Good evening all, I work for a large university and am part of a team that manages a lot of Macs with jamf.  I live half an hour or so from work so I'm in the car a lot.  I'd like to know if anyone has favorite podcasts related to jamf or Macs that I could listen to on the commute?Thanks so much.A. Jay

Hello All,I work in a K-12 environment with Intel Macs and M1 Macs. I'm trying to get the Mac OS Monterey Installer package in Self Service and have standard account users be able to install it on their own without the use of our Admin password. I downloaded the Monterey Installer from Apple and then I followed the directions on page 14 of this document: https://resources.jamf.com/documents/technical-papers/Deploying-macOS-Upgrades-with-Jamf-Pro.pdf. I was able to create a package of the Monterey installer using Jamf Composer but I receive this error when trying to install it. I've also looked into some of the scripts that others have shared about Monterey but I'd rather use a package if possible. Has anyone been successful in deploying the OS package? Our students are still using Intel Macs and are standard users so I'm more concerned with getting it installed on theirs rather than our faculty who are admins on their M1s. Any advice? Thank you in advance.

Having issue with postinstall script that I cannot seem to spot. We have done this 100 times, but all of the sudden this package, recreated several times, fails. I have removed and added all spaces and line returns to get rid of anything odd.The package extracts files to a folder then the postinstall script executes MMC_Install.sh to perform the install. I know MMC_Install.sh is sound as I have tested outside capture. The issue is that postinstall fails to launch the sh command. I found the below in console install.log:2021-12-22 10:29:04-06 macos-10 package_script_service[533]: PackageKit: Executing script "postinstall" in /tmp/PKInstallSandbox.0LaYFY/Scripts/macdocusignedit-2.1.0.0-r1.9PgfhO2021-12-22 10:29:04-06 macos-10 package_script_service[533]: Set responsibility to pid: 525, responsible_path: /System/Library/CoreServices/Installer.app/Contents/MacOS/Installer2021-12-22 10:29:05-06 macos-10 package_script_service[533]: ./postinstall: /tmp/PKInstallSandbox.0LaYFY/Scripts/macdocu

Does CVE-2022-22963, Spring4Shell, affect any Jamf Products at all?Thanks!

Looking for a way to use a script, or some other method, to bulk set the Building & Department for IOS devices. I have 440 iPads being delivered in a couple of weeks going to 5 buildings scattered throughout the state.  Thank you.Kevin Sinclair

When I push a policy to deploy software in Catalina, the client system runs the policy, mounts the share but errors out while copying the package. Gets "cp: /Volumes/jamf-repo/Packages/Firefox 74.0.pkg: Operation not permitted" Anybody else having this issue? I have mounted the share in the GUI with the same user used by Jamf and I can access and copy the package. Kinda stumped.

Our users that have recently upgraded to Big sur 11.6.3 or 11.6.4 have had printing issues to our Ricoh printers.  Monterey 12.2.1 might also be affected.We are having to re-install the printer drivers for each user.   is anyone else experiencing this?Tim

Is there a way to set the display name for the Jamf Pro Webapp? Right now it shows the IP address of our secondary server and localhost for the primary. Ideally I would like to change these to the FQDN of the servers. Thanks!  

 Beginning with Outlook Build 16.58 (February 2022 update) Outlook will default to the New Outlook experience. But we want to default to the "Classic Mode" when Outlook will be started the first time after Onboarding. (User can switch to New Outlook later, if wanted. But it should first start with Classic Mode as default.)In this blog from macadmins, there's a solution for this:2. Can I configure the settings ahead of time so that my users don't see any change when 16.58 rolls-out?Yes. Your best option is to explicitly set the EnableNewOutlook preference to integer value 1. You can do this via the defaults command or through a Configuration Profile.The defaults command is: defaults write com.microsoft.Outlook EnableNewOutlook -integer 1 But this does not work for us. We created a Policy with the Office 16.58 package and entered this command as process. After onboarding and starting Outlook the first time, the new Outlook is set as default.Anybody know, how we can set this con

Hello folks, any chance to run Jamf CLI commands like "sudo jamf policy" or "sudo jamf launchSelfService" from a bash script? Thanks a lot|

Hello All, Any info on how to get Cisco AMP to install on machines. I have the DMG downloaded which has a pkg inside. I followed the instructions at this Jamf community URL:https://community.jamf.com/t5/jamf-pro/deploying-cisco-amp-v-1-9/td-p/213222  I tried just using the dmg as well with no luck, any hints or tips are really appreciated  

Can someone guide me or link to a resource? I have my pkg file (trying to put a webloc in the applications folder to then put in the dock). It is not letting me install this and is giving the error that "the package is trying to install content to the system volume." I am stuck, I've tried changing the path in Jamf Pro for the target drive to /Applications but that doesn't help....What do I need to do?

I would like to automatically force Allow access to the Microphone and Camera for apps such as Zoom and Chrome. As part of our security policy we have disabled users from accessing the security and privacy setting. Whenever they need to grant access to the mic or camera for a new app, we have to exclude their machine from this policy in JAMF, have them force pull the policy from their terminal, and then they go in and grant the permission access. We would then re-apply the policy back on their machine and have them force the policy in terminal once more. This is a tedious process that interrupts the workflow for all involved and simply does not scale with our growing user base. Is there a way to have a JAMF config profile push down the permission to automatically Allow access to the mic and camera for specific apps? I've taken a look at the PPPC config settings in JAMF and for the mic and camera it seems like it can only push down the Deny and not Allow setting. Is there a way arou

Hello allI am running into an issue where some machines do not have Securetoken, I have a script that seems to be working with M1 machines but not Intel machines. I tried uploading the script but it didn't show up right so its posed below Script to assign SecureTokens: START OF SCRIPT#!/bin/bash##########################Admin credentials##########################adminUser=$4adminPassword=$5#################################################################This will store the logged in user's name to a variable.#################################################################userName=$(/usr/bin/python -c 'from SystemConfiguration import SCDynamicStoreCopyConsoleUser; import sys; username = (SCDynamicStoreCopyConsoleUser(None, None, None) or [None])[0]; username = [username,""][username in [u"loginwindow", None, u""]]; sys.stdout.write(username + "\\n");')#################################################################################This will prompt the user for their password

No text available

I have a policy that automatically renames and binds systems to AD that runs on enrollment. I'd like to be able to run that policy for systems that are fresh out of the box. I'm able to scope systems to a prestage, but it doesn't seem like Jamf is able to scope systems to policies that haven't run their initial enrollment. Anyone have ideas?

I am looking to disable editing desktop and documents on our network and so far I am not having much look.Our Macs are linked to AD and people login with there AD accounts.We have a suite of Macs and want to make sure people save to network drives and not the devices.So either a script that runs on login and making it so that all accounts are setup as Guest accounts on the Macs would work I guess but not sure how to do this.I have used scripts like the following and they all work when logged into the device but error via Jamf.sudo -u $USER chflags uchg ~/desktopsudo -u $USER chflags uchg ~/documents The Errors  Script result: sudo: unknown user: chflagssudo: error initializing audit plugin sudoers_audit sudo: unknown user: chflags sudo: error initializing audit plugin sudoers_auditI was looking at ideally doing it via a login script as then I can exclude the admin account etc to make sure things can still be done if needed.    

So our organization is looking to have all users upgraded from Big Sur to Monterey. All machines in our organization are standard users, NOT administrators (minus IT of course). I've been trying out different methods and landed upon the erase-install by grahampugh.While this is *almost* perfect for the upgrade, the policy in JAMF never completes and always stays in "Pending".- The issue with staying in Pending is, while testing, the machines upgraded to Monterey successfully, but then the update runs AGAIN. We want to first have users manually install it via a policy in Self Service and then force push it to machines after xx amount of time (say a week after avail in Self Service).  Is there any possible way to get the erase-install policy to show as completed in JAMF OR is there another way to get machines upgraded to Monterey seamlessly? 

I have been using JAMF Admin.app to upload packages, set their Category (Application, Utility, etc) and index them. Last year some time I noticed that if I upload a .pkg, I can't index them until I save, quit the JAMF Admin.app, and then launch it again. Then it will allow me to set the Category and run an index. Weird - but I can deal with it as I am usually just updating a package or two and done.Today, I had multiple packages to test and upload and I noticed that after I uploaded all the packages, saved, and quit, when I opened it again and started setting the Categories and running index, some of the packages would fail to let me do an index and would give an error. I skipped them for now and set the Categories and saved and quit the app. When I launched it again, the categories I set had reverted back to 'uncategorized' and went back to being blue. I deleted the packages that were giving errors when I went to index them, and uploaded them again, set the categories again for the on

Hello, We were using that solution for setting Big Sur deployment policy in Self Service: https://www.jamf.com/blog/streamlining-your-macos-upgrade-process/As far as I understand, it doesn't work on M1 Macs because it requires password for restart - as well as similar modified script for Monterey . There is an error in execution log: Error: failed to authorize for installation. Provide a password with --stdinpass or --passpromptI am thinking to create temporary admin account for policy execution, then delete this account when Monterey is installed. Would you please help me to modify deployment command, where account name and password should be added? ##Start macOS Upgrade/Applications/Install\\ macOS\\ Monterey.app/Contents/Resources/startosinstall --agreetolicense --nointeraction --forcequitapps --pidtosignal $jamfHelperPID >> /var/log/startosinstall.log 2>&1 & Thanks! 

I need to deploy Cisco anyconnect VPN client on MAC endpoints, however post installation, it gives prompt to end user to allow the app from system preferences.I want to bypass this step so that post deployment end user does not have to go to system pref to allow the appXattr command i am using is sudo xattr -d -r com.apple.quarantine /Users/username/Downloads/AnyConnectClientwhere the AnyConnectClient is a folder where the anyconnect.dmg file residesHowever, the command is not working for me. post installation, it still asks for user to allow the app from system preferencesDoes xattr work on .dmg file? Do i need to install the app first then run the command and then give path to some app system file? If so, how do it create package of the installer which is free of this restriction?

I have worked out how to change a Mac computer name in the JSS console then propagate it out to the client. I noticed that in the example of a name like 'test-name-air', the ComputerName and LocalHostName take this change but the HostName gets truncated to just 'testname'. I am not sure if Active directory will care about the HostName being different or not. At this stage it doesn't appear to and I would prefer not to have to deal with further complications of scripting the rename of HostName if I don't have to. Thanks for any help.

Hi,under My Profile > My Settings > Privacy it is possible to restrict showing privacy related data, e.g. the e-mail address, only to "Friends".My question is, where can I find my friends list?Does anybody have an idea?

Apologies but I am a little confused on how I can trigger a policy, after a specific user (local account) logs onto a specific Mac.  I see the the triggers "once per user"  and when I try and scope it to that specific user, I don't see that local account listed.  Thank You.

FYI to all other Jamf admins out there who maybe searching these keywords, this is a known issue.PI101517 - PI-007623Users assigned to a group with administrator privilege may be unable to save Custom Enrollment configurations.Solution for us was to create a temp admin account to create the Enrollment Customizations. You may also be able to change an existing account to have full Admin access.