Jamf Nation Community

rcoleman · 03-17-2023

Hi folks,I'm currently creating a new process for user initiated enrollments using DEPNotify. For testing, I'm removing all local device jamf components and running API scripts to unmanage/ un-enroll the device and de-selecting the "Allow Jamf Pro to...

rcoleman · 01-30-2023

Hi folks, struggling to find an answer for this.We have a number of machines unable to run Big Sur, so I wish to deploy a script on all of these devices that remove these devices from support. I've achieved similar in the past where I can actually re...

rcoleman · 09-07-2022

Hi folks,Some parts of our network have recently been upgraded, and we've noticed with our Lab Macs that are on the upgraded network, when logging in, every user is met with the prompt below:To clarify, authentication isn't required to have a working...

rcoleman · 06-04-2021

We currently have a standard JSS group that contains our support staff who have been added to the standard group as LDAP users. In the privileges section of the group under the "Jamf Pro Server objects", the "Read" section for "Scripts" has been sele...

rcoleman · 11-08-2023

Just wanted to reply to this topic. It now looks like PrivilegesDemoter will revoke admin permissions silently in the background after a specified period of time, regardless of how the permissions were elevated (either by right clicking on the Privil...

rcoleman · 10-24-2023

Glad it helps! Sorry, I'm not exactly sure what you mean when you say 'unassigned'? If I'm understanding correctly, you want to create a smart group for machines that have not checked in within 60 days, and then have this script execute and disable t...

rcoleman · 07-19-2023

Just to say, I've expanded the script above and just posting on the off-chance it's helpful to anyone else. The script is triggered by a LaunchDaemon that executes every 3 minutes.The main issues I had with the script above is that I didn't want to r...

rcoleman · 05-24-2023

Many thanks @pkleiber. I had already seen these posts. Problem with Demotor is that it 'requests' if you want to remove the rights. I don't want to give the users that option, I just want to remove them :)I've created a LaunchDaemon which on the face...

rcoleman · 05-24-2023

I'm a bit late to this party, but I'm looking to do exactly the same thing (with making the default time 15 minutes instead of 30).Looking at Privileges, it does seem to come with a CLI, where you can run commands as a standard user to add or remove ...

Jamf Nation Community

User Statistics

User Activity

Re-enrollment using User initiated enrollment

Unmanaging macOS devices through API

Disable Ethernet 802.1X

Read only access on JSS scripts

Re: Make Me an Admin for macOS Ventura

Re: Unmanaging macOS devices through API

Re: Make Me an Admin for macOS Ventura

Re: Make Me an Admin for macOS Ventura

Re: Make Me an Admin for macOS Ventura