• Stars
    star
    363
  • Rank 116,654 (Top 3 %)
  • Language
    Shell
  • License
    MIT License
  • Created about 6 years ago
  • Updated about 1 year ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Bash script to start DEPNotify and run policies during enrollment with Jamf Pro

DEPNotify Starter for Jamf Pro

Template bash script to start DEPNotify and run Policies during enrollment with Jamf. App installer, source code, and full product documentation can be found at: https://gitlab.com/Mactroll/DEPNotify

Script configuration can also be achived using the following app: DEPNotify Set-up Helper

General Information

Please review RELEASES.md to ensure proper version pairing of the script and DEPNotify app.

This script is designed to make implementation of DEPNotify very easy with limited scripting knowledge. The script has variables that may be modified to customize the end user experience. DO NOT modify things in or below the CORE LOGIC areas unless major testing and validation is performed.

This script is set to TESTING_MODE by default.

There is a warning alert box that will show if TESTING_MODE is set to true in version 1.2.0 and later. Having testing mode on will cause the following things to occur:

  • Sleep commands in place of running policies or other things that may effect the device configuration
  • Removal of BOM and configuration files
  • Command + Control + x is set to quit or interrupt DEPNotify

The script will need to be changed from TESTING_MODE=true to TESTING_MODE=false for production deployment.

It is recommended that you read the script fully and make changes that suit your organization prior to deployment to end user devices. Also, don't forget to test, test, and test again!

Configuration within Jamf Pro

While each organization will use a setup tool like DEPNotify differently, this script is designed with an end user provisioning model in mind. Changing the workflow should result in testing prior to production release.

  1. Create policies in Jamf Pro to install core software during first setup. Set the frequency to ongoing and the trigger to custom and type in a manual trigger. Screenshot below showing how a single policy is configured
  2. Once software policies are created, customize this script with changes to verbiage as well as updating the POLICY_ARRAY with appropriate information. Double check the testing flag once you are ready to proceed
  • (Optional) If using the EULA window, there must be a .txt file saved somewhere locally prior to DEPNotify running. A by default, the script is looking in /Users/Shared for eula.txt
  • (Optional) If using the registration window, you must have the departments and buildings in Jamf prior to running DEPNotify on the client. Each text box or drop down has its own code so that it can be modified to suit individual needs. Make sure to test a bunch if the logic sections are changed
  1. Upload DEPNotify.pkg (downloaded from https://gitlab.com/Mactroll/DEPNotify/tags) and this script to Jamf Pro. Create a policy to install the PKG and this script using the Enrollment Complete trigger. Also set the execution frequency to ongoing
  • (Optional) If using the EULA, add the EULA.pkg built in step 2 to this policy as well
  • (Optional) Policy parameters can be used to configure true/false flags to make testing features easier
  1. Once a computer is finished enrolling, the DEPNotify policy will start and then call the other policies in order based on the array.

FileVault Support

If you are requiring FileVault encryption, the script will automatically check at the end of running policies if deferred enablement is on. This will trigger a logout instead of a quit of DEPNotify.

Additional Information

For this script, verbose comments have been added to assist in configuration and understanding. For more information on DEPNotify, visit https://gitlab.com/Mactroll/DEPNotify

Software Versions and Releases

Software versions started to get rather cumbersome as versions of the script deviated from the app's version. Documentation of the script to app testing as well as macOS versions can now be found on the RELEASES.md file.

Change Log

The change log was getting a bit long and now has moved to its own page. Please visit the CHANGELOG.md for more information.

Contributors

This project could not have happened without several people's assistance. A special thanks to those individuals can be found on CONTRIBUTORS.md

Migration

This project was moved from https://github.com/jamfprofessionalservices/DEPNotify

More Repositories

1

PPPC-Utility

Privacy Preferences Policy Control (PPPC) Utility
Swift
732
star
2

CVE-2020-0796-RCE-POC

CVE-2020-0796 Remote Code Execution POC
Python
520
star
3

aftermath

Aftermath is a free macOS IR framework
Swift
459
star
4

NetSUS

NetBoot and Software Update Server
PHP
305
star
5

MakeMeAnAdmin

Provides temporary admin access for a standard user via Jamf Self Service
Shell
254
star
6

CVE-2020-0796-LPE-POC

CVE-2020-0796 Local Privilege Escalation POC
Python
243
star
7

FreeTheSandbox_LPE_POC_13.7

Jailbreak for iOS 13.7 and earlier
C
223
star
8

Jamf-Nation-Scripts

Scripts Migrated from Jamf Nation
Shell
183
star
9

jamfprotect

A repository for open-source resources created for use with or alongside Jamf Protect.
Shell
176
star
10

CVE-2020-1206-POC

CVE-2020-1206 Uninitialized Kernel Memory Read POC
C#
146
star
11

FileVault2_Scripts

Scripts and Extension Attributes for use with FileVault 2 on Mountain Lion
Shell
145
star
12

JamfMigrator

A tool to migrate data granularly between Jamf Pro servers
Swift
137
star
13

mut

Swift
133
star
14

JAWA

Jamf Automation and Webhook Assistant
HTML
128
star
15

CIS-for-macOS-Catalina-CP

CIS Benchmarks for macOS Catalina
Shell
122
star
16

Notifier

Swift project which can post macOS alert or banner notifications on 10.15+ clients
Swift
118
star
17

zecops_public

Objective-C
114
star
18

API_Scripts

Scripts that make use of the JAMF Software Server API
Shell
114
star
19

Jamf-Nation-Extension-Attributes

Shell
112
star
20

JamfPrivacyPreferencePolicyControlProfiles

Shell
109
star
21

CIS-for-macOS-Sierra

Shell
105
star
22

ReEnroller

Migrate macOS devices from one Jamf Server to another.
Swift
101
star
23

jamJAR

jamJAR: Jamf, AutoPKG & Munki combined by dataJAR
Python
99
star
24

jamfStatus

Menu app to monitor JamfCloud status
Swift
98
star
25

Jamf-Environment-Test

Admin Utility for testing an environments network for success with Apple Devices
Shell
96
star
26

jamfconnect

A repository for Jamf Connect scripts, configuration profile templates,EAs and more!
Shell
88
star
27

jamfpro

JamfPro Docker image
Shell
70
star
28

regatta

Regatta is a distributed key-value store. It is Kubernetes friendly with emphasis on high read throughput and low operational cost.
Go
64
star
29

NoMAD-2

A complete ground-up rewrite of NoMAD utilizing the same AD Auth Framework found in NoMAD Login.
Swift
63
star
30

NoMADLogin-AD

Login to an AD user account without binding your Mac to AD.
Swift
50
star
31

SMBGhost-SMBleed-scanner

SMBGhost (CVE-2020-0796) and SMBleed (CVE-2020-1206) Scanner
Python
47
star
32

DEPNotify

Swift
43
star
33

2016_JNUC_Security_Reporting_Compliance

Repo for code used in all presentation slides from the 2016 JNUC Presentation "Digging into Security, Compliance, and Reporting"
Shell
42
star
34

Provisioning-Workflows

Provisioning Workflows for a Post-Imaging World
Shell
41
star
35

Classic-API-Postman-Collection

41
star
36

CIS-for-macOS-High-Sierra-CP

Shell
40
star
37

JamfSync

Jamf Sync utility for synchronizing between Jamf Pro distribution points and/or file folders
Swift
38
star
38

ManagedAppConfigLib

Makes Managed AppConfig on iOS, tvOS, and macOS easier to work with.
Swift
36
star
39

jamf-laps-public

A GUI app for retrieving Jamf Pro LAPS ("Local Administrator Password Solution") credentials
Swift
36
star
40

Jamf-Connect-Resources

A repository for Jamf Connect scripts, configuration profile templates, and legacy content.
Shell
36
star
41

NoMAD

Get all of AD, with none of the bind!
Swift
30
star
42

JamfProvisioner

An Automated Erase/Install Workflow for macOS and Jamf Pro
Shell
30
star
43

powerbi

Jamf PowerBi Integration
28
star
44

jamf-printer-manager

macOS app to upload printer configurations to Jamf Pro
Swift
28
star
45

Subprocess

Swift library for macOS providing interfaces for both synchronous and asynchronous process execution
Swift
27
star
46

CIS-for-macOS-Sierra-CP

CIS for macOS 10.12 remediated with script and configuration profiles
Shell
26
star
47

Mac-Asset-Tag

A script that generates a GUI to accept a user input asset tag for the Mac.
Python
26
star
48

ol

Misc Jamf-related Projects
PowerShell
25
star
49

Scripting-101-Webinar

Resources for the "Scripting 101 for Apple Admins" webinar - June 2019
Shell
25
star
50

AppConfig-Generator

Java
24
star
51

Jamf-Pro-Object-LookUp

Script to query Jamf Pro and find what an Object is associated with
Shell
23
star
52

STIG-macOS-10_14

STIG for macOS Mojave - audit and remediation with scripts and Configuration Profiles
Shell
20
star
53

Munki-Catalog-Browser

Munki Catalog Browser is an app which allows for easy browsing of items in your devices Munki catalogs as well as exporting to CSV
Swift
20
star
54

homebrew-tap

Ruby
19
star
55

CIS-for-macOS-High-Sierra

Shell
17
star
56

JamfConnectUninstall

Shell
16
star
57

NoMAD-ADAuth

Swift
14
star
58

CertificateSDK

Get Certificates From Jamf Pro Into Your iOS Apps
Objective-C
13
star
59

Jamf-Switcher

Jamf Switcher is an app which points either Jamf Pro applications or your browser to a particular Jamf deployment and is configured by Self Service Bookmarks
Swift
13
star
60

jamf_connectwise

An integration between Connectwise and Jamf Pro
Python
12
star
61

SmashingJamfProDashboards

Example jobs, dashboard and YAML file for use with Jamf Pro and Smashing
Ruby
11
star
62

AppConfigSpecCreator

Tool for Generation of Managed App Config Spec Files
JavaScript
10
star
63

authchanger

Utility for making changes to the macOS authorization database to easily allow for changing loginwindow mechanisms.
Swift
9
star
64

rendr

A project scaffolding tool
Rust
8
star
65

Jamf-Connect-Configurations-Templates

8
star
66

JSS-LDAP-Sync

Sync department and building objects in the JSS with LDAP records
PowerShell
7
star
67

TableauIntegrations

JavaScript
7
star
68

groupsync

Sync LDAP groups with GitHub teams (and possibly more in the future).
Go
7
star
69

JamfSupport

Shell
7
star
70

Classic-API-Swagger-Specification

7
star
71

JamfProtect-PPPC-Profile

A PPPC configuration profile to allow full disk and accessibility permissions for computers with the Jamf Protect agent.
6
star
72

anti-phishing-extension

Augment the web with indicators that help detect phishing attempts
JavaScript
6
star
73

regatta-go

Regatta client for Go language
Go
5
star
74

JamfProFlow

Database application for managing configuration sets and change-managed workflows in Jamf Pro
Roff
5
star
75

SplunkBase

Jamf's Published Splunk Base Integration
Python
5
star
76

GDPRAutomationTool

Python
5
star
77

kinobi-title-editor

Shell
4
star
78

Haversack

A Swift library for keychain access on Apple devices
Swift
4
star
79

gitlab_license_exporter

Gitlab License Information exporter
Go
3
star
80

testrail-reporting

Easily send results of your tests to Test Rail.
Groovy
3
star
81

TELUGU_CVE-2018-4124_POC

Objective-C
3
star
82

billboard

Swift
2
star
83

regatta-helm

Helm Chart for the distributed key-value store Regatta.
Smarty
2
star
84

JamfProFlow-Sets

Configs for Jamf Pro
2
star
85

RADAR_API_Postman_Collection

2
star
86

kyverno-test-util

Python
2
star
87

homebrew-internal-tap

Homebrew Internal Tap
Ruby
1
star
88

rendr-sample-blueprint-go-microservice

Shell
1
star
89

aurorasnapshot

Aurora Cluster snapshot handler (Allows to create and delete Aurora DB Snapshots based in tags)
Python
1
star
90

regatta-java

This repository hosts the code of Regatta client for JVM languages.
Java
1
star
91

ms-security-copilot-plugin

Basic Jamf Pro OpenAPI spec for use with Microsoft Security CoPilot plugin
1
star