Hi Everyone, I'm working my way through the various aspects of my JSS. Next up is printers! I see a lot of options available for deploying printers, but basically I'm just trying to identify the best solution for my environment. So here's the scenario: I have a heavy Windows environment with Active Directory. All printers are shared off of various Windows print servers bound to AD. The queues are hosted on the print servers, users connect to the print server, install the printer of their choice, drivers download and install, etc.. From an AD-bound Mac if I go to add a printer (+) all of the shared printers on the domain show up, each listed as Open Directory. This all looks very promising so far. DriversIs it best to package up individual drivers? Or just deploy the massive driver packages that Apple provides (http://support.apple.com/kb/dl907)? Printer Capture and UploadWould it be recommended to add these domain printers to a test machine as mentioned above, and s

We have an issue with a policy that was set to run offline at recurring check-in but has since had the scope reduced to no computers and changed to "once per computer". For some strange reason, we still have a handful of clients that are running the policy and logging it with the JSS on a daily basis. I imagine a removeframework and re-enroll will definitely take care of the issue but the main question I have is this: Where do offline policies live and how can I ensure they've been removed?

Trying to get the username of the currently logged in user during a Login policy. I have tried all sorts of ways: $3, stat -f%Su /dev/console, and through /dev/console. I wasn't getting the desired results from the script. I echoed the variable back and checked the policy logs. Every user comes back with <br/> appended to it. I even tried trimming the last 5 characters, but it doesn't remove the break code. An example of the log:Script result: Current logged in user: hopeg14<br/>User home: /Users/hopeg14<br/> I have only started noticing this since the JSS upgrade to 9.100.0Any thoughts?

I'm wondering if anyone knows or has stumbled upon a script for Binding to AD that prompts to select an OU out of multiple selections. I work for a company that has multiple department OUs. The Windows side has a power shell script that prompts the user to select the OU, I would love to have something similar on the Mac side. I did some searching around to no avail, my guess is that there might be a better way to do this that I'm not considering. Any help on this would be greatly appreciated :)

Bonjour, Nous débutons dans notre entreprise avec le DEP, c'est encore en phase de test. Côté DEP, tout fonctionne. Un PreStage Enrollment a été créé, tout fonctionne à merveille, sauf la partie qui doit créer un compte supplémentaire administrateur. Cela ne fonctionne pas. Le compte administrateur n'est jamais créé, ce qui fait que l'utilisateur qui ouvre son compte avec l'AD récupère les droits d'administration… Ci-dessous, le PreStage Enrollment crée : Il y a sûrement quelque chose que je ne fais pas correctement.Des idées ? :) Merci par avance,Bien à vous,

Hi, We have just started with DEP in our enterprise. A user-initiated enrollment has been configured : We have set an prestage enrollment with a few options (directory, account settings…).When we run the setup assistance DEP on scoped computer, this computer does not enroll. But we can see it in inventory with the name « DEP - Serial Number ». I probably forget something… We have tested in 10.10.5 and it's works, but not in 10.12.5.Our JSS is in 9.97. Have you met same issue ? Many thanks for your support,

I found a feature request to allow mass-editing computer information, which was marked as "not planned." That's a little disappointing, as it seems a natural thing an administrator would want to do in response to a search result. Oh, well. In particular, I'd like to find machines of a particular model, or alternatively, those whose PO date is within a particular range. I'd like to mark these items as leased, update the lease expiration date, and add a PO number. It looks like JAMF's suggestion is to use the API. Has anyone done anything along these lines that would be able to provide their "recipe?"

Hello, Does anybody have AcroRdrDCUpd1701220095 (95) image for last Acrobat Reader DC Update? I can download #####95 for Adobe Acrobat DC but not for Reader DC. Please help :) Thanks!

Greetings JAMF'rs, We are trying to allow standard users to change their passwords, but first you some background: We have re-imaged each machine in our school, setup each account to be assured that each device has hit the JSS Server, setup the account with one standard password(not very secure though), and have Users & Groups, Sharing and Security & Privacy blocked in Sys Prefs. We are trying to find a script, JAMF sent one option, that asks each user to change their password on their initial login. Problem is, the password can be the same one as before. I would love a script to enforce complexity rules (Alphanumeric, with at least 1 Symbol, Uppercase, and Lowercase and a Number, with minimum of 8 characters)Has anyone had any success with doing this?I am not a scripter but I can follow along what is occurring within the script, just no luck in making my basic script work correctly.Thanks all for any and all help you can send out.R

Hi i was wondering if anyone has deployed Parallels 12 with the following restriction Locking down what images they can use Password Protect it so new images cannot be created by users . i was advised i can do this by a console but i cant seem to find it In addition i would like to know the followingbest way to package it best way to maintain images Any advise would be grateful as we are looking to test and deploy it this week

When we sync shared devices using Apple Configurator (1.7.2)It randomly will skip over apps without error or any feedback.If we look at the details of each device: total number of installed appswe can locate the ones that have skipped apps, this view is not that helpful.I know that there is a feature request for this, but is there any way to show this information as a display field using an extension attribute?

I am using the following Script. The license accept part works but it does not download the additional tools. On the JSS it says that they installed on the base path but when a user launches Xcode it prompts for the admin password to download the tools. Can anyone help me if I am missing something? Here is the script I am using: !/bin/sh # Accept Xcode License /Applications/Xcode.app/Contents/Developer/usr/bin/xcodebuild -license accept # Enable Developer Tools /usr/sbin/DevToolsSecurity -enable #Install Additional Components /usr/sbin/installer -pkg /Applications/Xcode.app/Contents/Resources/Packages/MobileDevice.pkg -target / /usr/sbin/installer -pkg /Applications/Xcode.app/Contents/Resources/Packages/MobileDeviceDevelopment.pkg -target / Here is the summary after the policy has executed:Executing Policy Xcode 8.2.1 testCreating directory structure for /Library/Application Support/JAMF/Downloads/Downloading http://xserver2.remsen.sfc.edu/CasperShare/Scripts/Xcoderemoveo

Hi! Anyone have an EA that will pull what NTP server is set to? Thanks!John

Seeing a small, but not insignificant number of machines that seem to get stuck updating inventory. Most are remote systems, often on slow WAN links, and it seems that it simply times out during the recon phase, but never completes. Regular policy check-ins seem fine. For example, from one of our machines in Hawaii: Last check in was this week (machine is a laptop, so I don't expect it to be online 100% of time), but last inventory update was 2+ months ago. Needless to say, this is causing issues for patching, smart groups, etc. In the limited testing we've done, it seem that re-enrolling usually clears things up. Before I try writing a script myself, anyone have anything that would take the dates from Last Inventory Update and Last Check-in, and populate a group based on a defined difference? We normally do an inventory update daily, so I'm thinking something like "if last check-in date - last inventory update = more than 2 weeks, re-enroll" or something along those lines

Hey All I have to change our management account password and I am not entirely sure of the correct process. This is what I think needs to happen, but I want to verify before I break anything. 1) Create a policy with management account option -> Specify new password -> Scoped to all machines2) Advance Search -> All machines -> Action -> Edit the Management Account Information Let me know if I'm missing something here. Thank you! Shawn

I have a lab of iMacs where mouse right click isn't enabled. When I go to system preferences I can see that both left and right side of the mouse are set to primary. Using composer, I created a DMG (using new and modified snapshot) option to get the HIDMouse plist. When I deploy the DMG using Self service, I can see in system preferences that the right click of the mouse changes from primary to secondary but still not able to right click with the mouse. If I manually change it back to primary and then back to secondary, I can right click. If there's anything I'm missing here? Also, how can I deploy to dmg to all computers in the lab without using Self Service? Is it just a matter of turning off self service, set the scope to the smart group, set the trigger to every 15 and the frequency to ongoing? Cheers, Henry

We would like to enforce automatic updating of all App Store apps on Mac OS. There is a setting in System Preferences -> App Store -> Install app updates (as shown in the attached image), but I am unable to find that setting in the JSS console (Config Profiles, Managed Prefs, etc.) I was able to configure updates for one app at a time via Mac App Store Apps, but not all apps. Is this a limitation in JSS or am I missing it? Thanks,Reid

So i sent the lock device command to find a missing iPad, at some point it took and locked the iPad out like it is suppose to do, but now that the device has been found the wifi is off and not able to receive the unlock command, is anyone else having this problem? I have a lightning to rj45 connector but apparently all it is designed to do is charge the device over a poe switch. Is anyone aware of the proper adaptors for hooking an iPad up to the network with a hard line?

Hello admins, I'm relatively new to managing macOS, but have been slowly learning JSS and using it to deploy policies to workstation. We are currently using K1000 to install applications to clients, however i would like to start using JSS for this. My questions is how do you manage application deployment on JSS? Can you configure JSS to not re install the app every time it checks in? How do you manage patching applications? I'd be happy if anyone could point me in the right direction. Thanks

is anybody getting this error when trying to run the hightsierra app ? i am getting it when i first use the accessutility.dmg, it then opens the App Store and from there i click 'open' and it starts the install process, eventually getting a popup saying linkfiledownload error 5 and am also getting the error when i run the downloaded beta.app. on a seperate computer. can i use the saved downloaded high sierra beta.app. on any eligible computer? i don't have to run the accessutility.dmg first?

I'm setting up a new JSS for scaling reason. I can access the JSS through chrome using the local ip but I can't seem to get it from the external IP. I had the guy that does our website create the DNS record to the Public IP of the server but I always get the "took too long to respond" message. I have the JSS Url changed to what the URL is in the dns record. Ideas?

Sorry if this has been asked already. I am new to JAMF. I was wondering the best way to control the OSX version that all of my computers are on? Can I force everyone to update to a certain version and keep them there until I want to force the next update? Can I force an update from a major release, example: El Cap to Sierra? Thanks guys!

Dump question, but I don't know where I can upload/sign a push notification CSR from our fresh installed jamf pro Server (which has no direct outbound connection at the moment). I downloaded the CSR file, which I should "sign later using Jamf Nation". But where can I do this? (I'm logged in with my jamf nation account) Kind regardsHansjoerg

Is anyone else seeing iOS apps in their catalog not being updated when it is set to be automatically updated? I see a wide discrepancy between what the JSS is showing as its current version, to what my devices have installed, to what the current version on the iOS App Store is. I am seeing this with at least two apps in my catalog (Outlook & OneDrive). Currently running 9.99 cloud hosted. Only my JSS or a larger problem?

Is there a way to wipe/erase a group of iPads that are in a static mobile device group all at once? Please advise. Thanks!