The students cant change their password, whereas, staff can.Mail, Contacts, Calendars --> ACCOUNTS is greyed out under Preferences on iPad.

I would like to allow standard users to add new printers using the system preferences > Print and Scan preference pane. In 10.7 I was able to open up the pref pane using...sudo dseditgroup -o edit -n /Local/Default -u ADMINNAME -P ADMINPASSWORD -a "Domain Users" -t group _lpadmin This does not seem to work in 10.8 or 10.9. Is there an easier way of accomplishing this?Thanks.

Hi, I am trying to deploy .pkg thru jss. My deployment works fine in Yosemite. I have the issues in installing in EL captain. My pkg has a post installation .sh, which in turn lunch a helper exe tool. I am launching my agent plist from the helper tool using system("launchctl load /Library/LaunchAgents/com.myplist.plist") api. This gives me error "Could not find domain for" . Before the above line of code I am calling setuid() api too with current logged in users UID. This might be a issue because of EL captains enhanced security feature as jamf runs the .pkg with root user. Is there a way to run the .pkg with non root context with Authorization? Thanks,Birajendu

Hi All, Just positing this on the off chance anyone may know or can link me a list of keyboard codes, the numerical value that I can use in my first run script, (yes I have googled it before that comes back!). For a little context here's an excerpt of the script i'm amending for setting the Australia locale: #!/bin/sh PLBUDDY=/usr/libexec/PlistBuddy KEYBOARDNAME="Australian" KEYBOARDCODE="2" LANG="en" REGION="en_AU" ARD="/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart" SUBMIT_TO_APPLE=NO SUBMIT_TO_APP_DEVELOPERS=NO ############### ## functions ## ############### update_kdb_layout() { ${PLBUDDY} -c "Delete :AppleCurrentKeyboardLayoutInputSourceID" "${1}" &>/dev/null if [ ${?} -eq 0 ] then ${PLBUDDY} -c "Add :AppleCurrentKeyboardLayoutInputSourceID string com.apple.keylayout.${KEYBOARDNAME}" "${1}" fi for SOURCE in AppleDefa

I have updated the JSS and local Applications to 8.73 yet Casper Admin fails to mount the primary DP when launched. I can manually mount the DP and if I open CasperAdmin on a 10.7/10.8 box it connects to the main DP without a problem. Resetting Casper Admin doesn't allow the connection. This is happening so far on two different machines. Anyone have any thoughts on how to proceed?

Hello All, Likely a beginner question, but I just wanted to hear some other thoughts from mac admins: After an iOS device has been enrolled with the JSS, self service is up and ready for use. If the iPad is reset (content and settings), has anyone come up with a way to keep Self Service on the machine after the reset. From my experience, the app has disappeared and I usually have my interns reenroll the device. Thanks

Has anyone seen release notes for 21.0.0.226? I feel like I've searched everywhere but can't find anything. It was released late last week and seems to be a Mac only release. In the past I've updated our systems automatically but now management wants us to document what we're deploying with the when's and why's.

I have been learning more about if statements, and came up with the idea of using one in an Extension Attribute along with dockutil to look for Self Service in user Docks, and if not found add it back. In Terminal the command dockutil --find 'Self Service' will return things like:"Self Service was found in persistent-apps at slot XX"or"Self Service was not found in /Users/username/Library/Preferences/com.apple.dock.plist" However in an EA script I don't know how to capture that result so it can be acted on. I'm not asking for anyone to write the entire EA script for me (at least for starters LoL), just with help on finding how to capture the result so I can act on it so I can move to the next part of writing the EA. Any advice? Thank you!

Hi, This must be a noob question, but I've worked on this for a few hours now but still can't figure it out. I have uploaded a DMG file via Casper Admin. Then via JSS I have created a policy, and included the DMG file in the package. I then find the policy within Self Service. When I try to install it, I can see the status of "Gathering Information", then it does nothing. Usually I see the status change from Gathering Information > Downloading > Installing > Clean Up. Self Service doesn't even get to the download step, which means it can't do anything. So, is there something different my DMG package? Are there different types of DMG packages I should be aware of? Should I Open the DMG, then get the *.app out, and then repackage it myself? I have done a few other software DMG uploads, and they all work fine. The DMG package is for XAMPP, if that matters. It was downloaded from https://www.apachefriends.org/download.html

I have smart groups for mapped printers, one smart group for 'does not have' and a second 'has'. I just recently wanted to change the title of the smart group and it will not let me, when i save it, I get 'error creating criteria' even when i go to create a new smart group with the same check for mapped printers I am getting 'error creating criteria' ?? running 9.81. is anyone else seeing this ?

In the spirit of leveraging existing infrastructure, we want to start testing Autonomy Connected Backup on Macs. This used to be an Iron Mountain product, sold off to Autonomy: http://backup.ironmountain.com Their latest version as of today is 8.6.2 and apparently it does not yet support Mountain Lion. external image link Is anyone using this in their environment? I know it is very widely used (client list is staggering) on the PC side, but I haven't seen much on the usual forums on the Mac client. Anyone using it? Can you offer any feedback? PS, I added "Autonomy" and "Connected Backup" to the third party section...unfortnately the popup menus don't yet list it (I guess JAMF are screening entries?). Thanks,Don

Hey all... Newbie question....I have scoured the support documents and cannot seem to figure out what I am doing wrong (I assume it has to be something simple). I have created a Computer Config Profile....I have created a Static Group (1 computer in it) and even tried a Smart Group (same 1 computer in it). When I add either the Static or Smart group to the scope of the configuration profile it all appears to be in order.....Except, that computer doesn't get the configuration profile. Whats also weird is Smart/Static groups aside, when I try to just add it to a Specific Computer, I cannot find the computer in question in the list... The computer which happens to be a VM (could be related?) is definitely in Casper, searchable, checking in every 15 mins, etc. Check out this Computer Config Group list (attached), that shows there is no pending, failed or completed computers? My Security settings are in order (attached). Anyone know what might be wrong?

Hi, Does anyone have a way to block El Capitan installing if it's downloaded from the App Store without blocking the app store itself? I've created a restricted software policy which looks for 'Install OS X El Capitan' as an exact match and assigned it to a VM for testing but it's not working Anyone any ideas? Thanks in advance.

Hi all, I've been given a zip file. Within it are a *.pkg file, some config files, and a shell script to run and configure the pkg file. When I manually unzip it and run the shell script, it works perfectly. The package would install, and the configurations are all done. I believe Casper by default would download > install > cleanup. Is there a way for Casper to just download and unzip the zip file? Then I can use the shell script to run the installation sequence as intended.

I searched and couldn't find an answer.I'm looking for an extension attribute to find the version of Acrobat on all our clients so that I can start the process of standardizing on a version.We have versions as old as Reader and Pro 9 up to Reader and Pro DC.Any help is greatly appreciated.

I'm working on an updgrade path to El Captian and noticed something fun. I discovered the lovely world of SIP. So in 10.10 we moved several preference panes to a hidden location to stop users from using them. But in 10.11 we can't move preference panes due to SIP. So my question is: Is it possible for a non-admin user to re-enable those panesl in any way? Racking my brain to think like a crazy user to figure out if they can do it. Though maybe possibly creating their own preferences in ~librarypreferences...but not sure if that would work. Would an admin user be able to do it? IS there a way to ensure a machine only enables what it's allowed to have enabled even when and admin user is using it?

I have a small fleet of OSX machines (~40) running everything from 10.9 to 10.11. On roughly half the machines, Chrome auto-update fails. Specifically, a disk image mounts on the users desktop and the dmg window opens for the user. It's like they download and opened the DMG file, but they did not. It will happen at random intervals but some users have seen this happen as many as 6 times a day (and the open disk images will just keep stacking up on their desktop). I can't find any commonalities of these machines, not even all the copies of Chrome were installed via JAMF (some were downloaded direct, some installed via brew). The machines run a variety of versions of OSX (as noted), various versions of Chrome, some of them are in office where as others are remote. We do run Sophos Cloud which I've tried disabling on some machines with no change. Most of these machines were pre-Casper Suite, so they weren't imaged (though some were). I would just blow away Chrome a

I've got a script and launch agent for mounting users' home share drives and group shared drives that's been passed down the generations of mac admins. We use this script whether it's a one or multi-user computer. The launch agent runs every 5 minutes to make sure the drives reconnect if a user ejects them, or needs to reconnect (provided the computer is connected to our network). It also appends a randomly generated numeric suffix to the folder it creates as the mount point in /tmp. So the first time it runs the mount point might be "/private/tmp/fs01-user-61245" and the next it's "/private/tmp/fs01-user-421576." Related to that, I'm having an issue where our users' home shares aren't showing any contents when you go to the Finder sidebar under "Shared"—it's just blank. If you access their home share from "Computer" in the "Go" menu, everything shows up. It's not the script causing tha

I am testing symantecremovaltool.command running on computers that have old versions of symantec endpoint protection. (script can be found at the following link, scroll to the bottom of web page)The download info says It requires no user input when run as root.https://support.symantec.com/en_US/article.TECH103489.html When run via policy it 'fails', requesting command line arguments. When run from the command line, no arguments (just call the script ./symantecremovaltool.command) it runs, uninstalls SEP and the application is not visible in launchpad afterwards. If i create a .pkg of the symantecremovaltool.command and deploy the pkg, have the /private/tmp/symantecremovaltool.command to kick off the script, it works, but now the application icons are still in launchpad if i create a policy that just runs the symantecremovaltool.command it fails and ask for -arguments ?? anyone having any luck just running the script via policy and having the app icons also r

Hello Everyone, Just shy of three weeks ago I participated in a conversation regarding [https://jamfnation.jamfsoftware.com/discussion.html?id=19398](signing users out of the App store via a script). The script does it's job when ran via Terminal or in Apple's Remote Desktop client—no issues whatsoever. I have gone ahead and put together the following script that signs in, updates the programs, then finally signs out: This works perfect when done by hand, but pushing through JAMF's Self Service causes issues. Notably "Can't Install Item. There was a problem installing Update App Store Apps. Contact your administrator." As per the original thread, the MAS command line tool was placed in /usr/local/bin/.

All my Mac VMs work fine locally, but when I copy to my ESXi (6.0) server, it can't boot from the HD. Windows VMs work just fine both locallly and on my ESXi server (new mac pro). So far I've tried coping the NVRAM file from my local VM up to the server VM. I also ran Unlocker 2.0.8 with no difference. I know a few people here @rtrouton use ESXi and I'm hoping someone has better answers than I found online!

Returning to this after a long period away, can't remember how to do this! Deploying OSX with Capser documentation (https://jamfnation.jamfsoftware.com/article.html?id=173) says "You can obtain the latest .app file for OS X from the Mac App Store.". I can download OSX, but it starts the install on my Mac. How do I get my hands on the actual APP file so that I can add it to the JSS? Thanks

So today we are packaging GarageBand 6.0.5 (current version) for deployment, using a multi-user redemption code purchased by the company of course. On first launch it goes out and downloads roughly 1.2 GB of "extra content"...bah. I didn't see it in Composer under Pre-Installed software, even after installing GarageBand and letting it download the "extra content". So I'm using Composer (surprise, ey?!) to take a snapshot in the hopes of capturing the "extra content" for deployment, I really was hoping not to have to do that. :( I'm noticing it pulled down a bunch of stuff to: /Library/Application Support /Library/Audio /Library/Preferences /Library/Printers /Library/Receipts /Library/Updates I also noticed the snapshot captured stuff in: /Users/testuser/Library I'm hanging it up for today, before I begin work on this tomorrow, do I need to include the stuff in the /Users directory? If so it's easy enough to deploy with PKG

Hi-I'm trying to add a small applescript .app to users' computers. In Casper Admin, I added the dock item and the app (using .pkg). The .app copies fine to /Applications and I have set for the dock item to be added at the end under the same policy. However, trying both at the end or at the front does not add the item to the dock. I tested the add to dock with something like Self Service and that seemed to add with no issues. I do see the dock flash but my dock item doesn't seem to add.

Hello, New to AirServer. Anybody have tips on packaging it? Built .DMG with FUT and FEU checked, but asks for serial still. Thanks!