What would be the cause of a "Profile Installation Failed" error? I've attached a screen shot. High Sierra installed on the VM with Parallels 13.

Hey All! I'm fairly comfortable with Casper's API manipulation but I've been wracking my brain trying to figure out this issue (maybe it's post vacation brain?). I have an extension attribute that's of type Pop-Up Menu. I've already populated the values for Pop-Up Menu. I'm basically just trying to update the Pop-Up value for each machine via the API. Except every time I try, I get a 409 - Conflict error. I'm updating the extension attribute by doing the following: #!/bin/sh JSSHostname="$JSSURL/JSSResource/computers/serialnumber/$1/subset/extensionattributes" XMLTOWRITE="<computer><extension_attributes><extension_attribute><name>Deskside Support By</name><value>$2</value></extension_attribute></extension_attributes></computer>" completeCurlCommand=`curl -s -f -k -u $APIUser:$APIPassword -X PUT -H "Content-Type: text/xml" -d "<?xml version="1.0" encoding="ISO-8859-1"?>$XMLTOWRITE" $JSSHostname --verbose` I have

Jamf Nation, Been troubleshooting FV2 on our High Sierra build for a bit now. I understand how to enable/disable a secureToken, that an account can only get a token using setup assistant and what the sysadminctl command can do etc. What I want to know can be broken down in two questions... 1. Does an administrator have to be secureToken "enabled" at all times, or once secureTokens are assigned can we disable? Or, can the administrator be secureToken enabled.... but somehow not be enabled as a FV2 boot screen login account? which leads me to my next question/issue... 2. We want to be able to see 2 users on our FV2 boot screen, one would be our Standard Users account and the other would be a generic "Standard" user account for our IT support. We do not want our admin account on the FV2 boot screen. I cannot figure out how we can accomplish this simply. I have tried giving temporary admin rights to the generic account and removing rights from the admin accounts for encryption

Anybody else experiencing issues with High Sierra integrating with AD in your environment? We're currently having issues where accounts that should have binding rights not allowing a bind, issues involving changing the password of AD accounts, and sporadic issues where mobile accounts can not be created at a lock screen. The frustrating part is that no issue occurs on all machines, but they occur consistently on the machines where we experience them.

I have a group of computers that are being images with Casper, but they do not want the machines to be managed beyond that. I currently have a site setup for them, and the only policy is one scoped to all machines that runs jamf removeFramework. The problem is that the machines no longer check in and do not report whether they have run the policy successfully. Has anyone had a similar requirement and been able to handle it gracefully? I would like the machines to exist in the JSS, but report as being unmanaged.

I had scoped a Config Profile (Login Window payload; change to name and password text fields) to a lab of iMacs. I noticed that the profile was working inconsistently, so I unscoped it and decided to tackle this with a command. However, I cannot make this change via command or in the GUI. If I go into the OS, this feature is greyed out in Users & Groups and cannot be changed. When I look at Profiles in System Preferences, this Config Profile is gone. Is it sometimes necessary to wait an extended period of time before weirdness caused by a Config Profile is totally gone after the profile is unscoped?

Hey All,Hope all are doing well. Need suggestions on this.For some reason not able to login NetSUS webconsole. Checked list of users cut -d: -f1 /etc/passwd , surprisingly , there is no webadmin account listed. Please suggest on this.

Hi guys, I remembered learning this in Jamf 200 Course, but I've forgotten about it and can't find related discussion here in Jamf Nation. We all know that we can kill process or uninstall the application if process name found, and now I can't kill process when process name contains space like Tor Brower. Please help if you know, thanks in advance

We've been using Macs for the SBAC assessment and noticed a few Mac 10.11 clients receiving this error: "Another program has started, and you will be logged out. Ask your Test Administrator for Help. Calendar" Upon receiving this error, the user is kicked out of the test and there seems to be no indication that the calendar app was launched. Has anyone else experienced this?

Hello Everyone, After updating to "10.2.0-t1518103206" my dashboard does not resize to the size of the window. Defeats the purpose of having a 21:9 monitor really... Should have shared more with the screen shot but didn't want to expose some info. I have many more smart computer groups but the max width is 4 for whatever reason. Anyone else run into this?

I've done this procedure for years.macOS 10.13.4Jamf Imaging 10.2.2 (since we hit the alphanumeric password bug)AutoDMG 1.8AutoCasperNBI 1.41 The NetBoot Image created seems to boot and image fineexcept it reboots to a flashing folder with a question mark.Happens regardless of workflow/configuration used even a 10.13.3.If the 10.13.3 NetBoot Image is used, the 10.13.4 workflow/configuration works fine. Any ideas?

Hi I have a mobile config file (eduroam) that I want to make available in self service, I want the users to download via self service and then run automatically; or cancel the install and they can copy and run on another machine. Is this possible? The mobile config file itself prompts the user for info that we can't automate and they might be downloading it for a colleague who doesn't have wifi setup on their machine. ThanksH.

2012 MBP running 10. 9 Mavericks. Attempted enrollment with Recon 9.2Error: A connection error occurred: SSH failed to start up session with host '127.0.0.1' (Remote host closed connection) Confirmed that SSH is on and the admin pw for the Management Account is correct. Tried to do a remote enrollment and received an error that port 22 is off.I confirmed that the hosts file is correct with 127.0.0.1 localhost Any ideas? Thanks!Corbin

Goal: deploy EndNote X8 so that End Users can open Word and the Cite While You Write plug-in will already be configured without needing to do anything. I've used Composer a few different ways, and the outcome seems to always be the same: Application installs, but plug-in has to be manually configured. I even tried to do a snapshot from before installing the application, to going all the way through the "Customize" portion and verifying Word opens with working plug-in. I've made dmg and pkg files, but I never get the intended outcome. Maybe I need a script to run following the install? But alas, I lack the scripting skills/knowledge. Any thoughts or advice?

Wondering if anyones seen similar behavior from their supervised iOS devices running iOS 11.3 and iWork 4.0 apps. Device is signed into iCloud, has the iCloud Drive and iWork iCloud Drive options turned on, but in the Settings of each app, I cannot choose iCloud Drive as a Default Storage option. I was first alerted to this yesterday when I opened up Pages and received a message stating my Default Storage option was no longer available and to choose another. I checked my Restrictions Config Profile, but it allows iCloud Drive. Even if I remove the device from the scope of my Restrictions profile, I'm still not able to see iCloud Drive as a Default Storage option. The only time iCloud Drive comes back as a Default Storage option is if I unmanage the device. So it does appear to be something that my JSS is restricting, just not sure what/how/why. JSS is 10.2.2 hosted.

I created a script to add to OD, but when I manually run, I get a message "Certificates are available for this server. Would you like to add them to the system keychain automatically (y/n)?"The script will wait for a response. How can I automatically respond to this question in the script so it does not wait for a response?

We use Dockutil under High Sierra to set the Dock when a user logs in. A policy is scoped to All Users, has a Trigger of Login, and a Scope of once per user per computer. The policy runs the script below. I logged in as myself and the Dock was set correctly. I dragged one App off the Dock and one App onto the Dock. I logged off and back on and the Dock was set back to the default. The App I dragged off was now in the Dock and the App I dragged on was not. Any ideas? !/bin/sh /usr/local/bin/dockutil --remove all --no-restart /Users/$3/usr/local/bin/dockutil --add /Applications/Google Chrome.app --position 1 --no-restart /Users/$3/usr/local/bin/dockutil --add /Applications/Microsoft Word.app --position 2 --no-restart /Users/$3/usr/local/bin/dockutil --add /Applications/Microsoft Excel.app --position 3 --no-restart /Users/$3/usr/local/bin/dockutil --add /Applications/Calculator.app --position 4 --no-restart /Users/$3/usr/local/bin/dockutil --add /Applications/Dashboard.app --position 5

Anyone want to share their experience or knowledge with YubiKeys in their Mac AD environment? How was your set up and what issues did you run into with users? How did it compare to your Windows users? Are you using YubiKeys on Macs below 10.12.6? Thanks for your thoughts.

computers running 10.13.5 are now getting the following policy failure when installing Sharp printer driver. Anybody have an idea on how to use this -allowUntrusted I found this installer line for iLifesudo installer -dumplog -verbose -allowUntrusted -pkg "path/to/iLife.pkg" -target / this is a self service printer install policy.the driver policy is a custom event that gets called, it's always worked so i know it's not a policy issue, it's a high sierra issue with this new Certificate trust * Installation failed. The installer reported: installer: Package name is MX-PBX1<br/>installer: Certificate used to sign package is not trusted. Use -allowUntrusted to override.

I'm sure someone's seen this before, I'm still a noob when it comes to administrating Casper. Right now we've got configuration profiles pushed out for our security settings (display message on lock screen, lock after X minutes, etc.) In the profiles, the option to allow users to reset their password IS checked - meaning users should be able to change their password. But in System Preferences>Users & Groups, the Change Password button is greyed out. Doesn't matter if you authenticate as admin user or not. Anyone seen this?

Hi All, I thought i would share with the community my method for deploying High Sierra with Casper Imaging.The method basically consists for two scripts. I have tested this with a 10.13.1 Netboot Image created with AutoDMG and AutoCasperNBI restoreMacOS.sh To deploy the correct image which runs as a "before" script imagingPostinstall. To run after reboot to run the Sierra Upgrade if needed. The first script will decide which image to deploy to the Mac based on the currently installed Operating System or File system. -If it is APFS it will deploy the 10.13.1 APFS image to the APFS container.-If it is HFS+ it will check the currently installed OS. If the OS is already 10.13 it will image using the 10.13 HFS+ image.-If the filesystem is HFS+ and the current OS is not 10.13 it will deploy 10.12.6 and then upgrade to 10.13 on next reboot using startOSInstall. Script 1 RestoreMacOS.sh This replaces your base image in your Casper Admin Config #!/bin/bash #############################

Hello, The patch definition is missing the last Firefox 52 ESR release (52.9.0). Can this please be added? It's absence is preventing us from deploying that update via a patch policy. https://www.mozilla.org/en-US/firefox/organizations/ Thanks!

Hi all Can I integrate the 'sign-in helper' with the office configuration profile? ... so once the user signs in.... everything will be implemented.

Good morning. My institution is moving forward with migrating among domains. I came across this idea to see if I could take all existing Macs from our existing domain, and upon re-binding them to the new one, append text to the description field with a Shell Script. I'm unable to move the existing objects, I must re-bind. I already have configuration profiles in place, but if anyone has any idea with how I can reference the description fields, any help would be appreciated. Effectively, I'm looking for what was already done in this PowerShell article: http://woshub.com/how-automatically-fill-computer-description-field-in-active-directory/

Greetings! I just had apple walk me through converting over to the Apple School Manager change from VPP portal. Everything seemed to go smooth but now when I look on Jamf at devices>mobile device apps it has 0 remaining on all of our apps. Looking on the ASM it has all of them. I am sure that is a user error and I forgot to upload a token or something or possibly a sneaky location I need to check somewhere. I was wondering if anyone could point me in the right direction or has run into this before. Cheers