Hi Everyone, Newbie HereI'm trying to replace an existing config xml file in the applications folder. I packaged the the new config file to add in the existing folder. I wrote a simple script to run before running the package to remove the existing xml file, but for some reason the exisiting file is not being removed #!/bin/sh cd /Applications/Adobe InCopy CC 2015/Plug-Ins/vjoon K4 rm -rf 'K4 Config.xml' Am I doing this wrong? Thanks in advance!

Hello, I've been messing with Managed Preferences in Chrome to setup Managed Bookmarks this has been successful. I followed the below article:https://www.jamf.com/jamf-nation/discussions/25882/deploying-managed-bookmarks-to-google-chrome-using-a-plist-and-configuration-profiles-with-custom-payloads However I looking to know how I can disable the Offer To Save Passwords option in Chrome using the managed preferences plist not sure what the <key> is <key>OfferToSavePasswords</key><false/> Thanks,

Hello, I sometimes need to throw a backup of our Casper production database into a dev environment to do some testing. However after installing JSS 9.32, I am getting an error "This is a non-master JSS web application. Upgrade your master web application before upgrading the non-master web applications." Unfortunately, disabling clustering prior to backup is not an option for me... any idea how to bypass this error?

I've created a Base Image doesn't include any additional software just a local admin user using Composer.Followed the steps from this article [https://www.jamf.com/jamf-nation/discussions/22840/guide-to-creating-sierra-base-image-from-a-to-z](link URL)Issue is after it images and boots to the HD there is no desktop background and upon checking the Library folder the permissions are all wrong.

Hopefully someone can help me answer this. Despite my best efforts I haven't been able to find one. We have a fully functional DEP setup with Prestage Enrollments working for macOS. We were a little late to the party with DEP so we're still working on getting all of our devices enrolled. On occasion we'll run across a machine that didn't get picked up by our bulk import of machines into the Apple School Manager for DEP enrollment and have to enter it manually. If we completely erase the machine AFTER entering the computer into the Apple School Manager, it works every time without fail. If however, we miss the DEP enrollment and add it to ASM after the machine has been erased, we have to erase the machine again even if the setup assistant has not completed running. Obviously a computer that has already been completely setup will need to be erased again, but if the Setup Assistant is not complete, it seems like you should be able to restart the computer, or step back all the way

Is there a way to avoid being prompted on iOS to install apps. I'd like for the apps to automatically install without being prompted. Prompt attached.

hello collective, I'm hoping someone can help me with the following. I'm trying to make our deployment process as easy as possible and am looking for a way to differentiate between faculty/staff machines and shared student machines. in my script i have the following, but it just hangs then exits. any help would be appreciated. #!/bin/sh computerType=$(osascript -e 'Tell application "System Events" to return choose from list {"Students", "Faculty", "Staff"}' 2>/dev/null) if (( $? )); then exit 1; fi # Abort, if user pressed Cancel. if [[ "$computerType" == "Students" ]] ; then #sets computer department to student in JamfPro echo $computerType sudo jamf recon -department $computerType else userName=$(osascript -e 'Tell application "System Events" to display dialog "Enter Faculty/Staff User Name" default answer ""' -e 'text returned of re

Hi guys, I'm trying to improve our system adding the warranty expiry date to all computers in JSS without using Apple GSX. I had searched and tried a lot of things already, mainly with shell script, and I have finally understood how to use GET easily with curl. I can now get the computer information I want, however I wanted to insert the date using PUT but I couldn't understand how. I have followed this discussion https://jamfnation.jamfsoftware.com/discussion.html?id=5968 using xpath, which once again, helped a lot. Does anybody here use the API to PUT data into the system? Thanks in advance.Luis

Hello all, I'm looking to deploy Prey 1.7.3 to a test MacBook. An API key is needed at the time of install. How do I incorporate that key into an install workflow? Is there a script out there already that accomplishes this? I did a search and didn't come up with anything that worked. The Policy tries .pkg first, it fails, and then the command line API key afterwards. Thanks.

Hello All,At the end of the policy to be executed at enrollment, I display a dialog using jamfhelper in the background.However, there is a phenomenon that the dialog is closed arbitrarily. Is there a way to display the dialog in the background without closing the dialog in the policy executed at enrollment? Supplement) When the applicable policy is executed from Self Service, a dialog is displayed in the background The script displaying the dialog is below. #!/bin/sh JAMF_HELPER="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" JAMF_ICONS_PATH="/Applications/Self Service.app/Contents/Resources/AppIcon.icns" DIALOG_HEADING="Title" DIALOG_DESCRIPTION="message" "$JAMF_HELPER" -windowType utility -heading "$DIALOG_HEADING" -alignHeading center -button1 "OK" -defaultButton 1 -icon "$JAMF_ICONS_PATH" -description "$DIALOG_DESCRIPTION" &

Hi! Just curious if anyone has seen this. Recently our inventory display is messed up when searching computers, and seems to have appeared after the newest JSS. I've tried clearing and rebuilding the display but still getting the same thing. Thoughts on this? Thanks!

Hi Folks, We have run into a very simple error from a simple command: The command is nothing more than: "/Applications/Install macOS High Sierra.app/Contents/Resources/startosinstall" --applicationpath /Applications/Install macOS High Sierra.app --agreetolicense --eraseinstall --nointeraction When we run this, we first copy the macOS High Sierra onto the local drive and this is only being done on existing macOS High Sierra Macs running 10.13.4. We have all of our Macs enrolling via DEP and a pre-stage enrollment. With the local installer copied to the local Macs, we run this command to attempt to erase the drive and install a fresh copy of High Sierra. In our brief testing, we didn't have any issues. Now in our labs, we are attempting to do this for the first time with a larger number of Macs and some are working others not at all. Running the command in a local terminal window, we are also seeing this error, but the popup window asking to install a helper is showing so I susp

My company uses two different MDM's for managing iPads and Mac Laptops. Before you ask, I have already tried to get them to move the iPads over to JAMF with no success. :) Still working on that. The problem I have is that we have the iPad MDM set up as the default MDM server for DEP because we buy more of those. So when we buy Mac computers, they are being added to the iPad DEP. When we set up the Mac's, they are trying to be pushed the iPad MDM configs and it is presenting us with error messages. To solve this I am having to manually move the serials from the iPad server to the computer server. This works, but I would like to have them be put into their correct servers automatically. Anyone else have this issue? I have reached out to our Apple rep, but I was curious if others have solved this themselves.

Anyone built the payload for CrashPlan yet that wants to share out?https://www.jamf.com/jamf-nation/articles/553/preparing-your-organization-for-user-data-protections-on-macos-10-14

Hello all -Wondering if anyone has a script or similar to unlock the date & time settings for non-admin users? If so, could you please post it here so that we can test it in our environment as well? Not having much luck with my attempts. We are running some devices on 10.8.5 ML and 10.10.5 Yosemite. If the script works in ML that's awesome, focus is more on Yosemite at this point. Thank you in advance!

Hello, I need your help because Filevault will drive me crazy. We have about 1300 Macs (10.11.x to 10.14.x) We have only AD accounts (without admin permissions) and the only local admin account is the one that is using for Jamf management FileVault is not enabled and the only Secure Token account existing on MacOS 10.13.4+ is le Jamf management account. I need to be able to enable FileVault and make it as silently as possible to the end user. I read dozens of documentations including : FileVault-on-macOS-10.14-or-Later FileVault-on-macOS-10.11-10.12 But I can not do anything ...Errors, FileVault not enabled, ... Please, can you point me to the best way to proceed. Thank you for your help

We're in the process of completely abandoning user-based deployment (Yes I know, took us a 100 years). Do you deploy Apps solely on the Device name? Or do you still have an LDAP integrated and login with AD accounts to the iPads? Was thinking if it would be smarter to have people login with ADs. Thanks in advance

We have laptops that are encrypted with personal recovery keys that are escrowed in the JSS. I've had several users recently get locked out of their computer because their account somehow got dropped from being filevault-enabled. To re-enable them I'm running this on their machine: sudo fdesetup add -usertoadd SAD_USER After hitting enter, this is what happens in terminal: Enter the user name:ADMIN_USER Enter the password for user 'ADMIN_USER': Enter the password for the added user 'SAD_USER': If the ADMIN_USER is filevault-enabled, and I have SAD_USER's password, then it works. But I don't want to know SAD_USER's password. I want to use the personal recovery key, which I have. Pasting in the recovery key instead of the password results in an authentication error. In addition to making this work with the recovery key, I'd also like to be able to do it in one line, or somehow automate it. What am I missing here?

I have a python script that has values in $4 and $5. Currently, the $4 is getting called fine and working without issue, however I can't get $5 to work at all, it just never is evaluated and returns the literal string of "$5" instead of the value. I've tried setting it to a variable, using sys.argv[5], etc and I can't seem to get it to work.. Anyone ever run into a similar issue?

I've previously successfully used the directions from Mozilla to disable updates in our deployed installation of Firefox. However, starting with version 35 of Firefox, this method no longer seems to work. Upon launch the browser throws up the following error and quits on acknowledgement: Failed to read the configuration file. Please contact your system administrator. I'm using a 'Firefox.app/Contents/Resources/defaults/pref/authconfig.js' file with the following contents: pref("general.config.filename", "mozilla.cfg"); pref("general.config.obscure_value", 0); along with a 'Firefox.app/Contents/MacOS/mozilla.cfg' with the following: // Disable updater lockPref("app.update.enabled", false); // make absolutely sure it is really off lockPref("app.update.auto", false); lockPref("app.update.mode", 0); lockPref("app.update.service.enabled", false); // Set default homepage - users can chang

I searched yet didnt find an answer.How do I set Firefox to disable auto updates using Casper?Thanks for any assistance.

Does anyone have a solution for preventing wi-fi from shutting off when an incorrect passcode disables an iPad? It's very frustrating to have the option in JSS to clear a passcode for an iPad that desperately needs it, but I can't use it because the iPads shut off their wi-fi when they enter that state. Now the only option is to wipe it, as I can no longer get it to connect to iTunes to clear the passcode. Darn you iOS9!! Although I wonder... was it iOS9 that closed that loophole, or an update to iTunes? Next time I have one of these I'll have to see if I can dust off a computer with iTunes 9 or 10.

Anybody have any idea why the smart group I have set up to find machines running Excel 2019 would be finding and including machines running versions not specified?Specifically, a machine that has Microsoft Excel version 15.37.17081500 is showing up in this group. Screenshot shows all the criteria in place to pull the group together.

Is anyone else having an inconsistent experience with the Azure login window? In 8 out of 10 scenarios when I get to the Azure login screen using Jamf Connect Login, there are no username and password fields. I hit refresh or reboot the computer and doesn't come up. I've also reset the login mechanism and reinstalled the latest 1.2.0 version of Jamf Connect Login and get the same behavior. The only way to log in, is with the "Local Auth" button.

I'm trying to install Bootcamp on some Macs without going through Casper Imaging so I found that through WinClone you can create a PKG of the BootCamp captured partition and deploy that to existing Macs that'll resize the partition and install BootCamp on the Mac. This is great, except that our Sophos Anti-Virus On-Access Scanner is not allowing the install to finish without getting its grubby little fingers all over the files being copied to the new partition. So I wanted to find a clean way to stop the Scanner through a simple script without touching the GUI. Most Mac Anti-Virus programs I've encountered in the past simply let you unload their LaunchDaemons and the scanner will stay off until you reload the daemon or reboot the Mac. It appears in previous versions of Sophos this was also the case. In this version we have installed this is not the case from what I can tell. So I used fsevents when hitting the "Stop Scanning" button in the GUI and found Sophos