We have a school in our district that has Epson interactive projectors, which uses Epson iProjection software/driver. I have the driver installer working, however, I can't get the iProjection pkg to work. I originally just pulled the pkg file from the dmg, which did not work after I placed it in Self Service - it just errors out with this from the policy log Installation failed. The installer reported: installer: Package name is Epson iProjection Ver.2.22 installer: Installing at base path / installer: The install failed (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.) I know that this pkg installer has selectable options - could that be causing it to fail? If so, how can I pre-select options? With a script? With composer? How? I did do a snapshot pkg, but for whatever reason that failed as well. This campus tech is extremely busy with the new building, so trying to do what I can to assist him and didn't rea

Testing Big Sur with my existing Prestage enrollment and when I log in with the local admin account that is created by the prestage I am forced to change the password. No new password is accepted no matter what I try, so I can't log in. No error about complexity, the Reset Password box simply shakes. This has not occurred when I used this prestage on 10.13 or 10.14. I only have minimum passcode length and maximum passcode age set in the prestage profile. Any suggestions?

I've received a request to change a lab of iMacs over to Google Chrome as the default browser. The lab is currently equipped with Snow Leopard and Chrome is already installed. Safari is the default browser at the moment. I've attempted to do some internet searches on how to do this but come up short since I'm wading through tons of sites explaining how to change it via the gui. Has anyone done this via Casper or are aware of how I could implement such a solution? This needs to be something I can automate as I can see this getting requested in other labs soon. Thanks in advance.

Hi AllI used to have an ARD script that was able to report on installed Graphics Hardware on any mac hardware...typically I've misplaced this so wondered if anyone had tried this before or even better might have incorporated Graphics Card reporting into Casper Hardware inventory? Cheers

Hello, I'm trying to get the two commend below to display in Extension Attributes. cat /etc/passwd | grep '^.*:0:.*' | wc -l shasum /etc/sudoers | sed 'sX/etc/sudoersXX' thanks in advance.

Hi,I've have JamfConenct working with Azure AD but as soon as I deploy a policy to enable FileVault and escrow keys to Jamf server to the machines it breaks AD Azure connectivity. A reboot show the standard mac login screen and if I logoff the user I get a broken Azure AD screen. I've tried deploying FileValt first then JamfConnect but same problems. Any ideas? Regards,

I have received a notification asking me to change the password method for user-initiated enrollment for the jamf admin account to a random password. I have set the password to a specific password so that I know what it is in case I ever have to use it in an emergency, so I don't want to change to a randomized password. Can anyone explain why it forces you to set the password to random and how do I get rid of the notification?

Zoom 5.5.2 was released over the weekend, and I uploaded the new pkg to Jamf so I could have all Macs updated before my institutions classes started Monday. The new version wasn't listed and still doesn't seem to be. There are a few devices that auto-updated to 5.5.2, and those are all coming up as an unknown version now. Any ideas when the newest version will be listed in Jamf?

Hi everyone. I'm trying to find a way where I can add a bookmark 'URL' on chrome to all users, any idea?

So, odd use case I know, but here's my dilemma: Our privileged wifi is allowed via certificates that are installed via configuration profile, and they authenticate based on the machine being bound to AD. Sometimes, our users take their laptops offsite for periods of time, during which their AD password changes. The next time the machine touches our network, it breaks the privileged wifi and puts the laptop on our general network. The solution has been to delete the wifi profile, delete the keychain entry that our general wifi installs in the login keychain, and then reinstall the wifi profile. I'd love to come up with a solution that a user can do from Self Service, but the issue becomes: how do i get the wifi certificate back on the machine if it doesn't have internet? Would it be possible to use Composer to create a package that "installed" the wifi profile, cache it, and then create the Self Service profile that uninstalls the current profile, deletes the single keychain entry,

We just went through JumpStart for MacOS and I'm struggling to get our Chrome package to install properly. Maybe an issue with the package itself? We have a smart group to look for computers without Chrome installed. I did figure out that I had to install Rosetta 2 first, but the Chrome policy appears to be successful, but then Chrome just isn't installed. I added Chrome to Self Service and tried running it and it says it finishes, but Chrome is no where to be found.

At the beginning of the academic year, I pushed out version 15.35 and we lock most software updates during the semester to prevent any additional headaches. I opened Word last week and saw a nice banner at the top telling me to update my Office. I run a script during Office install that sets update checking to Manual and have never seen this banner until recently. I do not see any options in the GUI to not display this update banner. Does anyone know how to disable it?

What is the best way to package and deploy office 2019? Thanks

Has anyone taken a look at Aspera Connect 3.5.2.x? Owned by IBM, and until today not listed under Third-Party Products, it is distributed as an .app installer, with the requisite PKG icon, probably a hint that IBM thinks we won't notice. It has a 501 line .script (AppleScript) intrusive script embedded in it. It has an embedded flat *.mpkg installer, that has embedded scripts with such lovely syntax as: Apparently the person writing the preflight script doesn't believe in close quotes... if [ $is_admin = "yes" ] ; then echo removing system wide apps rm -rf /Applications/Aspera Connect.app rm -rf /Applications/Aspera Crypt.app echo removing system wide plugin rm -rf /Library/Internet Plug-Ins/Aspera Web.plugin rm -rf /Library/Internet Plug-Ins/Aspera Web.webplugin # this is for versioned plugin dirs rm -rf /Library/Internet Plug-Ins/Aspera Web* fi echo removing local user plugin rm -rf ~/Library/Internet Plug-Ins/Aspera Web.plugin rm -rf ~/Librar

Hi all, We have iPads at our school that we currently have managed using device based management (i.e. they do not have a managed apple ID). After a recent test about how to deploy Books (or iBooks) it appears we need to have the iPads signed in with Managed Apple IDs (MAIDs). We do not need users (we are a Primary school) to have their own MAID. So our plan is to have MAIDs, that are created in ASM, that are specific for the device (in order to allow deploying Books to the Books App). We would like to be able to remotely sign in the iPads to the MAID and were wondering if there is a way to do this in Jamf Pro since you can assign a User (which is created by an import from ASM - i.e. the MAID) to an iPad. Otherwise getting each individual iPad and signing them into their MAID is just ...painful.

Hi,is anyone having troubles with the checkmark "Enable Self Service User Login"? We tried several times to uncheck it but looks like that it keep self re-enabling every time.It is frustrating.

Hey Guys, Just wondering what you guys are using for EA on checking uptime on the macs. I did find this :https://www.jamf.com/jamf-nation/discussions/10009/uptime-or-last-shutdown-restart Curious to see if you guys have an EA that works to report back in Days/Minutes and works on macOS Sierra!

Hello JAMFNation! I'm a relative noob. My company has restricted DropBox via the "Restricted Software" feature in JAMF. How do I add LDAP users to the exclusions list? Not seeing an obvious answer to this elsewhere on JAMFNation. We already have a few LDAP users on the exclusions list for this restriction, I just need to add one more. But when I select "Scope" and then try add an additional exclusion, I get only the option to exclude computers, buildings, groups, or departments. Thanks!

Hello fellow Jamf Admins, I'm trying to GET a specific extension attribute and only output the specific result using the following script: curl -sku $jssUser:$jssPass -H "accept: text/xml" xml=$(https://$orgName.jamfcloud.com/JSSResource/computers/id/$jamfID/subset/extension_attributes) deviceType=$(echo $xml | xpath "//*[id=$deviceTypeEAID]/value/text()") This command works perfectly when running it in Catalina and below, but for some reason when I run it in Big Sur I get the following error: Script result: Usage: /usr/bin/xpath5.28 [options] -e query [-e query...] [filename...] If no filenames are given, supply XML on STDIN. You must provide at least one query. Each supplementary query is done in order, the previous query giving the context of the next one. Options: -q quiet, only output the resulting PATH. -s suffix, use suffix instead of linefeed. -p postfix, use prefix instead of nothing. -n Don't use an external DTD. I'm pretty junior when it comes to scripting, and I'm n

Hi, I am building a new Jamf Pro Server which is going to take over the old server once operational. Can I use the activation code when setting this up without any impact to the existing server? Thanks

My company is in the process of setting up PatchBot (https://github.com/Honestpuck/PatchBot) for all of our Jamf Pro cloud instances. Per the checklist, I've set up all of the necessary policies (both computer and patch), and am using Firefox as my test case. I made the Firefox.pkg override, and created the Firefox.ptch recipe using the new package argument, and made the corresponding override. Problems: when running the autopkg.sh script, we're running into issues with both of the custom processors, JPCImporter and PatchManager. JPCImporter fails with a 409 error. It times out after the 10 attempts to update the package. 2021-01-08 11:29:17 DEBUG package update attempt 11 2021-01-08 11:29:18 DEBUG Attempt failed with code: 409 2021-01-08 11:29:18 DEBUG URL: https://***.jamfcloud.com/JSSResource/packages/id/166 PatchManager also fails with a 409 error and doesn't update the patch policies. The script just halts at line 190 after the 409 is returned. 2021-01-08 11:33:52 DEB

Hi, so in SCCM i have applications and do detection method for an application. With jamf of course there are packages and package receipts. When you have an essential application like an antivirus how do you make sure it stays on the machine. For example if a policy is set for recurring check in but run once per machine. Like I could set it to ongoing but seems bad to reinstall the package all the time. Wish I could just do a check to see if the file is there and if its not reinstall.

Here's a fun one for you duti users out there... I'm attempting to use duti with this script to set defaults. The commands work when run locally, but when I attempt to use a script or a command in Files & Processes, they don't work. It also didn't work when added to the duti package as a postinstall script. 10.15.7 is the version of macOS; anyone seen this before? Might cdef behave differently? #!/bin/sh #makes outlook default mail program /usr/local/bin/duti -s com.microsoft.outlook mailto #makes outlook default calendar program /usr/local/bin/duti -s com.microsoft.outlook ics all #makes outlook default contacts program /usr/local/bin/duti -s com.microsoft.outlook vcf all

In Sub-Location the Update Button for Devices is missing. The functionality (if enabled for the users role) is accessible via the direct link. https://*.jamfcloud.com/devices/updates.html The link should be available in the sidebar if it is enabled.

Hi, On 24 september when macOS Mojave 10.14.0 released i decided to upgrade my own MacBook Pro that was on 10.13.6.The upgrade was successful and at that moment it seems to be there were no problems at all, until i shutdown my device and booted it up the day after. When booting, seeing the log-in screen and trying to login with my Managed Mobile Account it will get stuck on the black screen with Apple logo endless. On our devices we have a local account configured for IT support, and that account is working flawless. What did i try to solve it;- Reset PRAM- Clear user templates- Clear ~/Library/Preferences- Rename ./mbr_cache ./mbr_cache-old- Reinstall macOS Mojave from Recovery (installer 14.0.22)- Reinstall macOS Mojave from Internet Recovery (installer 14.0.18)- Disable FileVault 2- Disk repair Also grabbbed an other fresh 10.13.6 MacBook Pro, configured my account etc etc and kept it clean as possible, upgraded and same issue appears. When booting to Safe Mode i am able to lo