I'm trying to figure out a 'one line' command for this. On windows I could:net user username /domainand it shows up in the results in human format On the mac I can do this:dscl "/Active Directory/DOMAINNAME/" -read /Users/USERNAME pwdLastSetbut the format is in nanoseconds. I don't know how to convert it to a real date. Can anyone assist?

I'm in the process of scripting deployments of our Jamf Pro Servers (RHEL6) and I keep getting prompted with this: To be installed into /usr/local/jss: * Tomcat 8.0.50 * Jamf Pro * Jamf Pro Database Utility * * NOTE: When upgrading to Tomcat 8 for the first time, the account and group named 'tomcat7' will be renamed to 'jamftomcat' Proceed? (y/n): Is there any way to run the installer script without prompts or with an answer of 'y' to the prompt? thanks, Jack

I'm trying to add another user (user3) to ssh access, but for some reason when I run the kickstart command it still doesn't gain ssh access. can someone help tweak my command? /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -on -users user1,user2,user3 -privs -all -restart -agent -menu

We usually enroll our iPads through DEP, but these were purchased through the Apple outlet and Apple said they are not eligible for DEP enrollment because of that. (They're claiming they can't put the order under our customer number for DEP to work) So I have tried enrolling them with the Apple Configurator and with User Initiated Enrollment. In both situations, I get an error saying the MDM Profile is Invalid. I checked the date and time and trusted the certificate in Settings->About->Certificate Trust Settings. I also followed the instructions here: https://www.jamf.com/jamf-nation/articles/192/mobile-device-enrollment-error-invalid-profile-or-invalid-certificate and restarted tomcat. Nothing I have found has worked. The Configurator says Profile Installation Failed - Invalid Profile [MCInstallationErrorDomain - 0xFA1 (40010]. Does anyone have any ideas?

Hi all, I have a shell script to run via Casper. I'm going into my Macbook as well. The shell script did do the thing it is intended to do. So I am satisfied with the outcome. But somehow Self Service always reports back a fail. I'm checking JSS log as well as Console, they both report the script has completed successfully. But after all that, Self Service still pops up an error. Console's JAMFApplications.log shows:2016-05-09 14:07:03 <com.jamfsoftware.selfservice>: Error executing Policy "<script>"Error Domain=JAMFSoftware/SelfService Code=30 "The operation couldn’t be completed. (JAMFSoftware/SelfService error 30.)" Does anyone know what Error Code = 30 means?

We are deploying some software that prompts for local admin credentials when executed, which is problematic as most of our users have Standard accounts. I wrote up these couple of lines in bash: #!/bin/bash #Runs $PROGRAM as localadmin admin account to avoid requiring admin rights sudo -u localadmin open /Applications/Utilities/PROGRAM.app/Contents/MacOS/PROGRAM_BINARY exit 0 and made it a policy available in Self-Service. This works, in that the program does the needful even if the user has a Standard account, however, the Terminal app launches as well, and does not go away after the software is done doing what it needs to do. Is there a way to use the "open" command in a way that doesn't open Terminal? Or another way to execute an application as local admin? Thanks, -Mike

Hi All - I was wondering if there is a code/script for pop-up message/alert that will indicate what software he/she has installed after the installation completes from self-service? Example, i install a couple of apps from the self-service and forgot what they are now after one app completed installation it will pop-out an alert message telling me what is installed. Thanks in advance.

I launched Composer 10.2.1 for the first time this morning and built a package successfully. I quit the app and came back to it an hour later. Now when I launch it, there are no Composer windows but the menu bar does indicate that it is running. When I click on the File menu - not the items under it but the menu itself - the Composer window appears. All my packages are gone and it says "Taking Snapshot..." and "Indexing /Applications/..." It never finishes or does anything beyond this. Any suggestions?

Two of our clustered nodes are being shown in our jamf environment with and old DNS entry, I have removed the DNS entries and make sure that the hosts and hostname files show the correct in those nodes and have restarted the vm's and they still show the old names. Is there anywhere I'm missing to make a change? Any suggestions are highly appreciated

I have been working on a simple script to divide a variable by a static integer that works just fine when run on it's own, but when run via a policy in JAMF it is throwing an error. Here is my code: warningSeconds=7200 convertTime=$((warningSeconds/60)) echo "Time: $convertTime" When I run this in terminal I get the expected result: Time: 120 However when I use this same snippet of code via a JAMF Policy, the variable is always seen as /1 and spits out the following error: line 28: /1: syntax error: operand expected (error token is "/1") Is there something simple I am missing here?

We have a volume license for N users, and we have the deployment process ready to go. Including programmatically serializing/activating the software, as well as deactivating the software. The vendor is very helpful and can provide this info if you need it. Now the hard part. How to suppress updates. I reached out to the vendor, and it looks like their tech is busy or maybe out for the day. So thought I'd post here to see if anyone responds. We're looking to disable updates, hopefully at the Local domain, rather than at the User domain. When the app is launched these files get generated: /Users/username/Library/Preferences/com.camerabits.PhotoMechanic/com.camerabits.PhotoMechanic.prefs /Users/username/Library/Preferences/com.camerabits.PhotoMechanic/com.camerabits.PhotoMechanic.prefsdb /Users/username/Library/Preferences/com.camerabits.PhotoMechanic/com.camerabits.PhotoMechanic.prefsdb.bak /Users/username/Library/Preferences/com.camerabits.PhotoMechanic/PreferencesGeneralSettings/ /

When importing users from apple school manager what is the purpose of selecting the site first? It doesn't seem to assign the user to said site when Importing. The second image is from a user that should have been imported into the "Highschool" Site. On a side note, Is there a way to scope policies and configuration profiles to classes as opposed to devices or users?

Morning all, When attempting to create an 8021.x profile to authenticate via Wifi, with WEP/WPA2 Enterprise and PEAP selected.....the configuration profile consistently removes the 'use as login window configuration' option as soon as I save the profile, which completely defeats the purpose Any idea why this is happening? I've tried different protocols but to no avail

Anyone get these Configuration Profile keys working on High Sierra? forceDelayedSoftwareUpdates require 10.13, but enforcedSoftwareUpdateDelay requires 10.13.4. https://developer.apple.com/library/content/featuredarticles/iPhoneConfigurationProfileRef/Introduction/Introduction.html#//apple_ref/doc/uid/TP40010206-CH1-SW4 Thanks,Don

So I'm trying to find a way to get users to put in their information (Name, Department, Title) during enrollment so that the machine becomes associated to them. We don't run ldap here so I'll be providing either an email invitation or directing them to our enrollment page and giving them an enroll user to use. I want to have policies based on department but would have to go in manually after getting the user enrolled to set this up. My first thought was to have some sort of script run after enrollment to request this information in cocoa dialog and then use apis to update the info per machine but I'm not very advanced in script writing... Does anyone have any thoughts about this? Another oddity I'm experiencing is not even being able to select a user that exists in "Users" in my JSS when enrolling. My second plan was just to use an api to input an XML for all users which would then allow them to select themselves on the "Assign to User" page of the enrollment process... but I type

Dear Forum Members,Since the update of Google Chrome to 57, we have issue of "Your connection is not private" error and basically Chrome doesn't work with anything now. We are waiting on a proxy upgrade and in the mean time, also told to do a workaround on all clients for Google Chrome. Basically we need to set the Chrome Policy "EnableSha1ForLocalAnchors" to true. We did for all Windows clients via Group Policy. But I have no idea what to do with the Mac Clients. Anyone can shed some lights on how to approach this on a Mac?Thanks all!

Didn't Find a Solution on here so I thought I would share mine that worked flawlessly.

Hello all, We are using JAMFPro, and have several computers that are out of date. I would like to send an email to the OS breakers, but it gives me a javax.mail.AuthenticationFailedException: 534-5.7.14 error.I have tried a different SMTP server and port, but no luck.I can use the nc -z smtp.gmail.com 587 and all tests fine. Any direction of what to try next? This was working two years ago, so it is baffling to me, nothing has changed. FW rules seem to allow it through to test it. Thanks all.

Hi , If i run sudo jamf policy or any jamf commands in terminal, getting killed: 9 error. What shall we do to fix this. Please help.

We make a policies that will change client computer name to sync what computer name on our jss. but for some reason its not syncing when we tried to Sudo jamf recon or sudo jamf manage the computer, the computer name from client computer will be sync on our jss record. and the computer name on the client computer is grayed out so we can't change it manually.

Hey, I deployed a Config Profile with an Approved Kernel Extension payload and the camera on all affected MacBooks within the scope have been disabled. I've removed the payload and pushed it back out which did not fix. I've also tried un-scoping to remove the profile from the client and still no fix. Any ideas? Cheers,M

All of our users have a home directory with the same structure. e.g. within the root there is a Documents and Desktop folder, which if they log into Windows systems is automatically redirected and Offline Files takes care of Sync. I'd like to replicate this on the Mac so when a user logs in their network Desktop and Documents folders are synchronized with the network share. The root of the network share is automatically mounted on OS X as part of their mobile account. Looking at the Sync Rules I am not quite sure what to enter, as I would have expected something like a source and destination field but there only the ability to add a path. So, if I wanted to sync homedesktop to the local desktop what would I need to do? Thanks

Does anyone (Don perhaps?) have deep experience with Robocopy? I'm using it to daily replicate my DPs but there are some files that constantly get clobbered and re-copied. The issue is that these are some of my large disk image files (like 5GB) so it's really a pain re-doing that across international links. I've tried /MIR, /E /Purge and now just /E but it still sees large files as newer on my source than destination. I suspect it has something to do with these large files taking long enough to write that the dates and times are off, but I can't be sure. I think if I could force it to look at date vs time that may help. Perhaps the /maxage or /minage flags?

For those of you that have used the beta JSS. I'm curious about the new Lost Mode function from the JSS. Does the act of putting a device in Lost Mode still require an apple ID logged into iCloud? At CETPA (California Educational Technology Professionals Association) event this year Filewave mentioned they would have this ability soon, without needed an Apple ID logged into the device or iCloud account. The casper reps at the same event said that Filewave was full of it haha. However, that intrigued me because that would save my district a LOT of time. We rely heavily on still using Find-My-iPad. It would be awesome to be able to have some of that functionality without needing the iCloud account logged int.

This might be a stupid question, but when I create a profile via JSS for Ethernet with PEAP authentication and check the box for "Use Directory Authentication". After I click save and go back to edit the profile, the checkbox is unchecked. Therefore when I export the profile it doesn't work saying missing parameter "UserPassword". I spun up JSS 9.2 in a test lab and tried to create the profile there the checkbox does save, but there are no fields to type in $COMPUTERNAME that worked in 8.x and once again the profile won't work. Currently we have a script that we use to fill in computer name and password at run time before importing the profile, which works. I'm hoping to get away from relying on a script to accomplish this. Almost identical profile for WIFI works without any issues. I tried this in JSS 8.64 as well as 8.73. Using profile generate via JSS 8.64, 8.73, 9.2 I keep getting:Authenticating: can't prompt for missing properties &lt