I'm running the following script as a part of a Microsoft Office deployment. #!/bin/sh /bin/sleep 1 /Library/Application Support/JAMF/bin/dockutil --add '/Applications/Microsoft Excel.app' --replacing 'Microsoft Excel' /bin/sleep 5 /Library/Application Support/JAMF/bin/dockutil --add '/Applications/Microsoft Word.app' --replacing 'Microsoft Word' /bin/sleep 5 /Library/Application Support/JAMF/bin/dockutil --add '/Applications/Microsoft PowerPoint.app' --replacing 'Microsoft PowerPoint' /bin/sleep 5 /Library/Application Support/JAMF/bin/dockutil --add '/Applications/Microsoft OneNote.app' killall -KILL Dock exit 0 The install policy runs and returns Exit Code 0, but in the end the icons in the Dock have not changed. So I created another policy that does nothing but run this script and set it to run at recurring check-in. Again the policy logs return Exit Code 0 but the icons have not changed. However this is

Hi all, I’ve been working on a script that creates a default signature based on a HTML template and the JAMF API to get the Name and some extra info.I manage to create the signature without any problems but I can’t find a way to add it as the default signature for new emails and replies. I guess it will need to be done via applescript but I can’t manage to get it to work. Anybody found a solution to this? Thank you so much for your help :)

Whenever I run 'sudo jamf manage --verbose' on a computer, I receive the following error: $ sudo jamf manage --verbose Getting management framework from the JSS... Enforcing management framework... verbose: Timeout: 60 Checking availability of https://jss.example.com:8443/... The JSS is available. Enforcing login/logout hooks... verbose: Creating login hook... verbose: Enabling login hook... verbose: Creating logout hook... verbose: Enabling logout hook... verbose: Writing preferences for Login window... verbose: Creating startup item script... verbose: Created startup item script verbose: Creating launchd item for startup item... verbose: Attempting to install the mdm profile at the computer level. Error installing the computer level mdm profile: profiles install for file:'/Library/Application Support/JAMF/tmp/mdm.mobileconfig' and user:'root' returned -915 (Unable to contact the SCEP server at “https://jss.example.com8443//CA/SCEP”.) Problem i

Adding to the fun and excitement of High Sierra... I have my first 10.13 (17A365) test box in Jamf. My (2) local admin accounts were siccessfully created during the Casper Imaging process, but I'm unable to authenticate with them. -Can't log into the Login window.-Can't SSH with them (SSH is on).-Can't log in locally from the Terminal from another account ("login xxx").-Can't authenticate to ARD with them (ARD is active but I cant connect). Observations: 1) My local accounts are unusable regardless if the Mac is bound to AD or not. 2) Macs upgraded in-place from Sierra 10.12.6 work fine. Only Macs that are imaged "clean" from Casper Imaging 9.99 are effected. 3) The (2) local accounts are valid, and they have the correct UIDs according to DSCL. They are also in the correct local admin group (GID 80). 4) My AD accounts work (i.e the Mac recongnizes AD users/groups and allows me to log in and create a managed mobile account). 5) One of my local admin accounts is my Jamf service

After purchasing new iPads from an authorised seller, how long does it take before they show up in DEP?

Morning all, I'm working on pushing out Crashplan to my machines, I've been through the 'Deploying Crashplan with JAMFpro' several times, and from what I can tell, the editing in the user info.sh script to pass the logon details to the app, just seems to grab MY username at the time of saving the script, so every machine I push the policy out to has 'emmdee' as a username, instead to the actual logged in user I'm referring to the below - I simply uncomment the line pertaining to the user value in the user info script found in the custom installer, and then paste the below contained in step 5 1. Download the Code42 CrashPlan App Installer customization resources from your Code42 CrashPlan server by navigating to: https://YourServerAddress:4285/download/Code42CrashPlan_Custom.zip 2. On an administrator computer, extract the Code42CrashPlan_Custom.zip file. 3. Open the userInfo.sh file in the Code42CrashPlan_Custom directory with a text editor. 4. To h

I have an iPad cart of 30 iPads that are being replaced. My question is about the apps that are assigned to them. They're assigned by device, not user, etc. Can I just delete the old iPads from the jss and the apps will return to the count, then when the new ones are scoped they'll receive the apps? ThanksDavid

Hi, I'm using a script that creates the pre-login wallpaper and saves it as com.apple.desktop.admin.png in /Library/Caches The script:1. Takes a source image (installed to each Mac via PKG)2. Grabs the Mac Screen resolution via the system_profiler command3. Using sips, resizes the image and saves this into /Library/Caches with the appropriate name4. Resets ownership and permissions on the file (Full script is available if necessary, or if you'd like to use it for your own purposes) This process works, however at the login screen the wallpaper is shown as blurry. I've discovered that if I open this generated image using 'preview' and then just click save the blur is removed when I next log in. Does anyone have any ideas what I might be missing with sips that mustn't be generating the image in a format macOS expects. The base template image was created in Photoshop and saved as a png. ThanksRyan

I keep receiving the following error when attempting to use a policy and the 10.13.5 installer app to upgrade a machine that has 10.13.4 currently. "Unable to unarchive installer. Upgrade of macOS failed" I have tried doing the upgrade with both an install policy and also a policy for caching/installing the upgrade as well. Any suggestions on what could be causing this or how to fix this issue?

I created a new 10.9.2 image with customized default profile for our MacBook Airs, including MS Office 2011, McAfee Security and then joined to our Active Directory Domain with Mobile Accounts selected. When a user logs on, the Dock includes several question marks for applications that were never part of this image. They are, however, items that are part of another image we use, but they were built in isolation from each other Once the user has logged on for the first time with the mobile account created, I remove the question marks from the dock and reboot, and they do not reappear. Any ideas of where I should start my troubleshooting?

Hi All, I am having an issue when I am deploying the Papercut Client to our Macs. I have packaged the PCClient via Composer by dragging the app into Composer, also by taking a snapshot to create a DMG and Package to see if either of these work but unfortunately I keep coming up with the same error. I have checked to make sure the permission are set correct on the machine with composer installed and have run the app on this machine before completing the snapshot and package. Any help will be much appreciated as I am at present it looks like I might have to send it out remotely or go to each mac and add this app. Thanks, Chris

Does anyone know what is the difference between deploying the "Installer" and "Updater" Office 2016 packages to Macs which already have an older Office 2016 version? Does the "Installer" reset any user settings while the "Updater" doesn't? But what is interesting is that for MAU and OneNote there are only "Updater" versions and for Skype for Business only "Installer" so what gives? Can "Updater" versions be deployed to freshly enrolled Macs without Office 2016 already installed? We use O365 subscriptions so no VLK scenario in our case. LinksMacadmins SoftwareMicrosoft Thanks

Hello there everyone! It's that wonderful time of the year when all of our school district technology gets updated for the next semester! The only upgrades we are doing this year is to High Sierra (10.13.5), Microsoft Office (16.13.18), and Adobe CC 2018. Thus far everything has gone well, except for Adobe CC 2018. We built out our IT installer package via adminconsole.adobe.com and simply placed the .pkg installer in our JAMF Admin console. The install works perfect, but the issue we run into is that every time an app is launched a popup dialog shows up asking to log into Adobe Cloud with an account. This isn't a message that has to do with licensing, as they give you the option to close it, and everything works fine--it's just frustrating that every time any program is opened a user is asked to login. This wouldn't be an issue if all students had an Adobe account, but that is not a project we wish to take on right now, nor pay for. Has anyone else run into this scenario? What wer

I'm about to pull my hair out! I think what I want is pretty simple; Screensaver -> Shifting Tiles -> Custom Source (/Library/Screen Savers/CORP) -> Shuffle -> Start after 10 mins Using a package i've dropped all the pictures (and a copy of the script) to my clients. The next step would be to activate the screensaver and (re)set it at every login. I've tried running my script under my account and everything works just fine. Now, when I run the script using Casper, or call the local script using sh /Library/Screen Savers/CORP/set_screensaver.sh nothing happens. Although, it looks like it. All settings are correct, except the right screen saver is never selected. I can't get the right screen saver picked using Casper. When i perform it on the client using terminal everything works fine. I think i'm pretty close, but I need some help on the last part. Thanks! #!/bin/sh if [[ `ioreg -rd1 -c IOPlatformExpertDevice | grep -i "UUID"

Hi, Currently we are experiencing below issue since 10.13.2, this issue is not active on 10.13.1 / 10.12.6. The finder crashes when; Copying a single file from a lower folder niveau to a higher folder niveau on a mounted network file share. The finder does not crash when; Copying a single file from a higher folder niveau to a lower folder niveau on a mounted network share. Mounted share as SMB or CIFS. Is anyone experiencing the same issue? Cheers,Thijs - bol.com

We have about 300 MacBook Pros for staffs at our university and 100 iMacs for students in computer labs. I want to have separate policies for these two "groups". For staff I want to go with the Self Service approach - users download what they want from Self Service. For labs I want everything to happen silently in the background. No Self Service installed. For now I am using a lot of exclusions for my scopes but I think it becomes unwieldy pretty quickly. I've heard some folks that have made sites and divided policies and computers amongst them two. Im thinking of going this direction. Any tips?

So we have Macbooks with dual accounts 501 is "company admin" and 502 is "assigned user" currently with admin rights thats needs to be changed to standard. I used this script and it worked like a champ: !/bin/bash while read useraccount; do /usr/sbin/dseditgroup -o edit -d $useraccount -t user admindone < <(dscl . list /Users UniqueID | awk '$2 >= 502 {print $1}') exit Problem is that in some cases the UID is flipped and 502 is the "company admin" and s a result I (the admin) locked myself out of a few macs. What would be the best way to script this so that it changes the active user logged in at the time without regard to the UID? I've tried several variations and come up with nothing productive.

Has anyone tried to install Cisco AnyConnect using the -applyChoiceChangesXML process?

Hi, We have a while a policy running that Updates Inventory, at every "recurring check-in" with execution frequency "ongoing" scoped to "all computers". JSS is giving us the message "Policies that update inventory on all computers cannot be set to ongoing frequency at recurring check-in." Our clients have a configured check-in every 30 minutes, we dont have performance issues, but what is the best way to retrieve every 30 minutes a inventory check-in Thanks!

Is there a way for me to see the battery level ("current charge") for iOS devices? In my case I've got fully DEP supervised devices in Jamf Now, and I'm looking for a UI way to do it. If UI isn't possible, I'll use an API (but I have no idea if that's even possible... is there one for Jamf Now users?).

Just got our delivery of new 300 MacBook Airs and we are setting these up via a pre-stage enrollment, working great except one sticking point. The versions of iLife and iWork are a little dated and the Mac Store is prompting for an Apple ID to update them. We are using VPP licenses to deploy these apps to all of our macs so I'm trying to figure out how to get our VPP copies on these new macs in the best way. Wondering how others are doing this? Initially, I am thinking of scripting the removal of these apps and then installing via Self Service. Thx, Tom

Hi all, I have a Macbook Pro (10.13.4) that is prompting every user to Continue or Bypass entering a Security Token code when they 1st login. This is with AD or local users. The only user it didn't ask for was the initial Admin user account we create after a command-R wipe and re-build. JSS says that 1 account is Filevault enabled. Filevault was never enabled on this Mac and isn't now. I have wiped and re-installed a few times now. Any ideas? Thanks!

Hi guys, I love DeprecationNotifier from the Google macops team. It's used as a way to get users to update their systems. The thing is, I'm struggling to get it deployed. So it's supposed to work as a launchagent. X Code spits out a .app file which isn't really an app which can be installed so packaging it fails. It essentially only has to run at boot and it works. What would be the best way to get this up and running on client machines and how?

Hi everyone, It is that time of the year to wipe the computers in the labs and start fresh, however, I keep running into issues where policies that have a 'once per computer' execution frequency don't get triggered due to them being triggered before the wipe. We like to keep the name of the computer the same as it was previously, so my questions is, what do I need to do to implement this correctly? We are starting to use JAMF imaging with 10.12 Do I need to delete the computer from the JSS? or do I just need to run this as a script set to run at reboot in the jamf imaging jamf flushPolicyHistory The policy I am most concerned about is our install software policy. Should it be set to once per computer and triggered at enrollment? Or set to trigger at re-occurring check-in? Any kind of advice on your workflows would be great!

Sorry if I'm missing something easy here. I currently have check-ins set for every 15 minutes. I would like to set inventory to update regularly, but not as often as 15 minutes. The next available option is to set execution frequency at once per day, but it cannot be set more often than that without adjusting the check-in time. How can I trigger the policy to run at different intervals i.e. every 4 hours. Thanks!