File Shares

If you have configured Kerberos in Jamf Connect, you can also configure a file share menu item. This menu item is added with an additional configuration profile written to the following domain:

com.jamf.connect.shares
Important:

  • Microsoft Distributed File System (DFS) shares are currently not supported by Jamf Connect's file share feature.

  • Adding multiple shares can make this setting difficult to manage. Testing and deploying a simple configuration profile first is recommended.

The following settings are used to create a file share configuration profile:

Key

Description

HomeMount

Determines if a user's home profile should be mounted. This is written as a dictionary of keys including the Groups and Options keys.

<key>HomeMount</key>
    <dict>
       <key>Groups</key>
       <array/>
       <key>Options</key>
       <array/>
       <key>Mount</key>
       <false/>
    </dict>

Groups

Specifies which active directory group members should have their home profile mounted

Options

An array of mount options

Note:

See the Options table for available options.

Shares

Determines a mount point and its associated attributes. This is written as an array of dictionaries.

<key>Shares</key>
        <array>
          <dict>
             <key>Groups</key>
                <array>
                <string>group1</string>
                <string>group2</string>
                </array>
                <key>URL</key>
               <string>smb://exampleURL/share/ExampleHome</string>
                <key>Options</key>
                <array/>
                <key>Name</key>
                <string>Files for you</string>
                <key>LocalMount</key>
                <string></string>
                <key>AutoMount</key>
                <true/>
                <key>ConnectedOnly</key>
                <true/>
            </dict>
</array>

AutoMount

If set to true, the share is automatically mounted

ConnectedOnly

If set to true, the share is only mounted when the computer is connected to the active directory domain.

Groups

Specifies which active directory group members should have their home profile mounted.

LocalMount

Specifies a local mount point

Name

Specifies the name of the share displayed as a menu item in Jamf Connect

Options

An array of mount options

Note:

See the Options table for available options.

URL

Specifies the URL of the mount point.

You can use variable substitution to create custom mount points. Jamf Connect can substitute any of the following variables with the corresponding value from the user's AD account:

  • <<domain>>
  • <<fullname>>
  • <<serial>>
  • <<shortname>>
  • <<upn>>
  • <<email>>

File Share Options

The following options can be written as an array of strings with the Options key.

Option

Description

MNT_RDONLY

Mounts the share as read only

MNT_SYNCHRONOUS

Specifies that all input and outputs to the file system should be synchronized on the system

MNT_NOEXEC

Prohibits code executions from the share

File Share PLIST Example

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
	<key>Shares</key>
	<array>
		<dict>
			<key>AutoMount</key>
			<true/>
			<key>ConnectedOnly</key>
			<true/>
			<key>Groups</key>
			<array/>
			<key>LocalMount</key>
			<string></string>
			<key>Name</key>
			<string>Groups</string>
			<key>Options</key>
			<array/>
			<key>URL</key>
			<string>smb://WINSER-FS-01.MACDUDE.DEV/Groups</string>
		</dict>
	</array>
	<key>Version</key>
	<string>1</string>
</dict>
</plist>