This is in reference to the previous thread here, https://jamfnation.jamfsoftware.com/discussion.html?id=4270 . I believe this has been working fine, but currently none of my systems are showing warranty end dates. Is Apple's site just down temporarily? Tried putting the URL in manually using a good serial number and I get "We're sorry, our system is not available at this time.". I'm just hoping this is temporary. On a related note, is there a good method of retaining historical information on extension attributes and other data? For example, if I had a weekly report that gave me all of this info, today I could go to a previous report to find the warranty end dates of all my systems... Thanks!

Since updating from 9.98 to 10.1.1, we have been noticing on some newly enrolled computers this issue: In Self Service, the available VPP assigned AppStore apps all fail. After you click Install, it spins at Installing for 15 seconds or so and then pops up a failed to install error. It then opens that app page in the AppStore. I have tried renewing the VPP service token and I checked the license counts. Everything looks good. I have tried paid apps versus free apps and both fail. I tried using a hotspot instead of our work network and it still failed. This seems to happen on 30% or so of newly enrolled computers since the upgrade of the JSS. The other 70% work just fine. Any help is appreciated! Thanks!

Hi All, I've noticed on our 9.100 install that patch reporting data is out of date. Casper thinks is current for Chrome is 63.0.3239.84, but 63.0.3239.132 is actually current. I’m also noticing Flash doesn’t know about latest version. 28.0.0.137 came out on the 9th (of January, 2018). Anyone else seeing this?

Hi all, I have a strange problem. We have a Mac that was DEPed, but due to time constraints they set up the Mac anyway using Migration Assistant, naturally I want to enroll this Mac now (though I can't put it through our standard DEP procedure as that would erase the users files etc.). However when using self enrollment, the QuickAdd.pkg installer fails as the Mac says the package is damaged. I've tried using self enrollment on another Mac and it works just fine there. Any hints as to what could be going on?

Hi all I'm trying to understand the process involved in obtaining LDAP user attributes with using Extension Attribute. I can see the option LDAP Attribute Mapping, should it just be a case of adding the attribute name that i want to report on or are there more steps involved ? (as that's not working) We have an LDAP server and correct mappings in the JSS, and inventory collection is set to Collect user and location information from LDAP. There are a couple of attributes i want to report on, i'm getting the names from Directory Utility; in the /All Domains Node/; dsAttrTypeNative:memberOfin the /Contacts/ Node; dsAttrTypeNative:msRTCSIP-PrimaryUserAddress any pointers would be greatly appreciated

Hello,i want to use Configuration Profiles > Login Window > Disable Siri setup during login. My problem is that the the profile also includes payloads that i don´t want.i.e. i don´t want to configure the LOGIN PROMPT. Neither to "Name and password text fields" or "List of users able to use these computers". Also the user should be able edit the settings in System Preferences on their own. Is there a way to exclude or remove unwanted payloads from configuration profiles?

Hi, Currently we are deploying macOS High Sierra via a deployment set with an APFS 10.13.1 .DMG file (created with autoDMG), what really works smooth but one thing is not working properly and that is; Deployment set is done, packages are installed, firstboot script is finished, and then FileVault 2 is starting to encrypt which is fine but it will cost a day to fully encrypt the disk. on macOS Sierra it will take like 80-120 minutes. Anyone an idea about this or is this expected behaviour? Greetings,Thijs - bol.com

Is anyone using Datadog or a similar product for monitoring a clustered environment? I would like to find a monitoring solution to consolidate the metrics for ease of use.

I'm pushing out the installer for High Sierra with a policy. It's in a DMG to later be executed with startosinstall from Self Service. Anyway I'm getting this error on a handful of machines and re-occuring over and over on some of the machines it's pushed to. Downloading https://MYJAMFSERVER/Packages/Install%20macOS%20High%20Sierra.dmg... Verifying DMG... Verifying package integrity... Installing Install macOS High Sierra.dmg... Error: The package "Install macOS High Sierra.dmg" could not be mounted (no mountable file systems). A lot of machines received it no problem, but a handful haven't with this error reoccurring. I thought maybe the connection was getting interrupted but it doesn't seem like that, if I SSH into a machine and execute the policy from the terminal I'll still see the error and never get booted from the SSH session. I don't believe I've ever seen this with other policies and packages before.

Hi all, your help is really appreciated! I am wondering if any of you have built an EA that I can use in on my Jamf Pro server (9.101.0)? Does this update change the OS10.13.2 build number? If so, is that (17C88)? If the supplemental update does not change the build number is there something in the OS that I can grab in an EA the definitively tells me the OS is running with the 10.13.2 Supplemental Update applied? Thanks again for your help!

Hello everyone! I have five Microsoft Office packages that I would like to combine into one larger installer. Is that possible? We would like to package it up as one major monthly update e.g. MicrosoftOffice_January2018.pkg Is this possible to do using Composer?

We would like to solely push the 11.0.2 update for Safari via the a script using either Casper Remote or a policy but I can't seem to be able to find the correct syntax to do so. I ran software update --list but did not find the correct actual spelling. Was it omitted by default? I am able to run it separately through the AppStore however... softwareupdate --listSoftware Update ToolCopyright 2002-2012 Apple Inc. Finding available softwareSoftware Update found the following new or updated software: Security Update 2017-003-10.10.5 Security Update 2017-003 (10.10.5), 399418K [recommended] [restart] RemoteDesktopClient-3.9.3 Remote Desktop Client Update (3.9.3), 8587K [recommended] * Safari10.1.2Yosemite-10.1.2 Safari (10.1.2), 71479K [recommended] I have already tried softwareupdate --install Safari-11.0.2 but no luck there... *softwareupdate --install Safari-11.0.2Software Update ToolCopyright 2002-2012 Apple Inc. Finding available softwareSafari-11.0.2:

Hi all, I don't think we can lock it down but I though I'd double check just in case!Can you prevent a user from changing the name of their iPad? I have one school in particular who are frustrated by students constantly changing the name the device. There doesn't seem to be anything in restrictions. Can anybody confirm or enlighten me?

Hi All,For those of you using SIS Infinite Campus and Apple School Manager (ASM) how are you getting support for syncing issues?My first call was to Apple and they sent me to Campus. My Campus admin is willing to make a call with me but I'm hoping to ask the right questions... Currently we have 5000 students and only 2100 are showing up in the preview, no instructors, 2300 courses. Locations looking mostly OK. Did not use last year as we barely had migrated to Campus at that time.Syncing during summer was really wack, but figured it had to do with Calendar end and start dates, based on what showed up. We actually only need Middle School but I cannot make heads or tails of what is happening.

Calling script gurus... :) #!/bin/sh # # Compare ComputerName to AD bind name, report MATCH or MISMATCH. # Check AD name mismatch COMPUTER_NAME="`scutil --get ComputerName`" AD_NAME="`dsconfigad -show | grep "Computer Account" | awk '{print $4}' | rev | cut -c 2- | rev`" if [ $COMPUTER_NAME == $AD_NAME ]; then echo "<result>MATCH</result>" else echo "<result>MISMATCH</result>" fi The script works great...except that it reports a MISMATCH if the tech bound using lower case vs upper case characters. Is there a tweak to the above script that will stop reporting MISMATCH if AD bind name is in lower case, but ComputerName is in upper case (or vice versa)? TIA,Don

I'm having a hard time trying to block/restrict update 10.13.2 how could I do that from JSS (current version 9.96 but I guess any version of JSS should be similar process) any help will be appreciated.thank you.

Hi, What is the best way to install Xerox printer via Jamf ?

JAMF NATION, I have searched the community for previous discussion etc on this but i haven't quite found what I need. I need to create a "Smart Computer Group" that can report what security updates are installed on each managed Mac. We use a SUS to roll out selected updates. What is the best way to configure this group? I have tried "Number of available updates" and set it to "more than" 0, but that report comes back with 1 Mac needing updates. I know that is wrong though because the Policy we have slated to roll out updates to all Mac's still has 50/200 left needing the install. I feel like i am missing something here. Can someone assist?

Hi Forum, Word is coming down from the top that our senior leadership team wants to revoke local admin rights on people's Macs/PCs this year. Our people are currently Admin/Managed/Mobile accounts. As such, if admin access is revoked, what's the best process for users who wish to change their AD/domain password on their Mac if they can't unlock the System preferences pane?

Hello, I am new to the Mac and Jamf world and am in need of some advice. I need to deploy a script via Policy to change the "DisconnectOnLogout" value for each NIC on a device to "NO". The below AppleScript works but it prompts for credentials. How could I change this so that it runs silently? Any assistance would be greatly appreciated! activate application "Terminal"tell application "System Events" to keystroke "sudo /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport en0 prefs DisconnectOnLogout=NO"tell application "System Events" to keystroke returndelay 2tell application "System Events" to keystroke "sudo /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport en3 prefs DisconnectOnLogout=NO"tell application "System Events" to keystroke returndelay 2tell application "Terminal" quitend tell

I put this together and tested it, thought I would share. It should work, but I suspect it could use some refinement. Maybe others will find it useful.We need to know the profile size of Outlook 2016. This EA will pull in the Outlook Profile size, in case you needed to know. currentUser=`who | grep console | awk '{print $1}' | grep -v -i '_mbsetupuser' ` result=`sudo du -shc /Users/$currentUser/Library/Group Containers/UBF8T346G9.Office/Outlook/Outlook 15 Profiles/` echo "<result>$result</result>"

We are using JAMFHelper to display a message when Software Updates are ready for install. Since the user has a chose of doing them now or waiting, some users are just moving the message box out of the way. This stops the machine from checking in until the box is closed. Is there a way to set a default response (2) and close the message box so that other policies and other check-ins happen? here is the code i'm using currently: if [ $Timer -gt 0 ]; then HELPER=`/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper -windowType utility -icon /System/Library/CoreServices/Installer.app/Contents/Resources/Installer.icns -heading "Software Updates are available for your Mac" -description "If you would like to install updates now, save all your work then click Yes (Then go grab a coffee or snack as you won't be able to use your computer). If you would NOT like to install updates now, click Cancel. You may choose to not install up

I am attempting to run a "first boot" script at the login window immediately after imaging a 10.12.6 computer with Jamf Imaging. Ideally, I would like to launch LoginLog to show the progress of the script and to prevent anyone from attempting a login while the script is running. I would also settle for using JamfHelper to put up a full-screen message to indicate that setup is taking place. Anything to just lock the screen while the script is running. I can get either of these options to work at the login window when I manually run the command through SSH or ARD, but if I have my script call either LoginLog or jamfHelper the script either hangs or proceeds without launching the specified app. It seems like lots of people have been able to successfully do what I'm trying to do here, but it just isn't working for me. Help would be much appreciated!

Hi everyone, I have a problem with NetSUSLP and Ubuntu 16. According to the product description NetSUSLP 4.1.0 is compatible with Ubuntu 16.04 LTS. Unfortunately when I launch the installer I get the following error: Verifying archive integrity... All good.Uncompressing NetSUSLP Installer..............Starting the NetSUS InstallationChecking installation requirements...Checking for a supported OS...Error: Did not detect a valid Ubuntu/RedHat/Cent OS install. if I go to check the logs I find this:Starting the NetSUS Installation[2017-12-19 12:35:12]: Checking installation requirements...[2017-12-19 12:35:12]: Checking for a supported OS...[2017-12-19 12:35:12]: Error: Did not detect a valid Ubuntu/RedHat/Cent OS install.[2017-12-19 12:35:12]:[2017-12-19 12:35:12]: Checking for a 64-bit OS...[2017-12-19 12:35:12]: OK[2017-12-19 12:35:12]: Aborting installation due to unsatisfied requirements. can someone tell me what or where am I wrong?the Ubuntu is virtualized and Version is Ubuntu

Hi there! Currently we are looking for a solution to restrict a user from loggin in onto a macOS device from our organisation except his own. Like we have on our Windows 10 devices, Logon restrictions, Certificate based loggin in into ADFS. Anyone having some good suggestions to prevent to have a user the availability to log-on multiple macOS devices. Greetings,Thijs - bol.com