Hi guys, I love DeprecationNotifier from the Google macops team. It's used as a way to get users to update their systems. The thing is, I'm struggling to get it deployed. So it's supposed to work as a launchagent. X Code spits out a .app file which isn't really an app which can be installed so packaging it fails. It essentially only has to run at boot and it works. What would be the best way to get this up and running on client machines and how?

Hi everyone, It is that time of the year to wipe the computers in the labs and start fresh, however, I keep running into issues where policies that have a 'once per computer' execution frequency don't get triggered due to them being triggered before the wipe. We like to keep the name of the computer the same as it was previously, so my questions is, what do I need to do to implement this correctly? We are starting to use JAMF imaging with 10.12 Do I need to delete the computer from the JSS? or do I just need to run this as a script set to run at reboot in the jamf imaging jamf flushPolicyHistory The policy I am most concerned about is our install software policy. Should it be set to once per computer and triggered at enrollment? Or set to trigger at re-occurring check-in? Any kind of advice on your workflows would be great!

Sorry if I'm missing something easy here. I currently have check-ins set for every 15 minutes. I would like to set inventory to update regularly, but not as often as 15 minutes. The next available option is to set execution frequency at once per day, but it cannot be set more often than that without adjusting the check-in time. How can I trigger the policy to run at different intervals i.e. every 4 hours. Thanks!

Started testing Dockutil recently as I wouldn't mind getting some of our users Docks setup with some of our critical apps. It was working as I believe it should until I started getting apps placed into the "persistent-others" section of the dock, with a ? and they dont do anything. First noticed it with a script I'm writing, but now if I run a basic Dockutil command, like "dockutil --add "Microsoft Outlook" --position 1", it adds it to position 1, but in the "persistent-others" section fo the dock. Other Dockutil commands seem to be working fine, but no such luck with the --add. If I run a Killall Dock, the Dock reloads, but the added app doesnt change. Useful information: macOS 10.12.6, Dockutil 2.0.5, Dockutil location /usr/local/bin/ Anyone have ideas about what might be happening. Noobie to Dockutil

I am testing a policy. I want to run the policy from a command line. I know the command is jamf policy -event XXXBut Im getting "No policies were found for the "XXX" trigger I used this method in the past for testing. What could possible be the problem now? Thanks in advance

Around this time last year I implemented Apple's automatic cert renewal for our AD-based computer certificates. I am now encountering the first certs to renew. I hate to use the word "renew" because they don't renew, they get new certs with the exact same name and updated expiration dates while the old certs stay in place. The presence of the old certs at the same time the new certs are in place is causing confusion. Especially when users try to connect via VPN they are prompted to pick a cert to authenticate their connection. Is there a way to find the most current computer certificate and delete all the others that doesn't require me to get hands on with each computer? None of our users have admin rights so having them do it themselves is out.

Hi all - I'm new to all this scripting stuff, so please forgive my questions.. If I input all the office preference keys that i got from the office4mac site - and i put them all in a single script - then i run that script in terminal, will it modify all the desired preferences? Because i ran the script in my terminal & I got no errors. - And when i checked the actual plist file - nothing seemed to change.i attached the script that im using..... what am i doing wrong? #!/bin/sh #ALL_OFFICE_POLICIES #Suppresses first run windows. Only prompts user for needed information like a O365 authentication defaults write com.microsoft.office OfficeAutoSignIn -bool TRUE #Sets Office theme: 0 - Colorful, 1 - Classic defaults write com.microsoft.office kCUIThemePreferencesThemeKeyPath -int 1 #"Sets value of 'Belongs to' field in the About Box. defaults write com.microsoft.office OfficeActivationEmailAddress -string "PVHCORP" #When set to true will force the op

Hi guys! I am researching the best way to deploy SPSS to a lab bound to AD. I found this post here that helps me some: https://www.jamf.com/jamf-nation/discussions/20588/spss-24-deployment How exactly does this work? Do I put the silent installer DMG into a policy? We have a license server for SPSS and any kind of advice is much appreciated.

Hey, all: I have a vendor pkg wrapped in a Composer-made dmg with a postflight script that looks exactly like this: #!/bin/sh ## postflight ## ## Not supported for flat packages. installer -pkg /path/to/pkg -target / exit 0 ## Success exit 1 ## Failure When I push with Casper Remote, the pkg gets laid down where I want it, but the postflight never seems to run. JSS Version: 9.21 Tips? Something obvious? Thanks in advance for any help,Michael

Hey guys I am looking at creating a policy to deploy Mathematica to a lab nearby. We have a license server that these will connect to, and I found out there is a mathpass file that I think needs to be placed in /Library/Mathematica/Licensing/mathpass What would be the best workflow for this to happen?

Is there a way to generate a report that will show all the system names and their escrowed FileVault 2 keys (we hold them in the JSS)? I’ve reviewed the advanced computer search criteria but can’t seem to find what I need.

Wondering if anyone has any insight into this. I wrote an EA and put it up in my environment. Watching some of the results come in, I made an error and corrected it. Now the results are correct, but for those few that ran the EA already and the output is incorrect, what's the best way to get them to run it again to pull the proper results? Will they automatically re-run it at a set time/interval, or is there something I can do? Thanks...

Hello'Objective: Create smart group to report on systems that users have administrative rights.I created the extension attribute via script. It is accurately reporting accounts that have administrative rights. The problem is when I create the logic for the smart group there is no way for me to differentiate/exclude from known admin accounts. There are three possible admin accounts that may exist on a given system. When I create the criteria logic I make an entry for each that "is not" admdsk, and/or "is not" mbadmin and finish with "is not" blank. tried every possible combination of and's an or's with and with out parentheeses to no avail. I'm pretty sure this will require a appended script that will exclude the known accounts before output. I'm guessing this is an issue because the script output is multiple account name separated by a space. Here is the existing script that makes the extension attribute output. !/bin/bash Scri

Hi All, We currently have extension attributes to pull McAfee EPM and EPO version numbers. We are looking for a way to pull the HotFix version number. Has anyone come across this yet? Thanks!

Does anyone know how to re-initate the first "whats new" pop-ups for office 2016?im doing some testing and i need the pop-ups to re-appear... do i just delete a plist or something?

I have a working Jamf Production server on prem but I've been asked to set up a mirrored Development server for testing. I only want to test scripts and basic user configurations to a single test Mac. No App Store Apps or imaging.Do I have to configure DEP and/or VPP on this dev server if I self-enroll this single test Mac?Thanks,Randy

Hello. I was hoping someone could point me in the right direction. I'm looking for a script/command to remove client side DNS entries which were manually configured. So say I configure my DNS for Wi-Fi as 1.1.1.1, I would like something in the background which would remove these entries. I've seen from apple docs that I can set DNS servers, but not delete them. networksetup -setdnsservers "Built-in Ethernet" 192.168.100.100 192.168.100.12

Hi, is there an easy way to prevent Zoom from automatically launching after installing? We want to push it out to a set of computers, but don't want it to automatically open.

I am looking to create a Smart Computer Group which targets all Mac laptops in my environment that are not encrypted. Specifically, I would like to isolate those which have Solid-State Drives (SSD) and EXCLUDE disk drive types that are using older, rotational hard disk drives (HDD). Additionally, I would like (if possible) to exclude any plugged in media like thumb drives and external drives that may be in use. This group should only target INTERNAL media only. However, I'm not sure if that is possible. Please review my current group criteria and let me know your thoughts. Thanks!

A few of the groups we support use FontAgent Pro 5 (server/client), so we're looking at packaging it for distribution. A quick peek at the Client for FAP Server.pkg raises no flags, it's actually a pretty clean package. So wrapping it shouldn't be a problem. Pushed to logged off computer without a problem. I'm fairly certain they'll ask us to package/deploy preconfigured to point to the FAP Server so I'm hoping someone here can enlighten us on what files (or commands?) need to be put into our wrapper so when we deploy it the users will not be prompted for the FAP Server address (FQDN). How is the serial number handled for client/server environments...or is it one of those "don't worry about it, the server is the only thing that needs to be licensed" jobbies? Also, is the Client for FAP Server.pkg intelligent enough to look for existing Creative Suite and QuarkXPress applications so it can install the required Plug-In or Xtension? The preu

Does anyone have any experience with packaging EndNote X7? We created a site installer which seems to work quite well (in the sense of retaining our licence and serial details), but I'm wondering how best to handle updates, and in particular how to disable end user update prompts. I've contacted Thomson Reuters support but if previous experience is anything to go by I'll get a standard not-very-helpful response.

Hi all, I've had a few issues where VPP applications would not install and after a fair while of investigation i found that the uername listed under MDM Capable Users is not the same as the login username, in most instances the AD account had been initially set up with an incorrect spelling and the JSS picked that up and kept it as the MDM Capable username. If i remove jamfframework and re-enroll it gets the correct username and the VPP applications install ok. I'd like to create an Attribute and smart group to compare the login username with the MDM Capable username and if there's a discrepancy i'll get notified. I can see MDM Capable username listed in the JSS but can't find a way to pull it into an Extension attribute to be compared with the login username, anyone know how to list MDM capable users from the command line ?

I have a wifi config profile that needs to be installed after the Mac binds with the AD. Currently, my users have to install it via self-service but I would like it to install automatically during the deployment automation. In order to connect to our WiFi, the Mac has to be bound with the AD first prior to being able to install the wifi profile. I need to automate when it runs because if it installs the network payload automatically if will fail due to it not being bound with AD yet. Is there a way to call a configuration profile with a custom trigger or script like you can do with policies?

Since iOS 11.3.1 was released, updates are not caching to the MacOS server app on 10.12.6 or on 10.13.4 is the caching service. This appears to be due to the url that the updates has changed domains from "appldnld.apple.com" to "updates-http.cdn-apple.com" and this is not whitelisted in the Server app. example from log 2018-04-26 17:23:07.431 #SudsCaLQ8/oL Request by "itunesstored/1.0" for http://192.168.74.155:49468/2018/ios/091-78097-20180419-1837C44A-4063-11E8-A17C-2CE0FBE594B0/com_apple_MobileAsset_SoftwareUpdate/348080d1ecd8fcb42ee21a48be506d66248db38a.zip?source=updates-http.cdn-apple.com denied because the source is not whitelisted2018-04-26 17:23:07.431 #SudsCaLQ8/oL Failed with status code 400, reason code 66 I have logged this with Enterprise Support case:100519636930 who have been able to replicate the issue also.

Hello - Short story: Endpoint 10.12.2JSS 9.93 Install log : Jan 6 13:57:54 MBP13 installd[326]: PackageKit: ----- Begin install ----- Jan 6 13:57:54 MBP13 installd[326]: PackageKit: Session UUID file exists - will not overwrite /var/folders/zz/zyxvpxvq6csfxvn_n0000000000000/C/PKInstallSandboxManager/FF15EA5B-2DC8-45A9-9589-1CEC8407B759.activeSandbox Jan 6 13:58:04 MBP13 installd[326]: PackageKit: Install Failed: Error Domain=PKInstallErrorDomain Code=112 "An error occurred while running scripts from the package “QuickAdd.pkg”." UserInfo={NSFilePath=postinstall, NSURL=file://localhost/Users/badmin/Desktop/QuickAdd.pkg, PKInstallPackageIdentifier=com.jamfsoftware.osxenrollment, NSLocalizedDescription=An error occurred while running scripts from the package “QuickAdd.pkg”.} { NSFilePath = postinstall; NSLocalizedDescription = "An error occurred while running scripts from the package U201cQuickAdd.pkgU201d."; NSURL = "file://localh