1. Macos Bash Script

Scripts can enhance your use of many apps including iTunes, iPhoto, and the Finder, to name a few. Apple provides a script menu extra that you can install on your menu bar in the Script Editor’s Preferences window, along with a number of free scripts to automate common tasks (in the Scripts folder in the root-level Library, or choose Open. Apr 15, 2019  iTerm2, a popular Terminal replacement for macOS, will automatically close the window when a shell script exits. If you already use iTerm as your default terminal, you may have noticed that shell scripts launched from Finder still open with the stock Terminal app. Aug 28, 2012  Clickable Shell Scripts in Finder. If you aren’t looking to distribute your shell script as an application and only want a way to quickly execute a shellscript by clicking on it, there is another solution which involves SetFile. However, there are multiple downsides to this: the script isn’t distributable, anyone who you send the script to will have to run the command as well in order to. After that, you can create apps based on any shell script simply by launching Terminal.app and entering something like this: $ appify your-shell-script.sh 'Your App Name' Obviously, this would create a stand-alone application named Your App Name.app that executes the your-shell-script.sh script.

Use shell scripts to extend device management capabilities on Intune beyond what is supported by the macOS operating system.

Prerequisites

Ensure that the following prerequisites are met when composing shell scripts and assigning them to macOS devices.

• Devices are running macOS 10.12 or later.
• Devices are managed by Intune.
• Shell scripts begin with #! and must be in a valid location such as #!/bin/sh or #!/usr/bin/env zsh.
• Command-line interpreters for the applicable shells are installed.

Important considerations before using shell scripts

• Shell scripts require that the Microsoft Intune management agent is successfully installed on the macOS device. For more information, see Microsoft Intune management agent for macOS.
• Shell scripts run in parallel on devices as separate processes.
• Shell scripts that are run as the signed-in user will run for all currently signed-in user accounts on the device at the time of the run.
• An end user is required to sign in to the device to execute scripts running as a signed-in user.
• Root user privileges are required if the script requires making changes that a standard user account cannot.
• Shell scripts will attempt to run more frequently than the chosen script frequency for certain conditions, such as if the disk is full, if the storage location is tampered with, if the local cache is deleted, or if the Mac device restarts.

Create and assign a shell script policy

1. Sign in to the Microsoft Endpoint Manager Admin Center.

2. Select Devices > macOS > Scripts > Add.

3. In Basics, enter the following properties, and select Next:

   • Name: Enter a name for the shell script.
   • Description: Enter a description for the shell script. This setting is optional, but recommended.

4. In Script settings, enter the following properties, and select Next:

   • Upload script: Browse to the shell script. The script file must be less than 200 KB in size.
   • Run script as signed-in user: Select Yes to run the script with the user's credentials on the device. Choose No (default) to run the script as the root user.
   • Hide script notifications on devices: By default, script notifications are shown for each script that is run. End users see a IT is configuring your computer notification from Intune on macOS devices.
   • Script frequency: Select how often the script is to be run. Choose Not configured (default) to run a script only once.
   • Max number of times to retry if script fails: Select how many times the script should be run if it returns a non-zero exit code (zero meaning success). Choose Not configured (default) to not retry when a script fails.

5. In Scope tags, optionally add scope tags for the script, and select Next. You can use scope tags to determine who can see scripts in Intune. For full details about scope tags, see Use role-based access control and scope tags for distributed IT.

6. Select Assignments > Select groups to include. An existing list of Azure AD groups is shown. Select one or more user or device groups that are to receive the script. Choose Select. The groups you choose are shown in the list, and will receive your script policy.

   Note

   • Shell scripts assigned to user groups applies to any user logging in to the Mac.
   • Updating assignments for shell scripts also updates assignments for Microsoft Intune MDM Agent for macOS.

7. In Review + add, a summary is shown of the settings you configured. Select Add to save the script. When you select Add, the script policy is deployed to the groups you chose.

The script you created now appears in the list of scripts.

Monitor a shell script policy

You can monitor the run status of all assigned scripts for users and devices by choosing one of the following reports:

• Scripts > select the script to monitor > Device status
• Scripts > select the script to monitor > User status

Important

Irrespective of the selected Script frequency, the script run status is reported only the first time a script is run. Script run status is not updated on subsequent runs. However, updated scripts are treated as new scripts and will report the run status again.

Photos for macOS. Photos in macOS Catalina has an immersive, dynamic look that showcases your best photos. Find the shots you’re looking for with powerful search options. Organize your collection into albums, or keep your photos organized automatically with smart albums. Perfect your images with intuitive built-in editing tools, or use your favorite photos apps. From the developer: Wondershare Web Gallery for Mac is the best Mac web photo gallery software, which helps you make stunning flash gallery or web photo album from photos on Mac. You can start from a built-in templates, spice up your photo gallery, then output or upload it to a web. Wondershare Web Gallery for Mac is the best Mac web photo gallery software, which helps you make stunning flash gallery or web photo album from photos on Mac. Programs for query ″web gallery for mac. Nov 20, 2019  Mac OS and Windows are supported platform for it. MAGIX Photo Manager. MAGIX Photo organizer is the best free photo organizing software to effortlessly arrange your photograph accumulation, find and spare recordings, and improve your library. Windows is the supported platform for it. Web photo gallery software mac pro.

Once a script runs, it returns one of the following statuses:

• A script run status of Failed indicates that the script returned a non-zero exit code or the script is malformed.
• A script run status of Success indicated that the script returned zero as the exit code.

Troubleshoot macOS shell script policies using log collection

You can collect device logs to help troubleshoot script issues on macOS devices.

Requirements for log collection

The following items are required to collect logs on a macOS device:

• You must specify the full absolute log file path.
• File paths must be separated using only a semicolon (;).
• The maximum log collection size to upload is 60 MB (compressed) or 25 files, whichever occurs first.
• File types that are allowed for log collection include the following extensions: .log, .zip, .gz, .tar, .txt, .xml, .crash, .rtf

Collect device logs

1. Sign in to the Microsoft Endpoint Manager admin center.

2. In Device status or User status report, select a device.

3. Select Collect logs, provide folder paths of log files separated only by a semicolon (;) without spaces or newlines in between paths.
   For example, multiple paths should be written as /Path/to/logfile1.zip;/Path/to/logfile2.log.

   Important

   Multiple log file paths separated using comma, period, newline or quotation marks with or without spaces will result in log collection error. Spaces are also not allowed as separators between paths.

4. Select OK. Logs are collected the next time the Intune management agent on the device checks in with Intune. This check-in usually occurs every 8 hours.

   Note

   • Collected logs are encrypted on the device, transmitted and stored in Microsoft Azure storage for 30 days. Stored logs are decrypted on demand and downloaded using Microsoft Endpoint Manager admin center.
   • In addition to the admin-specified logs, the Intune management agent logs are also collected from these folders: /Library/Logs/Microsoft/Intune and ~/Library/Logs/Microsoft/Intune. The agent log file-names are IntuneMDMDaemon date--time.log and IntuneMDMAgent date--time.log.
   • If any admin-specified file is missing or has the wrong file-extension, you will find these file-names listed in LogCollectionInfo.txt.

Log collection errors

Log collection may not be successful due to any of the following reasons provided in the table below. To resolve these errors, follow the remediation steps.

Frequently asked questions

Why are assigned shell scripts not running on the device?

There could be several reasons:

• The agent might need to check-in to receive new or updated scripts. This check-in process occurs every 8 hours and is different from the MDM check-in. Make sure that the device is awake and connected to a network for a successful agent check-in and wait for the agent to check-in. You can also request the end-user to open Company Portal on the Mac, select the device and click Check settings.
• The agent may not be installed. Check that the agent is installed at /Library/Intune/Microsoft Intune Agent.app on the macOS device.
• The agent may not be in a healthy state. The agent will attempt to recover for 24 hours, remove itself and reinstall if shell scripts are still assigned.

How frequently is script run status reported?

Script run status is reported to Microsoft Endpoint Manager Admin Console as soon as script run is complete. If a script is scheduled to run periodically at a set frequency, it only reports status the first time it runs.

When are shell scripts run again?

A script is run again only when the Max number of times to retry if script fails setting is configured and the script fails on run. If the Max number of times to retry if script fails is not configured and a script fails on run, it will not be run again and run status will be reported as failed.

What Intune role permissions are required for shell scripts?

Your assigned-intune role requires Device configurations permissions to delete, assign, create, update, or read shell scripts.

Microsoft Intune management agent for macOS

Why is the agent required?

The Microsoft Intune management agent is necessary to be installed on managed macOS devices in order to enable advanced device management capabilities that are not supported by the native macOS operating system.

How is the agent installed?

The agent is automatically and silently installed on Intune-managed macOS devices that you assign at least one shell script to in Microsoft Endpoint Manager Admin Center. The agent is installed at /Library/Intune/Microsoft Intune Agent.app when applicable and doesn't appear in Finder > Applications on macOS devices. The agent appears as IntuneMdmAgent in Activity Monitor when running on macOS devices.

What does the agent do?

• The agent silently authenticates with Intune services before checking in to receive assigned shell scripts for the macOS device.
• The agent receives assigned shell scripts and runs the scripts based on the configured schedule, retry attempts, notification settings, and other settings set by the admin.
• The agent checks for new or updated scripts with Intune services usually every 8 hours. This check-in process is independent of the MDM check-in.

How can I manually initiate an agent check-in from a Mac?

On a managed Mac that has the agent installed, open Company Portal, select the local device, click on Check settings. This initiates an MDM check-in as well as an agent check-in.

Alternatively, open Terminal, run the sudo killall IntuneMdmAgent command to terminate the IntuneMdmAgent process. The IntuneMdmAgent process will restart immediately, which will initiate a check-in with Intune.

Macos Bash Script

Note

The Sync action for devices in Microsoft Endpoint Manager Admin Console initiates an MDM check-in and does not force an agent check-in.

When is the agent removed?

There are several conditions that can cause the agent to be removed from the device such as:

• Shell scripts are no longer assigned to the device.
• The macOS device is no longer managed.
• The agent is in an irrecoverable state for more than 24 hours (device-awake time).

Why are scripts running even though the Mac is no longer managed?

When a Mac with assigned scripts is no longer managed, the agent is not removed immediately. The agent detects that the Mac is not managed at the next agent check-in (usually every 8 hours) and cancels scheduled script-runs. So, any locally stored scripts scheduled to run more frequently than the next scheduled agent check-in will run. When the agent is unable to check-in, it retries checking in for up to 24 hours (device-awake time) and then removes itself from the Mac.

How to turn off usage data sent to Microsoft for shell scripts?

To turn off usage data sent to Microsoft from the Intune management agent, open Company Portal and select Menu > Preferences > uncheck 'allow Microsoft to collect usage data'. This will turn off usage data sent for both the agent and Company Portal.

Known issues

• No script run status: In the unlikely event that a script is received on the device and the device goes offline before the run status is reported, the device will not report run status for the script in the admin console.

Next steps

Describing AppleScript to a Mac beginner is a bit like three blind men describing an elephant. One man might describe it as the Mac’s built-in automation tool. Another might describe it as an interesting but often-overlooked piece of enabling technology. The third might liken it to a cassette recorder, recording and playing back your actions at the keyboard. A fourth (if there were a fourth in the story) would assure you that it looked like computer code written in a high-level language.

They would all be correct. AppleScript, a built-in Mac automation tool, is a little-known (at least until recently) enabling technology that works like a cassette recorder for programs that support AppleScript recording. And scripts do look like computer programs. (Could that be because they are computer programs? Hmm… .)

If you’re the kind of person who likes to automate as many things as possible, you might just love AppleScript because it’s a simple programming language you can use to create programs that give instructions to your Mac and the applications running on your Mac. For example, you can create an AppleScript that launches Mail, checks for new messages, and then quits Mail. The script could even transfer your mail to a folder of your choice. Then there’s Automator, which includes a whole lot of preprogrammed actions that make a task like the one just described even easier.

Therapist billing software for mac download. AppleScript is a time-and-effort enhancer. If you just spend the time and effort it takes to understand it, using AppleScript can save you oodles of time and effort down the road. Therein lies the rub. This stuff is far from simple; entire books have been written on the subject. Still, it’s worth finding out about if you’d like to script repetitive actions for future use. To get you started, here are a few quick tips:

• Script Editor (in the Utilities folder inside the Applications folder) is the application you use to view and edit AppleScripts. Although more information on Script Editor is beyond the discussion here, it’s a lot of fun. And the cool thing is that you can create many AppleScripts without knowing a thing about programming. Just record a series of actions you want to repeat and use Script Editor to save what you recorded as a script. If you save your script as an application (by choosing Format → Application in the Save sheet), you can run that script by double-clicking its icon.
• You can put frequently used AppleScripts in the Dock or on your Desktop for easy access.
• Many AppleScripts are designed for use in the toolbar of Finder windows, where you can drag and drop items onto them quickly and easily.
• Scripts can enhance your use of many apps including iTunes, iPhoto, and the Finder, to name a few.
• Apple provides a script menu extra that you can install on your menu bar in the Script Editor’s Preferences window, along with a number of free scripts to automate common tasks (in the Scripts folder in the root-level Library, or choose Open Example Scripts Folder from the Script Editor’s Help menu).
• If the concept of scripting intrigues you, explore the examples in the Scripts folder (in the root-level Library or choose Open Example Scripts from the Script Editor’s Help menu). Rummage through this folder and when you find a script that looks interesting, double-click it to launch the Script Editor program, where you can examine it more closely.