Hi guys, I remembered learning this in Jamf 200 Course, but I've forgotten about it and can't find related discussion here in Jamf Nation. We all know that we can kill process or uninstall the application if process name found, and now I can't kill process when process name contains space like Tor Brower. Please help if you know, thanks in advance

We've been using Macs for the SBAC assessment and noticed a few Mac 10.11 clients receiving this error: "Another program has started, and you will be logged out. Ask your Test Administrator for Help. Calendar" Upon receiving this error, the user is kicked out of the test and there seems to be no indication that the calendar app was launched. Has anyone else experienced this?

Hello Everyone, After updating to "10.2.0-t1518103206" my dashboard does not resize to the size of the window. Defeats the purpose of having a 21:9 monitor really... Should have shared more with the screen shot but didn't want to expose some info. I have many more smart computer groups but the max width is 4 for whatever reason. Anyone else run into this?

I've done this procedure for years.macOS 10.13.4Jamf Imaging 10.2.2 (since we hit the alphanumeric password bug)AutoDMG 1.8AutoCasperNBI 1.41 The NetBoot Image created seems to boot and image fineexcept it reboots to a flashing folder with a question mark.Happens regardless of workflow/configuration used even a 10.13.3.If the 10.13.3 NetBoot Image is used, the 10.13.4 workflow/configuration works fine. Any ideas?

Hi I have a mobile config file (eduroam) that I want to make available in self service, I want the users to download via self service and then run automatically; or cancel the install and they can copy and run on another machine. Is this possible? The mobile config file itself prompts the user for info that we can't automate and they might be downloading it for a colleague who doesn't have wifi setup on their machine. ThanksH.

2012 MBP running 10. 9 Mavericks. Attempted enrollment with Recon 9.2Error: A connection error occurred: SSH failed to start up session with host '127.0.0.1' (Remote host closed connection) Confirmed that SSH is on and the admin pw for the Management Account is correct. Tried to do a remote enrollment and received an error that port 22 is off.I confirmed that the hosts file is correct with 127.0.0.1 localhost Any ideas? Thanks!Corbin

Goal: deploy EndNote X8 so that End Users can open Word and the Cite While You Write plug-in will already be configured without needing to do anything. I've used Composer a few different ways, and the outcome seems to always be the same: Application installs, but plug-in has to be manually configured. I even tried to do a snapshot from before installing the application, to going all the way through the "Customize" portion and verifying Word opens with working plug-in. I've made dmg and pkg files, but I never get the intended outcome. Maybe I need a script to run following the install? But alas, I lack the scripting skills/knowledge. Any thoughts or advice?

Wondering if anyones seen similar behavior from their supervised iOS devices running iOS 11.3 and iWork 4.0 apps. Device is signed into iCloud, has the iCloud Drive and iWork iCloud Drive options turned on, but in the Settings of each app, I cannot choose iCloud Drive as a Default Storage option. I was first alerted to this yesterday when I opened up Pages and received a message stating my Default Storage option was no longer available and to choose another. I checked my Restrictions Config Profile, but it allows iCloud Drive. Even if I remove the device from the scope of my Restrictions profile, I'm still not able to see iCloud Drive as a Default Storage option. The only time iCloud Drive comes back as a Default Storage option is if I unmanage the device. So it does appear to be something that my JSS is restricting, just not sure what/how/why. JSS is 10.2.2 hosted.

I created a script to add to OD, but when I manually run, I get a message "Certificates are available for this server. Would you like to add them to the system keychain automatically (y/n)?"The script will wait for a response. How can I automatically respond to this question in the script so it does not wait for a response?

We use Dockutil under High Sierra to set the Dock when a user logs in. A policy is scoped to All Users, has a Trigger of Login, and a Scope of once per user per computer. The policy runs the script below. I logged in as myself and the Dock was set correctly. I dragged one App off the Dock and one App onto the Dock. I logged off and back on and the Dock was set back to the default. The App I dragged off was now in the Dock and the App I dragged on was not. Any ideas? !/bin/sh /usr/local/bin/dockutil --remove all --no-restart /Users/$3/usr/local/bin/dockutil --add /Applications/Google Chrome.app --position 1 --no-restart /Users/$3/usr/local/bin/dockutil --add /Applications/Microsoft Word.app --position 2 --no-restart /Users/$3/usr/local/bin/dockutil --add /Applications/Microsoft Excel.app --position 3 --no-restart /Users/$3/usr/local/bin/dockutil --add /Applications/Calculator.app --position 4 --no-restart /Users/$3/usr/local/bin/dockutil --add /Applications/Dashboard.app --position 5

Anyone want to share their experience or knowledge with YubiKeys in their Mac AD environment? How was your set up and what issues did you run into with users? How did it compare to your Windows users? Are you using YubiKeys on Macs below 10.12.6? Thanks for your thoughts.

computers running 10.13.5 are now getting the following policy failure when installing Sharp printer driver. Anybody have an idea on how to use this -allowUntrusted I found this installer line for iLifesudo installer -dumplog -verbose -allowUntrusted -pkg "path/to/iLife.pkg" -target / this is a self service printer install policy.the driver policy is a custom event that gets called, it's always worked so i know it's not a policy issue, it's a high sierra issue with this new Certificate trust * Installation failed. The installer reported: installer: Package name is MX-PBX1<br/>installer: Certificate used to sign package is not trusted. Use -allowUntrusted to override.

I'm sure someone's seen this before, I'm still a noob when it comes to administrating Casper. Right now we've got configuration profiles pushed out for our security settings (display message on lock screen, lock after X minutes, etc.) In the profiles, the option to allow users to reset their password IS checked - meaning users should be able to change their password. But in System Preferences>Users & Groups, the Change Password button is greyed out. Doesn't matter if you authenticate as admin user or not. Anyone seen this?

Hi All, I thought i would share with the community my method for deploying High Sierra with Casper Imaging.The method basically consists for two scripts. I have tested this with a 10.13.1 Netboot Image created with AutoDMG and AutoCasperNBI restoreMacOS.sh To deploy the correct image which runs as a "before" script imagingPostinstall. To run after reboot to run the Sierra Upgrade if needed. The first script will decide which image to deploy to the Mac based on the currently installed Operating System or File system. -If it is APFS it will deploy the 10.13.1 APFS image to the APFS container.-If it is HFS+ it will check the currently installed OS. If the OS is already 10.13 it will image using the 10.13 HFS+ image.-If the filesystem is HFS+ and the current OS is not 10.13 it will deploy 10.12.6 and then upgrade to 10.13 on next reboot using startOSInstall. Script 1 RestoreMacOS.sh This replaces your base image in your Casper Admin Config #!/bin/bash #############################

Hello, The patch definition is missing the last Firefox 52 ESR release (52.9.0). Can this please be added? It's absence is preventing us from deploying that update via a patch policy. https://www.mozilla.org/en-US/firefox/organizations/ Thanks!

Hi all Can I integrate the 'sign-in helper' with the office configuration profile? ... so once the user signs in.... everything will be implemented.

Good morning. My institution is moving forward with migrating among domains. I came across this idea to see if I could take all existing Macs from our existing domain, and upon re-binding them to the new one, append text to the description field with a Shell Script. I'm unable to move the existing objects, I must re-bind. I already have configuration profiles in place, but if anyone has any idea with how I can reference the description fields, any help would be appreciated. Effectively, I'm looking for what was already done in this PowerShell article: http://woshub.com/how-automatically-fill-computer-description-field-in-active-directory/

Greetings! I just had apple walk me through converting over to the Apple School Manager change from VPP portal. Everything seemed to go smooth but now when I look on Jamf at devices>mobile device apps it has 0 remaining on all of our apps. Looking on the ASM it has all of them. I am sure that is a user error and I forgot to upload a token or something or possibly a sneaky location I need to check somewhere. I was wondering if anyone could point me in the right direction or has run into this before. Cheers

I'm running the following script as a part of a Microsoft Office deployment. #!/bin/sh /bin/sleep 1 /Library/Application Support/JAMF/bin/dockutil --add '/Applications/Microsoft Excel.app' --replacing 'Microsoft Excel' /bin/sleep 5 /Library/Application Support/JAMF/bin/dockutil --add '/Applications/Microsoft Word.app' --replacing 'Microsoft Word' /bin/sleep 5 /Library/Application Support/JAMF/bin/dockutil --add '/Applications/Microsoft PowerPoint.app' --replacing 'Microsoft PowerPoint' /bin/sleep 5 /Library/Application Support/JAMF/bin/dockutil --add '/Applications/Microsoft OneNote.app' killall -KILL Dock exit 0 The install policy runs and returns Exit Code 0, but in the end the icons in the Dock have not changed. So I created another policy that does nothing but run this script and set it to run at recurring check-in. Again the policy logs return Exit Code 0 but the icons have not changed. However this is

Hi all, I’ve been working on a script that creates a default signature based on a HTML template and the JAMF API to get the Name and some extra info.I manage to create the signature without any problems but I can’t find a way to add it as the default signature for new emails and replies. I guess it will need to be done via applescript but I can’t manage to get it to work. Anybody found a solution to this? Thank you so much for your help :)

Whenever I run 'sudo jamf manage --verbose' on a computer, I receive the following error: $ sudo jamf manage --verbose Getting management framework from the JSS... Enforcing management framework... verbose: Timeout: 60 Checking availability of https://jss.example.com:8443/... The JSS is available. Enforcing login/logout hooks... verbose: Creating login hook... verbose: Enabling login hook... verbose: Creating logout hook... verbose: Enabling logout hook... verbose: Writing preferences for Login window... verbose: Creating startup item script... verbose: Created startup item script verbose: Creating launchd item for startup item... verbose: Attempting to install the mdm profile at the computer level. Error installing the computer level mdm profile: profiles install for file:'/Library/Application Support/JAMF/tmp/mdm.mobileconfig' and user:'root' returned -915 (Unable to contact the SCEP server at “https://jss.example.com8443//CA/SCEP”.) Problem i

Adding to the fun and excitement of High Sierra... I have my first 10.13 (17A365) test box in Jamf. My (2) local admin accounts were siccessfully created during the Casper Imaging process, but I'm unable to authenticate with them. -Can't log into the Login window.-Can't SSH with them (SSH is on).-Can't log in locally from the Terminal from another account ("login xxx").-Can't authenticate to ARD with them (ARD is active but I cant connect). Observations: 1) My local accounts are unusable regardless if the Mac is bound to AD or not. 2) Macs upgraded in-place from Sierra 10.12.6 work fine. Only Macs that are imaged "clean" from Casper Imaging 9.99 are effected. 3) The (2) local accounts are valid, and they have the correct UIDs according to DSCL. They are also in the correct local admin group (GID 80). 4) My AD accounts work (i.e the Mac recongnizes AD users/groups and allows me to log in and create a managed mobile account). 5) One of my local admin accounts is my Jamf service

After purchasing new iPads from an authorised seller, how long does it take before they show up in DEP?

Morning all, I'm working on pushing out Crashplan to my machines, I've been through the 'Deploying Crashplan with JAMFpro' several times, and from what I can tell, the editing in the user info.sh script to pass the logon details to the app, just seems to grab MY username at the time of saving the script, so every machine I push the policy out to has 'emmdee' as a username, instead to the actual logged in user I'm referring to the below - I simply uncomment the line pertaining to the user value in the user info script found in the custom installer, and then paste the below contained in step 5 1. Download the Code42 CrashPlan App Installer customization resources from your Code42 CrashPlan server by navigating to: https://YourServerAddress:4285/download/Code42CrashPlan_Custom.zip 2. On an administrator computer, extract the Code42CrashPlan_Custom.zip file. 3. Open the userInfo.sh file in the Code42CrashPlan_Custom directory with a text editor. 4. To h

I have an iPad cart of 30 iPads that are being replaced. My question is about the apps that are assigned to them. They're assigned by device, not user, etc. Can I just delete the old iPads from the jss and the apps will return to the count, then when the new ones are scoped they'll receive the apps? ThanksDavid