mlbz521 / macadmin Goto Github PK

I think this comparison should be strictly ">" rather than ">="

Thank you for creating these extension attributes. For the CrowdStrike status I keep getting invalid customer ID. Do I use the checksum on the download page? Or is there another code I should use?

Using the 1.11.0c version of this extension, we're seeing a large number of macs currently on macOS 11 report that "Mojave / OS Limitation" is their latest supported OS. Machines we have been able to identify appear to primarily be iMac15,1. We're still investigating if other models are reporting inaccurately.

Get-LatestOSSupported.sh throws a "Model No Longer Supported" for the Mac Studio. Machine shows up as being "Mac13,1" (at least).

macOS Sonoma dropped support for MacBook (Retina, 12-inch, 2017) (MacBook10,1), but the Extension Attribute is still identifying the device as "Sonoma*"

MacAdmin/Apple_RepairPrograms.py /

not working as on date

geting error

~/Desktop/Apple_RepairPrograms.py
usage: Apple_RepairPrograms.py [-h] [--serialnumber C02LA1K9G7DM]
[--model MacBookPro11,4]
[--input /path/to/input_file.csv]
[--output /path/to/output_file.csv]

Apple Exchange and Repair Extension Programs Lookup

optional arguments:
-h, --help show this help message and exit

Single Device:
--serialnumber K9G7DM, -s 1K9G7DM
A single serial number
--model MacBookPro11,4, -m MacBookPro11,4
A model or model identifier. Example: MacBook Pro
(Retina, 15-inch, Mid 2015) or 15-inch Retina MacBook
Pro (Mid 2015) or MacBookPro11,4

Batch Process:
--input /path/to/input_file.csv, -i /path/to/input_file.csv
Path to a CSV with a list of serial numbers, and
models or model identifiers. Example: MacBook Pro
(Retina, 15-inch, Mid 2015) or 15-inch Retina MacBook
Pro (Mid 2015) or MacBookPro11,4
--output /path/to/output_file.csv, -o /path/to/output_file.csv
Path to a CSV where devices that are eligible for a
repair will be written. WARNING: If the files exists,
it will be overwritten!

Error: Not enough arguments provided.
NTS-IT-001:Desktop manikandan.raju$

Getting error in bigsur while sunning the script :

Error: Error Domain=NSCocoaErrorDomain Code=260 "The file “status.bin” couldn’t be opened because there is no such file." UserInfo={NSFilePath=/Library/Application Support/CrowdStrike/Falcon/status.bin, NSUnderlyingError=0x7f980cc22740 {Error Domain=NSPOSIXErrorDomain Code=2 "No such file or directory"}}
sysctl: unknown oid 'cs.version'
Not Running

The Avast Status EA is not properly reporting Shield Statuses. Avast has apparently changed the format of the configuration files that I was querying for the status of each Shield.

They now appear in to be in JSON and do not list "enabled" or "disabled" if in the defaults state of "enabled."

I'll update this as soon as possible.

https://github.com/MLBZ521/macOS.JAMF/blob/master/Extension%20Attributes/jamf_ea_AvastStatus.sh

LatestOSSupported.sh: showing wrong os supported. I have a iMac20,1 Intel (Retina 5K, 27-inch, 2020) and its showing : LatestOSSupported : Catalina

I am not sure which version this change occurred, but State: has been moved to CloudInfo from Communications. This is causing the connectionState variable to be empty. The get_falconctl_stats function needs updated to include CloudInfo.

connectionState=$( echo "${falconctlStats}" | /usr/bin/awk -F "State:" '{print $2}' | /usr/bin/xargs )

get_falconctl_stats() {
	# Get the current stats.
	# Arguments
	# $1 = (str) path to falconctl

	"${1}" stats agent_info Communications CloudInfo 2>&1
	# Will eventually move to the --plist format, once it's fully supported
	# "${1}" stats agent_info Communications CloudInfo --plist
}

what would cause multiple machine return Current OS Not Supported. I have several newer machine with this issue. When looking at the model identifier I have some that return Ventura* and other with the Not supported. Any help would be appreciated.

Hello,

This script leverages data from a local inventory on the Mac, possibly policy with ID=10.

local_inventory = "/opt/ManagedFrameworks/Inventory.plist"

execute_process("/usr/local/bin/jamf policy -id 10")

Do you have this documented somewhere? I couldn't find it..

I want to begin saving info on the Mac for later collection during recon, and your policy might teach me a good way!

thank you,

chris

I was checking out your bomgar installer scripts, which I'm extremely thankful to run across since I just spent the better part of the day reinventing this wheel badly.

As of Python 3.5, you can use type hinting to define what types a function's parameters can accept, as well as define what type a function will return.

I noticed you doing some manual input validation in Install-BomgarJumpClient.py and thought you could save yourself some time by changing the function definition from
def execute_process(command, input=None):

to
def execute_process(command: str, input: str = None):

That would validate that anything passed to command or input be a String, and you can drop the manual input validation.

Anyhow, thanks for the awesome work, I'm giving the script a try now!

Get-LatestOSSupported.sh nice to see the script all in one and is there any way to add the new option minimum OS supported for the hardware or OS.

Hi

Can you please describe the format type for expectedCSCustomerID in the code?

I've tried double quotes using the Customer ID available in the Crowdstrike Console and it always return "Invalid Customer ID"

Thanks
Fabio

Real minor thing but now that Ventura has been released, this extension should be updated to clarify it's no longer in preview. As far as I can tell, all that would be needed is to change the URL on line 16 to be

https://www.apple.com/macos/ventura/

and also remove the asterisk from "Ventura*" throughout the script. Most IT teams should be able to do that themselves, but I know some will refuse to use something while it's in "Preview".

According to this Apple article, I noticed some iMacs were reporting as compatible with macOS Monterey, but they are not. https://support.apple.com/en-us/HT212551

According to this, Monteray is only supported back to model iMac 16,1 Late 2015 models, which would exclude the Model iMac 15,1 (Late 2014 and Mid 2015)

I believe line 190 of your code should read:
latestOSSupport=$( iMacModelCheck 7 10 13 13 14 16 )

First, thanks for developing and maintaining this script! I was fiddling with RAM numbers to explore how the script worked and noticed that the check_ram_upgradeable function might not be behaving as desired on newer Macs. This isn't causing a bug presently, but it will if Apple increases memory requirements. From some very brief testing it seems that M1 Macs don't return the "Upgradeable Memory:" line from "system_profiler SPMemoryDataType", so the check_ram_upgradeable function returns blank. I think a band-aid like this might suffice:

check_ram_upgradeable() {
	ram_upgradeable=$( /usr/sbin/system_profiler SPMemoryDataType | /usr/bin/awk -F "Upgradeable Memory: " '{print $2}' | /usr/bin/xargs 2&> /dev/null )
	if [ -z $ram_upgradeable ]; then
		ram_upgradeable="No"
	fi
	echo "${ram_upgradeable}"
}