jamf cheatsheet
Command Definition
jamf
-displayJSSTraffic Display
the
total
network
traffic
between
this
app
and
the
JSS
-verbose Show
verbose
events
-hidden Display
“unadvertised”
verbs
System Management
help jamf
help
[verb]
checkJSSConnection Checks
the
availability
of
the
JSS
jamf
checkJSSConnection
[-‐retry
x]
-‐retry
The
number
of
times
the
connection
should
be
tested
If
nothing
is
specified,
it
will
be
tried
12
times
before
exiting.
Returns
0
if
the
JSS
is
available
Returns
1
if
the
JSS
is
not
available
createAccount Creates
a
new
local
account
on
the
system
jamf
createAccount
-‐username
<username>
-‐realname
<Real
Name>
[-‐password
<password>]
[-‐passhash
<passhash>]
[-‐home
</path/to/home/directory>]
[-‐hint
<hint>]
[-‐shell
<shell>]
[-‐picture
<picture>]
[-‐admin]
[-‐someLimits]
[-‐secureSSH]
-‐username
The
username
of
the
-‐realname
The
Real
Name
of
the
user
-‐password
The
password
of
the
user
-‐passhash
The
hashed
password
of
the
user
-‐home
The
location
of
the
user's
home
directory
-‐hint
The
hint
displayed
to
the
user
-‐shell
The
user's
default
shell
-‐picture
The
user's
picture
for
the
login
window
-‐admin
This
flag
add
the
user
to
the
admin
group
-‐someLimits
Creates
a
limited
user
account
-‐hiddenUser
Creates
an
account
with
a
UID
under
500
-‐networkUser
Creates
an
account
with
a
UID
over
1025
displayMessage jamf
displayMessage
-‐message
<message>
enroll Enrolls
this
machine
into
the
JSS
jamf
enroll
[-‐prompt
|
-‐invitation]
[-‐noRecon]
[-‐noManage]
-‐prompt
Prompts
for
credentials
via
standard
in.
-‐invitation
Takes
an
invitation
for
credentials
rather
than
username/password.
-‐noRecon
Stops
enroll
from
performing
a
recon.
-‐noManage
Stops
enroll
from
enforcing
the
management
framework.
manage This
verb
will
enforce
the
entire
management
framework
from
the
JSS
including
Scheduled
Tasks,
the
Restricted
Applications
and
Global
ManagementPreferences
such
as
the
Startup
Script
and
login/logout
hooks.
policy Checks
for
policies
on
the
JSS
jamf
policy
[-‐id
<id>]
[-‐username
<username>]
-‐event
“Trigger”
that
can
be
a
custom
name
or
a
predefined
named
Login/Logout/Startup/networkStateChange/enrollmentComplete
-‐username
The
username
to
check
for
policies
for
policy Checks
for
policies
on
the
JSS
jamf
policy
[-‐id
<id>]
[-‐username
<username>]
Command Definition
-‐event
“Trigger”
that
can
be
a
custom
name
or
a
predefined
named
Login/Logout/Startup/networkStateChange/enrollmentComplete
-‐username
The
username
to
check
for
policies
for
-‐id
The
ID
of
the
Policy
to
be
executed.
Used
by
Casper
Remote
and
Self
Service
reboot Reboots
the
computer
recon Runs
Recon
to
update
the
inventory
on
the
JSS:
-‐saveFormTo
Save
the
contents
of
the
HTTP
form
to
a
file.
The
following
options
allow
you
to
specify
inventory
information
for
the
computer:
-‐assetTag
The
Asset
Tag
of
the
computer
-‐endUsername
The
username
of
the
primary
user
-‐realname
The
Real
Name
of
the
primary
user
-‐email
The
email
address
of
the
primary
user
-‐building
The
text
representation
of
a
Building
in
the
JSS
-‐department
The
text
representation
of
a
Department
in
the
JSS
-‐room
The
Room
that
the
computer
is
in
removeFramework Remove
jamf
binary
and
components
from
machine
removeMdmProfile Removes
the
jamf
MDM
profile
resetPassword Resets
a
local
user's
password
setARDFields Sets
the
ARD
Fields
jamf
setARDFields
-‐target
<target
volume>
-‐1
<field
1>
-‐2
<field
2>
-‐3
<field
3>
-‐4
<field
4>
-‐target
The
target
drive
to
set
the
fields
on
setComputerName Sets
the
computer
name
trustJSS Download
the
required
CS
cert
from
the
JSS
and
adds
cert
as
trusted
to
[Link]
Preference Management
modifyDock Installs
or
removes
items
in
all
users
docks
jamf
modifyDock
-‐file
<file
name>
[-‐leaveRunning]
[-‐beginning]
[-‐remove]
jamf
modifyDock
-‐id
<dock_item_id>
[-‐leaveRunning]
[-‐beginning]
[-‐remove]
-‐file
The
file
that
contains
the
formatted
dock
items.
-‐id
The
dock_item_id
of
the
dock
item
on
the
JSS.
-‐leaveRunning
The
Dock
process
will
not
be
restarted.
-‐beginning
Item
will
be
placed
at
the
left
side
of
the
Dock.
-‐remove
The
item
will
be
removed
instead
of
added.
Installs & Policy
encryptDisk FileVault
options
-‐username user
that
has
permission
to
unlock
disk
-‐password
-‐pathToCertificate Cert
for
institutional
key
-‐defer Defers
encryption
until
the
OS
prompts
for
password
-‐prompt Prompt
for
user’s
credentials
-‐authRestart Performs
an
authenticated
restart
after
encryption
completes
install Installs
a
package
jamf
install
-‐package
<file
name>
-‐path
<path
to
file>
-‐target
<volume>
[-‐fut]
[-‐feu]
[-‐showProgress]
install Installs
a
package
Command jamf
install
-‐package
<file
name>
-‐path
<path
to
file>
Definition
-‐target
<volume>
[-‐fut]
[-‐feu]
[-‐showProgress]
-‐package
The
file
name
of
the
package
to
be
installed.
-‐path
Path
to
the
package,
not
including
the
package
name
-‐target
The
drive
that
the
package
will
be
installed
to.
-‐fut
Fill
User
Templates.
This
option
will
take
any
user
data
(preferences,
documents,
etc...)
and
populate
the
files
to
the
User
Templates
meaning
that
any
new
user
created
on
the
system
will
have
these
files.
-‐feu
Fill
Existing
Users.
This
option
will
take
any
user
data
(preferences,
documents,
etc...)
and
populate
the
files
to
every
user
on
the
computer
with
a
home
directory.
-‐showProgress
Display
the
progress
of
the
download
(HTTP
only)
and
the
installation
process.
installAllCached Installs
all
packages
that
are
cached
removeSWUSettings Remove
settings
that
point
SWU
at
internal
servers
runScript Runs
a
script
runSoftwareUpdate Run
Software
Update
uninstall Uninstalls
a
package
jamf
uninstall
-‐target
<target
volume>
-‐id
<JSS
Package
ID>
[-‐fut]
[-‐feu]
-‐target
The
target
drive
to
uninstall
the
package
from
-‐id
The
ID
of
the
package
in
the
JSS
-‐fut
Remove
any
files
from
the
package
that
are
in
the
User
Templates
-‐feu
Remove
any
files
from
the
package
that
are
installed
in
a
user's
home
directory
unmountServer Unmounts
a
file
server
12/31/15