The "JAMF Binary Version" built-in attribute is reporting one version in our JSS as having "+LEG". Remoting into a machine and using "jamf version" command confirms the version. What is +LEG and/or 9.97.1482356336+LEG ?

Anyone seeing keychain errors deploying the new ARD 3.9 client update released today?

Hi guys, Just recently getting the hang of managing mobile devices, and I'l probably overlooking something obvious, but I can't see it. I'm trying to assign a wallpaper to a Smart Group in JSS, but the "Set Wallpaper" option under Automated Management cannot be enabled, even though I have a device listed as eligible (see screenshot). I've enrolled the iPad through Apple Configurator. What am I missing?

Wondering if anyone knows where the push certificate is stored on an Ubuntu 14.04 JSS server after installing through the JSS GUI?Thanks!

Content backfill required

Hello,The previous systems admin trained me for a week and was gone. I do not have much experience on these things. I appreciate any help I can get from all of you. The problem:I try to enter into the JSS dashboard through the web address and it gives me an error message. The following error was encountered: Exception: Exception during pool initialization Please verify the following items: - MySQL is running on localhost - MySQL is accepting network connections - The user jamfsoftware@localhost has been granted privileges to the jamfsoftware database Any suggestions in how to fix this would be amazing.

"You have to edit the package in either Casper Admin or within the pkg details in the JSS to check the box labeled "Allow package to be be uninstalled" Once you do that and save the changes, back in your policy, the uninstall option will be available." I have done this but don't see an option to delete the app. Am I missing something?Im trying to silently uninstall Creative Cloud Desktop app

Hi there, I've created a small script that pings a few IP addresses and compiles the results in a text file on the user's desktop for the purposes of diagnosing network problems. My plan is to push this into everybody's /Applications/Utilities folder so that when we have outages we can direct them there. I also had an idea to have the app automatically appear on a user's dock if they currently have no internet access, but I'm not sure if that's even possible. Is there any sort of custom trigger I could use to modify a user's dock whenever they are offline?

Hi all, Having an issue whereby we had the key showInputMenu set to true for the loginwindow.plist... This seems to have caused issues when se clients are waking from sleep or screens saver & are then beachballing. I set the MCX as unmanaged, & later deleted it. Running a sudo JAMF MCX -username (user) -verbose doesn't show the MCX. But the setting is being applied. Should I delete/flush the MCX Cache @ logout next? & if so, what's your favourite method? (It's a user level MCX). This linked script deletes the keys, so worse case I'm running this as a launch agent. https://github.com/macmule/DeleteLoginwindowPlistShowInputMenuKey

Hi all, I couldn't find a way to do this via JSS and there doesn't appear to be anything on here about it. Is there an easy way to pull the serial numbers from every computer in a smart group?

At the moment I have a configuration profile that restrict access to "Users & Groups" in "System Preferences", I would like to enable it just for the owner of the mac, with restrictions inside the pane "Users & Groups"see picture for more details (I would like to restrict what's inside the red square), so I want the user to have access to "Users & Groups" but disabled the action to create or delete an account.

Hi All, I've recently had a few users reach out to me about our MDM policy erroring out for anyone on Android version 7, the new version that came out. We have an mdm policy that is required for our company email to function on mobile so this could create some issues moving forward. Anyone else had this issue with the new Android version? Things I've tried: Uninstall and reinstalling our company email. Accepting the MDM Policy again. Removing and re-adding my device password (Which is required by our policy)

At work I have a script to bind machines during enrollment.is there a way to check to see if its bound to AD to skip the bind script and continue with enrollment? thank you.

Anyone have a copy of Administering-FileVault-on-OS-X-El-Capitan-with-the-Casper-Suite-v9.81-or-Later.pdf Jamf uses AWS for storage and the file is currently offline.

We are kicking the tires on a cloud distribution point and I had a few things I am unclear on and would love some clarification. Can you run a JSS which uses only a cloud based distribution point without any file share based DPs? My understanding is that yes, this can be the case. If we do elect to have a file based and cloud distribution point, is syncing only able to be done manually or can a schedule be set? Is there a way to have a setup without a master dp (with all content) where content resides on only one distribution point? For example, serve large packages and images from a local file share DP and all other packages from a cloud DP? Any comments are appreciated. Cheers.

Hopefully someone can jar my memory. There was a vendor that offered a small scale management solution that had a table in the lobby. The name had something to do with a leaf or tree (or something). Does anyone have an idea? Thanks /randy

Backstory - Student computers all have a program called Securly set up on their computer. This allows us to monitor and filter student activity and send reports to parents. To set it up I have to change the DNS settings to point to Securly and install a certificate. Once I do those two things it starts working. Students in the past have used VPNs to get around Securly. I have set up now where students can not install VPN's (to the best of my knowledge). Current Issue - A student computer is not being filtered or monitored and all of the Securly settings are still in place as they should be. It does not matter if the student is using Chrome or Safari, Securly is not working for either browser. There are no extensions installed and the I do not see any network settings that are set differently from what they should be. The IP address is being reported as 192.241.173.138. This is not a school IP address or a Securly IP address and the location appears to be in New York which is also

I'm finally getting around to migrating to Configuration Profiles from Golden Triangle MCX, but having some problems with implementation that I'm hoping someone can clarify... Trying to boil this down to be as simple to follow as possible: I want teacher and students to be able to log onto any computer and get slightly different settings depending on their group membership - I'm keeping it simple for testing by limiting profiles to Dock settings (1 each for teachers and students) and Application restrictions for students only. I'm using a test JSS with only a couple of computers enrolled for simplicity.I have scoped the Teacher Dock profile to a Teachers static user group and All computers.I have scoped the Student Dock profile, and App Restrictions profile to a Students Static User Group and All computers. All the users are coming from Active Directory, and defined in Static User groups in JSS as Student or Teacher. I would expect that if I logged onto a teacher account, I should

I know this is possible, but I cannot figure out the best means of accomplishing this. I'm hoping it is possible to build out a single pkg or dmg in Composer. Here's what I'm looking to do:Deploy a custom user including pre-set password, custom settings such as desktop background, dock icons, bookmarks, and login items. I've managed to accomplish this by using three parts: a pkg, a dmg, and a script. Currently, I build out the user profile exactly as I would like it to appear and then use Composer to create a dmg that contains the user account. Then I use CreateUserPkg to specify the desired username, shortname, password, type, etc. Finally, I run a simple script that performs a chown -R for the name of the user account being created. I'm positive there's a simpler way to do this and that's exactly why I'm reaching out here. What would be the best means to have one single package that can do all of the above? Thank you.

In our environment, when a user calls the Help Desk for a recovery key, it is given over the phone. We've used another FV2 product (Symantec Endpoint Encryption) and prior to that PGP. With both products, when a Help Desk analyst retrieves the recovery key, it is automatically rotated, so the user can only use it one time and doesn't put it on a post it note on their desk. With JAMF FV2 management, this does not happen automatically, although there is a policy to 'manually' rotate the recovery key. Does anyone else see automatic key rotation as a need or do you use a different workflow?

I am trying to write an extension attribute to determine which systems have outlook auto discovery disabled. osascript -e 'tell application "Microsoft Outlook"' -e "get background autodiscover of every exchange account" -e 'end tell' When I run this I receive results of true. Any advise on how to pass Applescript results to Extension Attributes? Any help would be greatly appreciated.

Hi, I'm trying to run a policy with a script to run the sophosupdate command written from info here https://community.sophos.com/kb/pl-pl/15895 The script is #!/bin/sh rm -f /Library/Caches/com.sophos.sau/CID/cidsync.upd sophosupdate I get no errors if i sent this via Remote but the output on a policy is Executing Policy Sophos UpdateRunning script Update Sophos...Script exit code: 127Script result: /Library/Application Support/JAMF/tmp/Update Sophos: line 5: sophosupdate: command not foundError running script: return code was 127. Looks like it doesn't know where to run the command sophosupdate from.. I've had a poke around but can't seem to find an answer. Anyone else tried this or know the path to where the command runs from? Thanks Al

Hi Everyone. I am trying to add a policy that installs Pulse Secure on our endpoints, because we require it for use with VPN. I have seen the instructions from @rtrouton on now to deploy with a custom config, but they do not work, as I am simply trying to get the app to install. I have a .dmg from Pulse that contains a simple .pkg file. When running it manually on an endpoint, it works no problem. However, when I upload the same .pkg to the JSS and use a policy to install it, it results in a broken application that will not open. I have tried using Composer as well to create my own installer, that has the same result. Does anyone have any ideas here? I feel like this should be a really simple answer, but it is evading me currently. Thanks in advance!

Just recently we've noticed an issue where accounts are not able to be added to FileVault. I have a case open with Apple at the moment, but wanted to see if anyone here had noticed this issue. The problem happens when FileVault is already enabled for a user and you try to enable other users from System Preferences. The users password is accepted, but when you click "done" you are immediately presented this message. I've also attempted to enable the user through Terminal to no prevail.

Maybe I'm missing something. I have set up an iPad in a shared prestage. In the setup assistant portion i have left location unchecked (per my JAMF buddy when we first set things up.) When I go to start the iPad up (not all of them mind you, only a handful out of a whole cart), they will not change to the new date/time. This causes the iPad to not allow me to log in with any accounts (at least that's what I'm thinking). I don't believe that the location services are being enabled. It shows logging in and then just jumps back to the enter passcode screen without ever fully logging in. I can take the same account and log in to another iPad from the cart without any issues, so I know it's not the user account. Any ideas?