Hi everyone, I have a need to run recon as a standard user. However standard user accounts do not have permissions to list software updates, and so the softwareupdate -l process hangs, waiting for admin credentials. This is crappy when you are running a recon behind a FS jamfHelper window. Is there a way to force recon to skip the softwareupdate -l, or only recon for EAs, or something?
Currently I'm doing this with Applescript:
set completionTime to (current date)
do shell script "mkfile -n 4k /Users/Shared/Completion.txt; chmod 777 /Users/Shared/Completion.txt"
do shell script "echo " & shortName & "-" & completionTime & " >> /Users/Shared/Completion.txt"
do shell script "jamf recon > /dev/null 2>&1 &"
set SWUPID to do shell script "ps -ax | grep -v grep | grep softwareupdate | awk '{print $1}'"
set LoopCount to 1
repeat until SWUPID is not equal to "" or LoopCount is 7
set LoopCount to LoopCount + 1
delay 60
set SWUPID to do shell script "ps -ax | grep -v grep | grep softwareupdate | awk '{print $1}'"
end repeat
do shell script "killall softwareupdate"
set jamfHelperPID to do shell script "ps -ax | grep -v grep | grep jamfHelper | awk '{print $1}'"
if jamfHelperPID is not equal to "" then
do shell script "killall jamfHelper"
end if
do shell script "killall 'System Events'"
For whatever reason this loop fails about half the time and the fs window just sits there till I kill it. Management wants to know when the outlook migration process on a mac is completed, so I have a text file being written to /Users/Shared on completion, then running a recon to get the EA to show in the JSS. Since the AS has to run in the user context, the recon also runs in the user context.
