When scoping some iPad prestage enrollments, Im seeing some things work but not others. For example, the iPad is skipping the setup pieces that I have selected in the pre-stage, but its not setting the name, or the PO number or Department or user info That I've put in. It also doesnt show the Prestage info in the enrollment line of the inventory record. Anyone else seen or dealt with this? Gabe ShackneyPrinceton Public Schools

We use configuration profiles to deliver root certificates to our population (system keychain). On 10.11, possibly only 10.11.1, the configuration profile installs correctly, the certificates populate in the keychain, then some minutes later the certificates are gone despite the configuration profile still being there. This workflow has been fine on 10.10, anyone else seeing this?

How can I prevent users to uninstall the Self Service being deployed in a prestage enrolment on IoS?

Hi, Pre Sierra (or El Capitan? I dont remember..) you used to be able to edit the /Library/CoreServices/DefaultDesktop.jpg image, and it would set the background to whatever had that filename for all the users on the machine, that option now seems disabled with SIP 'operation not permitted' even when tried from terminal as root So how can I have a Default Background set for every user that logs in to the machine, but with the option of changing it if they so choose?

I was wondering if there is a way to pass Active Directory login and password resets through Jamf's traffic? I had seen an article a while back, but can't seem to find it now. (This would be for machines connecting that are not on our network). Gabe ShackneyPrinceton Public Schools

Hi, Does anyone know of a way to update slack via policy/script WHILE slack is running and in memory? I'm looking for a way to silently update slack, even if the update only loads the next time slack opens. The problem is, most of our users have slack on all the time. Thanks!

I want to update my NetSUS from 4.1 to 4.2.1. I was searching on the GitHub page for instructions on how to do an update and could not find any besides the first time install. Do I need to stop any services or uninstall anything before running the update install? I don't want to lose the account passwords and settings I have already configured. Thanks!

Hello guys , sorry for my bad English for my first thread :) I've an issue with Filevault on a new MacBook Air on 10.13.1 Filevault is appear correctly complete on system pref panels and is turn"ON" When my MBA have finished to encrypt the disk , the local admin account and the AD account (after have enabled this on FileVault pref panes ) don't appear like encrypt. The MBA restart directly to the local admin session and need the password and not showing the login screen with black icon for encrypt user enable. I've correctly settings the system login with "List of users" but nothing happened , only Local admin account is directly choose and need the password for open the session. If someone has already see this issue or something like that. Thanks a lot.

Hi all I'm jumping into Cocoa Dialog and have modified an example from @mm2270 , thanks!,i'd like to be able to display all of the output from softwareupdate -i in the Cocoa Dialog window but also write that info to a log file (which is later used to check success, if a restart is required and also so i have a record). here's what i'm testing with, if i add >> "$logpath" then the log file gets written to but Cocoa Dialog doesn't display the output fully, any advise is appreciated! cdPath="/Applications/Utilities/CocoaDialog.app/Contents/MacOS/CocoaDialog" ## Create the name pipe input for the progressbar rm -f /tmp/hpipe mkfifo /tmp/hpipe sleep 0.2 ## Display indeterminate progress bar echo "Displaying progress bar window." "$cdPath" progressbar --indeterminate --title "Installing Apple Updates" --text "Progress..." --posX "right" --posY "top" --width 225 --float --icon

Hey nation, Anyone know what the maximum recommended number of VPP licenses on a single VPP account is? I'd like to streamline our Self Service by making all free apps available to everyone rather than pin-pointing groups because it causes some confusion among users. I think it would be better for us to just scope everything to everyone and set categories intelligently. We have 1,374,618 on ours and I'm sure some people have much more. How many do you have? Have you seen any issues? Does anyone have any communication from Apple on this subject? Thanks!

Hello fellows, Could anyone share their workflow for using DEP with JAMF Pro please? Below what we'd like to achieve: iMac assigned to Apple DEP JAMF Pro Installation removes ALL setup screens and enrolls the machine in JAMF Pro. Create a local admin user on the machine Get the Jamf Binary on the machine Until now we manage to enroll the machine but Jamf Pro says it is still unmanaged and there is no user created. Any insight would be helpful since we never worked with DEP before. We (until now) use Deploy studio for a basic image with binary and then Jamf Pro takes over. You must also know we are in a school environment with shared iMacs where we can not let the students execute any installation. So it must be as "zero touch" as can be. Thanx for any input

So I'm slowly learning that JAMF uses scripts to fill in a lot of gaps with automating processes (and rightfully so, if you know what you're doing it's definitely the way to go). In my case, I don't totally know what I'm doing! Been scouring the forums today and found a bunch of scripts that can help me do what I'm trying to do, but I can't seem to piece this script together properly. I want to make a script that will run on a computer as a root, will check the users added locally to the computer. As long as they are not the account created by JAMF (the Management Account) or a Mobile account from AD, the script will remove the account and home folder from the computer the script is being ran on. This is what I have: #!/bin/sh localUsers=$(dscl . list /Users UniqueID | grep -v "_" | awk '$2 < 1000 {print $1}') For user in $localUsers do if [ "user" != "root" ] && [ "user" != "MGAdmin" ] && [ "user" != "daemon" ] && [ "user" != "nobody" ] the

I'm trying to deploy Cisco Spark but am running into permission errors. I've tried using Composer, and dragging and dropping the .app into Composer and packaging as a dmg. If I set the permission to root/admin with 755, at every launch it tells me I don't have the appropriate permission to auto-update. If I change the owner to the logged in user, it'll be fine. How can I deploy an app and set the owner always to the logged in user? Download linkhttps://www.ciscospark.com/downloads.html

Has anyone got a 10.12.3 lying around somewhere that you can send me pls? Need to use JAMF's in place upgrade and not the script hence want the older one. Thanks!

Hey All - Just got done creating all the images for 10.12.2. Our configuration profile for Login and Password holds the screen saver preference. It worked in El Capitan, yet in Sierra it is defaulting to the message screen saver. The one with the apple symbol and the computer name. When the user logs in, the ghost of the apple symbol remains for around a minute each time. Here is the config profile. On the bottom right you can see it is pointing to the Flurry.saver, which again worked for El Capitan. The file path did not change from what I can tell for Sierra. Flurry is also still available in Sierra. Any ideas why even though it is set to select that screen saver, it is defaulting to a different one? Much thanks :)

I have tried using the script below but i keep getting error on the macs ive pushed the policy to URLs with the type ":" are not supported The policy logs show this error: Executing Policy Jupiter Running script Jupiter Mount... Script exit code: 0 Script result: Protocol: serverName: -jupiter shareName: 48:75: execution error: Finder got an error: An error of type -5014 has occurred. (-5014) Relaunching dock(s)... #!/bin/sh protocol="$smb" # This is the protocol to connect with (afp | smb) echo "Protocol: $smb" serverName="$bc-jupiter" # This is the address of the server, e.g. my.fileserver.com echo "serverName: $bc-jupiter" shareName="$media" # This is the name of the share to mount echo "shareName: $media" # Mount the drive mount_script=`/usr/bin/osascript > /dev/null << EOT tell application "Finder" activate mount volume "$protocol://${serverNam

Hello JAMF Nation! Would someone be able to link me/upload a high quality Caper wallpaper (dark blue preferably)? I've been using a standard desktop background for my Netboot images and I would like to change that. Thanks!

We are having an issue installing Adobe Photoshop and other adobe packages on a new 5K 27” iMac that came with 10.13.1 build 17848 The specs of the Mac:Retina 5K, 27-inch 20173.4 GHz Intel Core i516 GB RAMRadeon Pro 570 4 GB500 GB SSD, Format APFS The installs fail when either pushed via JAMF Pro or when copying the installers directly to the system and running manually. Any Hints on why we are seeing the issue on this system, when we can install on a Four Thunderbolt 13” MacBook Pro running 10.13? Thanks.

I went to enable self service notifications in JP10 and it said I needed a push proxy cert. So I clicked the link and added a new certificate.. when it completes it shows the cert was installed in the list, but an " i " says it cannot add new push certificates. Can I just renew the existing MDM Push cert or do I need to create a new one because of the push proxy?

Hi community, I am packing now the Adobe CC Apps for a couple of months now and no issues so far with that. The next challenge would be now, how to manage updates for it. We are still using a serial key licensing solution and have not yet moved to a user licensed solution. The issue I am facing is, I am not able to include the companies Adobe ID within the package in order to have the users updating their apps on their own. And we don't have an update server. Any solutions you can share with me? Thanks in advance Thomas

Hey guys, I hope you can enlighten me: We have a bunch of policies that we want to be applied in order to consider a machine ready for the user, some are configured to run after enrollment, but some others are set for check-in. I am being asked to find a way (if possible) to lock the screen while all these policies apply and, when I can ensure that all are in place, unlock the screen and notify the user that the machine is ready. My approach, but I feel that it's not the best, is to call sudo jamf policy a bunch of times (5 or 6) until I get the "No policies were found", and then send a notification. Do you know of a better way to pull all the policies in a less caveman-ish way? Thanks!

Brand new to Jamf. Looking to customize our school's copy of Notability so that it can't access content from Giphy (as outlined here). I'm attempting to upload the .plist file into the app but can't find anywhere to do something like that. I have a hunch it'll be pretty easy once I know where to look – can someone point me in the right direction? Thanks!

New to Jamf. I'm looking to change some settings in Notability for iOS to disable Giphy content from being accessed by students (as mentioned on this page from their website). I'm hoping it's something easily done on a page I can't find – can someone point me in the right direction? I've downloaded the .plist file but I can't find anywhere to upload this or adjust the package contents of Notability.

Has anyone ever had to deal with a someone using a personal appleID on your IOS device and then not being able to reimage it? We have an IPad mini, Not managed, that has a former student's icloud on it. We can't do anything with it as far as I can tell. We've tried contacting the student and his parents but they haven't responded after months of trying. Apple's website doesn't offer much help other than "contact the former owner". Any Ideas? Note the device wasn't managed because we've never managed IOS devices, we're just starting to get into it now.

I'm trying to remove a Configuration Profile and overwrite a new one.I fixed the profile, re-packaged it, upped it to the casper Admin, and fixed the policy that runs it.Flushed all the existing logs so it would run again (it only runs once at machine build) But it's not working.. I'm wondering if I add a Files And Processes (that seems spelled wrong in jamf?)that: Find the config profile via path, and deletes it if found. I want it to remove the existing one and then install the new one but I have a feeling it will run backwards where it installs the profile and then deletes.... does anyone know?