Saw this previous thread:https://jamfnation.jamfsoftware.com/discussion.html?id=5959edit, sorry - lemme paste the code I am using: #!/bin/sh profiles=profiles -C -v | grep attribute | awk '/name/{$1=$2=$3=""; print $0}'echo "<result> $profiles </result>" exit 0 It works for me, but by design it shows all Config Profiles installed on my machine. How can I re-phrase it to only show me the only one I am looking for with a Smart Group?Staff WiFi would be specific. Thanks!

Anyone else having problems signing in to DEP this morning? I try the 2 factor authentication, but I'm not getting any codes. I have 2 devices configured, and neither are getting the code. It also redirected me to sign-in to https://appleid.apple.com, and that's not working either.

Attending conference for the first time this year as we look on starting to manage our Apple devices. Wondering if there are any Canadians heading down? We are from Grande Prairie Alberta and would enjoy meeting up. Cheers. Derek

Actions: get a Supervised iOS device on our WiFi, try to enroll it.Expected behavior: device appears correctly in the JSS and can be managed.Actual behavior: device does appear in the JSS, but with the wrong name (its serial number), missing most other info, and listed as being neither Managed nor Supervised. AC2 confirms it is Supervised. the device's Settings confirms WiFi, MDM, CA profiles present and correct. There were no errors at any time, whether doing a user-initiated or profile-based enrollment. Configurator 2 showed no errors. No hints in its spartan JSS record. Checked the iPad's log via AC2, and it may have had the answer, but it didn't leap out to my untrained eye. Diagnosis: our network was allowing a successful connection to the JSS, but preventing some parts of the iOS device's contact with Apple. It may be more nuanced than this, but we think it boiled down to successful PUSH traffic, but some blocked traffic specifically with their courier.* servers. Solved it with

Is anyone else out there having to package and deploy Eclipse IDE? Previous versions were available in standard Mac .pkg files that installed into /Applications just fine. I've discovered that the Neon release of Eclipse appears to come only in a downloadable downloader (like Adobe is notorious for) and that in turn installs the application into ~/eclipse/java-neon/ The problem is that this downloader seems to fail to connect every time. I've searched the eclipse.org and I can't seem to find any way to just download a single file (like Adobe lets us do with the Flash distribution site).

I followed Rich's office 2016 guide, however when I go to install it, the install.log says it failed because it couldn't find setup assistant.app Oct 12 15:10:59 installer[5995]: PackageKit: Touched bundle /private/tmp/Microsoft Office Setup Assistant.app Oct 12 15:10:59 installd[1235]: ./postinstall: Oct 12 15:10:59 installer[5995] <Info>: PackageKit: Touched bundle /private/tmp/Microsoft Office Setup Assistant.app Oct 12 15:11:00 installer[5995]: Installed "Microsoft Office 2016 Volume License Serializer" () Oct 12 15:11:00 installd[1235]: ./postinstall: Oct 12 15:11:00 installer[5995] <Notice>: Installed "Microsoft Office 2016 Volume License Serializer" () Oct 12 15:11:00 installer[5995]: PackageKit: ----- End install ----- Oct 12 15:11:00 installer[5995]: PackageKit: 2.3s elapsed install time Oct 12 15:11:00 installd[1235]: ./postinstall: Oct 12 15:11:00 installer[5995] <Critical>: PackageKit: ----- End install ----- Oct 12 15:11:00 installd[1235]: ./postinsta

Hi all,As you may have seen in the event description (or if you're on Slack in the #jnuc2016bottlehare channel) we're trying to figure out how to make this enjoyable for everyone but also to make it accessible. When the event was created, no other events were scheduled for the time slot on Tuesday. Now there are many events scheduled for the same time as the share; more importantly there are 3 in JAMF HQ with 2 being held in the same location (the Bottle share and the Microsoft Session). Because of this, we may have to move the bottle share to Thursday evening (same place and time). I realize there are many people that wouldn't be able to make Thursday evening so suggestions are welcome. If people who cannot make the Thursday event want to do a smaller share on Tuesday during the Microsoft event that may be feasible...but we may still run into the same issue with space. Please post your thoughts below. If you CANNOT make a Thursday evening event please let me know

I've already done research and found some useful help from the Scripts section of JAMF and Mac Mule. Although this is great there is no longer etc/authorization but now it resides in /var/db/auth.db I have Macbook Airs with USB DVD Drives that prompt non-admins for Region Code and will not let them set. Does anyone have an updated script for this before i start making one myself ? Any help is much appreciated. Thank you in advance for your help

I have never setup a Managed Preference Profile policy within the JSS, I just was curious so I've started to take a look at it. Is this what everybody calls MCX profiles ? Why do the payloads for the Office applications Word, Excel, PPoint, have entries for versions 2008 to 2011? what about Office 2016 ?

Hi All,I am using PreStage Imaging for some new out of the box Macbook Airs.I usually do five at a time, netboot, no erase, add a few packages and they reboot, enroll and get a few policies, all is good, except:Randomly 1 or 2 out of 5 will change the language of the login window, and add a second language in the System Preferences> Language&RegionTo fix I have to login, remove the extra language in SysPrefs and then sudo languagesetup to choose English.If it happened all the time that would be one thing but it is so intermittent.Even more fun, it does not even choose the same language... most often french, but sometimes Czech, and have seen others....AND I saw this last year too, when we WERE doing a Prestage Image> wipe/image (to remove recovery from small HD student airs), different OS.Anybody else seen this or have ideas?

Does anyone have any successful experience of this? I installed Prism v6 into /Applications, created a StartupConfig.xml file (as per the advice here) and placed this under /Applications/Prism 6/, then captured this in Composer. However, when I install the package on another Mac from Self Service I get the Activate Prism dialogue box with the Serial number not pre-filled. I've verified that I'm using the correct serial number with our Software Manager. My StartupConfig.xml file looks like this, and was created via nano in a Terminal window: <?xml version="1.0" encoding="UTF­8"?> <configuration> <silent-activation>true</silent-activation> <serial-number>GPM6-XXXXXX-XXXX-XXXXX</serial-number> <check-for-updates>false</check-for-updates> </configuration> Any advice greatly appreciated!

Alright, I will try and make this as clear as possible. I just started this job as the guy I'm replacing is moving on. He has been setting up iPads for each incoming class by hand, this means typing the wireless, configuration, and apple ID profiles in and then assigning each device/user to their appropriate groups in the JSS. What I'm wondering is, is there an easier way to do this? Can I import all iPad serial numbers into the JSS as just "blank" and then assigning users to those devices later via a .csv file? Or does anyone have any suggestions on how I can do this without touching every single device? Also, we use EAP-PEAP wireless security which requires the users to authenticate with their AD Credentials is there a way to push a wireless cert to each device? Sorry if this doesn't make sense, I'm just looking for some basic guidelines on how to do this/how other people are handling enrollment.

I managed to disable airplay on the macbook airs in JSS but... I need to re-enable it and can not for the life of me find out where this setting is. (so much for being proactive!). Is there anyone that can help?

HI Guys, any easy & simple apps to stay on the top right menu bar, so users can quickly lock their screen? thanks!

I have a seemingly common issue. When checking the hostnames with scutil --get ComputerName and it's LocalHostName and HostName commands, the HostName is not always set. As such, the hostname tends to be set to some random name. Is there a command I can use that will automatically match the HostName to a ComputerName or LocalHostName variable? I'd like to push this out remotely in bulk over ARD.

Heya everyone...In my attempt to be proactive, I purchased tickets at a discount for JNUC 2016. I have since been approved to attend the training that week, which includes a pass to JNUC. So I'm looking to share the benefit and offer up my ticket at the discounted rate I paid ($400). Today's individual pricing is $800! If you're interested, please get in touch and we can try to work out the details. Also, I have a room at the Aloft from Sunday night through Saturday morning that week. Two queen beds. I'm looking to split the cost of the room for the other bed! I'm male, 49, non-smoker, don't sleep a lot. I think I'm pretty friendly... Discounted rates is $129/nt plus taxes, so roughly $160/nt - divided could be a really nice room, close to the conference and JAMF offices, for about $80/nt! I'm Chuck3000 on twitter so DM me or respond here.

Hello all, The issue is probably right under my nose, but I cant seem to display a "Complete Message" in User Interaction when a user installs a package from Self Service. Am I missing something? Essentially the progress bar runs across the top and disappears. I've been reviewing JamfNation and is sounds like 9.4 fixed the issue. Currently I'm running the latest version of the JSS. Interested to hear your thoughts.

This is my scenario:a productive work field of 10.11.6 with enterprise proxy settings with authentication.in the laboratory, we simulated a sierra upgrade with the following surprise:When the proxy settings are active, we haven’t access to our jss server (no Check-in), checkJSSconnection command does not find anything. It can not even open jss in the web browser, of course it works with firefox.soon we disable the proxy settings we again connect to our server jss.some did our own experience? or someone can give me some idea?

I would like to remove 4 built in apps on our student Mac docks: FaceTime, AppStore, Email & Messages. When I go to Policies>Dock Items>Configure the only option available is to add dock items that I believe were already added using Casper Administrator. I have also checked Casper Administrator but I did not see an option to remove these built in apps. I read on some of the JAMF Nation forums that dockutil script has been successful for some people to remove apps. I am using JSS 9.96. Is there an alternative solution outside of scripting to remove these apps? Any assistance is greatly appreciated.

When we open our Self Service App for iOS, we are getting the "Registration Not Complete" message now. "Registration Not Complete""Register with the following accounts to receive apps and eBooks." We only use Device Assigned VPP so not sure why this message is appearing. Do anyone have any suggestions on how to suppress this message? It appears every time they open the Self Service app.

Our Casper server is running on 2008 currently, we would like to migrate to Server 2012 but since 2016 will be available soon, we are thinking of just waiting for it as migrating our server isn't mission critical. Is 9.96 going to work on 2016 or should we just use 2012?

Trying to create extension attributes to verify the presence of Chrome Apps but I'm baffled. To clarify for anyone who man be unfamiliar, Chrome Apps are different than extensions, they're applications that run on the Google Chrome web browser. Chrome apps are stored in /Users/~/Applications/Chrome Apps/ BUT The directory names displayed in Finder do not match the actual file names, aka the ones displayed in terminal. As an example FINDER /Users/~/Applications/Chrome Apps/Authy.app TERMKNAL (ls -al) Profile 12 gaedmjdfmmahhbjefcbgaolhhanlaolb.app See screenshots for further clarification So, my question becomes, how do I create an extension attribute for something when Im not sure what the filename will be? Can I grep the display filename as opposed to the actual file name?

I am in the process of writing a short script and need your help. The script is pretty simple. The aim is to first search and see if a specified process (processName=$4) is running. If it is, echo a string that states that it is running. If the specified process is not running, the script will execute /usr/local/bin/jamf policy -$5 $6 where jamfPolicyType=$5 and eventorIDName=$6. #!/bin/sh #################################################################################################### # # DEFINE VARIABLES & READ IN PARAMETERS # #################################################################################################### # # A HARDCODED VALUE FOR "processName," "jamfPolicyType" and "eventorIDName" CAN BE SET BELOW. # # A list of accepted process name values can be verified in Activity Monitor. # # Delete the double quotes and replace with the desired process name and/or event name, e.g. # processName=Safari or eventorIDName=runSafariPolicy. For jamfPolicyType, pass "id

I got the newest version from our security team, and it came with a few components: Symantec Endpoint Protection Installer.app Additional Resources SEP.mpkg sep.slf serdef.dat setAid.ini setup.ini SyLink.xml If I launch "Symantec Endpoint Protection Installer.app/Contents/MacOS/Symantec Endpoint Protection Installer", it provides a GUI. I'd like to have it install silently, which just running SEP.mpkg accomplishes, but the GUI install seems to actually configure the managed portion properly. I've read you can install the SyLink.xml file on the machine after, but that requires manually intervention as far as I can tell, but there may be some command line options.

Hello Everybody! We are looking to disable booting into our Netboot partition. A user managed to find his way to the Netboot partition on his workstation by holding the option key during startup - I think he was trying to throw a PRAM reset? Anyway, he didn't do anything majorly destructive once he got in, but we found that he was able to enable wifi, and delete folders off the workstation's internal hard drive. The environment I'm administering was mostly already set up before the previous admin left the company. I've been building and managing packages, but setting up the Netboot server isn't something I was involved in. I figure it is necessary to not completely remove the Netboot functionality, in the event that a full workstation reimaging is ever necessary. Is it possible to remove the ability for users to boot into the Netboot partition on their own, and restrict it to something I have more control over? Maybe a JSS policy that I can just keep disabled until it is needed? Or