Anyone notice this happening Global Management?

I am trying to get Microsoft Lync uninstalled so that Skype for Business will be our main communication app. I have indexed the package, marked it for uninstallation and even tried using a script to uninstall but Microsoft Lync refuses to go away. Here is the script I tried in conjunction with the policy I created. I have since removed the script. What is the best way to remove a packaged pushed by Casper Remote or a policy? I am missing something? !/bin/sh !/bin/bash loggedInUser=/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }' rm -rf /Applications/Microsoft Lync.apprm -rf /Users/$loggedInUser/Library/Application Support/Microsoft Lyncrm -rf /Users/$loggedInUser/Library/Logs/Microsoft Lync-* exit 0

Does anyone know whether there is a way to determine the currently logged in Self Service user via terminal/bash? I am in the process of developing a script that would map a managed network printer, but in order to do so I also need to provide the Active Directory username in order to map the printer correctly. Since our Macs will not be bound to AD, I cannot trust that the local user accounts will follow our AD user naming conventions correctly. Otherwise I'd simply call id -un and call it a day. Any ideas? Thanks in advance for any feedback.

Installed 9.98 in my test environment, and set a device policy to no allow touch ID to work. Yet it still works.... anyone else see this?

This is a first for me. I have a Mac that was freshly wiped clean and imaged with a 10.12.1 image. After the first reboot it actually ran the EnrollmentCompleted policies on its own (which haven't been happening lately). All the Enrollment policies and check-in policies were successful as well as binding to AD. Everything looks normal EXCEPT the only profile it got was the MDM. That's it. When I check the computer record in JSS it says it is in the scope for 3 others it's supposed to automatically get. I waited over an hour and none of them installed as expected. I've had situations where a lone profile just didn't want to install so I went through the drill that usually works: I ran jamf RemoveMdmProfile and jamf mdm and jamf manage but still the only profile installed is MDM. I've rebooted several times. I am able to manually install the profiles if I download them from JSS to the computer but I need to be able to push and pull and change settings so a manual approach is not go

Hi All, I am having an issue with the new MacBook Pro's with the TouchBar getting prompted with "Hold For Authentication" when printing to a printer on our network. This had previously had happened on our older MacBook's but I added a script to authenticate the printer after it was added, which is still working on all non-TouchBar MacBook's. Has anyone else run into this issue? Thanks,-Eric

We use static IP's in our environment and have a need to verify default router IP's from time to time. Can anyone recommend an extension attribute or script that would display the default router/gateway info?

Hey all, I'm looking to create an iOS extension attribute. Namely, one for EASDeviceIdentifier, which iOS 7 and 8 use (and Exchange gathers) when setting up and Exchange account on an iOS device. We want to gather this in the JSS but it doesn't seem like it does so by default. Any leads would be great!

Hey Everyone! So, I have been using AutoDMG for a while to create our base deployable OS'es. When we re-image our Macs, we erase the hard drive and lay down our base image. We haven't been touching the recovery drive, to my knowledge at least. I read that OS'es built with AutoDMG create automatically, the recovery drive. The question I have is; for these re-imaging situations, how do we deal with the recovery drive? Do we have to update it? I am suddenly at a loss on what to do with this. Do I partition the recovery drive somehow? What are others doing when re-imaging their Macs? Right now, I have a couple of MacBook's causing us grief and I would like to use the recovery drive to fix this drive. However, the recovery drive is 10.10 something and the boot drive is 10.11.6. Thoughts?

Hello, By using DerFlounders post on upgrading OSX, I've started preparing a package for updating to macOS Sierra for those in our organization who are still on older versions of OSX. I got the following script from the same source but have modified it a bit...sadly, I know very little of scripting and while this seems to work, the issue is that while the script will prompt me if my power isn't connected (for example), it will not stop the script or policy from running. Everything else seems fine so far though. Would anyone be able to assist me with what I'm doing wrong? #!/bin/bash available_free_space=$(df -g / | tail -1 | awk '{print $4}') osvers=$(sw_vers -productVersion | awk -F. '{print $2}') PowerSource=$(pmset -g ps | grep "Battery Power") needed_free_space="$4" os_name="$5" insufficient_free_space_for_install_dialog="message goes here $os_name message goes here $available_free_space" adequate_free_space_for_install_dialog="$os_name message goes here." no_ac_power="Power me

Need Guidance, For disabling the Check auto Updates for Adobe Reader X from contents.I know i can using Adobe Reader >> Preferences >> Categories >> Updates >> Check for Updates.I need to select Do not download and install updates automatically for all my users.I dont wants to use this above path.Is there a way to disable this from Contents or from other resources like Plits or from any inside script. Regards,Sonu W

Our facility must sometimes 'clean' a system when data that's not supposed to be in the open, ends up in the open and on a system. The usual avenue for this data finding it's way onto a system is email and we must purge the targeted email in conducting the 'cleaning' of the system. This also means rebuilding the email database to ensure the deleted emails CAN'T be recovered. Under Outlook 2011 Mac, this was performed simply by holding the option key during launch and rebuilding the mail database. Outlook 2016 has removed this feature and the official support from Microsoft is that Outlook will determine when a database needs rebuilt and users shouldn't do this anyway. Well, we still need to do this when cleaning a system. Luckily someone made a post on how to do this on a SQLite database which Outlook 2016 uses. Post Here: http://www.cortig.net/wordpress/2016/04/25/outlook-2016-sqlite-database-commands/ I tried making this a little easier for our field technicians and wrappe

Hello, in the System Preferences we blocked the iCloud pane. The user now can't set his Apple-ID and so on. This setting we push over a profile. Now i have seen in Apple Mail or Apple Calendar that i can setup an iCloud account. In the menu Mail/Calendar i have the option "Add account...". In the next step i choose iCloud, write my Apple ID and the password and after them i can choose which iCloud services i wanna use. What ist the way to restrict this?

I have a user who is on 10.11 who is bound to AD and using a Mobile Profile and needs to change her password. When she tries she receives and error stating "The Password for account "XXXXX" was not changed. The server is not available. Change your password when the server becomes available. She is connected directly to the lan via hard wire so I know she should be able to talk to the server. Doing some research everything I see is pointing to unbinding and rebinding her Mac to the Domain so that it will be able to change password again. It appears that the name on her Mac also didn't get changed so I will need to do that. My question is if I do the unbind and rebind as well as the name change will that mess up anything with the mobile profile? We are dealing with an EVP so I don't want to mess up her profile if I can avoid it.

Does anyone have or know how to make an EA to show Retrospect client version?Thanks.

My organization uses JAMF for all staff machines, however we have a large number of independent contractors who bring their own devices, and therefore will not be enrolled in our device management. Currently we deploy all printers to staff via the JSS, which is quite easy. We have the printer, drivers, finishing and a default preset deployed via the JSS. We are installing new printers in our region's offices, and these printers take a lot longer to set up due to the extra settings (added paper trays, staplers/booklet) as well as adding our company's standard presets on every machine. Is there a way to make a quick installer either from what I already have in the jss, or a pkg installer from a snapshot the will install the configuration for the printers as well as the presets? If i make a pkg installer is there a way to have this install into the current user, rather than create a new folder?

We upgraded to 9.97.1488392992. Once the install was complete, the web service quit working and we haven't been able to make it work. Log shows web service is closing all attempts to connect. Has anyone experienced this?

I know you used to be able to run a simple rm -r (user)/.Trash command to empty the trash, but that doesn't seem to be the case in El Capitan and newer - you're supposed to drag all the files in the Trash to the terminal window and then run the command. Is there some way to automate that process so I could include it in a general first aid Self Service policy?

Is anybody experiencing an issue with Outlook after updated with today's version 15.32? Some users reported that they can not open new emails - clicking to the "New Email" button does not open the new email window. Outlook itself shows the status "Connected to Server".Thanks!

Hi everyone! Building out a new JAMF Pro environment - I'm in the testing phase. The new environment will have an application server and a distribution point in the DMZ. Internally we have a JSS running JAMF Pro and SQL on the same server, and the primary distribution point. Right now during testing I'm seeing the following issue - if I create a new policy, internally the clients I'm testing see it right away. However, externally, when they check in with the JSS they don't see the the new policy. Externally I can connect to the JSS without issue, and run a recon, with no errors. If I restart the JSS on the DMZ, it then grabs the "updates" from the internal server, and I can then force the policies to run via command line or self service. This new environment is much different than our existing. I'm moving from running JAMF Pro on XServes that are internal only to new application servers running on Linux (Cent OS) VM's and distribution servers running virtualized Windows Server

Hi I'm trying to reduce the multicast DNS timeout by editing mdns_timeout, but when I do that I get: 2017-03-17 13:42:04.643 defaults[1706:22397] Could not write domain /System/Library/SystemConfiguration/IPMonitor.bundle/Contents/Info.plist; exiting thank you for your help

Hi All, After enrolling one of our laptops now it seems that we need to un-enrol it. the reason for this is the machine will be used off site. is there a way to do this? I know that it will not be able to check for policies, but the checking windows still appears.

Hi folks.I have an imaging configuration profile where I1. Bring down the OS2. Install a small PKG (contains just a background)3. Start a script. The PKG is there so that the adobeinstall account logs on after imaging (by the way, can we not do this without a dummy pkg??).The script basically does a jamf policy -event customevent which will fire off a load of policies for install. I have a machine that was doing nothing. The jamHelper screen was up and nothing happening for a very long time. My script logs showed the event was to be triggered, but the jamf.log show no event being triggered. No activity in particular was happening on the machine. I SSH and kill jamfHelper and.... suddenly the policies are triggered, and the processes lurch into life. All now works well. I don't get this behavior on some other machines that I image.Any ideas as to why jamfHelper is... well, essentially blocking the progress here? Thanks

Hello, In the FV2 admin guide, it mentions that you can go to Local Accounts and create a new account with the Filevault check box. If I want to enable a local account that already exists, will following that same process just enable the account? Or does it have to actually create one?

I have a little over 300 laptops that I would like to shut down every evening between this time and that time. I am able to make adjustments for this in configuration profile. However, a pop up window comes up warning the user that the laptop is going to shut down in x amount of time, and allows the user to cancel the operation. I do not want them to be allowed this option. I also have noticed if it shuts down as noted, the user can boot it back up and continue to use it. Any solution to this problem? Any help would be appreciated.