I have a script that runs and deletes the home directories of users userList=find /Users -type d -maxdepth 1 -mindepth 1 -not -name "." -not -name "admin" -not -name "testuser" -not -name "Shared" -not -name "Guest" -mtime +7 | awk -F'/' '{print $NF}' for a in $userList ; do rm -r /Users/"$a"; #delete the home directory echo "$a has been deleted" let counter=counter+1done it deletes the home directories correctly, but when i check the System Preferences --> Users & Groupsall the deleted users names are still listed here. How do I also get those user names cleared ?

We recently updated our environment from Casper Suite 9.97 to JAMF Pro 10.4. Since then I have seen that Self Service takes a longer to install when using Web Enrollment. On 9.97 Self Service installed almost immediately. Now it takes 10-15 minutes and some techs report over an hour. I currently have Self Service to install automatically.

Hey Jamf Admnis. Just searching for a way to push a policy on the changing stat of a EA. In detail i have a computername_individual extension attribute witch is set via jamf pro web gui by an admin. If this EA is set or changed i want to run a policy witchs checks the computername_induvidual EA of the client and rename it. I have build a script with jamf api commands that is checking the EA and renames the computer if needed so far. So i created a smard group with computername_individual is set and a policy with the script + smart group. If some is changing the EA again i have set the policy to ongoing once a week/once a day. Is there a way to push this policy to the clients instead of runnung it every day? Thank you for some tips.

I am trying to read a plist from the recovery partition on my lab machines specifically the ProductVersion Key value from com.apple.recovery.boot/SystemVersion.plist I have tried defaults read and all I get is plist does not exist. I am trying to create an extension attribute that reads that value but I am stuck without the defaults command I was thinking xmllint might work but I am having trouble with the syntax. Any and all help is appreciated!!

Hi all, This is more asking for information than having an issue that I need to solve. Are there any knowledge source or instructions available when it comes to packaging Mac Applications that requires a license? ie: When a user installs an application via self service, the application already has the companies volume license and therefore don't need to end-user to type in anything before they can start. I imagine there would be plenty of ways to achieve this, but some guidelines to get me started would be good. Giving me a URL to read up on would be great :)

I apologize if this has been asked already, but I am new to JAMF and wanted to see what you guys were doing. I would like my macs to enroll via DEP, get prompted for the user to enter the computer name, then bind to AD. The problem is I cannot figure out how to rename BEFORE it binds to AD. How are ya'll doing it? Also, if you can share your script to prompt the user to rename their computer that would be great! Thanks guys!

Hi Nation, Hoping some one can help me out. We use DFS in our organization and when ever we mount the a share at the DFS root we get odd finder windows. The window sill display but it seems as though there are no window preferences. The tool bar under view options will be disabled and navigating the network folders will open each folder in a new window. If i mount the share a little bit deeper from the DFS root they will display fine. This is at the DFS Root: This is if i mount the share a bit deeper in the DFS tree I should add I don't manage the DFS but our File Server guys are happy to help out if i can come up with a workable solution. ASh

Hi all, Do excuse me for being lazy, wondering if anyone within this Mac community have the same issue. Now that Macbook Pro 2018 models are out, our company have been purchasing them. Our company is full of docking stations running displaylink to external monitors. As such, we have been rolling out Macbooks with 10.13.3 only, as any later OS will stop displaylink from working.http://www.displaylink.com/downloads/macos Back to main topic, I tried to install/boot up the Macbook Pro 2018 with a macOS 10.13.3, it starts up with an error message "A software update is required to use this startup disk" So can anyone confirm that Macbook Pro 2018 model requires macOS 10.13.6 ? Thanks in advance.

Hey there, I'm just curious if someone could outline the pros/cons of running your JSS under TCP 8443 vs. 443? Is there a good reason why default installations use 8443 instead of 443?

I have users connecting to an internal update server that I'm taking offline and would like to point these users to apple's software updates server during this time. How can I accomplish this?

Hello all, I am trying to automate our VPN deployment, and so far I have got the software installing ok, adding the certificates correctly is a work in progress, although I can do it all via the command line with the user adding their password to allow access to their keychain. Next thing I need to try and work out is getting individual certificates onto each users machine, one way is individual pkg for each user, but this is a bit messy. While writing I have thought I could maybe script mounting a share and copying a file with $USERNAME maybe? Importing it then deleting it. Any ideas on how I could achieve this? We are using F5 ssl certificate authentication. Thanks Dave

I have added some iPads to DEP using Apple Configurator. The ipads have been enrolled to the JSS and i can see them when i sign into Apple School Manager. But when i create a PreStage Enrollement there are no devices in the scope?

Hi, I've got an EA that should return the encryption of a user certificate on a Mac. It works on all my test machines but appears to be broken on most of the machines out in the wild. The key line is : certalg=$(security find-certificate -a -c ${username} -p -Z | openssl x509 -text | grep "Signature Algorithm" | head -n1 | awk '{ print $3' ) I'm stumped trying to figure out how it goes wrong on the other machines. Anyone got any ideas? I'm sure $username is valid. // Tony

so i got to remove the SSID from the preferred list but it still is connected to that SSID, is there anyway i could shut down wifi and turn it back on real quick. that way they could connect to the actual wifi i want them too. ?

I can't seem to find clear instructions anywhere for doing an in place upgrade from MySQL 5.6 to 5.7. The community installer shows no upgrade from 5.6.35 to 5.7.x. Do I need to remove and install, or install in parallel, and then import the database from a backup? Am I missing some obvious steps somewhere?

Hello, I'm trying to create a text file on my computers that will be the assumed user of the computer. I'm doing this so this text file can be read by another application. My computers are named prefix-ID-suffix (ex. IT-ID-Mac2). The prefixes are different lengths of letters, as are the ID's, and the suffixes. Ideally I'd like to be able to get the computer name, read only the info between the hyphens, and put that in a text file. I've been unsuccessful getting the reading between the hyphens to work and was wondering if anyone had suggestions? The script below is the basic format I was attempting to use. #!/bin/sh CompName=$(scutil --get ComputerName) echo $CompName UserName=$(????) echo $UserName echo "$UserName" > /tmp/test.txt

We are setting up a File distribution point , but does that machine have to be running a server version of macOS or can it be a regular workstation version? If we use regular workstation version OS is there any limitation.

I am not using the built in Jamf Pro patch management, but I do like the Patch Management Statuses for various apps, especially the Microsoft Office apps, in the Dashboard. But looking at them, I see that in the definitions section. the newest version listed is 16.14.x, while the latest release is 16.15.x . The Macs that have updated past 16.14.x show as "version unknown". My question is when do those definitions get updated? Do I have to manually update them, or is it auto? —Douglas

What would be the cause of a "Profile Installation Failed" error? I've attached a screen shot. High Sierra installed on the VM with Parallels 13.

Hey All! I'm fairly comfortable with Casper's API manipulation but I've been wracking my brain trying to figure out this issue (maybe it's post vacation brain?). I have an extension attribute that's of type Pop-Up Menu. I've already populated the values for Pop-Up Menu. I'm basically just trying to update the Pop-Up value for each machine via the API. Except every time I try, I get a 409 - Conflict error. I'm updating the extension attribute by doing the following: #!/bin/sh JSSHostname="$JSSURL/JSSResource/computers/serialnumber/$1/subset/extensionattributes" XMLTOWRITE="<computer><extension_attributes><extension_attribute><name>Deskside Support By</name><value>$2</value></extension_attribute></extension_attributes></computer>" completeCurlCommand=`curl -s -f -k -u $APIUser:$APIPassword -X PUT -H "Content-Type: text/xml" -d "<?xml version="1.0" encoding="ISO-8859-1"?>$XMLTOWRITE" $JSSHostname --verbose` I have

Jamf Nation, Been troubleshooting FV2 on our High Sierra build for a bit now. I understand how to enable/disable a secureToken, that an account can only get a token using setup assistant and what the sysadminctl command can do etc. What I want to know can be broken down in two questions... 1. Does an administrator have to be secureToken "enabled" at all times, or once secureTokens are assigned can we disable? Or, can the administrator be secureToken enabled.... but somehow not be enabled as a FV2 boot screen login account? which leads me to my next question/issue... 2. We want to be able to see 2 users on our FV2 boot screen, one would be our Standard Users account and the other would be a generic "Standard" user account for our IT support. We do not want our admin account on the FV2 boot screen. I cannot figure out how we can accomplish this simply. I have tried giving temporary admin rights to the generic account and removing rights from the admin accounts for encryption

Anybody else experiencing issues with High Sierra integrating with AD in your environment? We're currently having issues where accounts that should have binding rights not allowing a bind, issues involving changing the password of AD accounts, and sporadic issues where mobile accounts can not be created at a lock screen. The frustrating part is that no issue occurs on all machines, but they occur consistently on the machines where we experience them.

I have a group of computers that are being images with Casper, but they do not want the machines to be managed beyond that. I currently have a site setup for them, and the only policy is one scoped to all machines that runs jamf removeFramework. The problem is that the machines no longer check in and do not report whether they have run the policy successfully. Has anyone had a similar requirement and been able to handle it gracefully? I would like the machines to exist in the JSS, but report as being unmanaged.

I had scoped a Config Profile (Login Window payload; change to name and password text fields) to a lab of iMacs. I noticed that the profile was working inconsistently, so I unscoped it and decided to tackle this with a command. However, I cannot make this change via command or in the GUI. If I go into the OS, this feature is greyed out in Users & Groups and cannot be changed. When I look at Profiles in System Preferences, this Config Profile is gone. Is it sometimes necessary to wait an extended period of time before weirdness caused by a Config Profile is totally gone after the profile is unscoped?

Hey All,Hope all are doing well. Need suggestions on this.For some reason not able to login NetSUS webconsole. Checked list of users cut -d: -f1 /etc/passwd , surprisingly , there is no webadmin account listed. Please suggest on this.