"You have to edit the package in either Casper Admin or within the pkg details in the JSS to check the box labeled "Allow package to be be uninstalled" Once you do that and save the changes, back in your policy, the uninstall option will be available." I have done this but don't see an option to delete the app. Am I missing something?Im trying to silently uninstall Creative Cloud Desktop app

Hi there, I've created a small script that pings a few IP addresses and compiles the results in a text file on the user's desktop for the purposes of diagnosing network problems. My plan is to push this into everybody's /Applications/Utilities folder so that when we have outages we can direct them there. I also had an idea to have the app automatically appear on a user's dock if they currently have no internet access, but I'm not sure if that's even possible. Is there any sort of custom trigger I could use to modify a user's dock whenever they are offline?

Hi all, Having an issue whereby we had the key showInputMenu set to true for the loginwindow.plist... This seems to have caused issues when se clients are waking from sleep or screens saver & are then beachballing. I set the MCX as unmanaged, & later deleted it. Running a sudo JAMF MCX -username (user) -verbose doesn't show the MCX. But the setting is being applied. Should I delete/flush the MCX Cache @ logout next? & if so, what's your favourite method? (It's a user level MCX). This linked script deletes the keys, so worse case I'm running this as a launch agent. https://github.com/macmule/DeleteLoginwindowPlistShowInputMenuKey

Hi all, I couldn't find a way to do this via JSS and there doesn't appear to be anything on here about it. Is there an easy way to pull the serial numbers from every computer in a smart group?

At the moment I have a configuration profile that restrict access to "Users & Groups" in "System Preferences", I would like to enable it just for the owner of the mac, with restrictions inside the pane "Users & Groups"see picture for more details (I would like to restrict what's inside the red square), so I want the user to have access to "Users & Groups" but disabled the action to create or delete an account.

Hi All, I've recently had a few users reach out to me about our MDM policy erroring out for anyone on Android version 7, the new version that came out. We have an mdm policy that is required for our company email to function on mobile so this could create some issues moving forward. Anyone else had this issue with the new Android version? Things I've tried: Uninstall and reinstalling our company email. Accepting the MDM Policy again. Removing and re-adding my device password (Which is required by our policy)

At work I have a script to bind machines during enrollment.is there a way to check to see if its bound to AD to skip the bind script and continue with enrollment? thank you.

Anyone have a copy of Administering-FileVault-on-OS-X-El-Capitan-with-the-Casper-Suite-v9.81-or-Later.pdf Jamf uses AWS for storage and the file is currently offline.

We are kicking the tires on a cloud distribution point and I had a few things I am unclear on and would love some clarification. Can you run a JSS which uses only a cloud based distribution point without any file share based DPs? My understanding is that yes, this can be the case. If we do elect to have a file based and cloud distribution point, is syncing only able to be done manually or can a schedule be set? Is there a way to have a setup without a master dp (with all content) where content resides on only one distribution point? For example, serve large packages and images from a local file share DP and all other packages from a cloud DP? Any comments are appreciated. Cheers.

Hopefully someone can jar my memory. There was a vendor that offered a small scale management solution that had a table in the lobby. The name had something to do with a leaf or tree (or something). Does anyone have an idea? Thanks /randy

Backstory - Student computers all have a program called Securly set up on their computer. This allows us to monitor and filter student activity and send reports to parents. To set it up I have to change the DNS settings to point to Securly and install a certificate. Once I do those two things it starts working. Students in the past have used VPNs to get around Securly. I have set up now where students can not install VPN's (to the best of my knowledge). Current Issue - A student computer is not being filtered or monitored and all of the Securly settings are still in place as they should be. It does not matter if the student is using Chrome or Safari, Securly is not working for either browser. There are no extensions installed and the I do not see any network settings that are set differently from what they should be. The IP address is being reported as 192.241.173.138. This is not a school IP address or a Securly IP address and the location appears to be in New York which is also

I'm finally getting around to migrating to Configuration Profiles from Golden Triangle MCX, but having some problems with implementation that I'm hoping someone can clarify... Trying to boil this down to be as simple to follow as possible: I want teacher and students to be able to log onto any computer and get slightly different settings depending on their group membership - I'm keeping it simple for testing by limiting profiles to Dock settings (1 each for teachers and students) and Application restrictions for students only. I'm using a test JSS with only a couple of computers enrolled for simplicity.I have scoped the Teacher Dock profile to a Teachers static user group and All computers.I have scoped the Student Dock profile, and App Restrictions profile to a Students Static User Group and All computers. All the users are coming from Active Directory, and defined in Static User groups in JSS as Student or Teacher. I would expect that if I logged onto a teacher account, I should

I know this is possible, but I cannot figure out the best means of accomplishing this. I'm hoping it is possible to build out a single pkg or dmg in Composer. Here's what I'm looking to do:Deploy a custom user including pre-set password, custom settings such as desktop background, dock icons, bookmarks, and login items. I've managed to accomplish this by using three parts: a pkg, a dmg, and a script. Currently, I build out the user profile exactly as I would like it to appear and then use Composer to create a dmg that contains the user account. Then I use CreateUserPkg to specify the desired username, shortname, password, type, etc. Finally, I run a simple script that performs a chown -R for the name of the user account being created. I'm positive there's a simpler way to do this and that's exactly why I'm reaching out here. What would be the best means to have one single package that can do all of the above? Thank you.

In our environment, when a user calls the Help Desk for a recovery key, it is given over the phone. We've used another FV2 product (Symantec Endpoint Encryption) and prior to that PGP. With both products, when a Help Desk analyst retrieves the recovery key, it is automatically rotated, so the user can only use it one time and doesn't put it on a post it note on their desk. With JAMF FV2 management, this does not happen automatically, although there is a policy to 'manually' rotate the recovery key. Does anyone else see automatic key rotation as a need or do you use a different workflow?

I am trying to write an extension attribute to determine which systems have outlook auto discovery disabled. osascript -e 'tell application "Microsoft Outlook"' -e "get background autodiscover of every exchange account" -e 'end tell' When I run this I receive results of true. Any advise on how to pass Applescript results to Extension Attributes? Any help would be greatly appreciated.

Hi, I'm trying to run a policy with a script to run the sophosupdate command written from info here https://community.sophos.com/kb/pl-pl/15895 The script is #!/bin/sh rm -f /Library/Caches/com.sophos.sau/CID/cidsync.upd sophosupdate I get no errors if i sent this via Remote but the output on a policy is Executing Policy Sophos UpdateRunning script Update Sophos...Script exit code: 127Script result: /Library/Application Support/JAMF/tmp/Update Sophos: line 5: sophosupdate: command not foundError running script: return code was 127. Looks like it doesn't know where to run the command sophosupdate from.. I've had a poke around but can't seem to find an answer. Anyone else tried this or know the path to where the command runs from? Thanks Al

Hi Everyone. I am trying to add a policy that installs Pulse Secure on our endpoints, because we require it for use with VPN. I have seen the instructions from @rtrouton on now to deploy with a custom config, but they do not work, as I am simply trying to get the app to install. I have a .dmg from Pulse that contains a simple .pkg file. When running it manually on an endpoint, it works no problem. However, when I upload the same .pkg to the JSS and use a policy to install it, it results in a broken application that will not open. I have tried using Composer as well to create my own installer, that has the same result. Does anyone have any ideas here? I feel like this should be a really simple answer, but it is evading me currently. Thanks in advance!

Just recently we've noticed an issue where accounts are not able to be added to FileVault. I have a case open with Apple at the moment, but wanted to see if anyone here had noticed this issue. The problem happens when FileVault is already enabled for a user and you try to enable other users from System Preferences. The users password is accepted, but when you click "done" you are immediately presented this message. I've also attempted to enable the user through Terminal to no prevail.

Maybe I'm missing something. I have set up an iPad in a shared prestage. In the setup assistant portion i have left location unchecked (per my JAMF buddy when we first set things up.) When I go to start the iPad up (not all of them mind you, only a handful out of a whole cart), they will not change to the new date/time. This causes the iPad to not allow me to log in with any accounts (at least that's what I'm thinking). I don't believe that the location services are being enabled. It shows logging in and then just jumps back to the enter passcode screen without ever fully logging in. I can take the same account and log in to another iPad from the cart without any issues, so I know it's not the user account. Any ideas?

Hi All,not jamf relatedI am migrating a user from Sierra 10.12.3 to same OS using Migration Assistant. After migration, permissions in the ~/Library are a mess. Cannot repair using ACL repair in Recovery Partition (gone) cannot repair using "Get Info" propagate...no worky..... does not help to disable CIP. Probably some chown command but cannot seem to find Sierra info for that either....Migrated again to make sure it wasn't a glitch. same result...Decided to migrate selectively, the "Old fashioned way" by Target Disk Mode. Deleted the blown up AD Mobile profile from the New computer, and now cannot create a new AD Profile, within which I would dump the files.....Spins for awhile then super helpful generic "Cannot log in because an error occurred"Bind is good (I can log in) Credentials are good (They work on my own computer)I used to know how to get these hidden remnants out using dscl, but too long ago, cannot find command. Help?

When two-factor authentication is enabled, are multi-use QuickAdd packages still able to authenticate and enroll a device? Thanks!

As the title says, how do you detect the presence of a fusion drive from the command line? I don't have any fusion drive computers to experiment on.

Has anyone else seen the notification of a "preview" for [snip] within Outlook 15.31? More importantly, has anyone figured out how to disable it? It popped up for me as soon as I upgraded, and my organization's very-strict security policies require that I kill it with fire as soon as humanly possible.

I cannot wrap my head around the solution for this and I feel like im missing something: Desired Outcome:User opens Self Service and picks "15 minute" or "Immediate" screen lock, On the backend, if you pick 15minutes we want the 15minute security profile to install and remove Immediate if its there. And same on the flip side. Suggestions on how to scope/excluded these? The added issue is we want 15 minute to be applied by default then be able to switch

Hi, We have made a policy in the Self Service that install three packages and run a script for ffmpeg installation from MacPorts.The packages can be installed without problems. The script checks if ffmpeg exists and, if not, install it.The only problem is at the end of the execution of the policy, I get an error and the following message : When the policy has executed :- on the computer, there are not error into log /var/log/jamf.log : in JSS, no error in the log of the policy while the status is failed : If I run again the policy after the first install, so ffmpeg is already installed, I have no error. Is there a timeout at the execution of a policy from the Self Service ?I really favored that problematic because ffmpeg takes about 10 minutes to set on the computer. Have you met same errors/issues? Do not hesitate if issues/suggestions. Many thanks for your support,