Hey guys,I have 2 Macs Pro (Let's say MacA already enrolled and MacB in the scope). The user reported that MacA isn't working well, so I made a Time Machine backup of MacA, and restored in MacB.However, it showed error "Device Signature Error - A Valid device signature is required to perform the action." on MacB when I ran "sudo jamf recon". Is there any way to automatically enroll after restore? Please help !!! The following steps I did:1. Make a Time Machine backup of MacA to external hard drive.2. Remove both Macs in Jamf.3. It showed error when I directly restored to MacB at boot up, so I normally boot up MacB, enroll and use Migration Assistant.4. Run "sudo jamf recon" and it showed the error. I already tried the following steps and it still doesn't work.https://www.jamf.com/jamf-nation/discussions/21616/restoring-from-time-machine

Hi, I have a deal for 2000 Apple TV, HERE THE CUSTOMER RESUQEST: 1- When his customer power on the Apple TV it must show his logo before TV OS interface. How can we do it? 2- Link each Apple ID connected to an Apple GIFT CARD to be automatically credited each month. How this possible?

Hello, new to Jamf. I'm coming from a monolithic imaging background using DeployStudio, and I'm trying to create a workflow for our particular setup. Our schools is now getting in laptops and desktops that can no longer be imaged, so our school is moving over to Jamf. We don't have ActiveDirectory or OpenDirectory, otherwise this wouldn't be a problem. :/ I searched the discussions, but I didn't see anything that was applicable to my particular situation. On all of our computers, we have 3 generic accounts: Teacher, Student, and CAASPP. CAASPP is the one I'm the most worried about, as the State testing software is so horribly written that you have to manually change a bunch of settings on a computer just for it to work, and that makes it impractical (impossible?) to do in a timely manner to over 400 Macs in the 1 to 2 weeks before testing when they inevitably change the browser and it has to be reloaded on all the machines. I'm just one person. :( I attempted to use Composer t

Yes! It's that time again. Just received 1420 new iPads and am adding them to my pre-stage.....one at a time.If I use the select all button, even if just for 10 devices on a page, I get the error when I save. If I click the same 10 devices one click at a time, the save works.I am on JP 10.9 and am upgrading to 10.10.1 next week. Can anyone tell me if this is fixed in the new version... or if they have a usable workaround?

Dear Masters!! Hoping this would be the great place of masters who can really help me with script or solution. I had a requirement to write computer Hostnames to JSS Static Computer Group. I would receive consolidated .xml or .csv file for admin rights from support groups. Now, I need a script to read computer objects from that .XML or .CSV file lookup for JSS inventory if computer hostname is available then that computer Hostname needs to be added to Static computer Group. Before adding new computer hostnames script should fist remove all existing computers from that group and then add new entries to it. Looking forward for responses on this post! Thank you!

We have a staff member that has just gotten married and now has a name change. I have never had to deal with this before within Active Directory and not sure how to proceed. Our username convention is the first letter of the first name and the full last name, ie. jdoe. If I were to change the username and name within Active Directory for this person what will it all affect? Is this the best method to do this, or should I be creating a new Active Directory user account? How do I change the mobile account username on their laptop to reflect this new username and name while keeping files, settings, etc. intact?

Hello. I was trying to deploy an app called bridgechecker, which only purpose is to disable the wifi automatically when an ethernet cable was plugged in. So far I was able to get the pkg file deployed on the test device, but unfortunately the bash script which was sent to me by the support team of this app is either broken or I'm doing it wrong. This bash script will run after the deployment and it is used to overwrite the contents of a .plist-file.I've attached the error log from jamf as an attachment. This is the bash script I was using: #!/bin/bash clear echo "**** Updating defaults for BridgeChecker ******" #for first three valid values are 0 or 1 releaseIP=1 loadOnStartUp=1 enableWireless=1 #anything you want EXIT_PASSWORD=1234 #valid values are 0, 1 or 2 selectedInterfaceOption=1 defaults write com.accessagility.bridgechecker '{ "releaseIP" = '"$releaseIP"'; "loadOnStartUp" = '"$loadOnStartUp"'; "enableW

I'm just now dipping my toe into Mojave. I upgraded a Mac to 10.14.2 and one of my first tests was to launch Pulse Secure.app. Well I got an alert saying Pulse Secure.app needed to access files in Pulse Secure.app. I'm looking in the PPPC Utility to build a PPPC profile but I'm confused. I see I can allow/Deny "Admin Files" and "All Files", but nothing for the files within a program. How would I proceed for this?

I've seen a few discussions in the past on this, but never found an actual script that works.We have recently put the latest update for Flash player in Self Service. The problem we're seeing is that on some Macs, the plugin will be turned on (checked) in Safari under the plugin-settings, and sometimes it won't be. I'm thinking that if I can have a script run after the installation of Flash Player to enable the plugin, then that will prevent the hassle of trying to explain to Teachers and Students how to enable it through preferences.Help please?

Hello, I'm banging my head off the desk on this one. I've successfully deployed NoMAD Login and that works great, but the NoMAD part is where I'm having trouble. I uploaded the default plist for NoMAD from a test machine into Jamf, that seems to be deploying properly. Then I have a script to modify the plist; !/bin/sh AD_domain="domain"Realm="domain" Write default AD domain defaults write com.trusourcelabs.NoMAD ADDomain -string "$AD_domain"defaults write com.trusourcelabs.NoMAD KerberosRealm -string "$Realm"defaults write com.trusourcelabs.NoMAD UseKeychain -bool "true"defaults write com.trusourcelabs.NoMAD SignInWindowOnLaunch -bool "true"defaults write com.trusourcelabs.NoMAD UPCAlert -bool "true"defaults write com.trusourcelabs.NoMAD UseKeychainPrompt -bool "true" After I apply this and restart the machine, I log in with my AD creds, but NoMAD auto signs in as my read only Jamf shar

Hello, We are looking to disable or even hide a guest network that appears on our organization's MacBooks. What is the best way to achieve this?

About 3 weeks ago we started to get this strange error window with no words and an icon on our Macbook Airs. Sometimes it pops up during enrollment and then keeps popping up after. Has anyone else seen this?

I just performed the Jamf Pro 10.2 upgrade. When I try to load the login screen, I see nothing but a blank white screen in my web browser. Has anyone else seen this?

I'm attempting to install Identity Finder 8.0 via Casper, but the software package is failing to install. The following is what I see in the logs for the policy: Executing Policy Push Install Identity Finder 8.0...Mounting casper.contoso.com to /Volumes/CasperShare...Copying IDF8_0.pkg...Installing IDF8_0.pkg...Installation failed. The installer reported: installer: Error the package path specified was invalid: '/Library/Application Support/JAMF/Downloads/IDF8_0.pkg'.Running Recon...Retrieving inventory preferences from https://casper.contoso.com:8443/...Locating package receipts...Locating software updates...Locating accounts...Searching path: /ApplicationsLocating printers... Do you have any suggestions? Thanks.

Does anyone have an article or instructions to setup Windows IIS 7 to cater HTTP Distribution Point? Information I need to know information like MIME type setup, etc. as IIS doesn't list .pkg .dmg. mpkg MIME types. I have got IIS 7 working but having issues with non-flat packages and BOM files installed via Self Service. All the flat packages and DMG installers are working fine but non-flat ones give errors like this; /usr/sbin/jamf is version 8.51 Executing Policy Sophos Anti-Virus... [STEP 1 of 2] Downloading BOM for Sophos.pkg... This Apple Package did not have a valid index.bom file. Assuming it is a flat file package. Downloading http://myjss.server.com:80/CasperShare/Packages//Sophos.pkg... Installing Sophos Anti-Virus.pkg... Installation failed. The installer reported: installer: Error the package path specified was invalid: '/Library/Application Support/JAMF/Downloads/Sophos.pkg'. [STEP 2 of 2] Running Recon... Gathering Application Usage Information...

Self service policies, printers are getting installed with generic drivers, not the correct version for the make/model of the printer. Sometimes it works that correct driver version gets installed while most of the time it does not.Policy installs driver and printer .The logs show no errors, policy runs with no errors. also, i notice that the printers have 'share this printer on the network' CHECKED - the printer uploaded to casper admin did not have that CHECKED, has anyone else seen this?

I'm using Composer to repackage a (fairly simple) commercial product, adding some files and customization directly to the pkg's postinstall script rather than using external support files so that the end user need only download and worry about a single installer file (and we have to worry less about the end user messing something up). Everything looks to be working swimmingly, but the pkgs I create simply say "Install" in the title bar and "Welcome to the Installer" (with two spaces, begging for something between them). Where in Composer can I set the value to be placed here? Thanks!

Hello, Looking to enroll our marketing departments Macs with Jamf but would like to avoid having to format and go through initial device setup. Is user initiated the best way around this?

I'm trying to set up 32 2019 MBP's, deployment etc all configured but the last issue I have is managing file vault 2 and multiple users. Currently, the first logged in user is prompted to enter their password to initiate the FV2 encryption, but then when restarting only that first user and guest is shown, these MBPs will be used by multiple users. What I want : I would love to have FV2 enabled on the local drive and automatically allow all AD users to authenticate when the user turns on the MBP it just goes to the login window that prompts for username and password. is this possible?

Hey, in Jamf Pro's macOS Patch Reporting only the latest mojave version (10.14.6) is marked as "latest version". If I look at 10.13.6 it's marked in red as "other version" I wonder if it's possible to also mark e.g. 10.13.6 and 10.12.6 as "latest version" as they are up to date and have the latest security features.

Hi everyone, Has anyone worked out how to disable the "Sign in with your Apple ID" prompt at login? I currently have the following keys set for the default template for new users: OSVERS=$(sw_vers -productVersion)OSBUILD=$(sw_vers -buildVersion) com.apple.SetupAssistant "DidSeeCloudSetup" -bool truecom.apple.SetupAssistant "LastSeenCloudProductVersion" -string ${OSVERS}com.apple.SetupAssistant "GestureMovieSeen" -string nonecom.apple.SetupAssistant "LastPreLoginTasksPerformedVersion" -string ${OSVERS} com.apple.SetupAssistant "LastPreLoginTasksPerformedBuild" -string ${OSBUILD} I use a function in my shell to write these keys which is why you don't see the full defaults write and path to file in the above keys that i use. Are they any other keys that mavericks needs to suppress the Apple ID prompt on first login? Cheers, Frank

I have recently seen a handful of macs that haven't checked in/recon in quite awhile missing from my inventory!! is the JAMF system somehow now setup to automatically remove computers that haven't checked in/recon in a long time?

Perhaps this is an odd question, perhaps not. Is anyone using anything to monitor their users RAM utilization? I'd like to be able to simply track the users who are constantly hitting the limit of their RAM. Thoughts? One could use TOP of course, but I don't like that for several reasons (mostly overhead). What I'm really interested in is measuring how many times a user runs out of physical RAM and moves heavily over to swap. This seems like a very very tricky thing to sort out in my head. I'm hoping that someone has a nice simple answer because I'm over thinking it!

Hi there, I have a shell script that uninstalls a specific program -- it kills the process if the app is running, looks in three different directories for anything related to the file and deletes them. When ran from terminal (if the .sh is on the users desktop for example), the script runs completely fine and removes the app as i'd expect it to. When i add it into Jamf, and launch the Policy I get an error:Script exit code: 2Line 55: Syntax error near unexpected token 'fi'Line 55: 'fi' Not too sure how the fi on line 55 is wrong, especially if the script runs without error when manually run. I've ensured that I have the Script Content in Jamf set to "Shell" as well... Any suggestions? Heres the script (Line 55 is the very last line, closing the initial IF statement): #!/bin/sh PUBLIC_THUMBPRINT="$1" if [ $# -eq 0 ]; then echo "Searching for installed Control clients..." PUBLIC_THUMBPRINTS=$(ls /opt/ | grep -o -

Here is a script that i use to rename computers remotely via Jamf. Many computers were not following our standard naming convention, such as computers named "Admin MacBook Pro", etc.. #!/bin/sh serial=`/usr/sbin/system_profiler SPHardwareDataType | /usr/bin/awk '/Serial Number (system)/ {print $NF}'` /usr/sbin/scutil --set ComputerName "CRP${serial}" /usr/sbin/scutil --set LocalHostName "CRP${serial}" /usr/sbin/scutil --set HostName "CRP${serial}" sudo dsconfigad -force -remove -u YourMacBindingAccount -p YourBindingAccountPassword sudo jamf policy -id 482 #### or with user interaction use this script: serial=`/usr/sbin/system_profiler SPHardwareDataType | /usr/bin/awk '/Serial Number (system)/ {print $NF}'` function machinename () { osascript <<EOT tell application "Finder" activate set nameentry to text returned of (display dialog " Please name your computer. The naming convention is the 3 letter dep