I've been banging my head against the wall with this one. What I'd like
to happen is, after DEP enrollment, and we get to the desktop, an
AppleScript dialog pops up asking the user a question. There are a few
popups, but for troubleshooting purposes,...
Good day all: We're rolling out 802.1x. I have the root ca and an
intermediary cert. Both uploaded to a Jamf config profile. Both certs
are installed on scoped machines, the root one Always Trusted, the
intermediary showing as issued by our CA and va...
I'm looking to run the command "jamf policy -event UserConfig" via a
LaunchAgent. Here's the relevant bit of the LaunchAgent:
UserConfig The last of the policies triggered
by UserConfig deletes the...
Preface: Maybe I'm missing something obvious... For DEP deployments, we
have an Enrollment Complete policy that waits until a user is logged in
to throw up a splash page and custom triggers our big config policy to
then do the configuring we want, th...
Hey all: JSS: 9.72DP: HTTP As of a week ago, exactly ten of our 400
users are now caching packages with a %20 in place of spaces. Comme ça:
Install%20OS%20X%20Yosemite.InstallESD.dmg Discovered it as a "has
cached" smart group was off by ten. I tried...
You can create Apple IDs in ABM using their work addresses (or add
.appleid like Apple recommends). Distribute to all of your desired
admins. Each person can use their own phone. Maybe I’m misunderstanding
your situation, but that seems to cover it?
This is the case for a lot of applications behind an identity provider
or federated login. It makes sense if you think about it. It's so if
there's an issue with federation, your admins can login to fix it.
Avoiding all eggs in the federated basket.
Good day all! We seem to have this working as we want, except we're
getting a prompt for admin credentials to trust the root and
intermediate certs. Once trusted, everything works as intended. Is
anyone else running into this? Know what we might be m...
If they're all bound, fire this at them: #!/bin/sh dseditgroup -o edit
-a "Group Name" -t group admin Change "Group Name" to the name of an AD
group with all users you want to be admin on bound machines. If you're
using a Jamf Directory Binding to bi...