Currently, upon enrolling a Mac using DEP on macOS Mojave you will be greeted with the following popup: Running: codesign -dr - /usr/local/jamf/bin/enroll Reveals that the "enroll" binary is not codesigned, so it is not possible (AFAIK) to create a profile to allow the binary to control System Events. The built-in "Privacy Preferences Policy Control" profile therefore only whitelists jamf and jamfAgent (which are codesigned): We are limiting the release of macOS Mojave but no doubt the new Macs will begin rolling in with the new OS. I am hoping to find a way to avoid requiring a manual allow for this binary.Does anyone have a work around for this or know if Jamf is planning on addressing the issue? Thank you all!

Is anyone out there using Adobe Acrobat DC with an enterprise license? We have a site license deployed to all macs in our environment with an installation of Adobe DC which is required for all employees here to do their jobs. Adobe just renewed the license so I need to apply the new license to Adobe DC on all of our macs. Does anyone know of a way to do this silently and without completely uninstalling Adobe DC and reinstalling it? I'll have to be able to push this through a policy in JAMF because there are far too many clients to do it any other way.

Hey there, so has anyone else had this issue? I created a whitelisting profile via the PPC utility and upon clicking upload and entering in the server URL and my credentials, it doesn't appear to work and I can't get any farther. I included a pic of what I'm talking about. Anyone experience this and over come it? I've tried various gyrations of the URL, even the IP address....still just stares at me. Thanks for any insight.

Hi all, This issue is based on another discussion topichttps://www.jamf.com/jamf-nation/discussions/24232/fyi-10-12-5-issues-with-smb-mounting I have now upgraded our test Macbook to macOS High Sierra 10.13.0. But now any smb mount drives do not work. Since the days of macOS Sierra 10.12.x, we have been telling our users to usesmb://<domain><username>@<server name>/<drive name> But now even that does not work for High Sierra. Anyone have this working?

Hello All,I have specified a Smart User Group in the scope of the policy. After that, when I got the above policy information via Jamf Classic API, smart user group is not specified in the scope. Is it impossible for the API to get and set smart user group in scope of the policy? <policy> <general> <id>120</id> <name>smart_user_group_policy</name> ... <scope> <all_computers>false</all_computers> <computers/> <computer_groups/> <buildings/> <departments/> <limit_to_users> <user_groups/> </limit_to_users> <limitations> <users/> <user_groups/> <network_segments/> <ibeacons/> </limitations> <exclusions> <computers/> <computer_groups/> <buildings/> <departments/> <users/> <user_groups/> <netw

We are attempting to put a java based simulation script on the client machines using Self Service. I tested it on a client machine in the lab and it worked fine. But when my students attempt to download and use this tool they are required to have admin permission use the simulation after they download it from Self Service. Any ideas how to work around this issue?

Hi Guys, I've setup a JSS on Ubuntu 14.04 as a bit of a home lab system. All seems to work fine apart from the communication to APNS:- Unable to create a push notification certificate through the JAMF nation wizard. When I log in it boots be back to the login screen with no error message or indication of fault. If I try and obtain the JAMF proxy certificate I get the same bounce at login but I do get a "an unknown error occurred (500)" error. If I enroll device a iOS device the inventory information reported is very basic and the device name is the serial number of the device. When I go to management I see a log for a problem communicating with the push server. It all looks to be an issue hitting Apple but all the telnet testing to Apple range on the required ports looks fine. Does the JSS have any additional logs that could give me an idea of the issue? For reference I've just setup a brand new VM and reinstalled the JSS but I'm experiencing the same issue. Cheers Michael

I want to use it in the intranet test for jamf, but when i enroll a computer the MDM Profile can't install.

Hi All, As we all know, Mojave is a beta, so there will be compatibility issues. Just wondering if anyone with Mojave installed on their Mac is able to launch the Jamf Pro apps? They all crash immediately on my MBP. Thanks for all input and be well, C

Hi folks, We are seeing a lot of issues with the Microsoft auto updater not working in High Sierra. It can't download the latest version of the auto-updater when you try, and once upgraded still can't download the current office patches. Are other people experiencing this? Even when manually trying to download via a browser it fails with errors. Switch to Sierra and everything works fine. Are other people experiencing this? Has anyone found a workaround? Thanks!

Hello JAMF Nation, Currently, I have Adobe RUM setup in Self Service so our end users can update their Adobe CC apps anytime. The experience is not very friendly. The process kicks off but the user is never notified if updates have run or not. I am attempting a script that will first check for updates, then give the user some actions based on whether or not available updates are found. My bash scripting is limited but I have even less experience with AppleScript. I currently, have 2 problems: No matter the result of the remoteupdatemanager --action=list command the "Updates Available" dialog is always given. It's almost as if the grep is being ignored. When the Run Updates button is clicked I get the following result: 598:649: execution error: System Events got an error: RemoteUpdateManager exiting with Return Code (1) (1)When running the script from Terminal I have to sudo. But with Self Service sudo should't be necessary. Any help would be appreciate

Wondering if anyone had a EA that looks to see if the feature to allow non-admin users to install updates is enabled or not. I know its in the ServiceConfig file, I just don't know how to create an EA to read this. Mac OS: /Library/Application Support/Adobe/OOBE/Configs/ServiceConfig.xml In the file, locate the <feature> element and set the content of the <enabled> childelement to True or False (Default) to enable or disable Elevated privileges. <feature> <name>SelfServeInstalls</name> <enabled>true</enabled> </feature>

Hi everyone, I configured Firefox Autoconfig with CCK2 and Firefox ESR 45.9.0 and packaged it together with Firefox 62.0.3 in JSS and prepared it for distribution. But Autoconfig doesn't seem to work with Firefox Quantum because the update function is still active.Is it possible to configurer Firefox Quantum with cck2 in that combination ? Kind regards,Frank

i'm using an established policy with JAMF PRO 10.7.1.i just imaged this Mac mini MOJAVE 10.14 all config and policy are applying excepted FILEVAULT2 using an individual Key stored by JAMFDid anyone encounter that error?

Anyone pushing out their VPN configurations with JAMF? I was planning to do this, but i'm not seeing a straightforward way of doing this. Figured there was a preference file that held the info. Looks like there is a file called connstore.dat that gets put in /Library/Application Support/Juniper Networks/Junos Pulse/. And there is an entry in /etc/hosts. (Kind of surprised the Junos app could make these system changes without admin creds.) There's also a load of files created in ~/Library/Application Support/Juniper Networks/SetupClient.

Anyone seeing any glitchy behaviour from the Classic API today? I've got a dashboard that uses the API to pull data from Smart Groups and only 7-8 of the 15 metrics are updating - the added twist is that each time the script runs to retrieve the data, a different group of metrics update. The script that pulls the data isn't rocket science, and is scraping the <computer_group><computers><size> value using the following: total=$(curl -L -skfu user:pass 'https://myjss.jamfcloud.com/JSSResource/computergroups/id/1' | /usr/bin/awk -F '<size>|</size>' '{print $4}') Having output the values to a text file I can see that the ones that are failing do not contain a number. I can curl the data manually and the <size> looks to be OK however when I pipe the output through xmllint to format for readability, the metrics that I'm seeing fail error with "-:1: parser error : Start tag expected, '<' no

Hello, I have the terminal as a restricted software for all the user, but We as the IT Team is necessary to access to this tool. We need a Policy or another way which let us to open the terminal. Thanks

I have an extension attribute that displays the installed Microsoft Office Version in the form of 1442, 1448 (office 2011) or 1236 (office 2008). So the version # is displayed with not dots in between numbers. How would i use this value in a smart group to list all computers that have Microsoft Office 2008 installed?

I seem to be finding that on 2018 MacBook Pro's that when i enrol into the JSS they report that the start up disk is encrypted (i.e. the default out of box version of macOS - currently 10.13.6 - partition). However macOS doesnt have FileVault 2 on by default and when checking on the device locally it shows not encrypted, this is causing an issue where the JSS has the wrong state and therefore wont show the policy for enabling FV2. The only workaround ive found is to manually add the machine to a policy for FV2 individually then run a Policy/Recon to force it to pick up the changes - this then allows the process to run without issue

After our helpful discussion from earlier today, I have attempted to create a policy that will spin a new Management Account Password once a day. I went to Management > Policies > Create policy manually > General - named it, Category=No Category, Triggered By=The Every 15 Trigger, Execution Frequency=Once every day. Accounts - Change Management Account Password, Randomly Generated Passwords, Number of characters-12. Then I pushed that out to one test machine and got the error in the subject line above. Did I leave something out?

Does anybody have any experience packaging PyMOL? By default it installs the license in the user folder, and I can't seem to find out how to activate it for all users with the license.lic file. Thanks!

Greetings, all! In the past, I've used Composer to package Pulse Secure releases which would also contain the necessary connection profiles built-in. I am now in need of deploying Pulse Secure App Launcher to each macOS device for an upcoming MFA-related project. I looked in /Library/Application Support/Pulse Secure/Pulse/ and found the following files. Since users will already have a working instance of Pulse Secure, there's no need to push more over the network and have the same version re-installed. I would instead just like to modify their connection profiles and wipe these clean or simply include one specific one needed going forward. What are some of your thoughts on the various approaches that could be used here?

Hi, Is there a way to setup the network settings within a Macbook so that it connects to network via Wired, or wireless, but not both? A practical example would be:- A person with a Macbook, would normally be on wireless network, walking around the office.- When he/she finds a desk, he/she will plug it in a desk. The Macbook will switch to wired network, and switch off all wifi.- When he/she walks away from desk, the Macbook will be unplugged. At this moment, the Macbook will switch off wired network, and switch on wifi again. The end goal here is to have one connection happening so the Macbook can only have one IP address at a time. I believe by Macbook default, you can set which network connectivity has priority, but I want the second connection to be completely off. Thanks in advance.

Hi, We sent a profile to "trying to limit access to adult websites" on our student MacBook Airs. The result is that it works on Safari, but Firefox and Chrome are unusable. The two browsers get constant prompts for SSL sites, and requires admin rights to add the sites. How are you guys using the profile? Is there an update to fix the big, or workaround? We are looking at Global HTTP Proxy, but JAMF doesn't offer it natively -- so we are looking at the script too. Thanks for any tips,Michael

We are Testing deployment on iOS 12 to make sure everything is going ok. We have noticed that it wants you to sign in to an Apple ID to install self service. We have self service set up as device based app so it shouldn't need an Apple ID. Anyone aware of this issue or ran into it before?