Proofpoint | ObserveIT On-Premises Insider Threat Management

Mac Agent Uninstall using JAMF

This topic describes how to uninstall Mac Agents using JAMF.

You can remotely uninstall multiple ObserveIT Agents to multiple Mac OS endpoints via a management tool such as JAMF.

Creating the Uninstall Script

1. From the folder in the .dmg file, open the ObserveIT preuninstall script example and copy its contents. (For more information about the preuninstall script, see preuninstall script 

2. Open the JAMF Web Console Dashboard main screen.

   

3. Click the Settings icon and select Computer Management from the All Settings menu.

4. Under Computer Management, click the Scripts icon .

5. Under Scripts, click New button to add the preuninstall script to the JAMF Web Console.

6. Paste the copied preuninstall script to the Script Contents, and modify its contents if required, see preuninstall script .

7. Save the script.

Creating the Uninstall Policy

1. In the JAMF Web Console Dashboard, click the Computers button and select Policies.

2. Click the New button to create a policy.

3. In the Options tab, under General:

   1. Specify a Display Name for the policy.

   2. Select the Enabled check box so that you can run the policy.

   3. Under Trigger, select Recurring Check-in, so that the policy will be applied to all the relevant computers.

Adding and Configuring the Script in the Policy

1. From the Policies > Options tab, click Scripts.

2. Select Configure, and then from the list of scripts, click the Add button alongside the uninstall script you created.

3. In the Scope tab, select the Mac Agents on which to deploy the uninstall script. Click the Add button alongside each target Agent. Then click Done.

4. Click Save when you have finished configuring the uninstall script for the policy.

Deploying the Uninstall Policy to the Mac Agents

After creating a policy with the uninstall script, the JAMF Agent on the local computer deploys the policy next time it checks in with the JAMF server (by default every 15 minutes).

You can monitor the progress of the uninstall policy, using the JAMF Dashboard. To check the uninstallation logs, click the Logs button for the selected policy.

• For macOS Sierra and higher, it is recommended that you define a message prior to uninstallation to allow the user to clear the logger from the list of Trusted Applications.

• It is also recommended that you defer the policy implementation (by selecting the Allow Deferral check box) so that the user has time to clear the Accessibility prior to execution of the uninstall script.

You can do this in the User Interaction tab of the policy, as shown in the following example:

Related Topics:

Mac Agent Mass Deployment using JAMF

Mac Agent Deployment Overview

Mac Agent Mass Deployment using VMware AirWatch