I noticed that my MacBookPro13,2 (10.13.2-17C88) wasn't successfully sending inventory reports to Jamf Pro (v10.0.0). I tried to remedy this by initially running a sudo jamf manage command and then escalated to full-on framework removal via sudo jamf removeFramework and re-enrolling. When doing so, I received Enroll return code: 2 in the /var/log/jamf.log file. I repeated these steps by trying to enroll into our development Jamf Pro instance running the v10.2.0 beta release but receive the same error. FWIW I've tried a QuickAdd package and also user-initiated enrollment through the web interface. Neither work and I've rebooted and deleted the asset/device from Jamf each time. DEP is a non-issue as they aren't any PreStage enrollments scoped to this particular device. Any thoughts?

Beta 2 for Jamf Pro 10.2 continues to fix bugs and improve performance. This release will expand on the patch management framework by adding support for external patch sources. Software titles hosted on an external source can now be used for patch reporting, patch notifications, and even patch policies. Keep all your third-party software up to date and secure with both built-in and external patch sources. In addition to the patch management enhancements, there is support for new user fields in Apple School Manager to sync back to Jamf Pro, a new DNS Proxy payload for iOS, and the new Approved Kernel Extensions payload for macOS. How to Join the Beta: If you would like to participate in the beta program, please enroll at the beta homepage on Jamf Nation under My Assets. After enrollment, please reference our Release Notes for a complete listing of what is included in the beta build. Remember, this is a beta release. We strongly encourage that you not install this software in a produc

I have a Policy that does nothing but Enable FV2 using our Pre-Set Encryption Configuration. The Configuration just Enables FV2 using The Management Account and sets Institutional and Individual Recovery Keys. Oddly this seems to work if I take a machine and enroll it, but I get this error if the machine comes in via DEP !!! Any Idea's ? I when DEP is used the JAMF account is created first and has an ID of 501, whereas if another account already exists, it gets ID 80. I did try changing the ID to 80 but it didnt help.

is this even possible, or I need to wait for Apple to release a new OS version that includes the update ? I just received 125 laptops, 2017 MacBook Pro - I'm hoping I could make a new 10.13,2 with all updates - but its not giving me the supplemental update via AutoDMG - anyone know how I could make one, or just wait ? seems my current fix would just disable the gathering of info until I update all computers to 10.13.2+ then turn it back on, but I m afraid I ll get bit. either not updating all computers, or just forgetting to enable it again

Hi I was wondering if there was a reliable way to turn on right click for Apple mice? I've tried packaging up com.apple.driver.AppleHIDMouse.plist and creating a configuration profile from it, but neither work. Any ideas would be much appreciated. Thanks Tim

Hi everyone, I am working on deploying some in-house eBooks (PDFs, actually) to my test iOS devices. Unless my google-fu is off today, I wasn't able to find any other posts/information on why I might be having this issue. I have a JDS set up and am able to successfully upload my PDFs to it from my JSS. I have them scoped for a test iPad and can see the PDF available in Self Service on the test device. The problem comes in when I click the "Install" button within Self Service to install the PDF. It shows successful within Self Service, but when I check the logs for the device on the JSS (Device -> History -> Managed eBooks), it shows the book, but under the "management status" column, it says "Delayed" (see screenshot). I've let it sit for about an hour (actually a bit longer) and the status never changes. I've deleted and recreated the book, and I've gone so far as to set up a brand new JDS and I still experience the same issue. Any thoughts would be appreciated.

Hi, I am in the process of on-boarding a college into our JAMF Pro instance. I gave the department Admins a Quick-add package to enroll existing Macs. Turns out, they are caching a custom image for their log in screens at /Libraries/Caches. That is getting deleted at enrollment. Is there some place I am not aware of to prevent this from happening? And, I have never cached anything there in an image before-is there a better place for them to stash that image? TIA, /randy

Not sure whats going on here. But on at least two machine i game a new drive to time machine is saying those drives are read only one I have erased the drive plenty. The partition seems to no longer mount after they are erased. two same thing happens on all the accounts on the computer Im like scratching my head on this a bit

I'm trying to use Jamf Remote to do things like run software updates, screen sharing, etc and it keeps hanging on authentication. I'm assuming I need to allow a certain user (or group) in SSH. What user does Jamf use? Or, am I completely off base and something else is up?

This goes out to the JAMFers from sunny (but chilly) Jacksonville. Good luck this weekend. We might have a very unlikely Super Bowl this year - which the Jags would win. :)

This is in reference to the previous thread here, https://jamfnation.jamfsoftware.com/discussion.html?id=4270 . I believe this has been working fine, but currently none of my systems are showing warranty end dates. Is Apple's site just down temporarily? Tried putting the URL in manually using a good serial number and I get "We're sorry, our system is not available at this time.". I'm just hoping this is temporary. On a related note, is there a good method of retaining historical information on extension attributes and other data? For example, if I had a weekly report that gave me all of this info, today I could go to a previous report to find the warranty end dates of all my systems... Thanks!

Since updating from 9.98 to 10.1.1, we have been noticing on some newly enrolled computers this issue: In Self Service, the available VPP assigned AppStore apps all fail. After you click Install, it spins at Installing for 15 seconds or so and then pops up a failed to install error. It then opens that app page in the AppStore. I have tried renewing the VPP service token and I checked the license counts. Everything looks good. I have tried paid apps versus free apps and both fail. I tried using a hotspot instead of our work network and it still failed. This seems to happen on 30% or so of newly enrolled computers since the upgrade of the JSS. The other 70% work just fine. Any help is appreciated! Thanks!

Hi All, I've noticed on our 9.100 install that patch reporting data is out of date. Casper thinks is current for Chrome is 63.0.3239.84, but 63.0.3239.132 is actually current. I’m also noticing Flash doesn’t know about latest version. 28.0.0.137 came out on the 9th (of January, 2018). Anyone else seeing this?

Hi all, I have a strange problem. We have a Mac that was DEPed, but due to time constraints they set up the Mac anyway using Migration Assistant, naturally I want to enroll this Mac now (though I can't put it through our standard DEP procedure as that would erase the users files etc.). However when using self enrollment, the QuickAdd.pkg installer fails as the Mac says the package is damaged. I've tried using self enrollment on another Mac and it works just fine there. Any hints as to what could be going on?

Hi all I'm trying to understand the process involved in obtaining LDAP user attributes with using Extension Attribute. I can see the option LDAP Attribute Mapping, should it just be a case of adding the attribute name that i want to report on or are there more steps involved ? (as that's not working) We have an LDAP server and correct mappings in the JSS, and inventory collection is set to Collect user and location information from LDAP. There are a couple of attributes i want to report on, i'm getting the names from Directory Utility; in the /All Domains Node/; dsAttrTypeNative:memberOfin the /Contacts/ Node; dsAttrTypeNative:msRTCSIP-PrimaryUserAddress any pointers would be greatly appreciated

Hello,i want to use Configuration Profiles > Login Window > Disable Siri setup during login. My problem is that the the profile also includes payloads that i don´t want.i.e. i don´t want to configure the LOGIN PROMPT. Neither to "Name and password text fields" or "List of users able to use these computers". Also the user should be able edit the settings in System Preferences on their own. Is there a way to exclude or remove unwanted payloads from configuration profiles?

Hi, Currently we are deploying macOS High Sierra via a deployment set with an APFS 10.13.1 .DMG file (created with autoDMG), what really works smooth but one thing is not working properly and that is; Deployment set is done, packages are installed, firstboot script is finished, and then FileVault 2 is starting to encrypt which is fine but it will cost a day to fully encrypt the disk. on macOS Sierra it will take like 80-120 minutes. Anyone an idea about this or is this expected behaviour? Greetings,Thijs - bol.com

Is anyone using Datadog or a similar product for monitoring a clustered environment? I would like to find a monitoring solution to consolidate the metrics for ease of use.

I'm pushing out the installer for High Sierra with a policy. It's in a DMG to later be executed with startosinstall from Self Service. Anyway I'm getting this error on a handful of machines and re-occuring over and over on some of the machines it's pushed to. Downloading https://MYJAMFSERVER/Packages/Install%20macOS%20High%20Sierra.dmg... Verifying DMG... Verifying package integrity... Installing Install macOS High Sierra.dmg... Error: The package "Install macOS High Sierra.dmg" could not be mounted (no mountable file systems). A lot of machines received it no problem, but a handful haven't with this error reoccurring. I thought maybe the connection was getting interrupted but it doesn't seem like that, if I SSH into a machine and execute the policy from the terminal I'll still see the error and never get booted from the SSH session. I don't believe I've ever seen this with other policies and packages before.

Hi all, your help is really appreciated! I am wondering if any of you have built an EA that I can use in on my Jamf Pro server (9.101.0)? Does this update change the OS10.13.2 build number? If so, is that (17C88)? If the supplemental update does not change the build number is there something in the OS that I can grab in an EA the definitively tells me the OS is running with the 10.13.2 Supplemental Update applied? Thanks again for your help!

Hello everyone! I have five Microsoft Office packages that I would like to combine into one larger installer. Is that possible? We would like to package it up as one major monthly update e.g. MicrosoftOffice_January2018.pkg Is this possible to do using Composer?

We would like to solely push the 11.0.2 update for Safari via the a script using either Casper Remote or a policy but I can't seem to be able to find the correct syntax to do so. I ran software update --list but did not find the correct actual spelling. Was it omitted by default? I am able to run it separately through the AppStore however... softwareupdate --listSoftware Update ToolCopyright 2002-2012 Apple Inc. Finding available softwareSoftware Update found the following new or updated software: Security Update 2017-003-10.10.5 Security Update 2017-003 (10.10.5), 399418K [recommended] [restart] RemoteDesktopClient-3.9.3 Remote Desktop Client Update (3.9.3), 8587K [recommended] * Safari10.1.2Yosemite-10.1.2 Safari (10.1.2), 71479K [recommended] I have already tried softwareupdate --install Safari-11.0.2 but no luck there... *softwareupdate --install Safari-11.0.2Software Update ToolCopyright 2002-2012 Apple Inc. Finding available softwareSafari-11.0.2:

Hi all, I don't think we can lock it down but I though I'd double check just in case!Can you prevent a user from changing the name of their iPad? I have one school in particular who are frustrated by students constantly changing the name the device. There doesn't seem to be anything in restrictions. Can anybody confirm or enlighten me?

Hi All,For those of you using SIS Infinite Campus and Apple School Manager (ASM) how are you getting support for syncing issues?My first call was to Apple and they sent me to Campus. My Campus admin is willing to make a call with me but I'm hoping to ask the right questions... Currently we have 5000 students and only 2100 are showing up in the preview, no instructors, 2300 courses. Locations looking mostly OK. Did not use last year as we barely had migrated to Campus at that time.Syncing during summer was really wack, but figured it had to do with Calendar end and start dates, based on what showed up. We actually only need Middle School but I cannot make heads or tails of what is happening.

Calling script gurus... :) #!/bin/sh # # Compare ComputerName to AD bind name, report MATCH or MISMATCH. # Check AD name mismatch COMPUTER_NAME="`scutil --get ComputerName`" AD_NAME="`dsconfigad -show | grep "Computer Account" | awk '{print $4}' | rev | cut -c 2- | rev`" if [ $COMPUTER_NAME == $AD_NAME ]; then echo "<result>MATCH</result>" else echo "<result>MISMATCH</result>" fi The script works great...except that it reports a MISMATCH if the tech bound using lower case vs upper case characters. Is there a tweak to the above script that will stop reporting MISMATCH if AD bind name is in lower case, but ComputerName is in upper case (or vice versa)? TIA,Don