does anyone use the adunbind.sh Script that is provided in the Scripts section of JAMF nation? after the script runs i check the log, the echo after (usr/bin/killall DirectoryService) returns 'no matching processes were found' Script result: Unbinding the computer from Active Directory...Restarting Directory Services...No matching processes were found (but the computer gets unbound to AD, so that is fine, but just curious on the DirectoryService process) anyone understand/know what is happening? I kinda have a feeling but not sure. sometimes the policy results in 'FAILED' while other times 'COMPLETED', even though both logs show the same echo information. I added exit $? to the end of the script, so the log shows 'script exit code: 1' on both 'FAILED' & 'COMPLETED' logs.

When I try to Add Content to Dock (Safari, for example), clicking Save erases the app that I've selected and it reverts back to No Dock Layout. Also, if I try to save a blank layout, which I've read will alphabetize the existing apps, I can't click through the message box that says "You have not added any content to the Dock, which will result in an empty Dock on each device." Is anyone else having this issue?

Hello Community, since a few hours I try to create a little script to mount a smb share. Before the script mount the share he check it. If it is not mounted he mount it. It works ok... Now I have a few permissions problem... The Script create a folder called "Intranet", then he mount it. It works but I can't see the Intranet because the folder get the wrong permissions. The folder get the permissions root:wheel but I need "User":admin or "User":"Domain Group Via Terminal I can see all files as root... My question, how I can change the permissions to the corretcly? Here is the actuelly script: #!/bin/bash # Already mounted check user=`ls -la /dev/console | cut -d " " -f 4` isMounted=`mount | grep -c "/Volumes/Intranet"` if [ $isMounted -ne 0 ] ; then exit 0 fi # Mount the network home mkdir /Volumes/Intranet sudo mount_smbfs //xxxx.xxxx/xxx/Intranet/Intranet/ /Volumes/Intranet # end tell # Script End exit 0

We noticed that In-House eBooks (PDF) can be forwarded from iBooks as an email attachment. Is there any way to restrict this behavior when an In-House eBook (PDF) contains sensitive information?

I feel I may have missed this while searching around, but have not found an answer. Most search results include "Self Service" "JSS Service" ect. On my current JSS version 9.92.1466020067, I am not able to create a search for computer Services.See screenshot, I would like to search for computers for "Services" I want to search for computers with the "Avast" Service.The closest search attribute I see is "Running Services" but this does not catch any computers.

Hi, I'm trying to learn how to create packages and install them using Self Service. Normally here we have someone who knows Casper Suite much better than me but I'm a bit of a novice. I'm a bit lost as to what I'm missing being a novice? I've used Composer to do two installation packages out of currently installed software,namely Mozilla Firefox and Skype. I can package them fine, set editor rights for root and staff (being the default gidNumber our Mac users have) and then install the .pkg locally on my Mac.However, if I add the package in Casper Admin and configure a Self Service Policy to be able to install the package from there, the installation will fail saying "Cannot Install Item - There was a problem installing Mozilla Firefox. Contact your administrator." Update:I tried logging in to Self Service (we normally don't require a user to log in to be able to install from Self Service), but then the installation ran but still provided me with the same error message. However, w

Has anyone been successful creating packages for Adobe Shockwave without performing a snapshot? If possible, I'd like to not lose the installer logic, so I'd prefer not to have to snapshot the install. I don't know if it's because they've baked things into the installer or if it's the same SMB problems, but it fails when I just drop the PKG into Casper Admin. I've tried converting it to source in Composer, but that just throws installer errors (this makes me think they baked things into the PKG rather than a SMB problem). I also tried using The Unarchiver on the PKG and found another PKG inside, but that just causes OS X to report that it is broken and offers to throw it in the trash. I haven't tried any other packaging applications, but I'm certainly willing if that's what it takes.

Our current thin imaging workflow involves our technicians logging into a new Mac, setting up a local Administrator account and then running the Quickadd.pkg from a USB stick. We then have a number of policies set to run at enrolment time. Is there a way I can set some kind of 'Enrolment in progress, do not power off' type screensaver/desktop background to run whilst the enrolment policies are applying? I'd like our technicians to know exactly where they are in the on-boarding process.

We have around 350 seniors that just graduated and their iPads are being "recycled" down to the incoming 7th grade class. I wiped each device using iTunes (iOS 9.3.3) and have tried setting it backup using the credentials of a 7th grader, we have LDAP authentication. The problem is the "User and Location" fields are left blank but the correct profiles are still being installed because the pre-stage enrollment forces the iPad into a specific building "Middle School" which carries with it all the proper restrictions. To make matters worse the entire iWorks suite, PDF expert, and 3 more apps are auto installing even though they are set to "Make available in Self-Service." Anyone have any ideas whats wrong? I have attached screenshots of the commands I've run on the JSS server as well as images of the prestage enrollment and of the device itself.

Hello - I am attempting to create an extension attribute for the Cisco WebEx plugin. The Info.plist file is located @ ~/Library/Internet Plug-Ins/WebEx64.plugin/Contents/info.plist I am using the following script, but it seems to be referencing the system profile instead of the logged on user:#!/bin/bash if [ -e ~/Library/Internet Plug-Ins/WebEx64.plugin/Contents/info.plist ]; then echo "<result>$(defaults read ~/Library/Internet Plug-Ins/WebEx64.plugin/Contents/Info CFBundleVersion)</result>" elseecho "<result>N/A</result>"fi Any help to reference the logged on users internet plug-ins folder would be appreciated!Thanks!

I am trying to search all my machines for the presence of a local Google Drive folder. Borrowing from a script I have found in another thread I have set up an extension attribute with a script, but it is not recognizing the folder. Assuming the issue lies with the variable in the path to folder, but unsure how to rectify. (I am open to other options if extension attribute is not the way to go. New to the Casper Suite and still learning my way through) Thanks! !/bin/bash if [ -d "/Users/${loggedInUser}/Google Drive" ]; thenecho "<result>Has Work Folder</result>"elseecho "<result>Does Not Have Work Folder</result>"fi exit

Hello Everyone! i am currently working on a project to place a JSS out on the DMZ. The current setup are as follows: JSS-DMZ is running on Windows 2012 R2JSS-DMZ is fully configured with Clustering and Limited Access to external connectionsJSS-DMZ DNS is configured by split-dns so we have an internal name that mirrors the external nameThe JSS-DMZ is using 3306 to contact the Internal-JSS which is the only port that is open to the internal networkInternal JSS is connected to AD but the JSS-DMZ is not I can contact the JSS-DMZ just fine and was able to login to the web console before I closed it up but I am not able to enroll any external devices. I tried making a package from Recon internally with the external server's address but installing it fails. Using the old QuickAdd package fails as well. While trying to connect externally with Recon, it would say "Connecting to the JSS" but hangs. Lastly, enrolling with the jss.companyname.com:8443/enroll would hang at the "Assign User" scre

We are currently auditing our password security and need to update the Firmware password on everyone's machine. Is there a way to do this via a script? The JSS EFI Password Policy to set a password comes back with an error that the EFI password is already set.

The asset gets added to casper but I do not have a self service application on my computer.

When I first started imaging the computers they were working fine. Now when i go to image laptops over the network it installs all the pkgs but never enrolls the computer into JSS. No placeholders show up in JSS but in the computer the /Library/Application Support/JAMF folder is there but the file /var/db/ConfigurationProfiles/MDM_ComputerPrefs.plist isn't there. From my understanding that file is created when it communicates with Apple's Push servers. In the System.log file there is a part that is saying May 27 09:40:50 Testing-10-blank apsd[56]: Got connection error Error Domain=NSURLErrorDomain Code=-1009 "The Internet connection appears to be offline." UserInfo={NSUnderlyingError=0x7fb0c2430fa0 {Error Domain=kCFErrorDomainCFNetwork Code=-1009 "The Internet connection appears to be offline." UserInfo={NSErrorFailingURLStringKey=https://albert.apple.com/deviceservices/deviceActivation?device=MacOS, I added the URL to our bypass to see if that would so

Hi, I want to to create a user-level Configuration profile. Within Scope, I have selected all users, but I want to exclude a certain local administrator's account. When I edit the scope, I can see user list within Target. But in exclusions, I cannot see the user list. I can only see Computers, Buildings, Departments, etc. Is there a particular place I have to create a list of users for it to show up and I can select it?

Hi, I want to start using user initiated enrollment within Casper. I have enabled it within JSS. However from a Macbook, when I go to https://<url>/enroll, I type in the enrollment username and password, and then I am faced with "Assigned to user" page. Within this Assign to user page, I can't type in anything and there is no LDAP user available (because we're using local user accounts, not Windows LDAP). Is user-initiated enrollment only for LDAP account? Is there anyway to allow it for local user accounts? I guess the local user can be anyone.

Is there any way to disable cloud services in Office 2016 for Mac, specifically the OneDrive, OneDrive for Business, and Sharepoint? Specifically, management wants the Save As panel to disable the button for "Online Locations": If disabling that button in the Save As panel isn't possible, is it possible to disable the ability to "Add a Place": And if that isn't possible, can we at least disable the builtin cloud storage locations: Any ideas? We're still using Managed Preferences, but Configuration Profiles could work too. Thanks!

We're having an issue "Serializing" Adobe CS6. The installation of CS6 is part of a monolithic image. I have followed the instructions provided HERE to create and administer a Serializer package. After running the policy and opening Photoshop, Adobe immediately asks for your Adobe ID to continue. I was under the assumption that when we entered the Adobe ID in the Serializer, that we wouldn't have to enter it on the imaged computers. I need a solution that Activates CS6 and WON'T prompt for the Adobe ID when first run. Thanks in advance guys!

Has anyone had any success deploying samanage software. They gave me this script but I am having no luck. #!/bin/sh # Uninstall current SAManage agent /Applications/Samanage Agent.app/Contents/Resources/uninstaller.sh # Change working directory to /tmp cd /tmp # Download SAManage Mac agent software curl -O http://cdn.samanage.com/download/Mac+Agent/SAManage-Agent-for-Mac.dmg # Mount the SAManage-Agent-for-Mac.dmg disk image as /tmp/SAManage-Mac-Agent hdiutil attach SAManage-Agent-for-Mac.dmg -nobrowse -noverify -noautoopen ################################################################################ # # Replace <ACCT_NAME> with your Samanage account name below # echo "<ACCT_NAME>" > /tmp/samanage # # Remove the '#' from the next line if you do not wish the Samanage agent to collect software information # echo "nosoft=1" > /tmp/samanage_no_soft # ################################################################################ # I

I'm setting up a new batch of iPads for incoming 1st graders. I am enrolling them using a "first grade" pre-stage enrollment profile like I did last year (only my 2nd year with Casper Suite). However, what I want to do is not have to use an Apple ID at all. Is there a way to do that and still get these devices enrolled in the JSS? Right now I get the message on the iPad that says I have to log into iTunes with an Apple ID in order to have JAMF manage the device and assign apps. Is there a way around that?

Ideally I want to be able to use Activation Lock Bypass as we often get iPhones returned from staff after they have left the building and are Activation Locked. However, to achieve this I would need to Supervise devices in Configurator. This poses a problem as often staff are upgraded to a newer iPhone and want their data backed up and restored to the new device. As we are only transitioning to managed iOS devices, the phones that are currently deployed are not Supervised and hence we can't backup and restore to a Supervised device. What is everyone else doing to get around this issue?

I updated an late 2013 Mac Pro with one Thunderbolt and one 30 inch Apple monitor form OS X El Capitan 10.11.0 to OS X El Capitan 10.11.1 got a black screen with mouse cursor. Option Command p + r NVRAM reset does not seem to make a difference. Typing in username and password does not seem to make a difference either. The below mention policy banner issue does not seem to make a difference either. Any ideas? An update on a MacBook went without a hitch. Note: In OS X Yosemite there was an issue when there was a policy banner installed at /Library/Security/PolicyBanner.txt that with a thunderbolt monitor that banner was presented but not viewable on Thunderbolt monitors so I have removed any banners but it does not seem to be the issue.

Hi all, I feel silly for asking this, but I'm the Mac support for my company and a few people have asked me the same question. We have went into System Preferences > Security and Privacy > General. Require password is set to immediate when the Macbook is in sleep or screensaver. We noticed that if we have the Macbook plugged into power, when we close the lid, wait a few seconds/minutes, then open, it does not require password to log onto Macbook. If we are using battery (no power supply plugged in), then when we close the lid, it would immediately go to sleep, and therefore will ask for password when opening the lid and starting. We have also went into System Preferences > Energy Saver , and experimented with a few settings. Nothing helped. As a user in a company, we want to lock our computers immediate as we go about our day. So, anyone else experienced the same thing? Anyone know of a work around? We are using OSX 10.10.5 Yosemite, btw. Would El Capita

Hello everyone, This is my first post in the jamf nation so bear with me. I've created a package of CS5 with my serial key using AAMEE 2.1 and have no issues installing this standalone. Whenever I upload it to the JSS using Casper admin (9.92) it automatically zips it. I've read this shouldn't be a problem but whenever I try to policy it out this way it always fails at "verifying package integrity". After doing some research I came across this jamf nation page: Deploying PKGs Created with AAMEE or Create Cloud Packager I took my AAMEE created pkg and wrapped it in a DMG using disk utility with no issues. I then uploaded it along with the installPKGfromDMG.sh script. I set the package to cache and set the script to run after the specific filename of the dmg. I then scoped it out and got this back on all the systems: Executing Policy FH CS5 Mounting FH Caching package FH CS5.dmg... cp: /Volumes/FHImages/Packages/FH CS5.dmg: Device not configured Running script installPKGfromDMG.s