Is there a way to do this. We are trying to deploy the agent to stress test it across our fleet and find any underlying issues with our base policies. We are wanting to deploy the agent to a set of 20 macs via ARD but this fails on "QuickAdd.pkg" could not be installed. Error message "Validating packages..." Is it possible to deploy this via ARD, we are not really wanting to manually install and have to input admin creds on to the macs we are trying to deploy to. Thanks

Hey everyone! Thanks for taking the time to read this. I've been looking at lot of the JAMF discussions and man pages and other materials, trying to find a way to compile them into something that works for my environment. We are using DEP and have PreStage Enrollments setup to install the JSS binary. So to enroll them I only have to power them on. The ultimate goal for me to walk away at this point assured that SmartGroups and Policy will take over. Trouble is that SmartGroups and Policy's are based on the naming convention for the devices in our school (Room#-D##). Multiple users will be using these so a device named after a user is not ideal. I was looking into renaming the computers based on the serial number but I can't quite seem to get the code right. I am working with JAMF 9.96 (I'll be upgrading to JAMF Pro over the summer)JSS is on a MacPro running 10.11.6 (will also be upgraded over the summer)End devices are running 10.12.3 (will be upgraded over the summer)

Hey guys..so this is a bit of a weird issue. Basically, we are migrating to use Cisco AnyConnect v. 3.1.05152 as our VPN solution. Problem is, the JSS (8.73 and 9.32) does not grab the IP address AnyConnect broadcasts. Instead, the JSS, both/either version(s), grabs the IP address in system preferences > network and displays that as inventory information. Even if the JSS has a forced check in from terminal, it still only grabs the IP there and not the one actually being broadcasted by AnyConnect. For example, IP A and B are being displaying in system preferences and are usually from the user's home router or where ever they are. AnyConnect is displaying IP Address C and it is not being caught at all by the JSS. Therefore, when you try to remote into any Mac with Casper Remote, it tries to SSH through their home network IP (i.e.; 192.168.1.10 or 10.1.0.10) instead of the corporate IP. IP Address C aka the IP from the AnyConnect client isn't getting to the JSS at al

Hi there, Trying to write a script that does the following Runs under the current logged on user Removes their FavoriteServers.sfl file (or even the whole parent directory) killall cfprefsd killall sharedfilelistd killall Finder Uses the SFLTOOL to add a new entry to the (now empty) FavoriteServers.sfl file If I make the below code unix executable and run from the users desktop, it works a treat. #!/bin/bash rm ~/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteServers.sfl killall cfprefsd killall sharedfilelistd killall Finder rm ~/Library/Application Support/com.apple.sharedfilelist/com.apple.LSSharedFileList.FavoriteServers.sfl sfltool add-item -n "OSAKA" com.apple.LSSharedFileList.FavoriteServers "cifs://OSAKA/" killall Terminal I think I will need something that actively targets the logged in user. I'm guessing as Casper is currently set to SSH as "HSCO.ADMIN" (local admin account) it will attempt to run all the commands targeting the

I'm trying to install the print driver for the Xerox 550-560 with Integrated Fiery onto Sierra boxes via Self Service. Logs for the failed policy: [STEP 1 of 5] Executing Policy Xerox 550-560 - Install [STEP 2 of 5] Mounting Distribution Point Verifying package integrity... Copying Fiery Printer Driver.pkg... Installing Fiery Printer Driver.pkg... Installation failed. The installer reported: installer: Package name is Fiery Printer Driver<br/>installer: Certificate used to sign package is not trusted. Use -allowUntrusted to override. [STEP 3 of 5] Mapping Printer Xerox 550-560 Integrated Fiery... [STEP 4 of 5] [STEP 5 of 5] Unmounting file server... I went to the download page to see if there is an updated driver for Sierra. There is not an updated one available for Sierra. So I downloaded the El Capitan driver and tried to install it, only to be presented with a certificate error stating that the certificate was expired. I trusted the cert and the driver installed properl

Hi all, at my client we have a zoo of MacPro's Ethernet , MacBooks with Thunderbolt-Ethernet and Thunderbolt-Displays. While we're upgrading the Macs to latest Yosemite (ElCapitan is not an option because of the productive environment), clients often "forget" the Network-Settings (DNS-Servers and Proxy). Normally, we have three locations: Client_Net:Only Ethernet, Thunderbolt-Ethernet or Display-Ethernet enabledSpecial DNS and Proxy Client_WIFI:Only WIFI enabledSpecial DNS and Proxy WIFI-FreeAny Adapter can be active and can be used (WIFI, Thunderbolt-Ethernet,...)No special settings. My question: How to put it with "networksetup" into a script that these networksettings/locations are with a firstboot-script are enabled again? Thank you!Holger

Dear all, After installing 9.99 jss update, the web home page of jss show up for few seconds and then it comes back to the login window. I reinstalled the JCE file but nothing changed. Have you encountered that before?

When it comes to scripting I'd say I'm mediocre compared to most folks so I need some help really nailing down a DO loop which I don't really use very often. Purpose of the script: We use ARD to remote into machines so we populate ARD Field #1 on our machines to with the asset tag number that applies to the machine; found on a sticker on the bottom of the laptop. We're looking at moving over to DEP and I'll need a way for the user to enter the asset tag number for us since we, as techs, are no longer doing since we're not building the machine any longer. I'd like for the script to basically not exit until the user has entered an integer into Cocoa Dialog field that is appearing on screen. It's mostly working but it's definitely not pretty and the pop-ups are not appearing in the order I'd like every single time. #!/bin/bash ## Global Variables CD="/Applications/Utilities/CocoaDialog.app/Contents/MacOS/CocoaDialog" jamfHelper='/Library/Application Support/JAMF/bin/jamfHelper.app

Let me preface this as I realize that these are separate services and the pro's and con's of each. We have been looking at setting up one of the services but are more leaning towards a SUS as we need to control distribution of software OS software updates per our security group. That being said a caching server would be beneficial for us regarding non OS updates from the App Store as well as eBooks. I am planning on testing to see if I set the software update distribution server on our clients if it will overwrite just the software updates that the SUS delivers or just all of the caching sever in general. I figure I would ask here to see if anyone had tried and what your results were. I have looked at these 2 Apple articles but they are not 100% clear on this either. About Caching Service, Content types support by caching service in OS X server We also queried with Jamf and they also are not 100% sure either. I may be crazy for even wanting to do this but it is a thought and figured

I'm failing in my attempt to create a .webloc file on all users desktop that the students cannot delete. I've create a DMG in composer with the .webloc file and the permissions set to 444. I deploy the DMG through Casper with FUT and FEU (either as a policy or with Casper Remote) and the file is placed correctly in the existing users Desktops and in the User Template folder. I check the permissions of the file on a non-Admin users desktop and it shows "-r--r--r--@ 1 john.doe wheel". I login as the non-Admin user and I am able to delete the file from my desktop. What am I missing? I'm thinking it has to do with the extended attributes denoted by the @ at the end of the permissions, but I'm not exactly sure where to go from there.

Hi Guys, Has any one seen this? We don't enroll many macs using the recon app so have not noticed this until now. When trying to do a remote enrollment with recon we get the following error. However i can scp over a quick add package and install it via ssh just fine.

Hey all, I'm researching this, but in the interest of not reinventing the wheel, I thought I'd ask the nation... The Xprotect Status extension attribute posted here returns the following on 10.11.3: The domain/default pair of (/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta, LastModification) does not exist I've looked through the file referenced and there's no instance of a date or the words "modified," "modification," change," or "update" in the XML. Does anyone know where to look for the last Xprotect update?

Hey everyone, I am pretty new to Casper and the community and thought why not break the ice by asking a general question. What is the advantage of using Casper Suite over SCCM? Our company currently uses SCCM to manage our Windows users and they are stating that it can do everything Casper can do for Mac as well. I did some research and came across http://blogs.technet.com/b/pauljones/archive/2013/06/02/managing-mac-os-x-with-system-center-2012-configuration-manager.aspx . I know there are differences I am just wondering if someone could point out some of the major advantages to Casper over SCCM.

Hi, We are using JAMF Casper Suite version 9.81 (without test environment) and we have questions about file sharing (distribution point) if we want to use HTTPS.At this time, we only use SMB file sharing for one distribution point. If we want to activate HTTPS on this distribution point :- Is priority givent to HTTPS then SMB if failed when it is activated ?- Is it possible to know for post-scripting if Self Service have been using SMB or HTTPS ? Thanks in advance for your exprerience return. --mdpt

I'm looking for documentation on how to configure LDAP settings via the command line because I'd like to create a script. The guides I've found so far have been too dense to be useful.

Our environment wants us to upgrade all Macs to 10.12.5 (~300 machines) We've previously cached the package on user's machines, then allow them to upgrade through Self Service. How are some of you forcing 10.12.5 updates for the user's that do not want to do it self service?

Hi all, Wonder if anyone else ran into the same issue I did. I was just given a Macbook Pro 15" with touch bar. It is a 2017 model (The hardware is registered as MacBookPro14,3 within Casper) What I normally do is go to Macbook's recovery partition (Command R at startup), and then run asr -source /SourceDirectory -target /TargetDirectory to wipe out the entire internal SSD and replace it with our macOS image. I must have done asr a thousand times on Macbooks from 2013-2016. But on this particular Macbook Pro 2017, it completely bricked it :(- I tried just restarting, it gives me a stop sign- I tried Command + R again, it gives me stop sign.- I tried option, it can see the internal drive, I select it, it gives me stop sign.- I tried option, then select an external drive that I know it work. It gives me stop sign. I had no choice but to go to the Apple store, ask one of the genius to help me recovery it.(I saw what he did, he went to options, then selected Apple Stor

I built a Netboot image using AutoCasperNBI and 10.12.5 and it doesn't seem to netboot the new 2017 MacBooks, anyone else seeing this or figure out a good workaround?

I am trying to script removing our old MDM enrollment through DEP from Macs so I can have them prompt for DEP enrollment into Jamf. I am OK with the end user being prompted for their admin password but would rather not have them manually type in the commands into the terminal. !/bin/bash sudo rm -rf /var/db/ConfigurationProfiles/sudo rm /Library/Keychains/apsd.keychainsudo /usr/libexec/mdmclient dep nag The commands work great when manually typed into terminal. Unfortunately none of them seem to work in a script. : command not found2: Password:rm: /Library/Keychains/apsd.keychain : No such file or directory[ERROR] Unknown command: nag: command not found12:

Hi all i need to create a hidden account with its home folder in /var/if i place the account password in a script or add the full command including the password into Policy > Files and Processes isn't this a huge security flaw ? /usr/local/bin/jamf createAccount -username <netadmin> -realname <"Network Administrator"> -password <p@55w0rd> -home </var/netadmin> -hiddenUser -admin can anyone suggest a way to deal with this ? or if i use CreateUSerPkg is the password any more secure in pkg on our JDS ? and... does using -secureSSH to the end of the command make it so no other users can ssh on ?

We just wiped/setup an iPad that had never been enrolled before (purchased from Apple). It was added to our normal prestage, says "being configured by organization" during setup but as soon as it's done it immediately asks for an Apple ID on the lock screen. I can't login with any because there is no internet connection. I have never seen this before. I have completely removed it from jamf twice and this keeps happening.

I'm sure this has probably been answered, but I cannot find anything on it. We are working on upgrading our JSS system to 9.32 over the next couple of days and I'm having an issue with the location of the database.I currently have a Windows 2012 Server box running the JSS installation. Our MySQL database is on a separate local drive. For some reason, when I installed JSS it didn't give me the option to connect to it at a specified location. I'm somewhat new at this and was wondering if I could get some assistance? Sincerely,TJ

If I set a server to 'Limited Access' - 'Computer Access Only', does the /enroll URL still work? I'm assuming not, but it sure would be helpful. I'm trying to increase security by setting up a full access server in a restricted network, and changing our primary server to computers only, but all our documentation tells users to visit /enroll.... Todd

I have to Macbook Airs that I am deprovisioning. When i run the command below. It gives a list of items being removed like normal. Except when i go to System Preferences I still have a Profiles icon and things are grayed out like it is still enrolled. I have tried re-enrolling it and running the command again with no luck. If I try to run any Jamf script in terminal after running the one below I get the message "sudo jamf: command not found" sudo jamf removeFramework Has anyone else encountered this issue?

This could be opening a can of worms and an endless debate so im hoping this can be kept civilized as possible :) I currently have my main macbook pro and an iMac next to me for doing composer, autodmg etc work. I am thinking i might be better of using Fusion or parallels for snapshotting reasons and off domain testing, etc. I have to use other windows applications so having a VM of windows and of a blank OSX would work well.We already have Vcenter and vsphere running all our VM's in the office so i'm thinking Fusion mix in their quite nicely. I can see there are different version of Fusion which makes the choice a bit more confusing What do people recommend or use them selves?Why should i go one over the other?is there one that works better with Jamf Pro? Look forward to reading the feedback.RegardsPete