I went to enable self service notifications in JP10 and it said I needed a push proxy cert. So I clicked the link and added a new certificate.. when it completes it shows the cert was installed in the list, but an " i " says it cannot add new push certificates. Can I just renew the existing MDM Push cert or do I need to create a new one because of the push proxy?

Hi community, I am packing now the Adobe CC Apps for a couple of months now and no issues so far with that. The next challenge would be now, how to manage updates for it. We are still using a serial key licensing solution and have not yet moved to a user licensed solution. The issue I am facing is, I am not able to include the companies Adobe ID within the package in order to have the users updating their apps on their own. And we don't have an update server. Any solutions you can share with me? Thanks in advance Thomas

Hey guys, I hope you can enlighten me: We have a bunch of policies that we want to be applied in order to consider a machine ready for the user, some are configured to run after enrollment, but some others are set for check-in. I am being asked to find a way (if possible) to lock the screen while all these policies apply and, when I can ensure that all are in place, unlock the screen and notify the user that the machine is ready. My approach, but I feel that it's not the best, is to call sudo jamf policy a bunch of times (5 or 6) until I get the "No policies were found", and then send a notification. Do you know of a better way to pull all the policies in a less caveman-ish way? Thanks!

Brand new to Jamf. Looking to customize our school's copy of Notability so that it can't access content from Giphy (as outlined here). I'm attempting to upload the .plist file into the app but can't find anywhere to do something like that. I have a hunch it'll be pretty easy once I know where to look – can someone point me in the right direction? Thanks!

New to Jamf. I'm looking to change some settings in Notability for iOS to disable Giphy content from being accessed by students (as mentioned on this page from their website). I'm hoping it's something easily done on a page I can't find – can someone point me in the right direction? I've downloaded the .plist file but I can't find anywhere to upload this or adjust the package contents of Notability.

Has anyone ever had to deal with a someone using a personal appleID on your IOS device and then not being able to reimage it? We have an IPad mini, Not managed, that has a former student's icloud on it. We can't do anything with it as far as I can tell. We've tried contacting the student and his parents but they haven't responded after months of trying. Apple's website doesn't offer much help other than "contact the former owner". Any Ideas? Note the device wasn't managed because we've never managed IOS devices, we're just starting to get into it now.

I'm trying to remove a Configuration Profile and overwrite a new one.I fixed the profile, re-packaged it, upped it to the casper Admin, and fixed the policy that runs it.Flushed all the existing logs so it would run again (it only runs once at machine build) But it's not working.. I'm wondering if I add a Files And Processes (that seems spelled wrong in jamf?)that: Find the config profile via path, and deletes it if found. I want it to remove the existing one and then install the new one but I have a feeling it will run backwards where it installs the profile and then deletes.... does anyone know?

our environment is AD bound and I would like to have our users auto login to Self Serviceour JSS>Computer Management>Self Service>Login>I have "Require login with an LDAP account, JSS user account or Single Sign On.I'm running JSS 9.96 how can I make a user to auto login into Self Service every time the user opens the Self Service app. thank you in advance for your help.

Hey all, As the title suggests, the Self Service badge on the dock is showing a notification when there is none available. Any insight would be appreciated! Thanks

Hi All, Our environment is seeing the new branded icon only when we have the self-service open. As soon as we close self-service the icon reverts back to the standard jamf icon. I called support today and we were able to figure out why this is happening but we haven't quite figured out what's causing it not work properly. Ultimately, we were able to fix the problem by changing the ownership of the self-service.app when the icon is failing to stick, the owner is for some reason set to our Jamf management account. When we change the owner to the user that's logged in, the icon sticks. So my question is why would the owner of the self-service.app be set to our management account by default? I'm going to start disabling all our policies and DEP prestage to try to narrow down what could be causing this, but if any of you have some ideas, i'm all ears . Thanks!

Hey everyone, got a problem with imaging Sierra onto systems. Brief recent history: I upgraded our JSS from 9.96 to 9.98, downloaded Sierra via the App Store, looked at the package contents, found the "Install OS X Sierra.dmg" file and dragged it into Casper Admin, then replicated the file share distribution points. I can confirm that the DMG is on both the file share distribution points, and that Casper Admin has it marked as an OS X Installer. Problem is, I added it to a few Configurations, and removed El Capitan, but now the configurations don't boot. I boot up the system, tell it to use one of the Sierra-based configs, and it goes through the whole process, but when it finished, it reboots to a black screen. No keyboard, mouse... nothing... but the screen is on. If I hold alt/option when I boot it, it shows the Untitled HD (I just leave it as Untitled and rename it later), but if I select it, it boots to a black screen again. Anyone have any idea what could be wrong? It's been

Hi everyone, I am in need of some help. We are using PhaseOne's - Capture One Pro 10 and I am having an issue with the licence/activation of this software. When sending the package out Capture One installs but asks for activation, this is happening even though when packaging the software I activate it and make the package using Composer. I have manually installed Capture One and licensed this software using an Admin account but when logging into another account (network/local) it asks for activation again. I then log back into the Admin account and run the software again but it asks for activation on this account even though I have activated and run it previous to logging out. Any help would be much appreciated as I cannot seem to work this out. Thanks

Sophos, in their infinite wisdom, is now distributing their installer for Sophos Cloud as an .app and not a .pkg. Installing, then updating, then capturing with Composer results in about a 250MB .pkg file and it's not as stable or clean as just running this 3.5MB installer on every machine. So it's easy enough to distribute this Sophos Installer.app to every machine's /Users/Shared folder (which I've done), but now I'm having issues getting the software to launch properly without error. I thought it would be as simple as this: jamf displayMessage -message "In a few seconds you will be prompted to install the new Sophos AntiVirus software onto your computer. You will be asked once per day to install this software until you've done so. It does not require a restart. Please run the installer that launches." && open -a /Users/Shared/Sophos Installer.app When I put this in the Policy --> Files & Processes --> Execute command, I get

Trying to delete a local user from a machine remotely using Jamf remote. Set parameters to completely delete the user and home folder followed by an inventory update. The log shows the user and home folder have been deleted, but the computer and inventory still show user exists. Same results when including an auto or a manual restart of the computer. If I log out as another user and then in as the user account I was trying to delete it asks to continue setup of the account like it is the first time. Such as "Sign In with Your Apple ID". What am I missing? Yes, I could just delete the user from machine manually, but what is the fun in that.

Hi guys....Newb question.... I am using Composer to create a package. One of the dependant files is located in the "/Users/~/Library" folder. When I find this folder in my user folder, and drag it in, it actually has my home folder name. I don't want this...I want this package to install this folder into "/Users/~/Library" of whatever logged in user is installed it. Is this possible? Many thanks,

Hi Guys, Our JSS is on v9.101 (upgraded from 9.96 3 days ago) and everything had been fine until this morning where we cannot login to self-service nor login to the JSS portal. after logging in with a local account the 'test' works fine and it can do all the lookups fine, any suggestions? It is using SSL to connect to the Ldap server. Thanks

We have been issued a new Creative Cloud license for our Device Licensed installs (Labs or multi-user computers) and I'm trying to find a way to scope to computers that are using the old license verses the new license. I can set a policy to run once per device that has Creative Cloud installed but hoping I can be more specific in my scoping. I ran Composer to see changes from before and after running AdobeSerialization but not finding something I could specifically focus on the see which license is in use. Has anyone done something like this or have any suggestions?

Hi all, Has anyone else seen this issue? I have just created a new .nbi on a MacBook Pro running OS 10.13.1. My OSX server is also running 10.13.1 with DS 1.7.8. I see the netboot from my client MacBook, and select it to netboot. It will load for about 10 seconds, then gives a kernel panic screen. It is also doing this when I try to netboot from an older iMac also running 10.13.1. Has anyone had a kernel panic occur at this moment in the netboot process? My system.log records the following during the attempt to connect to netboot:Nov 7 13:42:35 Mac Mini com.apple.xpc.launchd[1] (com.apple.serviceproxy[35842]): Service exited with abnormal code: 1Nov 7 13:42:35 Mac Mini com.apple.xpc.launchd[1] (com.apple.serviceproxy): Service only ran for 0 seconds. Pushing respawn out by 10 seconds. My client MacBook's crash report has "NFS mount failed: NFS server refused mount, check server configuration," but not sure what to do with this.

Hi we are in the process of taking over a primary school and already have our school linked to Jamf Pro via Active Directory(AD) and im wondering whether we can simply just add another AD server to our JAMF Pro for authentication. At present our server is internal BUT we do have a DMZ server setup for outside of school connections / access. Is it feasible and has anyone done this? if so how? Thanks.

I have an interesting situation where a student has purchased a piece of software under his personal apple id, and is reselling it to other students by signing in as himself, installing it, then signing out. I found this out by attempting to update the app in the app store and found that it prompted for another user's ID password. My question is - is there any automated way to check what ID was used to install an app? I have a smart group created with all the students who have it installed, but some may have installed it under their own ID.

Yesterday I locked a student's Mac using the Management Command. The Mac was brought in this morning and I accidentally typed in the wrong passcode. There wasn't an option to retry and the screen displayed 'try again in XX minute'. In Management history I can view the passcode, but there isn't an option to unlock. After an hour, I clicked on the trackpad to wake the Mac and there wasn't an option to unlock the Mac, just "Wrong Passcode. Try Again." Any ideas on how to unlock the student's MBP? Thanks! Corbin

Hi.We have Java 7 Update 13/now 15 in our environment.We are not able to disable the automatic update function of Java. We tried to use the com.oracle.javadeloyment.plist that we have modified before and filled the user template with it.But it's still want to update (checkbox marked). Thanks for further advice. Cheers

Hi Guys, Instead of using the old fashion policies, currently i am using the patch policies inside patch management whats seems to be working fine, but i am missing some functionality like the option for a deferral or a execution frequency or a trigger for using log-in hooks etc. Also the option to disable that the to be updated app have to quit, like Google Chrome etc does not need to be quitted. Anyone thoughts about it? Greetings,Thijs - bol.com

Hi Nation! I've been at it trying to run an AppleScript via policy in Jamf. The script is supposed to mount an smb share with the standard username/password prompt that you get with CMD+K. Below is a snippet of the script, with a debug dialog just to see that the conditionals work fine: tell application "Finder" if not (disk loggedinuser exists) then tell application "Finder" mount volume "smb://<ip-address>" as user name loggedinuser display dialog "Disk mounted!" end tell end if end tell The problem here is that it works if I execute the check-in with sudo jamf policy, but if I trigger it via login or network state change, the script runs fine and displays the dialog but it doesn't actually run anything. Now, from what I've read it sounds like user-initiated trigger and event-initiated trigger run as different users. Could someone explain to me why it doesn't work with event-triggered script and also if someone has a solution for this? Thanks,Sam

I saw this today announcing Office Insider and it put a bad taste in my mouth. Does anyone know if this is something we can suppress for Volume license installs or even O365 installs that are managed by IT?