I launched Composer 10.2.1 for the first time this morning and built a package successfully. I quit the app and came back to it an hour later. Now when I launch it, there are no Composer windows but the menu bar does indicate that it is running. When I click on the File menu - not the items under it but the menu itself - the Composer window appears. All my packages are gone and it says "Taking Snapshot..." and "Indexing /Applications/..." It never finishes or does anything beyond this. Any suggestions?

Two of our clustered nodes are being shown in our jamf environment with and old DNS entry, I have removed the DNS entries and make sure that the hosts and hostname files show the correct in those nodes and have restarted the vm's and they still show the old names. Is there anywhere I'm missing to make a change? Any suggestions are highly appreciated

I have been working on a simple script to divide a variable by a static integer that works just fine when run on it's own, but when run via a policy in JAMF it is throwing an error. Here is my code: warningSeconds=7200 convertTime=$((warningSeconds/60)) echo "Time: $convertTime" When I run this in terminal I get the expected result: Time: 120 However when I use this same snippet of code via a JAMF Policy, the variable is always seen as /1 and spits out the following error: line 28: /1: syntax error: operand expected (error token is "/1") Is there something simple I am missing here?

We have a volume license for N users, and we have the deployment process ready to go. Including programmatically serializing/activating the software, as well as deactivating the software. The vendor is very helpful and can provide this info if you need it. Now the hard part. How to suppress updates. I reached out to the vendor, and it looks like their tech is busy or maybe out for the day. So thought I'd post here to see if anyone responds. We're looking to disable updates, hopefully at the Local domain, rather than at the User domain. When the app is launched these files get generated: /Users/username/Library/Preferences/com.camerabits.PhotoMechanic/com.camerabits.PhotoMechanic.prefs /Users/username/Library/Preferences/com.camerabits.PhotoMechanic/com.camerabits.PhotoMechanic.prefsdb /Users/username/Library/Preferences/com.camerabits.PhotoMechanic/com.camerabits.PhotoMechanic.prefsdb.bak /Users/username/Library/Preferences/com.camerabits.PhotoMechanic/PreferencesGeneralSettings/ /

When importing users from apple school manager what is the purpose of selecting the site first? It doesn't seem to assign the user to said site when Importing. The second image is from a user that should have been imported into the "Highschool" Site. On a side note, Is there a way to scope policies and configuration profiles to classes as opposed to devices or users?

Morning all, When attempting to create an 8021.x profile to authenticate via Wifi, with WEP/WPA2 Enterprise and PEAP selected.....the configuration profile consistently removes the 'use as login window configuration' option as soon as I save the profile, which completely defeats the purpose Any idea why this is happening? I've tried different protocols but to no avail

Anyone get these Configuration Profile keys working on High Sierra? forceDelayedSoftwareUpdates require 10.13, but enforcedSoftwareUpdateDelay requires 10.13.4. https://developer.apple.com/library/content/featuredarticles/iPhoneConfigurationProfileRef/Introduction/Introduction.html#//apple_ref/doc/uid/TP40010206-CH1-SW4 Thanks,Don

So I'm trying to find a way to get users to put in their information (Name, Department, Title) during enrollment so that the machine becomes associated to them. We don't run ldap here so I'll be providing either an email invitation or directing them to our enrollment page and giving them an enroll user to use. I want to have policies based on department but would have to go in manually after getting the user enrolled to set this up. My first thought was to have some sort of script run after enrollment to request this information in cocoa dialog and then use apis to update the info per machine but I'm not very advanced in script writing... Does anyone have any thoughts about this? Another oddity I'm experiencing is not even being able to select a user that exists in "Users" in my JSS when enrolling. My second plan was just to use an api to input an XML for all users which would then allow them to select themselves on the "Assign to User" page of the enrollment process... but I type

Dear Forum Members,Since the update of Google Chrome to 57, we have issue of "Your connection is not private" error and basically Chrome doesn't work with anything now. We are waiting on a proxy upgrade and in the mean time, also told to do a workaround on all clients for Google Chrome. Basically we need to set the Chrome Policy "EnableSha1ForLocalAnchors" to true. We did for all Windows clients via Group Policy. But I have no idea what to do with the Mac Clients. Anyone can shed some lights on how to approach this on a Mac?Thanks all!

Didn't Find a Solution on here so I thought I would share mine that worked flawlessly.

Hello all, We are using JAMFPro, and have several computers that are out of date. I would like to send an email to the OS breakers, but it gives me a javax.mail.AuthenticationFailedException: 534-5.7.14 error.I have tried a different SMTP server and port, but no luck.I can use the nc -z smtp.gmail.com 587 and all tests fine. Any direction of what to try next? This was working two years ago, so it is baffling to me, nothing has changed. FW rules seem to allow it through to test it. Thanks all.

Hi , If i run sudo jamf policy or any jamf commands in terminal, getting killed: 9 error. What shall we do to fix this. Please help.

We make a policies that will change client computer name to sync what computer name on our jss. but for some reason its not syncing when we tried to Sudo jamf recon or sudo jamf manage the computer, the computer name from client computer will be sync on our jss record. and the computer name on the client computer is grayed out so we can't change it manually.

Hey, I deployed a Config Profile with an Approved Kernel Extension payload and the camera on all affected MacBooks within the scope have been disabled. I've removed the payload and pushed it back out which did not fix. I've also tried un-scoping to remove the profile from the client and still no fix. Any ideas? Cheers,M

All of our users have a home directory with the same structure. e.g. within the root there is a Documents and Desktop folder, which if they log into Windows systems is automatically redirected and Offline Files takes care of Sync. I'd like to replicate this on the Mac so when a user logs in their network Desktop and Documents folders are synchronized with the network share. The root of the network share is automatically mounted on OS X as part of their mobile account. Looking at the Sync Rules I am not quite sure what to enter, as I would have expected something like a source and destination field but there only the ability to add a path. So, if I wanted to sync homedesktop to the local desktop what would I need to do? Thanks

Does anyone (Don perhaps?) have deep experience with Robocopy? I'm using it to daily replicate my DPs but there are some files that constantly get clobbered and re-copied. The issue is that these are some of my large disk image files (like 5GB) so it's really a pain re-doing that across international links. I've tried /MIR, /E /Purge and now just /E but it still sees large files as newer on my source than destination. I suspect it has something to do with these large files taking long enough to write that the dates and times are off, but I can't be sure. I think if I could force it to look at date vs time that may help. Perhaps the /maxage or /minage flags?

For those of you that have used the beta JSS. I'm curious about the new Lost Mode function from the JSS. Does the act of putting a device in Lost Mode still require an apple ID logged into iCloud? At CETPA (California Educational Technology Professionals Association) event this year Filewave mentioned they would have this ability soon, without needed an Apple ID logged into the device or iCloud account. The casper reps at the same event said that Filewave was full of it haha. However, that intrigued me because that would save my district a LOT of time. We rely heavily on still using Find-My-iPad. It would be awesome to be able to have some of that functionality without needing the iCloud account logged int.

This might be a stupid question, but when I create a profile via JSS for Ethernet with PEAP authentication and check the box for "Use Directory Authentication". After I click save and go back to edit the profile, the checkbox is unchecked. Therefore when I export the profile it doesn't work saying missing parameter "UserPassword". I spun up JSS 9.2 in a test lab and tried to create the profile there the checkbox does save, but there are no fields to type in $COMPUTERNAME that worked in 8.x and once again the profile won't work. Currently we have a script that we use to fill in computer name and password at run time before importing the profile, which works. I'm hoping to get away from relying on a script to accomplish this. Almost identical profile for WIFI works without any issues. I tried this in JSS 8.64 as well as 8.73. Using profile generate via JSS 8.64, 8.73, 9.2 I keep getting:Authenticating: can't prompt for missing properties &lt

My company is now introducing SSL certificates. We have no issue with Safari nor Chrome just Firefox because the certificate needs to be imported into the browser. We are able to create a new package with the Cert our issue is importing the certificate into FF for our existing users. Not only is the profile name dynamic, but if we do replace the db we will be overwriting the user's other certs. Is there a way to find the correct FF user profile and import the certificate into the existing db?

Our users frequently encounter an issue where at login, they are repeatedly asked for the "Local Items" keychain password. Apple details the problem and solution here, which works well , but I would love to script it and make it a Self Service or pushable item. I wrote the following simple Bash script, which works, however only if ran locally: #!/bin/bash if test -e ~/library/keychains/????????-????-????-????-????????????; then echo "Local Items keychain found" rm -rf ~/library/keychains/????????-????-????-????-???????????? else echo "No local items keychain found" exit 1 fi This is because Casper runs scripts as root, so if pushed through Remote it won't do anything to the logged in user's Keychain folder. I took a look at this discussion on JAMFnation and wrote the following, but it doesn't work whether ran locally or remotely: #!/bin/bash current_user=finger -s -l | grep Login | cut -c 8-25 if test -e /Users/$curren

Every year, we do a GRAD writing test and need spell/grammar check disabled. Unfortunately, developers have built spell checks into everything--the OS, apps, and browsers. I have run into a lot of difficulties trying to disable all layers of spell checks. We use Google Docs and I would like to disable spell check there, but it is not a global setting we can set administratively. Currently, we are using TextEdit on the Macs and disabling spell/grammar check there, but students can still just go and turn it on. Does anyone use a specific program or have any ideas for this? I plan to see if it can be put in as a feature request with Google, but thought I would see if anyone else needs to do anything similar.

Hi all, There are many discussions about how to install an AppStore app on a Mac Client. All of the discussions I have found involve interaction from the user. I really want to know if it is possible to push/ automatic install AppStore apps on Mac clients without interaction from the user. We have a lot of users who don't have an Apple ID. And as we have quite a lot of freelancers and temporary workers we mostly have users without an Apple ID and find it not making sense for these users to create an ID. Any one with insights ? regards Ronald

We are using Cisco's AMP for Endpoints (formerly Sourcefire). After updating to 10.13.4, the service is unable to start and the updated Macs are showing "AMP for Endpoints Service Unavailable" in notifications about 5 times per minute. It appears that this is related to Security & Privacy settings that are not seeing "Cisco Systems, Inc." as a trusted developer and the app is being blocked from loading. I am looking for a way to allow "Cisco Systems, Inc." through a configuration profile, script, etc. Any ideas? Thanks.

I have an Apple TV that is recognized in DEP and in a Pre-Stage but doesn't allow me to manage it (no clickable name that takes me to a management page and is not searchable). I'm trying to give it a specific name and to also force it into conference display mode. My guess is I've missed something really basic – any ideas?

I believe I downloaded the [Adobe Reader 2017 Classic](ftp://ftp.adobe.com/pub/adobe/reader/mac/Acrobat2017/1700830051/) track with the hopes of managing updates through Casper.The only thing I want to do is disable auto updates. I searched and was unable to find out how to do this.Has anyone accomplished this and if so -how?Thanks for any help.