We are in the testing phase of rolling out new Mac Hardware in particular the new MacBook Pro's 2017 model which only has USB Type C ports. I am able to join the MacBook Pro's to our AD domain but I was wondering if I am missing something when it comes to actually creating the network user accounts on the new MacBook Pro. Seeing as the computer needs to have a network connection to see the domain and authenticate to it but wireless does not work until you are logged into the computer. In the past I would get around this by simply plugging in the ethernet cable. But the new MacBook Pro has no ethernet port. Do I need to purchase the USB-C to ethernet adapter or is there some other solution to this problem.

Hi all, I have a install.sh script, and to run it, I manually would have to do "sudo sh install.sh -i" If I put it to JSS, I notice in the script options, there are parameter 4, parameter 5, etc. Can I just add in my script, then have a policy that calls the script with parameter 4 = -i ?

Hi everyone, I'm loving the resources here but I can't seem to find anything on this.Using a policy, is it possible to create a local user with a username taken from results of an executed command in the 'Files and Processes' section? I see in the logs that my command is working and giving me the result I want, but I can't figure out how to get the results useable in the 'Local Accounts' section.

Hi all, what is the most efficient way to push proxy.pac settings via JSS? And how can we verify which settings are in use?We are using Sierra 10.12.3 and Jamf Pro 9.97Thanks a lot!

Windows 2012 Server, JSS 9.81. We did have a VERY old version of Java 7 on the server so I upgraded it to the latest Java 8 a few weeks ago. I just discovered that our JSS has not been backed up since the day I upgraded the Java. When I manually run the JSSDatabaseUtil.jar (by launching it from the command line) I get the following error: C:Windowssystem32>java -jar "C:Program FilesJSSinJSSDatabaseUtil.jar" Error: Registry key 'SoftwareJavaSoftJava Runtime Environment'CurrentVersion' has value '1.8', but '1.7' is required. Error: could not find java.dll Error: Could not find Java SE Runtime Environment. How do I fix this? I thought Java 8 was supported.

Good morning everyone, This is not a ground breaking thing but I cannot get the Managed Preferences to display a picture that I choose to show on the Desktop no matter what I do. Funny because I can set the Wifi, Bluetooth and other items to turn off, but not the Desktop Picture of my choosing to display. We do a lot of Adobe CC for training and college production and the teachers and designers want the gray Desktop to be present when logged in. And I am at a lose. Again not an earth shattering thing but I am at a lose. Everyone have a very great day today!

Hi, We have been migrating macs across the company and after running scripts to reACL local home folders to the new AD account, we noticed that we need to re-enable the FileVault user in System Preferences. The problem with this now is that the user sees two FileVault enabled accounts (with the same username) on the initial screen at boot. After a bit more digging (using the fdesetup list and fdesetup list -extended commands) I can see that the old account is still visible with a UUID but no name associated. For example... 1) Running 'sudo fdesetup list' displays.. (null),EBADDBBC-FB36-4A95-8D74-DACA5FE232812) Running 'sudo fdesetup list - extended' displays.. ESCROW UUID TYPE USER EBADDBBC-FB36-4A95-8D74-DACA5FE23281 OS User So the User field is blank. I know i can run "sudo fdesetup remove -uuid EBADDBBC-

Our SPED dept has two separate VPP account and purchased one app on both of the VPP accounts and in mobile apps catalog we can only see one of the two VPP accounts apps. Thought?

So we're in the process of swapping out 700+ iPads. We finding a lot of our users are running into 2 issues: 1) After the restore the iPad has to install the DEP configuration profile. The iPad gets stuck on the screen saying Installing Config Profile. We can press back but when we do this the iPad crashes and comes back to the same place. So the only choice we've got is to plug it into iTunes/AC2 and erase the device and try again. 2) A lot of our users are finding their restored apps crash upon opening. Very similar to the Auto App Update issue but we have this turned off so this can't be the reason. Must be something to do with the restore. Has anyone else had anything similar or know of anything we can do to stop this?

We are in the testing phase of rolling out new Mac Hardware in particular the new MacBook Pro's 2017 model which only has USB Type C ports. I am able to join the MacBook Pro's to our AD domain but I was wondering if I am missing something when it comes to actually creating the network user accounts on the new MacBook Pro. Seeing as the computer needs to have a network connection to see the domain and authenticate to it but wireless does not work until you are logged into the computer. In the past I would get around this by simply plugging in the ethernet cable. But the new MacBook Pro has no ethernet port. Do I need to purchase the USB-C to ethernet adapter or is there some other solution to this problem.

Hi, I'm publishing VirtualBox and separate OS Appliance OVA's in Self Service. VirtualBox is installed nicely on client machines, but the OS Appliance is not. In the script it seems to get stuck at the stage where the appliance is imported and the script returns an error. I'd appreciate if anyone could take a look and give me some pointers on what is wrong? OS appliance is packaged inside a DMG. Funny thing is that the command "sudo -u $USER VBoxManage import "path to ova...." is working fine when running it when the dmg is mounted manually and visible under /Volumes. #!/bin/bash ######################################################################################## # DEFINE VARIABLES & READ IN PARAMETERS ######################################################################################### # HARDCODED VALUES SET HERE Variables set by Casper - To manually override, remove the comment for the given variable targetDrive="" # Casp

Testing out our planned upgrade to 10.12.2 (need to keep it at .2 due to latest Digital Guardian support release) and finding that it seems to randomly fail. By fail I mean that the policy executes cleanly, the system reboots, but it just seems to shut down. It has to be manually powered on and when it boots it's still at 10.11.6 (or whatever OS it was at before testing). If you re-cache the installer and try again, same thing over, and over, and over. Digging through logs I don't see anything that jumps out at me as an outright failure. I've dug through my /var/log/install.log and jamf.log. Neither seem to write any errors but neither seem to write anything related to the in-place upgrade. From /var/log/install.log: Wed Feb 01 11:17:01 TEST WORKSTATION jamf[10238]: Executing Policy Upgrade to macOS 10.12.2 Wed Feb 01 11:17:01 TEST WORKSTATION jamf[10238]: Verifying package integrity... Wed Feb 01 11:17:19 TEST WORKSTATION jamf[10238]: Installing Install macOS Sierra 10.12.2..

Ever since upgrading to 9.96, I was excited to see Patch Reporting, but I've only used it to track Flash, Java, and Photoshop. It's been working just fine until this morning. When I logged into the JSS I saw I had 2 notifications waiting for me. They were for Flash and Java and they both were for the same thing. On the Extensions Attributes tab it said this: "Inventory for this software title is not collected by default. JAMF has created an extension attribute that will run the following script on managed computers to collect information about this title" I don't understand why I'm getting alerted to these now when I already included the EA script JAMF generated for me originally. Did something change? Do I have to make a change to the script? It's not obvious what I'm supposed to do. When I click on Done, the alerts are still there.

Hi all, I'm sorry if this is a dumb question but from which source is JAMF getting the latest software version? Example: Today I got the notification that there is a new software version of Adobe Reader now available.But if I go to the Download section from Adobe: http://supportdownloads.adobe.com/product.jsp?product=10&platform=Macintosh I can't find that version: So where do you get this new version? (I have the same with Adobe Acrobat DC Pro) Thank youBRDaniel PS: Please don't get me wrong. We also have clients with this latest version on it, but if I cannot download this version the notification is only semi-useful because I cannot repack and enroll it;)

We have many techs, and they all love the JSS Dashboard. Is there a way to tell who is using the JSS Dashboard excessively. I mean, it is there to be used, but how do we know if someone has 1,000 pie charts in their JSS Dashboard? Is there any documentation or the Dashboard's impact to JSS? Asking for a friend.

When I install McAfee Endpoint Security for Mac 10.2.1 via the McAfee Agent 5.0.1.283 onto a brand new, freshly imaged Mac running macOS Sierra 10.12.2, it installs and communicates with the ePO server just fine. HOWEVER, if I take a Mac running El Capitan 10.11.6 that already has McAfee Endpoint Security for Mac 10.2.1 and the McAfee Agent 5.0.1.283 installed and functioning properly and then upgrade that Mac to Sierra via Self Service, McAfee loses all Update repository info that was previously there. As a result, it never receives any new DAT info and it puts the Macs out of compliance. When I try to uninstall the product by running /usr/local/McAFee/uninstall EPM it gives an error and never uninstalls. Because I can't uninstall it, I am unable to reinstall the product either manually or by pushing from the server. This has happened on 6 different Macs and I confirmed the cause by comparing the settings on a Mac before and after upgrading to Sierra. The weird part is that

Before iOS 8 I was able to manually remove a configuration profile from an iPad, installed through Self Service. In Settings > General > Profiles & Device Management the individual profiles were listed and (if enabled in JSS) could be deleted. This way I could go back in Self Service and reinstall the profile again. Now, with iOS 8.0.2 these profiles seem to be listed/embedded within the MDM Profile. The profile I'm trying to remove is an email profile (Exchange, Gmail settings) and all that is visible is an 'Accounts'-section that is added inside the MDM profile. How can I remove this profile from the iPad without logging in to the JSS? The mail accounts-tab will only tell me that "These settings are installed by the profile 'Gmail Settings - Self Service'"; everything is set as desired in the JSS (including ability to remove this profile) and works as expected, however, I'm not seeing the ability to remove these individual profiles. Am I not seeing something? Thanx, Aram

running iMacs with 10.11.5 , and JSS is 9.81. created a configuration profile to auto logout users after 10 minutes of inactivity and after 12 minutes to do a screen saver. Using just the Login Window payload I login and set a timer for 10 minutes and I wait and see, not touching any part of the computer so there is clearly no activity happening. When 10 minutes passes no user is logged out. anybody also having autologout not working?

is there a way to clear a specific policy's log w/o actually going into the policy and clicking logs? I know there's log flushing in settings, but i don't necessarily want to flush all of them... And there's so many logs in this one policy it's taking too long to load them (been waiting nearly 30min so far).

I need to a way to attach a folder action script that I created to every users download folder. I know where the action scripts are stored, so I know how to get that into the right place. I just cant seem to figure out how to enable the action script through a deployment or using a terminal command. Anyone have any ideas?

Hello All, I am wondering how you all manage SSH. Our machine setup process is supposed to be to only enable SSH for our management account. Of course, this has not been happening on some machines and I need to deploy a policy to only allow SSH for our management account. Any ideas? I've looked around and tried: #!/bin/sh systemsetup -setremotelogin off with a scope set to make an exception for our management account. This doesn't work and just disables SSH entirely. Thanks!

I have a few Macs that I'm testing the new 10.12.1 Sierra update on (build 16B2555). After the 10.12.1 update was installed, the Macs are longer show any of the usual data in the menu bar of the Login Window (top right corner). No clock or Wi-fi are shown (including the custom hostname, IP, OS version/build etc). I have a JAMF Login Window Configuration Profile (which I thought may be related), but I removed/excluded it on some of my 10.12.1 Macs and the problem did not get resolved - The OS X menu bar is still missing at the Login Window. Has anyone noticed this in 10.12.1?

When creating a meeting, the categorize button is greyed out. It can be changed after the meeting is created but not during. Every computer that is upgraded to this version has the option greyed out. Has anyone else seen or can anyone else confirm this?

We are using Office 2016 with Office 365 and we use modern auth with multi-factor authentication (MFA). When you activate Office you see a mini browser pop open that walks the user through our MFA process. All of a sudden our users are getting continually prompted for MFA and each time they go through the process is puts the ADAL credential in the login keychain, MicrosoftOffice15_2_Data.. is the 'kind', so a machine will have multiple copies of this item. The only way to get out of the loop is to clear these keychain items and go through MFA one more time. We have a case open with Microsoft to determine if this is on them or our identity provider, just curious if anyone else is seeing something similar?

Afternoon, I'm having some trouble enrolling ipads to the JSS, Im running JSS 9.96 however not sure i have enrolled since update to the JSS. We use apple configurator to Manual Enrollment with an Enrollment Profile. for some reason when i go to enroll the device it does not appear in the jss. however on hte ipad and configurator it would say that it has. Some times it will enroll but only with the device name showing the serial number as the name of the device, keep in mind that is not the actual name of the device. And there will be no other data about the ipad that just "enrolled". Not sure whats going on here.It has been working previously. Has any one had the same issue?? Ipad2 latest ios for that version... EDIT : Just tried and Ipad Air 2 latest iOS and it allowed me to prepare enroll and no errors or anthing does not show in the JSS at all and there is no self service app when i go through the setup..... If you need more info let me know.