Posted on 05-05-2022 01:29 AM
Hello!
At the school where I work we are planning to convert the mobile user accounts (connected to AD) to local user accounts, and make them admins.
I saw the fantastic script on rtrouton's GitHub.
I tested it on a test machine and works like a charm, though the issue I have is that it asks for user input, and trying to push it via policy in Jamf, it simply waits.
So the question is: is there a way for me to achieve this via Jamf Pro, without the use of Jamf Connect (we currently don't have it)?
Thank you
Solved! Go to Solution.
Posted on 05-05-2022 02:22 PM
Also I am using the same script as our devices are no longer bound to AD and no AD account on the device, instead we are using Kerboros SSO Extension. I had to adjust the script in a way that it doesn't ask user input. As admin, I can decide if the converted account should habe an admin right or not. Well it work like a charm.
Posted on 05-06-2022 03:19 AM
No worries @efil4xiN, I figured :-)
Thank you @MehdiYawari & @Tribruin .
I actually figured it out, confirming also what @MehdiYawari: I removed the user inputs ("select" menus) and now it works perfectly also from Jamf!
Posted on 05-05-2022 04:18 AM
As long as you have credentials for both accounts, it should be possible. I would start here with Rich's write up
Posted on 05-05-2022 04:54 AM
Thank you, though it's not exactly what I'm looking for.
When I test the script on a test machine, the scripts needs user input in order to run. If I run the script via Jamf (with a policy), I can't see any of the user input, hence the script doesn't run, it just waits.
Maybe I'm missing some detail?
Posted on 05-05-2022 09:53 AM
Since scripts run as Administrator when run from Jamf, you can't get user input via terminal. You would have to rework the script to prompt the user via another tool (such as AppleScript or, maybe, SwiftDialog).
Posted on 05-05-2022 02:22 PM
Also I am using the same script as our devices are no longer bound to AD and no AD account on the device, instead we are using Kerboros SSO Extension. I had to adjust the script in a way that it doesn't ask user input. As admin, I can decide if the converted account should habe an admin right or not. Well it work like a charm.
Posted on 05-06-2022 02:46 AM
@HariSeldon My apologies, I posted in the wrong chat
Posted on 05-06-2022 03:19 AM
No worries @efil4xiN, I figured :-)
Thank you @MehdiYawari & @Tribruin .
I actually figured it out, confirming also what @MehdiYawari: I removed the user inputs ("select" menus) and now it works perfectly also from Jamf!