I have a maintenance process, let's call it, that could take awhile to execute. I want to use jamf policy to manage it. I'm trying to avoid creating a launchdaemon for this because it's temporary. It could take hours and part of the script has a hard cutoff after 10hours. I also want this to execute at 9-10pm at night during reoccurring checkin. At 10:01, I no long want this maintenance process to run. Would setting the client side limitation to not run between 10pm to 9pm work to accomplish this? Again, I want a maintenance process to run at 9-10 pm start time ONLY. Thanks in advance, you guys are the best.

We import our information from Infinite Campus to Apple School Manager, and then on to the JSS. My question is there any way to edit the classes that are imported from ASM. I need to add teachers locally to the classes as they aren't added in Infinite Campus. I tried to clone the class, but they to are unable to be edited since it came from ASM. Any ideas?

Does anyone know if it is possible to pass the default script parameters and/or the custom parameters to an applescript? It's easy enough to pass to a shell script, but I can't quite seem to figure out any syntax that will use the script parameters in an applescript. If you've managed to do this could you give a quick sample of the syntax you used to utilize the parameter as a variable?

In Patch Management logs the Date/Time entry shows NaN minutes ago. Anybody else having this problem? I remember that we never had a correct date time in Patch Management in previous Jamf Versions before. Since now no Jamf updates corrected this issue for us.JAMF 10.2.0

I've seen a lot of scripts managing Microsoft Autoupdate, but for years we have simply blocked the executable named Microsoft AutoUpdate found from the path here (and probably I went through the process of finding it's name through) ps -ef | grep AutoUpdate | grep -v grep 33849 3595 1 0 11:38AM ?? 0:00.42 /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft AutoUpdate 33849 3596 1 0 11:38AM ?? 0:00.17 /Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft AU Daemon.app/Contents/MacOS/Microsoft AU Daemon But now with Office 2016, or MAU 3.x probably, the blocked executable doesn't work anymore. Did I miss some massive change that would be causing that? After realizing that, I went and started looking at this, and am also now blocking Microsoft AU Daemon since that was not being blocked, but that does not seem to kill the process either. Thoughts? Do I need to mo

Hey All, Wondering if anyone out there has: A) installed or worked with Digital Guardian DLP software for Mac?B) successfully created an extension attribute that reports the agent version installed?C) mastered the rare art form of text manipulation in the command line and can help me regardless of the software I'm reporting on? DG's command line binary, "dgctl" has an easy way to report on the currently installed version by typing the following into a Terminal window: "dgagent/dgctl --version" which outputs the following (excessively verbose in my opinion) info: 2017-03-03 16:55:14.968 dgctl[19465:70794] DGAgent for Mac OS X version 7.1.4.00042017-03-03 16:55:14.969 dgctl[19465:70794] OK I've tried piping into tools (and combinations thereof) using sed, grep, awk, cut etc. and no matter what I try, I just get a blank response and no output. I'm looking to cut out everything except the "7.1.4.0004" ideally, but getting frustrated that I can't seem to modify the text at all. Even

I recently took over the JAMF management at my organization and only recently have attempted to deploy paid VPP apps to iOS devices. I have experienced zero issues with free apps, but the paid apps will not deploy. I purchased 12 licenses of "The Wonder Weeks" through our VPP account with "managed distribution." The apps showed up in our Mobile Device Apps, but have Codes listed next to them. When trying to scope the app to mobile devices, it either gets stuck in pending or fails immediately. The management for the scoped devices says "Pending - Application is not available to install." I have attempted to install automatically, or make it available in Self Service. If I attempt to install it automatically, it never shows up on the device. If I make it available in Self Service, it shows up in Self Service, but spins endlessly when you hit install and never actually starts. I have made sure our VPP account and token are up to date, that the VPP account and app are assigned to the sa

what is a way to enroll a Windows computer ?

The most recent release of PrintNode has an incorrect CFBundleVersion value ("4.0.0"), but the app appears to work normally after using defaults write to update that value and add a CFBundleShortVersionString value: defaults write /Applications/PrintNode.app/Contents/Info.plist CFBundleVersion 4.17.14 defaults write /Applications/PrintNode.app/Contents/Info.plist CFBundleShortVersionString 4.17.14

I'm trying to determine if a Mac is On or Off the Corporate Network when scoping policies and a found @Rosko Joshua Roskos process on his git hub page https://github.com/jamfprofessionalservices/macNetworkLocation The Issue I have run into is the API user w/ the following permissions:Read & Update permission for Computer ObjectsRead permission for Computer Extension Attributes I found Computer Extension Attributes but not Computer Objects, there is Computers but if I give this Read & Update permission the script fails at "Sending network location to Jamf Pro..." If I give the API user full admin permission the script is successful, so just need to fins out what permissions the API account needs

Hi I have a 10.13.3 .nbi file which I use the same file on various Mac mini's in different offices for reinstalling macOS however on one particular mac seems to cause the clients to kernel panic or come up with the prohibited symbol when loading to it from the network. Has anyone come across this?Have replaced the .nbi file /restarted the Mac, turned off and on the service, recreated the NetBootSP0 folder however no go. Any ideas? Thanks in advance Simon

I was looking for a way to turn some of the power save features off through Casper and I was looking at the Energy saver section of Configuration Profiles. I see "put the computer to sleep after" and "put the display to sleep after", but the range is 1 minute to 3 hours. I was looking for a way to set both of those to never. Is there a way to do that?

when i enroll a computer running fresh installation of 10.13. using the quickadd.pkg i will check on the 'profile' in system preferences , the MDM profile has the yellow alert icon and the description says functionality may be limited until this profile is approved so i manually approve it. Has anyone else seen this ??

When deploying a Configuration Profile to request an Active Directory device Certificate from our Microsoft 2008 Certificate Authority, the profile installs successfully and the certificate appears in Keychain Access. When deploying a Configuration Profile to request an Active Directory device Certificate from our Microsoft 2012 Certificate Authority, the profile installs successfully but the certificate fails to appear in Keychain Access. We migrated all of the existing certificates, configurations, templates and settings from our Microsoft 2008 Certificate Authority to a separate Microsoft 2012 Certificate Authority, so I'm assured nothing has changed there. The only lead I have managed to locate may possibly be related to the enhanced security being enabled by default on Microsoft Server 2012 (http://technet.microsoft.com/en-us/library/hh831373.aspx#BKMK_Security). Has anyone else experienced this issue with Microsoft Server 2012 and ultimately what was the solution? We cou

I'm trying to set up an extension attribute to capture the version of the Printer Logic Client. The only location I can find the version is within a file that has no extension located within this folder, 'opt/PrinterInstallerClient/' titled 'VERSION' My attempts to simply read the contents are not succeeding given the lack of a file extension by default. I might be missing something simple, but does anyone have any thoughts on how I might be able to script this extension attribute?

Any chance someone has already done the work to write an EA that can detect if a system has a recovery partition?

I'm currently on 9.96 and unable to log into the JSS with either LDAP credentials or the local admin account. What happens is when I try to login, the page refreshes and the JSS URL redirects to https://jss.mycompany.com:8443/logout.html. This is happening on all browsers on multiple computers and multiple LDAP credentials. This did not occur yesterday at all. Any ideas on what I can do?

Hi Everyone I found a "product issue". If I run a script with Jamf Pro 10 with an exit code 1 the policy will have a failed status. #!/bin/sh exit 1 I f I run the same script with the Files and Processes > Execute Command option it will not recognise the exit output. For example /usr/local/bin/my-script.sh Any idea for a workaround?

Lately I've been encountering an issue when configuring new MacBook Pros. We're currently using a thin-imaging workflow that looks like this:1. NetBoot MacBook to Imaging Server2. Without erasing the drive, we install a small package (used to create smart groups), name the computer, and the computer restarts.3. After restarting, the computer begins to run policies to install and configure software. This process works flawlessly for iMacs, but the new MacBook Pros are never enrolled in JAMF, and therefore never complete configuration. The workaround is to boot into Internet Recovery, wipe the drive, and reinstall MacOS, then start from step 1. This works almost every time. To me, this defeats the purpose of thin imaging the computer in the first place, and creates extra work and confusion for our techs. Has anyone else come across this, and are there any easier solutions? I'll add that we're on JAMF 10.0.0, but will be updating to the newest version in the next 2 weeks.

I am testing mm2270's UpdateCoreApps script and am having trouble with a few parts of it. Some parts are working like VLC. However, I'm getting the following errors when I try to install/update: Firefox:[Stage 1]: Determining current version of Firefox...HTTP/1.1 200 OKstuff removedWe have internet access, but couldn't pull version information for Firefox. Java:[Stage 1]: Generating UserAgent string...[Stage 2]: Determining current version of Oracle Java...HTTP/1.1 200 OKstuff removedWe have internet access, but couldn't pull version information for Oracle Java. Silverlight:[Stage 1]: Determining current version of Flash Player...Error when getting the download information Do I need to update the download urls?

Is there a way I can turn off Netinstall service with a script?

Greetings. I'm trying to find the best way to configure smart group criteria to detect a MacBook that doesn't have their recovery key setup in the JSS.I have a workflow to send these folks whose key is missing, but the criteria to setup a smart group doesn't seem to pick them up. We do not use Institutional keys, only personal and I do have a key-redirection config profile in place. Anyone have a working smart group to pick up when recovery keys are "Not Configured" in Jamf Pro and wouldn't mind sharing the search criteria? I've tried multiple ways and when I do it and spot check a few machines, they actually have keys in the Jamf Pro server. Thanks.

Hi, So, this weekend crashed our virtual storage platform for al our VM's, like also our Jamf Pro environment.After a succesful reboot of the machine we have logging output shown belown, also some functions are not working properly like creating a smartgroup. 2018-03-05 19:09:25,565 [ERROR] [neralPool-4] [CRUDObjectHistory ] - Error inserting object history: java.sql.BatchUpdateException: Duplicate entry '5051134' for key 'PRIMARY' Query is: INSERT INTO object_history (object_type, object_id, username, details, timestamp_epoch, object_description) VALUES(?, ?, ?, ?, ?, ?) Query is: INSERT INTO object_history (object_type, object_id, username, details, timestamp_epoch, object_description) VALUES(?, ?, ?, ?, ?, ?) at org.mariadb.jdbc.MariaDbServerPreparedStatement.executeInternal(MariaDbServerPreparedStatement.java:378) at org.mariadb.jdbc.MariaDbServerPreparedStatement.execute(MariaDbServerPreparedStatement.java:342) at org.mariadb.jdbc.Mar

First some Basic Background We are beginning to Use Apple DEP for new MAC's, so when they come, fresh out of the box, the user gets no Options, the MAC immediately looks at DEP and gets pointed at out JamfPro Cloud. This is working great, we Have a Prestage Enrollment set up and working, so we just Add the new machine to the Scope and all is peachy. The problem is that as an out of the box machine, it will default to a generic name "iMAC" or "MacbookPro" or "Mac Mini", this is no good to me as we have a strict naming standard to follow. The Prestaging via DEP does not seem allow for assigning a name in advance on a per machine basis, and believe me, although it would be useful to simply get the users to enter the name at a prompt, it's a no go option, and we want to try and make this as automated as possible. So we are now looking like waiting for the machine to be plugged in, and as soon as it Enrolls we just manually update a field on its object and at next check in it will rena

This is for my Zero Touch deployment. After Enrollment, I apply a few "Enrollment Completed" policies, and then reboot.Immediately after reboot I have a Bunch of Startup Policies, but they wont run at boot until the first policy refresh. Is there some sort of standard delay or way I can ensure that the Check In Preferences have applied, or force them to apply before my reboot ??