Hello!What are Yosemite and Al Capitan system build versions after installing 2017-003 updates, please?

Anyone else having this issue? I have the latest 10.12.5 mac OS along with the macosupd10.2.5 patch but no go.

Hello everyone, Recently changed the JSS URL (Settings > Global Management > JSS URL) and am having a difficult time getting our DEP instance to update with the correct settings. After changing the URL, I updated the Tomcat SSL cert (and restarted the tomcat service), downloaded the public key from Global Management > Device Enrollment Program, uploaded that cert into our DEP instance on apple, and downloaded the new apple cert to upload into the JSS. However, I'm finding that the "public key" certificate downloaded from the DEP page within the JSS still has the old URL. I can't seem to get it to update. DEP enrolled machines are currently unable to apply the MDM profile because of the SSL error. If you inspect the publickey.pem file downloaded from the JSS, I can see that it's still using the old url in the CRL part of the cert. If I check the configuration profile info on the target mac (/var/db/ConfigurationProfiles/.cloudConfigRecordFound) I can see that it is indeed st

How can I update the password on a local account.in our case we have "localuser", I see there's a place to edit/change the password, but when I edit/change the password and run the policy I get an error, because it tries to create the account.what I want is to change the password only for the "localuser"...is there an easy way to do that? nevermind =( I found it under Action-> select "Reset Account Password" thank you Jamf =)

All,One of my departments has an iPad cart they have been maintaining with Apple Configurator and they would like for me to duplicate their config in JSS. I've never used configurator before this and what I would like to do is pull the config from one of their IPads or copy the blue print from their existing workstation so that I don't have to re-invent the wheel and can maintain folders and screen layouts/restrictions etc Is it possible to upload the config of an existing IPad or export the blueprint

HiI'm busy creating extension attribute scripts, and would like to be able to use the same scripts whether I'm running them in JAMF or independently on our Macs. When I'm creating a JAMF extension attribute, I obviously need to add the <result></result> tags at the end, whereas if running the same script directly on a mac, I don't need these tags. Is there a way to check the environment that the script is running in so that I can then choose whether to add the tags or not? Any ideas welcome!Cheers,Mags

Hi all, just testing with the latest release of Flash from https://www.adobe.com/products/flashplayer/distribution5.html I installed it on a test machine and ran recon but it doesn't show up in the Patch reporting, it still shows the previous version for this machine. I've ;deleted and re-added the Flash Player Patchrestarted MySQL on our JSStested on a 2nd machine and ran recon If i take the Extension Attribute from the Flash Player Patch and run it locally it reports the correct version as 26.0.0.137 #!/usr/bin/env bash ############################################################################## # A script to collect the version of Adobe Flash Player currently installed. # # If flash is not installed "Not Installed" will return back # ############################################################################## RESULT="Not Installed" if [ -f "/Library/Internet Plug-Ins/Flash Player.plugin/Contents/version.plist" ] ; then RESULT=$( /usr/bin/defaults rea

Hey guys.Can Jamf create analytics for scripts the was successfully deployed?I want to create scripts to test if installation succeed or not (Check existence of the file)and to analyze my enterprise environment to see in which Macs it worked.If It does , Can I provide an exit code or something?

Hi there, We're going to have a set of 30 new iPads this fall, managed by our IT department (with JAMF). I'm going to be teaching with these, with all 450 students in the school, one class per hour. So they're going to be shared iPads, but: Our district isn't currently willing to support Apple School Manager. Wondering: Will I still be able to use Apple Classroom, to do all of the local control / distribution / monitoring stuff, without the ASM backend? Can I just assign device names instead of student names? Or will Classroom simply not work in this scenario? I know I won't be able to do the true Shared iPad stuff, with the logging in and out and such, but would like to at least have the screen management stuff working... Thanks!

Hi Guys, Recently moved companies and I supported strictly macOS devices. I have a need to support IOS here and am selling JAMF to the business as we speak. As I have no access to JAMF at the minute I cannot check, can someone let me know we can report on successful iCloud backups for IOS devices? thanks,

As we've got new Macs coming in this summer and they can't accept anything lower than Sierra, I'm now working on setting up a Sierra software configuration. One of the things we have set up on our JSS is that the Apple Mail.app is blocked using Restricted Software (because we want people using Outlook instead). On Sierra what I am seeing is that the restriction message is popping up on a regular basis even when Mail.app isn't loaded / isn't being used. Does anyone know what causes this behaviour and how to stop it? Would simply deleting Mail.app have any significant bad effects? We don't see this happening on 10.11 or 10.10. Thanks,Dan Jackson (Lead ITServices Technician)Long Road Sixth Form CollegeCambridge, UK.

All, I am trying to modify the com.apple.Safari.plist to AllowJavaScriptFromAppleEvents -bool TRUE and have been led to believe that the command below previously worked, prior to OS X El Capitan. To achieve this manually, one would do the following: Launch Safari, go Preferences>Advanced and check Show Develop menu in the menu bar. From the menu bar, go to Developer and check the Allow JavaScript from Apple Events. Authenticate with administrative credentials. Since this isn't a great workflow to have users manually do this on their own, I'd like to automate this if possible. I'm not having much success with the short script below and was wondering if anyone has attempted to do this with more success running macOS Sierra 10.12 and Safari 10. #!/bin/bash defaults write ~/Library/Preferences/com.apple.Safari.plist AllowJavaScriptFromAppleEvents -bool TRUE exit 0 The above command seemingly works (i.e. no errors and running a defaults read command shows that the AllowJavaScri

Using the 10.12.5 installer from the App Store and the Sierra 10.12.5 update for 2017 iMac with AutoDMG produces an image that appears to install correctly on 2017 hardware. However, there is still an issue with the Recovery Partition using this method. The Recovery Partition is listed when you run diskutil list in Terminal but when you attempt to boot to it using Command + R you get the prohibit sign. Anyone find a workaround for this? FileVault 2 seems to work fine.

I'm guessing that we aren't suppose to edit the MySQL data directly. I tried editing the trigger_manual field in policies and the policy details page (/policies.html?id=*&o=r) shows the new data but the policies list page (/policies.html) doesn't. I'm trying to change the name of my trigger for 50+ policies and I'm kind of tired of clicking on each policy and then editing the page and saving. Editing the sql was so fast compared but I'm afraid it won't work. If it won't work, is there a similar easy way to do this with the API? Here's the sql. update policies set trigger_manual='somename' where trigger_manual='somename2';

Hi, We are migrating print server in our environment, on existing server we have around 20 printers configured and users have mapped printers according to their requirement. We want to migrate the printer on the user’s machine to new servers from the existing server.I need help to fetch the configuration settings of the existing printer, so that I can recreate same for new printer.I created below script to get the printer name and destination from the machine and modify the name and destination to new print server and create new printer on the machine. However after script execution the new printer is appearing in the terminal (lpstat –v) but not in the printer preference of the machine.Thanks in advance. #!/bin/sh print_names=('ABCPS02_ABCP1-32310_HPM553' 'ABCPS01_ABCP1-32310_HPM553' 'ABCPS02_ABCP1-2450_HPM233') old_server1="ABCPS01" New_server1='ABCPS01P' old_server2="ABCPS02" New_server2='ABCPS02P' Default_printer=$(lpstat -d |awk '{print $4}') for print_name in "${print_names[@

Flash 26.0.0.137 came out yesterday. How long does it generally take before patches are updated in the Patch Reporting in JAMF Pro?

We have been using SCEP on our Macs since 2012. I needed to update the client to the current version so I created a new dmg with Composer. The software will push fine but won't run. I tried on a Mac that did not have the old version of SCEP and I tried on a Mac that did. Both pushed fine, both wouldn't run. When I install the dmg from MS, it works fine and will override the installed version and run or will run on a Mac without a version present. I have never really had a problem with software not running after push so I don't quite know what to do here. Any advice?

Hey guys. I have a script I wrote to use as an extension attribute to check and see if Remote Management is enabled on a machine or not. However, while it runs really well locally, it only returns 'On' when used in an extension attribute, even if I know for a fact Remote Management has been disabled. I've included the script below. Anyone have any thoughts? #!/bin/sh Status=`launchctl list | grep '^d.*RemoteDesktop.*'` if [ -z "${Status}" ] then echo "Off" else echo "On" fi

Hey guys.I tried everything in Jamf nation and other sites.I couldn't find any solution for my problem.I'm trying to write a script that test the file existence and if its true he should do the A if not he should do B.The problem is that nothing works when it comes to Current User location ( ~ ).Not the $3 or anything else worked..Oh and it should work with Altiris or any other deployment solution. You just cant find a reason to love Mac :(Can someone help me with this problem I'm stuck with?

We're setting everything up for our JSS install (v.9.91) - we have our Jumpstart session scheduled for next week. I have a question related to the database server that we are intending to have as a separate system that our JSS talks to. (We are using MariaDB 10.0.x.) Now, we've setup the DB server to be fine talking over TLS, as shown by connecting via the command-line tools: <JSS server> $ mysql --ssl -u jamfsoftware -p -h <JSS DB server> jamfsoftware...> status...>> SSL: Cipher in use is DHE-RSA-AES256-GCM-SHA384 Is there an "easy" way - through a configuration mod - to enable JSS to be happy talking to our database over TLS, rather than in plaintext? I don't, at this stage, need to have any more advanced client-cert setups - just a "regular" TLS session against the server-cert to protect the confidentiality of the connection as it travels across our network. I've tested the setup by changing the GRANT privileges to

Has anyone used Apple Configurator 2 and DEP? I can't seem to get my devices Supervised. The specific features we need is having our MDM un-removable and the iOS layout. Apple supports it, our devices enroll to the JSS but nothing is supervised. https://support.apple.com/en-us/HT201092 Any help would be appreciated!

Is there a way to do this. We are trying to deploy the agent to stress test it across our fleet and find any underlying issues with our base policies. We are wanting to deploy the agent to a set of 20 macs via ARD but this fails on "QuickAdd.pkg" could not be installed. Error message "Validating packages..." Is it possible to deploy this via ARD, we are not really wanting to manually install and have to input admin creds on to the macs we are trying to deploy to. Thanks

Hey everyone! Thanks for taking the time to read this. I've been looking at lot of the JAMF discussions and man pages and other materials, trying to find a way to compile them into something that works for my environment. We are using DEP and have PreStage Enrollments setup to install the JSS binary. So to enroll them I only have to power them on. The ultimate goal for me to walk away at this point assured that SmartGroups and Policy will take over. Trouble is that SmartGroups and Policy's are based on the naming convention for the devices in our school (Room#-D##). Multiple users will be using these so a device named after a user is not ideal. I was looking into renaming the computers based on the serial number but I can't quite seem to get the code right. I am working with JAMF 9.96 (I'll be upgrading to JAMF Pro over the summer)JSS is on a MacPro running 10.11.6 (will also be upgraded over the summer)End devices are running 10.12.3 (will be upgraded over the summer)

Hey guys..so this is a bit of a weird issue. Basically, we are migrating to use Cisco AnyConnect v. 3.1.05152 as our VPN solution. Problem is, the JSS (8.73 and 9.32) does not grab the IP address AnyConnect broadcasts. Instead, the JSS, both/either version(s), grabs the IP address in system preferences > network and displays that as inventory information. Even if the JSS has a forced check in from terminal, it still only grabs the IP there and not the one actually being broadcasted by AnyConnect. For example, IP A and B are being displaying in system preferences and are usually from the user's home router or where ever they are. AnyConnect is displaying IP Address C and it is not being caught at all by the JSS. Therefore, when you try to remote into any Mac with Casper Remote, it tries to SSH through their home network IP (i.e.; 192.168.1.10 or 10.1.0.10) instead of the corporate IP. IP Address C aka the IP from the AnyConnect client isn't getting to the JSS at al

Hi there, Trying to write a script that does the following Runs under the current logged on user Removes their FavoriteServers.sfl file (or even the whole parent directory) killall cfprefsd killall sharedfilelistd killall Finder Uses the SFLTOOL to add a new entry to the (now empty) FavoriteServers.sfl file If I make the below code unix executable and run from the users desktop, it works a treat. #!/bin/bash rm ~/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteServers.sfl killall cfprefsd killall sharedfilelistd killall Finder rm ~/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteServers.sfl sfltool add-item -n "OSAKA" com.apple.LSSharedFileList.FavoriteServers "cifs://OSAKA/" killall Terminal I think I will need something that actively targets the logged in user. I'm guessing as Casper is currently set to SSH as "HSCO.ADMIN" (local admin account) it will attempt to run all the commands targeting the