I have the macOS Sierra GM installed on a VM and any time I run the command: sudo jamf fixPermissions -verbose I get an error: Fixing Permissions... verbose: Error executing command: ( "/usr/libexec/repair_packages", "--repair", "--standard-pkgs", "--volume", "/" ) I'm currently on JSS 9.96.1472575603.c and running that same command works on 10.11

For JSS 8.x-- Has anyone already developed EA's to collect ethernet adapter MAC addresses? I'm not convinced all my client and support staff are giving me this information so that I can add them to the removable address list.

Has anyone ran into this message before?"PTUpdate wants to make changes. Type your password to allow this"Couldn't find anything via Google for OS X.

Hey All,I have been tasked with creating a smart group to see if an application is installed. The security application is FireEye. FireEye does have an application but it doesnt show in the applications as it is not suppose to. So I was going to create an extension attribute that will check the machine and see if it has the correct FireEye directory which should be /Library/FireEye/xagt/xagt.app . When doing so it does not pick up any machines. This is what I have so far: !/bin/bash ############################################################ A script to collect information on if FireEye is currently installed If FireEye is not installed then "Not Installed" will return back ############################################################ RE$ULT="Not Installed" if [ -f "/Library/FireEye/xagt" ] ; then RE$ULT=$( /bin/defaults read "/Library/FireEye/xagt/xagt.app/Contents/info.plist" CFBundleName)fi echo "<result>$RE$ULT</result>"

I am sure there are other methods to uninstall Symantec Anti-virus from a mac via Casper Policy, but this one works for my environment. I just thought I would share. On your source computer (by source computer, I mean the computer that you use to build all your scripts/pkgs/dmgs)1. Download the Symantec Removal Tool from Symantec. OLD LINK[ftp://ftp.symantec.com/misc/tools/mactools/RemoveSymantecMacFiles.zip](ftp://ftp.symantec.com/misc/tools/mactools/RemoveSymantecMacFiles.zip) Extract the "SymantecRemovalTool.command" file and save it into a folder where you might keep all your scripts on the local computer. In my environment - All my computers have a folder called JAMF-CustomApps within /Library/Application Support/ NOTE: The file cannot be changed to a .sh script, when I tried I got errors. Now open Composer and drag 'n drop the "SymantecRemovalTool.command" from /Library/Application Support/JAMF-CustomApps/ into Composer window. Now create a PKG file with Composer, calle

Just wondering that for how long the cached package is going to stay in Waiting Room folder. Does it get deleted right after the cached package installation or it stays forever until we run a query to delete all cached packages from the client macs.

Let me start off by saying that we are a school site/district and all of our users are domain based of our network and not local user accounts. We upgraded one of our Mac labs to Mojave and quickly discovered an issue with the login screen. Once a user was logged into a machine and that machine either went to the screensaver or the user locked the machine to leave. No one could login to that machine. In previous versions of the macOS a new user could simple click on the switch user button at the bottom of the screen and log in. Now those options are gone. Is there something we may have missed when setting up our jamf profiles for these machines? I can't seem to find anything.

We are attempting to create a policy in self service that performs an upgrade. We use the macOSUpgrade.sh. After downloading the needed files, we get a "We were unable to prepare your computer for macOS Catalina: error (see attached). Our machines are FileVaulted. Not sure what's going on. It does not do this every time... even on the same machine.

Hi, I'm running a very basic script, which works, to change the local admin password on all our Macs. But, I want to know how to check if the currentPwd already matches the newPwd, and if so then it must exit. How do I do that? if [ currentPwd == newPwd ] then echo 'password is correct' else #change account password fi Thank you to @adolfsson for the initial idea: The Script below works but as you can see its not very 'clever' :-) Script: currentPassword="$4" newPassword="$5" accountName="$6" adminUser="remoteadmin" #Check that we are changing ONLY for remoteadmin if [ "$adminUser" == "${accountName}" ] then #Change management account locally on mac sudo dscl . passwd /Users/"${accountName}" "${currentPassword}" "${newPassword}" echo " Local Admin Account - Password changed! " #Report management account pass

Hi All - We just received a license for Camtasia 2019 for Mac, and in past years, I would run the installer through Composer, apply the license key, and then take the compare snapshot, export it as a DMG to Jamf Admin, and everything would work fine. Today I went to test the deployment and it looks like the install succeeds, but does not apply the license key, which I believe is hidden in a separate file. I have FUT and FEU selected since Camtasia usually drops files in User Folders such as Templates and Sample Projects, which appeared to work. Anyone have any suggestions on how to get this to work or better ways we could handle the install without giving out our license key?

We are a Volume Licensing Service Center customer and use the Volume Licensing Serializer for Office 2016. Whats the preferred workflow to upgrade to Office 2019 from Office 2016? Do I need to uninstall the Office 2016 suite first and then redeploy with Office 2019 and the 2019 VL serializer? Or can I deploy Office 2019 on top of Office 2016 together with the 2019 VL serializer?

I've read plenty about Jamf -> Jamf integration w/ Intune. However we are trying to go from Intune -> Jamf standalone -or- Jamf integration w/ Intune. Can someone point me in the right direction?One of the biggest concerns we have is a smooth/quick interaction for the end user.

Hey folks, This is relatively simple, but I haven't found a place giving a straight answer about it -Will writing passwords or other information inside CLI commands executed by policies be viewable in any log, text file, or any other output (including terminal)?This is regarding the user's side of things. If it appears in Jamf that's all good.

Has any one found a way to stop students from accessing the terminal? If so please let us know how you did so, Configuration profiles can block a whole folder at a time, but blocking the "Utilities" folder may stop other things from working.

Hi, we are trying to use a OSX 10.11 HTTP distribution point. We have installed 10.11 with all fixes and installed the server package and created a HTTP server point to the CasperDP directory. With a normal browser I can login to the server and download a package without any problems. However if I try to deploy a package via policy I get the following error: The network connection was interrupted while downloading the package from http://corpserver.domain/Packages/My-Templates.pkg. Attempting to reconnect... Downloading My-Templates.pkg... Downloading http://Corpserver.domain/Packages/My-Templates.pkg... Error: My-Templates.pkg is not available on the HTTP server. First I thought it was a HTTPS problem with a invalid certificate but even if I try it via HTTP port 80 I get the same error. Downloading this packed from this path works fine in a browser. Any ideals? Thanks Eric

Has anyone successfully got a configuration profile for blocking MS Edge extensions to work? Hint: it's not the same as chrome, as the key is: ExtensionInstallBlocklist Any help would be appricated. Thanks

Has anyone seen this before? I'm seeing it on several policies this morning that I had scoped to all computers and limited to a few LDAP groups each. When I go in to look at the policy the scope is now "specific computers" with no targets, but the LDAP group limitations are intact. No idea what would have caused it.

Ever since Catalina, I am unable to build packages with this app if using certain directories.. /var/tmp, /Library/LaunchDaemons, etc. Is there something I am missing in the PPPC Profile? Composer works just fine without complaints.. Maybe cp needs access to all folders, or terminal? I am an admin user and can create files in /Library/LaunchDaemons without needing authentication, so I am genuinely lost.

I am trying to create an extension attribute to gather the UPN for the current logged in user. I have followed the directions from the link below adjusting as needed, however I cannot figure out how to get the plist to populate anything inside of <string> </string>. I have to be missing something dumb, any ideas would be much appreciated. https://www.jamf.com/blog/help-users-activate-microsoft-office-365-and-configure-outlook-in-one-click/

Hi all, Wonder if any Mac admins out here have experienced this. Here's the scenario:- A Macbook has run out of battery, for whatever reason. The Macbook clock would have reset itself to it's basic time, which is year 01/01/2017 (we are currently Jun 2019).- The end user do not have admin rights, therefore cannot change the date and time.- From JAMF Pro, I tried to setup a policy/script to connect it to our company's time server, so it will get the correct date and time again.- But, having the date and time 2 or more years different, JAMF Pro can't communicate with this Macbook, and therefore nothing happens.- The only work around is to get a local-admin account, use this admin rights to unlock the System Preferences and manually correct this. So anyone know of a way to correct this date and time, without the end-user (without admin rights) bringing the Macbook to me ?

I have a script that prompts a user for input using apple script for their name within my bash script. It seems to work great, but if they do not answer the prompt in about 1 min it prompts again because of a loop I have. Each time it prompts, another window appears on top of the other. So I either need to kill the dialog and I can't figure that out, or have my loop not keep trying every min and I'm not sure how do that either. Below is what my script looks like. PromptDisplayName (){DISPLAYNAME=$(/usr/bin/osascript << EOFtell application "System Events" activate set DISPLAYNAME to display dialog "Enter Full Name: " default answer "John Doe" with icon note buttons {"OK"} default button 1 with title "Enter Full Name" return text returned of DISPLAYNAME as stringend tellEOF) Loop until Displayname is in the correct format until [[ "$DISPLAYNAME" =~ ([a-zA-Z]){3,}[[:blank:]]([a-zA-Z]+){3,} ]]doP

I'm very frustrated. I can't get App Store apps to install. If I go through the regular App Store, it still asks for a login & password (it used to NOT do that for managed apps.) If I use Self Service, it does one of two things: It SEEMS like it's installing, only nothing ever installs, then the Activity goes empty and the Home page says it's available to install again. Rinse and repeat. It changes to "Error," has a red bar at the bottom saying "Cannot connect to the Jamf Pro Server ..." then takes me to the App Store page for said app ... which won't install without an Apple ID. I've tried uninstalling Jamf and re-enrolling, but that doesn't work. Jamf says the licenses are being used, but they aren't being installed. I tried enabling/disabling Managed distribution as mentioned in another thread, but that didn't do anything. I also managed and reconned, but that didn't change anything, either.

So, I have 2 .mobileconfig files I wish to deploy, one is for the dock that I created and another to change the Desktop Wallpaper, how will i upload these to casper and deploy them through configuration profiles? Only need to go to 15 machines but want to get them pushed out asap! Any ideas? ThanksSimon

I'm extremely new to Jamf, mostly dabbling where other people have already set up the environment. We were working on setting up the pre-stage enrollment for our DEP iPads. DEP is working, the LDAP SSL connector is working, but when we get to the Remote Management authentication screen on the iPad, is it not accepting some people's credentials. The error message is "Your credentials are either missing or wrong. Try again." I've tried logging in with both the format of username, and username@email.com. I've tried resetting/recovering the iPad by connecting it to a computer. Using me as an example, on any iPad I try to enroll with the pre-stage authentication with my credentials, I get the error. But on the same iPad, someone else is able to authenticate properly and have it register. In the Jamf console, the only way to see the device is under the "Automated Device Enrollment" section in Global Management. It has not yet been assigned a name, and does not appear under devices.

I start the getting the SCEP configuration profile to work within ourenvironment now. But I think it requires variable to generate thecertificate the way we want it. It seems to be a lack of info regards variables to automate this.For example:If I put the below in SubjectCN=%AD_ComputerID%.mydomain.com I get computername$.mydomain.com (in my case Mac called air, so I getair$.mydomain.com) in the certs Common Name section. Also if I put the below in Subject Alternative Name Valuehost/%AD_ComputerID%.mydomain.com I get host/computername$.mydomain.com (in my case Mac called air, so I gethost/air$.mydomain.com) in the DNS name section of the cert But I would like to get the name without $ sign at the end. Is there a variable for SCEP configurationprofile payload toachieve this? I hope I have explained it correctly. I know jSS uses variables with exchange config profile like $USERNAME and$EMAIL (screen grab). So I am hoping that maybe there is a variable to getthe Mac hostname? I have