Hi, Wondering if someone can help please We have two config profiles which set when the password is required One profile for gatekeeper being switched on One profile for gatekeeper switched off In both instances the machine is set to require password immediately. However in random instances on both profiles the actual machine will set to 5 minutes instead of immediately. This is regardless of OS version (happens with Yosemite & El Cap) Any thoughts as to why this is happening? Thanks as always in advance.

I'm trying to script a program to open and close during inventory update quickly as well as be hidden. I can do this as a launch agent, but I'd really like this info to update during the inventory collections. Its the smart utility program which has an extension attribute script already but it wont update its info unless the user opens the smart utility app from time to time. So far Ive succeeded in getting the app to open hidden and close but adding those commands to the extension attribute script do not perform the desired action. Any help would be greatly appreciated.Below are the 2 parts: #!/bin/bash open -jg -a /Applications/SMART Utility.app pkill SMART Utility.app installed=0; for username in $(dscl . list /Users UniqueID | awk '$2 > 500 { print $1 }'); do if [ -e /Users/"${username}"/Library/Application Support/SMART Utility/DrivesList.plist ]; then installed=1; checkTime=`defaults read /Users/"${username}"

APNS certificate was up for renewal and so I renewed, but I renewed the wrong certificate and then revoked the proper one (face palm). This means any iOS device I needs to re-enroll, simple solution, except...one of my restrictions is that the option to erase all content and settings is disabled (face palm again). so I can't use that option. I am running out of ideas and feel like I have a bunch of bricks that work as iPads but have no manageability to them. Any thoughts or suggestions? On the flipside, I have the issue with OSx side figured out for the APNS.

We had our Casper server (Mac mini) crash a few weeks back, so we decided to upgrade to newer hardware. The server (9.81) is online and running with clients communicating. Nothing seems out of the ordinary from that standpoint. The problem seems to be with the MySQL server possibly. Since this was a new machine I decided to keep everything current. So it's running OS X 10.11.2 and MySQL 5.7.9. I cannot get the JSS database utility to connect reliably. It will report: Unable to connect to the database: mysql: [Warning] Using a password on the command line interface can be insecure. ERROR 2013 (HY000): Lost connection to MySQL server at 'reading initial communication packet', system error: 0 If I restart the MySQL service, I can get the JSS database utility to work and make a backup, but eventually it fails again. Oddly, the MySQL status from the command line says running, but the preference pane in System Preferences keeps jumping between Stopped and Running. I'm

I am looking for a way to pull a report via the JSS API to show all the Policies that are associated with a specific script. Looking through the API, I don't see any simple way of finding this information. I have been able to accomplish this via a MySQL query similar to this: SELECT scripts.file_name, scripts.script_id, policies.name, policies.policy_id FROM policy_scripts INNER JOIN scripts ON scripts.script_id = policy_scripts.script_id INNER JOIN policies ON policies.policy_id = policy_scripts.policy_id WHERE scripts.file_name = "Super Awesome Script"; This query would return the the data in the following format: file_name script_id name policy_id Super Awesome Script 165 Super Awesome Policy 1 1645 Super Awesome Script 165 Super Awesome Policy 2 2314 Super Awesome Script 165 Super Awesome Policy 3 2356 Is there anyway to achieve the same thing via the API that I am missing?

I've tried a number of different criteria to get our institution Android devices (although configured as personal to get into the JSS) but I can't get them to go into any smart groups, if for instance their used storage is over 80% Anyone know why this is the case? I have no problem adding them to static groups.

My company only has use of Composer at this time. I use it to make software packages and it's great. We are about to start rolling out 10.7, but I want there to be a base image without printers because we have multiple locations we support. What I'd like is to create a package for each location, based on the printers they will need. I'd like to install the drivers and add the printers and have Composer make a package from that. I've tried the normal snapshot as well as the FSEvents method, but neither one adds the printer queues in System Prefs(the drivers get installed). I even took out /etc/cups/printers.conf from the exclusion list, but still no go. What am I missing? Thanks in advance

I caught Casper running du:0 23027 22579 0 7:41PM ?? 0:10.02 /usr/bin/du -sh /Applications/Xcode.app The parent ID for that process is 22579, which turned out to be:0 22579 1 0 7:37PM ?? 0:00.89 /usr/local/jamf/bin/jamf policy -randomDelaySeconds 300 And this is literally causing CPU spikes on several systems. How do I disable?

I've begun testing a number of things I've been working on this year for deployment on our image next year. This includes an OS X application which I created which simply runs a shell script to mount the logged in user's network home folder on the Desktop. I used Appify to create the app, however when I try and launch it via Spotlight it does not appear under Applications even though the app is in the Applications folder. I assume my method of creating the app is what's preventing it from being visible & indexed by Spotlight ... Does anyone know what the requirement(s) are for Spotlight to index an application so I can add this to piece to the app I've already built so Spotlight can see it and index it? OS X 10.11.4, almost a complete base OS not including my app/script, and the Spotlight Applications checkbox is checked. Thanks in advance!

Hello Folks, So we have had a branded self service running for over a year and people love it. Today, we updated to JSS 9.9 and right after we knew it was humming along happily, I went into the normal process of changing the one file, loginLogo in the following path: /Library/JSS/Tomcat/webapps/ROOT/images/selfservice2 so our branding would continue to show up. On my admin mac self service is still working fine. However, it has been discovered that the self service application is having this logo icon zoom out to a small logo over and over and over again. The visual is nauseating to see and I don't know how to stop it. Anyone else who has a branded self service seeing this or have a tip for me? Thanks! Mick

Hello Everyone! My manager has asked for a high level (3-5 year) Road Map for Casper. I wanted to check with everyone and get suggestions on things that should be added to it. We have only been using Casper for about 6 months and is still in our test environment. We use it only for OSX and none of the MDM. So I figured admins that have been using it longer might be able to add some of their working knowledge to it. Thanks in advanced for any advice.

Hello JAMF Nation, My ASUS is now throwing a hissy fit and refuses to load SUS data. Everything worked just fine last Friday and no updates occurred over the weekend. We have our clients pointed our SUS using either a config profile or command line. We've also tried the direct URL "http://serverDNS:8088/index.sucatalog". and sudo defaults write /Library/Preferences/com.apple.SoftwareUpdate CatalogURL http://serverDNS:8088/content/catalogs/others/index-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog The computers have the correct SUS URL according to defaults read /Library/Preferences/com.apple.SoftwareUpdate CatalogURL The error: softwareupdate -l Software Update Tool Copyright 2002-2015 Apple Inc. Finding available software Can't load data from the Apple Software Update server. We've tried re-doing the Server setup using "sudo rm /var/db/.ServerSetupDone" and killing cfprefsd, "killall cfprefsd". We&#

Hey guys, Ive been wrestling with this one for awhile. We just moved from 9.63 to 9.72, and ever since then have been unable to replicate to our other share via Casper Admin. It just cant mount the share. Its been working(for the most part) since we stood up everything but now fails consistently. The error I get is this, and when I check the logs in the location specified, you can see there really isn't anything helpful to troubleshoot the problem. The strange part is that, it IS actually mounting the share! I verified this by running a "df" command from terminal I can see the share is indeed actually mounted. Ive tried unmounting, restarting, re-adding it, checking the read/write accounts, resetting passwords, and a host of other recommendations on different forums here on JAMF nation but none have been successful. The other odd thing is this will even happen with the master distribution point time to time for no reason I can plainly see. I usually will have to close and reopen

Hi All, We're looking at deploying our root ca cert & various other certs signed by this cert via Configuration Profile to our lion clients. Anyway to set the trust level.. or something like the below need post profile deployment? If so, how do you handle this? /usr/bin/security add-trusted-cert -d -r trustRoot -k

I am setting up VMWare Horizon Client for use in a lab, and we have more than one desktop pool available, and some users have access to more than one. Those users who have access to more than one get a screen with the different pools to choose from. Any suggestions how to set a lab pool to open by default in this scenario? I know I can manually set the default pool after initial install, just trying to figure out how I might include that info in the profile I create or the setting lives somewhere else...I have tried experimenting with setting URI values according to VMWare instructions, but I must be missing something

I've read through the (other post) about installing the VL version of Office 2016 multiple times, but I can't seem to come up with a working install. I've tried installing the VL version downloaded from the Microsoft VL site which is 15.18 and I've tried the 15.19.1 installer and the serializer. Either way I get an installation in which none of the applications will launch. All give a similar error to the one copied below. I've seen one other person post this exact error, but didn't see a response to the issue. The current test configuration is simple. It only includes OS X 10.11.4, scripts to set the time and join WiFi, and the Office installer and serializer. After being enrolled in Casper a policy runs that joins it to the domain and creates a local admin account. That's it. If I use Casper Remote to push the exact same installer to the computer that ran during imaging the applications work. If I push updates to the computer for the 15.20

Hey everyone. I want to start using the JAMF API. What types of languages should I be looking at in order to utilize the API?

Logout After 1 Min - Login Window Config - Not Working If i have this profile applied on top of another Login window configuration profile will it still work? As of now it will not log out with no programs running.

Hello everyone!So I got hired back to my old job after a 4 year hiatus and I found the state of the Casper infrastructure in shambles. After a short refresher on everything Casper/Mac I pretty much got everything working except for one glaring aspect: NetBoot. To cut it short I am building the netboot with AutoDMG and AutoCasperNBI. These are 10.10 and 10.11 images hosting off of a Mac Pro 2010 with 10GB and 10.10 server. When I NetBoot holding down option key and selecting the image, it works great. But when I send out the bless command using terminal with booter, kernelcache, and options configured, it kernel panics out. This is the same client machine and on the same network. Anyone else ran into something like this? NOTE: I already added the netboot server to the "allowed list" on El Cap through "csrutil" the bless command i used: bless --verbose --netboot --booter tftp://10.10.10.10/NetBoot/NetBootSP0/fromYoseInstaller.nbi/i386/booter --kernelcache tftp:

I apologize for what seems to be a simple question - Is the Casper receipt that gets reported back to the JSS (Packages Installed By Casper) based simply on the package file name? So the Casper receipt will basically match the name of the *.pkg?

Hello everyone, I am currently using JAMF for a K-12 school district and am wondering how the Software Update Server works within JAMF. Is my current assumption correct: Updates are cached to the local servers and that's where the Mac's pull updates from? Questions:1. Does the package need to be manually uploaded?2. Is there a special sign-in required for within the App Store3. We currently don't have any Mac App Store logins set up on laptops. Will we need to go to each computer manually and set them up to update?4. What is the set-up like for the JAMF Software Update Server? Thank you,Ricky

JSS 9.81 OSX 10.11.3 image Right after imaging with OSX 10.11.3, computers enroll and I let all the post-enrollment policies do their thing. When I login as the local admin account, I see a question mark icon for Self Service. When I click it, I get an error:This is how the Self Service icon is configured in JSS:This works just fine with Yosemite images.I've tried variations on the Path and none of them work in El Capitan. I've tried file://localhost... file:///Applications... file://Volumes/Macintosh HD/... /Volumes/Macintosh HD... I've also tried them all in quotes, but every single thing I try still creates this broken Self Service icon in El Capitan. What do I need to put here to make the Self Service icon in the dock do what it's supposed to in El Capitan? Otherwise it just forces me to manually delete the broken icon and drag the program into the Dock.

Hi, I've got an Interesting situation with some random machines that get imaged in Casper 9.82, OS X 10.11.3. There is a separate policy configured with the trigger enrollment complete, to deploy our FileVault configuration with an Institutional Recovery Key. I discovered that this policy fails sometimes according to the policy result. However after checking the affected machine I see that the encryption is enabled successfully so I'm not sure why this results in a failure. The log results for a successful run is normally like this: Executing Policy Configure FileVault 2Fixing Permissions...Fixing ByHost files...Flushing System Caches...Flushing User Caches...Verifying Disk mounted at '/'Result of disk verification:Started file system verification on disk0s2 Macintosh HDVerifying file systemUsing live modePerforming live verificationChecking Journaled HFS Plus volumeChecking extents overflow fileChecking multi-linked filesChecking catalog hierarchyChecking extended attributes fi

Where do you set the cloud DP as the failover? When I edit my various DPs, and view the list of Failover DPs, the cloud DP is not an option to select. I have my internal DP set as master but cannot select my cloud DP as a backup?

So, something I have noticed is VPP apps are assigned to users regardless of if they already have the app, so it is using up licenses This is a problem after having just moved from codes where some students already have the app from a redemption code and some students need the app via VPP. I am trying to think of ways of scoping to avoid this issue, or creating smart a smart group for each app to exclude those who already have the app, but VPP being dynamic the way it is would go ahead and remove the app from the user once the inventory updates and they are added to the smart group as having installed the app which is excluded in the scoping. Ideas?