Hi, I'm using a script that creates the pre-login wallpaper and saves it as com.apple.desktop.admin.png in /Library/Caches The script:1. Takes a source image (installed to each Mac via PKG)2. Grabs the Mac Screen resolution via the system_profiler command3. Using sips, resizes the image and saves this into /Library/Caches with the appropriate name4. Resets ownership and permissions on the file (Full script is available if necessary, or if you'd like to use it for your own purposes) This process works, however at the login screen the wallpaper is shown as blurry. I've discovered that if I open this generated image using 'preview' and then just click save the blur is removed when I next log in. Does anyone have any ideas what I might be missing with sips that mustn't be generating the image in a format macOS expects. The base template image was created in Photoshop and saved as a png. ThanksRyan

I keep receiving the following error when attempting to use a policy and the 10.13.5 installer app to upgrade a machine that has 10.13.4 currently. "Unable to unarchive installer. Upgrade of macOS failed" I have tried doing the upgrade with both an install policy and also a policy for caching/installing the upgrade as well. Any suggestions on what could be causing this or how to fix this issue?

I created a new 10.9.2 image with customized default profile for our MacBook Airs, including MS Office 2011, McAfee Security and then joined to our Active Directory Domain with Mobile Accounts selected. When a user logs on, the Dock includes several question marks for applications that were never part of this image. They are, however, items that are part of another image we use, but they were built in isolation from each other Once the user has logged on for the first time with the mobile account created, I remove the question marks from the dock and reboot, and they do not reappear. Any ideas of where I should start my troubleshooting?

Hi All, I am having an issue when I am deploying the Papercut Client to our Macs. I have packaged the PCClient via Composer by dragging the app into Composer, also by taking a snapshot to create a DMG and Package to see if either of these work but unfortunately I keep coming up with the same error. I have checked to make sure the permission are set correct on the machine with composer installed and have run the app on this machine before completing the snapshot and package. Any help will be much appreciated as I am at present it looks like I might have to send it out remotely or go to each mac and add this app. Thanks, Chris

Does anyone know what is the difference between deploying the "Installer" and "Updater" Office 2016 packages to Macs which already have an older Office 2016 version? Does the "Installer" reset any user settings while the "Updater" doesn't? But what is interesting is that for MAU and OneNote there are only "Updater" versions and for Skype for Business only "Installer" so what gives? Can "Updater" versions be deployed to freshly enrolled Macs without Office 2016 already installed? We use O365 subscriptions so no VLK scenario in our case. LinksMacadmins SoftwareMicrosoft Thanks

Hello there everyone! It's that wonderful time of the year when all of our school district technology gets updated for the next semester! The only upgrades we are doing this year is to High Sierra (10.13.5), Microsoft Office (16.13.18), and Adobe CC 2018. Thus far everything has gone well, except for Adobe CC 2018. We built out our IT installer package via adminconsole.adobe.com and simply placed the .pkg installer in our JAMF Admin console. The install works perfect, but the issue we run into is that every time an app is launched a popup dialog shows up asking to log into Adobe Cloud with an account. This isn't a message that has to do with licensing, as they give you the option to close it, and everything works fine--it's just frustrating that every time any program is opened a user is asked to login. This wouldn't be an issue if all students had an Adobe account, but that is not a project we wish to take on right now, nor pay for. Has anyone else run into this scenario? What wer

I'm about to pull my hair out! I think what I want is pretty simple; Screensaver -> Shifting Tiles -> Custom Source (/Library/Screen Savers/CORP) -> Shuffle -> Start after 10 mins Using a package i've dropped all the pictures (and a copy of the script) to my clients. The next step would be to activate the screensaver and (re)set it at every login. I've tried running my script under my account and everything works just fine. Now, when I run the script using Casper, or call the local script using sh /Library/Screen Savers/CORP/set_screensaver.sh nothing happens. Although, it looks like it. All settings are correct, except the right screen saver is never selected. I can't get the right screen saver picked using Casper. When i perform it on the client using terminal everything works fine. I think i'm pretty close, but I need some help on the last part. Thanks! #!/bin/sh if [[ `ioreg -rd1 -c IOPlatformExpertDevice | grep -i "UUID"

Hi, Currently we are experiencing below issue since 10.13.2, this issue is not active on 10.13.1 / 10.12.6. The finder crashes when; Copying a single file from a lower folder niveau to a higher folder niveau on a mounted network file share. The finder does not crash when; Copying a single file from a higher folder niveau to a lower folder niveau on a mounted network share. Mounted share as SMB or CIFS. Is anyone experiencing the same issue? Cheers,Thijs - bol.com

We have about 300 MacBook Pros for staffs at our university and 100 iMacs for students in computer labs. I want to have separate policies for these two "groups". For staff I want to go with the Self Service approach - users download what they want from Self Service. For labs I want everything to happen silently in the background. No Self Service installed. For now I am using a lot of exclusions for my scopes but I think it becomes unwieldy pretty quickly. I've heard some folks that have made sites and divided policies and computers amongst them two. Im thinking of going this direction. Any tips?

So we have Macbooks with dual accounts 501 is "company admin" and 502 is "assigned user" currently with admin rights thats needs to be changed to standard. I used this script and it worked like a champ: !/bin/bash while read useraccount; do /usr/sbin/dseditgroup -o edit -d $useraccount -t user admindone < <(dscl . list /Users UniqueID | awk '$2 >= 502 {print $1}') exit Problem is that in some cases the UID is flipped and 502 is the "company admin" and s a result I (the admin) locked myself out of a few macs. What would be the best way to script this so that it changes the active user logged in at the time without regard to the UID? I've tried several variations and come up with nothing productive.

Has anyone tried to install Cisco AnyConnect using the -applyChoiceChangesXML process?

Hi, We have a while a policy running that Updates Inventory, at every "recurring check-in" with execution frequency "ongoing" scoped to "all computers". JSS is giving us the message "Policies that update inventory on all computers cannot be set to ongoing frequency at recurring check-in." Our clients have a configured check-in every 30 minutes, we dont have performance issues, but what is the best way to retrieve every 30 minutes a inventory check-in Thanks!

Is there a way for me to see the battery level ("current charge") for iOS devices? In my case I've got fully DEP supervised devices in Jamf Now, and I'm looking for a UI way to do it. If UI isn't possible, I'll use an API (but I have no idea if that's even possible... is there one for Jamf Now users?).

Just got our delivery of new 300 MacBook Airs and we are setting these up via a pre-stage enrollment, working great except one sticking point. The versions of iLife and iWork are a little dated and the Mac Store is prompting for an Apple ID to update them. We are using VPP licenses to deploy these apps to all of our macs so I'm trying to figure out how to get our VPP copies on these new macs in the best way. Wondering how others are doing this? Initially, I am thinking of scripting the removal of these apps and then installing via Self Service. Thx, Tom

Hi all, I have a Macbook Pro (10.13.4) that is prompting every user to Continue or Bypass entering a Security Token code when they 1st login. This is with AD or local users. The only user it didn't ask for was the initial Admin user account we create after a command-R wipe and re-build. JSS says that 1 account is Filevault enabled. Filevault was never enabled on this Mac and isn't now. I have wiped and re-installed a few times now. Any ideas? Thanks!

Hi guys, I love DeprecationNotifier from the Google macops team. It's used as a way to get users to update their systems. The thing is, I'm struggling to get it deployed. So it's supposed to work as a launchagent. X Code spits out a .app file which isn't really an app which can be installed so packaging it fails. It essentially only has to run at boot and it works. What would be the best way to get this up and running on client machines and how?

Hi everyone, It is that time of the year to wipe the computers in the labs and start fresh, however, I keep running into issues where policies that have a 'once per computer' execution frequency don't get triggered due to them being triggered before the wipe. We like to keep the name of the computer the same as it was previously, so my questions is, what do I need to do to implement this correctly? We are starting to use JAMF imaging with 10.12 Do I need to delete the computer from the JSS? or do I just need to run this as a script set to run at reboot in the jamf imaging jamf flushPolicyHistory The policy I am most concerned about is our install software policy. Should it be set to once per computer and triggered at enrollment? Or set to trigger at re-occurring check-in? Any kind of advice on your workflows would be great!

Sorry if I'm missing something easy here. I currently have check-ins set for every 15 minutes. I would like to set inventory to update regularly, but not as often as 15 minutes. The next available option is to set execution frequency at once per day, but it cannot be set more often than that without adjusting the check-in time. How can I trigger the policy to run at different intervals i.e. every 4 hours. Thanks!

Started testing Dockutil recently as I wouldn't mind getting some of our users Docks setup with some of our critical apps. It was working as I believe it should until I started getting apps placed into the "persistent-others" section of the dock, with a ? and they dont do anything. First noticed it with a script I'm writing, but now if I run a basic Dockutil command, like "dockutil --add "Microsoft Outlook" --position 1", it adds it to position 1, but in the "persistent-others" section fo the dock. Other Dockutil commands seem to be working fine, but no such luck with the --add. If I run a Killall Dock, the Dock reloads, but the added app doesnt change. Useful information: macOS 10.12.6, Dockutil 2.0.5, Dockutil location /usr/local/bin/ Anyone have ideas about what might be happening. Noobie to Dockutil

I am testing a policy. I want to run the policy from a command line. I know the command is jamf policy -event XXXBut Im getting "No policies were found for the "XXX" trigger I used this method in the past for testing. What could possible be the problem now? Thanks in advance

Around this time last year I implemented Apple's automatic cert renewal for our AD-based computer certificates. I am now encountering the first certs to renew. I hate to use the word "renew" because they don't renew, they get new certs with the exact same name and updated expiration dates while the old certs stay in place. The presence of the old certs at the same time the new certs are in place is causing confusion. Especially when users try to connect via VPN they are prompted to pick a cert to authenticate their connection. Is there a way to find the most current computer certificate and delete all the others that doesn't require me to get hands on with each computer? None of our users have admin rights so having them do it themselves is out.

Hi all - I'm new to all this scripting stuff, so please forgive my questions.. If I input all the office preference keys that i got from the office4mac site - and i put them all in a single script - then i run that script in terminal, will it modify all the desired preferences? Because i ran the script in my terminal & I got no errors. - And when i checked the actual plist file - nothing seemed to change.i attached the script that im using..... what am i doing wrong? #!/bin/sh #ALL_OFFICE_POLICIES #Suppresses first run windows. Only prompts user for needed information like a O365 authentication defaults write com.microsoft.office OfficeAutoSignIn -bool TRUE #Sets Office theme: 0 - Colorful, 1 - Classic defaults write com.microsoft.office kCUIThemePreferencesThemeKeyPath -int 1 #"Sets value of 'Belongs to' field in the About Box. defaults write com.microsoft.office OfficeActivationEmailAddress -string "PVHCORP" #When set to true will force the op

Hi guys! I am researching the best way to deploy SPSS to a lab bound to AD. I found this post here that helps me some: https://www.jamf.com/jamf-nation/discussions/20588/spss-24-deployment How exactly does this work? Do I put the silent installer DMG into a policy? We have a license server for SPSS and any kind of advice is much appreciated.

Hey, all: I have a vendor pkg wrapped in a Composer-made dmg with a postflight script that looks exactly like this: #!/bin/sh ## postflight ## ## Not supported for flat packages. installer -pkg /path/to/pkg -target / exit 0 ## Success exit 1 ## Failure When I push with Casper Remote, the pkg gets laid down where I want it, but the postflight never seems to run. JSS Version: 9.21 Tips? Something obvious? Thanks in advance for any help,Michael

Hey guys I am looking at creating a policy to deploy Mathematica to a lab nearby. We have a license server that these will connect to, and I found out there is a mathpass file that I think needs to be placed in /Library/Mathematica/Licensing/mathpass What would be the best workflow for this to happen?