Hello Everyone, I'm trying to create a .dmg from a .pkg, but when I use Disk Utility - Image from Folder I can't select any .pkg. They are all greyed out. Any advice on what I might be doing wrong. Thanks, James

I have an enrollment script that does a lot of behind-the-scenes system configurations, installations, etc, but I'm having a timing issue with DEP and the Enrollment Complete trigger. I would like to create a LaunchAgent that kicks off the policy on the next user login (login trigger does not seem to work consistently). The policy's script would go through the process, delete the launch agent, then reboot. I can run the script locally, but since it requires a lot of admin privs, it's not practical because of the constant user nagging for passwords. Is this even possible?

Good morning all (morning where I am at least!) I'm having some trouble with customising my Self Service. I'm going off of the wonderful guide here by Emily Kausalik. My JSS is running on windows 10. I am trying to edit my login logo, and the default background colour of the login screen (referred to as JAMF BLUE by Emily) - I have set the corresponding values on the relevant .css files, (located at C:Program FilesJSSTomcatwebappsROOTstylesheetsosxselfserviceSelfService And replaced the default login logo (located at C:Program FilesJSSTomcatwebappsROOTuiimagesselfservice2) The relevant values and files in both of these folders are showing as what I have set them as (i.e. the changes worked), Yet these settings aren't pulling through to my actual Self Service app, this is after a machine restart, a SS refresh/close/reopen etc Is there some obvious mistake that I am making? Some of these changed were made hours ago, I would have thought they would have taken effect

Hello everyone, I've been working on getting 802.1x set up on our Macs using machine certificate authentication. Currently, my configuration profile is set up such that all of the necessary domain certs are installed (CAs, and intermediate CAs) and trusted, an AD Certificate request is performed to get the machine certificate from the private CA, and a network payload is delivered specifying the SSID, WPA2 Enterprise as the authentication type, TLS as the protocol, and the machine AD Cert as the identity certificate. If I leave the settings just like that and apply the configuration profile to a device, things work great for the most part. The user can connect to the wireless network by selecting it, specifying their device certificate for authentication, and confirming that they want to trust the certificate presented to them by the radius server. This is the behavior that I would like to update. I don't trust the user to correctly identify and trust the certificate belonging to o

Hello!What are Yosemite and Al Capitan system build versions after installing 2017-003 updates, please?

Anyone else having this issue? I have the latest 10.12.5 mac OS along with the macosupd10.2.5 patch but no go.

Hello everyone, Recently changed the JSS URL (Settings > Global Management > JSS URL) and am having a difficult time getting our DEP instance to update with the correct settings. After changing the URL, I updated the Tomcat SSL cert (and restarted the tomcat service), downloaded the public key from Global Management > Device Enrollment Program, uploaded that cert into our DEP instance on apple, and downloaded the new apple cert to upload into the JSS. However, I'm finding that the "public key" certificate downloaded from the DEP page within the JSS still has the old URL. I can't seem to get it to update. DEP enrolled machines are currently unable to apply the MDM profile because of the SSL error. If you inspect the publickey.pem file downloaded from the JSS, I can see that it's still using the old url in the CRL part of the cert. If I check the configuration profile info on the target mac (/var/db/ConfigurationProfiles/.cloudConfigRecordFound) I can see that it is indeed st

How can I update the password on a local account.in our case we have "localuser", I see there's a place to edit/change the password, but when I edit/change the password and run the policy I get an error, because it tries to create the account.what I want is to change the password only for the "localuser"...is there an easy way to do that? nevermind =( I found it under Action-> select "Reset Account Password" thank you Jamf =)

All,One of my departments has an iPad cart they have been maintaining with Apple Configurator and they would like for me to duplicate their config in JSS. I've never used configurator before this and what I would like to do is pull the config from one of their IPads or copy the blue print from their existing workstation so that I don't have to re-invent the wheel and can maintain folders and screen layouts/restrictions etc Is it possible to upload the config of an existing IPad or export the blueprint

HiI'm busy creating extension attribute scripts, and would like to be able to use the same scripts whether I'm running them in JAMF or independently on our Macs. When I'm creating a JAMF extension attribute, I obviously need to add the <result></result> tags at the end, whereas if running the same script directly on a mac, I don't need these tags. Is there a way to check the environment that the script is running in so that I can then choose whether to add the tags or not? Any ideas welcome!Cheers,Mags

Hi all, just testing with the latest release of Flash from https://www.adobe.com/products/flashplayer/distribution5.html I installed it on a test machine and ran recon but it doesn't show up in the Patch reporting, it still shows the previous version for this machine. I've ;deleted and re-added the Flash Player Patchrestarted MySQL on our JSStested on a 2nd machine and ran recon If i take the Extension Attribute from the Flash Player Patch and run it locally it reports the correct version as 26.0.0.137 #!/usr/bin/env bash ############################################################################## # A script to collect the version of Adobe Flash Player currently installed. # # If flash is not installed "Not Installed" will return back # ############################################################################## RESULT="Not Installed" if [ -f "/Library/Internet Plug-Ins/Flash Player.plugin/Contents/version.plist" ] ; then RESULT=$( /usr/bin/defaults rea

Hey guys.Can Jamf create analytics for scripts the was successfully deployed?I want to create scripts to test if installation succeed or not (Check existence of the file)and to analyze my enterprise environment to see in which Macs it worked.If It does , Can I provide an exit code or something?

Hi there, We're going to have a set of 30 new iPads this fall, managed by our IT department (with JAMF). I'm going to be teaching with these, with all 450 students in the school, one class per hour. So they're going to be shared iPads, but: Our district isn't currently willing to support Apple School Manager. Wondering: Will I still be able to use Apple Classroom, to do all of the local control / distribution / monitoring stuff, without the ASM backend? Can I just assign device names instead of student names? Or will Classroom simply not work in this scenario? I know I won't be able to do the true Shared iPad stuff, with the logging in and out and such, but would like to at least have the screen management stuff working... Thanks!

Hi Guys, Recently moved companies and I supported strictly macOS devices. I have a need to support IOS here and am selling JAMF to the business as we speak. As I have no access to JAMF at the minute I cannot check, can someone let me know we can report on successful iCloud backups for IOS devices? thanks,

As we've got new Macs coming in this summer and they can't accept anything lower than Sierra, I'm now working on setting up a Sierra software configuration. One of the things we have set up on our JSS is that the Apple Mail.app is blocked using Restricted Software (because we want people using Outlook instead). On Sierra what I am seeing is that the restriction message is popping up on a regular basis even when Mail.app isn't loaded / isn't being used. Does anyone know what causes this behaviour and how to stop it? Would simply deleting Mail.app have any significant bad effects? We don't see this happening on 10.11 or 10.10. Thanks,Dan Jackson (Lead ITServices Technician)Long Road Sixth Form CollegeCambridge, UK.

All, I am trying to modify the com.apple.Safari.plist to AllowJavaScriptFromAppleEvents -bool TRUE and have been led to believe that the command below previously worked, prior to OS X El Capitan. To achieve this manually, one would do the following: Launch Safari, go Preferences>Advanced and check Show Develop menu in the menu bar. From the menu bar, go to Developer and check the Allow JavaScript from Apple Events. Authenticate with administrative credentials. Since this isn't a great workflow to have users manually do this on their own, I'd like to automate this if possible. I'm not having much success with the short script below and was wondering if anyone has attempted to do this with more success running macOS Sierra 10.12 and Safari 10. #!/bin/bash defaults write ~/Library/Preferences/com.apple.Safari.plist AllowJavaScriptFromAppleEvents -bool TRUE exit 0 The above command seemingly works (i.e. no errors and running a defaults read command shows that the AllowJavaScri

Using the 10.12.5 installer from the App Store and the Sierra 10.12.5 update for 2017 iMac with AutoDMG produces an image that appears to install correctly on 2017 hardware. However, there is still an issue with the Recovery Partition using this method. The Recovery Partition is listed when you run diskutil list in Terminal but when you attempt to boot to it using Command + R you get the prohibit sign. Anyone find a workaround for this? FileVault 2 seems to work fine.

I'm guessing that we aren't suppose to edit the MySQL data directly. I tried editing the trigger_manual field in policies and the policy details page (/policies.html?id=*&o=r) shows the new data but the policies list page (/policies.html) doesn't. I'm trying to change the name of my trigger for 50+ policies and I'm kind of tired of clicking on each policy and then editing the page and saving. Editing the sql was so fast compared but I'm afraid it won't work. If it won't work, is there a similar easy way to do this with the API? Here's the sql. update policies set trigger_manual='somename' where trigger_manual='somename2';

Hi, We are migrating print server in our environment, on existing server we have around 20 printers configured and users have mapped printers according to their requirement. We want to migrate the printer on the user’s machine to new servers from the existing server.I need help to fetch the configuration settings of the existing printer, so that I can recreate same for new printer.I created below script to get the printer name and destination from the machine and modify the name and destination to new print server and create new printer on the machine. However after script execution the new printer is appearing in the terminal (lpstat –v) but not in the printer preference of the machine.Thanks in advance. #!/bin/sh print_names=('ABCPS02_ABCP1-32310_HPM553' 'ABCPS01_ABCP1-32310_HPM553' 'ABCPS02_ABCP1-2450_HPM233') old_server1="ABCPS01" New_server1='ABCPS01P' old_server2="ABCPS02" New_server2='ABCPS02P' Default_printer=$(lpstat -d |awk '{print $4}') for print_name in "${print_names[@

Flash 26.0.0.137 came out yesterday. How long does it generally take before patches are updated in the Patch Reporting in JAMF Pro?

We have been using SCEP on our Macs since 2012. I needed to update the client to the current version so I created a new dmg with Composer. The software will push fine but won't run. I tried on a Mac that did not have the old version of SCEP and I tried on a Mac that did. Both pushed fine, both wouldn't run. When I install the dmg from MS, it works fine and will override the installed version and run or will run on a Mac without a version present. I have never really had a problem with software not running after push so I don't quite know what to do here. Any advice?

Hey guys. I have a script I wrote to use as an extension attribute to check and see if Remote Management is enabled on a machine or not. However, while it runs really well locally, it only returns 'On' when used in an extension attribute, even if I know for a fact Remote Management has been disabled. I've included the script below. Anyone have any thoughts? #!/bin/sh Status=`launchctl list | grep '^d.*RemoteDesktop.*'` if [ -z "${Status}" ] then echo "Off" else echo "On" fi

Hey guys.I tried everything in Jamf nation and other sites.I couldn't find any solution for my problem.I'm trying to write a script that test the file existence and if its true he should do the A if not he should do B.The problem is that nothing works when it comes to Current User location ( ~ ).Not the $3 or anything else worked..Oh and it should work with Altiris or any other deployment solution. You just cant find a reason to love Mac :(Can someone help me with this problem I'm stuck with?

We're setting everything up for our JSS install (v.9.91) - we have our Jumpstart session scheduled for next week. I have a question related to the database server that we are intending to have as a separate system that our JSS talks to. (We are using MariaDB 10.0.x.) Now, we've setup the DB server to be fine talking over TLS, as shown by connecting via the command-line tools: <JSS server> $ mysql --ssl -u jamfsoftware -p -h <JSS DB server> jamfsoftware...> status...>> SSL: Cipher in use is DHE-RSA-AES256-GCM-SHA384 Is there an "easy" way - through a configuration mod - to enable JSS to be happy talking to our database over TLS, rather than in plaintext? I don't, at this stage, need to have any more advanced client-cert setups - just a "regular" TLS session against the server-cert to protect the confidentiality of the connection as it travels across our network. I've tested the setup by changing the GRANT privileges to

Has anyone used Apple Configurator 2 and DEP? I can't seem to get my devices Supervised. The specific features we need is having our MDM un-removable and the iOS layout. Apple supports it, our devices enroll to the JSS but nothing is supervised. https://support.apple.com/en-us/HT201092 Any help would be appreciated!