Hi All, Haven't seen anything in the documentation or the forum on how to do an upgrade from version 3 to 4 of the NetBoot/SUS. We have it on Redhat Server. Has anyone done it? Is it just a matter of running the script or are there some things to do before hand? Regards, David

Hi all, Simple issue turned nasty. I'm running JSS 8.71 on 10.8+ clients. The shares i'm working with are just standard Windows server based smb shares and we have AD logons in mandatory use. I've checked and we seem to have proper Kerberos tickets generated on the computer. The Apple AD plugin is mounting the user's home drive correctly. What I want to do is just mount a network share on logon. Here's what i've tried so far: Config Profiles. These work intermittently. They fail for some of the users on our test machines and work for other users on the same machines. They've been deployed to the two computers I have on my desk and have failed to install on either despite our JSS telling me that they're present. MCX Settings: Based on mcx settings i've found posted on jamfnation elsewhere, (actual link escapes me right now) I can get the shares to mount on login with the current user's AD credentials. Trouble is this then breaks the

I am looking for a script to remove admin access on 100 machines that are using AD accounts. We have a local admin that I want to remain, and be the only admin. Any ideas?

So we don't have LDAP and I want to fill in a User's name based on the Full Name of their login account. The issue becomes that I run the recon command and it takes spaces into account and only recons the first name. So then I thought I'd do two commands to determine first and last name and recon both of those together but I have no idea how to make a space between them. I'd prefer not to have a . separating first and last name. What am I missing? :)

I'm starting to migrate clients from our old JSS 7.1 to our new JSS 8.4 server and have an odd Managed Preference issue. On the JSS 7.1 server we had a managed preference for the Dock to always include Safari, Entourage and Self Service. After moving the client over to JSS 8.4, the application icons appear on both sides of the user's Dock (applications and files/folders). After some troubleshooting, I tried disabling the Dock pref on the JSS 8.4, but the client keeps applying the com.apple.dock.plist in the Managed Preferences folder. I've removed the client from the old 7.1 JSS InventoryDeleted the /Library/Managed Prefs/ folderCleared MCX settings from localhost In comparing the client to a "clean" install (Imaged to the JSS 8.4 server and not migrated), the migrated client has a /Library/Managed Preferences/com.jamfsoftware.mcx.plist file that the clean install doesn't have. The only data in the com.jamfsoftware.mcx.plist file is <key>version,

I just set up a managed preferences for 'Mobile Account and Other Options' payload and set the 'Mobile Account Time to Live' to 604000 seconds (one week). I scoped this to 1 test computer. When will this take effect? there is no trigger, and no execution frequency settings to set for this i'm not exactly sure how this 'managed preferences' works

Just upgraded our JSS from 9.81 to 9.82 but after a reboot of the server (which the installer said to do) the Tomcat7 service is not starting and manually trying to start it creates an error that says it couldn't be started. Anyone else had this issue? Matt

Hi all, Due to Apple's certs expiring, i've been having issues packaging the new drag and drop method for XCode. Any thoughts? Just composer I guess?

I didn't see a full write-up on this anywhere, so after working my way through this issue I figured I'd post the solution here for others. Problem: iPads supervised through DEP cannot have certain actions performed on them by Apple Configurator 2. For example, if you try to save the unlock token for clearing the passcode offline in the future, you will get the following error message from AC2:"Configurator could not perform the requested action because “iPad” is not supervised by an existing organization.Import an organization with the identity for the device or click 'Prepare' to erase and supervise the device. All content and settings will be erased. This cannot be undone." Solution: JSS and AC2 need to share a common supervision identity in order to both pass management commands to the iPads. You need to create a supervision identity in JSS, pass it along to the devices, and import it into any instances of AC2 that you want to be able to manage your iPads. Steps:1. Upgrade JS

I'm having issues enrolling and disowning devices in Apple DEP today? Anyone else having problems - just wondering before I contact Apple for help, as all of these devices were purchased after 2011 and were purchased directly from Apple. It's the "NOT_ACCESIBLE" error, on four different iPads tried so far...

We have begun encrypting laptops at my job and are using FileVault 2 for the Macs with an institutional encryption key. The recovery key is applied using a Self Service policy. What's happening (or not happening) is that in the computer inventory information FileVault status is showing as Not Encrypted and the Institutional Recovery Key shows Not Present. However, both this statuses are wrong. Any ideas what may be happening?

Hi, we are bringing Cherwell in as our new ITSM system, and we'd like to populate the CMDB with information from Casper. (We're doing the same with SCCM on the Windows side) There doesn't seem to be a built-in SOAP/REST/WSDL from casper that we can pick up, but I was curious if anyone else has been using the JAMF db to feed objects in a cmdb? Thanks!

when using Casper Remote to do a 'Screen Share' i am getting on a certain computer, while on other computers i do not get this and am able to screen share. test-M 192.166.225.15 Yes An incorrect Username/Password is entered for this computer what is the Username/Password it's trying to use ? is the the Management Account that gets created when computer gets enrolled ?is there a place i can check?is there a way i can change it?

In was testing a Dock layout for a few days. I decided to go back to the default settings I ran the command:defaults delete com.apple.dock; killall Dock The dock disappears but does not reset to default. Does anyone have any ideas hoe to reset to default? Guess I will have to create a dock package and push it.Any ideas would be apprciated

Hello. Does anyone know how to set the default display properties inside the app catalog? Right now it opens with all of my categories shown in expanded view. I'd really like to have the page display with all of the categories collapsed as a default. Thank you

Okay so I had created an apple scrip app that would force the system to check with caster and push updated by running two commands "sudo jamf manage" and "sudo JAMF policy" everythign was working fine until i upgraded my JSS to 9.82 no i get an error *error "sudo: jamf: command not found" Can any one tell what i need to change to make it work again. thanks.

Not sure what's different, but I grabbed the PKGs of several applications from the Mac App Store for deployment in our environment several months ago. Recently we've had some issues with imaging (related to documented product issue D-009846) but in looking at that more closely, noticed that several post-image pkgs that are supposed to be installed are failing with the error: "Installation failed. The installer reported: installer: Package name is Keynote ... installer: certificate used to sign package is not trusted. Use -allowUntrusted to override" This occurs with the most recent versions of Keynote (6.6.1), Pages (5.6.1), and Numbers (3.6.1) which I grabbed not too long ago as well as the original Keynote, Pages, and Numbers versions we deployed at the beginning of the year successfully. These were grabbed using Rich's instructions here - https://derflounder.wordpress.com/2013/08/22/downloading-apples-server-app-installer-package/. Attempts to install th

All -Have begun testing with El Cap 10.11.3.Created my AutoDMG base with the latest version and imported it into the JSS. Began imaging process of a test device using just a few scripts (set preferred domains on Ethernet devices, set our proxy setting, dropped our root cert and installed it) and no applications to see what would happen. What I am seeing is new to me, the device will not enroll all of the way at first. When it actually does it can be up to 60-90 minutes after it started. Happening if I enroll during imaging with a management account creation or using the Enroll URL. When I run a sudo JAMF Enroll -verbose or a sudo jamf recon -verbose it seems to plow through applications and EA's but then gets stuck at 'checking AD settings...' Logged in as a local admin only, not an AD account. This happens whether the device is bound to AD or not at this time. I have disabled all Extension Attributes thinking that one of them might not like El Cap but the issue per

The attached script runs fine when manually invoked...how can I get it to run as a login script as the current user (not as root)? #!/bin/bash IFS=':' for pvm_file in $( "/Users/Shared/Parallels" | grep .pvm | tr ' ' ':' ); do prlctl register "/Users/Shared/Parallels/${pvm_file}" --preserve-uuid no done unset IFS I know I need to add $3 but how do I add it to this script? TIA,Don

Good news...ACA 10.10 exams are out. :) http://training.apple.com/certification/osxyosemite Fingers crossed they're working on ACTC. :( external image link

Hello, I'm pretty new to Casper so apologies if my question is simple and and I've missed the obvious. I've just started using Casper for the management of our iMacs on campus.I've created the BaseOS and the application packages that I need for the iMacs. I have imaged all the machines and confirmed the applications I need are all installed. I would now like to create the same Dock for all users who log on which contains the applications I have installed (Adobe, Office, Chrome, etc). Is there an easy way to do this and push to all machines? I created the Dock I want on one machine, and using Composer captured the Dock.However, while deploying this during the imaging process, it only appears for the Administrator user. All AD users who log in just get the standard Dock. Any help with this would be much appreciated. Kind Regards,Nathan Smith

Anyone seen this? Anyone know how to disable it with a script to push out to a lab environment?

Hello all, we are seeing a really annoying pop up started on our managed osx devices. A window that says JAMF wants access to our keychain and please enter the password. On my machine I tried the the admin password and my password (I am also an admin) but hither worked. Any ideas what could cause it? The logs are as below Fri Nov 08 10:19:28 osx5 jamf[4486]: Failed to submit disk encryption information to the JSS. Will try again later.Fri Nov 08 10:20:46 osx5 jamf[4845]: Checking for policies triggered by "recurring check-in"...Fri Nov 08 10:20:47 osx5 jamf[4845]: The management framework will be enforced as soon as all policies are done executing.Fri Nov 08 10:20:47 osx5 jamf[4845]: Adding launchd task com.jamfsoftware.task.checkForTasks...Fri Nov 08 10:20:49 osx5 jamf[4919]: Enforcing management framework...Fri Nov 08 10:20:55 osx5 jamf[4919]: The computer was not enrolled in MDM with the JSS. The device certificate did not install.Fri Nov 08 10:20:55 osx5 jamf[4919]: Enf

Hi, today I tried to import an mpp file and I got the following error:java.class.path: eclipsito.jar;.java.home: C:Program Files (x86)Javajre7java.ext.dirs: C:Program Files (x86)Javajre7libext;C:windowsSunJavalibextjava.io.tmpdir: C:Userspeter.danailovAppDataLocalTempjava.runtime.version: 1.7.0_51-b13java.vendor: Oracle Corporationjava.vm.name: Java HotSpot(TM) Client VMjava.vm.vendor: Oracle Corporationjava.vm.version: 24.51-b03os.arch: x86os.name: Windows 7Is there a way to stop this error?

I'm setting a policy to run at logout but I need the Mac to always restart, even if the user had chosen to shutdown. Setting the policy to restart immediately does not override the original shutdown command. Is there any way I can replace the shutdown command with a restart or set the Mac to power back on after the shutdown finishes?