Hello everyone, so, I wrote this sh in terminal and when I tried to run this code, I couldn't copy files have admin rights to open file and edit in the local drive. not sure what i'm doing wrong, is there different way to write this code so that I can access all the files that copied from network drive without changing to read/write access manually one by one? read jamf sudo chmod 777 /Volumes/$jamf/network/desktop mkdir ~/desktop/desktop cp -rv /volumes/$jamf/network/desktop/ ~/desktop/desktop sudo chmod 777 ~/desktop/desktop(put "" each line so could read the code better) any ideas would be helpful to me. Thank you

Hi, I've come across this a couple of times but I don't understand why some disable the DS_store creation on network shares? Does this give a performance boost?

Hello, I'm hoping there is a quick and simple answer which I just haven't stumbled across yet. Currently, we have applications which we want to launch at the beginning of our enrollment policies to notify our end users about how long the installation will last. Previously we had been using Cocoa Dialog to flash a message but we would like to use Jason Tratta's ProgressScreen. The problem I am running into is that when I attempt to use a script to launch the application (or to launch CocoaDialog) all policies halt until the application is exited. This wasn't a big deal with Cocoa Dialog because the end user just hits the "OK" button. I would like to background the script so that it runs but the policy progresses. I would think there should be an easy way to do this but I haven't run across it yet. Below is the script I am using at the beginning of the enrollment policy. I do have a policy run prior which installs the package. I have also tried executi

Does anyone know how I can create a smart group based on the account the JSS is using for management. We are in the process of changing the management account and it would be create to scope it and track the progress. I see the name of the account in the General tab of the computer. It is called "Managed: Managed by jssuser". Can I create a smart group based on which computers are not managed by this account?

Anyone out there familiar with using HA Proxy for a load balancer? We recently began using a load balancer with a public IP routing to our internal JSS servers with an internal IP. The problem we have is the internal IP is now showing for just about every iOS and OS X device. we have followed just about every suggestion on the boards. Ensured Apache Tomcat settings in the JSS was set to Enable Remote IP Valve, Modified the Server.xml to contain <ValveclassName="org.apache.catalina.valves.RemoteIpValve"internalProxies="x.x.x.x"trustedProxies="x.x.x.x"remoteIpHeader="x-forwarded-for"remoteIpProxiesHeader="x-forwarded-by"protocolHeader="x-forwarded-proto"/> setting the "x.x.x.x" to both the internal IP and the external IP. We have done a hybrid of all of the above. Any assistance would be greatly appreciated.

Has anyone else come across this?Since upgrading machines to El Capitan, around 1 in 5 macs exhibit this problem.Doing lpstat -p from the terminal lists the installed printers, suggesting that they are present. However, no printers show in the System Preferences UI (or the print dialog from applications). Resetting the printing system resolves this, but I can't think of a way to programmatically check this via a script, as lpstat doesn't appear to be aware of the problem..Any advice appreciated, thanks.

I just encountered something that raises a high degree of alarm with me. I found that a client's mail hosting company captures and stores user passwords. They claim to do so for the sake of troubleshooting user accounts. Is this common? This vendor talks as though this is a non-issue and not a big deal. I'm wanting to make the case to the powers that be that this is a huge security issue. But before I wind up with egg on my face I want to hit up some of you for a reality check. It it unreasonable for me to be so alarmed over this? Thank you.

Is it possible to use exclamation messages in jamfHelper messages? The message I would like to create would say something like: Heading: Howdy Partner! Description: A multi-line message goes here. It contains apostrophes, like this: ' so I can't easily use single quotes to contain the description! I had hoped the code below would work, but alas, the exclamation marks are breaking the formatting. And, if I escape the exclamation marks, the backslashes wind up in the dialog. See attached images for reference. Anybody have experience with the proper way to format/escape this? Thanks! JAMFHELPER="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" "$JAMFHELPER" -windowType hud -lockHUD -heading "Howdy Partner!" -description "A multi-line message goes here. It contains apostrophes, like this: ' so I can't easily use single quotes to contain the description!" -button1 "Okay" -defaultButton 1 -startlaunchd

We're in the middle of deploying CrashPlans to both our Mac and PC clients. We're able to push out hundreds of windows machines with no issues. I followed this guide - http://resources.jamfsoftware.com/documents/technical-papers/Deploying-CrashPlan-PRO-with-the-Casper-Suite.pdf Our policy is doing the following:Cache .custom install folder to /Library/Application Support/CrashPlan folderuser= last -1 | awk '{print $1}' (there's a ` before the last. It's not showing up for some reason.CP_USER_HOME="/Users/$user"userGroup=id -gn "$user"CP_USER_NAME="$user" Install crashplan proe Script to launch menu bar. In the beginning, we began deploying to 1-10 users at a time and had no issues on Mac. Yesterday we tried deploying to about ~30-50 users at a time and about 1 in 3 are not enrolling into CrashPlan. The app installs, the .custom folder is there, but the user's machine does not show up in CrashPlan. I'm looking

Hello, I have downloaded a new VPP token from Apple and wish to renew this in Casper JSS 9.4When I browse to the location, Settings > Global Management > VPP Accounts, I then select the account name, click Edit and select Renew Service Token. I then browse and select my VPP token and click Upload, the Expiration Date then changes and I click the Save button but I then receive the error seen in the image. I have done this multiple times but the 'Duplicate' error message still appears. I did think about creating a new VPP Account name and then uploading the VPP token to that but wasn't sure if that would cause any further issues. Any help would be appreciated.

I am testing User initiated upgrades via self service and have come across an oddity that i have never seen.. Normally when upgrading via self service, the user clicks to run a policy that installs based on the cached installer. This then restarts the mac and runs through the upgrade like you would expect it to. 10.11 for some reason reboots into a recovery environment, requiring the User to click on the option to install OSX 10.11, then select volume to install to, and finally enter in App Store information... Has anyone seen similar behavior with 10.11 and know of a solution we can use to get it to run less like a recovery drive and more like an installer/upgrade..

I want to be able to verify that Apple's Software Updates actually installed new versions of print drivers. What type of search inventory or smart group will point me in the right direction?

Creating several EA's to check if auto-update is being turned on for 3rd party software. Got some, but MS Office is giving me a bit of trouble. Setting itself is user-specific - "defaults read /Users/username/Library/Preferences/com.microsoft.autoupdate2 HowToCheck" will return the expected value. However, I need to iterate through the users to make sure it is turned off on all. I was about to just try a "while" look to loop through, but... my problem is: if i iterate through the users, how do I keep values distinct for purposes of reporting in the EA output? IE - if user "A" has auto updates off, and user "B" has them on... but user "C" has them off - will the EA simply report the last value of "Off"? I was intending to use this as part of a smart group to disable auto updates, but realize that going down the path of an EA may not be the most logical approach, so I'm open to suggestions on either how to sc

Hi everyone: For years I've been creating a "customized" version of the Computer Name (or Message) screen saver by replacing the file /System/Library/Frameworks/ScreenSaver.framework/Versions/A/Resources/Computer Name.saver/Contents/Resources/ScreenSaver.tiff and changing it from an Apple logo to our University's logo. I tried to get away from this and just use the built-in Apple logo in the past, but you would be amazed at the non-technical folks who noticed and asked why the screen saver wasn't showing our logo any longer. In El Capitan, that directory is now protected by SIP (or at least seems to be). I'm not looking to disable SIP just for a screen saver. As an alternative, I've created a photo-based screen saver, using the "Floating" module. I've added the Photos to /Library/Screen Savers where the built-in photos are installed from Apple. What I'm wondering is if there is a way to send down a config profile to use the

I have some new hardware that I need to setup with firmware passwords so people cannot boot from USB. I read through the Setting EFI Passwords on Mac Computers (Models Late 2010 or Later) article, but it doesn't say anything about using Casper Remote or Imaging to set the passwords once that file is located on the client or if it has to be done with a script? Once that file is located on the client computers, what methods do I have to choose from when setting the firmware? iMac Intel (27-inch, Mid 2011)13-inch MacBook Pro (Mid 2012)

So I upgraded our Test server to 9.82 in order to test it out with our system to see if we should upgrade. We tend to use quite a bit of Configuration Profiles in our area. So when the upgrade was done I was checking things out and things were mostly ok. The biggest thing is that in OS X Configuration profiles it shows "No data available in table". Not only that there isn't a New button like before to create a new profile. Is there something wrong with our database? If so, how do we fix it? I remember in older version of Casper, we had a method of testing the database tables and fixing them....don't see that now.

For some reason after an upgrade I am now getting the attached picture as an error message. Any help would be great. Many thanks

Hey Everyone, Just wanted to know if anyone knows whats the new CatalogURL to allow El Capitan updates?

Hi Everyone, I might be missing something simple so please excuse an oversight I be having. Every so often, I have a need to wipe a Mac. When I do this, the previous policies and scripts that have been run once per computer will not run again on this Mac. The question is, do we have the ability to open a single computer and flush all policies for this one computer? Rather than searching all possible combinations of policies and flushing the individual log from each policy, it would be great to find the computer, open it, flush all policies. Maybe this is a feature request and I can create one. I just didn't know if someone else has found a way to do this in some other mechanism. Thanks as always!! Mick

In our schools, we have an iOS configuration profile that, among other things, blocks in-app purchases. This is primarily to protect our teachers' credit/iTunes cards. We've had some teachers ask to allow in-app purchases on the student devices, and I want to be able to do this on a limited basis. Right now the initial configuration profile is scoped to all mobile devices in this JSS. My question is this - when I go to the initial config profile to create an exclusion, I get the following message (see attached). As I read it, this will keep the initial profile (NCSD iPad) on all of the devices except the one for which I created the exception. Can anyone confirm this? I don't want to remove the config profile from all the rest of the iPads by mistake. Thanks!

When the postinstall.sh runs it fails every time and loops. Below are the error messages we receive: Script result: /Library/Application Support/JAMF/tmp/postImaging.sh: line 8: /usr/sbin/jamf: No such file or directory/Library/Application Support/JAMF/tmp/postImaging.sh: line 19: /usr/sbin/jamf: No such file or directoryStarting...Stopped ARD Agent.Done.Starting...Activated Remote Management.Stopped ARD Agent.admin: Set user remote control privileges.admin: Set user remote access.Done.Starting...Setting allow all users to NO.Done.ln: /Applications/Utilities//Directory Utility.app: File existsln: /Applications/Utilities//Network Utility.app: File existsSoftware Update ToolCopyright 2002-2012 Apple Inc. Finding available softwareSoftware Update found the following new or updated software: 031-07832-3.1HP Printer Software Update (3.1), 144634K [recommended] OSXUpd10.10.5-10.10.5OS X Update (10.10.5), 795798K [recommended] [restart]* iTunesX-12.3.2iTunes (12.3.2), 241328K [recommended]

Strange one, but - is it possible to do a filter or search on Casper to show us all the machines with an SSD and all the ones without? Just as weve been doing a swap and trying to keep track of ones weve done and the ones that need upgrading? ThanksSimon

I have 20 macs that I need to turn on remote management and remote login, When we gave it to the teachers I think they were turned off. Thanks

Hello, I'm working with a client that would like to be notified when a user removes the JAMF framework with ```sudo jamf removeFramework```. I recall one of the Facebook CPE guys talking about how they automatically remediate this, but it's a bit overkill for what my client needs, (they just want a notification that files a ticket, perhaps). What are other folks in the community doing for this, if anything? Thanks!

How much scripting experience is required for this course?