We received notice that our token was expiring in 14 days, so we went to renew it, and did, but were greeted with another message stating, "The service token may be in use by another server. The service token can be reclaimed below for this JSS." We don't want to click that and force all the thousands of apps to have to be re-downloaded, or worse have to re-enroll devices or re-invite users, so here I am asking, what does that button do?

Has anyone verified that the jss api returns jsonp for a cross-domain, browser-based ajax request? I can return json objects from the api with a REST client, but no matter what I try, I can't get a javascript ajax request to return anything other than xml. If anyone has this working, would you mind sharing the bit of your .ajax() or XMLHttpRequest() or whatever you are using that is enabling jsonp?

I'm looking to create a script (hopefully automated from beginning to end) that will kick off after successful imaging, kill the JAMF binary, and modify the record in the JSS to be an un-managed inventory-only record. I've tried several different ways of accomplishing this and none of them work properly and it's likely due to timing. Some of the methods I've tried without success are an at-reboot script and a package that drops a launchdaemon which calls a script to run the removeFramework command. I'm unsure if I will be able to automate this into my imaging workflow due to the fact that most of my imaging have a workflow that installs several packages at reboot. What I've tried so far attempts to kill the binary before imaging is actually complete. If it turns out I can't have this portion automated, it won't be the end of the world to have a script the technician can run after imaging. What I'd like to see if I can include is a modific

Microsoft Remote Desktop version 8 is available from the Mac App Store. Does anyone know if it will be available for deployment to enterprise without being tied to an Apple ID or how to deploy without prompting for the Apple ID when the user launches the app?

Much to our surprise we have just recently found that non-admin users can run a Bash shell out of Terminal (standard users have access to Terminal). So effectively, anyone with the right knowledge can run SUDO commands. Is this normal? If so, what is the best way to remove permissions from the Terminal application using Casper?

@bentoms Hi Ben, wondering if you've ever run into a scenario of the "Re-Check Expiration" in ADPassMon needs to be manually executed to update the password expiration time? Is there anyway I can force a re-check with a casper policy and set it at a timed period, i.e. Check In?.

Hello Community, Again! I need a solution for the Network-Userfolder / Adding Server. The User Folder / Share Folder is mounted automatically and works. The problem is, after I lost the network connection or starting the Macbook without Ethernet I get a Questionmark in the Dock. I attached a Screenschot. I am looking for a script. If one or twice smb server are not mounted, they mount them and kill the dock. The workaround is at the moment, to connect to server manually and kill the dock, then it works. Maybe everyone can help me. Many Thanks for help!Christian

There is a cheating service for membean users that logs minutes on the site automatically. Needless to say, the faculty here are not pleased about this. I have found the most popular culprit in the chrome store (Smart membean) and blocked it via chrome management (we are a google apps for education customer) unfortunately the same kids using a cheat will figure out how to create a non school profile on chrome to keep the extension running. so. I know its possible to create an extension attribute to find this sucker and set a policy to kill it. the extension is here: ~/Library/Application Support/Google/Chrome/Default/Extensions/jkcddaachlfakophhkhafbenfnjpfaeh looks like the "jkcdd..." string is the name of the extension. My scripting chops stink, anyone care to take a crack at this? any help would be greatly appreciated. thank you.

Hello Community, I am looking for a solution that our User can change easy here password in our AD. We test "AdPassMon" but it doesn't works on our Macs. I don't know where the problem is there. Now, I'm looking for a alternativ to change the AD Password and update the Keychains directly. Many ThanksChristian

Is it just me or did Apple just take down the man page reference library? I was referencing the fdesetup page not yesterday: https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man8/fdesetup.8.html Technically, the page hadn't been updated since 10.9 but I figured that was because fdesetup hasn't changed much...

Hi all, I'm wondering if anyone has come across or found a solution to this problem... When accessing the Mac enrolment portal using the servers short name (e.g. https://casper:8443/enroll) as opposed to the FQDN (e.g. https://casper.example.com:8443/enroll), the package download and redirection to the user instructions fails. After logging into https://casper:8443/enroll, Safari is redirected to https://casper.example.com:8443/flatpackagedownload, however the page is blank and the file does not load. In the production environment I am getting a 403 error, however in my test VM it's just a blank (white) page. In either case using the FQDN in the first instance resolves the problem. Additionally, if I log in to the FQDN and am successfully redirected, the short name will then work OK presumably due to some sort of browser caching. In trying to solve this I have reviewed a whole bunch of Tomcat hacks, and was thinking ideally it would be great if I could redirect http://

I have multiple computers that show Spotlight running at 110% to 150% which is causing the computer to run hot and the battery to drain quickly. I have tried using terminal to stop spotlight and restart it, as well as force quitting it in Activity Monitor. That did not work so I called Apple and his only suggestion was to do wipe and reinstall on the computer. Right now I know off about 5 computers with this issue and I am really hopping that there is another way to solve this than wiping the machine. Any help will be much appreciated.

Hi all, I can't see a way how to do this hence asking here I have two VPN appliances on addresses 1.2.3.4 & 5.6.7.8 (for example) Is it possible to create a smart group to find machines which have 1.2.3.4 configured as the destination server in the VPN settings? Thanks, as always in advance.

Hello, A Composer 101 question I'm sure: I've been tooling around in Composer today attempting to create packages for Java, Flash, Xerox Print Drivers, CCleaner, etc by "dropping" the original installers from the vendors websites into Composer...at least that's what it sounds like from the Casper Admin Guide. From there, upload to Casper Admin and use the .pkg with a policy in the JSS. That much I'm sure of. However, instead of installing the desired software on a test group, I'm running into an issue whereby the software is not installing but is rather being dropped into the top level of the Hard Drive. Is a Composer snapshot always necessary for these installers? Thoughts appreciated.

http://www.vshare.com/iphone_en.html A new website has popped up that our students are using to install apps outside of the App Store. I think it's using a combination of profiles and web clips to do this, but I don't have access to a compromised iPad today to investigate more thoroughly. Is anyone familiar with this?

The students cant change their password, whereas, staff can.Mail, Contacts, Calendars --> ACCOUNTS is greyed out under Preferences on iPad.

I would like to allow standard users to add new printers using the system preferences > Print and Scan preference pane. In 10.7 I was able to open up the pref pane using...sudo dseditgroup -o edit -n /Local/Default -u ADMINNAME -P ADMINPASSWORD -a "Domain Users" -t group _lpadmin This does not seem to work in 10.8 or 10.9. Is there an easier way of accomplishing this?Thanks.

Hi, I am trying to deploy .pkg thru jss. My deployment works fine in Yosemite. I have the issues in installing in EL captain. My pkg has a post installation .sh, which in turn lunch a helper exe tool. I am launching my agent plist from the helper tool using system("launchctl load /Library/LaunchAgents/com.myplist.plist") api. This gives me error "Could not find domain for" . Before the above line of code I am calling setuid() api too with current logged in users UID. This might be a issue because of EL captains enhanced security feature as jamf runs the .pkg with root user. Is there a way to run the .pkg with non root context with Authorization? Thanks,Birajendu

Hi All, Just positing this on the off chance anyone may know or can link me a list of keyboard codes, the numerical value that I can use in my first run script, (yes I have googled it before that comes back!). For a little context here's an excerpt of the script i'm amending for setting the Australia locale: #!/bin/sh PLBUDDY=/usr/libexec/PlistBuddy KEYBOARDNAME="Australian" KEYBOARDCODE="2" LANG="en" REGION="en_AU" ARD="/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart" SUBMIT_TO_APPLE=NO SUBMIT_TO_APP_DEVELOPERS=NO ############### ## functions ## ############### update_kdb_layout() { ${PLBUDDY} -c "Delete :AppleCurrentKeyboardLayoutInputSourceID" "${1}" &>/dev/null if [ ${?} -eq 0 ] then ${PLBUDDY} -c "Add :AppleCurrentKeyboardLayoutInputSourceID string com.apple.keylayout.${KEYBOARDNAME}" "${1}" fi for SOURCE in AppleDefa

I have updated the JSS and local Applications to 8.73 yet Casper Admin fails to mount the primary DP when launched. I can manually mount the DP and if I open CasperAdmin on a 10.7/10.8 box it connects to the main DP without a problem. Resetting Casper Admin doesn't allow the connection. This is happening so far on two different machines. Anyone have any thoughts on how to proceed?

Hello All, Likely a beginner question, but I just wanted to hear some other thoughts from mac admins: After an iOS device has been enrolled with the JSS, self service is up and ready for use. If the iPad is reset (content and settings), has anyone come up with a way to keep Self Service on the machine after the reset. From my experience, the app has disappeared and I usually have my interns reenroll the device. Thanks

Has anyone seen release notes for 21.0.0.226? I feel like I've searched everywhere but can't find anything. It was released late last week and seems to be a Mac only release. In the past I've updated our systems automatically but now management wants us to document what we're deploying with the when's and why's.

I have been learning more about if statements, and came up with the idea of using one in an Extension Attribute along with dockutil to look for Self Service in user Docks, and if not found add it back. In Terminal the command dockutil --find 'Self Service' will return things like:"Self Service was found in persistent-apps at slot XX"or"Self Service was not found in /Users/username/Library/Preferences/com.apple.dock.plist" However in an EA script I don't know how to capture that result so it can be acted on. I'm not asking for anyone to write the entire EA script for me (at least for starters LoL), just with help on finding how to capture the result so I can act on it so I can move to the next part of writing the EA. Any advice? Thank you!

Hi, This must be a noob question, but I've worked on this for a few hours now but still can't figure it out. I have uploaded a DMG file via Casper Admin. Then via JSS I have created a policy, and included the DMG file in the package. I then find the policy within Self Service. When I try to install it, I can see the status of "Gathering Information", then it does nothing. Usually I see the status change from Gathering Information > Downloading > Installing > Clean Up. Self Service doesn't even get to the download step, which means it can't do anything. So, is there something different my DMG package? Are there different types of DMG packages I should be aware of? Should I Open the DMG, then get the *.app out, and then repackage it myself? I have done a few other software DMG uploads, and they all work fine. The DMG package is for XAMPP, if that matters. It was downloaded from https://www.apachefriends.org/download.html

I have smart groups for mapped printers, one smart group for 'does not have' and a second 'has'. I just recently wanted to change the title of the smart group and it will not let me, when i save it, I get 'error creating criteria' even when i go to create a new smart group with the same check for mapped printers I am getting 'error creating criteria' ?? running 9.81. is anyone else seeing this ?