I am having trouble with several remote Mavericks computers where the Policy that runs the Security Update 2015-006 is failing. I have a feeling it is a VPN disconnect issue before the computer can report to the JSS. At this point my only way to determine if the policy has run is an Inventory Report on "Receipts Information" using "Packages Installed By Casper". It would be very helpful to find a system file that suggests the Security Update was actually applied via an extension attribute or local search. Any Ideas on how to accomplish this?

We are suddenly seeing an issue with Papercut where a user will print to a queue, and then walk over to a printer they have always used (let's call it printer A), login and see the job they want to release, select it, and tell it to 'print'... Then nothing comes out. Later that day someone will notice it came out on another printer two buildings away (now known as printer B). When we go into Papercut and look at the job, it does in fact show that it was released at the printer two buildings away where it came out (B), and not where the person actually released it (A). This does not seem to follow any sort pattern of users or machines, all of which seems to work fine in other locations, at other times.

where can we find the variable of jamf built in for example $3(currentuser) $4(xxxx) or learn OS script. i can write bash a little. but not Apple script for example sudo installer -pkg ...... i want learn to write some script for apple script.

We are using the Classic API with basic authentication to gather inventory data. We were hoping for a more secure method of authentication if possible. Is it possible to set up Mutual Authentication with certificates to secure the REST API endpoints? Or should we just wait for the new Jamf PRO API with the assumption that there will be options for Token or OAuth based authentiation? Related:https://www.jamf.com/jamf-nation/feature-requests/7374/token-or-oauth-based-authentication-for-the-rest-api Thanks!

Everytime I run this code, following pkg installation will be started, which were already installed.

Hi We had a powershell script (pictured) that would Get information about Mobile Device Apps and who they were scoped to so that we could use this data else where. After one of the recent updates it has stopped working. Does anyone have any idea as to why this would be?

I feel like I am missing something in the GUI. I have a static group that I use to apply specific settings to systems temporarily. I have evidently forgotten to remove 7 of the systems from that group. How can I find the systems that are assigned in that group. I would not consider paging through my 6000+ systems to be a user friendly option. I can use the API's to get a list of these systems which again I would put into the not user friendly option. Am I just missing something obvious in the GUI on how to do this? Thank you

Hello, My DEP Provisioning workflow is predicated upon an OEM Apple Image as if it were right out of the box. Currently we internet recovery the T2 Mac back to an OEM Apple Image, at first boot DEP hits and it's back enrolled to our system, first script runs and removes the policy history of that machine & then it is Re-Provisioned. How are you "Re-Imaging" the machine back to an OEM Apple Image as if it were out of the box? What do you do besides Internet Recovery? I know it can be expedited (I hope & at least faster than internet recovery) Thanks!

I have a Default Configuration Policy that runs a script to trigger other policys in the correct order. But the Default Policy INSISTS on rebooting the machine in 5 mins, even though i have the reboot payload set to Do Not Reboot (mostly to test the issue at the moment). The problem with this is that there is another Policy that is set to run after this script...and it gets cut off half way through because it takes longer than 5mins... I tailed the jamf log and found its does this, right after completing the last step in the policy: Fri Oct 26 15:55:54 Jonathan's MacBook Pro (2) jamf[2635]: Blessing i386 macOS System on /...Fri Oct 26 15:55:55 Jonathan’s MacBook Pro (2) jamf[2748]: Background RestartFri Oct 26 15:55:55 Jonathan’s MacBook Pro (2) jamf[2748]: Removing existing launchd task /Library/LaunchDaemons/com.jamfsoftware.task.reboot.plist...Fri Oct 26 15:55:56 Jonathan’s MacBook Pro (2) jamf[2775]: Regular Restart SYSTEM CONFIG:JAMF 10.7.1-t1536934276MacOS 10.13.5

I am testing enrolling new Macs in DEP, applying a configuration profile and then using policy to push software and other things. Before we would setup the Mac normally, name the Mac and run the Casper Enroll package. I am trying to make it easier for our guys to deploy Macs. Right now DEP and the config profile does everything I want but I am still stuck naming the Mac manually and then binding to AD. Is there anyway to name the Mac during setup? I can't just have a generic name, we have very specific naming guidelines to identify the department and that it is a Mac. I would like to able to do this and have it bind to the domain so our Techs really have to do nothing really. I would also like this so I can hide the sharing preference pane as we have some users that find it necessary to change their Macs name.

I updated our JSS from 9.98 to 9.101 this morning, was running through some testing and noticed that on my iPad (iOS 11) self service shows "unable to connect". I can connect to the JSS from Safari with no certificate errors so the connectivity is there. Any clues as to what might be causing this? I checked the ciphers on Tomcat and they are configured as per the jamf article. <Connector URIEncoding="UTF-8" clientAuth="false" sslProtocol="TLS" sslEnabledProtocols="TLSv1.2,TLSv1.1,TLSv1" maxPostSize="-1" ciphers="TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,

is anyone also having Jamf Admin 10.7.1 Connection Error while using macOS Mojave?? connection error while connecting tohttps://....................(result 0)check your network connection and try again. my network connection is fine.

Recently we became aware of a known Adobe Fuse issue (https://forums.adobe.com/thread/2131616) that's causing the application to fail to launch. Apparently the only work around at the moment is uninstalling and reinstalling the application entirely. To create an on-demand fix for this issue for our students, I've cached a Fuse installer (/Library/Application Support/JAMF/Waiting Room/Fuse.pkg.zip) on the machines that are experiencing this issue. However, Casper Imaging automatically zips Adobe PKGs and I haven't found a way to via the command line to unzip these so that I can create a policy to install the cached Fuse PKG installer. I don't want to use the JSS "Install Cached" option as this will then delete the cached installer. This way students and teachers can run a reinstall policy from Self Service without needing to redownload the installer. Looking for help with scripting the unzip as I currently get the following error: bash-3.2# unzip -ofb /Library/Application Support

Hi everyone, I'm a bit of a beginner when it comes to scripts, and I'm running into this problem. I have to script in JSS, and when I assigned it to a policy and run "sudo jamf policy" it runs no problem. However, when it deploys at check-in I get an error code return of 1, and the policy fails. The application that uses this command is installed onto the computer. sudo sentinelctl set registration-token /Volumes/*/com.sentinelone.registration-token Any help would be greatly appreciated. I'm assuming I'm missing how JAMF handles scritps on the root level.

Hi all. During a monthly chat with my security contact regarding software version compliance, the difference between 2 High-C builds was called out, and I can't find out the difference between the two. Would any of you all have any info regarding why 10.13.6 has two builds, but the release date is the same? Screenshot below. Thanks.

Guys, we usually set Remote Management settings on our builds. Im trying to use the pre enrollment feature. Is there an easy way to set this with say a configuration profile? Or maybe with a composer package.Thanks

Currently, upon enrolling a Mac using DEP on macOS Mojave you will be greeted with the following popup: Running: codesign -dr - /usr/local/jamf/bin/enroll Reveals that the "enroll" binary is not codesigned, so it is not possible (AFAIK) to create a profile to allow the binary to control System Events. The built-in "Privacy Preferences Policy Control" profile therefore only whitelists jamf and jamfAgent (which are codesigned): We are limiting the release of macOS Mojave but no doubt the new Macs will begin rolling in with the new OS. I am hoping to find a way to avoid requiring a manual allow for this binary.Does anyone have a work around for this or know if Jamf is planning on addressing the issue? Thank you all!

Is anyone out there using Adobe Acrobat DC with an enterprise license? We have a site license deployed to all macs in our environment with an installation of Adobe DC which is required for all employees here to do their jobs. Adobe just renewed the license so I need to apply the new license to Adobe DC on all of our macs. Does anyone know of a way to do this silently and without completely uninstalling Adobe DC and reinstalling it? I'll have to be able to push this through a policy in JAMF because there are far too many clients to do it any other way.

Hey there, so has anyone else had this issue? I created a whitelisting profile via the PPC utility and upon clicking upload and entering in the server URL and my credentials, it doesn't appear to work and I can't get any farther. I included a pic of what I'm talking about. Anyone experience this and over come it? I've tried various gyrations of the URL, even the IP address....still just stares at me. Thanks for any insight.

Hi all, This issue is based on another discussion topichttps://www.jamf.com/jamf-nation/discussions/24232/fyi-10-12-5-issues-with-smb-mounting I have now upgraded our test Macbook to macOS High Sierra 10.13.0. But now any smb mount drives do not work. Since the days of macOS Sierra 10.12.x, we have been telling our users to usesmb://<domain><username>@<server name>/<drive name> But now even that does not work for High Sierra. Anyone have this working?

Hello All,I have specified a Smart User Group in the scope of the policy. After that, when I got the above policy information via Jamf Classic API, smart user group is not specified in the scope. Is it impossible for the API to get and set smart user group in scope of the policy? <policy> <general> <id>120</id> <name>smart_user_group_policy</name> ... <scope> <all_computers>false</all_computers> <computers/> <computer_groups/> <buildings/> <departments/> <limit_to_users> <user_groups/> </limit_to_users> <limitations> <users/> <user_groups/> <network_segments/> <ibeacons/> </limitations> <exclusions> <computers/> <computer_groups/> <buildings/> <departments/> <users/> <user_groups/> <netw

We are attempting to put a java based simulation script on the client machines using Self Service. I tested it on a client machine in the lab and it worked fine. But when my students attempt to download and use this tool they are required to have admin permission use the simulation after they download it from Self Service. Any ideas how to work around this issue?

Hi Guys, I've setup a JSS on Ubuntu 14.04 as a bit of a home lab system. All seems to work fine apart from the communication to APNS:- Unable to create a push notification certificate through the JAMF nation wizard. When I log in it boots be back to the login screen with no error message or indication of fault. If I try and obtain the JAMF proxy certificate I get the same bounce at login but I do get a "an unknown error occurred (500)" error. If I enroll device a iOS device the inventory information reported is very basic and the device name is the serial number of the device. When I go to management I see a log for a problem communicating with the push server. It all looks to be an issue hitting Apple but all the telnet testing to Apple range on the required ports looks fine. Does the JSS have any additional logs that could give me an idea of the issue? For reference I've just setup a brand new VM and reinstalled the JSS but I'm experiencing the same issue. Cheers Michael

I want to use it in the intranet test for jamf, but when i enroll a computer the MDM Profile can't install.

Hi All, As we all know, Mojave is a beta, so there will be compatibility issues. Just wondering if anyone with Mojave installed on their Mac is able to launch the Jamf Pro apps? They all crash immediately on my MBP. Thanks for all input and be well, C