Hello Jamf Nation!We have several exciting new features including new Login functionality, Managed Software Updates enhancements, Packages page redesign, and more! You can find more information in the release notes when you enroll.Starting with the J... View more
In my testing with a base OSX system (10.12.5 and 10.13) I have noticed that the regular I had of configuring the Dock items is now broken in High Sierra. Using a mobileconfig file (https://github.com/opragel/profiles/blob/master/macOS%20-%20Dockfixu... View more
Adding to the fun and excitement of High Sierra... I have my first 10.13 (17A365) test box in Jamf. My (2) local admin accounts were siccessfully created during the Casper Imaging process, but I'm unable to authenticate with them. -Can't log into the... View more
After agreeing to the New Apple DEP conditions this week, our Mac computers are no longer being configured through JSS' Pre-Stage Enrollment. I have to install QuickAdd (Jamf) and all software manually. During the initial operating system installatio... View more
our school just bought about 30 iPads from another school. My intent was to just use these devices internally and not worry about enrollment in JSS and manage them on our own. However I have a handful of devices that state during setup......"The conf... View more
Recently we have switched to using the out of the box macOS Sierra when new devices are deployed and use a combination of policies etc. to customize app installs or other customizations. I noticed that all of the built in Apple apps require an Apple ... View more
Saw this on Wired and was curious if anyone has thought about addressing the issue: https://www.wired.com/story/critical-efi-code-in-millions-of-macs-is-not-getting-apple-updates It seems like certain Macs, when installing a firmware update, don't ac... View more
So I updated my MacBook Pro to High Sierra this week and today I was looking in /Volumes and found a Preboot folder containing various items that includes a AdminUserRecoveryInfo.plist. In looking at the contents I can't help but wonder if this is a ... View more
Right now all of our shared iPads only show a student's initials‚ however the Classroom app will show the student's picture. I found this guide (http://docs.jamf.com/technical-papers/casper-suite/apple-school-manager/9.92/Prepare_to_Enable_User_Image... View more
So I just encountered this this morning and I'm wondering if anyone else can replicate the issue? Google Drive updated yesterday (4.2017.37510). It's working on iPad Air 2's and newer iOS's (10.X and 11.X) but the issue I'm running into is the app is... View more
Is there any way to prevent the removal of the MDM/management profile from a Mac, if the user is an admin? We usually lock the "Profiles" pref pane using a Config Profile, but I'm wondering if there's a way to keep the user from deleting the manageme... View more
After ipad update to ios 11, all commands failed "There was a problem communicating with a push server". JSS is 9.100.0, do I need to update to 9.101? View more
I was schedule to take the CCT course but now it looks like they change it? what is the equivalent to CCT now? View more
Since moving to 9.101, I have:- Updated the NBI to have the latest Casper Imaging App- Updated permissions for imaging (and actually turned off the requirement for logging in anyway). On a couple of machines at image time, we have now had the message... View more
Hi all, This issue is based on another discussion topichttps://www.jamf.com/jamf-nation/discussions/24232/fyi-10-12-5-issues-with-smb-mounting I have now upgraded our test Macbook to macOS High Sierra 10.13.0. But now any smb mount drives do not work... View more
I'm trying to get machines to connect to a windows server on our corporate network via bash so they can run some tasks, thoughts on how to do so? The end goal is to generate a CSR (can be done with certtool) and pass it on to a Windows CA (we have ou... View more
Scenario: I have two domains in one forest both domains are configured for LDAP connectivity to JAMF hosted environment. We have to be able to bind machines to either domain based on user domain. When user enroll we would like to have AD bind policie... View more
So, it would appear that the official recommendation is to upgrade first, to allow firmware updates to execute, and then direct imaging of a machine is OK. While we could just only allow imaging of machines that already have High Sierra installed, th... View more
I'm trying to write a bash script that basically stores a file list into an array, loops through the array and then appends something to the files. I.e. loop through a directory and add a . to the beginning to make it hidden.I know this is fairly sim... View more
Been testing new iOS 11 and seems to be working fine with latest version of Jamf except it seems that when the iPad goes to sleep i.e. screen turns off the apps STOP installing or loading. Is there an option to turn this off or at least keep the ipad... View more
Has anyone found documentation for the new "Enable Escrow Personal Recovery Key" option in JSS 9.101.0 in order to support Recovery Key escrow in macOS 10.13 High Sierra? It looks like Jamf hasn't updated the documentation to report best practices fo... View more
https://www.wearesegment.com/research/Mac-OS-X-Local-Javascript-Quarantine-Bypass.html Of course the file is protected by SIP, so removal is not so simple. View more
Hello I thought one of the features with JAMF and iOS 11 was to allow devices to have their OS remotely updated. When I select a device this is on iOS 11 and I choose Management, there is not a feature to upgrade to iOS 11.0.1... Am I missing somethi... View more
I've been using NoMAD on my Mac, and like it a lot. Now I want to deploy NoMAD to a group of test users. I need to pre-set several preferences for those users. (Like the domain, local password sync, use keychain, etc.) There is a Managed preference m... View more
I've been working on a script that validates if a Mac's binding to AD is still active or not. This is an issue that seems to be caused when the computer is off the corporate network at the time of kerberos key cycling, typically set to 14 days (see d... View more
We recently set our pre-stage enrollment policies to name devices by S/N. However, we have numerous devices that are already enrolled that did not get that setting. Is there a way to force the naming convention on devices that are already enrolled? T... View more
Hi, Is there anyway to set the OS to log off the user when the lid is closed on Sierra? What I'm trying to accomplish is to run a script from JSS which triggers at the log off, however, 99% of the time users don't log off and just close the lid. Any ... View more
Is anyone else having issues with manual enrollment where the popup to allow the profiles to be installed disappears too quickly to press? We have some iPads that still need enrolled this way but they get stuck trying to install the MDM profile but n... View more
So we've been deploying FileVault using the following command:diskutil cs convert $startupDevice -passphrase $password So in getting ready for High Sierra, I'm looking at APFS. When running that command on the new file system, it gets the following e... View more
I've gotten request from multiple members of the Mac community to dive into how we do Asset management. So this is our story. You can also see some of it in my JNUC speech from last year Building the Mac at LEGO(R) (27:20) For our Asset mgm we want t... View more
Hi, I am having a hard time with deleting a simple value from the login keychain of the logged in user via the CLI, i have tried many commands but non of them will delete the entry, is there anyone who got the golden tip?! See screenshot for what i a... View more
