Can this be done?

Hi there; I've had a problem recently creep on a couple users' Macs that I can't seem to troubleshoot. When the user tries to open PowerPoint, the application bounces in the docks and then does nothing. It is limited to the user profile, as any other user on the same machine does not have the issue. No error message is displayed. I've tried reinstalling the app and moving MicrosoftRegistrationDB.reg out of the Group Containers folder, along with the various other .plist files. I've also tried running the updater to install the latest updates. Both machines I've encountered this with are running macOS 10.12.3 and are running Office 15.31 (updated to 15.32 as part of troubleshooting process). I've been renaming the user profile and having the users create a new one and then moving their files back over - which is not an ideal solution but works for now. Any ideas?

In the Apple Menu "Shutdown" and "Restart" have dissapeared. We have not changed anything, if i delete /Library/Managed Preferences then it comes back, it would appear the settings do disable the shutdown in apple menu is in com.apple.loginwindo.plist, which we have a configuration profile which includes a loginwindow payload, so i assume there is something JSS is doing with the plist. Anyone have any ideas?

Has anyone Tried to do this ? I Want to create an user (Lets Call it VAULT)The VAULT account needs to be enabled for FV2 and therefore have a secure token so it can unlock the machine, but I don't want it to be usable to actually get into the MAC, mainly to safeguard against it being used to unlock FV2 and then Auto Login to the machine. (Autologin needs to stay enabled for the machine) It would also be handy to hide it from the user log in screen. ANyone have any clues ?

Its been a while since we are noticing that JAMF web user interface is clunky specially on 'Scope' tab.