I don't have a 10.9 SUS, and need the Safari 7.0.3 installer as a stand alone. I wanted to use Rich's trick to capture a the install package after download, but you don't get a pause option, didn't work out. http://derflounder.wordpress.com/2013/08/22/downloading-apples-server-app-installer-package/ What are the other options to snag that package these days? Is there still someway to find the url, a-la InstaUp2Date?

Hi All, I'm thinking of creating a bash script that will verify all unverified MDM profiles via a policy in Jamf but the script will need to check first if the profile is unverified or not. Is there a bash command that will check if an MDM profile is unverified? the profiles command doesn't seem to have anything that will show that the profile is unverified. Thanks in advance.

I purchased 1,000 VPP licenses for the Jamf Self Service app (ver 10.8.0) using Apple School Manager. On my JSS Pro, in Mobile Device Apps I accepted the defaults and scoped it to my iPhone. I left "App Configuration" at the default (blank). After a few minutes the app appears on my phone. The first time I open the app I get a "first use" popup, but then I get a message "Unable to connect to server". Using Safari on the phone I can reach the JSS server's enrollment page. My first thought is that the Self Service app can't reach the server because the server's address hasn't been configured into it. Is this what the "App Configuration" tab is for? My second thought is that in /JSS/SETTINGS/SELF SERVICE/iOS, under the GENERAL tab, the "Install Automatically" dropdown is currently set to "Neither". Should this be set to "Self Service app"? Does this push out the Self Service app? I haven't experimented with it because there's no scoping option available and I don't want

We've just upgraded to JAMF 10.11.1 and we're now having to "Create a user" and login or the machine reboots to the setup assistant again. Prior to this upgrade we would just let it sit at the Create a User page, the enrollment trigger would kick off our post-enroll script that would do a number of things. Now, it does reboot but just goes right back to setup and wants to walk through setup and enrollment again. It's like the .AppleSetupDone file isn't being written for some reason. I'm not saying it's the upgrade, that's just when it broke. If we create a user and login, then let it reboots, it comes back up to a login screen. No setup assistant. Anyone else seeing this?

Hi all, I have a quick question about scripts. I am currently rebuilding our Jamf Pro system from scratch using version 10.11.1. I noticed as I uploaded scripts into Jamf Admin, they are not showing up on my distribution point anymore. There's not even a Scripts folder. Are they stored elsewhere now? Our current JSS we'll be retiring placed all my shell scripts in the DP under that folder. However, when I run a script in Jamf Remote, it works as intended. I couldn't find any solid information on that, so I thought I'd ask so future rebuilders would know. :) Thanks!

I have DEP enrollment of managed Macs, after a reinstall of the OS, down to four steps:1. Selecting the Country2. Selecting the Keyboard Layout3. Clicking Continue on Remote Management/MDM enrollment (not optional for our Macs)4. Selecting the Time Zone However, my school was a bit spoiled with Netboot and DeployStudio as we would set the Startup Disk via ARD to our Netboot Server which would load into DeployStudio which was configured to automatically apply a workflow and run automatically. Basically nobody had to physically touch the machines. It was truly "Zero Touch". Is there a way to automate the DEP process to skip the steps 1-4 I listed above and simply enroll in our Jamf MDM server? Thanks.

How do I force a login banner message to refresh? Basically I have a script that checks to see if all my policies have completed and if they have it then writes a message to the login banner using the following: defaults write /Library/Preferences/com.apple.loginwindow LoginwindowText "Enter your credentials" Once the message appears ideally this would tell our field techs that the machine is ready for people to log in and that all policies have completed. However after the defaults write /Library/Preferences/com.apple.loginwindow command runs no message shows up at the login window. If I log in and then logout (or restart the machine) the message shows up but the policy that writes the login banner message runs in the background when nobody is logged in. Ideally I would like the message to show up after I send the defaults write /Library/Preferences/com.apple.loginwindow command without having to reboot or physically log into the machine. Is there a background proce

Hi all,I'm struggling to come up with a good solution to what I can only imagine is a common one: We use a config profile to deploy a certificate for connecting to our wireless network. Sometimes users delete that issued cert accidentally. Sometimes there are issues and our support staff may need to delete the cert during troubleshooting. But - how do you get a new one issued? The device still has the config profile - it just needs a new cert. Do you Unscope and rescope the specific device (and absolutely positively make sure you don't accidentally click the "apply to all devices" option)? Do you duplicate the config profile and put a copy in Self Service? But then you'd have 2 profiles potentially on the device that do the same thing? Maybe you could remove the device from the scope of the other config profile when the Self Service one is run? But then, down the line, when you may need to update/change this config profile - how do you force it to those

Ideally I'd like to be able to push a package that will set color settings such as CMYK profiles and RGB settings as well as color management settings. Is my best bet to do this to use composer and then having that package fill user templates or should I be looking into scripting this? I'm not the best when it comes to scripting. Any insight would be appreciated. Thanks!

Is there a way to manage(lockdown) the ipad so that the student is only allowed to access google classroom and the school webpage?

Has anyone had success with the following command in 10.11? defaults write /Library/Preferences/com.apple.desktopservices DSDontWriteNetworkStores -bool true I've tried it at the global level (command above) as well as per-user and it doesn't seem to be having any effect. This is on 10.11.4 Thanks,Eric

I've exported an Apple script as a .app file which mounts network shares and runs constantly in the background. I've got a launch agent for the app with keep alive set, and in the info.plist file for the app i've set LSUIElement so that it's always hidden. That's all worked great, however, if a user holds down the control key while the script is running a prompt will appear with the app name asking if you want to run or quit the script: Does anyone know a way of preventing that? I'm sure it's probably something very simple but I can't seem to find anything about the control key causing this prompt for silent apps. Note: I'm sure someone will probably suggest using NoMad instead for share mounting, so I should probably mention here we have previously used NoMad and had a number of issues with it and eventually moved away from it in favour of this method, it just works better for us! Thanks!

Does anyone use the Privileges app provided by SAP in Self Service? If so, is it possible to grant admin credentials via a policy for a specific time to update just apps that are already installed on the machine? Basically we don't want users to install foreign apps without admin credentials, but we would like to grant them admin credentials to update their current ones. https://github.com/SAP/macOS-enterprise-privileges/releases Thank you.

We have Canon IR-AVD C7565 Printers attached to EFI RIP GX500. We have been seeing very slow print window load times when trying to print from any app. We narrowed the issue down to the driver, however I was wondering if anyone else uses/manages these EFI Fiery Rips. Maybe you don't use the EFI driver at all, if that is the case, which do you use?

As in our company we deploy standard local users, whenever they try to plug in a new external device like an ethernet cable, he must fill admin user credentials in order to activate the new peripheral. Is there a way to avoid this and give std user the rights to plug in any external device without being prompted for admin user/pwd?

Hi all, Need some pointers as to how to diagnose network error when connecting to network printers. I've been give a printer queue location. But no matter what I try, when trying to add this printer, I get the following error: From Finder, I also tried connecting viasmb://server hostname/printer queueipp://server hostname/printer queue Within the same company's network, when trying from a Windows laptop, the printer connection works. So, I'm guessing it's a Mac thing. But what exactly is it that is blocking macOS from connecting to a Printer? So far I have tried to manually setup the network printer via System Preferences > Printers. I also tried JAMF Pro's Printer settings.

I've been (easy job, I know) able to block Apps process through Jamf but...what if I'd like to hide those MacOs native apps which are present in the Applications folder..?? Like for example App Store, Calendar, Contacts..etc etc.. Like ever, thanks for your support guys!!

Hey,as you can see in the attached screenshot, i got some strange display error in the ui of Jamf.The provided informations won't fit to the tables. For example the "Model" shows up in the column of the "Last reported IP" or the IP-Adress will be show in the column "Last Check-in" What I already tried:- clearing browser Cache and restarting the whole Server- disabled all Inventory Display Options and re-enabled them- tried a different user -> other user account doesn't got the problem Someone got a tipp for me to or maybe got the some problem?

Hi, I've set up a couple of Red Hat Enterprise Server (6.8) VM's to mimic our real VM's for testing before we do a JSS 9.81 to 9.96 upgrade. One server is the Database server and the other is the JSS. The Database Server has MySQL Community 5.5.3 installed. I've successfully installed JSS 9.81 on one VM with it using the Database server for the JSS database. Everything looks good. Web App is running fine. I then try to do the upgrade using the linux installer and that all appears fine as well - no errors. I get this message on the command line at the end: The JSS has been installed.To complete the installation, open a web browser and navigate to https://is-04155-vm1:8443.The time it takes to upgrade depends on the version you are upgrading to and the size of your database. Do not restart Tomcat during an upgrade. I then go to my web browser and connect to the URL with the machine IP which is what I was using before - https://jss_ip_here:8443 but all I get is a message:

What's the best way to go about this? I saw people recommending mysides but xcode hates me and I can't compile it for some reason. Can someone put it up on dropbox or something? https://github.com/mosen/mysides Conversely is there a way to remove finder sidebar items using sfltool? If there is i'm not seeing a way. Thanks!

Hi All, I feel like I am missing something very simple here, but I can't seem to work it out. We have a DMG which pushes out B&W and Colour Presets for our printers. This was created a long time ago during our JAMF Kick Start and has worked ever since. We are replacing our printers shortly and will be using a Windows Printer Server. When I install the Print Server Queue, and then install the DMG, it installs our presets as desired, but they aren't set as default. This means users won't use them. So currently on MS Word it shows "Default Settings" under presets (below) but I want it to have "B&W" as the default as per below I have loaded up composer and taken a snapshot of me holding the ALT key and printing as B&W, created a DMG and pushed it out with the fill directories options ticked. I thought this would save the preference files, but it doesn't seem work. We can't really afford to go round and do this on 200 end user machines, and I'm sure it can be scripte

I'd like to upload .dmg file to the cloud distribution point via the JSS API. I tried uploading the.dmg file by executing the following API. curl -fku username:password https://mydomain/JSSResource/packages/id/0 -T test-dmg.xml -X POST curl -fku username:password https://mydomain/JSSResource/fileuploads/packages/id/68 -F "test.dmg=@test.dmg" -X POST And then, When I checked the package in JSS Settings > Computer Management > Packages,Uploading is not completed with the status "Pending" all the time. How can I upload .dmg file via the JSS API?I would like some information.

I built my JamfPro server on a CentOS 7 VM. It is not a repo or distribution point just the apache tomcat server and the mysql server. It uses a lot more RAM that I was expecting. I started with 2gig and quickly noted it was using almost all of it. Took it to 4gig and again noted it was using almost all of it. Now I am running with 8gig but using 4.8 of the 8 gigs. I have the RAM 'to spare' so to speak on my VM host but I configured it this way trying to save resources. I can note that is uses more ram as we use the webUI more and more. Almost as if it using it but not freeing it once done. Anybody else have any insight or knowledge one this matter? I would love to take it down to 2 but 4 is fine. CPU usage is fine. Thanks in advance. *Side note, my master repo is running CentOS 7 as well (dedicated VM) but only 512meg of ram and running beautiful.

Hi, back again, got soms logs of one of our clients and it still seems after the Jamf Binary upgrades the devices checks for enrollmentComplete!Watch out with upgrading, i can trigger one of your workflows. Got an case open @jamf11 2019-03-26 16:02:57+01 lmos-08421 installd[1221]: ./postinstall: Submitting data to https://jss.local.nl.bol.com:8443/... 2019-03-26 16:02:58+01 lmos-08421 installd[1221]: ./postinstall: <computer_id>697</computer_id> 2019-03-26 16:02:58+01 lmos-08421 installd[1221]: ./postinstall: Getting management framework from the JSS... 2019-03-26 16:02:59+01 lmos-08421 installd[1221]: ./postinstall: Enforcing management framework... 2019-03-26 16:02:59+01 lmos-08421 installd[1221]: ./postinstall: Checking availability of https://jss.local.nl.bol.com:8443/... 2019-03-26 16:03:00+01 lmos-08421 installd[1221]: ./postinstall: The JSS is available. 2019-03-26 16:03:02+01 lmos-08421 installd[1221]: ./postinstall: Enforcing login/logout hooks... 2019-03-26 16:

I'm trying to make a smart group of macOS devices with Office 2019 installed. I'm trying to use a regex on the version number to differentiate between Office 2016 (16.16.x) and 2019 (16.17.x-16.2x.x). The regex is ^16.([0-9]|1[0-6]).d According to regex101.com, my regex is fine. However, when I try to save the smart group, Jamf throws me an error 'Uneven number of opening and closing parenthesis'. Does anyone have any ideas why Jamf is being cranky with my expression?