I want to roll out a software update at midnight tonight in order to minimize downtime for the users. I'm not seeing an option anywhere within the policy to tell it to run at a specific time. Is there a trick to this? Thanks.

Hello,I seem to forget this this just about the time a new release comes out.... My memory tells me I'm to download a xxx.run file to upload to my jss and then run that file to upgrade it. However, I can't seem to find any .run file to do this except a JDS .run. Am I doing something wrong or is there not an upgrade from 9.82?

Apologies if this has been asked before....Im a little fried right now and seem to be going in circles... I have setup AutoPkgr successfully. I am attempting to test run a AdobeFlashPlayer.jss recipe and am getting an error of: 'Error Running recipes. Header value 0 must be of type str or bytes, not <type 'int'> In the JSSImporter configuration I have added my JDS as well as a samba share which sits on the JDS. I manually added the smb share. when I removed the smb share, I get the recipe to run, but it does not upload to my JDS, I see it in the JSS. When I open Casper Admin, I see it there as well, but it is red, indicating that its missing. Anyone got any pointers or can lend some other troubleshooting steps? The JDS, JSS, and SMB shares all run on RHEL 6.8. If I need to provide any other config files or anything else to help point me in the right direction I will add whatever I can.

Hello, This is probably a silly question but I've tried Googling/searching the forums but didn't find the results I wanted... We've just started adding URLs to Self Service through Self Service Plug-Ins. This is all good, however this also creates a "Self Service"-button at the top of the menu and where the description is for the URL, there's now the address for where our JSS is hosted. Is it possible to change this to something like "Self Service - Install applications" or similar instead of it displaying our URL?

Has anybody had any luck getting this to work? If I already have the certificate installed on my OS X server, can I just point Tomcat to it? I spent all day on the phone yesterday w/ JAMF and RapidSSL and couldn't get it working.

Hi Nation, So we decided to create a private and hidden network off our main network using an airport express so people cannot access the Apple TV airplay function. We distributed the credentials via a profile available via email when requested by user. We are still having issues because people on the main network can still see the Apple TV and can airplay to it. Any suggestions would be appreciated. Thanks,Jared

i was wondering if anyone has a way to administrator creative cloud updates as we push the licence out by user , and are looking for a way to get all the create cloud applications updated via self service . in addition does anyone have any applications that i could use to update all machine applications from one point

Anybody sussed this yet? I want to keep Gatekeeper on "Mac App Store and identified developers", but want some JNLP launched applications work without intervention. I know if I use "Open anyway" (and admin authorise it manually) that that JNLP - perhaps identified by the URL? - works ok any time after. I was hoping I could download approved JNLPs, package them up to install in /tmp and run spctl on them, but simply sudo-ing ```spctl --add /path/to/downloaded.jnlp``` doesn't look like its working. (To me.)

A colleague ran into this, so I tested and got the same thing. Respond to a thread, and try to autofill a username like: @donmontalvo and you'll see the autofill result will span the screen vertically. Happens on Chrome 53.x, didn't try other browsers. Since, you know, like, we all know Flash Player blows chunks, so we all use chrome. ¯_(ツ)_/¯ I thought it was cool...my colleague, not so much. :)

All, I have no idea why, but I can't get QuickAdd Package creation to work. I have it creating a management account, random password, create management account if it does not exist, and hide it. Sign with my developer cert, and add to my site, and "use existing site membership, if applicable". The problem is, when I go to create it, I get: "Enrollment Failed. Make sure you have the Create privilege for Computer Enrollment Invitations. Also, make sure you have access to at least one site". We've adjusted permissions as much as we think we need to, but it doesn't seem to work. We want to try using a local, not AD, account within JSS, but I can't figure out how to get Recon or Casper admin to "log out" and let me change my username/password. =/ I'm trying to create this package so I can auto-enroll some computers during deploystudio imaging... this is my first rollout of Casper, so I'm trying to start with my previous im

Greetings all, I'm attempting to kick off an upgrade of OS 10.11, and the way I'm going about seems to allow me to do it automatically, if I can just get a script to pass 2 keystrokes to kick off the installer. I'm wondering if any one has tried this/figured out if this is possible, I been trying, and I can't quite get over the hump. I've created a package in Composer that installs the "Install OS X El Capitan.app" into the tmp folder. I found that if I call this Unix Executable:/private/tmp/Install OS X El Capitan.app/Contents/Resources/startosinstalllike this:sudo /private/tmp/Install OS X El Capitan.app/Contents/Resources/startosinstall --applicationpath /private/tmp/Install OS X El Capitan.app --volume /it will kick off the installer, and upgrade a 10.10 system. My hang up is that after running my command the Terminal is prompted for the license agreement, where you have to type "a" and then the "return" key. I've tri

I'm trying to replicate my share point to my local drive to use for Casper Imaging target disk mode. In Casper Admin when I click on my File Share distribution point, the replicate button is greyed out and I can't seem to find any message as to why. I have enough free space, and I'm running the latest version of Casper Admin (which matches my JDS since it's cloud hosted). This is the first time I'm trying to use Casper Imaging since my jump start training, so it's possible I'm missing something obvious. Am I?

Hi all, I'm new to JAMF and I'm creating my first image from scratch. I'm wanting to use dockutil to customise the dock at login. I've placed dockutil in /usr/local/bin/ and I've compiled the following script from others I've seen online: #!/bin/sh LoggedInUser=$3 LoggedInUserHome="/Users/$3" configureDefaultDock() { echo "Logged in user is $LoggedInUser" echo "Logged in user's home $LoggedInUserHome" if [ -e /usr/local/bin/dockutil ] ; then dockutilVersion=/usr/local/bin/dockutil --version echo "dockutil version: $dockutilVersion" echo "Clearing Dock..." /usr/local/bin/dockutil --remove all --no-restart $LoggedInUserHome echo "Adding Launchpad..." /usr/local/bin/dockutil --add '/Applications/Launchpad.app' --no-restart $LoggedInUserHome echo "Adding Calendar..." /usr/local/bin/dockutil --add '/Applications/Calendar.app' --no-restart $LoggedInUserHome echo "Adding Notes..." /usr/local/bin/dockutil --add '/Applications/TextEdit.app' --no-restart $LoggedInUserHome echo "Add

We have upgraded everything to Casper 9.7, created new netboot sets, and are attempting to create a base 10.10.3 OS using Composer. I understand everyone is all about the AutoDMG and AutoCasperNBI, but for my purposes here I am trying to use the tools JAMF says they've provided and support. Neboot sets work great (except being a bit large, but even with AutoCasperNBI it was over 9GB) Casper 9.7 seems to be working, when I capture the image using composer with both the recovery partition and main drive selected. If I restore to any machine that I have in my office I get a phantom drive showing up as the name of the DMG I created as the base OS using Composer 9.7. I thought maybe it was the recovery drive, but when I select to boot to it, I get a prohibitory sign. I have tried creating the HD DMG and Recovery DMG separately, and get the same thing. If I hold Command + R, the machine boots into the Recovery partition with no problems. If I enable the Debug Menu in Disk Utility and selec

Okay, this has been frustrating us for the last few weeks and we're completely perplexed by this. Imaging hundreds of macs around campus (mainly iMacs, but some Mac Pros and now some MacBook Pros..all of various ages). We've been testing our 10.11.x configurations for months and didn't experience this in testing at all: Boot machines to netboot server (either manually or via policy, the issues has happened both times now) Machines typically have autorun info set to wipe drives and lay fresh data down (we have found this to happen without autorun set) Machines begin imaging and go to reboot to complete package installations Most machines reboot fine into the first-run dialog but a good deal of machines reboot to iCloud login prompt with the user '_mbsetup' logged in This happens randomly, it seems age and type of machine doesn't matter (it's happened on 2009 and 2013 iMacs and 2012 Macbooks) So far we've only seen it with 2 of our configs, the ones with the most packages installing

Hey guys, I don't know if anyone has run into this before but maybe someone knows something that can help. We recently went through a re-brand at the company, as a result all machines which are bound to AD have display names (locally on the Mac) for the users such as this first.last (LDN-DLK) The new names should look like this first.last (LDN-MLG) as they are in AD. This in most cases would not cause concern but as I am now mapping drives with Casper it is causing the login prompt for the servers to come up with the display name first.last (LDN-DLK) instead of first.last in the server connection login prompt box. If the login on the machine and the AD account match then it displays correctly as first.last and the user can type in their password and away they go. This does not affect anything else for login, email etc. It is just the login prompt box for the Casper map drive. I have used a Config profile to deploy the Shares and they are mapped via AFP. Does anyone know a way to up

Hello all, I'm seeing an odd thing in our inventory in JSS (v9.9.2) where some Macs will show root as the current User and a completely random name in the Full Name field. The name will show up for all the Macs that are showing with the User root. I can't seem to make heads or tails of why some Macs start reporting this. Today there are 22 Macs showing up this way (image attached). We do have a Last User extension attribute enabled: #!/bin/sh lastUser=`defaults read /Library/Preferences/com.apple.loginwindow lastUserName` if [ $lastUser == "" ]; then echo "<result>No logins</result>" else echo "<result>$lastUser</result>" fi As well (and I suspect this is where it's going a bit wrong), we are auto-populating the Full Name field by pulling the current user. Here's the script from JAMF Nation we are using: #!/bin/sh sleep 5 loggedInUser=$( ls -la /dev/console | cut -d " " -f 4 ) /usr/local/bin/jamf recon -endUsername $loggedInUser exit 0 I've se

JAMF Nation folks! I am looking to run a policy within my JAMF Helper script based on the end user's input. Note that most users will not have administrative privileges so this needs to run on standard accounts. Please have a look below and let me know if this is possible. #!/bin/bash /usr/bin/curl -s -o /tmp/elcapitan_icon.png http://assets.materialup.com/uploads/ec819071-7140-4c6d-89ac-81b712642fcb/512x512bb-85.png loggedInUser=$(stat -f%Su /dev/console) jamfHelper="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" windowType="hud" description="Your <CompanyName>-issued computer is not currently running the latest OS X version. To perform the update, select 'UPDATE' below and the security update will begin to run. Once complete, you will be prompted to restart immediately. If you are unable to perform this update at the moment, please select 'Cancel.' *Please save all working documents before selecting 'UPDATE.' If you require assistance, pleas

Hi All, We have just implemented Casper a few days ago but we are struggling with the following. A desktop background (bespoke one) has been set as part of an image and the "Desktop and Screen Saver" prefpane has been disabled so users cannot change it. However a new background can be set using right click "Set as Desktop Background" and we cannot find a way to stop this working. Ideally we would like to either disable the right click option OR create a policy to reset the background pic to our bespoke one every day/week/restart. Any ideas would be greatly appreciated

We are currently on JSS v9.61 and use the Restricted Software function. Most of our machines are Mavs/Yosemite. We typically restrict using both with and without the .app on the end. Do you know if there will be a space between "El Capitan"? Install OS X El CapitanInstall OS X El Capitan.app Is there something more specific that you can provide to block the El Capitan update? Thanks!

Time has come to reach out to the community of experts. I'm trying to push out Egnyte Desktop Sync to all my client computers. The vendor package is a DMG that contains an Installer.app file. Just after some ideas on how to manage and deploy a DMG like this? Thanks in advance

I accidentally sent a managed preference to set scroll to not natural, to a bunch of machines that were not supposed to have it. I have removed them from the scope and restarted the machines with no luck. I have also tried flushPolicyHistory, flushCaches and sudo jamf mcx to no avail. It is still greyed out and unchangeable Any help here would be much appreciated

I need to give my end users the ability to enroll their own devices, or at least let me assign their AD username to a device that I'm enrolling. To facilitate this, I have added in my office security group to the JSS User Groups with their privileges set to "Enrollment" I'm an admin, so I'm both a member of the IT security group, AND the office security group. The admin group is assigned Administrator level privileges. Today I log into the JSS and my personal account (the one in the admins group) has no administrative access at all. It appears that adding in the office security group has overwritten the admin security group, leaving me with no admin access on my account. This is yet another AD issue that I'm having with 9.93. Can anyone tell me if I should be approaching this differently, without having to add in hundreds of users individually?

Hello, I am trying to use a script to change my DNS settings for the Thunderbolt Ethernet. I am using this script #!/bin/sh networksetup -setdnsservers Thunderbolt Ethernet DNS.Address.here When I run it though I am getting an error saying that Thunderbolt is not a recognized network service. I used the same script for Wi-Fi and it worked without any issues. Is there other wording I need to use instead of Thunderbolt? Thanks

We enable a user home drive to auto mount in AD when a user signs in. I was told we need to keep this enabled but as soon as the computer goes offsite it takes a few minutes to show the error message that it cannot find the network drive. I would like to fix this if possible by disabling the auto mount within the OS but still keep it enabled at the AD level. Is that possible?