Hello, Our JSS (9.72) has about 1,500 enrolled computers and zero configuration profiles. There are more than 20 DPs around the globe that rsync nightly from the master DP. DeployStudio is used for imaging and enrollment in this environment. The JSS is running on a Linux VM with 8GB of RAM. It is inherited from a previous administration and was not maintained or pruned for a while. The JSS has been very sluggish and has to be rebooted every few days. Page loads can vary between a few seconds to several minutes. Today, we see machines failing to enroll because the JSS times out while downloading the certificate. When I checked Global Settings > PKI > Issued Certificates, the heading indicated that there were over 2,000,000 entries. That number just seems mind-bogglingly large, and quite absurd for a system with less than 2,000 devices. By comparison, a colleague's company has almost 10,000 devices enrolled in their JSS (only Macs), and the number of issued cert

Prior to getting Casper, my team has manually configured machines with our local admin account, performed AD binding, logged out, then had users log in with their network credentials, which created a managed mobile account. Is there a way to configure things in the JSS that forces a user to log in using their network credentials during the initial no-touch setup?

Has anyone seen this before? Trying to deploy printers for El Capitan, and even adding printers manually, they do not show up after added. I can see printers via the CUPS admin page though.

Hello My org is using Casper to decrease the amount of hands-on time it takes to image machines that will belong to the end-user. Because of that, they want my last steps to be removing the MDM profile and framework. I can remove the profile remotely through the JSS and have a script that should remove the framework. What can I look for that will confirm the framework has been removed?

Hi all, I'm successfully imaged a few machines with the and used createuserpkg to set the admin account/password. Has anyone attempted to update the password (we need to do this quarterly) by creating another pkg and pushing it to the machine with the new updated password? Thanks,Ronnie

Hello Everyone! I wanted to incorporate NetSUS into out current Casper infrastructure. I got the NetSuS appliance up and running on one of my prototype servers and it's on the same network as the test client. I am able to choose the image during boot picker but when it loads up it ends up Kernel Panicing. When using the same image and serving it off of the OSX server it works perfectly. What am I doing wrong? Info:Using AutoDMG to build the clean image off of the installer (10.10.5) Used AutoCasperNBI to build the NBI with the follow options on:"Will be served from NetSUS or BSDPy""Will ber served from more than one server""Serve image over NFS"also made one for HTTP Virtual Box is my software of choiceSubnets are set correctly with 255.255.255.0 and 255.255.252.0 thank you in advance!

Hey guys, I'm still new to the extension attributes game and was wondering if someone in the community could help be come up with a EA that will return the current set screensaver. I found this attribute that is supposed to provide the current screensaver set time LINK and attempting to modify it has not been very successfull. Any help would be appreciated. If anyone has suggestions on where i can get more info on writing my own that would be great too. Thanks!

Does anybody know of a way I can enable and disable file sharing using casper? I tried the enableFileSharing.sh -- (Enables or Disables Personal File Sharing on Mac OS X Clients) from the resource kit but it does not seem to be working on 10.6 or 10.7 machines. When I set the parameter to YES I get this Running Script enableFileSharing.sh...Script Exit Code:1Script Result: Enabling File Sharing for OS 10.6 ...nothing found to loadUnmounting file server...Submitting log to https://mycasper.com:8443//...Finished. Any ideas?

Good Afternoon I am attempting to use dockutil to place Office2016 icons, and some others on the dock.I created a .plist and placed in /Library/LaunchAgents, then ran launchctl load path the .plist.I then created .sh and placed in my scripts location, running chmod on the file. ( I hope this is enough info)We have a local admin account and 2 domain test accounts plus my normal domain and domain admin account.For the local account, one test account and my normal domain account the dock shows up with the changes I want, (here is the weird part) but for my admin domain account and the test account account the changes do not appear. I even asked a few others too log in and they do not get the dock.Does anyone have any ideas as to whats going on? Thanks in Advance

I've tried to make a profile with a lock screen message and successfully applied it to my own supervised iPhone running 9.3.1, but nothing is showing on the iPhone. Is it not working?

I've created a new Site where a bunch of Macs and their associated policies will be moved... I know how to bulk move the Macs into the new site, but it doesn't look like there's a way to do the same with policies. Will I have to move them one by one or is there a way to do it in bulk (perhaps through the API)?

Hi All,I've been searching for a bit - I'm sure the answer already exists but I can't find it! Where does Self Service for Mac stage the installers? I've got a user who used Self Service to upgrade to El Cap, but "something came up" and he manually killed Self Service. Now when he runs it, it just says the El Cap img is corrupt. It doesn't try to redownload it, so my thought process is to find/delete the existing corrupt download, but I can't find it! Thanks,mbezzo

Good morning all ! My first post, so let me introduce myself : I'm Francois, I'm the administrator of 350+ macs, 70+ servers, network, telephony… and a casper suite user for two years ! It made my life really easier, I'm very happy about it. My company sells language studies, and owns 4 language schools. We have around 40 remote offices worldwide, adding a bit of complexity ;-) I live in Montreux in Switzerland. Everyone should experience the Montreux Jazz Festival some day ! So now, the IT stuff : I'm setting up a new Open Directory server on 10.7.3 to replace my older 10.6.8 server. This time, I would like to use SSL and authenticated bindings. It looks like it's not possible to use the built-in tools. Is there a simple method to do this, or should I script a bit ? I found the bindToLDAP.sh script in the Ressource Kit, but there's no mention of any authentification. FYI I checked these options on my ODM : Enable authenticated directory bindi

Does anyone have an EA that can determine what the JSS URL is set to on each machine? Currently transitioning URLs and just realized that I have no idea how many computers are pointing to the new one and how many have yet to get the update.

I know this is a long shot, but I thought I would see if anyone else here has encountered this issue. Recently I discovered that our Ricoh MP C4502A Printers can no longer print in Color via a PXL printer driver. In order to print in color we would need PostScript support for every printer in our company. Unfortunately, Ricoh discontinued the PostScript Add-On so it is no longer available to purchase. Up until 10.11, we were able to print in Color using Ghostscript GPL, foomatic-rip, and pxlmono. Apparently, this will no longer work in 10.11. I have been able to get b&w printing working using Gutenprint, but color printing is important so it’s not a viable solution. I have been referencing this thread hoping that someone else has found a solution: https://discussions.apple.com/thread/4206876?start=75&tstart=0 Like I said, this is a long shot but thought I would throw it out there in case someone else has any advice. Thanks for reading!

Hi, Wondering if someone can help please We have two config profiles which set when the password is required One profile for gatekeeper being switched on One profile for gatekeeper switched off In both instances the machine is set to require password immediately. However in random instances on both profiles the actual machine will set to 5 minutes instead of immediately. This is regardless of OS version (happens with Yosemite & El Cap) Any thoughts as to why this is happening? Thanks as always in advance.

I'm trying to script a program to open and close during inventory update quickly as well as be hidden. I can do this as a launch agent, but I'd really like this info to update during the inventory collections. Its the smart utility program which has an extension attribute script already but it wont update its info unless the user opens the smart utility app from time to time. So far Ive succeeded in getting the app to open hidden and close but adding those commands to the extension attribute script do not perform the desired action. Any help would be greatly appreciated.Below are the 2 parts: #!/bin/bash open -jg -a /Applications/SMART Utility.app pkill SMART Utility.app installed=0; for username in $(dscl . list /Users UniqueID | awk '$2 > 500 { print $1 }'); do if [ -e /Users/"${username}"/Library/Application Support/SMART Utility/DrivesList.plist ]; then installed=1; checkTime=`defaults read /Users/"${username}"

APNS certificate was up for renewal and so I renewed, but I renewed the wrong certificate and then revoked the proper one (face palm). This means any iOS device I needs to re-enroll, simple solution, except...one of my restrictions is that the option to erase all content and settings is disabled (face palm again). so I can't use that option. I am running out of ideas and feel like I have a bunch of bricks that work as iPads but have no manageability to them. Any thoughts or suggestions? On the flipside, I have the issue with OSx side figured out for the APNS.

We had our Casper server (Mac mini) crash a few weeks back, so we decided to upgrade to newer hardware. The server (9.81) is online and running with clients communicating. Nothing seems out of the ordinary from that standpoint. The problem seems to be with the MySQL server possibly. Since this was a new machine I decided to keep everything current. So it's running OS X 10.11.2 and MySQL 5.7.9. I cannot get the JSS database utility to connect reliably. It will report: Unable to connect to the database: mysql: [Warning] Using a password on the command line interface can be insecure. ERROR 2013 (HY000): Lost connection to MySQL server at 'reading initial communication packet', system error: 0 If I restart the MySQL service, I can get the JSS database utility to work and make a backup, but eventually it fails again. Oddly, the MySQL status from the command line says running, but the preference pane in System Preferences keeps jumping between Stopped and Running. I'm

I am looking for a way to pull a report via the JSS API to show all the Policies that are associated with a specific script. Looking through the API, I don't see any simple way of finding this information. I have been able to accomplish this via a MySQL query similar to this: SELECT scripts.file_name, scripts.script_id, policies.name, policies.policy_id FROM policy_scripts INNER JOIN scripts ON scripts.script_id = policy_scripts.script_id INNER JOIN policies ON policies.policy_id = policy_scripts.policy_id WHERE scripts.file_name = "Super Awesome Script"; This query would return the the data in the following format: file_name script_id name policy_id Super Awesome Script 165 Super Awesome Policy 1 1645 Super Awesome Script 165 Super Awesome Policy 2 2314 Super Awesome Script 165 Super Awesome Policy 3 2356 Is there anyway to achieve the same thing via the API that I am missing?

I've tried a number of different criteria to get our institution Android devices (although configured as personal to get into the JSS) but I can't get them to go into any smart groups, if for instance their used storage is over 80% Anyone know why this is the case? I have no problem adding them to static groups.

My company only has use of Composer at this time. I use it to make software packages and it's great. We are about to start rolling out 10.7, but I want there to be a base image without printers because we have multiple locations we support. What I'd like is to create a package for each location, based on the printers they will need. I'd like to install the drivers and add the printers and have Composer make a package from that. I've tried the normal snapshot as well as the FSEvents method, but neither one adds the printer queues in System Prefs(the drivers get installed). I even took out /etc/cups/printers.conf from the exclusion list, but still no go. What am I missing? Thanks in advance

I caught Casper running du:0 23027 22579 0 7:41PM ?? 0:10.02 /usr/bin/du -sh /Applications/Xcode.app The parent ID for that process is 22579, which turned out to be:0 22579 1 0 7:37PM ?? 0:00.89 /usr/local/jamf/bin/jamf policy -randomDelaySeconds 300 And this is literally causing CPU spikes on several systems. How do I disable?

I've begun testing a number of things I've been working on this year for deployment on our image next year. This includes an OS X application which I created which simply runs a shell script to mount the logged in user's network home folder on the Desktop. I used Appify to create the app, however when I try and launch it via Spotlight it does not appear under Applications even though the app is in the Applications folder. I assume my method of creating the app is what's preventing it from being visible & indexed by Spotlight ... Does anyone know what the requirement(s) are for Spotlight to index an application so I can add this to piece to the app I've already built so Spotlight can see it and index it? OS X 10.11.4, almost a complete base OS not including my app/script, and the Spotlight Applications checkbox is checked. Thanks in advance!

Hello Folks, So we have had a branded self service running for over a year and people love it. Today, we updated to JSS 9.9 and right after we knew it was humming along happily, I went into the normal process of changing the one file, loginLogo in the following path: /Library/JSS/Tomcat/webapps/ROOT/images/selfservice2 so our branding would continue to show up. On my admin mac self service is still working fine. However, it has been discovered that the self service application is having this logo icon zoom out to a small logo over and over and over again. The visual is nauseating to see and I don't know how to stop it. Anyone else who has a branded self service seeing this or have a tip for me? Thanks! Mick