I'm doing some testing before I roll out Jamf to all my Macs. I have a Lion VM in VMware Fusion, it enrolled with JAMF but no Configuration Profiles beyond the MDM profile were installed even although some profiles are applied to all computers. JSS 9.9.8

Hey all: I've tried both Extension Attributes https://jamfnation.jamfsoftware.com/viewProductFile.html?id=135&fid=598 and https://jamfnation.jamfsoftware.com/viewProductFile.html?id=135&fid=322, but they always list as None. I've confirmed the appropriate setregproptool is in /Library/Application Support/JAMF/bin and the client actually does have a firmware password, but the EA still reports None after running recon multiple times. Anyone else run into this? Anyone using something else to pull firmware password status? Thanks for any help, Michael

Currently i'm unaware of a way to do this for Yosemite, so i'm hoping someone else has discovered a way. This article effectively summarizes the situation:https://gist.github.com/steakknife/b8e9c37d287f8b7d70ee mDNSResponder is now gone in Yosemite, replaced by discoveryd. Adding in the "--no-multicast" argument to discoveryd does stop multicast (bonjour), but has the nasty side effect of messing up WiFi. I experienced that today while working from home where it had been able to connect to my personal WiFi, but after a reboot could no longer find ANY broadcast networks, or connect manually. Removing "--no-multicast" and unloading/loading it made WiFi usable again. Hopefully there is some bullt-in solution that doesn't require me to setup firewall rules to block the traffic.

Hi All, Is there a way to pull list of software's installed in user's macbooks via JSS?

Hi All, I have this annoying problem. For some reason the option to change the setting for "Require password .... after sleep....." is greyed out. When I remove a configuration policy which only does some setting on the Login Window. (A Banner, force logon prompt to name/password field, show shutdown button, disable automatic login, Allow Domain Users + domain server, Local-only users may log in and combine available workgroup settings) somehow the above configuration profile is also managing the security setting. I have also tried to add another configuration profile to set the option automatically but this is doing absolutely nothing ... So either I am doing something wrong or there some kind of bug/feature which is causing problems. Casper version: 9.82Mac OS Client version: 10.11.3 We do see random results in the network with different client versions as in 10.10.x which have randomly access or no access to the above named option. Any help is appreciated! re

Trying to get my HD and connected servers to be on the desktop by default. I have a script that, when ran on my main computer, works great..... When I try to use the trigger on the test machine it doesnt seem to want to relaunch the finder even though I have the killall Finder command in the script..... !/bin/sh Enable Desktop Mounted Media defaults write com.apple.finder ShowExternalHardDrivesOnDesktop -bool truedefaults write com.apple.finder ShowHardDrivesOnDesktop -bool truedefaults write com.apple.finder ShowRemovableMediaOnDesktop -bool truedefaults write com.apple.finder ShowMountedServersOnDesktop -bool truekillall Finder I have that set in as a Policy in JSS. When I run the custom trigger, it doesn't fully relaunch the Finder as it does on my main machine.

Anyone notice this happening Global Management?

I am trying to get Microsoft Lync uninstalled so that Skype for Business will be our main communication app. I have indexed the package, marked it for uninstallation and even tried using a script to uninstall but Microsoft Lync refuses to go away. Here is the script I tried in conjunction with the policy I created. I have since removed the script. What is the best way to remove a packaged pushed by Casper Remote or a policy? I am missing something? !/bin/sh !/bin/bash loggedInUser=/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }' rm -rf /Applications/Microsoft Lync.apprm -rf /Users/$loggedInUser/Library/Application Support/Microsoft Lyncrm -rf /Users/$loggedInUser/Library/Logs/Microsoft Lync-* exit 0

Does anyone know whether there is a way to determine the currently logged in Self Service user via terminal/bash? I am in the process of developing a script that would map a managed network printer, but in order to do so I also need to provide the Active Directory username in order to map the printer correctly. Since our Macs will not be bound to AD, I cannot trust that the local user accounts will follow our AD user naming conventions correctly. Otherwise I'd simply call id -un and call it a day. Any ideas? Thanks in advance for any feedback.

Installed 9.98 in my test environment, and set a device policy to no allow touch ID to work. Yet it still works.... anyone else see this?

This is a first for me. I have a Mac that was freshly wiped clean and imaged with a 10.12.1 image. After the first reboot it actually ran the EnrollmentCompleted policies on its own (which haven't been happening lately). All the Enrollment policies and check-in policies were successful as well as binding to AD. Everything looks normal EXCEPT the only profile it got was the MDM. That's it. When I check the computer record in JSS it says it is in the scope for 3 others it's supposed to automatically get. I waited over an hour and none of them installed as expected. I've had situations where a lone profile just didn't want to install so I went through the drill that usually works: I ran jamf RemoveMdmProfile and jamf mdm and jamf manage but still the only profile installed is MDM. I've rebooted several times. I am able to manually install the profiles if I download them from JSS to the computer but I need to be able to push and pull and change settings so a manual approach is not go

Hi All, I am having an issue with the new MacBook Pro's with the TouchBar getting prompted with "Hold For Authentication" when printing to a printer on our network. This had previously had happened on our older MacBook's but I added a script to authenticate the printer after it was added, which is still working on all non-TouchBar MacBook's. Has anyone else run into this issue? Thanks,-Eric

We use static IP's in our environment and have a need to verify default router IP's from time to time. Can anyone recommend an extension attribute or script that would display the default router/gateway info?

Hey all, I'm looking to create an iOS extension attribute. Namely, one for EASDeviceIdentifier, which iOS 7 and 8 use (and Exchange gathers) when setting up and Exchange account on an iOS device. We want to gather this in the JSS but it doesn't seem like it does so by default. Any leads would be great!

Hey Everyone! So, I have been using AutoDMG for a while to create our base deployable OS'es. When we re-image our Macs, we erase the hard drive and lay down our base image. We haven't been touching the recovery drive, to my knowledge at least. I read that OS'es built with AutoDMG create automatically, the recovery drive. The question I have is; for these re-imaging situations, how do we deal with the recovery drive? Do we have to update it? I am suddenly at a loss on what to do with this. Do I partition the recovery drive somehow? What are others doing when re-imaging their Macs? Right now, I have a couple of MacBook's causing us grief and I would like to use the recovery drive to fix this drive. However, the recovery drive is 10.10 something and the boot drive is 10.11.6. Thoughts?

Hello, By using DerFlounders post on upgrading OSX, I've started preparing a package for updating to macOS Sierra for those in our organization who are still on older versions of OSX. I got the following script from the same source but have modified it a bit...sadly, I know very little of scripting and while this seems to work, the issue is that while the script will prompt me if my power isn't connected (for example), it will not stop the script or policy from running. Everything else seems fine so far though. Would anyone be able to assist me with what I'm doing wrong? #!/bin/bash available_free_space=$(df -g / | tail -1 | awk '{print $4}') osvers=$(sw_vers -productVersion | awk -F. '{print $2}') PowerSource=$(pmset -g ps | grep "Battery Power") needed_free_space="$4" os_name="$5" insufficient_free_space_for_install_dialog="message goes here $os_name message goes here $available_free_space" adequate_free_space_for_install_dialog="$os_name message goes here." no_ac_power="Power me

Need Guidance, For disabling the Check auto Updates for Adobe Reader X from contents.I know i can using Adobe Reader >> Preferences >> Categories >> Updates >> Check for Updates.I need to select Do not download and install updates automatically for all my users.I dont wants to use this above path.Is there a way to disable this from Contents or from other resources like Plits or from any inside script. Regards,Sonu W

Our facility must sometimes 'clean' a system when data that's not supposed to be in the open, ends up in the open and on a system. The usual avenue for this data finding it's way onto a system is email and we must purge the targeted email in conducting the 'cleaning' of the system. This also means rebuilding the email database to ensure the deleted emails CAN'T be recovered. Under Outlook 2011 Mac, this was performed simply by holding the option key during launch and rebuilding the mail database. Outlook 2016 has removed this feature and the official support from Microsoft is that Outlook will determine when a database needs rebuilt and users shouldn't do this anyway. Well, we still need to do this when cleaning a system. Luckily someone made a post on how to do this on a SQLite database which Outlook 2016 uses. Post Here: http://www.cortig.net/wordpress/2016/04/25/outlook-2016-sqlite-database-commands/ I tried making this a little easier for our field technicians and wrappe

Hello, in the System Preferences we blocked the iCloud pane. The user now can't set his Apple-ID and so on. This setting we push over a profile. Now i have seen in Apple Mail or Apple Calendar that i can setup an iCloud account. In the menu Mail/Calendar i have the option "Add account...". In the next step i choose iCloud, write my Apple ID and the password and after them i can choose which iCloud services i wanna use. What ist the way to restrict this?

I have a user who is on 10.11 who is bound to AD and using a Mobile Profile and needs to change her password. When she tries she receives and error stating "The Password for account "XXXXX" was not changed. The server is not available. Change your password when the server becomes available. She is connected directly to the lan via hard wire so I know she should be able to talk to the server. Doing some research everything I see is pointing to unbinding and rebinding her Mac to the Domain so that it will be able to change password again. It appears that the name on her Mac also didn't get changed so I will need to do that. My question is if I do the unbind and rebind as well as the name change will that mess up anything with the mobile profile? We are dealing with an EVP so I don't want to mess up her profile if I can avoid it.

Does anyone have or know how to make an EA to show Retrospect client version?Thanks.

My organization uses JAMF for all staff machines, however we have a large number of independent contractors who bring their own devices, and therefore will not be enrolled in our device management. Currently we deploy all printers to staff via the JSS, which is quite easy. We have the printer, drivers, finishing and a default preset deployed via the JSS. We are installing new printers in our region's offices, and these printers take a lot longer to set up due to the extra settings (added paper trays, staplers/booklet) as well as adding our company's standard presets on every machine. Is there a way to make a quick installer either from what I already have in the jss, or a pkg installer from a snapshot the will install the configuration for the printers as well as the presets? If i make a pkg installer is there a way to have this install into the current user, rather than create a new folder?

We upgraded to 9.97.1488392992. Once the install was complete, the web service quit working and we haven't been able to make it work. Log shows web service is closing all attempts to connect. Has anyone experienced this?

I know you used to be able to run a simple rm -r (user)/.Trash command to empty the trash, but that doesn't seem to be the case in El Capitan and newer - you're supposed to drag all the files in the Trash to the terminal window and then run the command. Is there some way to automate that process so I could include it in a general first aid Self Service policy?

Is anybody experiencing an issue with Outlook after updated with today's version 15.32? Some users reported that they can not open new emails - clicking to the "New Email" button does not open the new email window. Outlook itself shows the status "Connected to Server".Thanks!