our environment is AD bound and I would like to have our users auto login to Self Serviceour JSS>Computer Management>Self Service>Login>I have "Require login with an LDAP account, JSS user account or Single Sign On.I'm running JSS 9.96 how can I make a user to auto login into Self Service every time the user opens the Self Service app. thank you in advance for your help.

Hey all, As the title suggests, the Self Service badge on the dock is showing a notification when there is none available. Any insight would be appreciated! Thanks

Hi All, Our environment is seeing the new branded icon only when we have the self-service open. As soon as we close self-service the icon reverts back to the standard jamf icon. I called support today and we were able to figure out why this is happening but we haven't quite figured out what's causing it not work properly. Ultimately, we were able to fix the problem by changing the ownership of the self-service.app when the icon is failing to stick, the owner is for some reason set to our Jamf management account. When we change the owner to the user that's logged in, the icon sticks. So my question is why would the owner of the self-service.app be set to our management account by default? I'm going to start disabling all our policies and DEP prestage to try to narrow down what could be causing this, but if any of you have some ideas, i'm all ears . Thanks!

Hey everyone, got a problem with imaging Sierra onto systems. Brief recent history: I upgraded our JSS from 9.96 to 9.98, downloaded Sierra via the App Store, looked at the package contents, found the "Install OS X Sierra.dmg" file and dragged it into Casper Admin, then replicated the file share distribution points. I can confirm that the DMG is on both the file share distribution points, and that Casper Admin has it marked as an OS X Installer. Problem is, I added it to a few Configurations, and removed El Capitan, but now the configurations don't boot. I boot up the system, tell it to use one of the Sierra-based configs, and it goes through the whole process, but when it finished, it reboots to a black screen. No keyboard, mouse... nothing... but the screen is on. If I hold alt/option when I boot it, it shows the Untitled HD (I just leave it as Untitled and rename it later), but if I select it, it boots to a black screen again. Anyone have any idea what could be wrong? It's been

Hi everyone, I am in need of some help. We are using PhaseOne's - Capture One Pro 10 and I am having an issue with the licence/activation of this software. When sending the package out Capture One installs but asks for activation, this is happening even though when packaging the software I activate it and make the package using Composer. I have manually installed Capture One and licensed this software using an Admin account but when logging into another account (network/local) it asks for activation again. I then log back into the Admin account and run the software again but it asks for activation on this account even though I have activated and run it previous to logging out. Any help would be much appreciated as I cannot seem to work this out. Thanks

Sophos, in their infinite wisdom, is now distributing their installer for Sophos Cloud as an .app and not a .pkg. Installing, then updating, then capturing with Composer results in about a 250MB .pkg file and it's not as stable or clean as just running this 3.5MB installer on every machine. So it's easy enough to distribute this Sophos Installer.app to every machine's /Users/Shared folder (which I've done), but now I'm having issues getting the software to launch properly without error. I thought it would be as simple as this: jamf displayMessage -message "In a few seconds you will be prompted to install the new Sophos AntiVirus software onto your computer. You will be asked once per day to install this software until you've done so. It does not require a restart. Please run the installer that launches." && open -a /Users/Shared/Sophos Installer.app When I put this in the Policy --> Files & Processes --> Execute command, I get

Trying to delete a local user from a machine remotely using Jamf remote. Set parameters to completely delete the user and home folder followed by an inventory update. The log shows the user and home folder have been deleted, but the computer and inventory still show user exists. Same results when including an auto or a manual restart of the computer. If I log out as another user and then in as the user account I was trying to delete it asks to continue setup of the account like it is the first time. Such as "Sign In with Your Apple ID". What am I missing? Yes, I could just delete the user from machine manually, but what is the fun in that.

Hi guys....Newb question.... I am using Composer to create a package. One of the dependant files is located in the "/Users/~/Library" folder. When I find this folder in my user folder, and drag it in, it actually has my home folder name. I don't want this...I want this package to install this folder into "/Users/~/Library" of whatever logged in user is installed it. Is this possible? Many thanks,

Hi Guys, Our JSS is on v9.101 (upgraded from 9.96 3 days ago) and everything had been fine until this morning where we cannot login to self-service nor login to the JSS portal. after logging in with a local account the 'test' works fine and it can do all the lookups fine, any suggestions? It is using SSL to connect to the Ldap server. Thanks

We have been issued a new Creative Cloud license for our Device Licensed installs (Labs or multi-user computers) and I'm trying to find a way to scope to computers that are using the old license verses the new license. I can set a policy to run once per device that has Creative Cloud installed but hoping I can be more specific in my scoping. I ran Composer to see changes from before and after running AdobeSerialization but not finding something I could specifically focus on the see which license is in use. Has anyone done something like this or have any suggestions?

Hi all, Has anyone else seen this issue? I have just created a new .nbi on a MacBook Pro running OS 10.13.1. My OSX server is also running 10.13.1 with DS 1.7.8. I see the netboot from my client MacBook, and select it to netboot. It will load for about 10 seconds, then gives a kernel panic screen. It is also doing this when I try to netboot from an older iMac also running 10.13.1. Has anyone had a kernel panic occur at this moment in the netboot process? My system.log records the following during the attempt to connect to netboot:Nov 7 13:42:35 Mac Mini com.apple.xpc.launchd[1] (com.apple.serviceproxy[35842]): Service exited with abnormal code: 1Nov 7 13:42:35 Mac Mini com.apple.xpc.launchd[1] (com.apple.serviceproxy): Service only ran for 0 seconds. Pushing respawn out by 10 seconds. My client MacBook's crash report has "NFS mount failed: NFS server refused mount, check server configuration," but not sure what to do with this.

Hi we are in the process of taking over a primary school and already have our school linked to Jamf Pro via Active Directory(AD) and im wondering whether we can simply just add another AD server to our JAMF Pro for authentication. At present our server is internal BUT we do have a DMZ server setup for outside of school connections / access. Is it feasible and has anyone done this? if so how? Thanks.

I have an interesting situation where a student has purchased a piece of software under his personal apple id, and is reselling it to other students by signing in as himself, installing it, then signing out. I found this out by attempting to update the app in the app store and found that it prompted for another user's ID password. My question is - is there any automated way to check what ID was used to install an app? I have a smart group created with all the students who have it installed, but some may have installed it under their own ID.

Yesterday I locked a student's Mac using the Management Command. The Mac was brought in this morning and I accidentally typed in the wrong passcode. There wasn't an option to retry and the screen displayed 'try again in XX minute'. In Management history I can view the passcode, but there isn't an option to unlock. After an hour, I clicked on the trackpad to wake the Mac and there wasn't an option to unlock the Mac, just "Wrong Passcode. Try Again." Any ideas on how to unlock the student's MBP? Thanks! Corbin

Hi.We have Java 7 Update 13/now 15 in our environment.We are not able to disable the automatic update function of Java. We tried to use the com.oracle.javadeloyment.plist that we have modified before and filled the user template with it.But it's still want to update (checkbox marked). Thanks for further advice. Cheers

Hi Guys, Instead of using the old fashion policies, currently i am using the patch policies inside patch management whats seems to be working fine, but i am missing some functionality like the option for a deferral or a execution frequency or a trigger for using log-in hooks etc. Also the option to disable that the to be updated app have to quit, like Google Chrome etc does not need to be quitted. Anyone thoughts about it? Greetings,Thijs - bol.com

Hi Nation! I've been at it trying to run an AppleScript via policy in Jamf. The script is supposed to mount an smb share with the standard username/password prompt that you get with CMD+K. Below is a snippet of the script, with a debug dialog just to see that the conditionals work fine: tell application "Finder" if not (disk loggedinuser exists) then tell application "Finder" mount volume "smb://<ip-address>" as user name loggedinuser display dialog "Disk mounted!" end tell end if end tell The problem here is that it works if I execute the check-in with sudo jamf policy, but if I trigger it via login or network state change, the script runs fine and displays the dialog but it doesn't actually run anything. Now, from what I've read it sounds like user-initiated trigger and event-initiated trigger run as different users. Could someone explain to me why it doesn't work with event-triggered script and also if someone has a solution for this? Thanks,Sam

I saw this today announcing Office Insider and it put a bad taste in my mouth. Does anyone know if this is something we can suppress for Volume license installs or even O365 installs that are managed by IT?

I've been doing some work with the API and I'm trying to update the location information of a computer. I can successfully make the appropriate request using XML, but I'm unable to do the same with JSON. Setting Content-Type to "application/json" results in getting a response with the following message: "Unsupported Media Type,The server is refusing to service the request because the entity of the request is in a format not supported by the requested resource for the requested method" Is the API unable to handle JSON puts/posts or is there something I'm doing wrong? For reference I'm making the request in objective-c using the ASIHTTPRequest class. here is the JSON I'm sending: { "computer":{ "general": {"id":265}, "location":{"room":"IT Room"} } }

Anyone gotta quick and dirty way to collect a list of certificates from the System Keychain using a script / EA?

I have a task to package the Microsoft Visual Studio for Mac Security Update that was mentioned in the release notes of the April 2017 Security Update Guide, though, so far, I am unable to find a download link for the update/patch. I have looked in the Security Update Guide, even downloaded the Excel spreadsheet that contained the information and CVE's for all the security updates, though I am not finding any evidence of a update/patch for Microsoft Visual Studio for Mac What am I missing here?Thanks in advance.

Hello, I have a question regarding Enrollment Invitations when you are using SSO. we are using a cloud instance of the Jss. We have SSO setup, when you send out the invite it doesn't ask the user for their SSO credentials before downloading the QucikAdd.pkg . Is this normal or am I missing something. Thanks

I'm New to IOS management. We don't have any licenses for them yet but we were told we could go ahead and enroll a couple devices to see if it was something we wanted to get in to. I'm trying User Initiated enrollment through the enrollment URL but when installing the MDM profile it fails. When I click Install for the profile on the device it returns with "Profile installation Failed. The Server certificate for myjss.com:8443//enroll/ profile is invalid." I'm using the JSS built-in certificate but that installs onto the iPad before installing the MDM profile. Under the signings certificates section of the profile, two certificates are there. One until 2022 and one until 2027.

I read somewhere that when upgrading to Jamf pro 10, any clients under 10.10 will be running self-service 9.101. Is there anything I need to do before upgrading in regards to this or will it just work?

I have a working post install script thar installs two SMB printers. The prompt asking for credentials does not automatically appear. Instead i have to send output to the printer which are then paused waiting for authentication. A refresh/retry of the print queue forces the prompt to appear so the student can entrr there Active Directory credentials. Apart from this the script works well. Is there a specific command that can be added which brings the promt window up without the refresh of the print queue?