Can someone help me with a script for using Extension Attributes to tell me if Pages, Numbers, Keynote or iMovie are installed on our iMacs? The version is not so important but would be useful. Thanks.

I have a config profile scoped to all machines but for some reason my test machine isn't picking up the profile. It's picking up policies that are scoped to all machines just not this. I've tried reimaging the machine, removing it from the jss and re-enrolling, editing the config profile to force a distribute but for some reason this one machine keeps saying it's not within any config profile scopes and therefore it won't apply. Anyone have any thoughts?

I've noticed for a while that the error given by Casper Admin when you attempt to add a .app file makes no sense. For example, attempting to upload the Box Edit installer "designed to work with...Casper Suite" fails and presents the following error message: I'd get it if it just didn't support .app files, but this error message is saying it does while failing to upload them. That's confusing at best. It leads me to a handful of questions. Why not just say, "Casper Admin does not support .app files."? Does it actually support .app files but literally every one I have ever attempted it with just happens to be badly formed? If they are supported, is there something special that needs to be done to get them to upload successfully? Why are some .app files listed on sites as specifically made for use with Casper if they are incompatible with Casper?

I'm trying to delete a policy vie the API, however I'm getting "400 bad request" in return. My account has full admin rights and I can GET, PUT, and POST just fine to the same policy. DELETE works for other stuff like Categories and Buildings. I double checked the policy list and I'm trying to delete the right policy ID. Am I missing something simple? example:curl -v -uadmin -p https://my.jss.com:8443/JSSResource/policies/id/48 -X DELETE response:< HTTP/1.1 400 Bad Request< Transfer-Encoding: chunked< Date: Thu, 29 Sep 2016 02:46:09 GMT< Connection: close< Server: Apache

Hi Guys, I have started trying use ADPassMon in my environment, it would solve a lot of the issues I am having with AD password resetting and kerberos tickets all in one go (plus of course KEYCHAIN!), however I am trying to use the forked V2 I have managed to configure the app as required with the password requirements and user notifications etc but my script will not run as it is returning the error error -10810.36:121: execution error: which I believe means it needs to run as the user, however in testing when I ran it as an admin it worked for the user, does anyone have an idea of how I can deploy this or if maybe I am just going about this the wrong way? this is what I want to configure: Deploy preferences to app for: Enable version 2 behaviour Enable Notifications for expiery User notification of password requirements and acknowledgement Lock the preferences from user defaults write org.pmbuko.ADPassMon selectedBehaviour -int 2 defaults write org.pmbuko.ADPassMon enableNoti

Bonjour à tous, Nous avons mis à disposition dans le Self Service une policy qui installe trois packages et exécute un script installant ffmpeg depuis MacPorts.Les packages s'installent sans problèmes. Le script vérifie si ffmpeg existe et le cas échant, l'installe.Le seul problème, c'est qu'à la fin de l'exécution de la policy j'obtiens le message suivant : Or, la policy s'est bien exécutée au niveau :- de l'ordinateur, aucune erreur dans le log /var/log/jamf.log : du JSS, aucune erreur dans le log de la policy alors que le statut est en failed : Si j'exécute une seconde la fois la policy, ffmpeg étant déjà installé, je n'ai pas d'erreur. Est-ce qu'il y a un timeout au niveau de l'exécution d'une policy depuis le Self Service ?Je penche vraiment pour cette problématique, car ffmpeg met environ 10 minutes à s'installer. Avez-vous déjà rencontré ce genre d'erreurs/problématiques ?Ne serait-ce pas un réglage à effectuer dans le JSS ou dans Tomcat ? N'hésitez pas si questions/su

Hi All, Just tried updating our Windows 2008 R2 SP2 JSS from 9.82 and got the first attached error right after it tried to start Tomcat.. I ran an a repair on the installer after it failed which completed the install and started Tomcat. The JSS got stuck at altering the mobile device applications installed table. I probably didn't give it enough time to fully alter it, about 30 mins (a later restore back to 9.82 took over 45 mins to alter it and that was just on restoring the backup). Due to a caution from our TAM and to ensure a smooth update to Tomcat 8, I completely removed the JSS via Control Panel and deleted the JSS folder (after backing it up first). So there was no Tomcat to update. The funny thing is that error happened when running the 9.82 installer as well. I ran a repair on that and I got the JSS to startup, but it displayed an error that I needed to upgrade from version 8 first. I had already dropped the database and recreated it and did the grant. Not sure why, but I

Hi everyone I am wondering if anyone has been successful in installing either the smart notebook software or the notebook driver via self-service. I have tried with composer and with the packages.app and neither seem to work so I am just curious if anyone has been successful themselves.

Is there somewhere in the JSS, or something I can run which would tell me which of my Macs are enrolled in DEP? Thanks

I need some help writing a script to push out to student machines. We are trying to disable Expose/Mission Control/Spaces. I know there are a few other threads on this topic using config profiles, but I was looking for a script to push out as well with Casper Remote to add to our arsenal. I can go to a student machine, open terminal and run these commands: defaults write com.apple.dock mcx-expose-disabled -bool TRUEdefaults write com.apple.dashboard mcx-disabled -boolean YESkillall Dock Doing so disables what we need disabled. I tried to turn it into a script for Casper Remote as follows: #!/bin/sh defaults write com.apple.dock mcx-expose-disabled -bool TRUE defaults write com.apple.dashboard mcx-disabled -boolean YES killall Dock Remotely pushing this out does not work though. I also tried adding a sudo to the first line with no luck. I'm guessing this needs to be pushed out at the user level. We use a couple of different generic accounts. I'm not sure how to write the s

Hello! I have recently been hearing that using many Bonjour printers in a SMB or larger office is not best practice, but I haven't been explained why. Does anyone have any insight? We have roughly 15+ Bonjour printers (Konica Minolta MFPs, printers, and copiers) in our current environment before adding JAMF. We have not added the printer to Self-Service yet since we have not had any incentive. If Bonjour is not best practice and there are proven reasons why, we would definitely make the switch. Thank you in advance!

I saw this privilege in 9.96 and looked for it in the console under management actions and also searched the Admin Guide but found nothing. Can anyone shed light on this?

Some of my users are requesting XCode 8.0 because some of their development tools are reporting that XCode 7.3.1 is "outdated". I downloaded it the other day from the developer.apple.com site and was shocked (not really) that the file size was over 12GB after decompressing the .xip file. Each subsequent version of XCode keeps getting bigger and bigger. We currently have firewalls in place that block the use of VPP for software deployment and my attempts to get it permitted have fallen on deaf ears so the only way I can get xcode is from the developer site and then package it with Composer. When I worked on 7.3.1, start to finish from the time I started the download from Apple to the time I had a working Policy and script ready took a full 8 hours. That included decompressing the file, copying the app to /Applications, copying it into Composer, creating a pkg, copying it to JSS via Casper Admin, and replicating it to 4 different distribution points. The installation from Self Service

Hi all, My students have just download the last iOS, now when they download apps from self service, they need an Apple ID... Do you have the same problem ? With the "older" iOS i don't have this problem.... (I use JSS 9.92 - select VPP devices assignement - self servie is install automatically - but not now because it need Apple ID...) Thanks !

i am looking to deploy so 7 pre created VM in self service , has anyone does this if yes how have you packaged the VM for deployment and which branch on the machine have you saved it to

Hi all, I know it's a very stupid question, but I have to ask anyway. I'm very closed to upgrading our Casper JSS from 9.81 to 9.96 (actually, more info is we're moving our JSS from a windows server 9.81 to a Linux server 9.96, I now know how to by restoring the whole database, then do a DNS switch so URL will be the same). Anyway, back to my original question, afterwards, do I have to push anything onto each of the managed Macbooks and tell the Self Service to upgrade itself? Or does Self Service do this automatically when it connects?

We've been using Creative Cloud Teams for a while and when a user is added to the team, they get a welcome email asking them to create an Adobe ID and then they are presented with a download link for the CC Desktop App. I'm trying to streamline the process a little bit by not having the user download the CC Desktop app from the adobe site. I used CCP to make a package that is only Photoshop and the CC desktop app. My goal is to just put this in Self Service for users who have been approved for it and that will not only install the desktop app but also get Photoshop installed so the computer gets properly scoped for some smart groups in JSS. I used this package to install on a brand new Mac. The user previously setup her Adobe ID earlier, so I had her login to the CC Desktop App on this Mac so we can install the rest of the apps she will need. The problem is that there is no Apps tab displayed for her. I checked her Adobe ID and her membership in our Adobe admin console page is the s

Hi All, We have a script that we locally install on each computer. Does anybody know how I can add a delay so the user has time to type in their password to mount network disks before terminal automatically closes? Thanks.

Our DMZ server is dropping its connection to the internal server hosting mySQL and our JSS instance. There are no issues internally, but currently it is impossible for devices to "check-in" off site. This is creating an issue every morning when all 3500+ devices check back in after being away for 15 hours. Now, I've done some testing and it seems that when not under load things are okay, as in if I restart the server and then go out into world and try downloading apps offsite everything works. However, when all the students go home for the day it fails almost immediately. The error we are receiving is "Tomcat -44 SqlExceptionHelper -SQL Error 1220, SQL State: 08000" and then the next line "Connection is close." So it seems that we are unable to connect to the Database successfully, our max connections are set at 200 and the max connections on the internal server is set at 90 and 50 on the external, so we should never be breaching the max allowed. Anyone have suggestions as to what c

My organization restricts certain software in Casper (torrenting programs for example) however when I added entries for new software to restrict, I am still able to open the programs on my test machine. I'm not sure why the older software restrictions are being enforced but not the ones I added last week. Any thoughts would be appreciated.

Hi, I wrote this simple script to mount out network drives. I got it to allow the user to mount to the finder but, then they have to drag their folder over to the desktop. Is there any way I can have the script check who is logged in and then mount their folder to their desktop? Thanks, Jared

Anyone know if there is a way for us to update iPads on 9.x.x and 8.x.x to iOS 9.3.5 even after 10 is released? Our 10,000 iPads aren't even in the hands of end users yet so we don't have a good way to lead a mass update campaign right now. I'm staunchly against jumping onto the newest version on day 1--I seem to recall last December when iOS 9.2 (I think) broke our MDM communication to thousands of iPads for nearly 2 months with no fix. Any help or advice is appreciated.

We do use DEP on our OS X machinesSince 9.96 there are new options in PreStage Enrolments:Selected items are not displayed in the Setup Assistant during enrollment...Touch ID... etc.And "FileVault" seems to be interlinked with the tab "Account Settings":When you choose "Additional administrator Accounts" the option "Filevault" is not available anymore. Could anyone share more insights to these dependencies?

Hi I upgraded to 9.96 yesterday.Today i want to create a new quickadd package but i can't use Recon anymore.Simply not opening. Konsole says: Recon: Unable to load nib file: MainMenu, exiting OSX 10.10.5 any Ideas?Also tested with another user, not working.

Hey JAMFnation, I'm beginning to explore using configuration profiles with my JSS, and I'm running into an issue with profiles I've created myself. Basically, I've been using a profile to configure VPN, and I install it either from a script, or by just double-clicking the mobileconfig file.Now that I'm enrolling my machines with the JSS MDM profile, I'm seeing these errors in Console every few seconds: 4/19/12 12:01:46.579 PM mdmclient: [Agent:2136138485] Removing profile: HDS VPN (com.apple.mdm.virtualion.hds.com.cbbd9ca0-e1ab-012e-8e62-001c4227f7c4.alacarte) for: <User: 2136138485> 4/19/12 12:01:46.580 PM mdmclient: *** ERROR *** [Agent:2136138485] <MDMClientError:90> Cannot remove profile 'com.apple.mdm.virtualion.hds.com.cbbd9ca0-e1ab-012e-8e62-001c4227f7c4.alacarte' because it was not installed by the MDM server <MDMClientError:90> It looks to me like the JSS is telling the MDM client to remove that profile, which I do n