Hi all, just testing with the latest release of Flash from https://www.adobe.com/products/flashplayer/distribution5.html I installed it on a test machine and ran recon but it doesn't show up in the Patch reporting, it still shows the previous version for this machine. I've ;deleted and re-added the Flash Player Patchrestarted MySQL on our JSStested on a 2nd machine and ran recon If i take the Extension Attribute from the Flash Player Patch and run it locally it reports the correct version as 26.0.0.137 #!/usr/bin/env bash ############################################################################## # A script to collect the version of Adobe Flash Player currently installed. # # If flash is not installed "Not Installed" will return back # ############################################################################## RESULT="Not Installed" if [ -f "/Library/Internet Plug-Ins/Flash Player.plugin/Contents/version.plist" ] ; then RESULT=$( /usr/bin/defaults rea

Hey guys.Can Jamf create analytics for scripts the was successfully deployed?I want to create scripts to test if installation succeed or not (Check existence of the file)and to analyze my enterprise environment to see in which Macs it worked.If It does , Can I provide an exit code or something?

Hi there, We're going to have a set of 30 new iPads this fall, managed by our IT department (with JAMF). I'm going to be teaching with these, with all 450 students in the school, one class per hour. So they're going to be shared iPads, but: Our district isn't currently willing to support Apple School Manager. Wondering: Will I still be able to use Apple Classroom, to do all of the local control / distribution / monitoring stuff, without the ASM backend? Can I just assign device names instead of student names? Or will Classroom simply not work in this scenario? I know I won't be able to do the true Shared iPad stuff, with the logging in and out and such, but would like to at least have the screen management stuff working... Thanks!

Hi Guys, Recently moved companies and I supported strictly macOS devices. I have a need to support IOS here and am selling JAMF to the business as we speak. As I have no access to JAMF at the minute I cannot check, can someone let me know we can report on successful iCloud backups for IOS devices? thanks,

As we've got new Macs coming in this summer and they can't accept anything lower than Sierra, I'm now working on setting up a Sierra software configuration. One of the things we have set up on our JSS is that the Apple Mail.app is blocked using Restricted Software (because we want people using Outlook instead). On Sierra what I am seeing is that the restriction message is popping up on a regular basis even when Mail.app isn't loaded / isn't being used. Does anyone know what causes this behaviour and how to stop it? Would simply deleting Mail.app have any significant bad effects? We don't see this happening on 10.11 or 10.10. Thanks,Dan Jackson (Lead ITServices Technician)Long Road Sixth Form CollegeCambridge, UK.

All, I am trying to modify the com.apple.Safari.plist to AllowJavaScriptFromAppleEvents -bool TRUE and have been led to believe that the command below previously worked, prior to OS X El Capitan. To achieve this manually, one would do the following: Launch Safari, go Preferences>Advanced and check Show Develop menu in the menu bar. From the menu bar, go to Developer and check the Allow JavaScript from Apple Events. Authenticate with administrative credentials. Since this isn't a great workflow to have users manually do this on their own, I'd like to automate this if possible. I'm not having much success with the short script below and was wondering if anyone has attempted to do this with more success running macOS Sierra 10.12 and Safari 10. #!/bin/bash defaults write ~/Library/Preferences/com.apple.Safari.plist AllowJavaScriptFromAppleEvents -bool TRUE exit 0 The above command seemingly works (i.e. no errors and running a defaults read command shows that the AllowJavaScri

Using the 10.12.5 installer from the App Store and the Sierra 10.12.5 update for 2017 iMac with AutoDMG produces an image that appears to install correctly on 2017 hardware. However, there is still an issue with the Recovery Partition using this method. The Recovery Partition is listed when you run diskutil list in Terminal but when you attempt to boot to it using Command + R you get the prohibit sign. Anyone find a workaround for this? FileVault 2 seems to work fine.

I'm guessing that we aren't suppose to edit the MySQL data directly. I tried editing the trigger_manual field in policies and the policy details page (/policies.html?id=*&o=r) shows the new data but the policies list page (/policies.html) doesn't. I'm trying to change the name of my trigger for 50+ policies and I'm kind of tired of clicking on each policy and then editing the page and saving. Editing the sql was so fast compared but I'm afraid it won't work. If it won't work, is there a similar easy way to do this with the API? Here's the sql. update policies set trigger_manual='somename' where trigger_manual='somename2';

Hi, We are migrating print server in our environment, on existing server we have around 20 printers configured and users have mapped printers according to their requirement. We want to migrate the printer on the user’s machine to new servers from the existing server.I need help to fetch the configuration settings of the existing printer, so that I can recreate same for new printer.I created below script to get the printer name and destination from the machine and modify the name and destination to new print server and create new printer on the machine. However after script execution the new printer is appearing in the terminal (lpstat –v) but not in the printer preference of the machine.Thanks in advance. #!/bin/sh print_names=('ABCPS02_ABCP1-32310_HPM553' 'ABCPS01_ABCP1-32310_HPM553' 'ABCPS02_ABCP1-2450_HPM233') old_server1="ABCPS01" New_server1='ABCPS01P' old_server2="ABCPS02" New_server2='ABCPS02P' Default_printer=$(lpstat -d |awk '{print $4}') for print_name in "${print_names[@

Flash 26.0.0.137 came out yesterday. How long does it generally take before patches are updated in the Patch Reporting in JAMF Pro?

We have been using SCEP on our Macs since 2012. I needed to update the client to the current version so I created a new dmg with Composer. The software will push fine but won't run. I tried on a Mac that did not have the old version of SCEP and I tried on a Mac that did. Both pushed fine, both wouldn't run. When I install the dmg from MS, it works fine and will override the installed version and run or will run on a Mac without a version present. I have never really had a problem with software not running after push so I don't quite know what to do here. Any advice?

Hey guys. I have a script I wrote to use as an extension attribute to check and see if Remote Management is enabled on a machine or not. However, while it runs really well locally, it only returns 'On' when used in an extension attribute, even if I know for a fact Remote Management has been disabled. I've included the script below. Anyone have any thoughts? #!/bin/sh Status=`launchctl list | grep '^d.*RemoteDesktop.*'` if [ -z "${Status}" ] then echo "Off" else echo "On" fi

Hey guys.I tried everything in Jamf nation and other sites.I couldn't find any solution for my problem.I'm trying to write a script that test the file existence and if its true he should do the A if not he should do B.The problem is that nothing works when it comes to Current User location ( ~ ).Not the $3 or anything else worked..Oh and it should work with Altiris or any other deployment solution. You just cant find a reason to love Mac :(Can someone help me with this problem I'm stuck with?

We're setting everything up for our JSS install (v.9.91) - we have our Jumpstart session scheduled for next week. I have a question related to the database server that we are intending to have as a separate system that our JSS talks to. (We are using MariaDB 10.0.x.) Now, we've setup the DB server to be fine talking over TLS, as shown by connecting via the command-line tools: <JSS server> $ mysql --ssl -u jamfsoftware -p -h <JSS DB server> jamfsoftware...> status...>> SSL: Cipher in use is DHE-RSA-AES256-GCM-SHA384 Is there an "easy" way - through a configuration mod - to enable JSS to be happy talking to our database over TLS, rather than in plaintext? I don't, at this stage, need to have any more advanced client-cert setups - just a "regular" TLS session against the server-cert to protect the confidentiality of the connection as it travels across our network. I've tested the setup by changing the GRANT privileges to

Has anyone used Apple Configurator 2 and DEP? I can't seem to get my devices Supervised. The specific features we need is having our MDM un-removable and the iOS layout. Apple supports it, our devices enroll to the JSS but nothing is supervised. https://support.apple.com/en-us/HT201092 Any help would be appreciated!

Is there a way to do this. We are trying to deploy the agent to stress test it across our fleet and find any underlying issues with our base policies. We are wanting to deploy the agent to a set of 20 macs via ARD but this fails on "QuickAdd.pkg" could not be installed. Error message "Validating packages..." Is it possible to deploy this via ARD, we are not really wanting to manually install and have to input admin creds on to the macs we are trying to deploy to. Thanks

Hey everyone! Thanks for taking the time to read this. I've been looking at lot of the JAMF discussions and man pages and other materials, trying to find a way to compile them into something that works for my environment. We are using DEP and have PreStage Enrollments setup to install the JSS binary. So to enroll them I only have to power them on. The ultimate goal for me to walk away at this point assured that SmartGroups and Policy will take over. Trouble is that SmartGroups and Policy's are based on the naming convention for the devices in our school (Room#-D##). Multiple users will be using these so a device named after a user is not ideal. I was looking into renaming the computers based on the serial number but I can't quite seem to get the code right. I am working with JAMF 9.96 (I'll be upgrading to JAMF Pro over the summer)JSS is on a MacPro running 10.11.6 (will also be upgraded over the summer)End devices are running 10.12.3 (will be upgraded over the summer)

Hey guys..so this is a bit of a weird issue. Basically, we are migrating to use Cisco AnyConnect v. 3.1.05152 as our VPN solution. Problem is, the JSS (8.73 and 9.32) does not grab the IP address AnyConnect broadcasts. Instead, the JSS, both/either version(s), grabs the IP address in system preferences > network and displays that as inventory information. Even if the JSS has a forced check in from terminal, it still only grabs the IP there and not the one actually being broadcasted by AnyConnect. For example, IP A and B are being displaying in system preferences and are usually from the user's home router or where ever they are. AnyConnect is displaying IP Address C and it is not being caught at all by the JSS. Therefore, when you try to remote into any Mac with Casper Remote, it tries to SSH through their home network IP (i.e.; 192.168.1.10 or 10.1.0.10) instead of the corporate IP. IP Address C aka the IP from the AnyConnect client isn't getting to the JSS at al

Hi there, Trying to write a script that does the following Runs under the current logged on user Removes their FavoriteServers.sfl file (or even the whole parent directory) killall cfprefsd killall sharedfilelistd killall Finder Uses the SFLTOOL to add a new entry to the (now empty) FavoriteServers.sfl file If I make the below code unix executable and run from the users desktop, it works a treat. #!/bin/bash rm ~/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteServers.sfl killall cfprefsd killall sharedfilelistd killall Finder rm ~/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteServers.sfl sfltool add-item -n "OSAKA" com.apple.LSSharedFileList.FavoriteServers "cifs://OSAKA/" killall Terminal I think I will need something that actively targets the logged in user. I'm guessing as Casper is currently set to SSH as "HSCO.ADMIN" (local admin account) it will attempt to run all the commands targeting the

I'm trying to install the print driver for the Xerox 550-560 with Integrated Fiery onto Sierra boxes via Self Service. Logs for the failed policy: [STEP 1 of 5] Executing Policy Xerox 550-560 - Install [STEP 2 of 5] Mounting Distribution Point Verifying package integrity... Copying Fiery Printer Driver.pkg... Installing Fiery Printer Driver.pkg... Installation failed. The installer reported: installer: Package name is Fiery Printer Driver<br/>installer: Certificate used to sign package is not trusted. Use -allowUntrusted to override. [STEP 3 of 5] Mapping Printer Xerox 550-560 Integrated Fiery... [STEP 4 of 5] [STEP 5 of 5] Unmounting file server... I went to the download page to see if there is an updated driver for Sierra. There is not an updated one available for Sierra. So I downloaded the El Capitan driver and tried to install it, only to be presented with a certificate error stating that the certificate was expired. I trusted the cert and the driver installed properl

Hi all, at my client we have a zoo of MacPro's Ethernet , MacBooks with Thunderbolt-Ethernet and Thunderbolt-Displays. While we're upgrading the Macs to latest Yosemite (ElCapitan is not an option because of the productive environment), clients often "forget" the Network-Settings (DNS-Servers and Proxy). Normally, we have three locations: Client_Net:Only Ethernet, Thunderbolt-Ethernet or Display-Ethernet enabledSpecial DNS and Proxy Client_WIFI:Only WIFI enabledSpecial DNS and Proxy WIFI-FreeAny Adapter can be active and can be used (WIFI, Thunderbolt-Ethernet,...)No special settings. My question: How to put it with "networksetup" into a script that these networksettings/locations are with a firstboot-script are enabled again? Thank you!Holger

Dear all, After installing 9.99 jss update, the web home page of jss show up for few seconds and then it comes back to the login window. I reinstalled the JCE file but nothing changed. Have you encountered that before?

When it comes to scripting I'd say I'm mediocre compared to most folks so I need some help really nailing down a DO loop which I don't really use very often. Purpose of the script: We use ARD to remote into machines so we populate ARD Field #1 on our machines to with the asset tag number that applies to the machine; found on a sticker on the bottom of the laptop. We're looking at moving over to DEP and I'll need a way for the user to enter the asset tag number for us since we, as techs, are no longer doing since we're not building the machine any longer. I'd like for the script to basically not exit until the user has entered an integer into Cocoa Dialog field that is appearing on screen. It's mostly working but it's definitely not pretty and the pop-ups are not appearing in the order I'd like every single time. #!/bin/bash ## Global Variables CD="/Applications/Utilities/CocoaDialog.app/Contents/MacOS/CocoaDialog" jamfHelper='/Library/Application Support/JAMF/bin/jamfHelper.app

Let me preface this as I realize that these are separate services and the pro's and con's of each. We have been looking at setting up one of the services but are more leaning towards a SUS as we need to control distribution of software OS software updates per our security group. That being said a caching server would be beneficial for us regarding non OS updates from the App Store as well as eBooks. I am planning on testing to see if I set the software update distribution server on our clients if it will overwrite just the software updates that the SUS delivers or just all of the caching sever in general. I figure I would ask here to see if anyone had tried and what your results were. I have looked at these 2 Apple articles but they are not 100% clear on this either. About Caching Service, Content types support by caching service in OS X server We also queried with Jamf and they also are not 100% sure either. I may be crazy for even wanting to do this but it is a thought and figured

I'm failing in my attempt to create a .webloc file on all users desktop that the students cannot delete. I've create a DMG in composer with the .webloc file and the permissions set to 444. I deploy the DMG through Casper with FUT and FEU (either as a policy or with Casper Remote) and the file is placed correctly in the existing users Desktops and in the User Template folder. I check the permissions of the file on a non-Admin users desktop and it shows "-r--r--r--@ 1 john.doe wheel". I login as the non-Admin user and I am able to delete the file from my desktop. What am I missing? I'm thinking it has to do with the extended attributes denoted by the @ at the end of the permissions, but I'm not exactly sure where to go from there.