Skip to main content

Solved

8118 Topics
F
freedomforpearsNew Contributor
asked in General Discussions
Simple Backup solutions? TimeMachine or SuperDuper

Running a managed MBP and iMac and was wondering what a simple solution would be to backup my machines. I realize most of my data is in iCloud (and the cloud) but as of late I've had to reinstall my apps and it's a royal pain - even though some of then were on the App Store some were not and one has to hunt down old serial numbers and find the actual place where you can download the software. I know there is the update feature using firewire cable but I will need to do a fresh install as it's a new MAC.I'm thinking a simple TimeMachine backup may be ok, was wondering if superduper  (I don't really need a notable backup) would be ok too as I've used that before. I know these backup solutions work great but was wondering how adding the whole managed computer / Jamf thing into the mix would effect these backup strategies?  

355
AJPinto
S
samuellarssonContributor
asked in General Discussions
SAP Privileges Managed Installation

Hi,I'm preparing deployment of the admin-by-request tool Privileges (https://github.com/SAP/macOS-enterprise-privileges), but I've run into a snag when I try to install it via Jamf.So, the package that I've made has the .app, the LaunchDaemon and the PrivilegedHelperTool, all according to the documentation, and they all install fine. But when I run it the first time, I get the following prompt asking me for adminstrator credentials to install the PrivilegedHelperTool again: If I enter them, it works as expected, but the problem is that I want a standard user to be able to install this without entering any admin credentials.Has anyone encountered this problem? I don't understand why it wants to install it when I've already pre-installed it via my package.

1818
D
M
mconnersValued Contributor
asked in General Discussions
M
mlinkeyNew Contributor
asked in General Discussions
Scripting help

We are pretty new to Jamf and still trying to understand the scripting.  We have a renamecomputer script that we got as part of our onboarding for computers.  Was working great till we started sending in the department on the user from Okta.  So now the naming is off.  I am pretty good at Powershell and C#, but bash scripts I am struggling with.  Is there way in a bash script to look up a department value in like a switch statement?example if the department is "IT", then can you do something like this?switch (department)case "irs":     value = 123case "IT":     value = 987Any help or pointers to reference links would be great.  I am not sure what the bash term would be to do that so if I can get someone to help with that, might be able to get this figured out.

125
W
S
steviethetvNew Contributor
asked in General Discussions
EraseDevice API

Has anyone had success with the EraseDevice API call?I have the shell command: /usr/bin/curl --silent --show-error --connect-timeout 30 --request POST --user "username":"password" "https://site.jamfcloud.com/JSSResource/computercommands/command/EraseDevice/passcode/123456/id/#" but I keep receiving the error: <html> <head> <title>Status page</title> </head> <body style="font-family: sans-serif;"> <p style="font-size: 1.2em;font-weight: bold;margin: 1em 0px;">Unauthorized</p> <p>The request requires user authentication</p> <p>You can get technical details <a href="http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2">here</a>.<br> Please continue your visit at our <a href="/">home page</a>. </p> </body> </html> The user account making that API call has read, update, and delete permissions on the JSS Object, Computers, and it has the JSS Action, Send Comput

143
D
N
nick_preskoNew Contributor
asked in General Discussions
dletkeman
dletkemanJamf Heroes
asked in General Discussions
iOS v12.5.7: Locking iPads for Videos

This may not be specifically about Jamf School but looking for a general recommendation and I think Jamf School users would be most likely able to relate.Our school division is trying to re-use older iPads which use iOS v12.5.7 as the latest OS.  The iPads are being used for communication devices for limited use cases.  Places where only 1 or 2 apps are needed so we can lock these apps down.The use case I'm trying to address is where teachers need to lock the app down to a video library where only the 5 or 6 videos can be accessed and nothing else.  If the students in this case have access to any other apps they will get distracted and sometimes combative.One idea was to use something like Microsoft Stream in Single App Mode but it isn't compatible with iOS v12.5.7.  It works in Google Chrome and I'm currently looking into using Chrome Browser Cloud Managment along with a content filter to lock the student into Microsoft Stream web version.  I don't really pref

182
_
P
PierreHenriFNew Contributor
asked in General Discussions
Jamf Pro interface - Language bug

Hi there !Currently got a frustrating bug in Jamf Pro as it happens as soon as I log off (manually or via auto logout).I'm used to the interface in english but since the version 11 of Jamf and the new interface with translations, it keeps ignoring my setting to keep the interface in english and shows me french as soon as I login.Computer language is french, Chrome is used and empty cache/private navigation/Firefox got same issue.Timezone in Paris/Monaco does not change anything. How to reproduce:On top right corner lick on Account Settings when logged/Language & Region/ set language to english, save and logout.When I log back interface is back in french even if setting is still in english. Workaround:Set langage to french (but anything should work I think), save, set it back to english, save, interface back in english until next logout.Hope it can be fixed soon ! 

83
P
M
mhinszContributor
asked in General Discussions
PE14_2
PE14_2Valued Contributor
asked in General Discussions
J
JmardianContributor
asked in General Discussions
Cisco Secure Client 5.1.0.136- AnyConnect VPN Service Not Enabled

I've been down the rabbit hole of deploying Cisco's new Secure Client and I am running into an issue that I cannot find any documentation on. Some context: we only need the Umbrella Module for our school and nothing else that is loaded within Cisco's PKG. I have been successful with deploying the choice XML file, but I get the following pop-up in the installation:  I would like this permission to be enabled within the config profile I built in jamf, but I can't seem to locate any of the info I need to do so. I already have gone through Cisco's docs and pushed out the System Extensions payload, but that seems to be just for the Cisco Secure Client itself and not this "AnyConnect VPN Service." If I manually toggle it on, the Umbrella Roaming Module will activate and work as it should, but if this is not toggled on, then the roaming stays inactive.   Any ideas? I am assuming there is something I am missing in the System Extensions payload, but I could be wrong... 

42516
J
J
jake_New Contributor
asked in General Discussions
ganidran
ganidranContributor
asked in General Discussions
T
TheMacGuysContributor
asked in General Discussions
ajanicke
ajanickeContributor
asked in General Discussions
Fully delete users account on M1 MacBooks Air

We've got a Journalism cart that has about 26 MacBooks in it. Some issues popped up and I wanted to test clearing out the profiles daily because some students just don't listen and keep ~50GB in their profile even though they have external drives for their work.I have a pretty simple script that just makes sure to ignore our admin accounts and runs a..for a in $userListsysadminctl -deleteUser $aThis seems to work and the home folder is gone but the account is still technically there when you go into users and groups. So when we try to login the MacBook just hangs since there's technically an account still there but no home folder.These users are not secure token holders since only students use them so it's not that and they are Jamf Connect created accounts.Is this just not possible on M1s? They had Intel Macs before I got here and said they used this script all the time but now it just falls a little short with fully removing the account from the device.

231
ajanicke
G
gg-chrisdNew Contributor
asked in General Discussions
Delete expired certificates from Keychain

Hi, We have a Configuration Profile pushing out our WiFi settings with certs currently, but recently the first batch started expiring. They get renewed, no problem, but the expired cert is left in the keychain. I'm trying to script the removal of them using the following script, so they can't be selected for the wireless profile. #!/bin/bash # Grabs the expired certificate hashes expired=$(security find-identity | grep EXPIRED | awk '{print $2}') # Check for certs if [ -z "$expired" ] then echo "No expired certificates, we're all good" else # Deletes the expired certs via their hash echo "Deleting expired certs" security delete-certificate -Z $expired fi exit 0 #success If I run these commands locally on the machine, then it works no problem, but via a policy it always fails with: 'Unable to delete certificate matching "XXXXXXXX..." Any thoughts? Is there a better way to manage certificates for WiFi profiles? ThanksChris

685
R
R
RenAdminContributor
asked in General Discussions
pbenware1
pbenware1Valued Contributor
asked in General Discussions
Okta SSO Login failure

Greetings all,We are in the very earliest stages of setting up Okta.  I'm currently working on configuring our JSS Dev environment to use Okta for SSO.I'm working directly with our internal Identity Management team who manages our Okta instance.  They setup the integration on the Okta side, but I have no idea how they went about it.In the JSS dev, I've enabled SSO using Okta, added the necessary metadata URL provided by the IAM team, etc.When attempting a login, I am presented with the expected Okta user name screen, followed by the password screen, suggesting that the login process is working (and I've received notifications of a successful login), but then directed to an error message:Safari can't find the server.Safari can't open the page "https://https//<mysandbox>.jamfcloud.com/saml/SSO" because the Safari can't find the server "https".Note the extra "https// in the Url.The Okta team says everything is OK on their end, and I've reviewed the JSS SSO settings with th

396
AJPinto
mallej
mallejContributor
asked in General Discussions
bowie
bowieNew Contributor
asked in General Discussions
J
J_JohnstonATNew Contributor
asked in General Discussions
S
sheltonspencerNew Contributor
asked in General Discussions
A
aandinoContributor
asked in General Discussions
B
Britt_GoodeNew Contributor
asked in General Discussions
HP Printer Drivers

I have searched for a discussion about this and not find this problem, so I am raising a new twist on and old issue. I am trying to advertise some printers in Self Service and cannot get the drivers. I have uploaded the ppd files and I have policies to push out the printers etc. The issue I have is getting the drivers up into JAMF. This is where it gets complicated. HP has decided to not make their drivers available. Instead you can only download an install assistant called Easy_Start.app which will go out and download the drivers for you, install the printer you need, then remove downloaded drivers, thus leaving you without a copy of them to use in JAMF. I need to find a way of packaging the drivers that got installed on my machine so that I can upload them to JAMF instead. I did try reaching out to HP customer support twice for help in getting just a copy of the divers but that seems to be impossible. I have been assured that nobody in the printer industry does that. You cannot do

22322
D
D
derek_ritchisonContributor
asked in General Discussions

Want to write for Tech Thoughts?

Earn a cool badge and Jamf Nation Reward Bytes for your published articles. We’re looking forward to your submissions!

Submit A Blog Post
Terms & ConditionsCookie settingsAccessibility statement