I found a feature request to allow mass-editing computer information, which was marked as "not planned." That's a little disappointing, as it seems a natural thing an administrator would want to do in response to a search result. Oh, well. In particular, I'd like to find machines of a particular model, or alternatively, those whose PO date is within a particular range. I'd like to mark these items as leased, update the lease expiration date, and add a PO number. It looks like JAMF's suggestion is to use the API. Has anyone done anything along these lines that would be able to provide their "recipe?"

Hello, Does anybody have AcroRdrDCUpd1701220095 (95) image for last Acrobat Reader DC Update? I can download #####95 for Adobe Acrobat DC but not for Reader DC. Please help :) Thanks!

Greetings JAMF'rs, We are trying to allow standard users to change their passwords, but first you some background: We have re-imaged each machine in our school, setup each account to be assured that each device has hit the JSS Server, setup the account with one standard password(not very secure though), and have Users & Groups, Sharing and Security & Privacy blocked in Sys Prefs. We are trying to find a script, JAMF sent one option, that asks each user to change their password on their initial login. Problem is, the password can be the same one as before. I would love a script to enforce complexity rules (Alphanumeric, with at least 1 Symbol, Uppercase, and Lowercase and a Number, with minimum of 8 characters)Has anyone had any success with doing this?I am not a scripter but I can follow along what is occurring within the script, just no luck in making my basic script work correctly.Thanks all for any and all help you can send out.R

Hi i was wondering if anyone has deployed Parallels 12 with the following restriction Locking down what images they can use Password Protect it so new images cannot be created by users . i was advised i can do this by a console but i cant seem to find it In addition i would like to know the followingbest way to package it best way to maintain images Any advise would be grateful as we are looking to test and deploy it this week

When we sync shared devices using Apple Configurator (1.7.2)It randomly will skip over apps without error or any feedback.If we look at the details of each device: total number of installed appswe can locate the ones that have skipped apps, this view is not that helpful.I know that there is a feature request for this, but is there any way to show this information as a display field using an extension attribute?

I am using the following Script. The license accept part works but it does not download the additional tools. On the JSS it says that they installed on the base path but when a user launches Xcode it prompts for the admin password to download the tools. Can anyone help me if I am missing something? Here is the script I am using: !/bin/sh # Accept Xcode License /Applications/Xcode.app/Contents/Developer/usr/bin/xcodebuild -license accept # Enable Developer Tools /usr/sbin/DevToolsSecurity -enable #Install Additional Components /usr/sbin/installer -pkg /Applications/Xcode.app/Contents/Resources/Packages/MobileDevice.pkg -target / /usr/sbin/installer -pkg /Applications/Xcode.app/Contents/Resources/Packages/MobileDeviceDevelopment.pkg -target / Here is the summary after the policy has executed:Executing Policy Xcode 8.2.1 testCreating directory structure for /Library/Application Support/JAMF/Downloads/Downloading http://xserver2.remsen.sfc.edu/CasperShare/Scripts/Xcoderemoveo

Hi! Anyone have an EA that will pull what NTP server is set to? Thanks!John

Seeing a small, but not insignificant number of machines that seem to get stuck updating inventory. Most are remote systems, often on slow WAN links, and it seems that it simply times out during the recon phase, but never completes. Regular policy check-ins seem fine. For example, from one of our machines in Hawaii: Last check in was this week (machine is a laptop, so I don't expect it to be online 100% of time), but last inventory update was 2+ months ago. Needless to say, this is causing issues for patching, smart groups, etc. In the limited testing we've done, it seem that re-enrolling usually clears things up. Before I try writing a script myself, anyone have anything that would take the dates from Last Inventory Update and Last Check-in, and populate a group based on a defined difference? We normally do an inventory update daily, so I'm thinking something like "if last check-in date - last inventory update = more than 2 weeks, re-enroll" or something along those lines

Hey All I have to change our management account password and I am not entirely sure of the correct process. This is what I think needs to happen, but I want to verify before I break anything. 1) Create a policy with management account option -> Specify new password -> Scoped to all machines2) Advance Search -> All machines -> Action -> Edit the Management Account Information Let me know if I'm missing something here. Thank you! Shawn

I have a lab of iMacs where mouse right click isn't enabled. When I go to system preferences I can see that both left and right side of the mouse are set to primary. Using composer, I created a DMG (using new and modified snapshot) option to get the HIDMouse plist. When I deploy the DMG using Self service, I can see in system preferences that the right click of the mouse changes from primary to secondary but still not able to right click with the mouse. If I manually change it back to primary and then back to secondary, I can right click. If there's anything I'm missing here? Also, how can I deploy to dmg to all computers in the lab without using Self Service? Is it just a matter of turning off self service, set the scope to the smart group, set the trigger to every 15 and the frequency to ongoing? Cheers, Henry

We would like to enforce automatic updating of all App Store apps on Mac OS. There is a setting in System Preferences -> App Store -> Install app updates (as shown in the attached image), but I am unable to find that setting in the JSS console (Config Profiles, Managed Prefs, etc.) I was able to configure updates for one app at a time via Mac App Store Apps, but not all apps. Is this a limitation in JSS or am I missing it? Thanks,Reid

So i sent the lock device command to find a missing iPad, at some point it took and locked the iPad out like it is suppose to do, but now that the device has been found the wifi is off and not able to receive the unlock command, is anyone else having this problem? I have a lightning to rj45 connector but apparently all it is designed to do is charge the device over a poe switch. Is anyone aware of the proper adaptors for hooking an iPad up to the network with a hard line?

Hello admins, I'm relatively new to managing macOS, but have been slowly learning JSS and using it to deploy policies to workstation. We are currently using K1000 to install applications to clients, however i would like to start using JSS for this. My questions is how do you manage application deployment on JSS? Can you configure JSS to not re install the app every time it checks in? How do you manage patching applications? I'd be happy if anyone could point me in the right direction. Thanks

is anybody getting this error when trying to run the hightsierra app ? i am getting it when i first use the accessutility.dmg, it then opens the App Store and from there i click 'open' and it starts the install process, eventually getting a popup saying linkfiledownload error 5 and am also getting the error when i run the downloaded beta.app. on a seperate computer. can i use the saved downloaded high sierra beta.app. on any eligible computer? i don't have to run the accessutility.dmg first?

I'm setting up a new JSS for scaling reason. I can access the JSS through chrome using the local ip but I can't seem to get it from the external IP. I had the guy that does our website create the DNS record to the Public IP of the server but I always get the "took too long to respond" message. I have the JSS Url changed to what the URL is in the dns record. Ideas?

Sorry if this has been asked already. I am new to JAMF. I was wondering the best way to control the OSX version that all of my computers are on? Can I force everyone to update to a certain version and keep them there until I want to force the next update? Can I force an update from a major release, example: El Cap to Sierra? Thanks guys!

Dump question, but I don't know where I can upload/sign a push notification CSR from our fresh installed jamf pro Server (which has no direct outbound connection at the moment). I downloaded the CSR file, which I should "sign later using Jamf Nation". But where can I do this? (I'm logged in with my jamf nation account) Kind regardsHansjoerg

Is anyone else seeing iOS apps in their catalog not being updated when it is set to be automatically updated? I see a wide discrepancy between what the JSS is showing as its current version, to what my devices have installed, to what the current version on the iOS App Store is. I am seeing this with at least two apps in my catalog (Outlook & OneDrive). Currently running 9.99 cloud hosted. Only my JSS or a larger problem?

Is there a way to wipe/erase a group of iPads that are in a static mobile device group all at once? Please advise. Thanks!

Hi there! Currently we are deploying a base macOS Sierra through modular imaging, this 10.12.6 is comming from the default installer and recreated with AutoDMG. If i do the same with macOS High Sierra, AutoDMG does not recognize this version of macOS.Does anyone have a temporary solution for this or a workaround so i can proceed with the macOS High Sierra deployment. Thankyou! Greetings,Thijs Xhaflaire

Hello, We are using FileVault2 on all our clients. During the onboarding-process we create a local service account, which is also enabled for FileVault of course. When a new user logs in for the first time with his ActiveDirectory credentials, the account will be created locally on the Mac (Mobile Account). Our problem: After that, the user has to be enabled for FileVault manually, which causes a lot of unnecessary workload. I tried to auomate this with a script: #!/bin/sh ############################################################################################################# # This script will add a new logged-in user to the FileVault enabled list, using the JSS. # # # # by Marco Kolbas | Greentube I.E.S. GmbH | mkolbas@greentube.com # #

I would like to create a QuicAdd Pack so I can enrol a number of macs in our lab. We have Casper installed on Windows Server 2012 and I cant find where this Recon.exe file is located?

I'm new to AD on the Mac, so maybe I'm missing something. Local standard (ie non-admin) accounts can't seem to log into a machine after it has been bound to the domain. It doesn't matter how I bind the machine either - Casper or manually using Directory Utility. The standard account works fine before I bind the machine. But after I bind the machine the user can't log in. If I remove the machine from the domain I still can't log in with the standard account. Local admin accounts work. And I can su to a local standard user account. I've checked Directory Utility and the search policy order is set with /local/default as the top option (can't change that I don't think). Am I just missing something about local standard user accounts on machines bound to AD?

Hello! I'm trying to find a solution for attaching Dockutil commands to a policy. I want to embed the command within the policy, instead of creating a separate script for just adding one icon to the dock. I expected to be able to make a one-banger command on a per-Application basis through Files and Processes > Execute Command within the policy options, but I haven't yet been successful. Here's what I'm throwing in now. I don't know how the syntax compares to creating a bash script. I think my hangup revolves around the command running as Sudo, instead of the current user. /usr/local/bin/dockutil --add /Applications/DaVinci Resolve/DaVinci Resolve.app --before 'Fusion' "/Users/$3" Fomr the logs... Running command /usr/local/bin/dockutil --add /Applications/DaVinci Resolve/DaVinci Resolve.app --before 'Fusion' "/Users/$3"... Result of command: /Users/Library/Preferences/com.apple.dock.plist does not seem to be a h

Hi all, Still a bit new to the world of Jamf. I'm setting up MacBook Airs for our teaching staff. Current setup would be to create a local admin account (also a hidden admin account via PreStage Enrolment and DEP) and enable the Guest account. If teaching relief staff (or school officers) want to use the laptop, they can use the Guest account. I'm trying to decide if I should bind these machines to AD, for the sole purpose of letting other staff sign in with their own AD credentials, versus using the Guest account. I also would not be setting up a mobile account since the only person who should be taking the machine home should be the teacher who the device is assigned to, plus again since it's a local account, I don't think I need a mobile account. If I manually join the machine to AD after the initial setup, could there be any problems for the main local account (which has the same username as the AD username?) The reason for setting up the machines with t