Okay so I had created an apple scrip app that would force the system to check with caster and push updated by running two commands "sudo jamf manage" and "sudo JAMF policy" everythign was working fine until i upgraded my JSS to 9.82 no i get an error *error "sudo: jamf: command not found" Can any one tell what i need to change to make it work again. thanks.

Not sure what's different, but I grabbed the PKGs of several applications from the Mac App Store for deployment in our environment several months ago. Recently we've had some issues with imaging (related to documented product issue D-009846) but in looking at that more closely, noticed that several post-image pkgs that are supposed to be installed are failing with the error: "Installation failed. The installer reported: installer: Package name is Keynote ... installer: certificate used to sign package is not trusted. Use -allowUntrusted to override" This occurs with the most recent versions of Keynote (6.6.1), Pages (5.6.1), and Numbers (3.6.1) which I grabbed not too long ago as well as the original Keynote, Pages, and Numbers versions we deployed at the beginning of the year successfully. These were grabbed using Rich's instructions here - https://derflounder.wordpress.com/2013/08/22/downloading-apples-server-app-installer-package/. Attempts to install th

All -Have begun testing with El Cap 10.11.3.Created my AutoDMG base with the latest version and imported it into the JSS. Began imaging process of a test device using just a few scripts (set preferred domains on Ethernet devices, set our proxy setting, dropped our root cert and installed it) and no applications to see what would happen. What I am seeing is new to me, the device will not enroll all of the way at first. When it actually does it can be up to 60-90 minutes after it started. Happening if I enroll during imaging with a management account creation or using the Enroll URL. When I run a sudo JAMF Enroll -verbose or a sudo jamf recon -verbose it seems to plow through applications and EA's but then gets stuck at 'checking AD settings...' Logged in as a local admin only, not an AD account. This happens whether the device is bound to AD or not at this time. I have disabled all Extension Attributes thinking that one of them might not like El Cap but the issue per

The attached script runs fine when manually invoked...how can I get it to run as a login script as the current user (not as root)? #!/bin/bash IFS=':' for pvm_file in $( "/Users/Shared/Parallels" | grep .pvm | tr ' ' ':' ); do prlctl register "/Users/Shared/Parallels/${pvm_file}" --preserve-uuid no done unset IFS I know I need to add $3 but how do I add it to this script? TIA,Don

Good news...ACA 10.10 exams are out. :) http://training.apple.com/certification/osxyosemite Fingers crossed they're working on ACTC. :( external image link

Hello, I'm pretty new to Casper so apologies if my question is simple and and I've missed the obvious. I've just started using Casper for the management of our iMacs on campus.I've created the BaseOS and the application packages that I need for the iMacs. I have imaged all the machines and confirmed the applications I need are all installed. I would now like to create the same Dock for all users who log on which contains the applications I have installed (Adobe, Office, Chrome, etc). Is there an easy way to do this and push to all machines? I created the Dock I want on one machine, and using Composer captured the Dock.However, while deploying this during the imaging process, it only appears for the Administrator user. All AD users who log in just get the standard Dock. Any help with this would be much appreciated. Kind Regards,Nathan Smith

Anyone seen this? Anyone know how to disable it with a script to push out to a lab environment?

Hello all, we are seeing a really annoying pop up started on our managed osx devices. A window that says JAMF wants access to our keychain and please enter the password. On my machine I tried the the admin password and my password (I am also an admin) but hither worked. Any ideas what could cause it? The logs are as below Fri Nov 08 10:19:28 osx5 jamf[4486]: Failed to submit disk encryption information to the JSS. Will try again later.Fri Nov 08 10:20:46 osx5 jamf[4845]: Checking for policies triggered by "recurring check-in"...Fri Nov 08 10:20:47 osx5 jamf[4845]: The management framework will be enforced as soon as all policies are done executing.Fri Nov 08 10:20:47 osx5 jamf[4845]: Adding launchd task com.jamfsoftware.task.checkForTasks...Fri Nov 08 10:20:49 osx5 jamf[4919]: Enforcing management framework...Fri Nov 08 10:20:55 osx5 jamf[4919]: The computer was not enrolled in MDM with the JSS. The device certificate did not install.Fri Nov 08 10:20:55 osx5 jamf[4919]: Enf

Hi, today I tried to import an mpp file and I got the following error:java.class.path: eclipsito.jar;.java.home: C:Program Files (x86)Javajre7java.ext.dirs: C:Program Files (x86)Javajre7libext;C:windowsSunJavalibextjava.io.tmpdir: C:Userspeter.danailovAppDataLocalTempjava.runtime.version: 1.7.0_51-b13java.vendor: Oracle Corporationjava.vm.name: Java HotSpot(TM) Client VMjava.vm.vendor: Oracle Corporationjava.vm.version: 24.51-b03os.arch: x86os.name: Windows 7Is there a way to stop this error?

I'm setting a policy to run at logout but I need the Mac to always restart, even if the user had chosen to shutdown. Setting the policy to restart immediately does not override the original shutdown command. Is there any way I can replace the shutdown command with a restart or set the Mac to power back on after the shutdown finishes?

Hello everyone, so, I wrote this sh in terminal and when I tried to run this code, I couldn't copy files have admin rights to open file and edit in the local drive. not sure what i'm doing wrong, is there different way to write this code so that I can access all the files that copied from network drive without changing to read/write access manually one by one? read jamf sudo chmod 777 /Volumes/$jamf/network/desktop mkdir ~/desktop/desktop cp -rv /volumes/$jamf/network/desktop/ ~/desktop/desktop sudo chmod 777 ~/desktop/desktop(put "" each line so could read the code better) any ideas would be helpful to me. Thank you

Hi, I've come across this a couple of times but I don't understand why some disable the DS_store creation on network shares? Does this give a performance boost?

Hello, I'm hoping there is a quick and simple answer which I just haven't stumbled across yet. Currently, we have applications which we want to launch at the beginning of our enrollment policies to notify our end users about how long the installation will last. Previously we had been using Cocoa Dialog to flash a message but we would like to use Jason Tratta's ProgressScreen. The problem I am running into is that when I attempt to use a script to launch the application (or to launch CocoaDialog) all policies halt until the application is exited. This wasn't a big deal with Cocoa Dialog because the end user just hits the "OK" button. I would like to background the script so that it runs but the policy progresses. I would think there should be an easy way to do this but I haven't run across it yet. Below is the script I am using at the beginning of the enrollment policy. I do have a policy run prior which installs the package. I have also tried executi

Does anyone know how I can create a smart group based on the account the JSS is using for management. We are in the process of changing the management account and it would be create to scope it and track the progress. I see the name of the account in the General tab of the computer. It is called "Managed: Managed by jssuser". Can I create a smart group based on which computers are not managed by this account?

Anyone out there familiar with using HA Proxy for a load balancer? We recently began using a load balancer with a public IP routing to our internal JSS servers with an internal IP. The problem we have is the internal IP is now showing for just about every iOS and OS X device. we have followed just about every suggestion on the boards. Ensured Apache Tomcat settings in the JSS was set to Enable Remote IP Valve, Modified the Server.xml to contain <ValveclassName="org.apache.catalina.valves.RemoteIpValve"internalProxies="x.x.x.x"trustedProxies="x.x.x.x"remoteIpHeader="x-forwarded-for"remoteIpProxiesHeader="x-forwarded-by"protocolHeader="x-forwarded-proto"/> setting the "x.x.x.x" to both the internal IP and the external IP. We have done a hybrid of all of the above. Any assistance would be greatly appreciated.

Has anyone else come across this?Since upgrading machines to El Capitan, around 1 in 5 macs exhibit this problem.Doing lpstat -p from the terminal lists the installed printers, suggesting that they are present. However, no printers show in the System Preferences UI (or the print dialog from applications). Resetting the printing system resolves this, but I can't think of a way to programmatically check this via a script, as lpstat doesn't appear to be aware of the problem..Any advice appreciated, thanks.

I just encountered something that raises a high degree of alarm with me. I found that a client's mail hosting company captures and stores user passwords. They claim to do so for the sake of troubleshooting user accounts. Is this common? This vendor talks as though this is a non-issue and not a big deal. I'm wanting to make the case to the powers that be that this is a huge security issue. But before I wind up with egg on my face I want to hit up some of you for a reality check. It it unreasonable for me to be so alarmed over this? Thank you.

Is it possible to use exclamation messages in jamfHelper messages? The message I would like to create would say something like: Heading: Howdy Partner! Description: A multi-line message goes here. It contains apostrophes, like this: ' so I can't easily use single quotes to contain the description! I had hoped the code below would work, but alas, the exclamation marks are breaking the formatting. And, if I escape the exclamation marks, the backslashes wind up in the dialog. See attached images for reference. Anybody have experience with the proper way to format/escape this? Thanks! JAMFHELPER="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" "$JAMFHELPER" -windowType hud -lockHUD -heading "Howdy Partner!" -description "A multi-line message goes here. It contains apostrophes, like this: ' so I can't easily use single quotes to contain the description!" -button1 "Okay" -defaultButton 1 -startlaunchd

We're in the middle of deploying CrashPlans to both our Mac and PC clients. We're able to push out hundreds of windows machines with no issues. I followed this guide - http://resources.jamfsoftware.com/documents/technical-papers/Deploying-CrashPlan-PRO-with-the-Casper-Suite.pdf Our policy is doing the following:Cache .custom install folder to /Library/Application Support/CrashPlan folderuser= last -1 | awk '{print $1}' (there's a ` before the last. It's not showing up for some reason.CP_USER_HOME="/Users/$user"userGroup=id -gn "$user"CP_USER_NAME="$user" Install crashplan proe Script to launch menu bar. In the beginning, we began deploying to 1-10 users at a time and had no issues on Mac. Yesterday we tried deploying to about ~30-50 users at a time and about 1 in 3 are not enrolling into CrashPlan. The app installs, the .custom folder is there, but the user's machine does not show up in CrashPlan. I'm looking

Hello, I have downloaded a new VPP token from Apple and wish to renew this in Casper JSS 9.4When I browse to the location, Settings > Global Management > VPP Accounts, I then select the account name, click Edit and select Renew Service Token. I then browse and select my VPP token and click Upload, the Expiration Date then changes and I click the Save button but I then receive the error seen in the image. I have done this multiple times but the 'Duplicate' error message still appears. I did think about creating a new VPP Account name and then uploading the VPP token to that but wasn't sure if that would cause any further issues. Any help would be appreciated.

I am testing User initiated upgrades via self service and have come across an oddity that i have never seen.. Normally when upgrading via self service, the user clicks to run a policy that installs based on the cached installer. This then restarts the mac and runs through the upgrade like you would expect it to. 10.11 for some reason reboots into a recovery environment, requiring the User to click on the option to install OSX 10.11, then select volume to install to, and finally enter in App Store information... Has anyone seen similar behavior with 10.11 and know of a solution we can use to get it to run less like a recovery drive and more like an installer/upgrade..

I want to be able to verify that Apple's Software Updates actually installed new versions of print drivers. What type of search inventory or smart group will point me in the right direction?

Creating several EA's to check if auto-update is being turned on for 3rd party software. Got some, but MS Office is giving me a bit of trouble. Setting itself is user-specific - "defaults read /Users/username/Library/Preferences/com.microsoft.autoupdate2 HowToCheck" will return the expected value. However, I need to iterate through the users to make sure it is turned off on all. I was about to just try a "while" look to loop through, but... my problem is: if i iterate through the users, how do I keep values distinct for purposes of reporting in the EA output? IE - if user "A" has auto updates off, and user "B" has them on... but user "C" has them off - will the EA simply report the last value of "Off"? I was intending to use this as part of a smart group to disable auto updates, but realize that going down the path of an EA may not be the most logical approach, so I'm open to suggestions on either how to sc

Hi everyone: For years I've been creating a "customized" version of the Computer Name (or Message) screen saver by replacing the file /System/Library/Frameworks/ScreenSaver.framework/Versions/A/Resources/Computer Name.saver/Contents/Resources/ScreenSaver.tiff and changing it from an Apple logo to our University's logo. I tried to get away from this and just use the built-in Apple logo in the past, but you would be amazed at the non-technical folks who noticed and asked why the screen saver wasn't showing our logo any longer. In El Capitan, that directory is now protected by SIP (or at least seems to be). I'm not looking to disable SIP just for a screen saver. As an alternative, I've created a photo-based screen saver, using the "Floating" module. I've added the Photos to /Library/Screen Savers where the built-in photos are installed from Apple. What I'm wondering is if there is a way to send down a config profile to use the

I have some new hardware that I need to setup with firmware passwords so people cannot boot from USB. I read through the Setting EFI Passwords on Mac Computers (Models Late 2010 or Later) article, but it doesn't say anything about using Casper Remote or Imaging to set the passwords once that file is located on the client or if it has to be done with a script? Once that file is located on the client computers, what methods do I have to choose from when setting the firmware? iMac Intel (27-inch, Mid 2011)13-inch MacBook Pro (Mid 2012)