Hello, what is the best way if i want to disable sleep for 3 hours while installing on macs which have a configuration profile which sets sleep to 15 minutes. The profile is installed at enrollment after this i run a policy by custom trigger which runs a script with different custom triggers. Should i just use caffeinate at the beginning of the script?Should i make a new configuration profile with new sleep settings? Does it overwrite the old 15 minutes? I would like to do everything in the script and not to use an additional step in the jss.Is there another good way? Thanks in advanceMaurice Fiedler

In Patch Management, my Patch Policy looks like this: And my targets is a large Smart Computer Group of mostly 10.12 without Skype, no limitations, no exclusions. When I click on "View list of eligible computers.", it's empty (0-0). If "Patch Unknown Versions" is selected, shouldn't I see all the computers from the group in the eligible list?

I'm trying to pull the asset tag info from the JSS API and apply that to the Computer Info Field 1 on the device. I'm still learning scripting, and need help with my syntax. This is what I have so far... #!/bin/bash #Pull Asset Tag from the device asset_Tag=$ /usr/bin/awk -F'<asset_tag>|</asset_tag>' '{print $2}'; #Name the ARD field 1 with the asset tag pulled from JSS /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -computerinfo -set1 -1 "$asset_Tag"

Hi Guys, We have noticed an issue this PM which shows our MDM Capability as "No" after imaging or enrolling via the URL. Does anybody know what I can check to see what might be causing this? 2 Machines have the same problem now. Thanks! EDIT 23/03/16 14:00PM GMT - It seems from comments below that this is an Apple issue, multiple users have reported this to Apple. JAMF have also had multiple reports. EDIT 24/03/16 11:30AM GMT - Fixed.

is anyone having issues dragging an application to the DOCK using High Sierra ?? I can't get an application added to the DOCK. Not sure if i'm doing anything wrong I have installed an application via policy with the dock item, and it didn't get placed. I added the dock item to Casper Admin manually file:///Applications/IBM/SPSS/applicationname.app/ afterwards i manually drag the application to the dock and it won't allow it. I even try to drag the mac Chess into the dock and it won't allow it.

Goal: A policy to force minor OS updates, then run a script alerting the end user twice that a reboot is required. The second alert is locked on screen. If the user does not interact with the script, the machine will reboot in 4 hours and successfully complete the policy. If the user force quits the second warning (cmd + q), the machine immediately reboots and successfully completes the policy. If the user manually reboots their machine, the policy is successfully completed. Script: #!/bin/sh jamf displayMessage -message "Minor OS updates have been installed and your machine will reboot in 4 hours. It is recommended that you save your work and reboot immediately to prevent loss of work." sleep 12600 /Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper -windowType utility -title "Reboot" -description "Your machine will reboot at $(date -v +30M). Please ensure all work is saved and restart within the next 30 minutes. Attempting to force quit (CMD + Q) wi

Hello, I've been instructed to make a local account on a small group of Macs that I manage, and have that account automatically login at startup. I'm aware of how to create the accounts using Casper Imaging or Casper Remote, however, I can't seem to figure out how to get the account to login automatically. Is this setting available to be configured through a managed preference or a terminal command that can be scripted. Thanks, ~Ted

I have a question about File Vault 2. The way my predecessor (who is no longer reachable) configured Jamf and our Onboarding process, a policy was created to Enable File Vault 2 – Once per computer (which makes sense so far) but he lost me creating the scope. We manually add each new (Specific) computer to the scope during our setup. I would like to make the policy's scope more Admin friendly and change it to All Computers. The question is – If I go into the policy and change the scope, which has already been applied to all computers on an individual basis to this point, will that screw things up and attempt to re-apply the policy, or re-run File Vault 2 encryption, on all computers within our environment?

Hello,Is there a way to check whether a DMG has been saved as a APFS image rather than HFS+? We mostly export PKG files from Composer, but sometimes someone here creates a DMG. We ran into the issue today where a DMG wouldn't install on any of our El Cap MacBooks because it was saved in APFS format. I went in and remade it (as a PKG since it didn't need to be a DMG) but now am hoping to have some sort of script to scan through our distribution site to see if there are any other APFS DMG files out there. Is this possible?Tim

I just updated my Jamf Pro Suite to version 10.6.2. Now, when I attempt to open Jamf Remote, an MBS Xojo error message appears. How can I go about reverting to an earlier version of the Jamf Pro Suite?

Hello Everyone, I requiere your help because we are implementing self service in order the users are able to install applications in their MACs. I am able to create a Policy for the selfservice but I'm not able to upload the application in the self service. Thanks in advance.

Because of some conflict with configuration policy we are not able to enable the guest account on student computers. I am trying to work around this by making a pseudo guest account wherein a template is created and after every logout the system deletes the folders are replaces it with the template. Does anyone have suggestions on how to accomplish this? I hear logout scripts are depreciated but it looks to be the only option. These computers are running Yosemite. My scripting knowledge is limited so detail explanations are helpful.

Hello JN, I attempted packing SPSS 23 about a year or so ago. I was successful in capturing a snapshot that worked great on the machine I built it on. But as explained here ftp://public.dhe.ibm.com/software/analytics/spss/documentation/statistics/24.0/en/client/InstallationDocuments/MacOS/Authorized_User_License_Installation_Instructions.pdf] the licensing bits are tied to hardware so once I deployed to another Mac, it was borked. SPSS packaging and installation information here on JN is sparse. Can someone share their workflow/methodology? Thanks in advance, /randy

Whenever I send a Device Lock command, the message I enter does not appear on the device. Is there some setting I need to set for this to work? The device locks immediately but lacks the message I enter

Hi - I'm experiencing a somewhat strange issue lately. We have a very Self Service-heavy environment where I work, and I've recently noticed a strange glitch with any self-service policy... Let's say I manually cancel a running policy ('X' button) for some reason (e.g., I'm binding to a directory service and it is failing for some reason and I want to stop it from running before it times-out on its own). I know, not the best practice, but again...let's just say "what if." Then, if I try to run that same policy again (even after restarting, recon-ing, enforcing mgmt. framework, resetting MDM, etc.) it says "Gathering Information" then the progress bar just zooms and completes and nothing has happened. The JSS has no record of the policy running and the jamf.log just says "running policy xxx..." I am able to easily reproduce the issue on my own system with just about any policy, script-based only or ones with package payloads. Is there some cache or something that I can clear ou

Can someone tell me the process to rebinding a client to JSS please.Being new to the management of a mac network with JSS i could really do with your help!

Hello! I'm looking to build a distinct list of applications from Macs within a certain building. I've modified a sample query to give me a list of all applications on all computers, but I don't want a report of computer names with all applications installed on them. I want a distinct list of applications. SELECT DISTINCT a.computer_name AS 'Computer Name', c.application_name AS 'Application Name', c.application_version AS 'Version', c.application_path AS 'Application Path' From computers_denormalized a INNER JOIN reports b ON a.computer_id = b.computer_id AND computer_name LIKE 'Building1%' INNER JOIN applications c ON b.report_id = c.report_id ORDER BY a.computer_name Thanks! I appreciate the help.

I want to run a script on a Mac that is initiated by an item in Self Service. Our user accounts are AD based, "Managed" and "Mobile" according to Users & Groups. The script is going to create a folder on the user's desktop and then copy some log files to the folder. I want the user to be be able to review the contents of the folder but, as created by the script, the user does not have permission to do so. So: after the folder is created and populated, how do I chmod the folder so that it belongs to the user account? I'm able to get the userID and set it as the folder owner, but I have no idea what group to assign. Just changing the owner of the folder doesn't appear to give the user access to it. I'm doing something wrong, I just can't figure out what that is. Can anyone offer some direction?

Running 10.6.2 with the newest apps. Started Remote and got this message:

Hello everybody! We want the newly purchased Macs and iDevices to automatically be added to JAMF.When activating the option on deploy.apple.com, what happens with our older devices that are not yet registered? To they become automatically registered and added to JAMF or it applies only to the newly purchased ones? Thank you!

Hi, So we're having an issue with our AD bound Macs (using Apple's built in AD connector) where after an hour they lose their ability to authenticate to AD. This generally shows itself if the user is logged in and the screen lock comes on they will not be able to log back in. Or if the computer is booted up, but no one logs in, after an hour the red dot will appear at the login screen. Only solution seems to be rebooting the machine. This is what we captured in the opendirectoryd log when set to debug mode right at the hour mark when it fails:(sudo log stream --level debug --process opendirectoryd >> ~/Desktop/odir.log) 2018-08-08 11:39:56.562194-0500 0x4983 Debug 0x0 77 opendirectoryd: (SystemConfiguration) [com.apple.SystemConfiguration.SCNetworkReachability] [0x7faffacb4720] unscheduled 2018-08-08 11:39:56.562310-0500 0x4983 Debug 0x0 77 opendirectoryd: (SystemConfiguration) [com.apple.SystemConfiguration.SCNetworkReachability] [0x7faffacb4720] release 2018-08-

Hello All, I am trying to figure out a way to have a shortcut to specific applications that we use in house. On the Windows side of the house we have a folder specific to our applications that we install. I am wondering if there is a way I could replicate this? It would just be a shortcut to applications : Chrome, Firefox, Word, Powerpoint, Excel and Outlook on the right side of the dock. Thoughts? Thanks in advance!

Howdy, We are having an issue with our Macbooks on High Sierra that are bound to AD with a box that pops up when the user tries to log in:Password Expiration: Your password will expire in 29 days.... Is this because we have "Create Mobile Accounts" selected in our Directory Binding? Our user password policy is set to expire passwords every 180 days. Most of our users who were enrolling their macs reset their passwords within the last few days. Also included in the password policy is that the user cannot change their password within 30 days of changing it. This 29 days doesn't make any sense. Which leads me to believe it is a mac issue and not because the machine is bound to AD. Environment: Jamf Pro v10.6 Enrollment Setup:I have a daisy chain of enrollment policies that go out during enrollment. Here is the summary:1) Sync Apple Time Server: ntpdate -u time.apple.com2) Script changing the name of the mac to the serial number3) Bind to AD with the Directory Binding a) Cre

Hi, we have around 70 Mac devices and their performance are not the best after resetting and putting external SSD as the main boot. To improve it, I have been thinking of several Mac cleaner software for our environments and I think Clean My Mac 3 and Dr. Cleaner, these two are the best. So... do you recommend using this cleaner software in a production environment? If you do, which software do you prefer?

Hi all.Is it common that Maps.app, Photos.app and Books.app is not listed in the drop down selection when you choose configuration profile - Dock - Add Dock Apps?I know how to add additional apps to the drop down selection by editing an tomcat xml file which is not very handy. I thought that Maps.app, Photos.app and Books.app is so much default that they should are allready listed in the xml. Thank you