I just installed 10.13 on a 2012 macbook pro, within finder, the info for the Macintosh HD shows format: Mac OS Extended (Journaled) when i go to system report --> storage, the file system says Journaled HFS+ is this correct, i thought it was supposed to be AFPS ???????

Hi Everyone, Just wondering if anyone had deployed JSS on a Windows Azure VM? We are slowly moving our data centre to the cloud and just want to gather your expertise on this?Issues you encountered? Gotchas? etc.. Thanks in advance.

In the JAMFSoftwareServer.log I get a lot of these errors: [ERROR] [neralPool-4] [VppCommService ] - Error managing licenses. ErrorNumber: 9628 , ErrorMessage:License not eligible for device assignment. I saw from this post that is it likely due to older apps that are no longer in the App Store or are no longer eligible for device-assignments. I'm curious if anyone has found a way of quickly or systemically being able to identify these apps that have been pulled from the app store or not device-assignable? I'm going to try and turning the log into verbose mode and see if it provides more details to the error. Thanks.

Hello, I've come across a couple of ways to set a single (ex. time.apple.com) NTP server, however I need to set two servers- one for the internal network (a Domain Controller) and a secondary for when users are off of the network (time.apple.com). I've tried modifying the /etc/ntp.conf file to include a second and third line, and it shows up in the Date & Time Preference Pane (same line, comma separated), but it doesn't work; when I'm on the network, time is synced, but off of the network, time.apple.com isn't used. Any suggestion? Thanks.

I have some 10.13 machines and when i update Eset to 6.5.432.1 it seems to be breaking Keychain. Wanting an updated password, which it doesn't expect the current password. Or create a new password. What am i missing here?

my school is trying to run a standardized test and the secure web browser they use is choking on a RescueRecordings process thats running on student system (its a root level process). anyone ever heard of this process? my googlefu has failed me thus far. all the machines are running 10.12.5 thank you

I have the JSS setup so that when I enroll it in the JSS it also binds the user to AD so that they can login using our domain accounts. We have a mixed windows and Mac environment so we want one login for everything and binding to AD allows us to do this. Recently however when I either netboot and image a machine or just from enrolling using Recon the machines are failing to join AD. I've been manually binding them in System Preferences so that I could get them out the door but I want to be able to stop doing this. It doesn't affect machines that are already bound, they are all working fine. Any ideas? I couldn't find a thread on this so sorry if there already is one.

Doing some testing for a task that I have been assigned and I created an account through a policy. The account created without issue, but I couldn't deleted it through the Users preference pane in Sys Prefs. Is this a known thing or a bug? I could only delete it via Casper Remote. Doing some googlin' and couldn't find any other posts talking about it. Thanks

I know this problem is often mentionned on the forum, I've read a lot of them and try everything I've seen, but still, it doesn't work. To simplify, I have two same iPads, one with iOS 10 (10.3.3) and one with the new iOS 11. I've tried at the same moment, on the same network, to : 1) Enroll online : OK with iOS 10, not with iOS 11. (I make sure that the auto-signed cert is accepted and use the General Settings -> About to use the cert as main authority)2) Use Configurator 2 : OK with iOS 10, not with iOS 11. It says that the "Profile is not valid". It's the same profile I use with the iOS 10 and that works. So my question : is there something we can do to enroll our iOS 11 iPad ? Thanks a lot

Has anyone found a the place to download Office for Mac 2016 updates?

I'm looking for a way to create a smart group based on the URI of a printer. For example, if the URI of a printer is ipp://127.0.0.1, I would want a smart group that looks for any printers with 127.0. in it. Is this possible at all, maybe with an extension attribute?

I've been tasked with blocking Music and related apps on a student iPad. I threw together a restriction profile with "Allow Apple Music" unchecked under iOS Functionality as well as Music, Spotify, and Pandora added to Restrict App Usage under the iOS and tvOS Applications tab, and then loaded the profile on a test iPad, but Music, Pandora, and Spotify are still present and accessible. Anyone know what I'm doing wrong? This is an iOS 11.0.2 iPad using JSS 9.101.0.

Anyone else having issues where high sierra won't unmount external drives? DMG or smb/afp share? I can open disk utility and it won't show the drives there but they'll still be on my desktop and unable to unmount. I.E. My casper share will still be mounted so when I run casper admin it won't let me work with the share because it's already mounted, but can't be unmounted without a restart.

im looking for a script to remove avast from the mac can someone help me with that?

We're just getting started with jamf. The guy that came and helped set us up didn't cover anything about mac prestage enrollment. We have computers purchased via DEP, and we created a new PreStage enrollment. Under scope we have checked off one of the computers as a test. During the setup assistant, the computer doesn't get enrolled into our jamf. I have read through the documentation, but it sounds like it's supposed to "just work"... What are we missing??? EDIT: I reformatted the new computer and installed High Sierra. It enrolled successfully during the setup assistant.

Hello ALL:I am trying to create a restrictions profile on IOS devices. These devices are supervised and enrolled. I would like the end user to be able to download apps from the app store using their own apple id and password but as soon as the iPad downloads this policy the iTunes and app store login credentials get greyed out. I am attaching the portion of the restrictions profile.

Afternoon All. Been wracking my brain on this issue for the past couple days, and I just wanted to find out if anyone had any insight on the following issue. I am working on getting FileVault 2 distributed to my clients via a Configuration Profile, and the following is the behavior I am seeing. My workflow is currently as such; image Mac, walk through setup assistant, enroll in JSS via Setup Assistant, and get to a login window. My setup is the management account is our local admin account, I skip the account creation part as part of the PreStage setup. Once the Setup Assistant is complete, I can log into my management account, and policies start firing off as they should. I see the FileVault Configuration Profile in System Preferences, but for the life of me it doesn't seem to be applied in any way, shape, or form. In one of my walkthrough tests, I did see in the fdesetup status that deferment was set, and when looking at the deferment information, it stated that the deferment was

I am trying to setup an. uninstall for our bit9 agents. I tried calling the uninstall.sh in the bit9 folder that gets installed with the agent, but when I try to call it via a script it errors out.. . . . Running script Uninstall Bit9.sh... Script exit code: 1 Script result: Uninstall is not currently enabled for Bit9. Error running script: return code was 1. Submitting log ... . . . I looked in the script, it does a check on the b9cli -allowuninstall >dev/null but I couldn't find a way to set the flag to allow it...

I need a postinstall PKG script that handles what FEU and FUT do in a Jamf Pro DMG.This is going to be a standalone PKG that may be used on unmanaged systems. Else, I would just use FEU and FUT with a DMG.Before I re-invent the wheel I thought I would ask Jamf Nation.

Is there a statuspage for cloud based JamfPro?

Had a student that violated our AUP so we turned her wifi off using managed preferences. I'm now having issues getting it turned back on. I know it uses the com.apple.MCXAirPort DisableAirPort plist but I'm not sure how to turn her wireless back on now. I did sudo jamf removeframework to see if that would work but it still does the same thing. is it as simple as a defaults write com.apple.MCXAirPort DisableAirPort false ? I've tried that and it doesn't seem to do anything.

We are seeing upgrade failures on devices that have third-party SSD's installed. This was the reply from my engineer in the field: "Mostly Samsung for iMacs and OWC/Samsung for m.2 drives." We've opened a case with Apple on this, but I'm trying to set up a query to report on these drives. I've gone through the different posts and found some Extension attributes. The only one I've been able to get working is from: https://www.jamf.com/jamf-nation/discussions/8931/hard-drive-speed-type-extension-attribute I can get a yes/no answer to if a device has an SSD. But I really want to know what kind of drive. I've also tried the different EA's in this post: https://www.jamf.com/jamf-nation/discussions/4891/report-for-displaying-storage-type-hd-vs-ssd The scripts work great if I run it on the machine. As a script for an EA, the field is blank. I see that the information is stored in Inventory/Storage/Model, but it's not reportable. I've opened a case with support, but wondering if any

Does anyone have a 10.12 install file? It looks like Apple has graciously removed it from the App Store. Is everyone else seeing this issue?

Suspicious Package 3.0

Hello I am looking to rename a folder via a script. I am trying to use mv ~/Google Drive ~/OldGoogleDrive This worked on my computer, but when I tried it on another it gave me the following error. Executing Policy Rename Google Drive FolderRunning script Rename Google Drive Folder...Script exit code: 1Script result: mv: rename /var/root/Google Drive to /var/root/OldGoogleDrive: No such file or directory<br/>Error running script: return code was 1. For some reason on this computer it is looking for the folder in the var/root location, even though on my computer it did not look there. Any help is greatly appreciated.