Please tell me how can I pull a report that lists all the managed Macs and their OS X version.

Apologies in advance if this has previously been covered (although I did search the discussions before posting): We are new to iPads and JAMF here in our Windows shop and have been seeing an oddity in the last few days where the Mail.app suddenly loses the Exchange account password. This has happened 2 or 3 days in a row now on all of our test devices (running 9.2.1, hosted JSS running 9.82). I'll be opening an Office 365 support ticket as well in case this is an O365 problem. Anyway just thought I would ask if anyone else is seeing this behavior? Thanks. Edit: Oddly enough, iPhones in the company that are not managed by JAMF are not experiencing this issue, nor are Outlook.app clients having any trouble so it kind of makes me think it might not be a Microsoft issue)

Hi, Need a little help with some smart groups; I have Labs setup within Smart Groups - "Lab-C119-Mac" This brings back 20 machines - like it should When I want to build a policy around this smart group - it always seems to gather machines from other Labs containing similar names, For Example: "Lab-Mac-M329-10" I have even contained Lab C119 into its own building and again, the smart group looks correct, However I still have the same issue in Policies. Screenshots attached Thanks, Jeremy

Hey Everyone, A number of our critical engineers have asked if its possible to introduce network Time Machine backups; so that if anything happens to their MacBooks (breakage, theft, etc) they are able to borrow a loan machine and get running again quickly. I've done some initial proof of concept testing; using a 2010 Mac Pro running OS X 10.10.5 Server; loaded with hard drives and then I shared its local storage via the Time Machine service - this worked a treat from an AD security/permissions and speed point of view. However, our core Mac servers are Mac Minis in our server room. I thought, could we use a network volume mounted to the Mac Mini and shared via Server.app's Time Machine feature? Alternatively, would it be better if each Mac client mounted the Time Machine volume from the network and ran their own backups via their Time Machine clients. I had a quick look if this was doable but didn't get very far as I couldn't see the Time Machine share in my MacBook's Time Machine c

Hello hello! I'm curious where to buy laptops for international employees that can be enrolled in DEP and also be localized properly for the employee's country. In the past, we'd usually have one sourced at a nearby Apple store, but would prefer getting from a trusted vendor that will enroll the laptop in DEP. What do you use?

is the a way to update the host file using composer then package it as .pkg and add it to Casper Imaging. Thank you.

We have an iPad that has a 4-digit passcode that an unknown student has generously decided to test us with - and after attempting a DFU and clicking Restore iPad > Restore and Update > agreeing to iOS 9.2.1 update > and agreeing to terms > it errs out with: "There was a problem downloading the software for the iPad "iPad". You do not have permission to access the requested resource. Make sure your network settings are correct and your network connection is active, or try again later." What are our options for this iPad? If we call Apple support will they be able to clear the code or wipe the device? The iPad is not yet in our DEP/JSS program, so we are of course going to use this as incentive to convert this teacher's cart. Thanks!

Hi, Beware, potential stupid question ahead. We are in the final stages of selecting Casper as the Mac management tool for our environment. Currently we are a Windows and SCCM shop for our PCs. We would like to utilize the Casper NetBoot Imaging functionality. Right now we have DHCP set up to PXE boot to SCCM for Windows builds and a ton of IP-helpers on different subnets to forward DHCP requests.. am I going to have a conflict here? If I simply create a new vendor class on my MS DHCP server for Macs will that suffice? Would love to hear from those who are doing both Windows and Mac network builds on the best way to design/configure this.. any tips are appreciated!

Hi When I enroll a computer with DEP I need to go trough this steps: Run setup assistant (accept configuration, create account etc.) Reboot Wait until enrollment starts Why do I have to restart the computer? PreStage Enrollment looks like this: Use existing location information, if applicable --> checkedRequire Authentication --> uncheckedMake MDM Profile Mandatory --> checkedAllow MDM Profile Removal --> checkedAllow the user to remove the MDM profile --> checkedRestore --> checkedApple ID --> checkedTerms of Service --> checkedDiagnostics --> checkedRegistration --> checkedFilevault --> checked Anybody knows how to prevent this behaviour? Would like to have a workflow like this: Run setup assistant (accept configuration, create account etc.) Wait until enrollment starts Run all policies triggered with "Enrollment Complete" BestAnver

While distributing the latest version of VLC.app 2.2.1, the app is getting installed/ copied to "Macintosh HD" rather going to Applications.

Would you like to enroll in JAMF’s revamped Casper Suite beta program? JAMF Software beta programs give you a first look at new features and functionality in upcoming products. This also allows you to help provide feedback, be involved in beta discussions and help us improve the quality of the Casper Suite. During this beta program, you will have an opportunity to view and test the new management workflows to help support Apple and JAMF Software initiatives – including the ability to test new Apple Operating Systems in a development environment. We are going to start with a full scope of our next maintenance release of 9.73. This is a compiled list with a few known issues that is going through regression testing and anticipated to be available for general availability in the near future. After the public release, you will begin to see new features, such as El Capitan and iOS 9 support, layered into the next beta releases. If your organization is interested in enrolling into the b

Just checking this is expected: Any policy I create that ONLY has a custom trigger DOES NOT display the "LDAP GROUP" on the Scope Limitations section. In theory this means that anyone that knows a trigger name can invoke it and we can't limit it to, say, technicians. I assume this has something to do with SU required to invoke triggers (IIRC). -edit-However, if you set the LDAP GROUP limitation BEFORE you set it as customer trigger only, it appears to remain (although may not work).

Hi all,I have been trying to restore a master image from a supervised iOS 9 iPad onto the other iPads in that trolley (cart) using Configurator 2. I have followed https://discussions.apple.com/thread/7302890 and https://discussions.apple.com/thread/7282845 and can now get them set up as supervised iPads in configurator 2 but cannot enrol them into Casper. Using ether manual enroll from https://jss.myschool.edu:8443/enroll or by pushing out the enrollment profile in configurator 2 it get an error saying the iPad is not activated. I have tried a hard restart of the iPad (Holding down home and power buttons), restoring through configurator 1 & 2 and iTunes Mac & Windows but all produce the same result. Has anyone had success in doing this? and are there other suggestions that anyone thinks I should try? Many thanksRegardsGraeme

I'm trying to get kerberos printing working from OS X Lion (10.7.3). I followed the steps describe in this Apple article and it works fine as long as I manually do it on the client machine.http://support.apple.com/kb/HT4879 For each printer you wish to share using Kerberos: Click the printer name in the list. Choose "Set Default Options" from the "Administration" pop-up menu. Click "Policies". Choose "kerberos" from the "Operation Policy:" pop-up menu. Click "Set Default Options". But; These setting will not be captured when importing the printers to Casper Admin. Just wondering anyone successfully got Kerberos working automatically for their SMB print queues either via a script or policy?

Curious what others think - we're about to move to "Production" with our JSS implementation, and would appreciate input on the approach we're taking. We're fairly "patch-happy" in the sense of regular patching and tight requirements/deadlines for addressing vulnerabilities. We have separate "Test" and "Production" cycles.The "Test" cycle is fairly automated on the back-end. AutoPKGr checks for updates, packages them, updates the policies as needed, and then feeds them via Self Service. So far, working fairly smoothly. The test machines are scoped via a static group which I manage. Test users (and IT staff) know to check SS and install/test, and I have dashboards to monitor and make sure that the packages are actually installed. Once tested, a change control board votes to move to production. Production workflow:First, a smart group for production workstations which is basically "Computer group not a member of

The title says it all. I am running AutoDMG Version 1.5.4 (Build 412) and attempting to capture a 10.11.3 DMG file. Getting the below screen and this message. "Installer deprecated by 10.11.3 14D21" The installer being used is 10.11.2 (15C50) as the image above suggests. What's the best approach to get a 10.11.3 DMG? I've checked this thread and the combo update provided by Apple will not work for this application.

Hi JSS 9.81, using for Mac OSX only. I have a generic script that accepts parameters, so it can be reused.I have a policy that calls this script, and passes the parameters accordingly. This works fine... The problem is when I want to call the script 3 times, with different parameters, from the same policy. > Create New Policy> Add Script > Select Script "myscript" > add a string to a parameter> Add Script > Select Script "myscript" > add a [different] string to a parameter> Save It does not save all the parameters. Instead, the topmost script in the list has it's parameters copied to all other scripts in the list. Is this expected?

Hi All, I am working to make Apps Made by Apple available to my students without paying for them. In particular Pages, Numbers, Keynote, iMovie and Garage Band. Based on the criteria presented here: https://support.apple.com/en-us/HT202794 these apps should be free to us. However we currently have the App Store disabled, making the access & installation of these apps difficult. When I try to acquire them from JSS or our VPP iTunes account - there is a cost associated with them. If I move ahead and add them like a free app (Mobile Devices>Apps) and mark them as "Free" and assign them to a device, they do show up in Self Service however when I attempt to install, I get a notice to apply the redemption code in the Management tab for that device. I'm wondering if anyone else has run into this. At this point our school wants to keep the App Store disabled (for a variety of reasons). Mark MurrayTech DirectorPA Leadership Charter School

I am seeing the 30 day notification indicator "VPP Account...expiring in 30 days" in our JSS. When I go to our Apple VPP portal and click "Download Token" I get a '.vpptoken' file. So far so good. But when I upload that token to the JSS our VPP expiration date is unchanged, still 30 days away. I assumed it would be similar to renewing a Push Notification Certificate, and create a new expiration date one year from today, but it doesn't seem to work that way. Maybe I need to wait until the token has actually expired, and then download a new one from Apple? That seems kind of lame. Does anyone have any experience renewing their VPP token? This is on Casper 9.82. Thanks,-Dan

I wanted to make a plugin where our users can see what type of things Casper is doing (our culture makes it difficult for people to accept Casper) . I made this script here: !/bin/bash mkdir /Library/Scripts/Shopify more /var/log/jamf.log | grep "Executing|Installing|Updating|Adding|Existing|Removing|Deleting" | sed s/jamf[[0-9]*]://g 2>&1 > /Library/Scripts/Shopify/Whatran.txt Made the plugin: And then made a policy to run the script ongoing to update the file. Unfortunately the next time it runs the policy the txt is up to date but my self service plugin shows a blank page. Oddly though, when I run a sudo jamf policy in terminal the log show up fine in my self service plugin. All this command is doing is running that ongoing policy... so I don't understand why it wouldn't just work without this. Thoughts?

I am trying to build a policy that installs Microsoft Office 2016, then have it install the latest Microsoft Office 2016 update immediately following. I have tried adding "sudo jamf policy -id 123" as a script with the "after" trigger and that didn't work. I also tried adding that same line into the "Execute Command" portion of the Files and Processes configuration. That also did not work. Which leads me to my question. Is there a way to accomplish what I am trying to do without having to make use of a smart group? Thanks.

The subject line says it all, unfortunately. I just received a new iMac with a Fusion drive split by a 1.0TB SATA drive and 24.0GB SSD. I followed the instructions on this post as I've done in the past but couldn't seem to get it to work. I believe the issue here is with the size of the SSD being only 24GB. 3. Recreate the Fusion drive volume To do so, execute the following command diskutil cs createVolume <Logical Volume Group ID> JHFS+ "Macintosh HD" <Capacity of the Fusion drive>. Capacity must be in XXX.Xg for volumes less than 999.99GB in size, or X.Xt for volumes 1.0TB or greater The combined volume size for my iMac is 1.024TB but as the above section details, I must follow the X.Xt format which would force me to specify 1.0t. I've not only tried formatting the drive as 1.0t and 1.1t but regardless of which size is specified, a NetBoot to my AutoCasperNBI does not successfully launch. No other clients in the network are having this issue and the network connection

ok. so here's me situation. i need for a teacher to be able to go into self service on their laptop and run a policy that asks for a student iPad serial number and then does an update inventory on that device. it looks like i can use the api to do the update inventory, but only by device id. i need the line/lines of code to put in a serial number and get a device id thanks Joe

I've reached out to support, but in the meantime I'll present the issue to the Nation. I'm experiencing an issue where none of my Casper applications can communicate properly with the JSS, even when logging in with the local account vs AD account. Casper Remote reports "Could not parse data from JSS" and Casper Admin reports "The server located at https://JSS:8443/ did not respond with valid information. Please check the server information and try again." This is after an upgrade from 8.71 to 9.1 and I am running the 9.1 applications locally on my computer.

Anyone with a hosted JSS seeing issues where they cannot edit certain types of objects such as polices or configuration profiles. ? I can open a policy and see it's current configuration but when i click the edit button I get the spinning wheel and then the page goes blank where the configuration should be. I've checked and it's not my permissions in the JSS as I have all the correct rights, I've also had a colleague check and he also has the same rights, is experiencing the same issue. I can't see anything on the JAMF site about service status etc. Thanks in advance.