Hello all! After upgrading to Jamf Pro 10, when I select the Patch Policies section of a patch reporting title I get the error included in the attached screenshot. Anyone seen this yet? Thanks!

Hi all, We are trying to deploy the Cisco AnyConnect default settings through the XML but we are having troubles with the default group. We are managing to deploy the settings for the server but we are not having any luck with the default group. Even using composer snapshot we can't see any changes in this file when changing the setting manually.We are using the latest version of Cisco AnyConnect.Thank you very much.

Hi Jamfsters, Is anyone seeing issues opening files made with 2017 Adobe CC not opening in Adobe CC 2018?Just checking if its a one off on the user end or others have seen this behavior tia

Is it possible to use an alternate location for printer drivers to get round System Integrity Protection, if there is whats the best location.Reason for this is i have a lpadmin script to install drivers and printers through composer however im running into problems with this issue?

OK, our school recently bought 1850 macbook airs. We had a company image them I was told by the company that because their imaging software would conflict if my os partition was named Macintosh HD I had to rename my os partition to something else, so i renamed to MacintoshHD (no space) everything got imaged and we are fine until i went to re-image in casper because, my image in casper has a space it cant find the HD. my question is there any way to script the renaming of the HD, i have tried diskutil rename / Macintosh HD and it says The new name is subject to file system-specific naming restrictions. Ownership of the specified volume may be required. Please Help.

Good afternoon everyone! I'm looking through the forums and i'm wondering if there's an easy way to pull just the last six digits of the serial number for the computer name. Below is what I have for creating the name with the full serial. Thanks for any help! #!/bin/sh /usr/sbin/jamf setComputerName -useSerialNumber -prefix 'BSM' -suffix 'AIR'

So we recently deployed Snagit to our users per their request. It's been a couple months now and things are going good, until today. I got a request to enable the Scrolling capture. Because this seems like a potential security risk, I'm working with our security team to check it out. But the other issue is our users don't have admin access, so even if we did allow it - we need a way to activate it via script. So I started by using my admin credentials and activating it on my laptop. I know the accessbilty stuff goes into the TCC.db. So I saw that it added two things into the accesbilty table when I did it manually: kTCCServiceAccessibility|com.TechSmith.Snagit|0|1|1| kTCCServiceAccessibility|com.techsmith.snagit.capturehelper|0|1|1| So I wrote a script that pretty much does that, but got into issue. Here's the quick script: #!/bin/sh sudo sqlite3 /Library/Application Support/com.apple.TCC/TCC.db "INSERT or REPLACE INTO access VALUES('kTCCService

Anyone else seeing issues with running the clear passcode command on iOS 10.3.1 devices when using the USB Ethernet adapter>USB hub>USB to Lightning dongle? I know this was is unsupported by Apple, but I am hoping its currently not broken. Running JSS 9.97.1488392992

I recently applied a policy to a Smart Group that installs some software and then restarts the computers. Checking the logs, I see the software installed properly but no mention of reboot on any so I am thinking that shutdown or restart doesn't get logged? If not, wondering if there is a custom attribute or something else that I could use to track uptime or last shutdown/restart on these computers or even all managed clients?

I have done this once before but do not remember what I choose to block students from singing into their apple id accounts in the settings tab. is it Allow modifying account settings? Thank you in advance

I'm seeing a very strange behavior with our 10.10 client images when using AD login bindings and I believe it's based on our domain structure. We currently have a top level domain SchooName.univ. There are four child domains (resource, labs, students, employees). My employee clients are being bound to resource.SchoolName.univ. In my directory binding configuration the workstations are being placed into he correct OU. Under Administrative i have "Prefer this domain server" set to employees.SchoolName.univ and "Allow authentication from any domain in the forest" checked. My issue is that we have many employees who also have accounts in the student domain. These accounts are both exactly the same user ID and password (controlled by an external IDM System). When they login to the workstation for the first time the experience is completely different than that of a normal employee. - There are several apps that have a question mark over them. -

I've been building our Office 2016 deployment, using all info scraped from JamfNation and it's working really well for deploying the 2016 install, removing 2008, setting the dock, but I'm having problems in the script with deploying preferences. I want to set the username, disable cloud signin, disable first run and enable Auto Updates with Download and install. The piece of preferences deployment that is working is the disabling of first run, no other preferences are being set properly. Would some scripting gurus kindly offer some advice? #!/bin/sh #Create the choices file and apply to the installer cat <<'EOF' >> /private/tmp/Office2016Install/choices.xml <array> <string>com.microsoft.onenote.mac</string> <string>com.microsoft.outlook</string> </array> EOF /usr/sbin/installer -pkg /private/tmp/Office2016Install/Microsoft_Office_2016_15.37.17081500_Volume_Installer.pkg -applyChoiceChangesXML /private/

Hey there, all! I saw that Office 2016 15.39.0-17101000 was released earlier today and had some folks (self included on a test computer) update their client machines. Following the update, all apps withint he Office 2016 suite are running the 15.39.0-17101000 release smoothly without any reported issues with the exception of Outlook. When launched, Outlook crashes with a generic "you can't open the application..." error. When downloading and installing the standalone Outlook 15.39.0-17101000 release, this also yields the same error from before. I am able to run the 15.38.0-17090200 release of Outlook in tandem with the other Office suite apps on 15.39.0-17101000 so this leads me to believe that the issue resides with the Outlook portion of the bundled and individual/standalone installer. I had a user report the same behavior (and error message) when updating thru MAU as well. Has anyone else observed similar issues with this latest release of Outlook? FWIW both of the affected client m

Hello guys, at the moment I am searching for a dockingstation for the latest MacBook Pro that supports two external displays (1080p), gigabit ethernet and some USB ports.I have figured out that I need a thunderbolt dockingstation for the use of two external displays.It seems that USB-C dockingstations without thunderbolt support one external display only. There are two possible dockingstations that could be used and that are already available:1. Lenovo Thinkpad Thunderbolt Dock2. Elgato Thunderbolt 3 Dock Even if the Lenovo Dockingstation is not custom-built for Apple MacBooks our company would prefer them because we are using Lenovo devices next to our Apple environment. Is there something that you could recommend to use?How do you setup your MacBook Pro workplaces if you have two use two displays?Has anyone already tested the Lenovo Thunderbolt 3 Dock?Unfortunately our displays do not support thunderbolt 3. Thank you for your help.

So I just encountered this this morning and I'm wondering if anyone else can replicate the issue? Google Drive updated yesterday (4.2017.37510). It's working on iPad Air 2's and newer iOS's (10.X and 11.X) but the issue I'm running into is the app is failing to install on iPad 2's running 9.3.5. The app appears and it's darkened out, if you click it, it will say installing and it appears to install and then it says this app is unable to download at this time. It gives you the option to click done (right back to darkened out app) or retry where it tries to redownload the app and it fails. The app is managed and pushed to all devices. I tried excluding the app from the iPad 2's and then re-adding it and it fails. I also wiped the device and it also fails. Has anyone else encountered this issue?

I currently buy Apple machines from ecommerce.apple.com and those devices get enrolled into the pre-stage enrollment. Can I buy a machine from Apple retail and enrolled into the pre-stage in emergencies situations?

I recently discovered that the 27.0.0.170 Flash update crashes every time I access vSphere's web interface. This is acknowledged in this article. Please beware if you are in a vSphere environment. I had to downgrade Flash to the previous version in order for it to work for us again.

Hey Guys, We removed our admin rights from our developers :(Because of this xcode seems to have some issues that im dealing with at this pointWe are running a script (found on jamfnation) which basically alleviates most issues as it puts the user in the developer group and gets rid of all initial prompts One of the problems we are faced with is When clicking xcode --> Preferences --> Components --> and we attempt to download any of the ios simulators we are faced with a username/password admin prompt :(Im sure there are many people here whom overcame this issue as we are not the only company to remove a developers admin rights, without impeding their ability to work

Hi, I'm having this issue in our JSS 9.96 under Inventory->Generalsome devices are showing up with "OS - Verify Time Server: Fail (time.apple.com.)" and others are showing up with "OS - Verify Time Server: Pass (time.apple.com.)" when I check on the mac date and time it has the correct time and its using the same time.apple.com I any ideas on why I get the "OS - Verify Time Server: Fail (time.apple.com.)" thank you.

Last year the JNUC keynote was streamed live. I was looking round the Jamf site and JNUC pages and I don't seem anything about that. Does anyone know if they are doing that this year ?

This is more a conceptual question than anything else… I'd like to have loaner laptops set up that are ready for employees to use if they leave theirs at home or have hardware downtime. I was curious to see what other folks here might have set up for that. My initial hesitancy with just imaging out a machine is handling permissions… do I just create a local account that folks use on that machine, and then wipe it every other week? Have users log in but not have admin rights? (FWIW, our environment is all laptop users are admins on their laptops, hence the concern with permissions.) Any ideas or feedback welcome. And sorry for something kind of off-topic. Thanks!

Hi all,i'm working on a script that installs only the updates listed in the script parameters $4 to $11 i've got it all working nicely for just one update, it pulls softwareupdate -l, egrep only the updates listed in $4 to $11, then formats the result into an array (with just has the description and no spaces except between each update then installs as below) update=$( softwareupdate -i -v "${install[*]}" >> "$logpath" ) But if i try to install more than one update it comes back with 'OS X El Capitan Update-10.11.6' 'RAWCameraUpdate6.21-6.21': No such updateif i echo "${install[*]}" in the script it looks correctly formatted and if i run the command below straight in Terminal they install with no issue. softwareupdate -i -v 'OS X El Capitan Update-10.11.6' 'RAWCameraUpdate6.21-6.21' Any ideas why the update binary isn't liking it when using the array variable ?

Hi all, Is there any way to enable and disable a policy for a group of Macs but have that based upon the status of just one Mac ? If the one Mac has any Apple updates available then the policy for the group of Macs is disabled/not scoped to them or If there are no Apple updates available for the one Mac then the policy for the group of Macs becomes enabled/scoped to them If i use a Smart group to check if updates are on the one Mac then only that Mac would be scoped for the policy or not, can anyone suggest a different approach to make this work ?

Hi guys... Could be a silly question.... Can Casper Remote access a system on a different network, similar to the way that TeamViewer does? I have no issue remotely connecting a system on my network...However, when I take the same system plop it on an outside network (via wifi), waiting for it to check-in to update the JSS, I see the JSS record gets two unique IPs: IP address = Outside Public IP (70.49.x.x)Reported IP = Local internal IP (192.168.x.x) Then when I attempt to connect (after reloading Casper Remote data) It tries to connect on the Local internal IP, then reports back that SSH must be turned off. It is not.... Am I out to lunch....Does Casper Remote have no way to achieve this? I have read that some others are finding that Casper Remote will start with one IP, then fail (timeout) and revert to the other IP. To achieve this, wouldn't it need both IP's? Originally connect to the public IP, then tell the router that it wants to route to the internal IP? Thanks in a

I know this has been discussed in regards to auto updating via a script. (https://www.jamf.com/jamf-nation/discussions/18495/best-way-to-set-flash-player-to-auto-update-your-thoughts) However, I have not found anything recent for updating flash through a policy. I'm fairly new in JSS (really new and fumble my way through), I have Chrome and FF updating with the newest package I've made. With the configurations I've made, Flash of course does not install, when I try to push as an update, it sits at root and does not install. I was wondering if someone could point in the right direction for updating Flash (and Java) as well as getting it to install during imaging (without dropping it at root). We discussed the above script but want to have a bit of hands on, so we can test and make sure it does not affect. The patch reporting was nice for Chrome & FF, since I could use "less than" and go from there, of course that is not available. Ideas? Thoughts? Thanks all! :)