Hello, I've been asked to push a script to select Macs that causes them to automatically login to the guest account. I've got a working script (below) to write to the necessary keys. However I've run into a really weird case where System Preferences shows the guest account is enabled and selected for auto login, however when I reboot I land at the login screen. I'm testing on a MacBook Air 13" that I internet recover between tests. Any Ideas? printf "$appName $(date): Enabling guest account... " sudo defaults write /Library/Preferences/com.apple.AppleFileServer guestAccess -bool true sudo defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server AllowGuestAccess -bool true printf "$appName $(date): Done. " printf "$appName $(date): Setting Guest account to auto-login " defaults write "/Library/Preferences/com.apple.loginwindow" GuestEnabled -bool true defaults write "/Library/Preferences/c

Using JAMF's handy documentation, I am attempting to cache and then install cached using two policies to get macOS Sierra on eligible test clients. The caching works great (as it has in the past with other OS X versions) but I am now receiving errors within Self Service on various test computers. Each post the following errors. Our JSS is running v9.92. Any thoughts? Thu Sep 22 13:44:07 it-14648 jamf[3834]: Checking for policy ID 768... Thu Sep 22 13:44:08 it-14648 jamf[3834]: Executing Policy Install macOS Sierra Thu Sep 22 13:44:08 it-14648 jamf[3834]: Installing Install macOS Sierra... Thu Sep 22 13:44:11 it-14648 jamf[3834]: Preparing for in-place OS upgrade... Thu Sep 22 13:44:14 it-14648 jamf[3834]: Converting /dev/disk0s2 to CoreStorage before upgrading. Thu Sep 22 13:44:43 it-14648 jamf[3834]: Unable to find brtool. Unable to find brtool in /Volumes/OS X Base System: (null) Thu Sep 22 13:45:30 it-14648 jamf[3834]: Blessing in-place OS upgrade directory... Thu Sep 22 13:45:30 i

Hello,We have AD bound Macs and are using Office 365 (So the email address is first.last@university.edu and NOT UniversityID@universitu.edu) I've been trying to use : https://github.com/talkingmoose/Outlook-Exchange-Setup-5 by @talkingmoose But it doesn't seem to do anything except bypass the initial Outlook start up. Has anyone had any experience with the script? I usually image the machine with a stock 10.13.3 then I join it to Jamf using quick add.pkg which then installs our volume licensed Office 2016 package then I compiled a .PKG as per the wiki. Was my mistake installing office first or could it be somewhere else?

Are there instructions on how to add VPP to Jamf from Apple School Manager? In specific If I create a new content manager in ASM linked to a new location in ASM what do I need to do to add that content manager's VPP token to Jamf? If there are steps I need to do in ASM first those would be appreciated as well.

Since upgrading to 10.4.0 came out, I've now been getting notifications about "0 computer removed from DEP Wifi". Dep wifi is a config profile, but it's now every day at around 1am that these are coming through. Anybody else see this?

Hi Everyone, I'm working on an EA to check for the presence of a particular cert in the user's Login keychain.: #!/bin/bash currentUser=`stat -f '%Su' /dev/console` echo "Current username is $currentUser" fullName=$(dscl . read /Users/`whoami` RealName | grep -v RealName | cut -c 2-) echo "Full Name is: $fullName" firstName=$(echo $fullName | awk '{print $1;}') echo "First Name is: $firstName" CERTNAME=$firstName echo "Cert Name is $CERTNAME" if [[ `security find-certificate -c $CERTNAME /Users/$currentUser/Library/Keychains/login.keychain` ]]; then echo "<result>Installed</result>" else echo "<result>Not Installed</result>" fi exit 0 Basically, the certificate we're looking for always has the user's first name. The script returns the proper result (Installed) when I run the script locally on my Mac, but always returns "Not Installed" when deployed as an EA. Has anyone else ran in to this behavior before? At first I thought it was the "currentUser" v

Hi Folks, Just a quick one, I have created a configuration profile that promts users to change their passwords as this needed to be done. However, when I have then went to log into the management account on a users machine it seems that the password has changed. Does anyone know if the Management account password changes when pushing this config profile? I was under the impression that it shouldn't make changes to the management account.

I'm not sure what I am missing here but I just want to create a new QuickAdd package in Recon.app with my user which is Administrator with Full Access and I'm getting this when hitting the "Create" button. This is a sandbox JSS with GSuite SSO enabled. The email for my user obviously matches. Ideas ?

Hi, i'm trying to setup a NetSUS server for our High Sierra macs. Have set this up however when searching for updates comes up with no new updates found (have changed the catalog and when browsing to it on safari, comes up with the XML file. Looking at the catalog XML file it's showing old updates, however not the new ones (although it's listed and ticked). Looking at the dashboard it says downloaded 432gb so imagine the updates have been downloaded. Any help would be appreciated! ThanksSimon

have a script that I'm calling via Self Service and it works perfectly. When I have another policy call the same script, it doesn't work quite right. I'll see in the logs a line:271:370: execution error: No user interaction allowed. (-1713) below is the script. It has Apple Script at the beginning to popup a window with a list of selections and then ends with basic shell scripting. #!/bin/sh nameCode=`/usr/bin/osascript <<EOT set locations to {"Office 1", "Office 2", "Office 3"} set choice to (choose from list locations with prompt "Please select the Office that best describes your location") set city to the result set code to city as text if (code = "Office 1") then set nameCode to "DAL" else if (code = "Office 2") then set nameCode to "ATL" else if (code = "Office 3") then set nameCode to "BUR" else set nameCode to "CORP" end if E

Hello All,I'd like to upload a file to the cloud distribution point(Jamf Cloud Distribution Service) with CUI(Command line User Interface). I tried uploading a file by executing the following API. curl -u username:password --tlsv1 --header Accept:application/zip --header Content-Type:application/zip --header FILE_TYPE: 0 --header FILE_NAME:zip_test.zip --header DESTINATION: 1 --header OBJECT_ID: 113 --data @/Users/username/Desktop/test/zip_test.zip --request POST https://mydomain/dbfileupload And then, When I checked the package in Jamf Admin Application,"Filename" and "Chekcsum" are displayed, but "Type" is "Missing" and the package file can not be downloaded. Is the API parameter incorrect? I would like some information.

Hi, Is there a way to find Skype version in all the managed mac devices in my company? I tried with the extension attribute but the script is not populating the results.

I have no scripting knowledge, found this script below which works for me for mounting the same network share for every user that logs in. But for our lab we have multiple local accounts and each connects to a different share folder. Is it possible to create a script that will look up the logged in user and mount a network folder based who the logged in user is?? #!/bin/sh protocol="$4" # This is the protocol to connect with (afp | smb) echo "Protocol: $4" serverName="$5" # This is the address of the server, e.g. my.fileserver.com echo "Server: $5" shareName="$6" # This is the name of the share to mount echo "Sharename: $6" # Mount the drive mount_script=`/usr/bin/osascript > /dev/null << EOT tell application "Finder" activate mount volume "$protocol://${serverName}/${shareName}" end tell EOT` exit 0

We have a Policy In place for our DEP Zero-Touch Build that enables FV2 as the Management Account, and then performs an Authenticated Restart, however on reboot the machine requires FV2 Authentication when it should not.See below Policy Log. Any Ideas ? Executing Policy InitialBuild - FV2 - Enable Using JAMF AccountAdding institutional recovery user from keychain.Adding personal recovery user.fdesetup: adding user 'JAMF' to FileVault.........................Recovery key = '(...)'FileVault is Off, but will be enabled after the next restart.Blessing i386 macOS System on /...Creating Reboot Script...

Hello I am pushing out the new Google Drive File Stream app. The app installs correctly but it does not pop up and prompt the user to login after installing. So I am trying to create a script that will open the app. The issue is that it worked on the test computer and the first 5 machines it hit. Then it started failing. Here is the script I am using. open -a /Applications/Google Drive File Stream.app Any ideas why this is not working. Here is the error message. xecuting Policy Open Drive File StreamRunning script Open Drive File Stream...Script exit code: 1Script result: LSOpenURLsWithRole() failed for the application /Applications/Google Drive File Stream.app with error -10810.<br/>Error running script: return code was 1.

I've noticed that Jamf's nomad install script that's supposed to grab the latest nomad version and download it is not grabbing the current version. I opened a bug on the site a week ago but no response :( Anybody have a quick and dirty fix for what's going wrong? Jamf's Script

In preparing for 32 bit apps and iOS 11, I've found a number of helpful posts in finding 32 bit apps I currently have in Jamf. As of this summer all of our devices will be iOS 11 and once I have all 32 bit apps removed, I'd like to my Team to be able to identify 32 bit apps before "purchasing" via VPP and again populating apps in jamf that won't even work. Has anyone found an way to identify this in VPP or other means?

Anyone know of a PPAPI check / update script? I've searched all over with no luck.

Anyone already doing this? We are experimenting with a time machine backup qnap. I'm trying to work out how to tell time machine on each computer to only backup its user folder. Didn't want to re invent the wheel. Any ideas? Gabe ShackneyPrinceton Public Schools

I decided to upgrade our JSS from 9.81 to 9.92 today. When I run the JSS Installer.msi I am prompted to "Please specify a network location for the server image of JSS product" and it defaults to the C: drive of our Windows server 2012 system. I've never gotten this prompt before with previous upgrades. I can't find any information about this in the Installation guide nor in Jamfnation. I accepted the default and clicked next. The installer went VERY quickly and was over in less than 5 seconds. Once again this is very different from previous upgrades. When I restarted the server and logged into JSS, it is still at version 9.81. I've re-downloaded the installer from My Assets just in case it's something weird with my installer... with no change. What am I missing?

I learned about the existence and use of Adobe RUM at JNUC 2015. I am using Adobe CCPackager to create packages for our Mac labs as part of Casper Imaging. However, the RUM binary seems to be missing on most of my machines or at least not in /usr/local/bin where I am expecting it to be. For my most recent packages the following commands are working: /usr/local/bin/RemoteUpdateManager --channelIds="CC (2015)--6.0--osx10--AdobeLightroom-6.0" /usr/local/bin/RemoteUpdateManager --channelIds="CC (2015)--16.0--osx10--AdobePhotoshopCC2015-16.0" A couple of newbie questions here: 1) Is there a way to tell RUM to just update everything that is already installed? 2) Can I package RUM by itself so that I can call it with commands like those above to update various apps in Adobe CC 2015? Cheers from the Great White North which is not white just yet. ;)

@dan.kubley showed me this to test if the firewall for your jamf PRO server is configured correctly: /bin/nc -z gateway.push.apple.com 2195/bin/nc -z feedback.push.apple.com 2196/bin/nc -z mdmenrollment.apple.com 443/bin/nc -z vpp.itunes.apple.com 443/bin/nc -z jamf-patch.jamfcloud.com 443/bin/curl http://ax.itunes.apple.com/WebObjects/MZStoreServices.woa/wa/wsSearch?term=birds&entity=software&&country=us

Not sure who to hate more. Electronics For Imaging, or the companies that rely on their RIPs. So the Xerox Versant 80 Press comes with three RIP options: Xerox Versant 80 Press with Xerox 80 EX 80 Print Server <--- Sierra not supported yet Xerox Versant 80 Press with Xerox 80 EX-i 80 Print Server <--- Sierra not supported yet Xerox Versant 80 Press with Xerox 80 FreeFlow Print Server <--- Sierra supported The first two Servers don't yet support macSO Sierra, as per their Xerox® Product Compatibility macOS Sierra document. Of course Xerox is like a lot of vendors who simply don't care about keeping up with new OS releases. So much easier to wait until things don't work so they can collectively point their finger at Apple. So much for running a business in today's world, where cutting corners is rewarded. ¯_(ツ)_/¯ On the off chance someone on this forum was able to get Xerox Versant 80 Press with Xerox Versant 80 EX 80 Print Server to work on Sierra, would love t

Hello Everyone, My company just got a bunch of new 2017 MacBook Pros in and after enrolling the machines to the JSS this error keeps popping up. Anyone know what that is? It's definitely JAMF related because when I remove the JAMF framework it stops appearing. Any insight would be appreciated. Linh

Had a couple of occasions where laptop users are on SSD's and they run out of space Thought i would share this #!/bin/bash # Get the currently logged in user user=`ls -l /dev/console | cut -d " " -f4` # Calculate the users home folder sizes sizeU=`su - "${user}" -c 'du -shc ~/*'` sudo /Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper -windowType utility -title "Your Home Directory Sizes" -description "$sizeU" -button1 "OK" -icon /System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/HomeFolderIcon.icns -iconSize 96 I wanted to also add in some info about the boot volume using df -Hl / Unfortunately it doesnt look user friendly. Does any one have a suggestion?