Hey folks. We have our JSS and our main DP on the same server. We are configuring downloads over HTTPS but have issues with getting it to work. We can fetch packages just fine when opening a browser from a client and manually entering the URL for the packages on the server. When running jamf policy -verbose from a client we get the following error: We are not using a self signed cert. Also a sidenote question; When HTTP/S is enabled, does the clients only fetch packages from HTTP/S? And SMB is only used by Casper Admin to upload packages?

Does anyone know the proper certificate format to sign a quick add package? I'm using a .pfx and it doesn't seem to be correct... is .cer correct?

Hey all, I was asked if Jamf Pro could remotely unencrypt a device... is this possible? I did search but did not get many pertinent results. Thanks, Scott

We deployed about 600 iPads this year for a 1:1 and decided not to use AppleIDs for the students. With all apps (we thought) being deployed through Device assignment no one could find a good reason to add another login to the iPads. This was fine with all the stuff we added, but what about things that are already there? Being new iPads they automatically had Garageband there for student use. We wanted to use it so we didn't try to hide it.. but when students go to use it they are prompted for an AppleID. I though I could work around this by grabbing some free GB licenses through VPP and assigning them to these iPads, forcing out the app, and checking on "Make app managed if currently installed as unmanaged", but that didn't work. Students get prompted. Anyone know of a way around this prompt which can be deployed or must students have AppleIDs?

Got a bunch of ipads that I recently wiped and update to 11.2.1 via apple configurator so I can set them up as shared iPads. I've gone to start the setup and they are defaulting to the Cupertino time zone (we're in the UK) which means the MDM enrolment profile won't install because the time is so far out. I've selected United Kingdom as part of the setup but this doesn't help. I've allowed the location services screen to appear but it doesn't get that far because it can't download the enrolment profile. Is anyone else in the UK experiencing iPads defaulting to Cupertino during the initial setup phase?

Hello JAMF Nation, This is my first post so be gentle. I am trying to create a basic script that will delete the Microsoft AutoUpdate.app from the Library. End game = I do not want users updating their own versions of Office and creating a SUS is not possible. So I figure deleting the MAU app will suffice for now. The problem is I cant get any scripting to accomplish what Im trying to do. Any help would greatly be appreciated! Signed, Beginner JAMF guy.

I previously used a configuration profile that disabled the assistant entirely. That no longer works in 10.13. So I tried running the following command on the computers: /usr/bin/defaults write "${USER_TEMPLATE}"/Library/Preferences/com.apple.SetupAssistant DidSeeSiriSetup -bool TRUE That didn't skip it. I couldn't find anything in the Configuration Profile settings to skip over it. This isn't an issue on individual users machines, but I do not want this popping up for every single person who signs into our lab computers. That's just not a good thing. Does anyone know a way to skip over "Enable Ask Siri" that works on 10.13.2?

How can I generate a report that includes all apps deployed to a list of ipads?

Dear all After Jamf enrollment some of my clients have an issue as after longer period of sleep mode computer shutdown. So I can't find any settings regarding shutdown in Jamf. I do use configuration profile without energy saver payload. Have you experienced a same problem ?

Hello, I am having trouble getting JAMF to run an update on machines. I am able to get it to download the installer, but then not install it. Here is what i did: I went to apple to download the combo installer. https://support.apple.com/kb/DL1931?locale=en_US I went to casper composer and i turned this .dmg file into a pkg. I went to my JAMF console and created a package (only option i checked was - requires restart) Next, I went to create a policy. I made the trigger as a "reoccurring check-in" and changed the execution frequency set to "once per computer". Under Scope I chose a specific computer i'm testing with. (i do realize i can make a smart group when i'm ready to do this in bulk) filled in some dummy messages under "user interactions" I went to packages and then i chose "cloud distribution point" and then i found the package i created in step 3. I then waited patiently for the machine to pick up the policy on check-in and then it downloads the package and then it display

I'm new to NetSUS (I just setup mine for the first time version 4.2.1).I'm able to block "Pro Video Formats 2.0.6" but I don't know how to block "Final Cut Pro version 10.4"any help would be appreciated...thank you.(fyi: I'm just doing a test on blocking "Final Cut Pro version 10.4" since that's what I'm not being able to block)

Anyone using examview Test Generator 8.1 with 10.10? Figure out a way to get it to print? It seems it only will print single blank sheets. The company states that 8.1 doesnt support 10.10, and that we need to subscribe to their new version to get 10.10 support. I'd rather figure out a work around. Any ideas? I think its a Java problem personally. Gabe ShackneyPrinceton Public Schools

I've read through forums and on the web and have seen a lot of different ways to do this, but I don't understand why I can't get the Self Service Icon to pop up in the Dock by using a simple policy with a Dock Item. The only thing I have had show up is a grey '?' with the path of Self Service.app" when you hover over it.I know the path I typed is correct because I have other modified Icons in the Dock that have been removed or added, and they all work perfectly. I just mirrored the syntax from those and replaced it with Self Service.app. I tried with and without spaces. I was going to try using composer to take a snap shot of the dock after manually dragging it down there, but I want to know logically why it doesn't show up like the others. It opens right up when clicking on it in the Applications folder. Any Ideas?

Hi all! I'm writing a script to allow users to send a management command to their iOS device directly from a Self Service policy on their Mac. Looking at the API documentation, the process for sending commands to iOS devices is fair bit more complicated than the standard API PUT and POST schema. I'm not really sure that I understand what is needed, so any help would be greatly appreciated! Does anyone have an example of an XML file that they've created for the purpose of sending management commands? I can't seem to find any detailed information on this anywhere! Thanks in advance!

I am having a serious brainfart and my google searches aren't giving me what I need. My MacMini server running Sierra that I'm using for Netboot and Caching (and hopefully soon Profile Manager) is telling me that the Apple Push Notification Service certificates are expiring soon (March 14) and it lists apns:com.apple.alerts apns:com.apple.calendar apns:com.apple.contact apns:com.apple.mail apns:com.apple.mgmt although I'm not using calendar, contacts, and mail at this time. The notification tells me the cert can be renewed in Server. I go to Server > Certificates and the only cert it shows is "Server Fallback SSL Certificate" that I don't remember ever setting up. I logged into the Apple Push Certifications Portal and I see my server listed but only a Revoke button next to it. How on earth do I renew the cert or even just start over with a brand new one? I can't find anywhere on the server nor in the Portal an option to create a new APN cert.

I've seen this occur on average, every 1/100 devices (these Macs are all on 10.12.6 Sierra) where after completing the jamf enrollment and rebooting the mac, a large number of applications begin to exhibit behavior where the apps quit unexpectedly upon loading.The most unique thing about our enrollment is implementing the CIS script by Jamf and enabling FV2. An sample screenshot of the error is below Thoughts on how to fix or troubleshoot this??

Hi Jamf Nation Inside the Office 2016 Volume License DMG from the Microsoft Volume Licensing Server Center there is a PKG called Microsoft_Office_2016_VL_Serializer_2.0.pkg. How many times can you install this package? Is this package different for every Volume Licensing Server Center customer? I'm asking because we have multiple school which are using Office 2016 and they have the same File Share Distribution Point. It would be nice if they can use the same package instead of creating a package for every customer. Best Anver

I'm trying to create a script that will output a png file from an icns file using sips command. The script uses read to capture path to icns file, and to capture name of the png file it outputs. The script outputs the png file to /private/tmp/ directory...or it should: #!/bin/sh # Prompt for source file /usr/bin/read -p "Drag ICNS source file into Terminal and hit RETURN: " SOURCEFILE # Prompt for output file name /usr/bin/read -p "Provide output file name (no spaces!) an hit RETURN: " OUTPUTFILE # Create file /usr/bin/sips --setProperty format png --resampleHeightWidthMax 128 "$SOURCEFILE" --out /private/tmp/"$OUTPUTFILE" exit 0 The script is executable (755). I navigate to the folder and run the script (using obligatory "./" since I'm in the directory the script is in). I'm using BBEdit 12 for test. Here is what I get: $ ./createIconJSS120png.sh Drag ICNS source file into Terminal and hit RETURN

Hi, I'm trying to find a way to enable file-vault for the management account without having to do it manually (System Preferences > Security & Privacy > Filevault > Enable Users). Any Suggestions???

I have a user with a iPad running Safari in single-use mode. The browser opens to a departmental feedback page. The user needs a way to force this page to time out after 3 minutes deleting any information keyed into the page. It looks like automating the "Clear History and Website Data" is the way to go, but am not sure how to hook this call to execute on the iOS system timeout. Ive been looking but am stumped. Can anyone point me in the right direction? Cheers!

I have a MacPro (or 2 actually since I just installed a new one to replace the one I’ve been using for 3 years) that most of the time refuses to allow me to login after being idle for a while (overnight, over lunch etc.) I can ssh into it but not access it with ARD. When I arrive at my desk and touch the keyboard or mouse I can see the monitors going on (getting a signal from the MacPro to turn back on after sleep, but they all remain black (albeit with visible “background light”). reboot via ssh will do nothing more than kick me out of my ssh-session, and not let me back in. The only way I’ve found to resolve it when it happens is to power cycle the Mac - that works every time. Anyone else seen this, or have some tips on troubleshooting/solving the issue? MacPro (Late 2013) MacPro6,1Apple 27" Thunderbolt DisplayDell 27" LED Display *2Apple Wireless Keyboard (2009)Apple Magic Mouse 2MacOS 10.13.1 High Sierra (17B48)

We have a profile with the Restrictions payload set to ONLY allow TextEdit, Preview, and Printer Setup Utility. When I push that configuration profile it still allows every application like Safari and whatever else to launch. This used to work. It seems every other setting pushed with that payload works like blocking widgets and locking down System Preferences, etc. Anyone else see this behavior before? Or have a solution. I'm not sure if it's a Jamf bug or an Apple bug. I don't know the exact versions of the macOS it used to work on or the JSS version the profile was originally created on. But the current is 10.12.6 and JSS 9.101.4

We've had multiple JSS managed computers kernel panic after installing 10.13.2 The computer installs the update, requires a restart, and after FV2 drive unlock either goes into a boot loop or kernel panics. Has anyone else seen this? What's the solution here?

My student computers are currently on 10.11 and I was about to roll out 10.13 until the root issue showed up. Upgrading them to 10.13 and then having to push out another update to fix the root issue leaves too much of a window open for students to take advantage of the issue. Is there a way I can push out a fix while they are on 10.11 before updating them to 10.13? Any help is greatly appreciated.

In our library we have about 25 iMacs (21.5-inch, Mid 2011), that have recently started starting up randomly to white screens. What I've found is that the background is still the Login Window, because I can still type a username and password and it logs in, but its not showing the screen at all for some reason. Anyone else seen this? Gabe ShackneyPrinceton Public Schools