I've seen this occur on average, every 1/100 devices (these Macs are all on 10.12.6 Sierra) where after completing the jamf enrollment and rebooting the mac, a large number of applications begin to exhibit behavior where the apps quit unexpectedly upon loading.The most unique thing about our enrollment is implementing the CIS script by Jamf and enabling FV2. An sample screenshot of the error is below Thoughts on how to fix or troubleshoot this??

Hi Jamf Nation Inside the Office 2016 Volume License DMG from the Microsoft Volume Licensing Server Center there is a PKG called Microsoft_Office_2016_VL_Serializer_2.0.pkg. How many times can you install this package? Is this package different for every Volume Licensing Server Center customer? I'm asking because we have multiple school which are using Office 2016 and they have the same File Share Distribution Point. It would be nice if they can use the same package instead of creating a package for every customer. Best Anver

I'm trying to create a script that will output a png file from an icns file using sips command. The script uses read to capture path to icns file, and to capture name of the png file it outputs. The script outputs the png file to /private/tmp/ directory...or it should: #!/bin/sh # Prompt for source file /usr/bin/read -p "Drag ICNS source file into Terminal and hit RETURN: " SOURCEFILE # Prompt for output file name /usr/bin/read -p "Provide output file name (no spaces!) an hit RETURN: " OUTPUTFILE # Create file /usr/bin/sips --setProperty format png --resampleHeightWidthMax 128 "$SOURCEFILE" --out /private/tmp/"$OUTPUTFILE" exit 0 The script is executable (755). I navigate to the folder and run the script (using obligatory "./" since I'm in the directory the script is in). I'm using BBEdit 12 for test. Here is what I get: $ ./createIconJSS120png.sh Drag ICNS source file into Terminal and hit RETURN

Hi, I'm trying to find a way to enable file-vault for the management account without having to do it manually (System Preferences > Security & Privacy > Filevault > Enable Users). Any Suggestions???

I have a user with a iPad running Safari in single-use mode. The browser opens to a departmental feedback page. The user needs a way to force this page to time out after 3 minutes deleting any information keyed into the page. It looks like automating the "Clear History and Website Data" is the way to go, but am not sure how to hook this call to execute on the iOS system timeout. Ive been looking but am stumped. Can anyone point me in the right direction? Cheers!

I have a MacPro (or 2 actually since I just installed a new one to replace the one I’ve been using for 3 years) that most of the time refuses to allow me to login after being idle for a while (overnight, over lunch etc.) I can ssh into it but not access it with ARD. When I arrive at my desk and touch the keyboard or mouse I can see the monitors going on (getting a signal from the MacPro to turn back on after sleep, but they all remain black (albeit with visible “background light”). reboot via ssh will do nothing more than kick me out of my ssh-session, and not let me back in. The only way I’ve found to resolve it when it happens is to power cycle the Mac - that works every time. Anyone else seen this, or have some tips on troubleshooting/solving the issue? MacPro (Late 2013) MacPro6,1Apple 27" Thunderbolt DisplayDell 27" LED Display *2Apple Wireless Keyboard (2009)Apple Magic Mouse 2MacOS 10.13.1 High Sierra (17B48)

We have a profile with the Restrictions payload set to ONLY allow TextEdit, Preview, and Printer Setup Utility. When I push that configuration profile it still allows every application like Safari and whatever else to launch. This used to work. It seems every other setting pushed with that payload works like blocking widgets and locking down System Preferences, etc. Anyone else see this behavior before? Or have a solution. I'm not sure if it's a Jamf bug or an Apple bug. I don't know the exact versions of the macOS it used to work on or the JSS version the profile was originally created on. But the current is 10.12.6 and JSS 9.101.4

We've had multiple JSS managed computers kernel panic after installing 10.13.2 The computer installs the update, requires a restart, and after FV2 drive unlock either goes into a boot loop or kernel panics. Has anyone else seen this? What's the solution here?

My student computers are currently on 10.11 and I was about to roll out 10.13 until the root issue showed up. Upgrading them to 10.13 and then having to push out another update to fix the root issue leaves too much of a window open for students to take advantage of the issue. Is there a way I can push out a fix while they are on 10.11 before updating them to 10.13? Any help is greatly appreciated.

In our library we have about 25 iMacs (21.5-inch, Mid 2011), that have recently started starting up randomly to white screens. What I've found is that the background is still the Login Window, because I can still type a username and password and it logs in, but its not showing the screen at all for some reason. Anyone else seen this? Gabe ShackneyPrinceton Public Schools

When scoping some iPad prestage enrollments, Im seeing some things work but not others. For example, the iPad is skipping the setup pieces that I have selected in the pre-stage, but its not setting the name, or the PO number or Department or user info That I've put in. It also doesnt show the Prestage info in the enrollment line of the inventory record. Anyone else seen or dealt with this? Gabe ShackneyPrinceton Public Schools

We use configuration profiles to deliver root certificates to our population (system keychain). On 10.11, possibly only 10.11.1, the configuration profile installs correctly, the certificates populate in the keychain, then some minutes later the certificates are gone despite the configuration profile still being there. This workflow has been fine on 10.10, anyone else seeing this?

How can I prevent users to uninstall the Self Service being deployed in a prestage enrolment on IoS?

Hi, Pre Sierra (or El Capitan? I dont remember..) you used to be able to edit the /Library/CoreServices/DefaultDesktop.jpg image, and it would set the background to whatever had that filename for all the users on the machine, that option now seems disabled with SIP 'operation not permitted' even when tried from terminal as root So how can I have a Default Background set for every user that logs in to the machine, but with the option of changing it if they so choose?

I was wondering if there is a way to pass Active Directory login and password resets through Jamf's traffic? I had seen an article a while back, but can't seem to find it now. (This would be for machines connecting that are not on our network). Gabe ShackneyPrinceton Public Schools

Hi, Does anyone know of a way to update slack via policy/script WHILE slack is running and in memory? I'm looking for a way to silently update slack, even if the update only loads the next time slack opens. The problem is, most of our users have slack on all the time. Thanks!

I want to update my NetSUS from 4.1 to 4.2.1. I was searching on the GitHub page for instructions on how to do an update and could not find any besides the first time install. Do I need to stop any services or uninstall anything before running the update install? I don't want to lose the account passwords and settings I have already configured. Thanks!

Hello guys , sorry for my bad English for my first thread :) I've an issue with Filevault on a new MacBook Air on 10.13.1 Filevault is appear correctly complete on system pref panels and is turn"ON" When my MBA have finished to encrypt the disk , the local admin account and the AD account (after have enabled this on FileVault pref panes ) don't appear like encrypt. The MBA restart directly to the local admin session and need the password and not showing the login screen with black icon for encrypt user enable. I've correctly settings the system login with "List of users" but nothing happened , only Local admin account is directly choose and need the password for open the session. If someone has already see this issue or something like that. Thanks a lot.

Hi all I'm jumping into Cocoa Dialog and have modified an example from @mm2270 , thanks!,i'd like to be able to display all of the output from softwareupdate -i in the Cocoa Dialog window but also write that info to a log file (which is later used to check success, if a restart is required and also so i have a record). here's what i'm testing with, if i add >> "$logpath" then the log file gets written to but Cocoa Dialog doesn't display the output fully, any advise is appreciated! cdPath="/Applications/Utilities/CocoaDialog.app/Contents/MacOS/CocoaDialog" ## Create the name pipe input for the progressbar rm -f /tmp/hpipe mkfifo /tmp/hpipe sleep 0.2 ## Display indeterminate progress bar echo "Displaying progress bar window." "$cdPath" progressbar --indeterminate --title "Installing Apple Updates" --text "Progress..." --posX "right" --posY "top" --width 225 --float --icon

Hey nation, Anyone know what the maximum recommended number of VPP licenses on a single VPP account is? I'd like to streamline our Self Service by making all free apps available to everyone rather than pin-pointing groups because it causes some confusion among users. I think it would be better for us to just scope everything to everyone and set categories intelligently. We have 1,374,618 on ours and I'm sure some people have much more. How many do you have? Have you seen any issues? Does anyone have any communication from Apple on this subject? Thanks!

Hello fellows, Could anyone share their workflow for using DEP with JAMF Pro please? Below what we'd like to achieve: iMac assigned to Apple DEP JAMF Pro Installation removes ALL setup screens and enrolls the machine in JAMF Pro. Create a local admin user on the machine Get the Jamf Binary on the machine Until now we manage to enroll the machine but Jamf Pro says it is still unmanaged and there is no user created. Any insight would be helpful since we never worked with DEP before. We (until now) use Deploy studio for a basic image with binary and then Jamf Pro takes over. You must also know we are in a school environment with shared iMacs where we can not let the students execute any installation. So it must be as "zero touch" as can be. Thanx for any input

So I'm slowly learning that JAMF uses scripts to fill in a lot of gaps with automating processes (and rightfully so, if you know what you're doing it's definitely the way to go). In my case, I don't totally know what I'm doing! Been scouring the forums today and found a bunch of scripts that can help me do what I'm trying to do, but I can't seem to piece this script together properly. I want to make a script that will run on a computer as a root, will check the users added locally to the computer. As long as they are not the account created by JAMF (the Management Account) or a Mobile account from AD, the script will remove the account and home folder from the computer the script is being ran on. This is what I have: #!/bin/sh localUsers=$(dscl . list /Users UniqueID | grep -v "_" | awk '$2 < 1000 {print $1}') For user in $localUsers do if [ "user" != "root" ] && [ "user" != "MGAdmin" ] && [ "user" != "daemon" ] && [ "user" != "nobody" ] the

I'm trying to deploy Cisco Spark but am running into permission errors. I've tried using Composer, and dragging and dropping the .app into Composer and packaging as a dmg. If I set the permission to root/admin with 755, at every launch it tells me I don't have the appropriate permission to auto-update. If I change the owner to the logged in user, it'll be fine. How can I deploy an app and set the owner always to the logged in user? Download linkhttps://www.ciscospark.com/downloads.html

Has anyone got a 10.12.3 lying around somewhere that you can send me pls? Need to use JAMF's in place upgrade and not the script hence want the older one. Thanks!

Hey All - Just got done creating all the images for 10.12.2. Our configuration profile for Login and Password holds the screen saver preference. It worked in El Capitan, yet in Sierra it is defaulting to the message screen saver. The one with the apple symbol and the computer name. When the user logs in, the ghost of the apple symbol remains for around a minute each time. Here is the config profile. On the bottom right you can see it is pointing to the Flurry.saver, which again worked for El Capitan. The file path did not change from what I can tell for Sierra. Flurry is also still available in Sierra. Any ideas why even though it is set to select that screen saver, it is defaulting to a different one? Much thanks :)