Hi, I'm publishing VirtualBox and separate OS Appliance OVA's in Self Service. VirtualBox is installed nicely on client machines, but the OS Appliance is not. In the script it seems to get stuck at the stage where the appliance is imported and the script returns an error. I'd appreciate if anyone could take a look and give me some pointers on what is wrong? OS appliance is packaged inside a DMG. Funny thing is that the command "sudo -u $USER VBoxManage import "path to ova...." is working fine when running it when the dmg is mounted manually and visible under /Volumes. #!/bin/bash ######################################################################################## # DEFINE VARIABLES & READ IN PARAMETERS ######################################################################################### # HARDCODED VALUES SET HERE Variables set by Casper - To manually override, remove the comment for the given variable targetDrive="" # Casp

Testing out our planned upgrade to 10.12.2 (need to keep it at .2 due to latest Digital Guardian support release) and finding that it seems to randomly fail. By fail I mean that the policy executes cleanly, the system reboots, but it just seems to shut down. It has to be manually powered on and when it boots it's still at 10.11.6 (or whatever OS it was at before testing). If you re-cache the installer and try again, same thing over, and over, and over. Digging through logs I don't see anything that jumps out at me as an outright failure. I've dug through my /var/log/install.log and jamf.log. Neither seem to write any errors but neither seem to write anything related to the in-place upgrade. From /var/log/install.log: Wed Feb 01 11:17:01 TEST WORKSTATION jamf[10238]: Executing Policy Upgrade to macOS 10.12.2 Wed Feb 01 11:17:01 TEST WORKSTATION jamf[10238]: Verifying package integrity... Wed Feb 01 11:17:19 TEST WORKSTATION jamf[10238]: Installing Install macOS Sierra 10.12.2..

Ever since upgrading to 9.96, I was excited to see Patch Reporting, but I've only used it to track Flash, Java, and Photoshop. It's been working just fine until this morning. When I logged into the JSS I saw I had 2 notifications waiting for me. They were for Flash and Java and they both were for the same thing. On the Extensions Attributes tab it said this: "Inventory for this software title is not collected by default. JAMF has created an extension attribute that will run the following script on managed computers to collect information about this title" I don't understand why I'm getting alerted to these now when I already included the EA script JAMF generated for me originally. Did something change? Do I have to make a change to the script? It's not obvious what I'm supposed to do. When I click on Done, the alerts are still there.

Hi all, I'm sorry if this is a dumb question but from which source is JAMF getting the latest software version? Example: Today I got the notification that there is a new software version of Adobe Reader now available.But if I go to the Download section from Adobe: http://supportdownloads.adobe.com/product.jsp?product=10&platform=Macintosh I can't find that version: So where do you get this new version? (I have the same with Adobe Acrobat DC Pro) Thank youBRDaniel PS: Please don't get me wrong. We also have clients with this latest version on it, but if I cannot download this version the notification is only semi-useful because I cannot repack and enroll it;)

We have many techs, and they all love the JSS Dashboard. Is there a way to tell who is using the JSS Dashboard excessively. I mean, it is there to be used, but how do we know if someone has 1,000 pie charts in their JSS Dashboard? Is there any documentation or the Dashboard's impact to JSS? Asking for a friend.

When I install McAfee Endpoint Security for Mac 10.2.1 via the McAfee Agent 5.0.1.283 onto a brand new, freshly imaged Mac running macOS Sierra 10.12.2, it installs and communicates with the ePO server just fine. HOWEVER, if I take a Mac running El Capitan 10.11.6 that already has McAfee Endpoint Security for Mac 10.2.1 and the McAfee Agent 5.0.1.283 installed and functioning properly and then upgrade that Mac to Sierra via Self Service, McAfee loses all Update repository info that was previously there. As a result, it never receives any new DAT info and it puts the Macs out of compliance. When I try to uninstall the product by running /usr/local/McAFee/uninstall EPM it gives an error and never uninstalls. Because I can't uninstall it, I am unable to reinstall the product either manually or by pushing from the server. This has happened on 6 different Macs and I confirmed the cause by comparing the settings on a Mac before and after upgrading to Sierra. The weird part is that

Before iOS 8 I was able to manually remove a configuration profile from an iPad, installed through Self Service. In Settings > General > Profiles & Device Management the individual profiles were listed and (if enabled in JSS) could be deleted. This way I could go back in Self Service and reinstall the profile again. Now, with iOS 8.0.2 these profiles seem to be listed/embedded within the MDM Profile. The profile I'm trying to remove is an email profile (Exchange, Gmail settings) and all that is visible is an 'Accounts'-section that is added inside the MDM profile. How can I remove this profile from the iPad without logging in to the JSS? The mail accounts-tab will only tell me that "These settings are installed by the profile 'Gmail Settings - Self Service'"; everything is set as desired in the JSS (including ability to remove this profile) and works as expected, however, I'm not seeing the ability to remove these individual profiles. Am I not seeing something? Thanx, Aram

running iMacs with 10.11.5 , and JSS is 9.81. created a configuration profile to auto logout users after 10 minutes of inactivity and after 12 minutes to do a screen saver. Using just the Login Window payload I login and set a timer for 10 minutes and I wait and see, not touching any part of the computer so there is clearly no activity happening. When 10 minutes passes no user is logged out. anybody also having autologout not working?

is there a way to clear a specific policy's log w/o actually going into the policy and clicking logs? I know there's log flushing in settings, but i don't necessarily want to flush all of them... And there's so many logs in this one policy it's taking too long to load them (been waiting nearly 30min so far).

I need to a way to attach a folder action script that I created to every users download folder. I know where the action scripts are stored, so I know how to get that into the right place. I just cant seem to figure out how to enable the action script through a deployment or using a terminal command. Anyone have any ideas?

Hello All, I am wondering how you all manage SSH. Our machine setup process is supposed to be to only enable SSH for our management account. Of course, this has not been happening on some machines and I need to deploy a policy to only allow SSH for our management account. Any ideas? I've looked around and tried: #!/bin/sh systemsetup -setremotelogin off with a scope set to make an exception for our management account. This doesn't work and just disables SSH entirely. Thanks!

I have a few Macs that I'm testing the new 10.12.1 Sierra update on (build 16B2555). After the 10.12.1 update was installed, the Macs are longer show any of the usual data in the menu bar of the Login Window (top right corner). No clock or Wi-fi are shown (including the custom hostname, IP, OS version/build etc). I have a JAMF Login Window Configuration Profile (which I thought may be related), but I removed/excluded it on some of my 10.12.1 Macs and the problem did not get resolved - The OS X menu bar is still missing at the Login Window. Has anyone noticed this in 10.12.1?

When creating a meeting, the categorize button is greyed out. It can be changed after the meeting is created but not during. Every computer that is upgraded to this version has the option greyed out. Has anyone else seen or can anyone else confirm this?

We are using Office 2016 with Office 365 and we use modern auth with multi-factor authentication (MFA). When you activate Office you see a mini browser pop open that walks the user through our MFA process. All of a sudden our users are getting continually prompted for MFA and each time they go through the process is puts the ADAL credential in the login keychain, MicrosoftOffice15_2_Data.. is the 'kind', so a machine will have multiple copies of this item. The only way to get out of the loop is to clear these keychain items and go through MFA one more time. We have a case open with Microsoft to determine if this is on them or our identity provider, just curious if anyone else is seeing something similar?

Afternoon, I'm having some trouble enrolling ipads to the JSS, Im running JSS 9.96 however not sure i have enrolled since update to the JSS. We use apple configurator to Manual Enrollment with an Enrollment Profile. for some reason when i go to enroll the device it does not appear in the jss. however on hte ipad and configurator it would say that it has. Some times it will enroll but only with the device name showing the serial number as the name of the device, keep in mind that is not the actual name of the device. And there will be no other data about the ipad that just "enrolled". Not sure whats going on here.It has been working previously. Has any one had the same issue?? Ipad2 latest ios for that version... EDIT : Just tried and Ipad Air 2 latest iOS and it allowed me to prepare enroll and no errors or anthing does not show in the JSS at all and there is no self service app when i go through the setup..... If you need more info let me know.

I know I can get the model identifier but my service desk is asking for the "Model Number". Something that looks like this: MLH42LL/A.

I read on an earlier post on these boards that you could not encrypt both the MAC partition and the Bootcamp partition, but since that post is over two years old I thought I would check if that is still the case. Also, does anyone know if MAC's have a TPM chip?

We are using Apple School Manager with JAMF to control our shared iPads successfully at the moment. I need to stop the auto sync between the JSS & ASM and just use the manual option when required. I have an issue where the options in the JSS are both set to never sync but it still does a daily sync! I cant have an auto sync because the JSS pulls in inactive records from ASM which causes duplicates. Anyone else experiencing this or know how to correct it?

I'm seeing an issue where SOME users who install Eclipse Neon 4.6.2 through Self Service get an error when launching the app. You can’t open the application “Eclipse Neon 4.6.2.app” because PowerPC applications are no longer supported.I built the package the same way I always have using Composer. I've never had problems until now. The weird part is that it's only happened on a handful of Macs AND if I delete the app from their Mac and then copy the working app from my Mac to theirs via ARD, the app I copied also gives the same error! The only way I've been able to get this version of Eclipse installed on the affected Macs is to download the .tar'd app from the eclipse website and expand it on their desktop and then copy it to /Applications. At that point it works. I can't find any information about how a definite intel Mac app could possibly identify itself as PPC other than possible file corruption, but if there was a problem with the package I have in self service, then it would h

Things have changed in the App Store in Sierra, and I can't for the life of me figure out how to log out of it with a specific Apple ID. Older instructions say to click on the Store button and click Logout, but there is not Store button anymore. Anybody have any ideas? Google has given me nothing. Thanks, Mike

Hi, In Self Service, I want to publish a licensed application for specific users to be able to install, but only to one specific computer. Same users should also be able to reinstall the app on the same computer. How should I put this together using scope and execution frequency? Is this possible at all? Hope you understand what I'm trying to achieve here...

Hi, we can push machine certificates, we can use them to authenticate (wi-fi connection) but has someone already found a way to silently renew them? Currently our users are getting a message that their certificate is about to expire and then they have to click the update button.

Curious if anyone else has run into the problem of the JSS trying to uninstall a manually installed config profile. I created the profile in the JSS, then downloaded it and installed it with help from this post. Everthing works, except I came back to check the JSS and found in the management tab that the JSS was trying to uninstall the config profile, but it was unsuccessful due to it not being installed via the JSS. I saw someone else had this issue. They solved it by going into the database and removing the UUID. I am hoping not to have to do this. I need to install this config profile manually using a script in order to install it when a user is on our VPN.

I'm planning on enrolling into DEP and VPP.JSS 9.96 (most macs are on 10.11.x and 10.12.x) could you please post your DEP and VPP "dos and don'ts" Thank you very much!

I am trying to upload the mobileconfig found here as a Config profile but when I do, I get an error "The file could not be parsed". I copied the text directly into TextWrangler and added info for Skype for Business and Lync and then saved with the .mobileconfig extension. I can't figure out why the JSS can't parse it. I must be missing something. Any ideas? Here's the full text including my additions: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadContent</key> <array> <dict> <key>PayloadContent</key> <dict> <key>com.microsoft.autoupdate2</key> <dict> <key>Forced</key> &l