Skip to content

Script Auditor

MDM Magic edited this page Nov 11, 2026 · 1 revision

Script Auditor

List every script in Jamf Pro with the policies that use it, and find orphaned scripts that nothing runs. Read-only.

How to use it

  1. Connect to Jamf Pro and click Connect & Check Permissions. The tool checks Read Scripts.
  2. Click Continue → (or Proceed Anyway →) to scan. The tool reads every script, works out its language from the shebang line, then reads every policy to see which scripts it runs.

Results

Scripts are split into two tabs:

Tab What it shows
In Use Scripts that at least one policy runs, with the number of policies
Orphaned Scripts that no policy runs

Each script shows its name, category and language. Select a script to read its contents and notes, and see the policies that run it. Show Orphaned Only and Search narrow the list.

Download Script saves the selected script with a file extension that matches its language.

What isn't checked

Only policies are checked. A script can still be needed if it's used somewhere else, for example by a PreStage, by another script, or by something outside Jamf Pro. Check before you delete an orphaned script, or use Unused, which checks more places and takes a backup before it deletes anything.

Export

  • Export CSV saves ScriptAudit_<server>.csv.
  • Export HTML saves ScriptAudit_<server>.html with each script's name, category, language and the policies that use it.

Scan Again returns to the start.

Permissions: Read Scripts, Read Policies. Only Read Scripts appears on the permission screen, but without Read Policies every script shows as orphaned.

Clone this wiki locally