Things have changed in the App Store in Sierra, and I can't for the life of me figure out how to log out of it with a specific Apple ID. Older instructions say to click on the Store button and click Logout, but there is not Store button anymore. Anybody have any ideas? Google has given me nothing. Thanks, Mike

Hi, In Self Service, I want to publish a licensed application for specific users to be able to install, but only to one specific computer. Same users should also be able to reinstall the app on the same computer. How should I put this together using scope and execution frequency? Is this possible at all? Hope you understand what I'm trying to achieve here...

Hi, we can push machine certificates, we can use them to authenticate (wi-fi connection) but has someone already found a way to silently renew them? Currently our users are getting a message that their certificate is about to expire and then they have to click the update button.

Curious if anyone else has run into the problem of the JSS trying to uninstall a manually installed config profile. I created the profile in the JSS, then downloaded it and installed it with help from this post. Everthing works, except I came back to check the JSS and found in the management tab that the JSS was trying to uninstall the config profile, but it was unsuccessful due to it not being installed via the JSS. I saw someone else had this issue. They solved it by going into the database and removing the UUID. I am hoping not to have to do this. I need to install this config profile manually using a script in order to install it when a user is on our VPN.

I'm planning on enrolling into DEP and VPP.JSS 9.96 (most macs are on 10.11.x and 10.12.x) could you please post your DEP and VPP "dos and don'ts" Thank you very much!

I am trying to upload the mobileconfig found here as a Config profile but when I do, I get an error "The file could not be parsed". I copied the text directly into TextWrangler and added info for Skype for Business and Lync and then saved with the .mobileconfig extension. I can't figure out why the JSS can't parse it. I must be missing something. Any ideas? Here's the full text including my additions: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>PayloadContent</key> <array> <dict> <key>PayloadContent</key> <dict> <key>com.microsoft.autoupdate2</key> <dict> <key>Forced</key> &l

I have a script below that enables me to remove .ttf and .otf fonts from the users directory. It runs fine but when I look at the logs in the jss it doesnt tell me what it removed only that it completed. How can I put something in this script that tells me which fonts it removed? #!/bin/sh find /Users/ -type f -name "*.ttf" -exec rm -f {} ; find /Users/ -type f -name "*.otf" -exec rm -f {} ; exit 0

We have found inconsistent "The imaging process is finishing installing software" display curtain at imaging on our testing MackBook Pro. Instead we get the Apple ID window and it stays up until the imaging process finishes. Mainly this happens if the computer is not in the inventory. JSS: 8.62

Hi everyone, I have just started imaging my school's fleet of 440 MacBook Airs through Netboot imaging and the imaging speed is maxing out at 15MB/s. When I open Activity Monitor I see that the process 'fontd' is writing between 30-40GB of data to the drive of each device during the block copy of our DMG. Our DMG is 37GB and the machines are writing at leat 70GB in total prior to the reboot at the end of the Casper Imaging workflow. If I manually kill the fontd and fontworker processes the imaging speed immediately jumps back to normal (i.e. at least 80MB/s). Our Netboot image is made with AutoCasperNBI with no customisations whatsoever so I really don't understand what could be causing fontd to be going crazy or initiating at all. Please help!

Hi folks, I have a dilemma that I would love some help resolving...- I have three NetBoot images, one based on OSX10.10.4 with Casper Imaging 9.73, one based on OSX10.11.6 with Casper Imaging 9.93 and the other with OSX10.12.2 with Casper Imaging 9.97- When I am imaging a single machine the transfer speeds that I get are 98MB/s average for the OSX10.10.4 NetBoot, 35MB/s average with the OSX10.11.6 NetBoot and 33MB/s average with the OSX10.12.2. In early January I am going to be imaging 500 MacBook Air's. I have three days to do it in. Should I continue to use the OSX10.10.4 NetBoot or is there something that I can do to sort out the speed issues with the other two NetBoot images? Thanks in advance!

Maybe some others out there who use AutoPKGr can help me out. Currently have a recipe to update Adobe Reader DC. When I run my overRide recipe I'm getting this error sent to my email: Parent recipe com.github.jss-recipes.jss.AdobeReaderDC contents differ from expected. Path: /Users/myuser/Library/AutoPkg/RecipeRepos/com.github.autopkg.jss-recipes/Adobe Acrobat Reader DC/Adobe Acrobat Reader DC.jss.recipe Any information would help since I don't understand what the problem is or what that error means?

Hello, for our password policy we are using a script we have found here on Jamfnation. This runs perfectly on MacBooks (Mid 2015) but with the new MacBooks 2016 and Touch ID not. After a several of logins (4 or 5 times) i can’t login anymore. I got a hint that the password is wrong (shaking password field) and then i got a black screen and i can only see the cursor. Only with a hard shutdown i can fix the problem. If Touch ID disabled, then i haven’t the problems. Does somebody has any idea? #!/bin/sh ########################################################################################################## ## Pupose: Create a pwpolicy XML file based upon variables and options included below. ## Policy is applied and then file gets deleted. Use "sudo pwpolicy -u <user> -getaccountpolicies" ## to see it, and "sudo pwpolicy -u <user> -clearaccountpolicies" to clear it. ## ## Usage: Edit variables in Variable flowerbox below. ##

Hello JN, I am struggling to find a way to update iLife Suite apps. I found this: https://acdesigntech.wordpress.com/2013/03/06/disable-mac-app-store-receipts-to-reenable-downloaded-update-packages/ I tested the method mentioned and it does indeed take the apps out of the scope of Software Update in the App Store and eliminate having to touch each machine with an AppleID and password (cool!). Now, I just cannot seem to find any way to update from the command line similar to this one: sudo softwareupdate -iav which I run in a script after image. What are all of you doing to keep these up to date automatically-either at image time or continuously? I would rather not have to package with composer overtime there is an update from Apple? I am aware of VPP and have that in process. Outside of that, what other options are there? TIA, /randy

If one of my Middle School students deletes (i.e. removes the icon from the spring board) a system app, like iBooks, they cannot re-install via Self-Service, and error "Application is a system app" shows in the management commands inside the JAMF Pro server. The only way to get it back, that I know of, is to use the App Store, which is locked for these students. Anyone know a work around?

Hi all, Back in the El Capitan days, I could download a "Install OS X El Capitan 10.11.6 installESD.dmg" file, upload it to Casper, and end-users can select it within Self Service to upgrade their operating system on their Macbooks. I am trying to find a "Install macOS Sierra 10.12.2 installESD.dmg", but I can't find it anywhere. I remember it used to be in https://developer.apple.com/download Does anyone know where the Sierra dmg would be? Or know how I can create one? The one I download from App Store would only be an app file. I don't know if this would work.

After switching from Profile Manager to Casper, I continued deploying printers using a configuration profile and scoped to computer groups. I have the full HP printer package installed on all the computers and I define the printers manually in Printers under Computer Management in JSS. The printers are all shared on a windows print server. The problem I am having is that the printers will show up and print fine using any application, but the printers do not show up in system preferences. Since we install some printers locally, it would be useful for locally installed and managed printers to show up in that list. Has anyone else run into this problem?

Hey there, all! I have an extension attribute that I've been using for a few years. With the addition of macOS Sierra, this lookup, specifically "system_profiler" and "SPSerialATADataType" no longer works for MacBookPro13,1 (2TBT3 models) in my organization. Is anyone else noticing this issue? No results are posted via the JSS or locally when performed in Terminal. It appears that Apple has deprecated "system_profiler" and I am wondering if there is a replacement lookup that others are using. #!/bin/bash Medium=$(system_profiler SPSerialATADataType | grep Medium Type | sed -e 's/^[Medium Type: ]*//') echo "<result>$Medium</result>"

So, my org uses Intego Flextivity as our antivirus product. It installs, then speaks to a central console for activation and monitoring. Also, when installed manually, the machine requires an immediate restart to complete installation. We can install the program fine via policy and have it speak to the web console, but if the package is installed via Imaging it appears to install fine but never speaks to the console (and thereby never gets activated or starts actually protecting the computer). Does anybody else use this software who might be able to fix this issue?

sudo: no tty present and no askpass program specified If so why and how did you fix it? I had them rebuild the Linux server and ran the netboot sus appliance but still no go. I can log into the web server but if I try to make a change a save such as the network time server, it does not save and it gives me the sudo: no tty present and no askpass program specified error.

Hi jamf friends :) - welcome in the year 2017 We are having the problem that Outlook's standard setting for First day of the week is Sunday.We would need to change this setting to Monday, but I can't find a Applescript option for this and even a snapshot with the composer does not help (I thought it should be stored in the com.microsoft.outlook.plist but it isn't or at least I can't find it).In the windows registry this option is called FirstDOW. Does anyone already solved that problem? Thank you all.BRDaniel

Following the @rich.trouton article on using AppStoreExtract to download apps from the App Store, I bake the apps into my master image with AutoDMG prior to deployment. The reimaged machines then have the apps, which open and run normally. The problem is the App Store does not recognze them, and prompts to update to the same versions that are already installed. I have tried with and without a _MASReceipt.

Hi all, When authenticating with cached credentials on a AD bound Mac (10.10.x, 10.11.x, 10.12.x) the group memberships are not cached it seems...I was expecting that AD group memberships should also be cached. Seems not the case. Anyone else seeing this behaviour? The case:I use several groups in the form of laptop_admins which all live in AD. The users in those groups should receive admin privileges when logging in to the system. (configured in bind script using dsconfigad -groups) It all works fine except when disconnected from the network during login. Everyone has 2 users, usern and admin_usern. only admin_usern users can be member of a laptop_admins group, usern are standard accounts. When authenticating with network connected, the terminal command id admin_usern gives the expected results (... ,331206878(XXXXXlaptop_admins), ...) . When authenticating with network disconnected, id admin_usern doesn't give that group, but refreshes/updates once communication wit

Stop me if you've already posted this, but I couldn't find anyone talking about it already, which may have just been how I was trying to search. As always, standing on the shoulders of giants, in this case, Per Olofsson's CreateUserPkg. Been using it to deploy one of our hidden service accounts during build with AutoDMG. With ≤10.11 it's always worked to hide our service account if the User ID is sub-500. Starting with testing out an image for 10.12, the User is not hidden. It does create the home directory where we want it (in this case /var/hiddenuser), but it's presented at the login screen, even after rebooting, and it's listed as a user under System Preferences > Users & Groups. Is anyone else encountering this? I could go back and script out JAMF creating/hiding the user, but the CreateUserPkg was a clean, easy way to do it during an image build. I can probably, easily I would guess, push something along the lines of sudo dscl . create /var/hiddenuser IsHidde

I read somewhere that Apple automatically cached Sierra in 10.11.6. If that is the case, is there an easier way to install this OS now? This is for a lab so ideally needs to be done so I don't have to touch the machine. Thanks.

Having a hard time creating this smart group. I would like to create a group of computers that already has Office 2011 installed (14.x.x) and does not have any version of Office 2016 installed (15.x.x). Does anyone know a good way to do this? I tried creating the following: App Title has "Microsoft Word.app"App Version is like "14."App Version is not like "15." However that gives me a group of machines including my own, which has Word 15.31.x installed. Any ideas?