Skip to main content
Jamf Nation, hosted by Jamf, is the largest Apple IT management community in the world. Dialog with your fellow IT professionals, gain insight about Apple device deployments, share best practices and bounce ideas off each other. Join the conversation.

Product Resources

  • Administering FileVault 2 on OS X Mavericks with the Casper Suite

    This guide provides step-by-step instructions for administering FileVault 2 on OS X v10.9 with the Casper Suite.

  • Configuring the Mac OS for Secure Environments

    With the adoption of Mac OS in the enterprise, regulatory compliance has grown in importance on the platform. The Casper Suite allows administrators to automate processes to alert, report on and remediate Control Objectives to maintain compliance with guidelines such as the anticipated United States Government Configuration Baseline (USGCB) standard, Sarbanes-Oxley (SOX) and Purchasing Card Industry Data Security Standard (PCI DSS).

  • One to One Programs

    One computer for each student. The Casper Suite enables school districts to support Apple laptops and desktops in compliance with district policies by automating maintenance tasks on these large projects to improve student engagement in learning. The Casper Suite is well suited to handle large scale deployments, implement policy based management and keep networks free of restricted software.

Upload Extension Attribute

Extension attributes are custom fields that allow you to collect almost any piece of attribute data from a computer.

Find out more about extension attributes on the extension attributes page.

Active Network Interface

This attribute displays the currently active network interface. This attribute applies to both Mac and Windows. Modified to work with Yosemite and El Capitan.

Active_Network_Interface.xml (1.82 KB)

Download

Active Power Management Profile

This attribute displays the power management profile that is currently active on the machine. This attribute applies to both Mac and Windows.

Active Power Management Profile.xml (1.08 KB)

Download

AirPort Power

This attribute displays the AirPort power status. This attribute applies to Mac only.

AirPort Power.xml (1.47 KB)

Download

Apple Software Update - Automatically Download Updates

This attribute displays the status of the Apple software update option to "Automatically Download Updates". The value to be verified will need to be specified when creating this extension attribute. Example: "false" verifies that the setting is disabled. This extension attribute requires this preference be set using Managed Preferences (MCX).

Apple Software Update - Automatically Download Updates.xml (1.35 KB)

Download

Apple Software Update Server

This attribute returns the DNS/IP address of the Apple Software Update Server that is set on the client machine.

Apple Software Update Server.xml (582 B)

Download

BASH Version Check

This will determine the version of BASH used on OS X systems and display in the Extension Attributes.

BASH_Version.xml (775 B)

Download

Battery Charge Percentage

This attribute returns remaining charge percentage of the battery, if installed. This attribute applies to both Mac and Windows.

Battery Charge Percentage.xml (1.28 KB)

Download

Battery Charging

This attribute returns whether or not the battery is charging, if installed.

Battery Charging.xml (499 B)

Download

Battery Cycle Count

This attribute returns the number of charge cycles logged on the current battery.

Battery_Cycle_Count.xml (437 B)

Download

Battery Fully Charged

This attribute returns whether or not the battery is fully charged, if installed.

Battery Fully Charged.xml (n/a)

Download

Battery Health Status

This attribute returns the health of the battery, if installed. In the event of battery failure, the attribute will report back "Failure". This attribute applies to both Mac and Windows.

Battery Health Status.xml (1.22 KB)

Download

Battery Installed

This attribute returns whether or not a battery is currently installed in a system that supports batteries.

Battery Installed.xml (534 B)

Download

Battery Manufacturer

This attribute returns manufacturer of the battery, if installed.

Battery Manufacturer.xml (494 B)

Download

Battery Serial Number

This attribute returns serial number of the battery, if installed.

Battery Serial Number.xml (500 B)

Download

Battery Time Remaining

This attribute returns number of minutes of battery charge remaining, if a battery is installed. This attribute applies to both Mac and Windows.

Battery Time Remaining.xml (1.06 KB)

Download

Bluetooth Discoverable State

This attribute verifies the Bluetooth Discoverable State. The value to be verified will need to be specified when creating this extension attribute. Example: "false" verifies that Bluetooth is not set to "Discoverable" This extension attribute requires this preference be set using Managed Preferences (MCX).

Bluetooth Discoverable State.xml (1.28 KB)

Download

Boot Volume Free Space

Returns the free space on the current boot volume in GB, rounded down to the nearest integer.

bootVolumeFreeSpace.xml (604 B)

Download

Check if running on AC or Battery Power, and when this was checked.

This is a sometimes handy Extension Attribute to avoid customers on laptops attempting to pull down sizable installations (Adobe CC, MATLab, OS X Upgrades, etc.) while running on the laptop battery. Use this to avoid installs interrupted by system sleep or a battery nearing exhaustion. This works for Desktops as well. They'll just always report "Now drawing from AC Power...". An example would be using as a policy exclusion for when a system was last reported as "Now drawing from Battery Power...". Insist the user Plug in the cord and update their inventory before being allowed to run the lengthy install. ########################################################### #!/bin/bash ########################################### # Check to see where power is being drawn # 'Battery Power' vs. 'AC Power' ########################################### # by Christopher Miller # for ITSD-ISS of JHU-APL # Dated: 2016-05-24, last Mod: 2016-05-24 # Cobbled together from other's hard work ########################################### #Use the power management to check PowerUP=$(pmset -g batt | head -n 1) #Find the time this was checked ShotTime=$(/bin/date) #Put it together result=$(echo "$PowerUP" on "$ShotTime") echo "<result>$result</result>" exit 0

Power_Source.xml (1.02 KB)

Download

Check munki manifest on client

Simple script to check what manifest the client is using. Helpful men migrating or integrating with munki.

jamf_check-munki-manifest.sh (524 B)

Download

Computer Sleep

This attribute displays the number of minutes before the computer sleeps on the active power management profile.

Computer Sleep.xml (504 B)

Download

Current AirPort Network

This attribute displays the network the AirPort is joined to. This attribute applies to Mac only.

Current AirPort Network.xml (1.52 KB)

Download

Current Wi-Fi Network (Yosemite Compatible)

Reports the currently selected Wi-Fi interface on an OS X computer.

Current_Wi-Fi_Network_(Yosemite_Compatible).xml (6.55 KB)

Download

DNS Servers

This attribute lists all DNS servers set on the active network connection. This attribute applies to both Mac and Windows.

DNS Servers.xml (2.08 KB)

Download

Detect Bootcamp Partition

This attribute uses the diskutil list command to check for disk partitions reporting as "Microsoft Basic Data". These partitions are used by Apple's Bootcamp. If Microsoft Basic Data partition is reported by diskutil, script reports "Yes". If no Microsoft Basic Data partition is reported by diskutil, script reports "No".

detect_bootcamp_partition.xml (1.23 KB)

Download

Display Sleep

This attribute displays the number of minutes before the display sleeps on the active power management profile.

Display Sleep.xml (506 B)

Download

EFI Bits

Returns the EFI firmware bits as a string, e.g. EFI64

efiBits.xml (594 B)

Download

EFI Password

This extension attributes reviews if the EFI Password has been set with a result of either "Set" or "Not Set”. Uses nvram binary for pre-10.10 machines, then firmwarepasswd for 10.10 or greater.

eficheck.xml (1.09 KB)

Download

EFI Password Mode

Displays "none" if no firmware password is set; displays "command" or "full" if a firmware password is set.

EFI Password Mode.xml (614 B)

Download

Energy Saver - Automatic Restart on Power Failure

This attribute verifies whether or not the "Automatic Restart" energy saver option is enabled. The value to be verified will need to be specified when creating this extension attribute. Example: "false" verifies that the "Automatic Restart" option is not enabled.

Energy Saver - Automatic Restart on Power Failure.xml (1.10 KB)

Download

Energy Saver - Display Sleep Timer

This attribute verifies the "Display Sleep" timer energy saver setting. The value to be verified will need to be specified when creating this extension attribute. Example: "30" verifies that the "Display Sleep" timer is set to put the display to sleep after 30 minutes.

Energy Saver - Display Sleep Timer.xml (1.03 KB)

Download

Energy Saver - Hard Disk Sleep

This attribute verifies the "Hard Disk Sleep" energy saver setting. The value to be verified will need to be specified when creating this extension attribute. Example: "false" verifies that the "Hard Disk Sleep" setting is set to not put the hard disk to sleep.

Energy Saver - Hard Disk Sleep.xml (1.08 KB)

Download

Energy Saver - System Sleep Timer

This attribute verifies the "System Sleep" timer energy saver setting. The value to be verified will need to be specified when creating this extension attribute. Example: "0" verifies that the "System Sleep" timer is set to never put the system to sleep.

Energy Saver - System Sleep Timer.xml (1.01 KB)

Download

Energy Saver - Wake on LAN

This attribute verifies the "Wake on LAN" energy saver setting. The value to be verified will need to be specified when creating this extension attribute. Example: "false" verifies that the "Wake on LAN" setting is disabled

Energy Saver - Wake on LAN.xml (1.03 KB)

Download

Enforce PKI Certificate Chain of Trust

This attribute verifies the "Enforce PKI Certificate Chain of Trust" setting. The value to be verified will need to be specified when creating this extension attribute. Example: "false" verifies that the "Enforce PKI Certificate Chain of Trust" setting is disabled

Enforce PKI Certificate Chain of Trust.xml (1.11 KB)

Download

FIlevault 2 Disk Encryption Status

This extension attribute checks to see if a Mac is running 10.7 or not. If the Mac in question is running 10.7, the extension attribute reports on whether or not it is encrypted with Apple's FileVault 2 encryption and gives the encryption or decryption status.

filevault_2_encryption_check_extension_attribute.xml (5.39 KB)

Download

FaceTime Login ID

This extension attribute displays the active FaceTime login ID of the current user at the time of an inventory report.

Current User FaceTime ID.xml (700 B)

Download

File Sharing

This attribute displays whether or not file sharing is enabled. This attribute applies to both Mac and Windows.

File Sharing.xml (1.37 KB)

Download

File Sharing

This attribute displays whether or not file sharing is enabled. This attribute only to Mac.

File_Sharing.xml (583 B)

Download

Find First Preferred Wireless Network

This will provide the name of the wireless network that is first on the list of preferred wireless networks.

findfirstpreferredwirelessnetwork.xml (1.11 KB)

Download

Find Last User's Default Browser

This will determine the last user to log onto a Mac (filtering certain common accounts like root); then peek through that user's Launch Services plist file to find the setting for the default handler of 'http'. Essentially, it finds the user's default Browser. {This is NOT what the user may use most often, just what is set as the default}. Why would you care? I can't imagine. But our management wanted to know so it might possibly be useful for someone else out there. Fell free to hack, add, transmoogrify as you see fit for your own purposes. Unless those purposes are evil, then go try out as the next Bond villain. 'cause those movies could really use some help in the evil genius dept.

Browser_Application_Default.xml (1.85 KB)

Download

Firewall

This attribute displays whether or not the system firewall is enabled. This attribute applies to both Mac and Windows.

Firewall.xml (1.32 KB)

Download

GPU

This attribute displays the GPU of the computer. It's particularly useful, if you want to scope computers with nVidia video cards, so you can make new drivers or CUDA available for your users.

GPU.xml (672 B)

Download

Gatekeeper Status

This will display the current status of Gatekeeper (visible under System Preferences > Security & Privacy > General).

GatekeeperStatus.xml (808 B)

Download

Get OpenSSL Version

Extension Attribute to query the version of OpenSSL being used on OS X.

OpenSSL-Info.xml (832 B)

Download

HD Serial number

This attribute returns serial number of the battery for smart group or display option.

HD_Serial_Number.xml (453 B)

Download

Host name

This attribute returns the host name of the computer. This attribute applies to both Mac and Windows.

Host name.xml (716 B)

Download

IP Geo-Location

This attribute lists an approximate location of the machine based on it's current external IP address. This attribute applies to both Mac and Windows.

IP Geo-Location.xml (2.60 KB)

Download

Identify Default Keychain Used

Display the default keychain being used on the Mac. Mac OS X Sierra 10.12 or greater.

IdentifyDefaultKeychain.xml (2.88 KB)

Download

Identify Login Keychain Used

Display the login keychain being used on the Mac. Mac OS X Sierra 10.12 or greater

IdentifyLoginKeychain.xml (2.87 KB)

Download

Inventory attached displays

Apologies, the formatting is a bit messed up converting from a monospace font. A python script/Jamf Pro Extension Attribute to inventory and report on attached displays. The output is designed to split three times. Once on ':' will give you the count of displays and the description string. And then splitting the description string on ':' will give you individual displays. Finally on ',' will give features. You can also split the resolution if you need to, for height, width, etc. 2: iMac, Built-in, Retina, 2560 x 1440 (5120 x 2880); ASUS VH236H, Primary, 1920 x 1080 @ 60 Hz (1920 x 1080) ^ ^ | 1. split on ':" | | 2. split on ';' Continue spliting on ',' for indiviual features Current resolution is displayed, Maximum resolution available in parentheses

attached_displays.py (4.15 KB)

Download

Last User

This attribute displays the last user to log in. This attribute applies to both Mac and Windows.

Last User.xml (953 B)

Download

Location Services

Detects whether OS X Location Services is enabled, disabled, or unavailable.

Location_Services.xml (794 B)

Download

Login Window - Disable Console Access

This attribute displays the status of the Login Window setting "Disable Console Access". The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that console access is disabled. This extension attribute requires this preference be set using Managed Preferences (MCX).

Login Window - Disable Console Access.xml (n/a)

Download

Login Window - Display Login Window Message

This attribute displays the status of the Login Window setting "Login Window Text". The value to be verified will need to be specified when creating this extension attribute. Example: "This Computer is Property of Company" verifies the message displayed at the login window. This extension attribute requires this preference be set using Managed Preferences (MCX).

Login Window - Display Login Window Message.xml (1.33 KB)

Download

Login Window - Display Username and Password Textboxes

This attribute displays the status of the Login Window setting "Display Username and Password Textboxes". The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that username and password test boxes are displayed at the login window rather than a list of users. This extension attribute requires this preference be set using Managed Preferences (MCX).

Login Window - Display Username and Password Textboxes.xml (1.35 KB)

Download

Login Window - Show Password Hint After Failed Logins

This attribute displays the status of the Login Window setting "Show Password Hint After Failed Logins". The value to be verified will need to be specified when creating this extension attribute. Example: "0" verifies that password hints are disabled. "2" verifies that password hints will be displayed after 2 failed login attempts. This extension attribute requires this preference be set using Managed Preferences (MCX).

Login Window - Show Password Hint After Failed Logins.xml (1.31 KB)

Download

Login Window - Shutdown, Restart Buttons Disabled

This attribute displays the status of the Login Window setting "Disable Shutdown and Restart Buttons". The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that the shutdown and restart buttons are disabled. This extension attribute requires this preference be set using Managed Preferences (MCX).

Login Window - Shutdown, Restart Buttons Disabled.xml (1.30 KB)

Download

Management Account

Queries the JSS via the API to look up the computer record for the Mac and report the management account that is recorded for the Mac as an extension attribute. This EA can then be used as criteria for a smart group. This is a temporary solution until the management account already recorded in the JSS computer record shows up as a criteria option in smart groups and advanced inventory searches. Note: The "hard-coded variables" must be changed to values appropriate for your environment before this EA will work and the api account that is used must have at least read permissions for computers.

Management_User.xml (1.74 KB)

Download

Network Services List

This attribute lists all network services present on a machine. This attribute applies to both Mac and Windows.

Network_Services_List.xml (1.60 KB)

Download

Network Time Server

This attribute lists the network time server that is currently set. This attribute applies to both Mac and Windows.

Network Time Server.xml (1.59 KB)

Download

OS - Admin Privileges (Via GUI) Valid For X Minutes Until Re-Authentication

This attribute displays the status of the number of minutes that admin privileges are cached for until re-prompting for an admin password in the GUI. The system default value is 5 minutes. The value to be verified will need to be specified when creating this extension attribute. Example: "3" verifies admin privileges are cached for 3 minutes.

OS - Admin Privileges (Via GUI) Valid For X Minutes Until Re-Authentication.xml (1.17 KB)

Download

OS - Admin Privileges (Via Sudo) Only Permitted for Valid Login Sessions

This extension attribute will check /etc/sudoers to make sure that the defaults specification for TTY Tickets is set.

OS - Admin Privileges (Via Sudo) Only Permitted for Valid Login Sessions.xml (720 B)

Download

OS - Admin Privileges (Via Terminal) Valid For 0 Seconds Until Re-Authentication

This attribute displays the status of the number of seconds that admin privileges are cached for until re-prompting for an admin password in the Terminal. The system default value is 5 minutes. This extension attribute is hard coded to check that the timeout is set to 0 seconds, so the user will be reprompted every time there is a request for admin privileges in the Terminal. To change this setting, edit the "desiredValue" variable.

OS - Admin Privileges (Via Terminal) Valid For 0 Seconds Until Re-Authentication.xml (1.05 KB)

Download

OS - Auto Logout Disabled

This attribute verifies that the setting "Auto Logout" is disabled. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Auto Logout Disabled.xml (886 B)

Download

OS - Bluetooth Disabled

This attribute verifies that Bluetooth is disabled.

OS - Bluetooth Disabled.xml (602 B)

Download

OS - Disable Action When Blank CD Inserted

This attribute verifies that no action will take place when a blank CD is inserted. The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that no action will take place when a blank CD is inserted. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Disable Action When Blank CD Inserted.xml (1.38 KB)

Download

OS - Disable Action When Blank DVD Inserted

This attribute verifies that no action will take place when a blank DVD is inserted. The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that no action will take place when a blank DVD is inserted. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Disable Action When Blank DVD Inserted.xml (1.39 KB)

Download

OS - Disable Action When Music CD Inserted

This attribute verifies that no action will take place when a music CD is inserted. The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that no action will take place when a music CD is inserted. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Disable Action When Music CD Inserted.xml (1.38 KB)

Download

OS - Disable Action When Picture CD Inserted

This attribute verifies that no action will take place when a picture CD is inserted. The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that no action will take place when a picture CD is inserted. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Disable Action When Picture CD Inserted.xml (1.39 KB)

Download

OS - Disable Action When Video DVD Inserted

This attribute verifies that no action will take place when a video DVD is inserted. The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that no action will take place when a video DVD is inserted. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Disable Action When Video DVD Inserted.xml (1.39 KB)

Download

OS - Disable Automatic Login

This attribute verifies that automatic login is disabled. The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that automatic login is disabled. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Disable Automatic Login.xml (1.24 KB)

Download

OS - Disable CPU Kernel Core Dumps

This attribute verifies that CPU kernel core dumping is disabled.

OS - Disable CPU Kernel Core Dumps.xml (751 B)

Download

OS - Disable Insecure Login in Single User Mode

This extension attribute template will ensure that the /etc/ttys config file is set to disable insecure single user signon.

OS - Disable Insecure Login in Single User Mode.xml (691 B)

Download

OS - Disable SSH Login For Accounts With Blank Passwords

This extension attribute will read the "PermitEmptyPasswords" setting in the file /etc/sshd_config.

OS - Disable SSH Login For Accounts With Blank Passwords.xml (701 B)

Download

OS - Display Terminal Login Message

This attribute displays the status of message of the day that is displayed when the Terminal application is launched. The value to be verified will need to be specified when creating this extension attribute. Example: "This Computer is Property of Company" verifies the message displayed upon Terminal login.

OS - Display Terminal Login Message.xml (923 B)

Download

OS - Empty Trash Securely

This attribute verifies that the trash is set to empty securely. The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that the "Secure Empty Trash" option is enabled. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Empty Trash Securely.xml (1.30 KB)

Download

OS - Enabled System Preference Panes

This attribute verifies the enabled system preference panes. The attribute is hardcoded to look for certain preference panes. To edit the verification criteria, add or remove values from the "desiredResult" variable. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Enabled System Preference Panes.xml (1.78 KB)

Download

OS - Encrypt Virtual Memory

This attribute verifies that the virtual memory is being encrypted. The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that the "Encrypt Virtual Memory" option is enabled. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Encrypt Virtual Memory.xml (1.24 KB)

Download

OS - Fast User Switching Disabled

This attribute verifies that fast user switching is disabled. The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that the "Fast User Switching" option is disabled. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Fast User Switching Disabled.xml (1.29 KB)

Download

OS - Firewall Timeout

This extension attribute will verify that the firewall timeout is set to 3 seconds rather than the 5 minute default.

OS - Firewall Timeout.xml (842 B)

Download

OS - Guest Account Disabled

This attribute verifies that the guest account is disabled. The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that the guest account is disabled. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Guest Account Disabled.xml (1.21 KB)

Download

OS - Internet Sharing Disabled

This attribute verifies that internet sharing is disabled.

OS - Internet Sharing Disabled.xml (672 B)

Download

OS - Log Authentication Errors

This extension attribute will verify that syslog has been configured to output authentication error messages to the system.log.

OS - Log Authentication Errors.xml (834 B)

Download

OS - Non Admins Can Install Printers

This extension attribute will verify that non-admin users can add printers.

OS - Non Admins Can Install Printers.xml (731 B)

Download

OS - Number Of Recent Applications To Remember

This extension attribute will verify the number of recent applications the Finder will remember. The value to be verified will need to be specified when creating this extension attribute. Example: "0" means that no recent applications will be remembered. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Number Of Recent Applications To Remember.xml (1.14 KB)

Download

OS - Number Of Recent Documents To Remember

This extension attribute will verify the number of recent documents the Finder will remember. The value to be verified will need to be specified when creating this extension attribute. Example: "0" means that no recent documents will be remembered. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Number Of Recent Documents To Remember.xml (1.13 KB)

Download

OS - Number Of Recent Servers To Remember

This extension attribute will verify the number of recent servers the Finder will remember. The value to be verified will need to be specified when creating this extension attribute. Example: "0" means that no recent servers will be remembered. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Number Of Recent Servers To Remember.xml (1.12 KB)

Download

OS - Only Logged In User Can Unlock Screensaver

This extension attribute template will ensure that the screensaver unlock requires the owner of the session to unlock it. Default behavior is for any administrator to be able to unlock the screensaver.

OS - Only Logged In User Can Unlock Screensaver.xml (990 B)

Download

OS - Root Password Configured For Single User Mode

This extension attribute will verify if a password has been set for the root account for single user mode. The "SingleUserPass" variable should be set according to the password that has been set for single user mode in /private/etc/master.passwd.

OS - Root Password Configured For Single User Mode.xml (1.20 KB)

Download

OS - SSH Root Login Disabled

This extension attribute template will verify that root login over SSH is disabled.

OS - SSH Root Login Disabled.xml (655 B)

Download

OS - SSH Session Closes After X Seconds Without Successful Authentication

This extension attribute will verify the number of seconds to wait before an SSH connection closes without successful authentication. The value to be verified will need to be specified when creating this extension attribute. Example: "30" means that an SSH session will wait 30 seconds for a user to successfully authenticate before requiring a new session.

OS - SSH Session Closes After X Seconds Without Successful Authentication.xml (1.20 KB)

Download

OS - Spotlight Disabled

This extension attribute template will verify that spotlight indexing is disabled.

OS - Spotlight Disabled.xml (1.09 KB)

Download

OS - Use Computer Name For Computer Record Name

This attribute verifies that the setting "Use Computer Name for Record Name" is enabled. The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that the setting is enabled. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - Use Computer Name For Computer Record Name.xml (1.28 KB)

Download

OS - Use Network Time Server

This attribute verifies that the setting "Use Network Time Server" is enabled.

OS - Use Network Time Server.xml (712 B)

Download

OS - User Home Directory Permitted On Alternate Device

This attribute verifies whether or not user home directories are permitted on an alternate device. The value to be verified will need to be specified when creating this extension attribute. Example: "false" verifies that home directories are not permitted on external devices. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - User Home Directory Permitted On Alternate Device.xml (1.31 KB)

Download

OS - Verify Time Server

This attribute verifies that time server that is set in the OS. The value to be verified will need to be specified when creating this extension attribute. Example: "time.apple.com" verifies that the time server is set to "time.apple.com".

OS - Verify Time Server.xml (926 B)

Download

OS - iDisk Access Disabled

This attribute verifies that the iDisk access is disabled. The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that iDisk access is disabled. This extension attribute requires this preference be set using Managed Preferences (MCX).

OS - iDisk Access Disabled.xml (1.27 KB)

Download

Recovery HD Present

This attribute returns an Apple Recovery HD is present on the boot disk. Examples of returned values include: "Present", "Not Present". This attribute template applies to drives with Mac OS X 10.7 and later.

Recovery HD Present.xml (756 B)

Download

Remote Apple Events

This attribute displays whether or not remote apple events are enabled.

Remote Apple Events.xml (941 B)

Download

Remote Login

This attribute displays whether or not remote login is enabled.

Remote Login.xml (914 B)

Download

Review SmartCard Enabled Users

This extension attribute will query what local user account has been paired to a SmartCard and what type of SmartCard. macOS Sierra 10.12 or greater is required.

SmartCardUsers.xml (972 B)

Download

Screensaver - Active After X Seconds

This attribute displays the current Screensaver idle time. The value to be verified will need to be specified when creating this extension attribute. Example: "300" verifies that the homepage is set to run after the machine is idle for 5 minutes.

Screensaver - Active After X Seconds.xml (1.10 KB)

Download

Screensaver - Ask for Password

This attribute displays the status of the screensaver option to "Ask for Password". The value to be verified will need to be specified when creating this extension attribute. Example: "true" verifies that the setting is enabled. This extension attribute requires this preference be set using Managed Preferences (MCX).

Screensaver - Ask for Password.xml (1.28 KB)

Download

Search Domains

This attribute lists all search domains set on the active network connection. This attribute applies to both Mac and Windows.

Search Domains.xml (2.00 KB)

Download

Shell Shock Vulnerability Status

This will look for the Shell Shock vulnerability in OS X and report as either 'vulnerable' or 'Patched'.

Shell_Shock_Status.xml (919 B)

Download

SmartCard - GUI Enabled

Displays "Enabled" if the SmartCard Pairing UI is enabled; displays "Disabled" if the SmartCard Pairing UI is disabled. Mac OS X Sierra 10.12 or greater

SmartCardPairingUI.xml (3.05 KB)

Download

SmartCard - Logging

Displays the status of SmartCard logging on the Mac. Mac OS X Sierra 10.12 or greater

ReviewSmartCardLogging.xml (2.87 KB)

Download

SmartCard - Login command

Displays if the login command has been SmartCard enabled. macOS High Sierra 10.13 or greater

VerifySmartCardAuthLogin.xml (2.91 KB)

Download

SmartCard - Screensaver Lock

Reviews if the screensaver will activate immediately upon SmartCard removal. macOS High Sierra 10.13 or greater

VerifyScreensaverSettingsForSC.xml (3.00 KB)

Download

SmartCard - User's Keychain

Displays the current paired SmartCard in user's keychain. macOS High Sierra 10.13 or greater

SmartCardUserKeychain.xml (3.03 KB)

Download

SmartCard - su command

Displays if the su command has been SmartCard enabled. macOS High Sierra 10.13 or greater

VerifySmartCardAuthSU.xml (2.89 KB)

Download

SmartCard - sudo command

Displays if the sudo command has been SmartCard enabled. macOS High Sierra 10.13 or greater

VerifySmartCardAuthSUDO.xml (2.90 KB)

Download

Sorted Configuration Profile List

Produces a sorted list of Configuration Profiles applied to a machine.

sortedConfigurationProfileList.xml (612 B)

Download

Time Machine Encryption Status

Returns if a connected time machine disk is encrypted or not. If users are using FileVault and thinking their data is secure, the connected Time Machine disk should also be encrypted.

Time Machine Encryption Status.xml (1.05 KB)

Download

Total Time Logged In of Current User

This extension attribute displays the total time logged in of the current user at the time of an inventory report.

Total Login Time of Current User.xml (758 B)

Download

Verify Configuration Profile Installation

This extension attribute will report on whether or not a specific OS X Configuration Profile is installed. This is based on the exact Display Name of the profile in the JSS. Simply add the profile name inside the double quotes ("") in the script and make a new extension attribute in the JSS!

configurationProfileCheck.xml (1.46 KB)

Download

com.apple.screensaver - Require Password

This attribute returns enforcement status of the "Require Password" screensaver setting. Since the com.apple.screensaver domain only applies to the user space, the managed preferences will be queried for the last user to login. This extension attribute requires this preference be set using Managed Preferences (MCX).

com.apple.screensaver - Require Password.xml (1.01 KB)

Download

iSight Camera Status

This attribute displays the status of the iSight Camera. The value to be verified will need to be specified when creating this extension attribute. Example: "disabled" verifies that the iSight Camera is disabled.

iSight Camera Status.xml (1.06 KB)

Download

Upload Package Manifest

Package manifests allow Composer to build packages from software that is already installed without taking snapshots.

Find out more about package manifests on the package manifests page.

There are no package manifests for Mac OS X

Upload Licensed Software Template

Licensed software records in Jamf Pro let you store information about the software licensed to your organization.

Find out more about licensed software templates on the licensed software templates page.

There are no licensed software templates for Mac OS X

Upload Script

Scripts can be executed on managed computers using a Policy or Jamf Remote. Most scripts also work with other management tools.

Find out more about scripts on the scripts page.

Add Custom DNS Search Domains

Add custom DNS search domains to every Ethernet adapter on a system. This can be handy when imaging new systems or adjusting configurations into DNS for users who neglect using Fully Qualified Domain Names when connecting to Server Shares, etc.

AddSearchDomains_new.sh (1.80 KB)

Download

Capture App Store Installer Packages

This script can be used to capture downloaded package files from the Mac App Store so the apps can be redistributed. The package files will retain their Apple developer certificates but will NOT include the _MASReceipt from the App Store.

get_appstore_downloads.v2.sh (1.69 KB)

Download

Enable File Vault

This script will enable the File Vault feature in Mac OS X 10.4 or later. It should only be run while a user is logged onto a system (i.e. as part of a Casper Suite login policy that is assigned a frequency of once per user.) When the script is run, it will direct the user to the FileVault preference pane located within the System Preferences application. At that point, the user will be prompted to finish the process of enabling FileVault. NOTE: Before enabling FileVault, it is a good idea to generate a FileVault Master Keychain as described in the Mac OS X Security Confguration Manual which can be downloaded from: http://images.apple.com/server/macosx/docs/Tiger_Security_Config_021507.pdf Performing the steps desribed in the above manual will ensure that access can be regranted to a user who have forgotten his or her password.

enableFileVault.scpt (21.3 KB)

Download

GateKeeper Configuration

The Gatekeeper settings are located on the General tab of the Security & Privacy System Preferences Preference Pane. Use this script to set the radio buttons as desired.

jamf.gatekeep.sh (5.49 KB)

Download

List Computers with no Last Check-in time (REST API)

This script will use the REST API to enumerate all computers in the JSS and list those that do NOT have a Last Check-in time. It is designed to run from an administrator's workstation and the results can easily be piped to a text file. Depending on the size of your JSS the script may take several minutes to complete. Please be patient. Use as your own risk.

list_computers_no_check-in_time.sh (1.79 KB)

Download

Package Version

This script was written to interrogate a package file for its internal file name and version number. This can be helpful when a package file no longer retains its original file name or outwardly identifies its version number.

pkgver.sh (2.17 KB)

Download

Setup Munki

This scripts configures munkiclient with server, manifest and ASU settings. Use Check_munki.sh-script to veriy the setup was successful with Jamf

setup_munki.sh (684 B)

Download

Update NBI with latest Casper Imaging application.

We have more than 45 NetBoot servers (nationally and internationally) and I needed a way to update each of the NetBoot images installed on them with the latest version of Casper Imaging. This script allowed me to do this in less than a minute.

update_nbi_casper_imaging.sh (4.67 KB)

Download

addToODComputerGroup.sh -- Adds a computer to an Open Directory Computer Group

This script will add a Computer that exists in an Open Directory server to an Open Directory computer group or computer list. The script assumes that the computer group has previously been bound using a "Secure Bind" to the OD server. Multiple groups can be specified for the "groups" array found below in the variable section. Example values for the groups hard-coding the groups array are: groups=( 'group1' ) groups=( 'group1' 'group2' ) Example values for passing the groups parameter by Casper Remote or a Policy: group1 group2

addToODComputerGroup.sh (n/a)

Download

bindToLDAP.sh -- Bind to LDAP

This script will bind a Mac OS X Server or Client machine to any LDAP server. This script is part of a larger process that is required to bind machines to an LDAP server and is intended to be used for situations in which the built-in binding types (AD, OD, Centrify, Likewise, ADmitMac) are not acceptable. This script is designed to be used when attribute mappings need to be customized through the Directory Utility to add an LDAP server to Directory Services for authentication and contact lookups. The overall process consists of: -Manually configuring a machine to read from the LDAP server using the Directory Utility -Creating a package of the file: /Library/Preferences/DirectoryService/DSLDAPv3PlugInConfig.plist -Modifying this script to contain the server address -Deploying the package, and running the script on a targeted client machine

bindToLDAP.sh (5.28 KB)

Download

changeADAdminGroups.sh -- Change the AD Administrative Groups

This script will modify the groups from an Active Directory domain controller that will have administrative access on the machine. This script should be run after a machine has been bound to Active Directory. The <timeout> value can be used with a hardcoded value in the script, or read in as a parameter. Since the Casper Suite defines the first three parameters as (1) Mount Point, (2) Computer Name and (3) username, we are using the fourth parameter ($4) as the passable parameter.

changeADAdminGroups.sh (4.73 KB)

Download

changeLDAPConnectionTimeout.sh -- Change the connection timeout to get to a Directory Server

This script will modify the length of time that Directory Services will wait before an attempted connection times out. Modifying this value can be particularly useful in an environment with mobile users that are bound to an LDAP server that is not accessible from the outside world. The <timeout> value can be used with a hardcoded value in the script, or read in as a parameter. Since the Casper Suite defines the first three parameters as (1) Mount Point, (2) Computer Name and (3) username, we are using the fourth parameter ($4) as the passable parameter.

changeLDAPConnectionTimeout.sh (4.98 KB)

Download

disableAirport.sh -- Disable the airport drivers

This script disables the airport drivers, thereby disabling all functionality of the airport. After running this script, the airport drivers will be moved to: /Library/Application Support/JAMF/DisabledExtensions/ This way, the airport could be re-enabled in the future. After running this script, the machine will need to be rebooted for the settings to take effect if the script was run against a booted target volume.

disableAirPort.sh (5.25 KB)

Download

disableAutoLogout.sh -- Disable Account Auto-Logout Feature

This script will prevent a user account from logging out automatically. The Center for Internet Security Recommends disabling the ability to log out automatically in its Mac OS X 10.5 Leopard Level 1 & 2 Benchmark publication in the section titled 'Disable Òautomatic logoutÓ after a period of inactivity' andis rule number 2.4.13.4.

disableAutoLogout.sh (4.27 KB)

Download

disableBluetooth.sh -- Disable the Bluetooth drivers

This script disables the bluetooth drivers, thereby disabling all functionality of the bluetooth receiver. After running this script, the bluetooth drivers will be moved to: /Library/Application Support/JAMF/DisabledExtensions/ This way, the bluetooth could be re-enabled in the future. After running this script, the machine will need to be rebooted for the settings to take effect.

disableBluetooth.sh (6.73 KB)

Download

disableBluetoothSetupAssistant.sh -- Disable the Bluetooth Setup Assisant

This script disables the Bluetooth Setup Assistant that appears when an unrecognized bluetooth device is connected to a machine. After running this script, the Bluetooth Setup Assistant will be moved to: /Library/Application Support/JAMF/DisabledApplications/ This way, the Bluetooth Setup Assistant could be re-enabled in the future.

disableBluetoothSetupAssistant.sh (4.09 KB)

Download

disableCoreDumps.sh -- Disables system core dumps

This script will disable system core dumps. The Center for Internet Security recommends disabling core dumps in its Mac OS X 10.5 Leopard Level 1 & 2 Benchmark publication in the section titled "Disable Core Dumps" and is rule number 2.2.8.

disableCoreDumps.sh (4.23 KB)

Download

disableFirewire.sh -- Disable the firewire drivers

This script disables the firewire drivers, thereby disabling all functionality of the firewire bus. After running this script, the firewire drivers will be moved to: /Library/Application Support/JAMF/DisabledExtensions/ This way, the firewire drivers could be re-enabled in the future. After running this script, the machine will need to be rebooted for the settings to take effect.

disableFirewire.sh (4.68 KB)

Download

disableGuestFolderSharing.sh -- Disable guest access to shared folders

This script will disable guest access to shared folders through AFP & SMB.

disableGuestFolderSharing.sh (4.60 KB)

Download

disableGuestLogin.sh -- Disable Guest Account Login Feature

This script will prevent the guest user account from logging in.

disableGuestLogin.sh (3.53 KB)

Download

disableIR.sh -- Disable IR Receiver required for use of remote control

This script will disable the remote control infrared receiver.

disableIR.sh (3.80 KB)

Download

disableInternetSharing.sh -- Disable Internet Sharing System Preference

This script will disable internet sharing on Leopard as it is found in the sharing section of System Preferences.

disableInternetSharing.sh (3.96 KB)

Download

disableKeyboardSetupAssistant.sh -- Disable the Keyboard Setup Assisant

This script disables the Keyboard Setup Assistant that appears when an unrecognized keyboard is connected to a machine. Certain types of KVM's can also cause the Keyboard Setup Assistant to appear. After running this script, the Keyboard Setup Assistant will be moved to: /Library/Application Support/JAMF/DisabledApplications/ This way, the Keyboard Setup Assistant could be re-enabled in the future.

disableKeyboardSetupAssistant.sh (4.15 KB)

Download

disableMobileMePrefPane.sh -- Disable MobileMe/.Mac preference pane

This script will disable MobileMe/.Mac account access on Tiger and Leopard as it is found in System Preferences-> MobileMe/.Mac Note that the Preference Pane can be restored by moving the preference pane back from: /Library/Application Support/JAMF/DisabledPrefPanes/Mac.prefPane -TO- /System/Library/PreferencePanes/

disableMobileMePrefPane.sh (5.16 KB)

Download

disablePasswordHints.sh -- Disables Showing of Password Hints

This script will disable the "Show Password Hints" feature found in System Preferences-> Accounts -> Login Options.

disablePasswordHints.sh (3.89 KB)

Download

disableUSB.sh -- Disable the USB drivers

This script disables the USB drivers, thereby disabling all functionality of the USB ports. After running this script, the USB drivers will be moved to: /Library/Application Support/JAMF/DisabledExtensions/ This way, the USB drivers could be re-enabled in the future. After running this script, the machine will need to be rebooted for the settings to take effect.

disableUSB.sh (4.58 KB)

Download

disableiSight.sh -- Disable the iSight Camera drivers

This script disables the iSight Camera drivers, thereby disabling all functionality of the iSight Camera. After running this script, the iSight Camera drivers will be moved to: /Library/Application Support/JAMF/DisabledExtensions/ This way, the iSight Camera drivers could be re-enabled in the future. After running this script, the machine will need to be rebooted for the settings to take effect.

disableiSight.sh (5.97 KB)

Download

enableFileSharing.sh -- Enables or Disables Personal File Sharing on Mac OS X

This script enables or disables the Personal File Sharing preference on Mac OS X 10.3 or later. If there is a hardcoded value specified in the script for <enableFileSharing> it will be used. The value can also be populated from the JSS by deploying the script as a policy payload. Since the Casper Suite defines the first three parameters of a bash script as (1) Mount Point, (2) Computer Name and (3) username, the script uses the fourth parameter ($4) as the passable parameter (variable) to acquire the status of <enableFileSharing> and to set the enableFileSharing status.

enableFileSharing.sh (6.77 KB)

Download

enableFirewall.sh -- Enables or Disables the Firewall on macOS

This script enables or disables the firewall on macOS 10.7 or later. It can be used with a hardcoded value in the script, or read in as a parameter. Since Jamf Pro defines the first three parameters as (1) Mount Point, (2) Computer Name and (3) Username, we are using the fourth parameter ($4) as the passable parameter to acquire the status of <enableFirewall>. In addition, the fourth parameter is utilized to set the enableFirewall value.

enableFirewall.sh (5.35 KB)

Download

enableJournaling.sh -- Enable journaling on an HFS+ volume

This script enables the journaling feature on the specified HFS+ volume. Journaling can help protect a drive against corruption in the event of power loss or power failure and can also expedite the repair process if a bad sector is found. This script was designed to take advantage of The Casper Suite automatically passing the <mountPoint> parameter. For further description of file system journaling, see: http://support.apple.com/kb/HT2355

enableJournaling.sh (4.83 KB)

Download

encryptVirtualMemory.sh -- Encrypts Virtual Memory

This script will encrypt virtual memory. Please note that a reboot must take place after running the script for the virtual memory to be encrypted.

encryptVirtualMemory.sh (3.90 KB)

Download

importCACert.sh -- Import CA Certficate to the System Keychain

This script will import a ".pem" or ".cer" certificate from a given location on the machine to the system keychain. This script assumes the following workflow is taking place: 1.) Create a package of the ".pem" or ".cer" formatted certificate being deployed to a location such as: "/Library/Application Support/JAMF" 2.) Upload the package to Casper Admin 3.) Edit the "caCertLocation" variable located within this script to reflect the location of the CA cert as it was packaged. For example, if we have a certficate named "CompanyCA.cer" that was packaged to be installed to "/Library/Application Support/JAMF", we would set the "caCertLocation" variable to "/Library/Application Support/JAMF/CompanyCA.cer" 4.) Upload the script to Casper Admin and ensure that a script priority of "After" is selected 5.) Create a policy that will install the package containing the CA cert and run this script after installing the package.

importCACert.sh (6.03 KB)

Download

importVPN.sh -- Import VPN Settings

This script will import a .networkConnect file that has been packaged and deployed to a system. Prior to running this script, the VPN should be configured on a machine, and a configuration should be created. Once a VPN has been configured, navigate to the Network pane within the System Preferences application and highlight the VPN service you wish to export. Then click the settings button near the "+" and "-" icon and select "Export Configurations". Save the file to a location like the Desktop. Finally, create a package of this file using Composer. When deploying the package, ensure that this script has been edited so that the "vpnFilePath" parameter properly points to the location of the .networkConnect file as it was packaged. Deploy the package, and run the script with a priority of "After" to import the VPN settings for the user. Please note that a user does need to be logged in while this script is run. We recommend running it via a policy triggered by "login" or "Self Service." The VPN network interface name will remain generic unless the "vpnInterfaceName" variable is specified. Please note that the .networkConnect file does not contain the name of the inteface.

importVPN.sh (7.48 KB)

Download

limitSSHScope.sh -- Limit access to SSH to a single account

This script grants SSH access to an individual account on computers running Mac OS X 10.5 and later. It can be used with a hardcoded value in the script, or read in as a parameter. Since the Casper Suite defines the first three parameters as (1) Mount Point, (2) Computer Name and (3) username, we are using the forth parameter ($4) as the passable parameter. We do not use $3 since it may not match up to the username that we want to grant access for.

limitSSHScope.sh (5.23 KB)

Download

mountNetworkShare.sh -- Mount a network share

This script was designed to mount a network share on an event such as user login, or through a self service policy. Using Casper's policy engine, a policy can be scoped so that users and groups (local or directory-based) will mount run this script, and therefore mount the assigned network share. For directory-based users, it is recommended to use the "kerberos" authentication type. For local users, the "password" authentication type must be used. For kerberos authentication to work properly, the user must be able to manually mount the share when logged in by navigating to "Go" > "Connect to Server..." in the Finder and the user must be able to mount the share without authenticating. To ensure that your directory users are obtaining kerberos tickets properly, navigate to "System" > "Library" > "CoreServices" and open the "Kerberos Ticket Viewer" application while a directory user is logged in.

mountNetworkShare.sh (12.8 KB)

Download

secureBonjour.sh -- Disables DNS auto-discovery service required for Bonjour

This script will disable bonjour auto-discovery via DNS Service Discovery.

secureBonjour.sh (5.58 KB)

Download

setAirPortNetwork.sh -- Disassociates from the current wireless network and sets the SSID and WEP or WPA password on the AirPort assuming the AirPort is on

This script was designed to configure the AirPort network settings, including which SSID the AirPort is pointed to, as well as what password should be used to connect to the network if the network is a secured wireless network.

setAirPortNetwork.sh (4.70 KB)

Download

setDNSServers.sh -- Set a DNS server for a specified network interface

This script will set a DNS Server in the network settings for whichever network interface has been specified.

setDNSServers.sh (5.18 KB)

Download

setSearchDomains.sh -- Set a search domain for a specified network interface

This script will set a search domain in the network settings for whichever network interface has been specified.

setSearchDomains.sh (5.26 KB)

Download

setTimeServer.sh

This script will set a Time Server in the network settings for whichever network interface has been specified.

setTimeServers.sh (5.06 KB)

Download

setTimeZone.sh -- Set the time zone

The system time zone will be set according to the value specified in the paramter $timeZone. It can be used with a hardcoded value in the script, or read in as a parameter. Since the Casper Suite defines the first three parameters as (1) Mount Point, (2) Computer Name and (3) username, we are using the forth parameter ($4) as the passable parameter. If no parameter is passed, then the hardcoded value will be used.

setTimeZone.sh (6.58 KB)

Download

setWebProxy.sh -- Configure a web proxy for a specified network interface

This script will configure the web proxy on the specified network interface.

setWebProxy.sh (5.54 KB)

Download

setWiFiNetwork.sh -- Set or Change the Wi-Fi Network

This script was designed to configure the Wi-Fi network settings, including which SSID the Wi-Fi is pointed to, as well as what password should be used to connect to the network if the network is a secured wireless network.

setWiFiNetwork.sh (5.38 KB)

Download

timedForcedShutdown.sh -- This script will help to enforce a mandatory reboot or shut down

This script will help to enforce a mandatory reboot or shut down. If no console user is logged in, the script will execute the command stored in the $shutdownAction variable. If a console user is logged in, a dialog is displayed informing the user of the number of minutes until shutdown followed by a configurable message stored in $notificationMessage. The dialog contains two buttons. Clicking the "Postpone" button will cancel shutdown/reboot. Clicking the "Shut Down" button will execute the command stored in the $shutdownAction variable.

timedForcedShutdown.sh (7.69 KB)

Download

turnOffAirport.sh -- Turns the airport's power off

This script turns off power to the airport and can be especially useful when you want to ensure that users are connecting to a wired connection when possible. This script is different from the "disableAirport.sh" script in that the user can still re-enable the airport after the script turns it off. If you would like to completely disable the airport, try running the "disableAirport.sh" script.

turnOffAirport.sh (4.25 KB)

Download

unbindAD.sh -- Unbind from Active Directory

This script will unbind a client machine from an Active Directory domain. The <username> and <password> values can be used with a hardcoded value in the script, or read in as a parameter. Since the Casper Suite defines the first three parameters as (1) Mount Point, (2) Computer Name and (3) username, we are using the fourth parameter ($4) as the passable parameter.

unbindAD.sh (5.03 KB)

Download

unbindOD.sh -- Unbind from Open Directory

This script will unbind a client machine from an Open Directory domain. The <serverAddress>, <username>, and <password> values can be used with a hardcoded value in the script, or read in as a parameter. Since the Casper Suite defines the first three parameters as (1) Mount Point, (2) Computer Name and (3) username, we are using the fourth, fifth, and sixth parameters ($4, $5, $6) as the passable parameters.

unbindOD.sh (6.62 KB)

Download

unlockRegionCodeSetting.sh -- Unlock the DVD region code setting

This script unlocks or locks the system preference authorization to allow or disallow users to set the DVD region code, as reflected in the DVD player application. It has been designed to function on Mac OS X 10.4 and higher with DVD Player.app 1.0 and higher. The locked/unlock value will be set according to the value specified in the paramter $locked. It can be used with a hardcoded value in the script, or read in as a parameter. Since the Casper Suite defines the first three parameters as (1) Mount Point, (2) Computer Name and (3) username, we are using the forth parameter ($4) as the passable parameter. If no parameter is passed, then the hardcoded value will be used.

unlockRegionCodeSetting.sh (7.11 KB)

Download

Upload Managed Preference Manifest

Managed Preference (MCX) manifests allow you to enforce settings on managed computers with Jamf Pro. These files also work with Workgroup Manager.

Find out more about managed preference manifests on the managed preference manifests page.

Airport

Managed Client settings for Airport

com.apple.MCXAirPort.manifest (1.08 KB)

Download

Apple Bluetooth Settings

Apple Bluetooth ByHost Settings

com.apple.Bluetooth.ByHost.manifest (1.10 KB)

Download

Apple Digihub Settings

Apple Digihub Settings

com.apple.digihub.manifest (5.63 KB)

Download

Apple File Server Settings

Apple File Server Settings

com.apple.AppleFileServer.manifest (1.15 KB)

Download

Application Access

Application Access Settings

com.apple.applicationaccess.new.manifest (7.22 KB)

Download

Desktop

Desktop picture.

com.apple.desktop.manifest (1.66 KB)

Download

Dock

Dock preferences. Preferences are divided between simple appearance keys and the more complicated Application and Document tile dictionaries.

com.apple.dock.manifest (23.5 KB)

Download

Front Row

Front Row Preferences

com.apple.frontrow.manifest (956 B)

Download

MCXBluetooth

Bluetooth preferences.

com.apple.MCXBluetooth.manifest (905 B)

Download

MCXRedirector

Allows redirection of folders in the user's home.

com.apple.MCXRedirector.manifest (9.19 KB)

Download

MCXSidebar

Sidebar preferences.

com.apple.MCX.sidebar.manifest (999 B)

Download

Mail

Mail preferences for 10.6.

com.apple.mail.manifest (5.98 KB)

Download

Mail-10.5

Mail preferences for 10.5.

com.apple.mail.managed.manifest (4.05 KB)

Download

SoftwareUpdate

Apple Software Update Settings

com.apple.SoftwareUpdate.ByHost.manifest (1.35 KB)

Download

SoftwareUpdate

Managed Client settings for Software Update

com.apple.SoftwareUpdate.manifest (1.27 KB)

Download

SystemPreferences

Managed Client settings to set the enabled Preference Panes in System Preferences.

com.apple.systempreferences.manifest (16.4 KB)

Download

SystemUIServer

Control the types of Removable Media users can mount.

com.apple.systemuiserver.manifest (7.14 KB)

Download

VPN

VPN preferences.

com.apple.vpnsettings.manifest (2.98 KB)

Download

VoiceOver

VoiceOver preferences

com.apple.screenreaderd.manifest (942 B)

Download

dashboard

Dashboard preferences.

com.apple.dashboard.manifest (919 B)

Download

dockfixup

Apple Dockfixup Settings

com.apple.dockfixup.manifest (2.46 KB)

Download

finder

Finder Settings

com.apple.finder.manifest (23.9 KB)

Download

homeSync

Home synchronization preferences

com.apple.homeSync.manifest (31.4 KB)

Download

iCal

iCal preferences.

com.apple.iCal.managed.manifest (5.71 KB)

Download

iChat

iChat preferences.

com.apple.iChat.Managed.manifest (4.60 KB)

Download

internet

Internet configuration.

com.apple.internet.manifest (4.97 KB)

Download

loginwindow

Loginwindow Settings

com.apple.loginwindow.manifest (19.6 KB)

Download

mcx

Mobile Account creation deletion and other options.

com.apple.MCX.manifest (10.6 KB)

Download

mcxMenuExtras

Managed menu extras. Specified menu extras will be added or removed from the menu bar after user login. Standard menu extra may be specified by file name. Non-standard menu extras are specified by full path.

com.apple.mcxMenuExtras.manifest (14.0 KB)

Download

recentitems

Apple Recent Items Settings

com.apple.recentitems.manifest (6.22 KB)

Download

scheduler

Apple Scheduler Settings

com.apple.scheduler.ByHost.manifest (4.35 KB)

Download

screensaver

ByHost Screen Saver preferences.

com.apple.screensaver.ByHost.manifest (2.89 KB)

Download

screensaver

Sleep and screen saver password.

com.apple.screensaver.manifest (2.70 KB)

Download

virtualMemory

Apple Virtual Memory Settings

com.apple.virtualMemory.manifest (1.27 KB)

Download