Hello Jamf Nation!We have several exciting new features including new Login functionality, Managed Software Updates enhancements, Packages page redesign, and more! You can find more information in the release notes when you enroll.Starting with the J... View more
Background: we have a small fleet of Macs (High Sierra) which we are trying to bind to an AD forest. We don't have much control over this instance of AD as it is managed by a different entity than ourselves, so what I'm describing here assumes that w... View more
Close to opening a support ticket, but thought I'd check to make sure this actually works for anyone before I do. We've just recently setup SSO, which works well, provided I've pre-created the account under Settings->System Settings->Jamf Pro User Ac... View more
I have a bunch of lab computers that are joined to our domain and when users log in, their home directory isn't loading. I have "force local home directory on startup disk" and "Use UNC path from Active Directory to derive network home location" enab... View more
Hey All, Longtime listener, first time caller. I have an issue with a few machines. We are in the process of migrating domains and a few of the macs that I have done have touch bars. The Touch ID was working with their previous AD mobile account but ... View more
I've been fighting AD for a while here and hope someone might be able to provide a bit of assistance. As I have dug through all of the documentation on here about AD binding, I have changed my scripting multiple times to try to enhance the connection... View more
Hi nation, I'm currently using NoMAD in my Jamf environment, but it the local password sync doesn't seem to be doing its job. When the password has been changed, I would assume that NoMAD at the least would prompt for a password change after a reboot... View more
I am wondering if it's possible to do something similar to AD w/ mobile accounts on an LDAP setup. I am test driving Foxpass and hoping we can get a configuration that is location agnostic. View more
Hi All, I have an issue with the Directory Bindings. After Imaging the machine is bind to AD but User Experience and Administrative settings are not applied. Our JAMF Pro server version is 10.5.0. It worked as expected before and at some point it sto... View more
I have five K-12 schools in REMOTE locations in Northern Canada. Total of 600 users - 350 computers, 250 iPads. Currently running computer labs with shared devices, authentication via OpenDirectory on OSX (10.10 or 10.11). We got out of the Windows b... View more
Hi All, I have an odd issue. I converted a local account to a mobile account on a Macbook Pro running 10.13.2. It is joined to the domain. When I attempt to login using the converted account I get denied (shaken off). I am able to login using my doma... View more
I am fairly new to managing Macs with JAMF. We are attempting to both name and bind the computers to AD with policies during enrollment. The issue we run into is, our naming script works, however, when the computers bind to the domain the NetBIOS nam... View more
We have 3 domains in our org , how do i automate the domain join based on Site codes. For eg :: We have total 553 sites in total and based on site code, i need to automate the domain join. Like site code starting with xyz should bind to first domain.... View more
I know that this topic has been talked to death, but, I think one of the biggest problems we have when dealing with our InfoSec offices to abandon the bind is having a comprehensive report on the "why". I have seen many people say that they have made... View more
With 10.13 now out and moving along, and the requirements of local accounts created through the GUI for certain admin functionality, FV2 not playing nice with mobile accounts, and a few other quirks, has that changed peoples perspectives on binding? ... View more
I am trying to use parameter $4 and $5 for username and password in my script to unbind from AD. If I enter the username and password directly into the script it works fine but if I use the options it runs forever and never finishes. #!/bin/bash ####... View more
I don’t want this thread to turn into a discussion about the merits of binding to AD or not binding to AD. Let’s assume an organization has a legit need to bind to AD (802.1x EAP-TLS for instance). Jamf Cloud (or a DMZ JSS) gives us the ability to de... View more
I have a test machine bound to AD using the native tools and I am VPNing into my network.. I have created a mobile account on the machine while attached to the VPN. The account shows up in the directory utility and shows all the AD parameters, under ... View more
Hello, We currently have no central authority for machine authentication in our environment, and all of our users have local admin accounts (I know, I know). Our existing domain services solution is GSuite, and we have a moratorium on any on-prem sol... View more
Hi Everyone, We modified our AD binding in the JSS to use the UNC path. Initially, the thought was to allow a network home directory to be used when students/employees were logging in. This has worked in our testing. Going forward, we found some erro... View more
Hello all, Having trouble binding a machine to AD, I'm currently using a Binding Profile set up in config manager with the following fields configured General Directory Certificate (is this necessary?) General - obvious info Directory Directory typeA... View more
The subject kind of says it all. I'm looking for valid client id tags to use in the preStage enrollment directory payload. $SERIALNUMBER works, but i'd prefer to be able to get username-mbp working and would like to know what the options are. Thanks! View more
Hello, What are the reasons you would go for a Non-Bound AD integration using a tool like the one from Apple Enterprise or this one I just came across: https://www.nomad.menu We currently bind everything to AD within our Apple Environment, and rarely... View more
We've been struggling with an odd AD issue at one site for days now, and I'm running out of ideas to try. I'm hoping someone has seen something like this in the past and can point me in a direction. I suspect DNS, but haven't been able to find anythi... View more
Hello,We currently are not using ldap for JSS cloud and we intend to keep it that way. However, we want to use AD login for the NetSUS server. I have followed the instructions from here: http://content.jamfcloud.com/NetBootSUSLPServerUserGuide_v4.0.0... View more
Hello,We currently are not using ldap for JSS cloud and we intend to keep it that way. However, we want to use AD login for the NetSUS server. I have followed the instructions from here: http://content.jamfcloud.com/NetBootSUSLPServerUserGuide_v4.0.0... View more
Hi, We have the current challenge to introduce Macs into a rather Windows based backend environment. We decided to not join them to the AD domain (neither the users nor the machines) for various reasons, so users will authenticate to their Mac device... View more
At a loss here. I need to redirect AD users network homes to a different path than the one in their AD profile for a client using Casper. This is easy with Centrify but can't work out a scriptable method. It's easy enough to mount wherever with a Lau... View more
I am moving to a no touch imaging process. I have 90% of the process complete. The issue I am having consists of Parallels 12 with Windows 10. This will also be for when end users decide they want/need Parallels I can just push it to them. Issue:The ... View more
We are in the process of migrating users and computer from one domain (Windows 2008 domain and forest functional level) to Windows 2012 R2. Users are migrated with their SID History as well as groups. Users, also, have their home drive mapped to H: i... View more
Common problem: a user is getting locked out of Active Directory "mysteriously" The challenge: a way to grep or find through the whole computer's log files to figure out whats been making requests recently. so far I haven't been able to pull it off. ... View more