We have a Mac computer that we use as an image master that has not been registered in the JSS console. We would like to keep it free of any configuration and installation of Casper services. The issue with this is that once we use the current image master for something else, we will need to deploy the image master to a different machine to work on it, effectively making that machine register in JSS. My Question is 3 fold:1. Do we need to be concerned about keeping this image master absolutely quarantined from JSS/Casper.2. If we should, is there acceptable ways of 'cleaning' it like 'sudo jamf removemdmprofile'?3. Or is there some trickery that casper imaging has that I am not aware of that can achieve this (I'm mostly a newbie, can you tell?) Thanks

This is the strangest thing. I've done no real changes to my profiles. And the "Log out after .." isn't even a profile I can set. This has been seen on 10.9.x and 10.10.x machines (there are too few 10.11.x machines in our environment at this moment to comment). We have a small (thankfully at this moment) set of users that suddenly acquired having "Log out after [ ] .." checked in the Security & Privacy -> Advanced. And of course if they uncheck it. It checks it again. As if it is being managed. I can make it go away by having the user delete the MDM profile, and having them log out and log back in, but this is only a temporary and rather inelegant solution. Has anyone seen this?

Situation: we are right in the middle of rolling out JAMF enrollment to existing mac users in our environment. We rant into something yesterday. A local user has a account name that is the same as his network account name. When domain joined, he cannot log on to the network account because it’s seeing his local account with the same name. I looked around on the web and can’t find anything that’s not super intensive with perms and the home directory…. Does anyone have any thoughts on this? Thanks in advance!

So set the test machine in the scope, we have no other managed preference setting the wallpaper, I selected the Desktop Picture tab and then changed to the following - BackgroundBackground picture information.LevelLevel at which to apply the preference Image Pathcom.apple.desktop ImageFilePathPath of image file. For example , "/Library/Desktop Pictures/Aqua Blue.jpg." Save and then log into the machine but it doesn't actually change? Tried it on a few machines and nothing? Any Ideas? Thanks

I am using the following settings:Mobile Device Management -> App Updates -> update all apps automaticaly on 4:30 a.m. In each app i used the force update hook. Now i reached a interesting behavior: This installation is used in a school enviroment so games are not allowed on the iPads. The students using theyre own Apple IDs and also can buy apps beside the self service apps. Mostly games as you can mention. Now, the administrative teacher deletes the bought games (which will not provided by Casper Suite) and held the iPads locked over night. At the next morning all apps, also the deleted games are installed back again. Could it be that the settings above force the Apple ID/iPad/AppStore to update all content bought on this Apple ID and reinstall even deleted content?

Hi All As above, does anybody know of a way I can remotely uncheck the above option on our macs? Its in the AD bind section, they are all bound to our AD but i would like to uncheck this without going to every machine to do so. Thank you Bill

So I just made a new netboot image for casper imaging and each time I've tried to image a machine it seems to time out. Almost like its losing connection with the netboot server in the middle of the imaging process. Anyone else seen this? Gabe ShackneyPrinceton Public Schools

I created a Configuration Profiles > Password Policy But this doesn't apply on El Capitan (can't regress), I get this error: The profile “FTIFF - Password Policy (7A3CE275-B25B-4C13-81F9-F2680A0FC930:7A3CE275-B25B-4C13-81F9-F2680A0FC930)” could not be installed due to an unexpected error. <ProfileDomainPluginController:101> Here's my XML: <key>PayloadType</key> <string>com.apple.mobiledevice.passwordpolicy</string> <key>PayloadOrganization</key> <string>FTIFF</string> <key>PayloadIÇQdentifier</key> <string>3776AE79-8054-449D-94AA-6E94F9343D2E</string> <key>PayloadDisplayName</key> <string>Passcode</string> <key>PayloadDescription</key> <string/> <key>PayloadVersion</key> <integer>1</integer> <key>PayloadEnabled</key> <true/> <key>allowSimple</key> <false/> <key>forcePIN</key> <tr

I have been using the same password for my management accounts for a couple of years. The windows desktops will soon be getting randomly assigned passwords that are accessible via Active Directory with a schema mod. What are the implications of setting the policy to generate the management password? Can I see the management password somewhere after it has been set? I'd assume this is generated on a per client basis? I'm also looking at using filevault2 full disk encryption, does this password change policy mess with that at all? Thank you,Ken Edgar

Hello, we are taking down WGM at one of our sites that is utilizing OD (normally we use AD which helps us out by mounting the network home on the dock). I am looking for the simplest way to have an alias on the desktop or dock to their OD Server Home. I have been trying to script the desktop shortcut by using *-ln -s afp://sharename.site.org/$USERS ~/Desktop This is generating a plain white alias file that tells me the original item cannot be found and the share is mounted when I am running it. I'm just looking for the easiest way to have users manually save their work as opposed to WGM running Home Syncing. If what I am trying to attempt is not the best route, I'm open to any and all options. Thanks Everyone.

Currently I use SMB but want to switch to http/https. I am using a Mac running 10.10 Do I have to switch off the SMB shares on the 10.10? What settings do need setup on the 10.10 to be ready for this?

On preinstalled OS X (we’re not imaging), when we add a new Active Directory user account to Active Directory bound Macs that are already Casper members we see an issue nearly identical to the one posted here: https://jamfnation.jamfsoftware.com/discussion.html?id=15425. “I’m seeing a few specific folders being created as files as I log into my AD accounts on my new MBAir Image. So far its affecting Calendars, ColorSync, Components, Dictionaries, KeyBindings, Keychains, Mail and QuickLook.” The chief difference between that post and our issue is that the files are created alongside the user folders, but with similar names to the user folders, and this interferes with keychain access, etc. Once the duplicate named files are manually deleted, the issue is resolved.

Hi Guys We use a multi context environment. For deploying scripts, packages etc. on all contexts I am using the API. I'm currently working on a shell script which contains 2 arrays (contexts and the XML's). How do I loop through those two arrays without creating a huge script? I created this so far: #!/bin/bash # variables jss=https://jss.example.com:8443 user=example password=example filepath=~/Scripts/ jssresource=JSSResource/scripts/id/0 # all xml in one array xml=( 'script1.xml' 'script2.xml' 'script3.xml' 'script4.xml' 'script5.xml' ) # all context in one array context=( 'test1' 'test2' 'test3' 'test4' 'test5' ) # loop through context and XML /bin/echo "`date`: Loop through context and XML" for ((i = 0; i < "${#context

I am still testing Office2016 and plan on deploying in December. I have the app packaged and sitting in Self Service. I wanted the application to be available in Self Service but it installed...to all of the computers including the labs. What am I missing? Thanks in advance

We're running NetSUS 3.0.2 on CentOS 6.7 just for software updates. To support 10.11 I tested out updating it to NetSUSLP 4.0.0. The update went without issue, but after the first sync several current updates, like 10.9.5 and 10.10.5, were marked as deprecated. Once I cleared out the deprecated updates, no 10.9.5 or 10.10.5 updates were available. So, I restored my pre-update snapshot and started testing on a fresh install of CentOS. In a fresh install, there are only 634 updates available in the web interface and there are several obvious updates missing, like 10.9.5, 10.10.5, and 10.11.1. When I test out the 4.0.0 Ubuntu appliance there are 1,185 updates available and all the updates I expect to see are there. I'd prefer to run the NetSUSLP in CentOS so I've started investigating the issue. Before I spend too much time on it I thought it would be worthwhile to bring the issue to the group to see if anyone else has experienced this or if anyone has any sugge

I have a group of people that need remote access to a handful of macs. However, I don't wnat to give them access to all macs. My thought was to create a group with remote rights, add them to that, and then Create a "Site" with the machines they need access to in there. Then grant that group that specific site access.However I can't find a way to add a machine to the site.

I am using the Casper 9.72 and followed some instructions from a related thread to obtain the newly released Flash Player update. I signed up at Adobe's site for an administrator distribution license and downloaded a copy of Flash Player 18.0.0.203. This was then uploaded to Casper Admin and a Smart Computer Group and policy were created to carry out the software update via a "recurring check-in" trigger. Our organization would like to push this out to users only with Adobe Flash Player 18.0 and greater so the following criteria was set in the smart group. Application Title has "Adobe Flash Player Install Manager.app"andApplication Version like "18.0.0"andApplication Version is not "18.0.0.203" After saving this group, I hit view and see that 128 computers are included in this grouping. Because we are merely testing this push for the time-being, a more narrow scope has been used. The policy has been created and is enabled. The trigger

Hey guys, I am writing a script for use as an extension attribute which will check for the existence of Sublime Text.app, check that the console user isn't a local admin or root, and then go an check both Sublime Text 2 and also Sublime Text 3 and report back on whether either or is licensed. The script seems to be working for the most part, but I am getting a failure on the defaults read even though it should not be running when Sublime isn't installed (the script should just return "NA" to the JSS and exit). Any ideas? #!/bin/sh thisUser=`stat -f '%u %Su' /dev/console | awk '{ print $2 }'` STV=`defaults read /Applications/Sublime Text.app/Contents/Info.plist CFBundleIdentifier` if test -e /Applications/Sublime Text.app; then if [ $thisUser = "root" ]; then echo "User is root, bailing." exit elif [[ $thisUser == *admin* ]]; then echo "User is the local admin, bailing." ex

Hello everyone! I'm currently setting up a test Netboot image with OS X 10.11.1 and Casper Imaging 9.81 using AutoCasperNBI. My goal is to successfully image a 2015 iMac with Casper Imaging using Netboot. The problem is, whenever Casper Imaging is finished, it reboots back into Netboot instead of Macintosh HD. This creates an endless reboot loop. The other issue is simple Finder. We use "Simple Finder" and whenever I want to switch to "Full Finder" for troubleshooting, it doesn't work. The screen flashes then goes back to "Simple Finder". The error it gives is "The last time you opened Finder, it unexpectedly quit while reopening windows. Do you want to try again?" I'm going to recreate the Netboot image with Simple Finder turned off and try out Casper Imaging's Debug Folder. If I use an OS X 10.10.5 Netboot image, I just get a Prohibitory symbol instantly. The imaging config is simple: OS X 10.11.1 Casper Suite tools

Recently updated to 9.81 and beginning testing of my El Cap image. While AD binding is working (machine is bound, I can login), the 'Allow Administration by' setting is not taking. User Experience tab is also not being set. Any suggestions? EDIT: Same AD configuration is working on my 10.10.5 computers just fine..

This may be a little off topic but... We are trying to create a bank of 20 or so Mac Minis that students can access remotely. The physical devices will be in our data center and the students in a random classroom. I know we can use VNC and I am looking at Bomgar and Remotix. The biggest issue I foresee is how would a student know which device is available and not already being remote controlled. Has anyone tackled this issue? Thanks, Peter

@bentoms and other AutoCasperNBI users... I am having trouble figuring out how to solve this. Issue is when when applying a 10.11.1 image (15B42 created with autoDMG..no addl pkgs) and utilizing v1.3.0 of AutoCasperNBI. The process seems to kick off fine, runs for a while and write a fair amount of data ... but then after a while, the process halts with "Error: Generating Kernel cache" I have looked through the logs...(snippet below) Mon Nov 9 19:00:05 PST 2015 Language Code is: en Mon Nov 9 19:00:05 PST 2015 Trying to set NetBoot's OS Language Mon Nov 9 19:00:05 PST 2015 NetBoot's OS Language set Mon Nov 9 19:00:05 PST 2015 Trying to get input layout id for: U.S. Mon Nov 9 19:00:05 PST 2015 Keyboard Layout ID set to 0 Mon Nov 9 19:00:05 PST 2015 Trying to set NetBoot's Input Language Mon Nov 9 19:00:06 PST 2015 NetBoot's Input Language set Mon Nov 9 19:00:06 PST 2015 Trying to disable Spotlight on /Volumes/2016-Q1_10111_981 1 Mon Nov 9 19:00:06 PST 20

Hi all, I've just posted something about AutoCasperNBI, AutoImagrNBI & El Capitan TL:DR It's coming, but not yet & help appreciated.

Casper Imaging now seems to clear any already existing EAs when enrolling a computer. We pre-create a properly named computer in the JSS using the API, put some extra information (like desired Language and so on) into text-only EAs, and the use Casper Imaging. After Casper Imaging does it's thing, those extra EAs are all empty. The settings in <https://jamfnation.jamfsoftware.com/discussion.html?id=10828> do not seem to apply anymore. Has anyone else seen this? Christoph

Hi all, We are just getting our Casper install sorted after the jumpstart. I am aware there are various posts about being unable to mount the share (SMB), but I think my problem is a little more unique. I'm testing policies, and sometimes I get them wrong. If a policy fails for some reason which is NOT mount related (for example my package was faulty), it gives me the "Policy Failed to Run" box. Fair enough. However, if I then try to run the same policy again, or another policy, I continue to get the "Policy Failed to Run" box, but the logs show that it failed to mount the distribution point. I'm unsure why it is not dismounting after a FAILED policy, but dismounts fine with a SUCCESSFUL policy. JSS 9.81 SMB Distribution Point Mac OS X 10.10.5 Clients Any advice is appreciated!