I have an attribute for "In Storage" that I have configured in all of our policies to not use. I was thinking it could be helpful for this to be set automatically to "Yes" during enrollment so nothing runs on the device in Jamf. We have several different static groups that get different configurations so ideally nothing would happen to a device until we assign it a group. There are some things that ALMOST everything gets that isn't scoped to specific groups but we would prefer these get paused until after we set which group it should be in. If there is a better way to accomplish what we are trying to do please let me know!

Until now, I've been content with deploying Malwarebytes for Mac via Self Service as basically a drag-n-drop install to /Applications. This new version that was released recently requires admin rights upon first launch to install a new helper tool. (What's the deal with all these new helper tools?) It looks like it installs /Library/PrivilegedHelperTools/com.malwarebytes.MBAMHelperTool and /Library/LaunchDaemons/com.malwarebytes.MBAMHelperTool.plist I guess we'll have to roll these along with a launchctl command to enable the LaunchDaemon in any updated policies. Does anyone know what these PrivilegedHelperTools do?

Has anyone had any luck with getting the new Malwarebytes for Mac 3 menu bar item hidden from a policy or script? Been digging through the Application Support and Preferences for by the OS and User, and can't seem to find anything that changes if you check or uncheck the "Hide Application Icon" in the Malwarebytes settings. Thank you for any help you can provide!

Hi all, my company has decided that we will be putting malwarebytes on all mac computers. I have been doing some searching but have found very little detail about it. I have found the following kernel infoGVZRY6KDKR com.malwarebytes.mbam.rtprotectioncom.malwarebytes.UserAgent What I have not found is any PPPC information. It does not have any permissions showing up under Security & Privacy. Has anyone had any recent dealings with malwarebytes? is there anything I am missing?

Hi Everyone, I confess it's been a minute since I've worked in Jamf in this capacity, but as far as I know I've done things right. I built 3 packages from .app files using Composer (i.e. dragged them from my Applications folder into Composer as sources, created packages out of them, uploaded & categorized them in Jamf Pro). I created a policy to install them, scoped it to the targeted test computer, and ran a sudo jamf policy from the test computer's end. The command appears to execute fine, doesn't throw any errors. But when I go back to the Applications folder of the test computer, only 1 of the three applications (Gimp) is there. I'm not understanding what's going wrong and it doesn't seem like there's an obvious error code anywhere! Below is my relevant /var/log/install.log data Can anyone help me figure out what's going on? 2021-03-22 14:00:38-07 RCHSGRAPHICSLAB19m installer[4237]: Product archive /Library/Application Support/JAMF/Downloads/Blender.pkg trustLevel=100 2

I Tried to wipe a Big Sur machine, expecting it to re-install the OS and connect to MDM. The 6 digits worked. it rebooted to the no entry sign. An internet recovery didn't work (both with newest release keypress and default release - it was orignally a Sierra machine). In the end the only option was a USB bootable Big Sur re-build. It did rejoin the MDM correctly though. Anyone else seen this - is this how it's supposed to function? Seems odd.

I'm trying to get some profiles on my VM's, running on a esxi platform. when i make a empty profile at system level it get's pushed fine to my "regular clients" MBP etc. the profiles never appear in my VM's. i tried to jamf removeMDMProfile jamf manage on all VM's i have the MDM Enrolment profile so it seams they get pushed like they should.the VM's are in the same subnet as my other clients so network issues are unlikely.the following telnet tests are fine. telnet 1-courier.push.apple.com 5223 telnet gateway.sandbox.push.apple.com 2195 telnet gateway.push.apple.com 2196 i'm at a loss, i see no reason why it shouldn't work. who can help?

Hello friends I'm trying to make a script to change the user password of about 200 machines and I'm not getting it, what I have so far and this !/bin/bash unset HISTFILEdscl . -passwd /Users/username newpasswordsecurity set-keychain-password -o oldpassword -p newpassword

Hello everyone, I'm new to Jamf management and I'm wondering if the following scenario is possible. I'm able to deploy Symantec Cloudsoc and WSS (Web SercurityService) via jamf. The issue I'm having is with completely automating the Cloudsoc/Wss agent installation. We don't want users to have the option of not clicking the "allow" button in system and preferences -> Security & Privacy -> General tab. We would like to eliminate the possibility of users not completely installing agents on machines. I haven't found a way to bypass this issue and currently stuck, any guidance would help

We have enrolled more than 40 Macs using QuickAdd package and they all have worked fine. One of the Mac has installed the MDM profile but it is not installing the configuration profiles and also the MDM Capability is No. We have setup smart groups for configuration profiles which just pick up the Macs right after the enrolment but in this case its not working even after Mac was left overnight. Any suggestions.

Hi all, I have been getting a headache with patch management. I have tried to update adobe acrobat reader, and google chrome on two different machines. I have downloaded the recent update from the 3rd party site as well as from jamf's 3rd party product site. I click the patch in self service and I either get "error" or "finished" but upon inspect the version, it failed to update and the patch reappears in self service acknowledging the out of date software. I called jamf support and they told me they weren't able to help at the moment and opened a case. Has anyone else experienced this? And can someone please help??

I've spent days trying to figure this out.If I run the command below as standard user, from terminal, it works just fine:mount_smbfs //username:'password'@server.corp.local/subfolder/another%20sub%20folder /Volumes/SOP/We have some files that are constantly changing on a windows share. To add to the headache, the path has whitespace within it.The Macs that need access to it aren't on domain (legacy application hold up).I'm just trying to provide the users access to the share from the desktops and the script should run on login.I'm running another script prior to this one, which creates the folder on the volume (/Volumes/SOP) with correct permissions to the folder and it is successful.Here is the script that throws the error in the subject line of this post: ############################ !/bin/sh currentUser=$(ls -l /dev/console | awk '{ print $3 }')True_Path=//username:'password'@server.corp.local/subfolder/another sub folder/usr/bin/su $currentUser osascript -e 'mount_smbfs "'$True_

Is anyone deploying Xcode through the 'Mac App Store Apps' option with any success? Our one app development class uses Xcode on the computers then tests on their iPads so I need to make sure the versions match for this to work. Previously I had been downloading Xcode and deploying manually but this is somewhat time consuming. Then if the iPad app updates that causes issues until I can get the computer app updated again. When trying to install Xcode from the App Store through Self Service it fails, but I'm not able to find anything in the logs about why it fails. When trying to install it this way with Xcode already installed, the app itself opens but it doesn't seem to be updating to the latest version. Anyone else having similar issues? I've deployed plenty of iPad apps this way without issue so I can't imagine it's that different.

Looking for some help on this one. I received a list of extensions to block from my Security team. That is all fine and dandy since I can add them to the "ExtensionInstallBlacklist", which, will prevent users from installing them. However, in testing this, I found that if it's already installed before I send out the config profile it doesn't do anything with that extension. I tested this by installing Adblock Plus (cfhdojbkjhnklbpkdaibdccddilifddb) on a Mac. I then deployed out the config profile and found Adblock Plus was still there and functioned correctly. I even closed and reopened Chrome. If I remove Adblock Plus manually, then, try to reinstall it, then, then it is blocked from reinstalling with the profile in place still. Has anyone found a way to disable and/or remove already installed Chrome extensions via configuration profile? I even tried the "BlockExternalExtensions" setting but that did nothing. Thank you in advance!

So I'm configuring some Default User Template LaunchAgents to configure a default screensaver for some of my company's most popular fan art. (It's actually been really well received by the team). They're designed as first-run images when they log into their forced-Local Active Directory users. However, I'm getting very inconsistent results now...namely it's not working at all. The .plist launches a Shell Script located in the /sbin/ folder. The odd thing is that it mostly works in an existing user. The screensaver is meant to use "Flipup" with a specific folder of images, shuffle the pictures and set a start time of 5 minutes. For example, I intentionally set my "default configuration user" screensaver first to the "Holiday Mobile," set the picture selection to "Cosmos" (one of the defaults) with a start time of 20 minutes and unchecked "shuffle images." Then I changed it to "Arabesque."

I'm trying to wrap my head around PPPC /TCC, I started streaming the log when a popup came up for zOutlookPluginAgent, but it didn't show any new information in the logs after I clicked Allow other than an fseventsd entry and apple.sandboxd... The only thing I can see in Privacy security preference pane is under Automation it's listed with a checkbox next to Microsoft Outlook When I went into PPPC-Utility and dragged in the plugin agent in question, it lists the identifier "us.zoom.pluginagent" which I already have a PPPC for on the machine. I guess my question is 1) does anybody have a premed PPPC for Zoom meetings and the Outlook Plugin they would be willing to share and 2) is there a way to look at the log (assuming it's the com.apple.TCC) and see specifically what this plugin is doing so I can fix my existing one?

Hello, I'm using the PPPC Utility to create a Config Profile to allow the Zoom app in the "Accessibility" section. I've created the config profile, and it's installing on my test computer without an error. However, the check mark still doesn't show up next to zoom.us in the Accessibility section. Should it be as simple as creating the profile and sending it to the laptop, or am I missing a step? Thanks, Noah

We have about 60 Mac Minis (2018/2020) in our datacenter. They are using "Sonnet RackMac Mini 2018 rack mounting chassis" which has a button on the front that actuates the power button to the Mini on the Back. This is fine when we go in to the datacenter, but as you can imagine my company ain't too happy about frequent datacenter trips to power fail workstations in a server environment. Anyone have any suggestions on some IP solution to offer remote power to Mac Minis?

We're working on a bit of an API project centered around building an app that would allow some of our lower-privileged users to update prestages for mobile devices using a tool that we provide. Using the new API, it looks like this should be possible, but, whenever we try to update the status of a device using an api call, we get an error 409: Optimistic Lock Failed . This happens even when we use the 'Try it' options through the API UI. This happens if we try to delete the scoping or modify it. Here's the API call (with variables): curl -X POST "$JSS_URL/api/v2/mobile-device-prestages/5/scope/delete-multiple" -H "accept: application/json" -H "Authorization: $token" -H "Content-Type: application/json" -d "{"serialNumbers":["$serial_number"],"versionLock":1}" Here's the return: { "httpStatus" : 409, "errors" : [ { "code" : "OPTIMISTIC_LOCK_FAILED", "description" : "Conflict", "id" : "0", "field" : null } ] Has anyone else seen this? Am I missin

Hi,Whats the best way to test the prestage autoenrollment? I've been branding and setting up scripts to install software etc. I've got a VMware machine installed with MacOS Catalina. Can I change the serial number of the VM to match one in ABM and work with snapshots? Or is there a better way? Thanks,

Below are 2 screenshots from today, one taken on my Intel laptop and the other from M1 MacBook Air. Both machines are connected to our campus network same Wi-Fi, the same VLAN, and the same firewall. But for some reason, the M1 laptop will not show ANY new macOS software updates! Before the 11.2.1 update, I had this issue with this same M1 laptop and the only way to get it to update is by reinstalling macOS from Recovery. Has anyone seen this before?

I need some help and guidance with the cleanup of the Outlook and Teams caching. Sometimes it is needed to delete those. So i made a script and want to publish is througt the selfservice App. So if our servicedesk advices someone to delete the cache, it can be done by the user. However, my scripting is not that great. I want to present a popup with 3 choices to the user. Clear Outlook cache, clear Teams cache or quit. The latter one if the user is curious :-) This is what i have so far but it errors out. What am i doing wrong or is there a better solution to this problem? #!/bin/bash # # # Clean up script! # # Task - Clear outlook address cache list! # Task - Clear Teams caching! # # #echo on if needed #set -x SURETY="$(osascript -e 'display dialog "Delete the cache files?" buttons {"Teams", "Outlook", "Cancel"} default button "Cancel" with icon stop')" if [ "$SURETY" = "button returned:Outlook

I am trying to identify the Apache2 version to scope systems that need an update, but I am experiencing some unexpected results. My EA script: #!/bin/sh result=`httpd -v | grep "Unix" | awk '{print $3}' | cut -f2 -d"/"` echo "<result>$result</result>" When I run as root on my test system, the result is what I expect to see:<result>2.4.46</result>But the EA result in JAMF pro is 2.4.41. A few details that may help: 2.4.41 is the version that ships with 10.15. I am leveraging MacPorts for the Apache2 update to 2.4.46. Any ideas are appreciated :)

I'm trying to get the most current version of Big Sur so I can add it to an installer script. Basically just checking if the user has the most current version of the installer before it runs. I have this so far but I am a noob at awk and grep commands. #!/bin/sh latestver=`curl -s http://itunes.apple.com/lookup?bundleId=com.apple.InstallAssistant.macOSBigSur&country=US | awk -F':' '/"com.apple.InstallAssistant.macOSBigSur", "version"/{print $3; exit}'` echo "Latest Version is: $latestver" I'm trying to get the 11.2.2 value into the latestver string. Any help would be much appreciated. Also, if anyone has a better way of getting the most current version number, I'm all ears. Thanks.

We've found this script extremely useful for removing Office 2011. Is there something similar floating around for Office 2016?