Hello Everyone! My manager has asked for a high level (3-5 year) Road Map for Casper. I wanted to check with everyone and get suggestions on things that should be added to it. We have only been using Casper for about 6 months and is still in our test environment. We use it only for OSX and none of the MDM. So I figured admins that have been using it longer might be able to add some of their working knowledge to it. Thanks in advanced for any advice.

Hello JAMF Nation, My ASUS is now throwing a hissy fit and refuses to load SUS data. Everything worked just fine last Friday and no updates occurred over the weekend. We have our clients pointed our SUS using either a config profile or command line. We've also tried the direct URL "http://serverDNS:8088/index.sucatalog". and sudo defaults write /Library/Preferences/com.apple.SoftwareUpdate CatalogURL http://serverDNS:8088/content/catalogs/others/index-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog The computers have the correct SUS URL according to defaults read /Library/Preferences/com.apple.SoftwareUpdate CatalogURL The error: softwareupdate -l Software Update Tool Copyright 2002-2015 Apple Inc. Finding available software Can't load data from the Apple Software Update server. We've tried re-doing the Server setup using "sudo rm /var/db/.ServerSetupDone" and killing cfprefsd, "killall cfprefsd". We&#

Hey guys, Ive been wrestling with this one for awhile. We just moved from 9.63 to 9.72, and ever since then have been unable to replicate to our other share via Casper Admin. It just cant mount the share. Its been working(for the most part) since we stood up everything but now fails consistently. The error I get is this, and when I check the logs in the location specified, you can see there really isn't anything helpful to troubleshoot the problem. The strange part is that, it IS actually mounting the share! I verified this by running a "df" command from terminal I can see the share is indeed actually mounted. Ive tried unmounting, restarting, re-adding it, checking the read/write accounts, resetting passwords, and a host of other recommendations on different forums here on JAMF nation but none have been successful. The other odd thing is this will even happen with the master distribution point time to time for no reason I can plainly see. I usually will have to close and reopen

Hi All, We're looking at deploying our root ca cert & various other certs signed by this cert via Configuration Profile to our lion clients. Anyway to set the trust level.. or something like the below need post profile deployment? If so, how do you handle this? /usr/bin/security add-trusted-cert -d -r trustRoot -k

I am setting up VMWare Horizon Client for use in a lab, and we have more than one desktop pool available, and some users have access to more than one. Those users who have access to more than one get a screen with the different pools to choose from. Any suggestions how to set a lab pool to open by default in this scenario? I know I can manually set the default pool after initial install, just trying to figure out how I might include that info in the profile I create or the setting lives somewhere else...I have tried experimenting with setting URI values according to VMWare instructions, but I must be missing something

I've read through the (other post) about installing the VL version of Office 2016 multiple times, but I can't seem to come up with a working install. I've tried installing the VL version downloaded from the Microsoft VL site which is 15.18 and I've tried the 15.19.1 installer and the serializer. Either way I get an installation in which none of the applications will launch. All give a similar error to the one copied below. I've seen one other person post this exact error, but didn't see a response to the issue. The current test configuration is simple. It only includes OS X 10.11.4, scripts to set the time and join WiFi, and the Office installer and serializer. After being enrolled in Casper a policy runs that joins it to the domain and creates a local admin account. That's it. If I use Casper Remote to push the exact same installer to the computer that ran during imaging the applications work. If I push updates to the computer for the 15.20

Hey everyone. I want to start using the JAMF API. What types of languages should I be looking at in order to utilize the API?

Logout After 1 Min - Login Window Config - Not Working If i have this profile applied on top of another Login window configuration profile will it still work? As of now it will not log out with no programs running.

Hello everyone!So I got hired back to my old job after a 4 year hiatus and I found the state of the Casper infrastructure in shambles. After a short refresher on everything Casper/Mac I pretty much got everything working except for one glaring aspect: NetBoot. To cut it short I am building the netboot with AutoDMG and AutoCasperNBI. These are 10.10 and 10.11 images hosting off of a Mac Pro 2010 with 10GB and 10.10 server. When I NetBoot holding down option key and selecting the image, it works great. But when I send out the bless command using terminal with booter, kernelcache, and options configured, it kernel panics out. This is the same client machine and on the same network. Anyone else ran into something like this? NOTE: I already added the netboot server to the "allowed list" on El Cap through "csrutil" the bless command i used: bless --verbose --netboot --booter tftp://10.10.10.10/NetBoot/NetBootSP0/fromYoseInstaller.nbi/i386/booter --kernelcache tftp:

I apologize for what seems to be a simple question - Is the Casper receipt that gets reported back to the JSS (Packages Installed By Casper) based simply on the package file name? So the Casper receipt will basically match the name of the *.pkg?

Hello everyone, I am currently using JAMF for a K-12 school district and am wondering how the Software Update Server works within JAMF. Is my current assumption correct: Updates are cached to the local servers and that's where the Mac's pull updates from? Questions:1. Does the package need to be manually uploaded?2. Is there a special sign-in required for within the App Store3. We currently don't have any Mac App Store logins set up on laptops. Will we need to go to each computer manually and set them up to update?4. What is the set-up like for the JAMF Software Update Server? Thank you,Ricky

JSS 9.81 OSX 10.11.3 image Right after imaging with OSX 10.11.3, computers enroll and I let all the post-enrollment policies do their thing. When I login as the local admin account, I see a question mark icon for Self Service. When I click it, I get an error:This is how the Self Service icon is configured in JSS:This works just fine with Yosemite images.I've tried variations on the Path and none of them work in El Capitan. I've tried file://localhost... file:///Applications... file://Volumes/Macintosh HD/... /Volumes/Macintosh HD... I've also tried them all in quotes, but every single thing I try still creates this broken Self Service icon in El Capitan. What do I need to put here to make the Self Service icon in the dock do what it's supposed to in El Capitan? Otherwise it just forces me to manually delete the broken icon and drag the program into the Dock.

Hi, I've got an Interesting situation with some random machines that get imaged in Casper 9.82, OS X 10.11.3. There is a separate policy configured with the trigger enrollment complete, to deploy our FileVault configuration with an Institutional Recovery Key. I discovered that this policy fails sometimes according to the policy result. However after checking the affected machine I see that the encryption is enabled successfully so I'm not sure why this results in a failure. The log results for a successful run is normally like this: Executing Policy Configure FileVault 2Fixing Permissions...Fixing ByHost files...Flushing System Caches...Flushing User Caches...Verifying Disk mounted at '/'Result of disk verification:Started file system verification on disk0s2 Macintosh HDVerifying file systemUsing live modePerforming live verificationChecking Journaled HFS Plus volumeChecking extents overflow fileChecking multi-linked filesChecking catalog hierarchyChecking extended attributes fi

Where do you set the cloud DP as the failover? When I edit my various DPs, and view the list of Failover DPs, the cloud DP is not an option to select. I have my internal DP set as master but cannot select my cloud DP as a backup?

So, something I have noticed is VPP apps are assigned to users regardless of if they already have the app, so it is using up licenses This is a problem after having just moved from codes where some students already have the app from a redemption code and some students need the app via VPP. I am trying to think of ways of scoping to avoid this issue, or creating smart a smart group for each app to exclude those who already have the app, but VPP being dynamic the way it is would go ahead and remove the app from the user once the inventory updates and they are added to the smart group as having installed the app which is excluded in the scoping. Ideas?

Does anyone else have this issue on occasion? We use DEP for "imaging" our Macs. We will enroll the machine in DEP, it will show up in Casper as assigned, and everything looks good. However we semi regularly will have the machine skip the "Configured by" screen when going through the OOBE. It seems like the machines aren't talking to Apple properly (although they definitely have network). If we wait a day the machine might work just fine. My question is, does anyone know a good way of testing Apple status / servers? Their status page doesn't seem to be DEP related. I have also tried the "Push Diagnostics" app but this never fails. Also, assuming the machine skips the "configured by" screen, sometimes the machine will prompt to install the profile and then everything will work. Is there a way to tell the machine to go ahead and talk to Apple servers and see if there is a profile available? It seems to show up at random times. Thoughts? Similar issues?

I am trying to distribute Minecraftedu with a policy. I have successfully (?) created a .dmg using Composer. The file installs on the client computer, but will not launch for all users. The app relies on Java and the content is placed in the /users/library/Application Support. It may be that the settings to fill home directories and user templates are not configured correctly in the .dmg? The error in the Logs are not useful 'weird error: 13' Does anyone have some tips/experience with this app? I tested placing the Application Support in a shared location with a direct installation. Again, the application will not launch for another network user (mobile account created on the Mac - OSX 10.9.x)

Hello JAMF Nation, I would like to ask if anyone is pulling reports using API? I am also new here so i don't really have any idea what is API. thanks in advance! :)

I've created a DMG from Composer and tested this as an upgrade from 15.12.3 to 15.13.1 but getting the following errors (see below). This problem also surfaces if the Office Suite is installed using the unaltered PKG directly from Office 365. Microsoft Error Reporting log version: 2.0 Error Signature:Exception: EXC_BAD_INSTRUCTIONDate/Time: 2015-08-13 15:51:54 +0000Application Name: Microsoft ExcelApplication Bundle ID: com.microsoft.ExcelApplication Signature: XCELApplication TimeStamp: 0x55c4b13aApplication Version: 15.13.1.150807Crashed Module Name: MicrosoftSetupUICrashed Module Version: 15.13.1.150807Crashed Module Offset: 0x0000b1a8Blame Module Name: MicrosoftSetupUIBlame Module Version: 15.13.1.150807Blame Module TimeStamp: 0x55c4b12dBlame Module Offset: 0x000000000000b1a8StachHash: ffffd3feApplication LCID: 1033Extra app info: Reg=en Loc=0x0409Crashed thread: 25 Operating System InformationOperating System: Mac OS X 10.10.4 (Build 14E46)CPU: Intel x86, Logical CPU Coun

Hey All, Trying to setup a Public Folder Calendar on some of our Macs with Outlook 2016 installed. However when selecting Tools->Public Folders(see screenshot) Nothing is displayed under the Root. Any ideas why this would be happening? I have confirmed i have access via windows Outlook 2010. Link to KB: https://support.office.com/en-us/article/Access-a-public-folder-in-Outlook-2016-for-Mac-8b16a7e6-ec52-4a41-b79e-38e0ccb21fea

Hi Everyone. I could use some help here. I have looked all around JN (other sites as well) and I have not come across the answer. I am currently using this EA to report Admin Accounts on a computer. !/bin/sh ################################################################ # Extension Attribute checks to display Admin Accounts on the computer. ################################################################ AdminAccount=dscl /Local/Default -list /Users UniqueID | awk '$2 >= 500 { print $1 }' | grep -v "^_" echo "<result> $AdminAccount </result>" exit 0 It will report all accounts that have the local admin rights checked in the GUI. This includes mobile accounts that gain their admin rights via and AD Security group when the computer in connected to the corporate network. Can anyone assist me in modifying the script above to report "truly" local admins? In other words, only those accounts that gain their rights by manu

I had a request to change the setting for requiring a password after sleep or screensaver from the default 5 minutes to immediately. I checked my enrolled MacBook, and that setting was greyed out and I couldn't change it even as an admin. I figured it must've been pushed down by Casper, so I checked in the JSS and that was not one of the settings I'd already defined. I went ahead and added it to an existing config profile that had already been applied with a few other basic settings. I selected the option to deploy it to all existing computers, and when I check the status, they show that they have completed successfully. However, when I check the computers themselves, the setting is still set to Require password 5 minutes after sleep or screen saver begins. I rebooted the machines after apply the profile, as well. I saw the thread about config profiles not working on 10.11.4, and one of my test machines was upgraded yesterday. So, I checked a 10.11.3 machine and that o

Recently I've been running into a problem with Casper binding to AD.If I try to bind a Mac to AD, and it already has a computer record in AD, it will fail.This scenario comes up if you are rebuilding a Mac that was bound to AD. I have "rebound" other Macs in the past. I know it was working back in June using 10.7.x and Casper 8.5.x.If I manually join using Directory Utility I get the "Join Existing Account?" message. Click OK then it joins it properly. Here is the policy log. /usr/sbin/jamf is version 8.63Executing Policy my.domain.com AD...Binding eric-ml15 to dockside.benfer.com...An error occurred binding to Active Directory: dsconfigad: This computer is already 'bound' to Active Directory. You must 'unbind' with '-remove' first. (Attempt 1)An error occurred binding to Active Directory: dsconfigad: This computer is already 'bound' to Active Directory. You must 'unbind' with '-remove' first. (Atte

This is what I am experiencing right now.I created a configuration in Casper Admin to image a machine using 10.8.2 and set it so that configuration also enrolls the machine as they are imaged under the Management tab of Casper Admin via browser, as well as to bind it to our Active Directory domain.Image process completes, I boot up the machine and after a couple of minutes it is up and has checked into Casper and now shows up in Inventory with the Computer Name I gave it while in Casper Imaging, let's say Mac01. The built-in Bind by default is set to run as a FirstRun script which it does and works but requires a restart to allow AD users to login. I restart, login with an AD account. After its inventory interval Inventory now shows that machine as having the Computer Name of localhost instead of Mac01. I go to Sharing in System Preferences and the Computer Name field is now blank and no policies seem to hit that machine/user.What I have done to get around this is re-create my

Our animation students are seeing a problem in our Yosemite labs where they begin a render in Maya and the computer tries to auto-logout, killing the render. The machine doesn't actually logout because the unsaved changes in Maya prevents that. I didn't specify auto-logout so I'm not sure where the machine is getting this as a default behaviour. The behaviour I would like to see is auto-logout permanently disabled and students should be able to enable screen lock so they can protect their renders while they go home for sleep. The lab systems automatically do a hard reboot at 6 AM every morning (reboot now in a script kicked off by cron). This all worked fine under Mavericks. Under Yosemite, it seems the auto-logout can be turned off if the student disables screen lock in the GUI: System Preferences, Security & Privacy, uncheck "Require password [x seconds or minutes] after sleep or screen saver begins, then "Are you sure you want to turn off screen lock,