Hey all, So I'm trying to build a workflow that we can use to upgrade all of our (compatible) computers to Sierra this summer (while the schools are empty). We have a lot of computers in our district (including bretford carts full of Macbook Airs), spread out across 15 communities (some are very remote). Previously, we were leveraging the "createOSXinstallPkg" utility, but (according to their page) as of 10.12.4, this is no longer an option. I've looked into Josh Roskos' method (here & here), as well as some other methods (like this one). I've gotten them working from Self Service without any problems, and I've adapted them so that they run automatically (assuming a user is logged in when the policy triggers). HOWEVER, if the policy runs while no user is logged in, I get the following error (this is output from Roskos' script): Script result: Power Check: OK - AC Power Detected Disk Check: OK - 475GB Free Space Detected Launching jamfHelper as FullScreen... Launching sta

I'm packing up the Casper Suite apps via Composer by doing New > Normal Snapshot > (Name) > Complete installation. Then when it shows the summary, I delete whats in there, and drag/drop the Casper Suite folder from Applications back into Composer, propagate permissions from Applications > Build as DMG. When I deploy it to a machine, all of the icons are missing. It seems to work, but it's not pretty.

I am trying to do something rather interesting to help our student body with Garageband. These are non-admin accounts, installing Garageband from VPP in Self Service. I have other scripts to automatically download and install this content but for those that have already spent the time downloading the essential content or the complete sound library I want to have a script that will find their Garageband download directory, reference its location and run the pkgs within it. I have another script that can run the installers if I know the directory location, the trick is that these folder names are generated randomly and stored in the /var/folders/ structure which makes it tricky to search for. Any help is greatly appreciated.

According to JAMF's training policies, certification earned on JSS 9.x will be invalid when JSS 10.x is released sometime in 2017. Length of Validity:Jamf certification is awarded upon satisfactory completion of the associated exam (CCT, CCA, CJA) or attainment of enough points to equate that level of certification (CCE). Certification is awarded and valid for that specific major version of Casper Suite on which the course was delivered. For example, a certification earned on JSS 9.3 is valid only on JSS 9.x. It is no longer valid once JSS 10.x is released. If I was to take a CCT or CCA course in the first half of 2017, does that mean those certs will be invalid shortly after? Do current JAMF courses offer certification on JSS 9.x or have they already started offering certification on JSS 10.x?

I've had some issues within my organization (running 9.96) regarding patch reporting with Adobe Flash Player. Here's what I received from Jamf after raising this to them. Unfortunately, it looks like we are running into a current Product Issue internally reported as PI-002952 Looks like the following Titles which require a custom Extension Attribute are being affected that we are aware of: • Adobe Flash Player • Adobe Shockwave Player • Java SE Development Kit 7 • Java SE Development Kit 8 • Java SE Runtime Environment JRE 7 • Java SE Runtime Environment JRE 8 • Microsoft Silverlight • Sophos Antivirus for Mac The issue is with the absolute path /usr/bin/defaults not being defined for the 'defaults' command within the RESULT variable of the Extension Attribute. An example of a Title that requires a custom Extension Attribute that is working properly would be Mozilla Firefox Excludes ESR. You can see the correct absolute path for this Title's Extension Attribute as compared to the

Hi All, We updated last week to 9.98. The server seems to be running fine, however, we can't run backups of our database and we can not connect to the database using the JSS Database Utility. We get the error: Unable to connect to the database: Warning: Using a password in the command line interface can be insecure.ERROR 2005 (HY000): Unknown MySQL server host 'https:/xxxx.xxxx.k12.ca.us:8443' (0) Please make sure that eh MySQL server is running and the a firewall is not blocking the JSS Database Utility. Our server is running on a Apple MacMini 3Ghz Intel Core i7 1600 MHz DDR3 16GB RAM. We are running MySQL Ver 14.14 Distrib 5.6.31, for osx10.11 (x86_64) We can not run backups from the command line either. We get the following error: mysqldump: Got error: 2013: Lost connection to MySQL server at 'sending authentication information', system error: 32 when trying to connect Starting and stopping MySQl is finicky from the Settings app. However it seems to work fine via the comma

I have an AppleCare enterprise case open for this, but just curious if anyone here is experiencing the same thing: When you are logged into a mobile account on an AD bound Mac and go to setup iCloud, the currently logged in network account will get locked out as soon as they attempt to provide a password when prompted to provide an admin password to complete the iCloud setup. The iCloud setup will "fail" but then the services seem to work anyway, but then if you unlock the network account it will lock again shortly after that as long as you stay signed into iCloud. Been seeing this behavior for a few weeks, but wanted to wait until public release to discuss it here. Behavior has persisted through dev preview 8, and both GM builds (the second of which is the same as the final public build released today).

When installing a software using terminal, I use this command: sudo sh ~/Desktop/cbdefense_install_unattended.sh -i "/Users/name/Desktop/CbDefense |Install.pkg" -c COMPANY CODE Company code being the access code. It installs perfectly, silent, and the software communicates with the agent. Now, since it successfully installs I used the Snapshot tool from Casper Composer. Took snap shots before and after installation. It then compiled the changes into a .pkg. I can install the .PKG to a target device using terminal or remote command and it works but does not communicate with the agent. Since Snapshotting is not working, I need to know how I can repackage the .pkg with the company code within it, so when it is deployed using Casper it can work on all targeted devices. Details would be greatly appreciated.

Hi all, Anyone know where I can download Adobe reader XI or DC? I have been onto https://get.adobe.com/reader/otherversions/ , and it only downloads a downloader, which does not help me package it. I have been to Adobe forums, but they are completely hopeless. Nowhere near as helpful as JAMF Nation :)

Folks:A few times lately we've had Casper Remote stop in mid push with this error. JSS says it's in management, recently inventory updated and checked in recently. I can run Recon on it remotely and I can SSH to it as root and navigate around so I know my root account on the Mac is all right. Once SSH'd to it I can run jamf manage: MRMIOMP1125:~ root# jamf manageGetting management framework from the JSS...Enforcing management framework...Checking availability of https://vrmiblrapp09.rci.rogers.ca:8443/...The JSS is available.Enforcing login/logout hooks...Enforcing scheduled tasks...Creating launch daemon...Creating launch agent...Checking availability of https://vrmiblrapp09.rci.rogers.ca:8443/...The JSS is available.MRMIOMP1125:~ root# And the log says: MRMIOMP1125 (792) Sending Wake On LAN command...Opening SSH Connection to 10.10.110.82...Authenticating...Successfully authenticated.Verifying Computer's Identity...The MAC Address has been verified.Checking Operating System V

I know this is off topic as it is not related to JAMF software but is related to Mac OS. Has anyone else experienced problems with connecting to older Windows server file shares via SMB protocol. We have 1 older Windows server 2003 box here and we recently started upgrading our Macs to Sierra 10.12. And the Macs we have upgraded will not connect to this older Windows server 2003. But our older Macs have no problem at all. If anyone has any input or solutions that would be great.Thank you.

Hi all I'm testing Apple Classroom 2.0 out here in the school with a handful of teachers.We want to use the Classroom app without mdm being involved(because without it is so much faster with only Bluetooth connection), so I deleted the teachers in the classes area. My biggest question will be: can i push somehow the classes to Classroom so each teacher don't have to make the classes manually(i don't think it can't be done because there not user way pushed anymore) i would like to know if there's any kind of work around. It would make a huge differents for the teachers if it can because each teacher don't have to manual add the classes(i know you can add them once and keep it saved that way, but if you have to do every class every year then it would be a burden to do) Thank you all for reading this and comment if you like. Best Regards Bert ps: I'm sorry for my grammar,English is not my native language.

Hello all, I need help creating 2 Extension Attributes – 1 for Office 2011 & the other for Office 2008 – to display this info for inventory. I’ve been searching around for this, but so far no luck – I’d appreciate it if someone can help me with this. Thank you.

Has anyone been able to print using the paper cut client?We have our printers set up to use Papercut. When I set up the machine to print directly to the printer, Success, however when I setup paper cut client, the printer doesn't pause but I don't see a printout either. Has anyone been succesful in printing on OS X using paper cut?

I have enabled SSO on my JSS and managed to lock myself out. I didn't edit my username to match my email address with Google. I believe that's my mistake anyways... Whenever I try to go to my JSS login screen I get redirected to the SSO sign-in through Google accounts. Does anyone know if there is a separate URL I can use to sign in to the JSS using a local account to edit the username?

I'm just about to try this out has anyone had any success or can share any tips? Thanks Abz

Hi, I'm trying to block notifications for the BBC News app at my school (too many irrelevant pushes during the day). When I go to configure the notifications for the app, I search in the Notifcations payload and an app called BBC News comes up with a bundle identifier of uk.co.bbc.news. This didn't mute the notifications, sadly, so I eventually discovered that the UK version has a bundle identifier of uk.co.bbc.newsuk instead. However, I can't edit the bundle identifier separately from the app name and it seems like the index for that pop ups might be built from a different country's App Store than the one I'm using. Does anyone have a suggestion for how to work around this? Thanks.

I cannot for the life of me figure this out. I've got an Application I put out on Self Service that won't allow students to open it. I used Composer to create a PKG (and a DMG) attached it to the policy. It installs no problem, Applications is whitelisted and other Apps work. When they try to open it, it says they don't have permissions to open the application. I'm not sure what else to try here.

Hi ya'll. I've been tasked with setting a default for a Xerox 7760DN for single-side printing. However I don't see a key to control that with lpoptions. The GUI reveals controls for 2-sided: Long-Edge binding and Short-Edge binding. But lpoptions doesn't show any such key. Any way to do this? crash-test-dummy:~ admin$ lpoptions -p Phaser_7760DN__00_00_aa_9a_db_68_ copies=1 device-uri=dnssd://Phaser%207760DN%20(00%3A00%3Aaa%3A9a%3Adb%3A68)._pdl-datastream._tcp.local./?bidi finishings=3 job-cancel-after=10800 job-hold-until=no-hold job-priority=50 job-sheets=none,none marker-change-time=0 number-up=1 printer-commands=ReportStatus,com.xerox.ReportSavedJobs,com.xerox.ReportJobAccounting,com.xerox.ReportColorCorrections printer-info='Phaser 7760DN' printer-is-accepting-jobs=true printer-is-shared=true printer-location printer-make-and-model='Xerox Phaser 7760DN' printer-state=3 printer-state-change-time=1490734546 printer-state-reasons=none printer-type=8433884 printer-uri-supported=ipp:

I'm doing some testing before I roll out Jamf to all my Macs. I have a Lion VM in VMware Fusion, it enrolled with JAMF but no Configuration Profiles beyond the MDM profile were installed even although some profiles are applied to all computers. JSS 9.9.8

Hey all: I've tried both Extension Attributes https://jamfnation.jamfsoftware.com/viewProductFile.html?id=135&fid=598 and https://jamfnation.jamfsoftware.com/viewProductFile.html?id=135&fid=322, but they always list as None. I've confirmed the appropriate setregproptool is in /Library/Application Support/JAMF/bin and the client actually does have a firmware password, but the EA still reports None after running recon multiple times. Anyone else run into this? Anyone using something else to pull firmware password status? Thanks for any help, Michael

Currently i'm unaware of a way to do this for Yosemite, so i'm hoping someone else has discovered a way. This article effectively summarizes the situation:https://gist.github.com/steakknife/b8e9c37d287f8b7d70ee mDNSResponder is now gone in Yosemite, replaced by discoveryd. Adding in the "--no-multicast" argument to discoveryd does stop multicast (bonjour), but has the nasty side effect of messing up WiFi. I experienced that today while working from home where it had been able to connect to my personal WiFi, but after a reboot could no longer find ANY broadcast networks, or connect manually. Removing "--no-multicast" and unloading/loading it made WiFi usable again. Hopefully there is some bullt-in solution that doesn't require me to setup firewall rules to block the traffic.

Hi All, Is there a way to pull list of software's installed in user's macbooks via JSS?

Hi All, I have this annoying problem. For some reason the option to change the setting for "Require password .... after sleep....." is greyed out. When I remove a configuration policy which only does some setting on the Login Window. (A Banner, force logon prompt to name/password field, show shutdown button, disable automatic login, Allow Domain Users + domain server, Local-only users may log in and combine available workgroup settings) somehow the above configuration profile is also managing the security setting. I have also tried to add another configuration profile to set the option automatically but this is doing absolutely nothing ... So either I am doing something wrong or there some kind of bug/feature which is causing problems. Casper version: 9.82Mac OS Client version: 10.11.3 We do see random results in the network with different client versions as in 10.10.x which have randomly access or no access to the above named option. Any help is appreciated! re

Trying to get my HD and connected servers to be on the desktop by default. I have a script that, when ran on my main computer, works great..... When I try to use the trigger on the test machine it doesnt seem to want to relaunch the finder even though I have the killall Finder command in the script..... !/bin/sh Enable Desktop Mounted Media defaults write com.apple.finder ShowExternalHardDrivesOnDesktop -bool truedefaults write com.apple.finder ShowHardDrivesOnDesktop -bool truedefaults write com.apple.finder ShowRemovableMediaOnDesktop -bool truedefaults write com.apple.finder ShowMountedServersOnDesktop -bool truekillall Finder I have that set in as a Policy in JSS. When I run the custom trigger, it doesn't fully relaunch the Finder as it does on my main machine.