Hi Guys, Instead of using the old fashion policies, currently i am using the patch policies inside patch management whats seems to be working fine, but i am missing some functionality like the option for a deferral or a execution frequency or a trigger for using log-in hooks etc. Also the option to disable that the to be updated app have to quit, like Google Chrome etc does not need to be quitted. Anyone thoughts about it? Greetings,Thijs - bol.com

Hi Nation! I've been at it trying to run an AppleScript via policy in Jamf. The script is supposed to mount an smb share with the standard username/password prompt that you get with CMD+K. Below is a snippet of the script, with a debug dialog just to see that the conditionals work fine: tell application "Finder" if not (disk loggedinuser exists) then tell application "Finder" mount volume "smb://<ip-address>" as user name loggedinuser display dialog "Disk mounted!" end tell end if end tell The problem here is that it works if I execute the check-in with sudo jamf policy, but if I trigger it via login or network state change, the script runs fine and displays the dialog but it doesn't actually run anything. Now, from what I've read it sounds like user-initiated trigger and event-initiated trigger run as different users. Could someone explain to me why it doesn't work with event-triggered script and also if someone has a solution for this? Thanks,Sam

I saw this today announcing Office Insider and it put a bad taste in my mouth. Does anyone know if this is something we can suppress for Volume license installs or even O365 installs that are managed by IT?

I've been doing some work with the API and I'm trying to update the location information of a computer. I can successfully make the appropriate request using XML, but I'm unable to do the same with JSON. Setting Content-Type to "application/json" results in getting a response with the following message: "Unsupported Media Type,The server is refusing to service the request because the entity of the request is in a format not supported by the requested resource for the requested method" Is the API unable to handle JSON puts/posts or is there something I'm doing wrong? For reference I'm making the request in objective-c using the ASIHTTPRequest class. here is the JSON I'm sending: { "computer":{ "general": {"id":265}, "location":{"room":"IT Room"} } }

Anyone gotta quick and dirty way to collect a list of certificates from the System Keychain using a script / EA?

I have a task to package the Microsoft Visual Studio for Mac Security Update that was mentioned in the release notes of the April 2017 Security Update Guide, though, so far, I am unable to find a download link for the update/patch. I have looked in the Security Update Guide, even downloaded the Excel spreadsheet that contained the information and CVE's for all the security updates, though I am not finding any evidence of a update/patch for Microsoft Visual Studio for Mac What am I missing here?Thanks in advance.

Hello, I have a question regarding Enrollment Invitations when you are using SSO. we are using a cloud instance of the Jss. We have SSO setup, when you send out the invite it doesn't ask the user for their SSO credentials before downloading the QucikAdd.pkg . Is this normal or am I missing something. Thanks

I'm New to IOS management. We don't have any licenses for them yet but we were told we could go ahead and enroll a couple devices to see if it was something we wanted to get in to. I'm trying User Initiated enrollment through the enrollment URL but when installing the MDM profile it fails. When I click Install for the profile on the device it returns with "Profile installation Failed. The Server certificate for myjss.com:8443//enroll/ profile is invalid." I'm using the JSS built-in certificate but that installs onto the iPad before installing the MDM profile. Under the signings certificates section of the profile, two certificates are there. One until 2022 and one until 2027.

I read somewhere that when upgrading to Jamf pro 10, any clients under 10.10 will be running self-service 9.101. Is there anything I need to do before upgrading in regards to this or will it just work?

I have a working post install script thar installs two SMB printers. The prompt asking for credentials does not automatically appear. Instead i have to send output to the printer which are then paused waiting for authentication. A refresh/retry of the print queue forces the prompt to appear so the student can entrr there Active Directory credentials. Apart from this the script works well. Is there a specific command that can be added which brings the promt window up without the refresh of the print queue?

Hello all! After upgrading to Jamf Pro 10, when I select the Patch Policies section of a patch reporting title I get the error included in the attached screenshot. Anyone seen this yet? Thanks!

Hi all, We are trying to deploy the Cisco AnyConnect default settings through the XML but we are having troubles with the default group. We are managing to deploy the settings for the server but we are not having any luck with the default group. Even using composer snapshot we can't see any changes in this file when changing the setting manually.We are using the latest version of Cisco AnyConnect.Thank you very much.

Hi Jamfsters, Is anyone seeing issues opening files made with 2017 Adobe CC not opening in Adobe CC 2018?Just checking if its a one off on the user end or others have seen this behavior tia

Is it possible to use an alternate location for printer drivers to get round System Integrity Protection, if there is whats the best location.Reason for this is i have a lpadmin script to install drivers and printers through composer however im running into problems with this issue?

OK, our school recently bought 1850 macbook airs. We had a company image them I was told by the company that because their imaging software would conflict if my os partition was named Macintosh HD I had to rename my os partition to something else, so i renamed to MacintoshHD (no space) everything got imaged and we are fine until i went to re-image in casper because, my image in casper has a space it cant find the HD. my question is there any way to script the renaming of the HD, i have tried diskutil rename / Macintosh HD and it says The new name is subject to file system-specific naming restrictions. Ownership of the specified volume may be required. Please Help.

Good afternoon everyone! I'm looking through the forums and i'm wondering if there's an easy way to pull just the last six digits of the serial number for the computer name. Below is what I have for creating the name with the full serial. Thanks for any help! #!/bin/sh /usr/sbin/jamf setComputerName -useSerialNumber -prefix 'BSM' -suffix 'AIR'

So we recently deployed Snagit to our users per their request. It's been a couple months now and things are going good, until today. I got a request to enable the Scrolling capture. Because this seems like a potential security risk, I'm working with our security team to check it out. But the other issue is our users don't have admin access, so even if we did allow it - we need a way to activate it via script. So I started by using my admin credentials and activating it on my laptop. I know the accessbilty stuff goes into the TCC.db. So I saw that it added two things into the accesbilty table when I did it manually: kTCCServiceAccessibility|com.TechSmith.Snagit|0|1|1| kTCCServiceAccessibility|com.techsmith.snagit.capturehelper|0|1|1| So I wrote a script that pretty much does that, but got into issue. Here's the quick script: #!/bin/sh sudo sqlite3 /Library/Application Support/com.apple.TCC/TCC.db "INSERT or REPLACE INTO access VALUES('kTCCService

Anyone else seeing issues with running the clear passcode command on iOS 10.3.1 devices when using the USB Ethernet adapter>USB hub>USB to Lightning dongle? I know this was is unsupported by Apple, but I am hoping its currently not broken. Running JSS 9.97.1488392992

I recently applied a policy to a Smart Group that installs some software and then restarts the computers. Checking the logs, I see the software installed properly but no mention of reboot on any so I am thinking that shutdown or restart doesn't get logged? If not, wondering if there is a custom attribute or something else that I could use to track uptime or last shutdown/restart on these computers or even all managed clients?

I have done this once before but do not remember what I choose to block students from singing into their apple id accounts in the settings tab. is it Allow modifying account settings? Thank you in advance

I'm seeing a very strange behavior with our 10.10 client images when using AD login bindings and I believe it's based on our domain structure. We currently have a top level domain SchooName.univ. There are four child domains (resource, labs, students, employees). My employee clients are being bound to resource.SchoolName.univ. In my directory binding configuration the workstations are being placed into he correct OU. Under Administrative i have "Prefer this domain server" set to employees.SchoolName.univ and "Allow authentication from any domain in the forest" checked. My issue is that we have many employees who also have accounts in the student domain. These accounts are both exactly the same user ID and password (controlled by an external IDM System). When they login to the workstation for the first time the experience is completely different than that of a normal employee. - There are several apps that have a question mark over them. -

I've been building our Office 2016 deployment, using all info scraped from JamfNation and it's working really well for deploying the 2016 install, removing 2008, setting the dock, but I'm having problems in the script with deploying preferences. I want to set the username, disable cloud signin, disable first run and enable Auto Updates with Download and install. The piece of preferences deployment that is working is the disabling of first run, no other preferences are being set properly. Would some scripting gurus kindly offer some advice? #!/bin/sh #Create the choices file and apply to the installer cat <<'EOF' >> /private/tmp/Office2016Install/choices.xml <array> <string>com.microsoft.onenote.mac</string> <string>com.microsoft.outlook</string> </array> EOF /usr/sbin/installer -pkg /private/tmp/Office2016Install/Microsoft_Office_2016_15.37.17081500_Volume_Installer.pkg -applyChoiceChangesXML /private/

Hey there, all! I saw that Office 2016 15.39.0-17101000 was released earlier today and had some folks (self included on a test computer) update their client machines. Following the update, all apps withint he Office 2016 suite are running the 15.39.0-17101000 release smoothly without any reported issues with the exception of Outlook. When launched, Outlook crashes with a generic "you can't open the application..." error. When downloading and installing the standalone Outlook 15.39.0-17101000 release, this also yields the same error from before. I am able to run the 15.38.0-17090200 release of Outlook in tandem with the other Office suite apps on 15.39.0-17101000 so this leads me to believe that the issue resides with the Outlook portion of the bundled and individual/standalone installer. I had a user report the same behavior (and error message) when updating thru MAU as well. Has anyone else observed similar issues with this latest release of Outlook? FWIW both of the affected client m

Hello guys, at the moment I am searching for a dockingstation for the latest MacBook Pro that supports two external displays (1080p), gigabit ethernet and some USB ports.I have figured out that I need a thunderbolt dockingstation for the use of two external displays.It seems that USB-C dockingstations without thunderbolt support one external display only. There are two possible dockingstations that could be used and that are already available:1. Lenovo Thinkpad Thunderbolt Dock2. Elgato Thunderbolt 3 Dock Even if the Lenovo Dockingstation is not custom-built for Apple MacBooks our company would prefer them because we are using Lenovo devices next to our Apple environment. Is there something that you could recommend to use?How do you setup your MacBook Pro workplaces if you have two use two displays?Has anyone already tested the Lenovo Thunderbolt 3 Dock?Unfortunately our displays do not support thunderbolt 3. Thank you for your help.

So I just encountered this this morning and I'm wondering if anyone else can replicate the issue? Google Drive updated yesterday (4.2017.37510). It's working on iPad Air 2's and newer iOS's (10.X and 11.X) but the issue I'm running into is the app is failing to install on iPad 2's running 9.3.5. The app appears and it's darkened out, if you click it, it will say installing and it appears to install and then it says this app is unable to download at this time. It gives you the option to click done (right back to darkened out app) or retry where it tries to redownload the app and it fails. The app is managed and pushed to all devices. I tried excluding the app from the iPad 2's and then re-adding it and it fails. I also wiped the device and it also fails. Has anyone else encountered this issue?