jamf cheatsheet

Command Definition

jamf
-displayJSSTraffic Display  the  total  network  traffic  between  this  app  and  the  JSS

-verbose Show  verbose  events

-hidden Display  “unadvertised”  verbs

System Management
help jamf  help  [verb]

checkJSSConnection Checks  the  availability  of  the  JSS  

jamf  checkJSSConnection  [-­‐retry  x]

 -­‐retry     The  number  of  times  the  connection  should  be  tested

If  nothing  is  specified,  it  will  be  tried  12  times  before  exiting.
Returns  0  if  the  JSS  is  available
Returns  1  if  the  JSS  is  not  available

createAccount Creates  a  new  local  account  on  the  system

jamf  createAccount  -­‐username  <username>  -­‐realname  <Real  Name>  

 [-­‐password  <password>]  [-­‐passhash  <passhash>]  
 [-­‐home  </path/to/home/directory>]  
 [-­‐hint  <hint>]  [-­‐shell  <shell>]  
 [-­‐picture  <picture>]  [-­‐admin]  
 [-­‐someLimits]  [-­‐secureSSH]

 -­‐username     The  username  of  the

 -­‐realname     The  Real  Name  of  the  user
 -­‐password     The  password  of  the  user
 -­‐passhash     The  hashed  password  of  the  user
 -­‐home     The  location  of  the  user's  home  directory
 -­‐hint     The  hint  displayed  to  the  user
 -­‐shell     The  user's  default  shell
 -­‐picture     The  user's  picture  for  the  login  window
 -­‐admin     This  flag  add  the  user  to  the  admin  group
 -­‐someLimits   Creates  a  limited  user  account
 -­‐hiddenUser   Creates  an  account  with  a  UID  under  500  
 -­‐networkUser   Creates  an  account  with  a  UID  over  1025

displayMessage jamf  displayMessage  -­‐message  <message>

enroll Enrolls  this  machine  into  the  JSS

jamf  enroll  [-­‐prompt  |  -­‐invitation]  [-­‐noRecon]  [-­‐noManage]  

 -­‐prompt     Prompts  for  credentials  via  standard  in.

 -­‐invitation       Takes  an  invitation  for  credentials  rather  than  username/password.
 -­‐noRecon     Stops  enroll  from  performing  a  recon.
 -­‐noManage     Stops  enroll  from  enforcing  the  management  framework.

manage This  verb  will  enforce  the  entire  management  framework  from  the  JSS  including  Scheduled  
Tasks,  the  Restricted  Applications  and  Global  ManagementPreferences  such  as  the  Startup  
Script  and  login/logout  hooks.

policy Checks  for  policies  on  the  JSS

jamf  policy  [-­‐id  <id>]  [-­‐username  <username>]

-­‐event    “Trigger”  that  can  be  a  custom  name  or  a  predefined  named
Login/Logout/Startup/networkStateChange/enrollmentComplete
-­‐username     The  username  to  check  for  policies  for
 policy Checks  for  policies  on  the  JSS

jamf  policy  [-­‐id  <id>]  [-­‐username  <username>]

Command Definition
-­‐event    “Trigger”  that  can  be  a  custom  name  or  a  predefined  named
Login/Logout/Startup/networkStateChange/enrollmentComplete
-­‐username     The  username  to  check  for  policies  for
-­‐id     The  ID  of  the  Policy  to  be  executed.  Used  by  Casper  
Remote  and  Self  Service

reboot Reboots  the  computer

recon Runs  Recon  to  update  the  inventory  on  the  JSS:
 -­‐saveFormTo     Save  the  contents  of  the  HTTP  form  to  a  file.  

The  following  options  allow  you  to  specify  inventory  information  for  the  computer:
 -­‐assetTag     The  Asset  Tag  of  the  computer  
 -­‐endUsername     The  username  of  the  primary  user  
 -­‐realname     The  Real  Name  of  the  primary  user  
 -­‐email     The  email  address  of  the  primary  user  
 -­‐building     The  text  representation  of  a  Building  in  the  JSS  
 -­‐department     The  text  representation  of  a  Department  in  the  JSS  
 -­‐room     The  Room  that  the  computer  is  in  

removeFramework Remove  jamf  binary  and  components  from  machine

removeMdmProfile Removes  the  jamf  MDM  profile

resetPassword Resets  a  local  user's  password

setARDFields Sets  the  ARD  Fields

jamf  setARDFields  -­‐target  <target  volume>  -­‐1  <field  1>    -­‐2  <field  2>  -­‐3  <field  3>  -­‐4  <field  4>

-­‐target     The  target  drive  to  set  the  fields  on

setComputerName Sets  the  computer  name

trustJSS Download  the  required  CS  cert  from  the  JSS  and  adds  cert  as  trusted  to  System.keychain

Preference Management
modifyDock Installs  or  removes  items  in  all  users  docks
jamf  modifyDock  -­‐file  <file  name>  [-­‐leaveRunning]  
[-­‐beginning]  [-­‐remove]

jamf  modifyDock  -­‐id  <dock_item_id>  [-­‐leaveRunning]  

[-­‐beginning]  [-­‐remove]

 -­‐file     The  file  that  contains  the  formatted  dock  items.

 -­‐id       The  dock_item_id  of  the  dock  item  on  the  JSS.
 -­‐leaveRunning   The  Dock  process  will  not  be  restarted.  
 -­‐beginning     Item  will  be  placed  at  the  left  side  of  the  Dock.  
 -­‐remove     The  item  will  be  removed  instead  of  added.

Installs & Policy

encryptDisk FileVault  options
-­‐username user  that  has  permission  to  unlock  disk
-­‐password
-­‐pathToCertificate Cert  for  institutional  key
-­‐defer Defers  encryption  until  the  OS  prompts  for  password
-­‐prompt Prompt  for  user’s  credentials
-­‐authRestart Performs  an  authenticated  restart  after  encryption  completes

install Installs  a  package

jamf  install  -­‐package  <file  name>  -­‐path  <path  to  file>  

   -­‐target  <volume>
   [-­‐fut]  [-­‐feu]  [-­‐showProgress]  
 install Installs  a  package

Command jamf   install  -­‐package  <file  name>  -­‐path  <path  to  file>  
Definition
   -­‐target  <volume>
   [-­‐fut]  [-­‐feu]  [-­‐showProgress]  

 -­‐package   The  file  name  of  the  package  to  be  installed.
 -­‐path   Path  to  the  package,  not  including  the  package  name
 -­‐target     The  drive  that  the  package  will  be  installed  to.
 -­‐fut     Fill  User  Templates.  
This  option  will  take  any  user  data  (preferences,  documents,  etc...)  and  populate  the  files  to  
the  User  Templates  meaning  that  any  new  user  created  on  the  system  will  have  these  files.

 -­‐feu     Fill  Existing  Users.  

This  option  will  take  any  user  data  (preferences,  documents,  etc...)  and  populate  the  files  to  
every  user  on  the  computer  with  a  home  directory.
 
-­‐showProgress   Display  the  progress  of  the  download  (HTTP  only)  and  the  
installation  process.

installAllCached Installs  all  packages  that  are  cached

removeSWUSettings Remove  settings  that  point  SWU  at  internal  servers

runScript Runs  a  script

runSoftwareUpdate Run  Software  Update

uninstall Uninstalls  a  package

jamf  uninstall  -­‐target  <target  volume>  -­‐id  <JSS  Package  ID>  [-­‐fut]  [-­‐feu]

 -­‐target     The  target  drive  to  uninstall  the  package  from

 -­‐id     The  ID  of  the  package  in  the  JSS
 -­‐fut     Remove  any  files  from  the  package  that  are  in  the  
User  Templates
 -­‐feu     Remove  any  files  from  the  package  that  are  installed  in  a  user's  
home  directory

unmountServer Unmounts  a  file  server

12/31/15