Hello everyone, Currently testing moving my JSS to a new box, with a new DNS and I would like to update the built in CA. Old JSS: jss.domain.extra.com:8443New JSS: casper.domain.com:8443 TomCat has been updated to reflect casper.domain.com I currently have the new JSS running (testing it) and when I go to Global Management > PKI > Built in CA > Download CA Certificate I get the old CA (jss.domain.extra.com). How can I update that? I searched around on jamf nation and found no solutions. Thanks!

I have a group of computers in a remote office that I need to pull the DNS info from. However, the admin at that location renamed the default interface from "Ethernet" to "LAN." This is due to having also a Metadata interface as well so each is distinguishable. I wrote the following based off another default DNS Extension Attribute that was pre installed on our JSS. #!/bin/sh echo "<result>`/usr/sbin/networksetup -getdnsservers LAN 2>&1`</result>" This works when testing on one of the machines remotely. However when I make a smart group and apply "DNS resolved IS NOT <new DNS IP>" at Location I still retrieve all the machines including a few I manually changed for testing purposes. When viewing Extension Attributes in a machines inventory I see no data output. Curious what I'm missing.. any insight or help is greatly appreciated!

Just curious if it is possible and if anyone has a script that queries JSS for the assigned users name and names the computer to match? I'm trying to set my workflow hands off. The users will go through the setup process and create their own accounts. While i'll try to steer them in the right direction. There is no guarantee they won't get crafty and put something different for the full name or username. Since my content filter reports based on username and computer name, I wanted at least one of those to be something I control. Thanks!

I need to write a script that will detect the currently installed acrobat pro version and do a ln -s on it... I have part of it hard coded so I could test it, but I need it to detect the version and plug that info in... #!/bin/sh ln -s /Applications/Adobe Acrobat X Pro/Adobe Acrobat Pro.app /private/tmp/acrobatplugin So far, the app supports these versions, but if the script could just do a general search even for potential future versions that would be awesome. Adobe Acrobat X Standard or Pro Adobe Acrobat XI Standard or Pro Including the locally installed Adobe Creative Cloud XI Adobe Acrobat DC

Hi Everyone,What do you think it's the best (simple and quick) way to package and deploy Mac App Store Apps without getting involved with VPP.I found using Composer actually works for most free Apps.Thanks!

We received an iPad back from a previous employee and they don't know the password to their Apple ID. Unlike 95% of our devices, this one in question reports in the JSS as unsupervised and the "Activation Lock Bypass is "not configured". We do have this device listed in DEP, so I'm confused as to why supervision is listed as "no" and "Activation Lock Bypass is "not configured". iOS version 8.1.3JSS version 9.8.2 Advice?

Since the update to NetSUS 4.0, when I try to enable (select) an update and press "Save", it is disabled (unselected) again. The same happens when I disable an enabled update, it in enabled again after I press "Save". In other words, the GUI does not work for (de)selecting updates. What I tried in the GUI:-create a new branch, works-enable an update in the new branch, does not work-remove the branch, works-change the password of the webadm, worksIn the terminal I cán enable or disable updates... Anyone an idea? should I download the OVA again and start all over?

Hello everyone! I'm trying to install OS X 10.11 via Self Service and I'm having this error. Using OS X 10.11 works fine, but 10.11.1 does not. This is what I've done so far, testing is being done on OS X 10.10.5. Create a policy that caches the 10.11 installer .pkg (created with createOSXinstallPkg) Create another policy that installs the cached package and reboots to the installer. I get the popup "This computer is scheduled to be rebooted", but it never does. jamf.log: optional image ALT text Cache the Installer optional image ALT text Install Cached packages optional image ALT text optional image ALT text Has anyone else experience this error? Sidenote Using a smart group to find cached packages does not work for me. I just get zero results. optional image ALT text

One of our ex-students who we kicked out has all of a sudden lost his school iPad. I know for a fact he still has it. Every day the jss sends a policy to hide his apps (because you can't have games on our school iPad's), and I have also hidden the app store. On a daily basis the fool wipes his iPad, plays games for a few hours, and then the apps hide etc. This repeats the next day. What else can I do to make this iPad useless (and partly entertain myself). Thanks.

Hello, I am using the Casper REST API to populate our CMDB in ServiceNow. I am querying each computer record and gathering details using this Resource URL. https://your.jssserver.com:8443/JSSResource/computers/serialnumber/$serialnumber This resource has a good amount of information. However, I am looking for more information on the specific Network Adapters that are attached to each computer. I only seem to have <mac_address> <ip_address> and <alt_mac_address>. Is there any more information on each network adapter such as a model number? Our CMDB has an entirely separate table for Network Adapters and I would like to populate it with more details other than just the Mac Address. I want to get a value for "name" and/or "model name". Thanks!

We're in a scenario where we want to simplify how we can get new remote users up and running with laptops. Currently, our hardware support team sets up a webex, joins VPN, some other painful stuff, etc. What I'm working on is creating an application (so that non-standard admins can launch this) that will both create their user account and add them to file vault, then immediately log out and delete our temporary user. In my thinking I came up with a combination of a few things, but starting with an AppleScript that can do a lot of this because I can set it as read only (and keep my service account name/password hidden and b) users can launch this without admin rights: to getusername() display dialog "Enter your User ID:" default answer "" set userid to text returned of result return {userid} end getusername to getuserpwd() display dialog "Enter your password:" default answer "" with hidden answer set userpwd to text returned of result return {userpwd} e

What is the best way to update Microsoft Office 2011 and Microsoft Lync?

The issue: Several users report (and I've seen with my own eyes) that 10.10.x / all of their open apps crash after returning from sleep mode. The mouse will move around the screen and the users can right click on dock icons, but they cannot force-quit apps or access other os menu items / features. Beach ball spins for a while, and only a forced restart resolves the issue. The environment: University setting with computers managed by Casper, bound to our AD, and encrypted (Sophos Safeguard using FileVault). OS varies between 10.10.2 and 10.10.3 (but might be affecting 10.10.1 as well). The hardware: Recently purchased (arrived in late February), Late 2013 iMacs (14,1) and MBPs (11,1) with 8 GB RAM and Intel i5. All computers arrived with Yosemite. The failed workarounds:- Upgrading to 10.10.3 / supplemental 10.10.3 update- Using PMST to turn off hibernate and/or deep sleep (one user reported the problem worsening after this)- Restoring the OS- PRAM or SMC reset- Disabling Sophos

I want to apologize in advance...I am going to be taking the CJA course very soon and am looking forward to learning more about the back-end of JAMF databases and the API. I'm a bit of a noob with the API. Would someone know how to take an Excel CSV formatted with the following: Device Name (column1), Serial Number (column 2), Building, (column 3), Room Number (column 4). I want to take this spreadsheet and use the API to add the info contained in columns 3 and 4 to the JSS. There may be existing data there in the JSS and I would like it to be overwritten. I know this isn't McD's where I put in an order and receive it, but I hope someone here will take pity on me and teach me how to do this as it will help us with would could have been a bad data entry task. I know you can do Building with a mass action, but I can't do that with room number necessarily and this is why I want to go the API route. Thank you to any kind souls in advance,blackholemac

Hey everyone. In the past I have baked all my settings into the base, but wanted to try my hand at a clean base OS via AutoDMG and customizing it after the fact. I'm having trouble with settings I normally set in System Preferences > Security & Privacy. The two things I'd like to control are:2. Allow apps downloaded from: Anywhere3. Advanced... check 'Require an administrator password to access system-wide preferences' Composer doesn't seem to capture what is being changed/modified when I make these changes, so I am not sure how to set these settings en mass.

Here is the issue im having. If i have a mac with a local management admin account. And a AD linked Mobile account then i encrypt the system via a policy. it encrypts fine. i can add the mobile account and management account to file vault no problem. But when i go to login it require that i login to both FileVault and then to the mobile account. Is there away to have file vault auto log the user into the mobile account? So they only have to put in the cached password once?

Good Morning Nation We have been using paper cut on OS X for awhile now. No issues. I imaged a imac and went to set up and configure printing. Testing the setup the printer paused.I made sure we had the latest drivers and the latest paper cut client. Still the printer paused. I decided to test on my Yosemite iMac and El Capitan laptop. No problems. After many permiataions I discovered the common factor is if printing has been set up previously on the system. Meaning a new image or a user who wishes to print can not get paper cut to open after hitting the print button. If we set up to print using the ip of the printer no issues.Has anyone else seen this issue? Of course the windows admins say "Its working on windows so....."

Hello everyone! I have been playing around with autopkg the passed couple days and would love to get it working.It looks like everything is working until it has to talk to the JSS. It mounts our CasperShare but give me this error. Error mounting Url "smb://jssuser:jsspassord:@ourjss:139/caspershare$: None I was suggested to take a look at the defaults read and all of them look right to me defaults read com.github.autopkg JSS_REPOS - looks right defaults read com.github.autopkg JSS_URL - looks right defaults read com.github.autopkg JSS_VERIFY_SSL - says no SSL exists defaults read com.github.autopkg API_USERNAME - looks good defaults read com.github.autopkg API_PASSWORD - looks good

I am trying to get the jamfhelper to cover the screen as I run other policies, however it seems that the jamfhelper is working, but keeping the other policies from running until after I force quit jamfhelper. Any ideas what I might be doing wrong? Gabe ShackneyPrinceton Public Schools

Shared lab systems (OS X 10.10.5) in our environment are set to auto-login as a mobile Active Directory user. When auto-login takes place, the user does not get a Kerberos ticket granting ticket. If the user is manually logged in by entering the username and password at the login window, they do receive a TGT. I've confirmed this with multiple users (all mobile AD accounts) and the behavior has been consistent. Has anyone else come across this? It seems like something in the auto-login process has to be preventing the requesting of a TGT at login. Thanks!Eric

Hi JAMF Nation I have an issue with the login window: I created an user with casper and now the user is not displayed in the login window after an restart. If you log in with an other account and logout afterwards the user is displayed. Some information:- User ID is 504 (over 500)- User home folder is located in /Users/- There is no config profile which manages the login window- Username doesn't matter. I can take "test" or "user" etc. Any idea?

Dear all,Since the Adobe CS6 requires the old Java for OS X 2015-001https://support.apple.com/kb/dl1572?locale=en_AUCan I install the old as well as the latest Java 8 on the same machine?I am running 10.9.5Thanks.

Hey all, I'm just starting to familiarize myself with the API, but I don't know where to start with this. We're going to be trading ~1200 iPads in the next month. I need to delete the old 1200 from JSS, and I have the serial numbers of the devices that I need to delete. Is there a way for the API to reference something like a .csv file with serial numbers, then delete those mobile devices from JSS?

I receive this message when attempting to open Casper Admin. Does anyone know what might be the cause of this?

Hi everyone. Today was my first attempt to create an image with AutoDMG, but it never created a Recovery HD. Here is what I did and perhaps I missed a step as I am not completely clear what the workflow should be: I downloaded the latest El Capitan installer and added it to AutoDMG and created the .dmg Uploaded the dmg to Casper Admin and created a Standard config for it, then added the dmg to the config. Within the config I set up the management account we use and left 'Partitions' empty. NetBooted a computer, ran imaging to completion. After everything was said and done, I logged in and did diskutil list to see there was no Recovery Partition. Option boot, same thing: No Recovery HD. Some things I am unclear on are: Was my Casper Configuration improperly configured? Is there something specific I need to do when creating the image with AutoDMG to have it lay down the Recovery HD? If the computer I am building on via AutoDMG didn't have a Recovery HD, would that a