Trying to create extension attributes to verify the presence of Chrome Apps but I'm baffled. To clarify for anyone who man be unfamiliar, Chrome Apps are different than extensions, they're applications that run on the Google Chrome web browser. Chrome apps are stored in /Users/~/Applications/Chrome Apps/ BUT The directory names displayed in Finder do not match the actual file names, aka the ones displayed in terminal. As an example FINDER /Users/~/Applications/Chrome Apps/Authy.app TERMKNAL (ls -al) Profile 12 gaedmjdfmmahhbjefcbgaolhhanlaolb.app See screenshots for further clarification So, my question becomes, how do I create an extension attribute for something when Im not sure what the filename will be? Can I grep the display filename as opposed to the actual file name?

I am in the process of writing a short script and need your help. The script is pretty simple. The aim is to first search and see if a specified process (processName=$4) is running. If it is, echo a string that states that it is running. If the specified process is not running, the script will execute /usr/local/bin/jamf policy -$5 $6 where jamfPolicyType=$5 and eventorIDName=$6. #!/bin/sh #################################################################################################### # # DEFINE VARIABLES & READ IN PARAMETERS # #################################################################################################### # # A HARDCODED VALUE FOR "processName," "jamfPolicyType" and "eventorIDName" CAN BE SET BELOW. # # A list of accepted process name values can be verified in Activity Monitor. # # Delete the double quotes and replace with the desired process name and/or event name, e.g. # processName=Safari or eventorIDName=runSafariPolicy. For jamfPolicyType, pass "id

I got the newest version from our security team, and it came with a few components: Symantec Endpoint Protection Installer.app Additional Resources SEP.mpkg sep.slf serdef.dat setAid.ini setup.ini SyLink.xml If I launch "Symantec Endpoint Protection Installer.app/Contents/MacOS/Symantec Endpoint Protection Installer", it provides a GUI. I'd like to have it install silently, which just running SEP.mpkg accomplishes, but the GUI install seems to actually configure the managed portion properly. I've read you can install the SyLink.xml file on the machine after, but that requires manually intervention as far as I can tell, but there may be some command line options.

Hello Everybody! We are looking to disable booting into our Netboot partition. A user managed to find his way to the Netboot partition on his workstation by holding the option key during startup - I think he was trying to throw a PRAM reset? Anyway, he didn't do anything majorly destructive once he got in, but we found that he was able to enable wifi, and delete folders off the workstation's internal hard drive. The environment I'm administering was mostly already set up before the previous admin left the company. I've been building and managing packages, but setting up the Netboot server isn't something I was involved in. I figure it is necessary to not completely remove the Netboot functionality, in the event that a full workstation reimaging is ever necessary. Is it possible to remove the ability for users to boot into the Netboot partition on their own, and restrict it to something I have more control over? Maybe a JSS policy that I can just keep disabled until it is needed? Or

I'm looking for advice on installing Tomcat Manager on a multi context JSS.Running on ubuntu 14.04 with tomcat that comes with the JSS installer and using jssmanager.shHas anyone done this?

Hello All, I am trying bring some monitor information into SCCM via the JSS SCCM Plugin. I have already created extension attributes to gather all the information that I need. But, I am having trouble dropping my information into SCCM. I have attempted to create a new Instance ParentClass to store this data in. I have verified that the Win32_DesktopMonitor Hardware Inventory Class is enabled in the Default Client Settings. I have verified that my XSL will transform the XML properly. When I try to send the file to SCCM, the new WMI Class does not show under Resource Explorer. Does anyone know if the JSS SCCM plugin allow for mapping additional WMI Classes? If so, I have XSL conversion test below. Anyone know what I'm missing?? @drhoten Any thoughts? <!-- Desktop Monitor --> <Instance ParentClass="Win32_DesktopMonitor" Class="Win32_DesktopMonitor" Namespace="\\MAC" Content="New"> <Win32_DesktopMonitor> <DeviceID>1211

I currently have 6 devices in JSS and they all worked fine. This is my first production roll out and all five devices show "MDM Capability: No". I have tried removing them from the JSS and using Recon to enroll but this does not change anything. I have attempted to try a few commands but all devices do not have the "Jamf" unix command.

I am wondering if there is a way to check in bulk if computers are still covered under apple care or if it has expired. Thanks

Since JSS 9.82 the Security & Privacy Config Profile doesn't seem to be working properly. I have Require password Immediately after sleep and Screensaver but its setting its self to 5 mins. Anyone else seeing this?

I need to create about 600 managed Apple IDs in Apple School Manager. I created a few test users in ASM and set up the sync time, but the users are not being created in the JSS. The documentation talks about matching criteria for existing users, but we currently have no existing student users in the JSS and I don't see anything about importing new users from ASM. What am I missing?

Can someone help me with a script for using Extension Attributes to tell me if Pages, Numbers, Keynote or iMovie are installed on our iMacs? The version is not so important but would be useful. Thanks.

I have a config profile scoped to all machines but for some reason my test machine isn't picking up the profile. It's picking up policies that are scoped to all machines just not this. I've tried reimaging the machine, removing it from the jss and re-enrolling, editing the config profile to force a distribute but for some reason this one machine keeps saying it's not within any config profile scopes and therefore it won't apply. Anyone have any thoughts?

I've noticed for a while that the error given by Casper Admin when you attempt to add a .app file makes no sense. For example, attempting to upload the Box Edit installer "designed to work with...Casper Suite" fails and presents the following error message: I'd get it if it just didn't support .app files, but this error message is saying it does while failing to upload them. That's confusing at best. It leads me to a handful of questions. Why not just say, "Casper Admin does not support .app files."? Does it actually support .app files but literally every one I have ever attempted it with just happens to be badly formed? If they are supported, is there something special that needs to be done to get them to upload successfully? Why are some .app files listed on sites as specifically made for use with Casper if they are incompatible with Casper?

I'm trying to delete a policy vie the API, however I'm getting "400 bad request" in return. My account has full admin rights and I can GET, PUT, and POST just fine to the same policy. DELETE works for other stuff like Categories and Buildings. I double checked the policy list and I'm trying to delete the right policy ID. Am I missing something simple? example:curl -v -uadmin -p https://my.jss.com:8443/JSSResource/policies/id/48 -X DELETE response:< HTTP/1.1 400 Bad Request< Transfer-Encoding: chunked< Date: Thu, 29 Sep 2016 02:46:09 GMT< Connection: close< Server: Apache

Hi Guys, I have started trying use ADPassMon in my environment, it would solve a lot of the issues I am having with AD password resetting and kerberos tickets all in one go (plus of course KEYCHAIN!), however I am trying to use the forked V2 I have managed to configure the app as required with the password requirements and user notifications etc but my script will not run as it is returning the error error -10810.36:121: execution error: which I believe means it needs to run as the user, however in testing when I ran it as an admin it worked for the user, does anyone have an idea of how I can deploy this or if maybe I am just going about this the wrong way? this is what I want to configure: Deploy preferences to app for: Enable version 2 behaviour Enable Notifications for expiery User notification of password requirements and acknowledgement Lock the preferences from user defaults write org.pmbuko.ADPassMon selectedBehaviour -int 2 defaults write org.pmbuko.ADPassMon enableNoti

Bonjour à tous, Nous avons mis à disposition dans le Self Service une policy qui installe trois packages et exécute un script installant ffmpeg depuis MacPorts.Les packages s'installent sans problèmes. Le script vérifie si ffmpeg existe et le cas échant, l'installe.Le seul problème, c'est qu'à la fin de l'exécution de la policy j'obtiens le message suivant : Or, la policy s'est bien exécutée au niveau :- de l'ordinateur, aucune erreur dans le log /var/log/jamf.log : du JSS, aucune erreur dans le log de la policy alors que le statut est en failed : Si j'exécute une seconde la fois la policy, ffmpeg étant déjà installé, je n'ai pas d'erreur. Est-ce qu'il y a un timeout au niveau de l'exécution d'une policy depuis le Self Service ?Je penche vraiment pour cette problématique, car ffmpeg met environ 10 minutes à s'installer. Avez-vous déjà rencontré ce genre d'erreurs/problématiques ?Ne serait-ce pas un réglage à effectuer dans le JSS ou dans Tomcat ? N'hésitez pas si questions/su

Hi All, Just tried updating our Windows 2008 R2 SP2 JSS from 9.82 and got the first attached error right after it tried to start Tomcat.. I ran an a repair on the installer after it failed which completed the install and started Tomcat. The JSS got stuck at altering the mobile device applications installed table. I probably didn't give it enough time to fully alter it, about 30 mins (a later restore back to 9.82 took over 45 mins to alter it and that was just on restoring the backup). Due to a caution from our TAM and to ensure a smooth update to Tomcat 8, I completely removed the JSS via Control Panel and deleted the JSS folder (after backing it up first). So there was no Tomcat to update. The funny thing is that error happened when running the 9.82 installer as well. I ran a repair on that and I got the JSS to startup, but it displayed an error that I needed to upgrade from version 8 first. I had already dropped the database and recreated it and did the grant. Not sure why, but I

Hi everyone I am wondering if anyone has been successful in installing either the smart notebook software or the notebook driver via self-service. I have tried with composer and with the packages.app and neither seem to work so I am just curious if anyone has been successful themselves.

Is there somewhere in the JSS, or something I can run which would tell me which of my Macs are enrolled in DEP? Thanks

I need some help writing a script to push out to student machines. We are trying to disable Expose/Mission Control/Spaces. I know there are a few other threads on this topic using config profiles, but I was looking for a script to push out as well with Casper Remote to add to our arsenal. I can go to a student machine, open terminal and run these commands: defaults write com.apple.dock mcx-expose-disabled -bool TRUEdefaults write com.apple.dashboard mcx-disabled -boolean YESkillall Dock Doing so disables what we need disabled. I tried to turn it into a script for Casper Remote as follows: #!/bin/sh defaults write com.apple.dock mcx-expose-disabled -bool TRUE defaults write com.apple.dashboard mcx-disabled -boolean YES killall Dock Remotely pushing this out does not work though. I also tried adding a sudo to the first line with no luck. I'm guessing this needs to be pushed out at the user level. We use a couple of different generic accounts. I'm not sure how to write the s

Hello! I have recently been hearing that using many Bonjour printers in a SMB or larger office is not best practice, but I haven't been explained why. Does anyone have any insight? We have roughly 15+ Bonjour printers (Konica Minolta MFPs, printers, and copiers) in our current environment before adding JAMF. We have not added the printer to Self-Service yet since we have not had any incentive. If Bonjour is not best practice and there are proven reasons why, we would definitely make the switch. Thank you in advance!

I saw this privilege in 9.96 and looked for it in the console under management actions and also searched the Admin Guide but found nothing. Can anyone shed light on this?

Some of my users are requesting XCode 8.0 because some of their development tools are reporting that XCode 7.3.1 is "outdated". I downloaded it the other day from the developer.apple.com site and was shocked (not really) that the file size was over 12GB after decompressing the .xip file. Each subsequent version of XCode keeps getting bigger and bigger. We currently have firewalls in place that block the use of VPP for software deployment and my attempts to get it permitted have fallen on deaf ears so the only way I can get xcode is from the developer site and then package it with Composer. When I worked on 7.3.1, start to finish from the time I started the download from Apple to the time I had a working Policy and script ready took a full 8 hours. That included decompressing the file, copying the app to /Applications, copying it into Composer, creating a pkg, copying it to JSS via Casper Admin, and replicating it to 4 different distribution points. The installation from Self Service

Hi all, My students have just download the last iOS, now when they download apps from self service, they need an Apple ID... Do you have the same problem ? With the "older" iOS i don't have this problem.... (I use JSS 9.92 - select VPP devices assignement - self servie is install automatically - but not now because it need Apple ID...) Thanks !

i am looking to deploy so 7 pre created VM in self service , has anyone does this if yes how have you packaged the VM for deployment and which branch on the machine have you saved it to