macOS Onboarding

This is the follow up materials for the macOS Onboarding presentation, presented by Chris Schasse at the April 5th LaunchPad Presentation. You can download the keynote here:

macOS Onboarding.key

Download KEY • 255.13MB

Application Dependency Script:

GitHub: https://github.com/Rocketman-Tech/Application-Dependency

App Setup Helper Script

GitHub: https://github.com/Rocketman-Tech/App-Setup-Helper

Check out the original presentation at Penn State Mac Admins: https://youtu.be/3gC1MaFKKAs?si=lB4S9lhq34mns9Yt

Blog post with more information: https://www.rocketman.tech/post/you-down-with-tcc

Tips, Tricks, and Troubleshooting

Ensure current users Don’t get macOS onboarding!

The macOS Onboarding workflow will run on all Mac computers as soon as you enable it! To ensure it doesn’t run on currently setup Mac computers, do the following: 

• Create a smart group for computers enrolled before today

• Deploy a script scoped to that smart group that does the following:

sudo -u $3 defaults write /Users/"$3"/Library/Preferences/com.jamfsoftware.selfservice.mac.plist com.jamfsoftware.selfservice.onboardingcomplete -bool YES

• As an extra precaution, only scope onboarding policies to computers enrolled after today

For more information, check out Jamf's documentation: https://learn.jamf.com/en-US/bundle/jamf-pro-documentation-current/page/macOS_Onboarding.html#ariaid-title2

Restart the onboarding workflow

If you want to restart the workflow for testing (or some other reason) do the following on the computer you are working on: Delete the self service plist:

• Delete the self service plist:

  • Open Terminal and run the following command:

defaults delete ~/Library/Preferences/com.jamfsoftware.selfservice.mac.plist

• If you want to flush your policies so they re-run:

• Open Terminal and run the following command:

sudo jamf flushPolicyHistory

• Open Self Service (or close it and relaunch it if it's already open)

Checking the Logs

Useful logs are located in the following locations:

• Self Service Log: ~/Library/Logs/JAMF/selfservice_debug.log

• Apple Install Log: /var/log/install.log

• Jamf Log: /var/log/jamf.log

• MDM Logs: You can view specific MDM Logs by running commands in Terminal like this:

log show --info --debug --predicate 'subsystem == "com.apple.ManagedClient" AND category == "ManagedApps"' --last 1h 

Feature Requests:

Add Jamf Catalog Apps to macOS Onboarding: https://ideas.jamf.com/ideas/JN-I-28013

macOS Onboarding - Increase Visibility via Self Service GUI: https://ideas.jamf.com/ideas/JPRO-I-197