We recently imaged about 250 macbook airs using casper imaging but later noticed that they all show up in JSS as Unmanaged. Is there a way other than recon that we can make them manage again ?

Starting to reference some Google Docs as bookmarks in Self-Service. However, Google complains that "The version of the browser you are using is no longer supported. Please upgrade to a supported browser." How often does the codebase get updated for this platform? Also, is there a way to force a self-service bookmark to launch a full browser on the user's system instead of the internal browser?

Hi, Sorry does someone have copy of the Zoom 5.7.0 IT Installer I could have? The current IT installer version being hosted by Zoom is 5.7.1 but we've version locked on 5.7.0 on our lab deployments for Mac and PC and I've missed the window to download the 5.7.0 version. Thanks in advanced.

We had a MacBook Air grow legs last week, and are trying to track it down. We enabled DEP and jamf was already installed. The new "owner" has updated from El Cap to Sierra and added a user account. The device is still checking in with our JSS. I am looking for a way to get the device to report it's GPS location. I found a number of github (whereami) and sourceforge (LocateMe) projects that do this from the CLI, but none of them seem to work under Sierra. I saw a post on discussions.apple.com from @jelockwood that he got Location Services working by modifying the plist, and I think I have that part working too. But the binaries I was able to get simply hang, or can't be built because they are using SHA1 signing, which is no longer allowed. Anyone have any ideas? Thanks!

I am trying to run macOS updates on some VM's I am testing. This is a new work flow for me with adding VM's for testing. I have modified the .vmx and added the following which lets the VM enroll in to JAMF, however macOS updates wont work. I think I am missing something still. When you check about this Mac it only has MacBook Pro, not MacBook Pro (16-in 2019) which is the HW model I am using in this case. I know updates are tied to the hardware information on the device, but it appears defining the model number is not enough. Any ideas on what I missed? I plan on also testing with Parallels but I am waiting on a license, any information for that would be helpful also. serialNumber = "VM0000000003" SMBIOS.use12CharSerialNumber = "TRUE" hw.model = "MacBookPro16,1" VM not showing all the hardware information Physical device showing as you would expect

Hi Team,I need some detailed instructions on how to implement this as everyone is coming back to office and we want to strictly enforce it.We created a COVID 19 questionnaire in Sharepoint that should be displayed when user login:Condition:If all the answers to the survey are No, User access is granted to machineif any of the answers to the survey is yes, user access is denied and he should be displayed a message to leave office.

Hi folks,I need some detailed instructions on how to implement this as everyone is coming back to office and we want to strictly enforce it.We created a COVID 19 questionnaire in Sharepoint that should be displayed when user login:Condition:If all the answers to the survey are No, User access is granted to machineif any of the answers to the survey is yes, user access is denied and he should be displayed a message to leave office.

At the moment I'm working on a solution to prevent all admins users (except one particular) from running sudo. I can add a specific user to sudoers by running: sudo -i echo '$username ALL=(ALL:ALL) ALL' >> /etc/sudoers Then I'd like to remove %admin ALL = (ALL) ALL within sudoers file which would just leave the above admin as the only sudo admin. However I cannot seem to find a way on how to remove/replace a particular string within sudoers. I'd like to make this into a script hence using visudo and manually adjusting won't work for me. If there a way to run visudo from script and adjust a particular line within sudoers that would be ideal. I've seen a possible solution here: https://www.ibm.com/developerworks/community/blogs/brian/entry/edit_sudoers_file_from_a_script4?lang=enwhich works in Linux. Is it possible to make it work in macOS?

I'd like to add the Self-Service icon to my users Dock's by default since we will be using this pretty heavily. I can add the Dock Item to Casper Admin, and create a policy to deploy it, and it does work. What I'd like to do however, is to deploy this through Configuration Profiles instead of by Policy. My main reason for this is simply for the instantaneuous addition of the dock item as soon as the device is enrolled. When I go into the Dock section of the Configuration Profile and add an Application, Self Service is not on the list. Any ideas or help?

Hi Does anyone have the Bundle ID and Team ID for Universal Audio UAD Driver for Apollo Sound interfaces.I need to release the Kernel Extension in a configuration Profile, but cant get the info until I can release it because the Mac is managed. Cheers

All our iPhones are managed with Jamf and my prestage enrollment profile has the setting enabled for "Prevent user from enabling Activation Lock". I sent an iPhone to Apple for diagnostic/repairs, and they sent it back right away with a letter saying the technicians couldn't run diagnostics because the device is locked by one of two programs; locked by Find My Iphone, or locked by a MDM tool and that I should temporarily unassign the device from the program. I'm unclear on what I need to do... should I delete it from Jamf (and lose the data associated with it), or unassign it from Apple School/Business Manager, or something else?

Hello everyone! We are currently in the process of updating our CA Secure Browsers for the upcoming standardized testing. It looks like the new requirement for the year is disabling screen shotting abilities. Has anybody done this? I'm not sure if it's something we can tackle with a computer-wide configuration profile so it will be easy to revert once testing is over. Below is a screenshot depicting the message we are getting. Secure Browser version 10.6 on macOS 10.14.2 "Mojave"

For some reason I can't get Composer to open. It was working just fine the other day and now it just says that it's not responding when I try to open the application. I have tried to remove the Jamf Pro applications and reinstall them and that doesn't work either. Any ideas?

Two days ago we had a user's M1 MacBook Air brought to us that wouldn't open Pages, Keynote, or Numbers. All three will open for about 2 seconds then crash and macOS will give the "Application closed unexpectedly" message and offer to send an error report. The error report begins with something like there being an exception with "fontassetdownloadmanager". I know Preview crashes when opening sometimes and has to have the Saved Application State cleared so it'll stop trying to open the file that's crashing it, but this doesn't fix this issue. We ended up wiping this M1 Mac with Big Sur 11.4 (previously was 11.2.3) and the apps suddenly work. Since then, we've had a second M1 Air user report he same issue, same error report, Big Sur 11.2.1. We've asked her to hold tight as we noticed there has been a recent update to Pages, Keynote, and Numbers about a week ago and we figured that update might've broken something. This morning I had a retiring teacher come in that purchased an M1

I ran into this odd issue with a new MacMini (Macmini8,1) with 10.14.3 preinstalled. I am testing NoMAD with NoMADLogin and I have the first user log in and that creates their account. Jamf Pro then runs a policy to encrypt the device with our institutional key and to add a EFI password lock. When I boot to the recovery partition, I find that I am unable to disable the EFI password in the Startup Security Utility due to “No administrator was found”. None of the local accounts are listed on the dropdown. I would think this occurs if the admin account is missing a securetoken but that’s isn’t the case as I was able to encrypt the MacMini. The only way I can disable the EFI password is to blow the OS away, enroll the device with MDM, then log in as the local admin account that is created during the prestage enrollment. Once I'm in the recovery partition, then the Startup Security Utility usually allows me to disable the password lock with this account. Has anyone experienced this?

My company just recently purchased jamf and I am the technical lead for deploying it out to our end users. I went through training with a jamf engineer. He informed that you can create a policy that can uninstall a piece of software in self service and we did that with Google Chrome as an example. When I tried setting it up with Firefox, I could not find the option to uninstall the software again. I have attached what the Google Chrome settings look like. When I try with Firefox, I only receive the install, cache, or install cached options. Could someone help me out? I can't remember how we did it the first time. Thanks!

Is anyone else having issues with installing Office 365 from Self Service? Basically, Office apps are failing to start, kinda randomly. It seems to work on most of my test boxes but then fails on user machines. I did get one of my test boxes finally. Sometimes the app just does nothing, sometimes we get an error like the one attached. Odd because installing them manually never seems to have an issue. Makes me think I'm doing something wrong with Jamf. Policy logs all look fine.

Hi all, Anyone else have this same problem? I have created a macOS Big Sur USB installer. I boot into a Macbook (2017 or 2018 model) recovery partition, which would come up as either Mojave or Catalina recovery partition. When I type in "/Volumes/Install macOS Big Sur/Install macOS Big Sur.app/Contents/Resources/startosinstall" --agreetolicense --installpackage <microsoft office> --volume /Volumes/Macintosh HD This doesn't work because the older recovery partitions don't allow macOS Big Sur. I tried Opt+Cmd+R to try to download the latest recovery partition. Only then can I successfully install macOS Big Sur. But Opt+Cmd+R doesn't always work. I would like a method that works 100% of the time, even if it takes a bit longer to execute.

We're setting up NomadLogin for deployment and I'm testing right now. The AD connection is working, but all I get for the background and logo are white screen. I don't know where I'm messing up. Here's my script: #!/bin/bash # Preference key reference # https://gitlab.com/orchardandgrove-oss/NoMADLogin-AD/wikis/Configuration/preferences domain="rbschool.org" background_image="/rbsimages/nomadback.jpg" logo="/rbsimages/nomadlogo.png" # Set default AD domain defaults write /Library/Preferences/menu.nomad.login.ad.plist ADDomain "$domain" # Set background image defaults write /Library/Preferences/menu.nomad.login.ad.plist BackgroundImage "$background_image" # Set login window logo defaults write /Library/Preferences/menu.nomad.login.ad.plist LoginLogo "$logo" # Set security authorization database mechanisms with authchanger /usr/local/bin/authchanger -reset -AD # Kill loginwindow process to force NoMAD Login to launch /usr/bin/killall -HUP loginwindow exit 0 Any help is gre

Is there a way to inject AD UserID and User Full Name into Jamf Username: field and Full Name: field in the User and Location area? Or do I have to use Extension Attributes? Jamf 10.25.1

Forgive me if this has been discussed, but I am unable to find a thread on it. My company wants to deploy Acrobat Reader DC to all computers and they don't want the user to have to accept the EULA. Seems like Adobe doesn't make this easy to do. I would appreciate it If anyone can point me in the right direction. Thanks.

I want to display a message to users, and I want it to stay on the screen until they click a button to acknowledge the message at which point a URL will be opened with further information. I wrote a simple script to call jamfHelper to display the message and wait for the user to click a button at which point the script uses the open command so whatever app is configured as the handler for https will load the web page. Since I don't want the policy running this script to hang until the user acknowledges the message my script writes out a secondary script which calls jamfHelper, waits for the user to click, calls open, and then deletes itself. The primary script calls the secondary script with a & at the end to spawn it as another process. That works fine when the Policy running my script is triggered via sudo jamf policy - the message is displayed, the jamf process completes, and when I click the button in the message the web page opens and the secondary script is deleted. The beh

Hello all,I was told that except MAC, JAMF can manage Linux and Windows.I do not think this is correct as I do not find any info for it.But can someone confirm this?

Been using for a while, but are the actual options for this documented somewhere? Specifically looking to find out how to query result of user clicking a button within a policy dialogue.

Do I have to have the scope set up for all users/computers if I want apps to install on Jamf enrollment? I am a little confused on that one..