Posted on 08-04-2022 11:00 AM
Hello Jamf Nation!
I'm needing help yet again.
I have users that are requesting to have the ability to uninstall apps from their computers. What is happening is they are installing items from the Self Service portal and then deciding they don't want them. Most of these apps don't have an uninstaller that I can bundle to put in Self Service.
Our users don't have admin rights because we don't want them to be able to just install whatever they want.
Is there anyway that we can grant them access to just uninstall apps even just the ones installed from Self Service portal? Right now they are having to submit a helpdesk ticket and then we have to remote into the computer and remove the app with our admin login. this kinda defeats the purposes of having management software if we still have to do it manually.
Posted on 08-04-2022 11:17 AM
I would probably limit this to software available to install via self service, but you could make uninstall policies that are just a script to remove that specific application. You could make a generic bash script that has a placeholder for whatever software you want to remove, like 'rm -rf /Applications/$4' where $4 is filled in by whatever you specify in the policy.
You'd probably want to add some validation to that so you don't accidentally send an rm -rf to the whole Applications folder
08-04-2022 12:24 PM - edited 08-04-2022 12:27 PM
Using Chrome for example, I have Smart Group logic in-place where if Chrome is not installed then Self Service shows the Install Chrome Policy. If Chrome is already installed then the Uninstall Chrome Policy is shown with "Uninstall" button text, but this Policy runs a generic uninstaller script that puts "Google Chrome.app" (no quotes) in parameter $4 like mentioned by @wkelly1 . Then it runs an inventory update, and shows the install Policy with the Chrome installer package and respective button text in Self Service again.
Edit: Also, you can open apps in Composer and some of them will have a specific uninstaller.sh you can grab and package/customize into your own uninstall Policy. I use this method to uninstall Palo Alto's GlobalProtect VPN client app.
Posted on 08-05-2022 06:04 AM
Just use JAMF SelfService and empower the users to service themselves.
You have two ways to tackle this with JAMF.
Posted on 08-07-2022 08:27 PM
You create uninstall policies and add them to self service of the application doesn't have an uninstaller.