Posted on 04-26-2018 11:23 AM
I need to check all machines to see if they have a specific plugin(s) installed before they receive a policy. Is there a way to do that? For instance, I want to install google hangouts plugin for safari. I created a policy that uses a DMG file that I created in composer. I want that policy to run after the computer has been checked for the plugin.
Posted on 04-26-2018 11:31 AM
you could use the extension attribute and create a smart group for any devices that don't have the extension. Scope the policy to that group
edit: oops, just noticed you said for safari
Posted on 04-26-2018 11:38 AM
Yeah there is a reason I said safari lol. We are creating a work around for another issue going on in chrome.
Posted on 04-26-2018 12:03 PM
Are you capturing plugins during recon? (Settings > Computer Management > Inventory Collection > Software > Plugins)
I just did a quick test with that setting enabled. I installed the google hangouts plugin for safari. I did a recon of my system. I was then able to create a smart group around it.
I would probably create two smart groups Google Hangout Plugins - Installed and Google Hangout Plugins - Not Installed. That way you can also monitor your progress. Then can scope the policy accordingly or flip it around and exclude the smart group you don't want to get the policy.
Posted on 04-26-2018 12:25 PM
Recon does pick up internet plugins. How do I create a smart group around this? I tried but the plugin isnt listed in JSS
Posted on 04-26-2018 12:31 PM
I would install the plugin manually on one "test" system and recon it.
Then you can build a SG. Below is how I setup my SG.
Then I can clone the SG and flip the "has" to "does not have" for my Google Hangout Plugin - Not Installed.
I could also add plug-in version if that was important. This was a quick test to confirm so I didn't add that.
Posted on 04-26-2018 01:04 PM
Its not working out for me properly. Maybe im doing something wrong? When I create the smart group, It asks for criteria. When I click add, theres tons of other options besides safari hangouts plugin.
Posted on 04-26-2018 01:09 PM
Nevermind, i think i've figured it out.
Posted on 04-26-2018 01:16 PM
Right, that makes sense because the plugins are captured during inventory. Which would hit every system so I would except a long list of plugins.
A point of consideration is the plug-in inventory is only looking at /Library/Internet Plug-Ins by default.
Which means if you're dropping the plugin in another location. Then of course it wouldn't be picked up by recon. You technically can add other locations for plugins to be captured during recon but consider it will be run during recon aka on every system you have. Which means the plugin list may grow very quickly. In your OP you mentioned your using a dmg made with composer. Is there and special reason why?
I used the package here: https://tools.google.com/dlpage/hangoutplugin. Which does put the plugin in that path.
Posted on 04-26-2018 01:38 PM
While not completely accurate, you could also create a group on the Jamf package receipt. Anything that gets installed via Jamf (as well as regular "installer" installations) drop a receipt on the system. So you could create a group looking for the receipt of the package that deploys the plug-in.
The only issue with that is, if the plug-in later gets deleted, say by a user, it will no longer be accurate. The receipt will remain, but the plug-in is now gone.
But it's an option.