I have also tested using a Terminal windows and sudo jamf policy
This obviously works fine :)

Hi @P.Featherstonhaugh ,

Since your script works in terminal, you may just have to whitelist Jamf's ability to call on Apple Events. A great starting point would be uploading @rtrouton's Privacy Settings Whitelist - Jamf Notifications to Configuration Profiles (I think later versions of Jamf may automatically do this).

If that doesn't resolve it, you try opening the Profile Preferences as the logged in user (since Jamf runs things as root, its often helpful to run specific events as the current logged in user):

su - $(stat -f%Su /dev/console) -c "open /System/Library/PreferencePanes/Profiles.prefPane/"

Or try:

#!/bin/sh
/usr/bin/osascript <<EOF
tell application "System Preferences"
    activate
    set current pane to pane id "com.apple.preferences.configurationprofiles"
end tell
EOF

Hooroo Shaquir :)

Thanks for the response. I may have confused you with the actual issue though I think :) lol

The Preferences Pane for COnfiguration Profiles is working fine. The issue is that the initial part of the script that displays a nice message for the end-user is not working - will not display when the Policy initiates in JAMF on the end-user Mac computer.

Remember - this is a Mac that has been enrolled into JAMF, BUT, the end-user has not Approved the MDM Profile. So applying the Privacy Policy Whitelist to the Mac will not work as the initial MDM Profile has not been approved :)

Though, as I mentioned, when I activate the command "sudo jamf policy" in a Terminal instance it works a treat. Without this, and just letting the JAMF Policy run a recurring checking and it fails to display the message but will do the Prefs Pane as expected.

I think maybe I need to have the message part of the script run as the current logged in user. Not being too good with the Apple side scripting I'd appreciate anyone advising how this can be done in the script :)

Any further help would be greatly appreciated.

Cheers and thanks all in advance - Paul

Hi Paul:
Try swapping that Applescript with jamfHelper which is automatically installed. It should be natively approved:

#!/bin/sh
icon="/CompanyLogo.png"
jamfHelper="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper"
answer=$( "$jamfHelper" 
-windowType hud 
-title "Company" 
-heading "MDM Approval" 
-description "1. Click on the Profile labeled MDM Profile in the Device Profiles Column. It is identified by a yellow alert triangle.  



Click on the Approve button. 
When prompted, click on Approve again." 
-icon "$icon" 
-button1 "OKay"  )

The jHelper GUI is a good tool to create Jamf designed dialogs.