Is there an easy way to untick the checkbox for "Automatically keep my Mac up to date" I've created a plist for the options I'm interested in applying, but these only apply successfully when this box is unticked. In the main software update menu, there is a box for "Automatically keep my Mac up to date", when you click this and then click Advanced, all Advanced options are selected. When this is then deselected, the manage options I desire are selected. Essentially, I want updates to be downloaded but not installed unless they're critical, but bizarrely, there doesn't seem to be an easy way to do this with Jamf?

Greetings, all! I'm fine tuning a JAMF Helper script that I have in place to upgrade with an OS X installer using simple caching. Between the caching and the actual installation of the OS X installer, I want to use a JAMF Helper window to notify the end user of the process, allowing them to opt-in and opt-out. I am noticing that the notification (running at recurring check-in, once per day) is capable of running when no one is logged onto the computer. This displays the JAMF Helper window at the login screen and eventually just times out. Here is what I would like to accomplish, with your help: Echo that a timeout has been reached using "243 - The window timed-out with no buttons on the screen." Before the JAMF Helper command runs, check to see if the logged in user (loggedInUser=$(stat -f%Su /dev/console)) is actually logged onto the computer. #!/bin/bash /usr/bin/curl -s -o /tmp/elcapitan_icon.png http://assets.materialup.com/uploads/ec819071-7140-4c6d-89ac-81b712642fcb/512x51

I thought apps that installed kernel extensions were being replaced with system extensions in Big Sur, but from what I'm seeing Box Drive and Cisco AnyConnect (4.9) are still installing as kexts. I installed both on a freshly wiped Big Sur machine and both prompt to allow the extension to be installed, and after reboot kextstat | grep -v com.apple shows the 2 approved extensions, while systemextensctl list shows nothing. I have a config profile setup that was working on Catalina to automatically approve these kernel extensions but that doesn't seem to work on Big Sur. I've tried using just the team ID and the team ID + the bundle ID, and get the same behavior. I did check the "FIELD_ALLOW_NON_ADMIN_USER_APPROVALS" option, and can approve these as a non-admin at least. I've also set up an approved system extension config profile and have tried just the team ID and the team ID + bundle ID, and I still can't get these extensions to be approved a

Alright so I'm trying to create an Extension Attribute to get the version of Cisco AnyConnect on the machines. But I'm getting blank results, I setup Skype the same way and it seems to work fine. Does something look wrong? Data Type: StringInventory Display: Extension AttributesInput Type: Script !/bin/sh if [ -f "/Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app/Contents/info.plist" ] ; then VERSION=$( defaults read "/Applications/Cisco/Cisco AnyConnect Secure Mobility Client.app/Contents/info.plist" CFBundleShortVersionString )else VERSION="Not installed"fi echo "<result>$VERSION</result>"

Hi, I am trying to figure out a way to find a mobile device by its IMEI with the API but I am running into issues getting Jamf to return the correct information. I'm working with this constraint because the department that handles the hardware in my org has scanned mobile devices into the property management system by IMEI, and that value is the only primary key I can currently use to relate the devices between various IT systems. For example, our property database has mobile devices listed with IMEI and asset tag. I would like to assign asset tags to devices in Jamf, but the only common field between the property database and Jamf is the IMEI. It is straightforward to pull a specific device by serial number or JSS ID, but the IMEI seems to be handled differently. Any assistance will be extremely appreciated!

According to Jamf's documentation, "By default, inventory is collected from computers using the “Update Inventory” policy that is created automatically when you install Jamf Pro. This policy collects inventory from all computers once every week. You can make changes to the default inventory collection policy at any time. In addition, if you want more control over inventory collection, you can create additional inventory collection policies as needed." I've been looking through the settings, and I see where I can change the frequency of check-ins, but I can't see how to change the frequency of inventory collection for computers without creating a new policy. Do I just need to create a new policy or is there a way to do this in settings? Any assistance you can provide would be much appreciated.

Hey so just wondering if anyone has a tutorial on how to install printer drivers with jamf. I inherited a jamf environment with no documentation. The existing printer drivers are of a type "pkg" but the ones i download from xerox are "dmg" or "man" files. I have tried adding these as a package to my printer install, but i dont think jamf actually does anything as it does download and "install" the dmg file but it happens in less than 1 second which i think is not likely working. I also cannot see any xerox drivers in the list. And then then printer says it has no drivers when i go to try and print. I have looked into making a PKG out of a dmg, but it seems really complicated and geared more towards applications. These are drivers. Does a guide exist for how to make the PKG into a DMG i can use? Lots of forums posts mentioning casper and composer to somehow make this file. I dont really know what those are, but seem like a paid product (casper) and a PHP package distribution framewor

When Big Sur came out, I used Restricted Software to restrict and delete the Big Sur Installer when it was attempted to run. Now I am removing that restriction on certain test computers by adding them to the Exclusions list under Scope. Unfortunately, doing this does not seem to un-restrict the installer immediately. Is there something else I need to do first (such as wait a certain amount of time, or run a recon, or restart)? Thank you very much.

After imaging 2016 MBP with a 10.12.1 image (built from the same model) the computer boots up and I immediately get a white square with a spinning gear for several minutes. Then I get the error above. There's no indication of what it's doing and I can't access the log to see what's wrong. The Mac is completely unusable because I have to shut it down or click Try again that never works. What the heck is going on? Anyone know what this is?

Long story short, a few months ago we changed CA's and found ourselves stuck with updating the existing wifi configuration profile. We ended up having to change the entire company's wifi SSID to get around this. (more info here - https://www.jamf.com/jamf-nation/discussions/23826/config-profile-question) We ultimately decided to deploy the wifi config profile through a script using the "profiles -I -F" command instead of configuration profile for fear of getting stuck in the same situation. While the cutover to the new CA server went relatively seamless, we don't have a seamless way of updating the wireless certificates. (it only works if the user goes through Self Service) What I'm looking for:I'm looking for a way to have seamless wifi certificate renewals. Here's the problem:Running the script as the logged on user through Self Service works 100%. It'll remove the old wifi cert, download a new wifi cert, then It'll create the com.

I saw an Extension Attribute "Current AirPort Network". How can I use this to list clients connected to a specific SSID. We have a School that we want to move all clients to the new SSID because the password was compromised (we are working on RADIUS authentication but not finished yet as we want to integrate it with the Lightspeed Rocket content filter) I pushed a script to connect them to the new SSID, and remove the old SSID from Preferred Network List. I scoped by Network Segment, once per computer. What I would like to do is, create a smartgroup with clients connected to the old ssid, and use it as my Scope. Run the policy ongoing until all of them is no longer with that smartgroup. I scheduled to deactivate the policy after 1 week and extend it if necessary.

I’m working on a computer currently that is having logon issues with one users account. The user logs into the computer it tries to login then goes back to the login screen. Has anyone ever seen this error and knows a fix?

Has anybody successfully create a licensed package for GraphPad Prism v 7a? Just curious to see what people's thoughts were in the process for this.

Hi =)We would like to pre-publish a network SSID via plist or script of possible which does eap-tls auth with a user based certificate ( due to mac is not AD bound, we use NoMAD ).Thanks to Nomad the certificate is already stored within the keychain.How to add preferred wirelessnetwork at index include Mode and Indentity?1) SSID default lan.test.comnetworksetup -addpreferredwirelessnetworkatindex en0 lan.test.com 1 WPA2E2) Mode = EAP-TLS ?3) Identification = user certificate ? Help me please =)

I have set up a pre-enrollment profile for iPads, but also have it to where multiple users can sign into the iPad. After initial setup, I am brought to the login screen, but there is no internet connection available to sign in to an account. There is nowhere on this screen to connect to a network either.

Hey All,I'm trying to script the Apple ID preference pane to open and have a command that works on the standard logged in user in terminal and in the past when I had gotten this, it was because the script was still trying to run as root, however I'm telling it to run as the logged in user and IM getting the above error "LSOpenURLsWithRole() failed with error -54 for the URL x-apple.systempreferences:AppleIDPrefPane"Below is the script, if anyone has a suggestion. #!/bin/sh currentUser=$(/bin/ls -l /dev/console | /usr/bin/awk '{print $3}') sudo -u $currentUser open "x-apple.systempreferences:AppleIDPrefPane" #sleep 150 #jamf recon exit 0 Gabe ShackneyPrinceton Public Schools

We've got some security software that only consists of a single binary in /sbin and a launch daemon in /Library/LaunchDaemons Some of the installs were done by our security team manually (outside of Casper) and I've been asked to make it deployable. I need to make a smart group to manage which computers don't already have it and to make sure the software isn't re-installed on top of an existing install, but I can't figure out how to set criteria to look for the presence of either of those files. Does anyone have any pointers? (yes, I realize that this software won't work in El Capitan because it installs to /sbin, but we're waiting several months before upgrading anything)

I have configured passcode enforcement settings in my configuration profile, but the device does not seem to require me to change the passcode upon authentication, or during the initial setup.

Hello, I have been struggling with this error since our Jump Start. We have a service account that is to bind devices to our AD upon enrollment. Every time, both via policy or by going to user preferences I receive this error. My AD account works to bind the devices in User Groups but the Service account receives (plugin encountered an error processing request 10001). The service account CAN bind PC's to AD. Domain is NOT .local Computer name is under 15 characters.

I've been trying to distribute backgrounds to the M1 Macs for days. but unfortunately these M1s behave completely opposite to the Intels. Log says "Completed" but on the M1 is only a blue background instead of the distributed background. all Intel Macs have the new background loaded. I have tried both ways as PKG & DMG both are successful on the Intels, but not on the M1. what am i doing wrong ?

Hello,Is it normal to need to reinstall Jamf Connect after a macOS upgrade in order to get the Login component working again? It seems that after upgrading from Mojave to Catalina, or even applying an update in the same OS, that the Jamf Connect Login stops being active. The config is all still there, and the Jamf Connect app is still there in Applications, but the Mac goes back to the normal "bubble" login as opposed to our Google login. We have to then login and reinstall the Jamf Connect package to get the Google login back.Is there some way to get this automated?Or do we have some incorrect configuration?Thanks for any information you can give,Tim

After coming back from spring break on Monday and finding 5-6 people who left their MacBook Air unplugged and on, I found myself with users who couldn't connect to the 802.1X because of date and time issues. The users do not have admin rights. Nothing like setting the clock manually for people and rebooting. I decided to try tackling the problem in the form of a script. Said script would be triggered at login on an ongoing basis (in offline mode as the JSS itself may very well be unreachable at that point). It would be scoped to an all MacBooks smart group or any other relevant targets that the admin sees fit. It would work something like this below. I was actually able to find a file whose date is updated but otherwise not changed by the end user in the form of the XProtect definitions bundle. Any feedback or enhancements are welcome. I've tried it out on a computer by manually setting it's clock backward and it does seem to work. I haven't actually tried it using my JSS though. Ho

Hi guys I'm trying to get our Macs a bit more up to date and uniform, since they've gone virtually unmanaged for quite a while. I made a policy to install software updates from Apple's software update server. The restart option is selected to restart if a package or update requires it, and the user gets a restart message with the specified delay before the restart. Is it possible to give the user the option to delay this restart? For example giving them a message with the choice between 'restart now' and 'restart later' (with a later time specified).I know I can allow users to defer the policy, but is this possible for the restart as well? Thanks!

Just starting with Jamf Cloud. We have an On Prem file share DP which we intend to use for people on site so that's the Principal Distribution Point. Would the best way to make use of the Cloud DP be to make it the failover for the On Prem DP? That way if a machine can't reach the File Share it "should" fail over to the cloud one e.g. in the case of machines outside our network.

We are new to jamf and we started with the trial version of jamf pro. I saw that there really wasn't much I could do during the trial so we purchased the product. I activated the license, downloaded Jamf Connect installer but it's still in trial mode. I cannot figure out how to get the license info registered with the paid version. Is this built into the installer or is there an import feature. The CS group gave me a Dropbox of the files but there is no README. Could use some assistance. We scheduled a 1pm call with them as we really need to get their help getting this off the ground. Thanks in advance!