I'm trying to evoke a policy in the post install phase of a payload free package. I created the postinstall script in Composer and entered the line: #!/bin/sh ## postinstall jamf policy -event sierra-postinstall exit 0 ## Success exit 1 ## Failure But when I install the package it doesn't run the policy that I have set up with trigger "sierra-postinstall". I can run the policy just fine via terminal. Is this not possible with Composer? Or am I missing something?

Hello everyone, Yesterday we had an issue with a news article showing up on all of our primary school iPad's, the article was showing was in the widget area of IOS 10. Is there a way of disabling widgets from Casper ? or at least being able to restrict what appears ? Article in question (viewer discretion) Here Cheers

Hi All, I'm not much of a scripter, but I've put together a script for dockutil and ensured it's installed on all my machines. I'm running this script that seems to be giving me a failure, however, when inspected, it appears to have done everything, can anyone tell me what "Script exit code 1" means and after looking at the code what it would mean that it found no matching processes? I'd like to get these successful so I'm not left wondering if the install went bad. Here's the script #!/bin/bash user=`ls -l /dev/console | cut -d " " -f 4` sudo -u $user /usr/local/bin/dockutil --add /Applications/Microsoft Word.app sudo -u $user /usr/local/bin/dockutil --add /Applications/Microsoft Powerpoint.app sudo -u $user /usr/local/bin/dockutil --add /Applications/Microsoft Excel.app sudo killall Dock Here's the result.... Executing Policy Microsoft Office 365 Volume Installer (applications installation)Downloading Microsoft Office 2016 Volume Installer.pkg...Downloading http://jss.insign

Bonjour, Nous souhaitons déployer l'application "Self Service" sur nos tablettes, mais nous rencontrons une erreur lors de l'installation de celle-ci: " L'identifiant ITunes Store de l'application n'a pu être validé ". Pourtant, tous les ports réseau nécessaires au fonctionnement de Jamf sont bien ouverts ...Jamf est en version v9.96 et nos tablettes sont en v9.3.5. Avez-vous déjà rencontré ce problème? Merci de votre aide,Cordialement,M. GAILLARD

Hey there, So I have a piece of software packaged up nice as a dmg in our standard image. However for whatever reason it fails to install correctly. Link for those interested I've tested out a solution involving a script to adjust the permissions relating to the installer, and then run it and that seems to work fine. Would there be a way to put the script and install.app into a .dmg or .pkg so that I can have this be a part of our standard image? I realize that is what Composer is for, I just dont see the option to set it up as such. All I see is that I can use pre-installed software (Which is the original package manifest that does not work)

Hello, As part of my deployment I have a package to install Sophos Cloud Endpoint on the user's computer. When installed individually, without being part of the deployment, the package works. However when the package is part of the installation I commonly get the below image, stating that it was installed incorrectly. On top of that, it is incredibly difficult to uninstall too. Any thoughts or advice on what to try in order to fix this ?

Hi all.For the life of me, I just can't get Mac OSX Software Updates working from a SUS. I am also finding it difficult to find definitive documentation on setting a SUS up. I would appreciate if someone could give some input. I was using JAMF's NetSUS, but I have moved to Apple Server Software Update Server for testing. If I can get that working, I'll maybe look at another solution (Reposado, etc). Here's my server setup:- Sierra 10.12- Server 5.2- SUS Enabled ONLY, set to manual.- Downloaded and enabled iTunes 12.5.3 update. Here's my client setup:- El Capitan 10.11.4- iTunes 12.3.3.17- NO config profile setting Software Update server, etc. I ensure there is no CatalogURL, and check for an update. This shows that there is an update for iTunes: sudo defaults delete /Library/Preferences/com.apple.SoftwareUpdate CatalogURL softawreupdate -l * iTunes (12.5.3), 262996K [recommended] So, I know there is an update available, and I have downloaded that update (I assume) to my SUS. The

I want to have multiple Netboot servers one subnet. How do one go about that. On the other hand, if I use one Netboot server, will that support 300 clients at the same time.

Is there anyway to trace what exact network change caused the trigger to run a policy scoped to that? I have some machines that seem to be having issues, and they have a lot of network state changes in their history (I'm running 'jamf log' to update the IP address when triggered). Sometimes this policy runs several times within a few minutes, and I want to see what's causing it. We have 802.1x in our environment, and I would like to be able to eliminate this as a cause.

We normally create an Image and create an standard user for each computer one by one. How do I link each computer to Power School or Active Directory so I don't have to add standard user to each computer? I know we have those option there but I have no Idea how to use them: Map UID to attribute Map UID to attribute Map group GID to attribute

Hi all, Has anyone attempted or successfully set up ISC DHCP under Mac OS 10.11.6? In order to get the Mac to feed info into our Solar Winds network infrastructure, it has to meet a very short list of criteria, and in this case, the ISC DHCP is the only real "Mac friendly" option. We have successfully installed on a Mac Mini server in our lab, but we are having issues getting the configuration set right. Basically we're trying to hack together something from the web to fit our needs. We just want to serve out a small range of IPs to our iOS devices, and also have the Solar Winds keep tabs on the traffic and the status of the Mini (along with the Jamf Pro console, for second point of contact). We're open to suggestions, ideas, or any other thoughts that you may have. Many thanks! Jeremiah

We have at least 2 configuration profiles on our JPS that when loaded show blank buttons: The profile seems to be corrupted. We cannot delete it or clone it. Has anyone else seen this issue and if so, what did you do about it? I suspect we may need to recreate it and then manually remove it from the database but I prefer to stay way from direct manipulation of MySQL if I can help it.

This doesn't seem to be an inherently obvious thing to create so reaching out to the JAMF community for some guidance. I am trying to create a few different Smart Computer Groups which target specific subnets. I have tried using the "like" operator and the "IP Address" variable for the criteria. Please be mindful that we do not use the building or site feature in our JSS instance so that data is not readily available.

Hi folks, Has anyone yet installed this, and been able to block the included MAU from installing with it? I have a "choices.xml" file that worked with Lync, but when I tried using it with the new Skype for Business installer, it didn't block MAU from installing. Looking at the installation receipts I see two package identifiers that got installed: <dict> <key>date</key> <date>2016-11-01T15:21:24Z</date> <key>displayName</key> <string>Skype for Business</string> <key>displayVersion</key> <string></string> <key>packageIdentifiers</key> <array> <string>com.microsoft.SkypeForBusiness</string> <string>com.microsoft.package.component</string> </array> <key>processName</key> <string>Installer</string> </dict> However, when I

newbie question... dashboard report "How many machines have 10.11?" how can I create a dashboard report that shows me how many machines are running 10.xx thank you.

We have a few iPads that were donated to our school district. As you expect, since they were not purchased by the school district under our Apple Customer Number, we can't enroll them to Apple DEP. Is it still possible to manage them in JAMF with the same profiles we have as existing DEP enrolled iPads?

We are a K-12 institution and use Proxy.pac files to direct iPad traffic. After update to iOS 10 Safari has ceased to function. Our Apple SE stated this is known and the solution is to create a not so custom pac file from our firewall. Anyone out there have safari working behind a firewall without having to change current .pac files? We use Websense as our web filter. We have just about everything Apple routed straight through the firewall.

I have a few computers that check in to Jamf fine, execute policy no problems etc, but we can't Screen Share into them with Casper Remote or SSH in to them. Wondering if the firewall is turned on so I'm looking for a script that might check the firewall status if Anyone has one? I found a Firewall EA on jamf nation, but it's not pulling any data for me, perhaps its dated (2011).

I need to create a report showing a list of computers, and a column with the installed printers on each of the listed Macs. We know you can pull up a computer and check under Computer > Inventory > Printers to get details on installed printers (Name, Model, URI, and Location). I'm trying to come up with an Extension Attribute that lists installed printers, else return <result>NoPrintersInstalle</result> if no printers are installed. Here's what I have: #!/bin/sh RESULT=`lpstat -p | awk '{print $2}' | sed '/^$/d'` EMPTY="lpstat: No destinations added." if [[ ${RESULT} != $EMPTY ]]; then echo "<result>$RESULT</result>" else echo "<result>NoPrintersInstalled</result>" fi And this is what I'm getting: $ /tmp/test.sh lpstat: No destinations added. <result></result> And this is how I feel as I wrap up to go home. :) Any idea what I'm missing? TIA,Don

I am making a simple bash script. I want to use an IF statement that checks to make sure the user is logged in before it runs (else Exit). Anyone know what command line to use to make sure the computer is not at the login window, or that a user is logged in? Thanks in advance.

Hi Folks, I'm still learning Casper, so need your help. I'm trying to create a net boot image so that it can be uploaded at Net Boot server for Mac imaging. I installed Mavericks OS X 10.9.5 on an external drive, did necessary customization so that the size of the net boot image can be reduced. After that, from another Mac (running on 10.9.5), I fired up System Image Utility, selected that external drive & tried to create net boot image. The wizard run & at step "Copying Source Volume" it gave below error Image Creation failed - The operation couldn't be completed (system image utility error 2.) Any help in this regard would be highly appreciated.

For those of you with with your repositories living on windows servers, what tool are you using to sync them? We have 7 remote sites that are connected via a slow satellite link. I'm not much of a command line guy so i was looking for something with a GUI. Ideally it would be somewhat of a central console that i could see all scheduled syncs and the status of them. I tried allway sync and it just wouldn't work with the latency. I am now trying richcopy, but it seems like i would need 7 separate instances of richcopy running in order to accomplish my goal? Thanks for any advice!

Hello, I thought I had this figured out... I have an item in the JSS Notifications (DEP Expired notice) that I do not know how to remove. I made sure that my account has the permission to "Dismiss Notifications" under JSS Actions but I still do not see the option to get rid of it. Renewing the DEP is not an option and neither is deleting it. Anyone know how I can just dismiss the notification? Thanks!

I simply want to check and see if iTunes is running, if it is -- do nothing, if it isn't -- custom trigger to update it. This seems to be working for everything I throw at it except iTunes. Looks like ps is picking up iTunesHelper even when iTunes is quit. Any suggestions here? process="iTunes" processrunning=$( ps axc | grep "${process}" ) if [ "$processrunning" != "" ]; then /bin/echo "$process IS running, we do nothing now" else /bin/echo "$process IS NOT running - run custom trigger here to update" fi

Hey Guys, Probably a dumb question - but was looking for a way to enable File Sharing (both AFP and SMB) consistently for Mountain Lion via a script or terminal (or config profile, any method that would turn it on). I know the Resource Kit contains a script, but it doesn't seem to enable the LaunchDaemon without the -F flag which I believe would need to happen at each login. I tried changing the Disabled key to false within the com.apple.AppleFileServer.plist but that didn't seem to stick. Probably over-thinking this. Thanks for any suggestions!