Hi Guys, Has any one seen this? We don't enroll many macs using the recon app so have not noticed this until now. When trying to do a remote enrollment with recon we get the following error. However i can scp over a quick add package and install it via ssh just fine.

Hey all, I'm researching this, but in the interest of not reinventing the wheel, I thought I'd ask the nation... The Xprotect Status extension attribute posted here returns the following on 10.11.3: The domain/default pair of (/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta, LastModification) does not exist I've looked through the file referenced and there's no instance of a date or the words "modified," "modification," change," or "update" in the XML. Does anyone know where to look for the last Xprotect update?

Hey everyone, I am pretty new to Casper and the community and thought why not break the ice by asking a general question. What is the advantage of using Casper Suite over SCCM? Our company currently uses SCCM to manage our Windows users and they are stating that it can do everything Casper can do for Mac as well. I did some research and came across http://blogs.technet.com/b/pauljones/archive/2013/06/02/managing-mac-os-x-with-system-center-2012-configuration-manager.aspx . I know there are differences I am just wondering if someone could point out some of the major advantages to Casper over SCCM.

Hi, We are using JAMF Casper Suite version 9.81 (without test environment) and we have questions about file sharing (distribution point) if we want to use HTTPS.At this time, we only use SMB file sharing for one distribution point. If we want to activate HTTPS on this distribution point :- Is priority givent to HTTPS then SMB if failed when it is activated ?- Is it possible to know for post-scripting if Self Service have been using SMB or HTTPS ? Thanks in advance for your exprerience return. --mdpt

I'm looking for documentation on how to configure LDAP settings via the command line because I'd like to create a script. The guides I've found so far have been too dense to be useful.

Our environment wants us to upgrade all Macs to 10.12.5 (~300 machines) We've previously cached the package on user's machines, then allow them to upgrade through Self Service. How are some of you forcing 10.12.5 updates for the user's that do not want to do it self service?

Hi all, Wonder if anyone else ran into the same issue I did. I was just given a Macbook Pro 15" with touch bar. It is a 2017 model (The hardware is registered as MacBookPro14,3 within Casper) What I normally do is go to Macbook's recovery partition (Command R at startup), and then run asr -source /SourceDirectory -target /TargetDirectory to wipe out the entire internal SSD and replace it with our macOS image. I must have done asr a thousand times on Macbooks from 2013-2016. But on this particular Macbook Pro 2017, it completely bricked it :(- I tried just restarting, it gives me a stop sign- I tried Command + R again, it gives me stop sign.- I tried option, it can see the internal drive, I select it, it gives me stop sign.- I tried option, then select an external drive that I know it work. It gives me stop sign. I had no choice but to go to the Apple store, ask one of the genius to help me recovery it.(I saw what he did, he went to options, then selected Apple Stor

I built a Netboot image using AutoCasperNBI and 10.12.5 and it doesn't seem to netboot the new 2017 MacBooks, anyone else seeing this or figure out a good workaround?

I am trying to script removing our old MDM enrollment through DEP from Macs so I can have them prompt for DEP enrollment into Jamf. I am OK with the end user being prompted for their admin password but would rather not have them manually type in the commands into the terminal. !/bin/bash sudo rm -rf /var/db/ConfigurationProfiles/sudo rm /Library/Keychains/apsd.keychainsudo /usr/libexec/mdmclient dep nag The commands work great when manually typed into terminal. Unfortunately none of them seem to work in a script. : command not found2: Password:rm: /Library/Keychains/apsd.keychain : No such file or directory[ERROR] Unknown command: nag: command not found12:

Hi all i need to create a hidden account with its home folder in /var/if i place the account password in a script or add the full command including the password into Policy > Files and Processes isn't this a huge security flaw ? /usr/local/bin/jamf createAccount -username <netadmin> -realname <"Network Administrator"> -password <p@55w0rd> -home </var/netadmin> -hiddenUser -admin can anyone suggest a way to deal with this ? or if i use CreateUSerPkg is the password any more secure in pkg on our JDS ? and... does using -secureSSH to the end of the command make it so no other users can ssh on ?

We just wiped/setup an iPad that had never been enrolled before (purchased from Apple). It was added to our normal prestage, says "being configured by organization" during setup but as soon as it's done it immediately asks for an Apple ID on the lock screen. I can't login with any because there is no internet connection. I have never seen this before. I have completely removed it from jamf twice and this keeps happening.

I'm sure this has probably been answered, but I cannot find anything on it. We are working on upgrading our JSS system to 9.32 over the next couple of days and I'm having an issue with the location of the database.I currently have a Windows 2012 Server box running the JSS installation. Our MySQL database is on a separate local drive. For some reason, when I installed JSS it didn't give me the option to connect to it at a specified location. I'm somewhat new at this and was wondering if I could get some assistance? Sincerely,TJ

If I set a server to 'Limited Access' - 'Computer Access Only', does the /enroll URL still work? I'm assuming not, but it sure would be helpful. I'm trying to increase security by setting up a full access server in a restricted network, and changing our primary server to computers only, but all our documentation tells users to visit /enroll.... Todd

I have to Macbook Airs that I am deprovisioning. When i run the command below. It gives a list of items being removed like normal. Except when i go to System Preferences I still have a Profiles icon and things are grayed out like it is still enrolled. I have tried re-enrolling it and running the command again with no luck. If I try to run any Jamf script in terminal after running the one below I get the message "sudo jamf: command not found" sudo jamf removeFramework Has anyone else encountered this issue?

This could be opening a can of worms and an endless debate so im hoping this can be kept civilized as possible :) I currently have my main macbook pro and an iMac next to me for doing composer, autodmg etc work. I am thinking i might be better of using Fusion or parallels for snapshotting reasons and off domain testing, etc. I have to use other windows applications so having a VM of windows and of a blank OSX would work well.We already have Vcenter and vsphere running all our VM's in the office so i'm thinking Fusion mix in their quite nicely. I can see there are different version of Fusion which makes the choice a bit more confusing What do people recommend or use them selves?Why should i go one over the other?is there one that works better with Jamf Pro? Look forward to reading the feedback.RegardsPete

Hello! Maybe someone has any idea? I try to get numbers from the JSS by using the API. I try to run this command: var=$(curl -L -skfu jssuser:jsspassword ‘https://JSS_URL/JSSResource/computergroups/id/1' | /usr/bin/awk -F ‘<size>|</size>’ ‘{print $4}‘) When I run this command with the URL of my test-jss it works like expected. But when I run it with the URL of my productive JSS it gets no value at all. I have no idea why.. the user and password are correct, if I try them on https://JSS_URL/api at “computergroups” it works, so should be no problem… any idea? Would be glad about any help…

La discussion se trouve ici

I am working on cleaning up our JSS and was wondering how often people use the "All Mobile Devices" scope? The more I work with the JSS the more I feel like I should create static groups whenever possible and avoid using "All Mobile Devices" and Smart Groups altogether. Thoughts?

Hi, Have searched the forums for this but couldnt find an answer so assume its something wrong with my process. Was testing Self Service uninstalls yesterday and noticed that when trying to uninstall self created pkg files that they are leaving behind some .framework files. Namely: Growl.frameworkSparkle.frameworkNMSSH.framework I have confirmed that these files are in the pkg when it is bundled and installed, so they should be removed on installation too aiui Has anyone come across this and if so do they know where I have gone wrong? Thanks

Hi guys, Recently having an issue where config profile is stucked in Pending state. There are some computers that are in pending state for a few days and suddenly the payload is applied. Checked the log and saw a lot of Error in sending push notifications. com.jamfsoftware.jss.pushnotification.connections.ApplePushNotificationServiceConnection@3ass0bn82. Software caused connection abort: socket write error 2017-05-26 03:13:11,861 [WARN ] [neralPool-9] [PushQueueManager ] - Error sending push notification I have checked ports are opened for the following: gateway.push.apple.com:2195feedback.push.apple.com:2196 Have also done the following:sudo jamf removemdmprofile and sudo jamf mdmsudo jamf reconscope and rescope the config profile. Thanks

Here's the scenario, 5th-12th grade have MacBook Air's. 5th grade, however, is treated differently since it is elementary school. They do not take the devices home, but rather stay in a cart in the classrooms. That being said, we set passwords for the student AD accounts according to which teacher they have and which number they are in the cart (ex. Teacher05). Since we do it this way, we do not like passwords to be changed for 5th graders...although, 6th-12th graders CAN since they carry their devices and it's more "theirs" than sitting in a device charging cart in a class. Here's the problem, since we globally push the same preferences and settings in JSS to this same MacBook model (it's easier this way), password changing is ALLOWED on all the MacBook Air's, including my 5th grade students. While this is not a major deal, it can crop up an issue here and there. A student will change their password and then proceed to say they are locked out of said device, whether it's on purpose o

Hello, I am just starting to use the API queries with python. I am having some difficulty getting anything to 'PUT' changes for existing devices. I keep getting a HTTP Error 500: Internal Server Error. I am unsure where to check for logs on the server side for API access attempts or if there even are any such logs. I have tried multiple attributes but keep getting the same error, here is a sample below. I have a test.xml file and in that test.xml I have the following<mobile_device><location><username>testusername</username></location></mobile_device> code as follows:------from urllib2 import urlopen, URLError, HTTPError, Requestfrom xml.dom import minidomimport base64 my_xml_doc = minidom.parse("test.xml")url="https://myserver:8443/JSSResource/mobiledevices/id/9999"req = Request(url, data=my_xml_doc.toprettyxml())req.add_header('Content-Type','text/xml')req.get_method=lambda: 'PUT'bas

We are preparing to scale from about 1500 iOS devices to 10,000+. We are currently running the JSS in a virtual Ubuntu environment with our SQL server separated out on its own VM. We plan on standing up two more JSS boxes and placing a hardware based load balancer in front of them. I have heard varying advice regarding sticking with Ubuntu in a virtual environment or moving to several Mac Minis running OS X Server. I am wondering if anyone has any advice. Thanks

Hi All, On my 10.8 image, i'd like to change the default mail client from Mail to Outlook.. so far without much luck (original post was here: https://jamfnation.jamfsoftware.com/discussion.html?id=4085). I've tried the below MCX, but this doesn't seem to work on 10.8: Display Name: Default Email Application Application Domain: com.apple.internet Key Name: mcx_defaultEmailReader Key Type: string Key Value: /Applications/Microsoft Office 2011/Microsoft Outlook.app If I try the below, then the launch services plist gets overwritten at login. (due to the JSS's inability to other MCX settings that work Once for AD accounts https://jamfnation.jamfsoftware.com/discussion.html?id=4499). Display Name: Default applications Description: Sets preferred applications. Apply Setting To: User Level At Every Login Domain: ~/Library/Preferences/com.apple.LaunchServices Key: LSHandlers Value: <array> <dict> <key>LSHan

Hi, So with the changes in Sierra meaning that only 1 local account per machine is MDM enabled we have hit a wall. As we did not have a Directory Service in place beforehand we are trialling JumpCloud. However their user provisioning appears to be that it creates a local user, so still not MDM enabled. Does anyone know a way around this or if I am doing something wrong? Thanks