Hi folks, We are seeing a lot of issues with the Microsoft auto updater not working in High Sierra. It can't download the latest version of the auto-updater when you try, and once upgraded still can't download the current office patches. Are other people experiencing this? Even when manually trying to download via a browser it fails with errors. Switch to Sierra and everything works fine. Are other people experiencing this? Has anyone found a workaround? Thanks!

Hello JAMF Nation, Currently, I have Adobe RUM setup in Self Service so our end users can update their Adobe CC apps anytime. The experience is not very friendly. The process kicks off but the user is never notified if updates have run or not. I am attempting a script that will first check for updates, then give the user some actions based on whether or not available updates are found. My bash scripting is limited but I have even less experience with AppleScript. I currently, have 2 problems: No matter the result of the remoteupdatemanager --action=list command the "Updates Available" dialog is always given. It's almost as if the grep is being ignored. When the Run Updates button is clicked I get the following result: 598:649: execution error: System Events got an error: RemoteUpdateManager exiting with Return Code (1) (1)When running the script from Terminal I have to sudo. But with Self Service sudo should't be necessary. Any help would be appreciate

Wondering if anyone had a EA that looks to see if the feature to allow non-admin users to install updates is enabled or not. I know its in the ServiceConfig file, I just don't know how to create an EA to read this. Mac OS: /Library/Application Support/Adobe/OOBE/Configs/ServiceConfig.xml In the file, locate the <feature> element and set the content of the <enabled> childelement to True or False (Default) to enable or disable Elevated privileges. <feature> <name>SelfServeInstalls</name> <enabled>true</enabled> </feature>

Hi everyone, I configured Firefox Autoconfig with CCK2 and Firefox ESR 45.9.0 and packaged it together with Firefox 62.0.3 in JSS and prepared it for distribution. But Autoconfig doesn't seem to work with Firefox Quantum because the update function is still active.Is it possible to configurer Firefox Quantum with cck2 in that combination ? Kind regards,Frank

i'm using an established policy with JAMF PRO 10.7.1.i just imaged this Mac mini MOJAVE 10.14 all config and policy are applying excepted FILEVAULT2 using an individual Key stored by JAMFDid anyone encounter that error?

Anyone pushing out their VPN configurations with JAMF? I was planning to do this, but i'm not seeing a straightforward way of doing this. Figured there was a preference file that held the info. Looks like there is a file called connstore.dat that gets put in /Library/Application Support/Juniper Networks/Junos Pulse/. And there is an entry in /etc/hosts. (Kind of surprised the Junos app could make these system changes without admin creds.) There's also a load of files created in ~/Library/Application Support/Juniper Networks/SetupClient.

Anyone seeing any glitchy behaviour from the Classic API today? I've got a dashboard that uses the API to pull data from Smart Groups and only 7-8 of the 15 metrics are updating - the added twist is that each time the script runs to retrieve the data, a different group of metrics update. The script that pulls the data isn't rocket science, and is scraping the <computer_group><computers><size> value using the following: total=$(curl -L -skfu user:pass 'https://myjss.jamfcloud.com/JSSResource/computergroups/id/1' | /usr/bin/awk -F '<size>|</size>' '{print $4}') Having output the values to a text file I can see that the ones that are failing do not contain a number. I can curl the data manually and the <size> looks to be OK however when I pipe the output through xmllint to format for readability, the metrics that I'm seeing fail error with "-:1: parser error : Start tag expected, '<' no

Hello, I have the terminal as a restricted software for all the user, but We as the IT Team is necessary to access to this tool. We need a Policy or another way which let us to open the terminal. Thanks

I have an extension attribute that displays the installed Microsoft Office Version in the form of 1442, 1448 (office 2011) or 1236 (office 2008). So the version # is displayed with not dots in between numbers. How would i use this value in a smart group to list all computers that have Microsoft Office 2008 installed?

I seem to be finding that on 2018 MacBook Pro's that when i enrol into the JSS they report that the start up disk is encrypted (i.e. the default out of box version of macOS - currently 10.13.6 - partition). However macOS doesnt have FileVault 2 on by default and when checking on the device locally it shows not encrypted, this is causing an issue where the JSS has the wrong state and therefore wont show the policy for enabling FV2. The only workaround ive found is to manually add the machine to a policy for FV2 individually then run a Policy/Recon to force it to pick up the changes - this then allows the process to run without issue

After our helpful discussion from earlier today, I have attempted to create a policy that will spin a new Management Account Password once a day. I went to Management > Policies > Create policy manually > General - named it, Category=No Category, Triggered By=The Every 15 Trigger, Execution Frequency=Once every day. Accounts - Change Management Account Password, Randomly Generated Passwords, Number of characters-12. Then I pushed that out to one test machine and got the error in the subject line above. Did I leave something out?

Does anybody have any experience packaging PyMOL? By default it installs the license in the user folder, and I can't seem to find out how to activate it for all users with the license.lic file. Thanks!

Greetings, all! In the past, I've used Composer to package Pulse Secure releases which would also contain the necessary connection profiles built-in. I am now in need of deploying Pulse Secure App Launcher to each macOS device for an upcoming MFA-related project. I looked in /Library/Application Support/Pulse Secure/Pulse/ and found the following files. Since users will already have a working instance of Pulse Secure, there's no need to push more over the network and have the same version re-installed. I would instead just like to modify their connection profiles and wipe these clean or simply include one specific one needed going forward. What are some of your thoughts on the various approaches that could be used here?

Hi, Is there a way to setup the network settings within a Macbook so that it connects to network via Wired, or wireless, but not both? A practical example would be:- A person with a Macbook, would normally be on wireless network, walking around the office.- When he/she finds a desk, he/she will plug it in a desk. The Macbook will switch to wired network, and switch off all wifi.- When he/she walks away from desk, the Macbook will be unplugged. At this moment, the Macbook will switch off wired network, and switch on wifi again. The end goal here is to have one connection happening so the Macbook can only have one IP address at a time. I believe by Macbook default, you can set which network connectivity has priority, but I want the second connection to be completely off. Thanks in advance.

Hi, We sent a profile to "trying to limit access to adult websites" on our student MacBook Airs. The result is that it works on Safari, but Firefox and Chrome are unusable. The two browsers get constant prompts for SSL sites, and requires admin rights to add the sites. How are you guys using the profile? Is there an update to fix the big, or workaround? We are looking at Global HTTP Proxy, but JAMF doesn't offer it natively -- so we are looking at the script too. Thanks for any tips,Michael

We are Testing deployment on iOS 12 to make sure everything is going ok. We have noticed that it wants you to sign in to an Apple ID to install self service. We have self service set up as device based app so it shouldn't need an Apple ID. Anyone aware of this issue or ran into it before?

Hello,i created a new printer in JSS.The printer has tow papersheets but if the printer is installed no papersheet is availaible in the options of the printer.What is wrong with my configuration ? Kind regards and thx for your help. Frank

So I just got off of chat with apple support, and they said that the only way to make a new install disk is to get the file(s) from another mac user. Is anyone willing to setup a fileshare or something so I can copy the files?

Hey Guys, I'm trying to silently mount a network share on login without the user having to authenticate. Our computers are bound to AD and use mobile accounts (with all syncing disabled). I'm using a LaunchAgent which runs a script. Here's what's happening: Everything works reasonably well on the first login. It creates the account and when I reach the desktop I get a pop-up that says "you are attempting to connect to the server "server.name.com", and I click the blue "connect" button and the share mounts. Sweet! Here's a screenshot of this: However, every login afterwards prompts for a password... Here's another screenshot: So, I don't know why it's authenticating the first time and then not authenticating for all subseqent logins. Here is the script that I'm using: #!/bin/bash # this script was written to determine the currently logged in user and then determine # the path to their network home folder # it will then mount the home folder ## Get Current User current

Update 2018-03-14: This issue has been resolved with the newest version of the DLP and SEP clients, as I've stated in this comment. Resolution: With thanks to @lrabotteau, we've been able to see that this issue is directly attributable to the Symantec 14.6 DLP client not being compatible with MacOS High Sierra. My IT Security group has a ticket open with Symantec and they've provided us with steps to remove the agent, as described in this comment. I'm now marking this issue as solved since it's not related to the JSS itself. Now we just need to find a resolution to the DLP issue without requiring a complete upgrade of our DLP infrastructure... Issue: I have a fresh-out-of-the-box MacBook Pro 13" non-touch strip mac that I've just enrolled. One of my policies requires a reboot – SEP installer. When issuing the reboot or shutdown command, the computer ends up with a Kernel Panic just after the display LED turns off, and the machine will reboot on its

Hello there, I was wondering how your organization is handling Adobe CC products in your organization. Is everyone moving to Adobe IDs for every user, the "Named user license" approach? If you used Adobe CCP, and your users see the pop up "You license is expiring," do they just sign in to activate their seat? Thanks for all your thoughts.

Hi All, As I'm sure many of you will notice soon, MS changed their version numbering for Office 2016. Rather than 15.x, the latest patches are now 16.9. This breaks all my Smart group logic... since now I have to look for two completely different versions. Licensed software also is a bit weird now. How are people handling this? Just duplicating their licensed software profile, and smart groups, then setting policies to look at both, or...?

I think I broke my old AST server a few months back and looking to rebuild it. I have the installer files from GSX but can't find what the system requirements are, not sure if it will run on 10.11 and 10.12?

So, anyways, as a high school student, I am looking to remove an MDM profile that is stored on my computer that has a bunch of restrictions. With 'sudo -s' then typing in 'profiles -R -p com.uni.mdm' I get returned 101: profile is not removable. I then went to a thread regarding how to remove an unremovable mdm profile and came across to do this via nuking the directory that the MDM is stored in. I typed in as bash 3.2#: 'rm -r /var/db/ConfigurationProfiles' and after typing in 'y' a bunch of times in an attempt to remove it, I get that it is not permitted. I have no idea how or why, but I am looking for some help. Thanks for reading this and I hope I can get some help.

Just like everyone else we are dealing with keychain issues for our AD accounts. I have a lab where students login with their AD credentials and they are constantly complaining about the keychain prompts. The building consultant wanted me to script something that would remove the users keychain folder contents after each logout. I understand this may not be best practice but I can't for the life of me get it to work through Casper's login/logout hooks. I'm using this script: http://www.amsys.co.uk/2015/02/delete-keychains-logout/ #!/bin/sh rm -Rf /Users/$USER/Library/Keychains/* exit 0 When I run it from terminal manually it works like a charm. When I run it via event/logout hook it completes "successfully" but the folders remain. Anyone have any ideas why its not delete the contents? Any suggestions on how to deal with keychains on lab machines other than ADPassmon? Thanks