Hi, I'm having this issue in our JSS 9.96 under Inventory->Generalsome devices are showing up with "OS - Verify Time Server: Fail (time.apple.com.)" and others are showing up with "OS - Verify Time Server: Pass (time.apple.com.)" when I check on the mac date and time it has the correct time and its using the same time.apple.com I any ideas on why I get the "OS - Verify Time Server: Fail (time.apple.com.)" thank you.

Last year the JNUC keynote was streamed live. I was looking round the Jamf site and JNUC pages and I don't seem anything about that. Does anyone know if they are doing that this year ?

This is more a conceptual question than anything else… I'd like to have loaner laptops set up that are ready for employees to use if they leave theirs at home or have hardware downtime. I was curious to see what other folks here might have set up for that. My initial hesitancy with just imaging out a machine is handling permissions… do I just create a local account that folks use on that machine, and then wipe it every other week? Have users log in but not have admin rights? (FWIW, our environment is all laptop users are admins on their laptops, hence the concern with permissions.) Any ideas or feedback welcome. And sorry for something kind of off-topic. Thanks!

Hi all,i'm working on a script that installs only the updates listed in the script parameters $4 to $11 i've got it all working nicely for just one update, it pulls softwareupdate -l, egrep only the updates listed in $4 to $11, then formats the result into an array (with just has the description and no spaces except between each update then installs as below) update=$( softwareupdate -i -v "${install[*]}" >> "$logpath" ) But if i try to install more than one update it comes back with 'OS X El Capitan Update-10.11.6' 'RAWCameraUpdate6.21-6.21': No such updateif i echo "${install[*]}" in the script it looks correctly formatted and if i run the command below straight in Terminal they install with no issue. softwareupdate -i -v 'OS X El Capitan Update-10.11.6' 'RAWCameraUpdate6.21-6.21' Any ideas why the update binary isn't liking it when using the array variable ?

Hi all, Is there any way to enable and disable a policy for a group of Macs but have that based upon the status of just one Mac ? If the one Mac has any Apple updates available then the policy for the group of Macs is disabled/not scoped to them or If there are no Apple updates available for the one Mac then the policy for the group of Macs becomes enabled/scoped to them If i use a Smart group to check if updates are on the one Mac then only that Mac would be scoped for the policy or not, can anyone suggest a different approach to make this work ?

Hi guys... Could be a silly question.... Can Casper Remote access a system on a different network, similar to the way that TeamViewer does? I have no issue remotely connecting a system on my network...However, when I take the same system plop it on an outside network (via wifi), waiting for it to check-in to update the JSS, I see the JSS record gets two unique IPs: IP address = Outside Public IP (70.49.x.x)Reported IP = Local internal IP (192.168.x.x) Then when I attempt to connect (after reloading Casper Remote data) It tries to connect on the Local internal IP, then reports back that SSH must be turned off. It is not.... Am I out to lunch....Does Casper Remote have no way to achieve this? I have read that some others are finding that Casper Remote will start with one IP, then fail (timeout) and revert to the other IP. To achieve this, wouldn't it need both IP's? Originally connect to the public IP, then tell the router that it wants to route to the internal IP? Thanks in a

I know this has been discussed in regards to auto updating via a script. (https://www.jamf.com/jamf-nation/discussions/18495/best-way-to-set-flash-player-to-auto-update-your-thoughts) However, I have not found anything recent for updating flash through a policy. I'm fairly new in JSS (really new and fumble my way through), I have Chrome and FF updating with the newest package I've made. With the configurations I've made, Flash of course does not install, when I try to push as an update, it sits at root and does not install. I was wondering if someone could point in the right direction for updating Flash (and Java) as well as getting it to install during imaging (without dropping it at root). We discussed the above script but want to have a bit of hands on, so we can test and make sure it does not affect. The patch reporting was nice for Chrome & FF, since I could use "less than" and go from there, of course that is not available. Ideas? Thoughts? Thanks all! :)

I just installed 10.13 on a 2012 macbook pro, within finder, the info for the Macintosh HD shows format: Mac OS Extended (Journaled) when i go to system report --> storage, the file system says Journaled HFS+ is this correct, i thought it was supposed to be AFPS ???????

Hi Everyone, Just wondering if anyone had deployed JSS on a Windows Azure VM? We are slowly moving our data centre to the cloud and just want to gather your expertise on this?Issues you encountered? Gotchas? etc.. Thanks in advance.

In the JAMFSoftwareServer.log I get a lot of these errors: [ERROR] [neralPool-4] [VppCommService ] - Error managing licenses. ErrorNumber: 9628 , ErrorMessage:License not eligible for device assignment. I saw from this post that is it likely due to older apps that are no longer in the App Store or are no longer eligible for device-assignments. I'm curious if anyone has found a way of quickly or systemically being able to identify these apps that have been pulled from the app store or not device-assignable? I'm going to try and turning the log into verbose mode and see if it provides more details to the error. Thanks.

Hello, I've come across a couple of ways to set a single (ex. time.apple.com) NTP server, however I need to set two servers- one for the internal network (a Domain Controller) and a secondary for when users are off of the network (time.apple.com). I've tried modifying the /etc/ntp.conf file to include a second and third line, and it shows up in the Date & Time Preference Pane (same line, comma separated), but it doesn't work; when I'm on the network, time is synced, but off of the network, time.apple.com isn't used. Any suggestion? Thanks.

I have some 10.13 machines and when i update Eset to 6.5.432.1 it seems to be breaking Keychain. Wanting an updated password, which it doesn't expect the current password. Or create a new password. What am i missing here?

my school is trying to run a standardized test and the secure web browser they use is choking on a RescueRecordings process thats running on student system (its a root level process). anyone ever heard of this process? my googlefu has failed me thus far. all the machines are running 10.12.5 thank you

I have the JSS setup so that when I enroll it in the JSS it also binds the user to AD so that they can login using our domain accounts. We have a mixed windows and Mac environment so we want one login for everything and binding to AD allows us to do this. Recently however when I either netboot and image a machine or just from enrolling using Recon the machines are failing to join AD. I've been manually binding them in System Preferences so that I could get them out the door but I want to be able to stop doing this. It doesn't affect machines that are already bound, they are all working fine. Any ideas? I couldn't find a thread on this so sorry if there already is one.

Doing some testing for a task that I have been assigned and I created an account through a policy. The account created without issue, but I couldn't deleted it through the Users preference pane in Sys Prefs. Is this a known thing or a bug? I could only delete it via Casper Remote. Doing some googlin' and couldn't find any other posts talking about it. Thanks

I know this problem is often mentionned on the forum, I've read a lot of them and try everything I've seen, but still, it doesn't work. To simplify, I have two same iPads, one with iOS 10 (10.3.3) and one with the new iOS 11. I've tried at the same moment, on the same network, to : 1) Enroll online : OK with iOS 10, not with iOS 11. (I make sure that the auto-signed cert is accepted and use the General Settings -> About to use the cert as main authority)2) Use Configurator 2 : OK with iOS 10, not with iOS 11. It says that the "Profile is not valid". It's the same profile I use with the iOS 10 and that works. So my question : is there something we can do to enroll our iOS 11 iPad ? Thanks a lot

Has anyone found a the place to download Office for Mac 2016 updates?

I'm looking for a way to create a smart group based on the URI of a printer. For example, if the URI of a printer is ipp://127.0.0.1, I would want a smart group that looks for any printers with 127.0. in it. Is this possible at all, maybe with an extension attribute?

I've been tasked with blocking Music and related apps on a student iPad. I threw together a restriction profile with "Allow Apple Music" unchecked under iOS Functionality as well as Music, Spotify, and Pandora added to Restrict App Usage under the iOS and tvOS Applications tab, and then loaded the profile on a test iPad, but Music, Pandora, and Spotify are still present and accessible. Anyone know what I'm doing wrong? This is an iOS 11.0.2 iPad using JSS 9.101.0.

Anyone else having issues where high sierra won't unmount external drives? DMG or smb/afp share? I can open disk utility and it won't show the drives there but they'll still be on my desktop and unable to unmount. I.E. My casper share will still be mounted so when I run casper admin it won't let me work with the share because it's already mounted, but can't be unmounted without a restart.

im looking for a script to remove avast from the mac can someone help me with that?

We're just getting started with jamf. The guy that came and helped set us up didn't cover anything about mac prestage enrollment. We have computers purchased via DEP, and we created a new PreStage enrollment. Under scope we have checked off one of the computers as a test. During the setup assistant, the computer doesn't get enrolled into our jamf. I have read through the documentation, but it sounds like it's supposed to "just work"... What are we missing??? EDIT: I reformatted the new computer and installed High Sierra. It enrolled successfully during the setup assistant.

Hello ALL:I am trying to create a restrictions profile on IOS devices. These devices are supervised and enrolled. I would like the end user to be able to download apps from the app store using their own apple id and password but as soon as the iPad downloads this policy the iTunes and app store login credentials get greyed out. I am attaching the portion of the restrictions profile.

Afternoon All. Been wracking my brain on this issue for the past couple days, and I just wanted to find out if anyone had any insight on the following issue. I am working on getting FileVault 2 distributed to my clients via a Configuration Profile, and the following is the behavior I am seeing. My workflow is currently as such; image Mac, walk through setup assistant, enroll in JSS via Setup Assistant, and get to a login window. My setup is the management account is our local admin account, I skip the account creation part as part of the PreStage setup. Once the Setup Assistant is complete, I can log into my management account, and policies start firing off as they should. I see the FileVault Configuration Profile in System Preferences, but for the life of me it doesn't seem to be applied in any way, shape, or form. In one of my walkthrough tests, I did see in the fdesetup status that deferment was set, and when looking at the deferment information, it stated that the deferment was

I am trying to setup an. uninstall for our bit9 agents. I tried calling the uninstall.sh in the bit9 folder that gets installed with the agent, but when I try to call it via a script it errors out.. . . . Running script Uninstall Bit9.sh... Script exit code: 1 Script result: Uninstall is not currently enabled for Bit9. Error running script: return code was 1. Submitting log ... . . . I looked in the script, it does a check on the b9cli -allowuninstall >dev/null but I couldn't find a way to set the flag to allow it...