Convert mobile accounts to local accounts (and make them Admins)

HariSeldon
New Contributor III

Hello!

 

At the school where I work we are planning to convert the mobile user accounts (connected to AD) to local user accounts, and make them admins.

I saw the fantastic script on rtrouton's GitHub. 

I tested it on a test machine and works like a charm, though the issue I have is that it asks for user input, and trying to push it via policy in Jamf, it simply waits.

 

So the question is: is there a way for me to achieve this via Jamf Pro, without the use of Jamf Connect (we currently don't have it)?

 

Thank you

2 ACCEPTED SOLUTIONS

MehdiYawari
New Contributor III

Also I am using the same script as our devices are no longer bound to AD and no AD account on the device, instead we are using Kerboros SSO Extension. I had to adjust the script in a way that it doesn't ask user input. As admin, I can decide if the converted account should habe an admin right or not. Well it work like a charm.

View solution in original post

HariSeldon
New Contributor III

No worries @efil4xiN, I figured :-)

Thank you @MehdiYawari & @Tribruin .

I actually figured it out, confirming also what @MehdiYawari: I removed the user inputs ("select" menus) and now it works perfectly also from Jamf!

View solution in original post

6 REPLIES 6

efil4xiN
Contributor

As long as you have credentials for both accounts, it should be possible. I would start here with Rich's write up 

HariSeldon
New Contributor III

Thank you, though it's not exactly what I'm looking for.

When I test the script on a test machine, the scripts needs user input in order to run. If I run the script via Jamf (with a policy), I can't see any of the user input, hence the script doesn't run, it just waits.

Maybe I'm missing some detail?

Tribruin
Valued Contributor

Since scripts run as Administrator when run from Jamf, you can't get user input via terminal. You would have to rework the script to prompt the user via another tool (such as AppleScript or, maybe, SwiftDialog). 

MehdiYawari
New Contributor III

Also I am using the same script as our devices are no longer bound to AD and no AD account on the device, instead we are using Kerboros SSO Extension. I had to adjust the script in a way that it doesn't ask user input. As admin, I can decide if the converted account should habe an admin right or not. Well it work like a charm.

efil4xiN
Contributor

@HariSeldon  My apologies, I posted in the wrong chat

HariSeldon
New Contributor III

No worries @efil4xiN, I figured :-)

Thank you @MehdiYawari & @Tribruin .

I actually figured it out, confirming also what @MehdiYawari: I removed the user inputs ("select" menus) and now it works perfectly also from Jamf!