I'm not sure what I am missing here but I just want to create a new QuickAdd package in Recon.app with my user which is Administrator with Full Access and I'm getting this when hitting the "Create" button. This is a sandbox JSS with GSuite SSO enabled. The email for my user obviously matches. Ideas ?

Hi, i'm trying to setup a NetSUS server for our High Sierra macs. Have set this up however when searching for updates comes up with no new updates found (have changed the catalog and when browsing to it on safari, comes up with the XML file. Looking at the catalog XML file it's showing old updates, however not the new ones (although it's listed and ticked). Looking at the dashboard it says downloaded 432gb so imagine the updates have been downloaded. Any help would be appreciated! ThanksSimon

have a script that I'm calling via Self Service and it works perfectly. When I have another policy call the same script, it doesn't work quite right. I'll see in the logs a line:271:370: execution error: No user interaction allowed. (-1713) below is the script. It has Apple Script at the beginning to popup a window with a list of selections and then ends with basic shell scripting. #!/bin/sh nameCode=`/usr/bin/osascript <<EOT set locations to {"Office 1", "Office 2", "Office 3"} set choice to (choose from list locations with prompt "Please select the Office that best describes your location") set city to the result set code to city as text if (code = "Office 1") then set nameCode to "DAL" else if (code = "Office 2") then set nameCode to "ATL" else if (code = "Office 3") then set nameCode to "BUR" else set nameCode to "CORP" end if E

Hello All,I'd like to upload a file to the cloud distribution point(Jamf Cloud Distribution Service) with CUI(Command line User Interface). I tried uploading a file by executing the following API. curl -u username:password --tlsv1 --header Accept:application/zip --header Content-Type:application/zip --header FILE_TYPE: 0 --header FILE_NAME:zip_test.zip --header DESTINATION: 1 --header OBJECT_ID: 113 --data @/Users/username/Desktop/test/zip_test.zip --request POST https://mydomain/dbfileupload And then, When I checked the package in Jamf Admin Application,"Filename" and "Chekcsum" are displayed, but "Type" is "Missing" and the package file can not be downloaded. Is the API parameter incorrect? I would like some information.

Hi, Is there a way to find Skype version in all the managed mac devices in my company? I tried with the extension attribute but the script is not populating the results.

I have no scripting knowledge, found this script below which works for me for mounting the same network share for every user that logs in. But for our lab we have multiple local accounts and each connects to a different share folder. Is it possible to create a script that will look up the logged in user and mount a network folder based who the logged in user is?? #!/bin/sh protocol="$4" # This is the protocol to connect with (afp | smb) echo "Protocol: $4" serverName="$5" # This is the address of the server, e.g. my.fileserver.com echo "Server: $5" shareName="$6" # This is the name of the share to mount echo "Sharename: $6" # Mount the drive mount_script=`/usr/bin/osascript > /dev/null << EOT tell application "Finder" activate mount volume "$protocol://${serverName}/${shareName}" end tell EOT` exit 0

We have a Policy In place for our DEP Zero-Touch Build that enables FV2 as the Management Account, and then performs an Authenticated Restart, however on reboot the machine requires FV2 Authentication when it should not.See below Policy Log. Any Ideas ? Executing Policy InitialBuild - FV2 - Enable Using JAMF AccountAdding institutional recovery user from keychain.Adding personal recovery user.fdesetup: adding user 'JAMF' to FileVault.........................Recovery key = '(...)'FileVault is Off, but will be enabled after the next restart.Blessing i386 macOS System on /...Creating Reboot Script...

Hello I am pushing out the new Google Drive File Stream app. The app installs correctly but it does not pop up and prompt the user to login after installing. So I am trying to create a script that will open the app. The issue is that it worked on the test computer and the first 5 machines it hit. Then it started failing. Here is the script I am using. open -a /Applications/Google Drive File Stream.app Any ideas why this is not working. Here is the error message. xecuting Policy Open Drive File StreamRunning script Open Drive File Stream...Script exit code: 1Script result: LSOpenURLsWithRole() failed for the application /Applications/Google Drive File Stream.app with error -10810.<br/>Error running script: return code was 1.

I've noticed that Jamf's nomad install script that's supposed to grab the latest nomad version and download it is not grabbing the current version. I opened a bug on the site a week ago but no response :( Anybody have a quick and dirty fix for what's going wrong? Jamf's Script

In preparing for 32 bit apps and iOS 11, I've found a number of helpful posts in finding 32 bit apps I currently have in Jamf. As of this summer all of our devices will be iOS 11 and once I have all 32 bit apps removed, I'd like to my Team to be able to identify 32 bit apps before "purchasing" via VPP and again populating apps in jamf that won't even work. Has anyone found an way to identify this in VPP or other means?

Anyone know of a PPAPI check / update script? I've searched all over with no luck.

Anyone already doing this? We are experimenting with a time machine backup qnap. I'm trying to work out how to tell time machine on each computer to only backup its user folder. Didn't want to re invent the wheel. Any ideas? Gabe ShackneyPrinceton Public Schools

I decided to upgrade our JSS from 9.81 to 9.92 today. When I run the JSS Installer.msi I am prompted to "Please specify a network location for the server image of JSS product" and it defaults to the C: drive of our Windows server 2012 system. I've never gotten this prompt before with previous upgrades. I can't find any information about this in the Installation guide nor in Jamfnation. I accepted the default and clicked next. The installer went VERY quickly and was over in less than 5 seconds. Once again this is very different from previous upgrades. When I restarted the server and logged into JSS, it is still at version 9.81. I've re-downloaded the installer from My Assets just in case it's something weird with my installer... with no change. What am I missing?

I learned about the existence and use of Adobe RUM at JNUC 2015. I am using Adobe CCPackager to create packages for our Mac labs as part of Casper Imaging. However, the RUM binary seems to be missing on most of my machines or at least not in /usr/local/bin where I am expecting it to be. For my most recent packages the following commands are working: /usr/local/bin/RemoteUpdateManager --channelIds="CC (2015)--6.0--osx10--AdobeLightroom-6.0" /usr/local/bin/RemoteUpdateManager --channelIds="CC (2015)--16.0--osx10--AdobePhotoshopCC2015-16.0" A couple of newbie questions here: 1) Is there a way to tell RUM to just update everything that is already installed? 2) Can I package RUM by itself so that I can call it with commands like those above to update various apps in Adobe CC 2015? Cheers from the Great White North which is not white just yet. ;)

@dan.kubley showed me this to test if the firewall for your jamf PRO server is configured correctly: /bin/nc -z gateway.push.apple.com 2195/bin/nc -z feedback.push.apple.com 2196/bin/nc -z mdmenrollment.apple.com 443/bin/nc -z vpp.itunes.apple.com 443/bin/nc -z jamf-patch.jamfcloud.com 443/bin/curl http://ax.itunes.apple.com/WebObjects/MZStoreServices.woa/wa/wsSearch?term=birds&entity=software&&country=us

Not sure who to hate more. Electronics For Imaging, or the companies that rely on their RIPs. So the Xerox Versant 80 Press comes with three RIP options: Xerox Versant 80 Press with Xerox 80 EX 80 Print Server <--- Sierra not supported yet Xerox Versant 80 Press with Xerox 80 EX-i 80 Print Server <--- Sierra not supported yet Xerox Versant 80 Press with Xerox 80 FreeFlow Print Server <--- Sierra supported The first two Servers don't yet support macSO Sierra, as per their Xerox® Product Compatibility macOS Sierra document. Of course Xerox is like a lot of vendors who simply don't care about keeping up with new OS releases. So much easier to wait until things don't work so they can collectively point their finger at Apple. So much for running a business in today's world, where cutting corners is rewarded. ¯_(ツ)_/¯ On the off chance someone on this forum was able to get Xerox Versant 80 Press with Xerox Versant 80 EX 80 Print Server to work on Sierra, would love t

Hello Everyone, My company just got a bunch of new 2017 MacBook Pros in and after enrolling the machines to the JSS this error keeps popping up. Anyone know what that is? It's definitely JAMF related because when I remove the JAMF framework it stops appearing. Any insight would be appreciated. Linh

Had a couple of occasions where laptop users are on SSD's and they run out of space Thought i would share this #!/bin/bash # Get the currently logged in user user=`ls -l /dev/console | cut -d " " -f4` # Calculate the users home folder sizes sizeU=`su - "${user}" -c 'du -shc ~/*'` sudo /Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper -windowType utility -title "Your Home Directory Sizes" -description "$sizeU" -button1 "OK" -icon /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/HomeFolderIcon.icns -iconSize 96 I wanted to also add in some info about the boot volume using df -Hl / Unfortunately it doesnt look user friendly. Does any one have a suggestion?

I'm trying to figure out a 'one line' command for this. On windows I could:net user username /domainand it shows up in the results in human format On the mac I can do this:dscl "/Active Directory/DOMAINNAME/" -read /Users/USERNAME pwdLastSetbut the format is in nanoseconds. I don't know how to convert it to a real date. Can anyone assist?

I'm in the process of scripting deployments of our Jamf Pro Servers (RHEL6) and I keep getting prompted with this: To be installed into /usr/local/jss: * Tomcat 8.0.50 * Jamf Pro * Jamf Pro Database Utility * * NOTE: When upgrading to Tomcat 8 for the first time, the account and group named 'tomcat7' will be renamed to 'jamftomcat' Proceed? (y/n): Is there any way to run the installer script without prompts or with an answer of 'y' to the prompt? thanks, Jack

I'm trying to add another user (user3) to ssh access, but for some reason when I run the kickstart command it still doesn't gain ssh access. can someone help tweak my command? /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -on -users user1,user2,user3 -privs -all -restart -agent -menu

We usually enroll our iPads through DEP, but these were purchased through the Apple outlet and Apple said they are not eligible for DEP enrollment because of that. (They're claiming they can't put the order under our customer number for DEP to work) So I have tried enrolling them with the Apple Configurator and with User Initiated Enrollment. In both situations, I get an error saying the MDM Profile is Invalid. I checked the date and time and trusted the certificate in Settings->About->Certificate Trust Settings. I also followed the instructions here: https://www.jamf.com/jamf-nation/articles/192/mobile-device-enrollment-error-invalid-profile-or-invalid-certificate and restarted tomcat. Nothing I have found has worked. The Configurator says Profile Installation Failed - Invalid Profile [MCInstallationErrorDomain - 0xFA1 (40010]. Does anyone have any ideas?

Hi all, I have a shell script to run via Casper. I'm going into my Macbook as well. The shell script did do the thing it is intended to do. So I am satisfied with the outcome. But somehow Self Service always reports back a fail. I'm checking JSS log as well as Console, they both report the script has completed successfully. But after all that, Self Service still pops up an error. Console's JAMFApplications.log shows:2016-05-09 14:07:03 <com.jamfsoftware.selfservice>: Error executing Policy "<script>"Error Domain=JAMFSoftware/SelfService Code=30 "The operation couldn’t be completed. (JAMFSoftware/SelfService error 30.)" Does anyone know what Error Code = 30 means?

We are deploying some software that prompts for local admin credentials when executed, which is problematic as most of our users have Standard accounts. I wrote up these couple of lines in bash: #!/bin/bash #Runs $PROGRAM as localadmin admin account to avoid requiring admin rights sudo -u localadmin open /Applications/Utilities/PROGRAM.app/Contents/MacOS/PROGRAM_BINARY exit 0 and made it a policy available in Self-Service. This works, in that the program does the needful even if the user has a Standard account, however, the Terminal app launches as well, and does not go away after the software is done doing what it needs to do. Is there a way to use the "open" command in a way that doesn't open Terminal? Or another way to execute an application as local admin? Thanks, -Mike

Hi All - I was wondering if there is a code/script for pop-up message/alert that will indicate what software he/she has installed after the installation completes from self-service? Example, i install a couple of apps from the self-service and forgot what they are now after one app completed installation it will pop-out an alert message telling me what is installed. Thanks in advance.