I'm trying to create a choices.xml file for installing specific components of a .pkg. I've used the installer -showChoicesXML command in the past and it worked just fine. I tried doing it today under High Sierra (for the first time) and it tells me showChoicesXML is an invalid option. $ installer ‑showChoicesXML ‑pkg /path/to/file.pkg installer: invalid option ‑showChoicesXML Usage: installer [-help] [-dominfo] [-volinfo] [-pkginfo] [-allowUntrusted] [-dumplog] [-verbose | -verboseR] [-vers] [-config] [-plist] [-file <pathToFile>] [-lang <ISOLanguageCode>] [-listiso] [-showChoicesXML] [-applyChoiceChangesXML <pathToFile>] [-showChoicesAfterApplyingChangesXML <pathtoFile>] -pkg <pathToPackage> even though it is right there in the Usage. Am I missing something? Did something change in High Sierra?

我们的用户希望通过SSH能够远程登陆到自己的苹果电脑，如何设置可以让他可以通过当前账号使用ssh登陆到自己苹果电脑。

So I have existing Config Profiles that were created before my time as the JAMF admin. They are outdated and need to be changed and renamed. If I update them will JAMF simply overwrite the existing or will it add a new one? If I delete a Profile does it remove it from the Mac? If it adds a new one what is the best way to remove the old ones?

Hello, Is it possible to install Jamf Infrastructure Manager on an Azure hosted windows server? I contacted Jamf support, but the technicians say that this has never been tested.

Hello all,can anybody help me with creating a script for my client computers, that restarts the apple finder every two hours automatically? Why do I need this? We own a Acronis Access Server working with a NetApp Server to connect by afp protocoll. The big problem at this acronis server is, that every mac client, or better: the apple finder, sends millions of inquires to the server the whole day. After working a few hours the server is getting slower and slower. The only solution is to restart the finder, because it´s a bug of apple that is in the finder since Version 10.9.5 and was never fixed. I had several discussions with acronis etc. They also told me to buy Pathfinder and use in instead of apple finder, but it didn´t really works fine for us. Too much problems with adobe programs and so on. The other solution would be to connect by smb, but then we have the problem, that the whole computer is crashing while working with adobe programs. So it would be very nice if someone of yo

Hello all, first post here. Using casper imaging to deploy 10.8.2 and running into a slight problem. Computers image successfully and Bind to AD. If I login with Local Admin account all is fine. When I login with an AD account, I get a Login Keychain error and it asks to reset Keychain. If I do so the error goes away, only to return soon after. Now I have found the Keychain folder never seems to get created properly upon first login. It just shows as a white keychain file icon. If I delete it and log off and back on, the folder is then created correctly and properly contains the login.keychain. Running Casper Suite 8.62. Image created with Composer.

I configured an iPad to behave like a kiosk, locked to Safari and a webpage.I set the Lock screen and hompage using a jpg with our logo (the image is primarily black). Now the webpage that the iPad is locked to is black, when normally it's white. What could be causing this? and how do I fix it?Not me in the image.....

Referring to this article I have run the command codesign -dr - /path/to/app and codesign -dr - /Applications/application.app for my program and I get a return answer of the executable location followed by Anchor Trusted. When I run the same command for Google Chrome I get the whole designate => part to create a PPPC payload properly. After digging into the plist I see that the signature is ????. I assume this means it isn't signed. I further assume that if it isn't signed I can't create a PPPC payload for it. I make that assumption from this article 1. The item being whitelisted must be code-signed So, If it isn't signed I can not use the built in PCCC option. (Is this assumption correct) Follow up. Can you use the PCCC Utility to do unsigned apps (in the process of testing)? Or I am just out of luck for those apps.

I feel like I'm missing something simple, but I couldn't find anything in search--or rather, I found a lot of things in search but nothing that was what I was looking for. For updates and patches from Adobe, Microsoft, etc., I create nice Self Service policies to install them and can upload and set icons for each policy. I also create separate "push" policies that prompts users to install the patches and updates in Management Action windows, but I cannot set icons for those in the policies themselves. I'm not sure where they're grabbing the icons from, but for some, like Flash, they are correct, and for others they are incorrect (most often using the Flash icon for some reason). Any ideas?

I've configured the script below to check if users have a specific Chrome extension installed. I thought is was working okay, but I found out if a user has signed into his or her Google account in Chrome, the extensions are kept in a separate directory. Is there some way to modify the script so both locations are checked? For users that are signed into their Google account, the file path is... "$currentUser"/Library/Application Support/Google/Chrome/Profile 1/Extensions/kehlnacjpfpmnkmhdladdicpbfpecfmh" The "Profile 1" directory will not exist for users that haven't signed into a Google account and that constitutes a majority of our users. #Identifies install status of DS Search Chrome extension #!bin/bash # Pulls the current logged in user currentUser=$(stat -f%Su /dev/console) if [[ -e "/Users/"$currentUser"/Library/Application Support/Google/Chrome/Default/Extensions/kehlnacjpfpmnkmhdladdicpbfpecfmh" ]]; then echo "<result>Installed</result>" else echo "&l

Hello JAMFers,I am using JAMF Pro and attempting to remove the NWEA Lockdown Browser.app from our devices before pushing out the newest version, but am having difficulty.I tried in terminal sudo rm -rf ApplicationsNWEA Lockdown Browser.app and nothing occursTo be sure I had stuff entered correctly I tried sudo rm -rf ApplicationsNumbers.app and that worked just ducky.I even removed the sudo to see if it would work that way as well, still nothing. I have done searches on JAMF and other sites of how to accomplish this, with no luck what so ever.

We're new to Jamf and I've been putting together a policy that's triggered by prestage enrollment on a clean installation of High Sierra (10.13.3) to get everything all set up in a convenient, hands-off way. Everything works beautifully except for giving the Administrator account full privileges to remotely manage the Mac. I'm using this script:https://www.jamf.com/jamf-nation/third-party-products/files/217/enableard-sh-enable-ard-and-configure-remote-management-settingsI've tried hard-coding the Target Username and using parameter 4. I know the script is running since Remote Management is getting enabled, but the "Allow Access for: Only these users: Box" remains empty. I thought maybe those commands just don't populate that box but sure enough, screen sharing doesn't work for the administrator account unless I manually add it to that Box. I've tried with various accounts, running the script while logged in, at login, and at startup.

I am trying to leverage the PPPC config in Jamf Pro to trust certain apps. I have been using PPPC Utility and it works great, but since Jamf has this feature I would rather use that. When setting it up, I can easily find the Bundle Identifier of the app but what the heck is code requirement? sorry if this has come up, I couldn't find any posts and it didn't seem the admin guide went into this too much.

Started up a netSUS v5.0 Ubuntu OVA about 2-3 weeks ago, and it still hasn't finished synchronizing with Apple. I only selected 10.12, 10.13 and 10.14 catalogs. When I look at the network traffic (iftop -n), it shows it's connected and running, but it will never go above 1Mb. Has anyone seen this before? It's config'd with a gig card, and I asked our network team if they throttle downloads from apple, and they said no.

Greetings, all! We're using "Restricted Software" to prevent unwanted in-place upgrades to Mojave when it is released next week. Since this'll be in testing for a few weeks or so before our organization approves the use of the new macOS, I wanted to use this restriction workflow. I just wanted to take a moment and verify the accuracy of the process name that I am using. What're your thoughts? Is this a good educated guess based on previous naming conventions for macOS installers that Apple has used?

So I have been trying to update Flash on our lab machines through a policy and an installer package with a postinstall script, because I want it to perform silently without needing user interaction. I have tried it through patch management with and without the postinstall script, but either way when logging into the machine the flash player updater icon pops up in the dock and then hangs. You can't logout of the machine unless you force close it too. I have also tried it with PPAPI and NPAPI flash separately because I thought that might have been the problem. I am new to JAMF and macOS but I have been using Linux based operating systems for almost 9 years, so I like to think I have a decent understanding of how these systems work I know my script is probably bad, but here it is. Take the adobe flash installers and make a flat package -> extract the 2 flash player installer's to /tmp -> postinstall Would this work better if I left them as a DMG? Does Patch Management even wo

Installing JPS onto an Ubuntu 18.04 VM. I have found /etc/mysql/mysql.cnf but it only contains two include lines. I added innodb_buffer_pool_size=5500Minnodb_file_per_table=1 At the point mysql refused to start. Removing the lines allowed it to start again. Suggestions?

Has anyone found a way to Disable Autoupdate, OneDrive Login, and Office 365 Login?

This item made me excited in the JAMF Pro 10.9 release notes: You can now add a package to a computer PreStage enrollment. This allows you to deploy the package to computers with macOS 10.14 or later during enrollment with Jamf Pro. The package is installed on computers before the user completes the Setup Assistant. ...and then this item made me depressed in the JAMF Pro 10.9 release notes: To deploy an enrollment package to computers, you must have a cloud distribution point configured as the master distribution point in Jamf Pro. Does this mean if your JAMF environment is entirely on-premise you're SOL to use this feature? If it is, I'm wondering what the rationale is behind that decision by JAMF... is this the beginning of a trend of cloud-only features in upcoming versions of JAMF Pro?

We must disable keyboard shortcuts for screenshots as a requirement for the state online assessment. In Sierra, these screenshot keyboard shortcuts have their own option under Keyboard > Shortcuts. Under Mojave, it has an additional option. How can we capture these keyboard shortcut changes? How do you deploy the change to an existing user account? I include a screenshot to show the new changes. Thank you.

Hey! I was wondering if there was a way to check if a group existed on a MacBook? Like : If [Group exists] then ( do this) else (do nothing) Is there any quick and easy way to perform this? My scripting skills are still developing so I appreciate any and all help!

Has anyone ever seen these from a Policy calling a Script that only uses JamfHelper? Script result: 2018-12-20 13:58:10.156 jamfHelper[3537:29215] isPrefsCreateCacheFromEnabledAndDefaultInputSources - can't find anything from GetInputSourceEnabledPrefs, use defaultASCIIKeyLayoutDict = {type = immutable dict, count = 3,entries =>0 : {contents = "InputSourceKind"} = {contents = "Keyboard Layout"}1 : {contents = "KeyboardLayout Name"} = British2 : {contents = "KeyboardLayout ID"} = {value = +2, type = kCFNumberSInt64Type}}result 0

Can someone explain why I would need Remote Apple Events enabled under Sharing in System Preferences? Other than running apple script from PC-1 to PC-2 (which I never do). I rather have it turned OFF -- but when reading the MAN pages I can only set it to ON or OFF -- I cannot set it to "Only these users" with a script. Before I turn it off globally I'd like to know if there is something I'm missing that would require me to have that on? Thanks

Hi All,I've been trying to find a "good way" of doing this and am coming up short - does anybody have a nice way of somehow showing progress or status from a terminal command in an osascript-created dialog? Is this even possible? :) I'm using rsync -avhP to get the progress and want to send that output to a dialog window if possible. We've got a departed user Self Service item that copies the user's home folder to our server and smb share copies are NOT fast - so I'd love to have some sort of progress for my techs running this. Any cool ideas? Thanks!mbezzo