is this even possible, or I need to wait for Apple to release a new OS version that includes the update ? I just received 125 laptops, 2017 MacBook Pro - I'm hoping I could make a new 10.13,2 with all updates - but its not giving me the supplemental update via AutoDMG - anyone know how I could make one, or just wait ? seems my current fix would just disable the gathering of info until I update all computers to 10.13.2+ then turn it back on, but I m afraid I ll get bit. either not updating all computers, or just forgetting to enable it again

Hi I was wondering if there was a reliable way to turn on right click for Apple mice? I've tried packaging up com.apple.driver.AppleHIDMouse.plist and creating a configuration profile from it, but neither work. Any ideas would be much appreciated. Thanks Tim

Hi everyone, I am working on deploying some in-house eBooks (PDFs, actually) to my test iOS devices. Unless my google-fu is off today, I wasn't able to find any other posts/information on why I might be having this issue. I have a JDS set up and am able to successfully upload my PDFs to it from my JSS. I have them scoped for a test iPad and can see the PDF available in Self Service on the test device. The problem comes in when I click the "Install" button within Self Service to install the PDF. It shows successful within Self Service, but when I check the logs for the device on the JSS (Device -> History -> Managed eBooks), it shows the book, but under the "management status" column, it says "Delayed" (see screenshot). I've let it sit for about an hour (actually a bit longer) and the status never changes. I've deleted and recreated the book, and I've gone so far as to set up a brand new JDS and I still experience the same issue. Any thoughts would be appreciated.

Hi, I am in the process of on-boarding a college into our JAMF Pro instance. I gave the department Admins a Quick-add package to enroll existing Macs. Turns out, they are caching a custom image for their log in screens at /Libraries/Caches. That is getting deleted at enrollment. Is there some place I am not aware of to prevent this from happening? And, I have never cached anything there in an image before-is there a better place for them to stash that image? TIA, /randy

Not sure whats going on here. But on at least two machine i game a new drive to time machine is saying those drives are read only one I have erased the drive plenty. The partition seems to no longer mount after they are erased. two same thing happens on all the accounts on the computer Im like scratching my head on this a bit

I'm trying to use Jamf Remote to do things like run software updates, screen sharing, etc and it keeps hanging on authentication. I'm assuming I need to allow a certain user (or group) in SSH. What user does Jamf use? Or, am I completely off base and something else is up?

This goes out to the JAMFers from sunny (but chilly) Jacksonville. Good luck this weekend. We might have a very unlikely Super Bowl this year - which the Jags would win. :)

This is in reference to the previous thread here, https://jamfnation.jamfsoftware.com/discussion.html?id=4270 . I believe this has been working fine, but currently none of my systems are showing warranty end dates. Is Apple's site just down temporarily? Tried putting the URL in manually using a good serial number and I get "We're sorry, our system is not available at this time.". I'm just hoping this is temporary. On a related note, is there a good method of retaining historical information on extension attributes and other data? For example, if I had a weekly report that gave me all of this info, today I could go to a previous report to find the warranty end dates of all my systems... Thanks!

Since updating from 9.98 to 10.1.1, we have been noticing on some newly enrolled computers this issue: In Self Service, the available VPP assigned AppStore apps all fail. After you click Install, it spins at Installing for 15 seconds or so and then pops up a failed to install error. It then opens that app page in the AppStore. I have tried renewing the VPP service token and I checked the license counts. Everything looks good. I have tried paid apps versus free apps and both fail. I tried using a hotspot instead of our work network and it still failed. This seems to happen on 30% or so of newly enrolled computers since the upgrade of the JSS. The other 70% work just fine. Any help is appreciated! Thanks!

Hi All, I've noticed on our 9.100 install that patch reporting data is out of date. Casper thinks is current for Chrome is 63.0.3239.84, but 63.0.3239.132 is actually current. I’m also noticing Flash doesn’t know about latest version. 28.0.0.137 came out on the 9th (of January, 2018). Anyone else seeing this?

Hi all, I have a strange problem. We have a Mac that was DEPed, but due to time constraints they set up the Mac anyway using Migration Assistant, naturally I want to enroll this Mac now (though I can't put it through our standard DEP procedure as that would erase the users files etc.). However when using self enrollment, the QuickAdd.pkg installer fails as the Mac says the package is damaged. I've tried using self enrollment on another Mac and it works just fine there. Any hints as to what could be going on?

Hi all I'm trying to understand the process involved in obtaining LDAP user attributes with using Extension Attribute. I can see the option LDAP Attribute Mapping, should it just be a case of adding the attribute name that i want to report on or are there more steps involved ? (as that's not working) We have an LDAP server and correct mappings in the JSS, and inventory collection is set to Collect user and location information from LDAP. There are a couple of attributes i want to report on, i'm getting the names from Directory Utility; in the /All Domains Node/; dsAttrTypeNative:memberOfin the /Contacts/ Node; dsAttrTypeNative:msRTCSIP-PrimaryUserAddress any pointers would be greatly appreciated

Hello,i want to use Configuration Profiles > Login Window > Disable Siri setup during login. My problem is that the the profile also includes payloads that i don´t want.i.e. i don´t want to configure the LOGIN PROMPT. Neither to "Name and password text fields" or "List of users able to use these computers". Also the user should be able edit the settings in System Preferences on their own. Is there a way to exclude or remove unwanted payloads from configuration profiles?

Hi, Currently we are deploying macOS High Sierra via a deployment set with an APFS 10.13.1 .DMG file (created with autoDMG), what really works smooth but one thing is not working properly and that is; Deployment set is done, packages are installed, firstboot script is finished, and then FileVault 2 is starting to encrypt which is fine but it will cost a day to fully encrypt the disk. on macOS Sierra it will take like 80-120 minutes. Anyone an idea about this or is this expected behaviour? Greetings,Thijs - bol.com

Is anyone using Datadog or a similar product for monitoring a clustered environment? I would like to find a monitoring solution to consolidate the metrics for ease of use.

I'm pushing out the installer for High Sierra with a policy. It's in a DMG to later be executed with startosinstall from Self Service. Anyway I'm getting this error on a handful of machines and re-occuring over and over on some of the machines it's pushed to. Downloading https://MYJAMFSERVER/Packages/Install%20macOS%20High%20Sierra.dmg... Verifying DMG... Verifying package integrity... Installing Install macOS High Sierra.dmg... Error: The package "Install macOS High Sierra.dmg" could not be mounted (no mountable file systems). A lot of machines received it no problem, but a handful haven't with this error reoccurring. I thought maybe the connection was getting interrupted but it doesn't seem like that, if I SSH into a machine and execute the policy from the terminal I'll still see the error and never get booted from the SSH session. I don't believe I've ever seen this with other policies and packages before.

Hi all, your help is really appreciated! I am wondering if any of you have built an EA that I can use in on my Jamf Pro server (9.101.0)? Does this update change the OS10.13.2 build number? If so, is that (17C88)? If the supplemental update does not change the build number is there something in the OS that I can grab in an EA the definitively tells me the OS is running with the 10.13.2 Supplemental Update applied? Thanks again for your help!

Hello everyone! I have five Microsoft Office packages that I would like to combine into one larger installer. Is that possible? We would like to package it up as one major monthly update e.g. MicrosoftOffice_January2018.pkg Is this possible to do using Composer?

We would like to solely push the 11.0.2 update for Safari via the a script using either Casper Remote or a policy but I can't seem to be able to find the correct syntax to do so. I ran software update --list but did not find the correct actual spelling. Was it omitted by default? I am able to run it separately through the AppStore however... softwareupdate --listSoftware Update ToolCopyright 2002-2012 Apple Inc. Finding available softwareSoftware Update found the following new or updated software: Security Update 2017-003-10.10.5 Security Update 2017-003 (10.10.5), 399418K [recommended] [restart] RemoteDesktopClient-3.9.3 Remote Desktop Client Update (3.9.3), 8587K [recommended] * Safari10.1.2Yosemite-10.1.2 Safari (10.1.2), 71479K [recommended] I have already tried softwareupdate --install Safari-11.0.2 but no luck there... *softwareupdate --install Safari-11.0.2Software Update ToolCopyright 2002-2012 Apple Inc. Finding available softwareSafari-11.0.2:

Hi all, I don't think we can lock it down but I though I'd double check just in case!Can you prevent a user from changing the name of their iPad? I have one school in particular who are frustrated by students constantly changing the name the device. There doesn't seem to be anything in restrictions. Can anybody confirm or enlighten me?

Hi All,For those of you using SIS Infinite Campus and Apple School Manager (ASM) how are you getting support for syncing issues?My first call was to Apple and they sent me to Campus. My Campus admin is willing to make a call with me but I'm hoping to ask the right questions... Currently we have 5000 students and only 2100 are showing up in the preview, no instructors, 2300 courses. Locations looking mostly OK. Did not use last year as we barely had migrated to Campus at that time.Syncing during summer was really wack, but figured it had to do with Calendar end and start dates, based on what showed up. We actually only need Middle School but I cannot make heads or tails of what is happening.

Calling script gurus... :) #!/bin/sh # # Compare ComputerName to AD bind name, report MATCH or MISMATCH. # Check AD name mismatch COMPUTER_NAME="`scutil --get ComputerName`" AD_NAME="`dsconfigad -show | grep "Computer Account" | awk '{print $4}' | rev | cut -c 2- | rev`" if [ $COMPUTER_NAME == $AD_NAME ]; then echo "<result>MATCH</result>" else echo "<result>MISMATCH</result>" fi The script works great...except that it reports a MISMATCH if the tech bound using lower case vs upper case characters. Is there a tweak to the above script that will stop reporting MISMATCH if AD bind name is in lower case, but ComputerName is in upper case (or vice versa)? TIA,Don

I'm having a hard time trying to block/restrict update 10.13.2 how could I do that from JSS (current version 9.96 but I guess any version of JSS should be similar process) any help will be appreciated.thank you.

Hi, What is the best way to install Xerox printer via Jamf ?

JAMF NATION, I have searched the community for previous discussion etc on this but i haven't quite found what I need. I need to create a "Smart Computer Group" that can report what security updates are installed on each managed Mac. We use a SUS to roll out selected updates. What is the best way to configure this group? I have tried "Number of available updates" and set it to "more than" 0, but that report comes back with 1 Mac needing updates. I know that is wrong though because the Policy we have slated to roll out updates to all Mac's still has 50/200 left needing the install. I feel like i am missing something here. Can someone assist?