Reset Networking and install .mobileconfig file

If you want to have the profile copied to the machine, rather than the JSS managing the mobileconfig profile you can do the following steps:

Prep Work:

• Create a DMG with Composer of putting the profile in it's place
• Create a script in the JSS for installing the profile from the /tmp/ location
• Create a script in the JSS for removing the wireless network
• Create an Extension attribute with a script that says whether or not the keychain has the wifi networks.
• Create a Smart Group that is based on the extension attribute above, so if the computer has the profile installed then it's a part of the group. This will be known as the "Fixed Computers" for my purposes, but you can change the name to whatever you want
• Create a Smart Group that is based on the extension attribute above, so if the computer is not a member of the Fixed Computers, they are in this one. This will be known as the "Unfixed Computers" for my purposes, but you can change the name to whatever you want

Setup:

• Create a policy based on the Unfixed Computers and make it execute the script once per computer. Lay down the package you created with the new profile as well as make the after script the one to install the profile from the /tmp/ location
• Create another policy based on the Fixed Computers and make it execute the script once per user and make it run the script to delete the settings from the keychain. See my modification below for a version of the script that can be run from the JSS and still run as the user

My Modified Script:

#!/bin/sh
loggedInUser=`python -c 'from SystemConfiguration import SCDynamicStoreCopyConsoleUser; import sys; username = (SCDynamicStoreCopyConsoleUser(None, None, None) or [None])[0]; username = [username,""][username in [u"loginwindow", None, u""]]; sys.stdout.write(username + "
");'`
sudo su $loggedInUser
<<enter the rest of your script>>

Edit: It should be noted that I wrote this up going off memory and without testing the script. I apologize ahead of time if this does not work on the first try.

@macdsl just a quick tip. JAMF commands/policies run as root.

So if testing via ARD run all as root.

The above screenshots you posted had some running as the user.

Also, accessing another users keychain can sometimes be problematic.