I am trying to use Casper Remote on an outside of the network computer to change its name. The computer recently checked in. When I select the computer -- advanced -- reset computer names , it comes up with computer not avialable. should this work if the computer is not on the local network ?

I have students (with non-admin rights) wanting to add their own personal printers at home, but they are prompted with the admin logon. How can I allow this? Can someone give me step-by-step instructions? I'm new to all of this! Thanks!

We are using Zscaler in our organization. Within the last few months we started seeing the error "You cannot control your own screen" when screen sharing or using ARD. We discovered this. OS - 10.14.6 AND 10.15.4 In terminal:host 'computername' = computername has address 10.3.10.23 computername has address 100.64.0.1 The issue is that our DNS is registering the 100.64.0.1 tunneling address to multiple computers. This second DNS is registered with Windows domain and appears on PC computers as well when resolving the hostname of the Mac computer(s) ifconfigutun1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1500 inet 100.64.0.1 --> 100.64.0.1 netmask 0xffff0000 If Zscaler is off, 100.64.0.1 IP goes away. Zscaler says talk to Apple. Zscaler's response:"Just before nsupdate there is some activity from opendirectoryd, which is responsible for working with Active Directory. Probably nsupdate was called from it as part of standard flow.Z

Good Morning We have the Office 2016 Volume license. I wanted to test the use of the VL Serializer pkg. I am unsure as to how the Serializer is supposed to work. When I install one of the office pkgs, then install the VL Serializer my Office apps are not active. Are my user supposed to "Activate" office even after installing VL Serializer?I do have the Office 2016 Volume Installer but want to have all my bases covered.What am I doing wrong? Thanks

Hello all, I am currently working on doing an in place update to our fleet of 200+ MacOS devices to bring them up to MacOS 10.15.6. However I am encountering trouble with trying to prevent Setup Assistant from running post-upgrade. Currently after the upgrade is complete and the user unlocks Filevault they are immediately met with the Setup Assistant window which walks them through setting up Siri, Privacy Preferences, Touch ID, ect. This is not ideal as most of the items it prompts for are already managed or restricted within our environment. I know DEP prestages provide the ability to suppress these elements from Startup Assistant, however we are currently not leveraging DEP for our on-prem instance and migrating our existing devices into using DEP is not very feasible currently (hoping to change this in the future). Based on my researching other threads it looks like the Setup Assistant is triggered based on the existence of the .AppleSetupDone file located in /var/db/ and the pr

I know how to manually download Defender. I was wondering if there is a way to download the up to date version on the command line?

I know this is a bit obscure, but does anyone know if there is a way for a policy to pull in the name of another policy, like as a variable. For example, policy 1 runs installing some package, does inventory, and then custom triggers policy 2. Policy 2 then outputs the name of policy 1 as a variable (or any way really) as info to be used in the policy. Again, kind of random and may not be doable, but figured I'd check. Thanks!Alex

Hi All, I'm at wits end with an API job that SHOULD set an extension attribute, but instead just comes back with a 409 error and no good info WHY. #!/bin/sh apiUser="user" apiPass="pass" jssURL="https://jss.example.com:8443" ea_number="91" serial=$(system_profiler SPHardwareDataType | grep 'Serial Number (system)' | awk '{print $NF}') name=$(curl -s "https://inventory.example.com/serial/$serial" | grep -A1 -o "Device name:" | tail -n1 | sed 's/^[ ]*//;s/[ ]*$//' | cut -d" " -f1) if [ ! $name ]; then name="Undefined" fi # Create xml echo "<computer><extension_attributes><extension_attribute><id>$ea_number</id><value>$name</value></extension_attribute></extension_attributes></computer>" | xmllint --format - > /private/tmp/ea.xml ## Upload the xml file curl -vvvfku "${apiUser}":"${apiPass}" "${jssURL}/JSSResource/computers/serialnumber/${serial}/subset/extensionattributes" -H "Content-Type: text/xml" -T /priv

Final is out...anyone using it? Care to share strategy? Are you using with or without AUSST? Self Service? TIA http://www.adobe.com/devnet/creativesuite/enterprisedeployment.html http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/devnet/creativesuite/pdfs/AdobeRemoteUpdateManager.pdf PS, I added "Adobe Renote Update Manager (RUM)" to the Third-Party Products page, but doesn't show up yet so I set this post to "AAMEE". Don

I installed a printer via self service, and it installed fine. Afterwards I went in and removed the printer manually, but the option isn't coming back up in self service to install the printer again. I'm assuming I missed a setting in the policy when I set it up?

We’ve taken on Jamf Cloud hosted and are having a few issues setting up the on prem LDAP Sync AKA “ JIM “ . Both Azure LDAPS Sync and JIM (Jamf Infrastructure Manager) don’t seem to work and I was just looking to see if anyone had the same deployment issue ? Were currently focusing on getting the On Prem Sync (JIM) configured as the Azure route may have some issues in regards to configuration and ongoing licencing. No matter what I try our cloud instance does not see our on prem server 2016 JIM in infrastructure managers Followed all the guides and still stuck

Hi Guys, I've probably watched Don't Forget Your Badge! | JNUC 2018 at least 20 times to understand Attribute Mapping. Are there any good tutorials for this? Myself, and some co-workers are trying to get smartcards to work with the SSO Kerberos Extension on macOS Catalina, and we know attribute mapping is the way to go vs fixed key mapping. Any guidance or help is appreciated!

Hi Guys, I've tried creating a few packages in composer to deploy, and I don't think I'm doing the permissions right. Should it be owner - root, and group - wheel? Thanks

Have a config profile to request a machine cert from our SCEP server, and was working fine until last night. All of a sudden, I am getting a "NSOSStatusErrorDomain:-603" error. Did not see a whole lot about this error on the forms, except about trying to restart the IIS and rebooting the SCEP server. Tried those, but am still getting the error. Anyone seen this before or have any idea why this would just all of a sudden start failing?

In working with @stevewood's excellent script I was able to get everything working, but some of the apps want a logout or reboot. I went to the Depnotify readme and plugged in the commands at the end of the script, but it seems to pop up right away with the restart (apps are still installing), and then the app just quits silently when the installs are done. elif [ "$TESTING_MODE" = false ]; then "$jb" policy -event "$(echo "$POLICY" | cut -d ',' -f2)" --forceNoRecon fi done echo "Command: Restart: Done provisioning the system for use" >> "$dnlog" Would it be better to just set the policy to reboot at the end?

I've read through the 8.3 manual and made sure I have all of the pre-requisites met that are listed. Yet when I create a config profile, or import one from the iPhone utility, I cannot see any of my 10.7 machines in the scope. What am I doing wrong?

Hello Jamf Pro peers! Fresh off the boat Mac user here. Are there any comparable tools to the Active Directory Users and Computers snap-in from Windows available on macOS Catalina and above? Thanks in advance!

Hi All, hoping for some help here. Looking to frankenstein together a script to add our admin account to FV2 as an enabled user. I've got a script that is currently working under the following conditions: Running locally in terminalRunning manually from Self Service It is not working when running automatically via JAMF policy. That is my goal at this point. The script is here: !/bin/sh Add ADMIN ACCOUNT to FV2.sh userName=$(/usr/bin/stat -f%Su /dev/console)prefix='SECRET HERE'pass=$prefix Get the logged in user's password via a prompt echo "Prompting ${userName} for their login password."userPass="$(/usr/bin/osascript -e 'Tell current application to display dialog "Please enter your login password:" default answer "" with title "ADMIN ACCOUNT FileVault 2 Key Escrow" with text buttons {"Ok"} default button 1 with hidden answer' -e 'text returned of result')" echo "Adding ADMIN ACCOUNT to FileVault" This "expect" block will populate answers for the fdesetup prompts that normall

Hi all!I activated the Notify part in Jamf Connect Login.Everything is fine BUT the Notify is applied each time I quit the session or reboot the computer.I understood Notify was applied once, during enrollment. What is my mistake?

Hi, Is there any relevance when you transfer a .pkg to Casper Admin and it appears as .pkg.zip?

Hi,I work for a large establishment with many students who use Mac Books etc. They do not have a managed service. We are manually adding there printers to there Macs which is time consuming. The printers use an smb address. I have tried composing the printer setup using composer but each time I run the .pkg it fails to add the printer. I've tried using a script using the lpadmin command with no luck. Having a .pkg to run on students macs would save a huge amount of time and hopefully would simplify matters. Any help appreciated Many thanks

Hi I have been at an issue for weeks with no solution in sight with attempting to make JAMF work to support BYOD devices with self enrolment using Google Suite as the LDAP server. The two main objectives of our JAMF setup is to:- Deploy profiles to BYOD Mac devices with users required to self-enrol and profiles deployed on group memberships.- Deploy purchase MAC applications to users based on group memberships. Currently we have JAMF setup to use GSuite as our cloud provider for both SSO and LDAP.We are able to successfully test that a user exists in Google Suite as well if the user exists in a Group as a member.This means we are able to create an LDAP group successfully as well as users are able to successfully enrol if they are a member of that group. Being a BYOD environment we have no way of knowing which user owns which device and the only way we can deploy profiles and applications is by LDAP group memberships. The challenges start when we attempt to deploy a profile/applica

I'm trying to provision SonicWall Mobile Connect Client 4.0.12.Our clients are locked down and when I try and configure the VPN client, I get an error from the VPN software saying Administrator Access Only.Has anyone done this successfully and if so - how?Thanks.

My organization is looking for ways to make our deployment workflow completely zero-touch as a response to the COVID-19 crisis. A little background: All of our Macs are bound to a domain. It is a large educational organization with multiple child domains, including a public-facing domain for our public-facing computing resources. Currently, the final step for setting up a Mac for staff is to have the end-user authenticate to the domain with their staff Active Directory credentials. Since our devices are deployed onsite during typical business operation, we always have the ability to authenticate. COVID-19 introduces a flaw in this process as we attempt to onboard new staff and provision computers to current staff as temporary loaners during the crisis. Does anyone have insight on how we can enable VPN authentication prior to login or some other workflow for preconfiguring mobile accounts? Anything you have, forum discussions, links to existing documentation, etc. is welcome. Thank

Howdy! I know what I am trying to do is possible, but i'm strugglin. We just did a very large Zoom AV deployment - we have 100s of iPads deployed as Schedulers and Controllers for the Zoom rooms. I created a Mobile Device extension attribute to store the Red Park MAC address for each iPad in JAMF. I have a spreadsheet with the iPad serial numbers and associated Red Park MAC addresses, I want to import that data into JAMF into the extension attribute that I created. My Spreadsheet is super simple and can be converted to csv. its formatted like this:Column 1 Column 2SERIAL# MAC ADDRABC1234 00:xx:00:xx:00:xx How can i do this without reinventing the wheel?Thanks in advance!