We have 500 VPP licenses for xcode, when trying to install xcode from Self Service, instead of installing automatically the Mac App Store starts up and you have to "Get" xcode from there. All of our mac apps that have VPP licenses install fine through Self Service. Any ideas?

Is there a way to suppress the dialogue? I notice it popping up on clients quite often. Usually they ignore it, as they aren't admins, but I'm sure it gets annoying.

We have a script which I'm attempting to run once a week via a launchd task. Launchd appears to be working normally, script launches, but at the end of the script it calls a JSS policy via a custom trigger. This portion of the script appears to be failing. If I run the script manually, it tells me "There was an error. This application must be run as root. Try the sudo command." Running with sudo produces the desired result. What is the best-practice in terms of having launchd execute the script with admin/root privileges? My launch daemon plist is in /Library/LaunchDaemons, ownership set to root:wheel, -rw-r--r-- Script itself is located in /Library/Application Support/JAMF/Scripts, and similarly, root wheel -rwxr-xr-x It appears that the "jamf -policy -event <trigger> command in the script is where it is asking for sudo - what is the best way to make this run correctly when triggered by launchd?

Just upgraded to 101 from 100.1 new notification when I log into the JSS. Says: PRESTAGE_IMAGING_SECURITY PRESTAGE_IMAGING_SECURITY_LINK The link takes me here:https://www.jamf.com/jamf-nation/admin/articles/469 404 Error The URL requested does not exist. Very handy.Anything I need to know about?

I've started testing the 15.21.1 Office Update and noticed that my Outlook client doesn't seem to authenticate through AD FS/Office 365 with our Office 365 environment thus resulting in the error below: Reverting back to Outlook 15.19.1 and the authentication works fine again. I tested this on another Mac and the problem occurred there as well. Tested on El Capitan, 10.11.4. Does anyone else has this issue as well?

Hi ,We would like to remove the mac apps pages and numbers from MAC x for 'n' numbers of users, can I have any removal script to run via policy ?

We have a computer that we would like to decrypt the Filevault and do some testing. I decrypted the computer manually, and added the machine as an exception in the JSS policy, but upon trying to log on it is asking to enable Filevault again. Is there a file somewhere that is causing this?

Dear Experts, I wonder whether it is possible to have a policy run a script on the MDM instead of the client. We have a script on the MDM that extracts some information from an external database and fills some extension attributes. We run that script via cron on the node hosting MDM (but it could also live elsewhere) to keep the information in sync. This script checks for every device whether the information is up to date, so it takes some time to do its job. We want to make sure the EAs in question get updated directly when the enrollment is finished, so it would be nice if we could trigger running this script with a device ID as argument (to avoid it has to loop over all devices) whenever a device was enrolled. Is that possible? Thanks in advance for your valuable comments.

Hello, does anyone have an EA for identifying whether or not a inventoried Mac has a USB-C port?

Hello, I'm trying to import users from Apple School Manager but JSS is using the managed apple id for the email address field. This is causing issues with the matching criteria and JSS is creating new users when that person already exist. Is there a setting I'm missing? Has anyone else ran into this issue? Thanks!

I have a script that updates certain policies via the Casper API. These policies are scoped to multiple smart groups in multiple sites. During testing, where I didn't have multiple sites, everything worked fine. But in production, I get some strange behavior: The API policy PUT call returns "Error: ComputerGroup (ID:xxx, Name:Blahblahblah) is enabled for a site." Subsequent GET calls on the policy return updated information, as though the PUT succeeded. The updated information is NEVER reflected in the JSS. After some time, API GETs again return the old information, confirming the original failure. Why is this failing? Why does it matter if a smart group is site-enabled in the first place? Why is the API returning false data? Any ideas? I'm hoping someone has seen this before. If not, I'll try to create a simplified, generic script to share that reproduces the problem.

I have some VPP apps (Xcode being one) set to self service, but I would also like it "pre-installed" on certain open access computers (OSX 10.11). Is this possible from JSS? I can only seem to select "self service" or "install automatically"... If not, is there a way you can invoke a VPP install via a script of some kind?

What happens if the push notification certificate expires ?

Hi, does anybody already found solution how to disable Siri setup during first configuration? So I'm using script to disable iCloud, diagnostics and setup windows and enable location services however in macOS Sierra we also have window to enable or disable Siri. I tried with script to modify com.apple.SetupAssistant.plist same as with iCloud but with Siri it's not working. Any ideas or working solutions?

First time poster here so please take it easy. What I am trying to achieve is seemingly simple, in principle, but boy has this given me a headache. What I need to achieve is this: When an LDAP user logs into a system, Safari launches with a specified URL. Only Safari should be accessible. That's it. Nothing more and nothing less. Why is this so difficult or am I being stupid? ( I am prepared to be told I am being stupid). I can't find anything in a config profile that allows this. Any suggestions would be helpful.

Will cocoa dialogue run as the root user? I'm currently getting the following error when running as a policy: Script result: 2017-09-06 14:11:11.575 cocoaDialog[86217:1180463] CFPasteboardRef CFPasteboardCreate(CFAllocatorRef, CFStringRef) : failed to create global data<br/>2017-09-06 14:11:11.576 cocoaDialog[86217:1180463] CFPasteboardRef CFPasteboardCreate(CFAllocatorRef, CFStringRef) : failed to create global data<br/>2017-09-06 14:11:11.576 cocoaDialog[86217:1180463] CFPasteboardRef CFPasteboardCreate(CFAllocatorRef, CFStringRef) : failed to create global data<br/>2017-09-06 14:11:11.578 cocoaDialog[86217:1180463] CFPasteboardRef CFPasteboardCreate(CFAllocatorRef, CFStringRef) : failed to create global data<br/>2017-09-06 14:11:11.926 cocoaDialog[86217:1180463] CFPasteboardRef CFPasteboardCreate(CFAllocatorRef, CFStringRef) : failed to create global data<br/>2017-09-06 14:11:11.926 cocoaDialog[86217:1180463] CFPasteboardRef CFPasteboardCreate(CFA

Hi all, I'm a bit new to JAMF but am finding it really useful. I'm good on deploying applications to macOS, but I am wondering what the best practice is for removing applications that have been deployed with a policy. Thanks!

I am trying to import a computer using the mac or serial number into the JSS using the api. I am not understanding the syntax for this. I have an xml file with both pieces of information in it ready to be imported. I understand the command will look something like "https://myjss:8443/JSSResource/computers/" after that I am unsure of what to put in for a path. I know it should end with /path/to/xmlfile -X POST. The big picture is that I will be receiving new imacs and would like to take an excel inventory of the mac addresses and serial numbers, export it to xml and import the entries into the JSS so I can group computers and scope policies before the computers arrive. I am fine with needing to add more information to the xml file such as platform, os version and so on if it helps with the pre-deployment. I could try to do prestage imaging to simply install the apps I want, but I was hoping to be able to front load computer groups and policy scoping. I am using JSS 9.61 and am

We use com.google.Chrome in a user-level configuration profile to force install the uBlock extension in Chrome. This has been working great. We are running into issues in our K-12 where staff and students are complaining about some content being blocked by uBlock that is causing issues. We created a github page with a text file on it that is our whitelist so we can update it quickly if needed. We got this to work on our windows machines via Group Policy by following these directions Those instructions have a portion about creating a plist for setting the extension policies, which I did like this: filename: com.google.Chrome.extensions.cjpalhdlnbpafiamejdnhcphjbkeiagm.plist <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>adminSettings</key> <string>{"userSettings":{"autoUpdate":true,"externalLists":"https://r

Our Prod JSS 9.100.0 version is showing different menu name (I think these are database names). The QA JSS 9.100.0 version is not doing this. Do anyone know how to correct this issue?

I have updated our NBI using AutoCasper NBI 1.3.4 using a base OS of 10.12.2 (16A323) and Casper Imaging 9.81. When I attempt to boot from the NBI it just comes up with a prohibitory symbol. Is there something I might be missing here as to why this won't Netboot? Just in case I am using a startech US1GC30W USB-C to Gigabit Network Adapter. Can anyone provide me some tips on what I should look for? Thank you

I currently have a bash script to add printers for teachers, but would like to make it more user friendly.I'd like to use applescript or automator to make a more friendly GUI. Also does anyone know how to insert a users pin into the account track settings of a printer? so far my script looks like: I have a function setup for each of the choices that installs the appropriate printer. Again what I'd like to do is make checkboxes or something so they can install multiple printers, along with having text box for them to input their pin# used for the copier, and take that pin and input it to the account track settings of the printer and save it.

I have seen some variations on this but am yet to find one that meets my needs fully. We have a problem with users desktops becoming the personal dumping ground for anything and everything. Ideally, I would like to be able to run a script that puts all the files on their desktop, ignoring web links (we have some support links on there we need them to keep) into a folder the script creates on their desktop. Is it possible?

Hello, I manage a handful of labs. I am trying to use MySides to configure the Finder Sidebar to be basically empty. I installed the MySides binary on my target machines. When I run "mysides remove all" in terminal on the local machine, it works exactly as expected.. all sidebar items disappear. But if I run that same command via Casper Remote, or with a policy, it never works. I also tried saving the command as an executable script on the local machine, and calling that with a policy, but it still doesn't work - but if I launch the script on the local machine by double clicking, it works just fine. I am still a little bit of a novice with this sort of thing. Am I missing something? Is there a better way to do this? Thanks

Hello, I have a Mac that refuses to check-in or update inventory by itself. It does if you sudo jamf policy or sudo jamf recon. Things I've tried:1. Ran a quick-add package2. Removed MDM Profile (sudo jamf removeMDMprofile)3. Reinstalled MDM Profile (sudo jamf manage)4. Re-enrolled (sudo jamf enroll -prompt) All of them ran without any issue and made the machine check-in/update inventory. However, the issue remains. I have more than 100 other Macs that are not having this issue. Has anyone encountered this before? Any advice? Thanks!