We're in a scenario where we want to simplify how we can get new remote users up and running with laptops. Currently, our hardware support team sets up a webex, joins VPN, some other painful stuff, etc. What I'm working on is creating an application (so that non-standard admins can launch this) that will both create their user account and add them to file vault, then immediately log out and delete our temporary user. In my thinking I came up with a combination of a few things, but starting with an AppleScript that can do a lot of this because I can set it as read only (and keep my service account name/password hidden and b) users can launch this without admin rights: to getusername() display dialog "Enter your User ID:" default answer "" set userid to text returned of result return {userid} end getusername to getuserpwd() display dialog "Enter your password:" default answer "" with hidden answer set userpwd to text returned of result return {userpwd} e

What is the best way to update Microsoft Office 2011 and Microsoft Lync?

The issue: Several users report (and I've seen with my own eyes) that 10.10.x / all of their open apps crash after returning from sleep mode. The mouse will move around the screen and the users can right click on dock icons, but they cannot force-quit apps or access other os menu items / features. Beach ball spins for a while, and only a forced restart resolves the issue. The environment: University setting with computers managed by Casper, bound to our AD, and encrypted (Sophos Safeguard using FileVault). OS varies between 10.10.2 and 10.10.3 (but might be affecting 10.10.1 as well). The hardware: Recently purchased (arrived in late February), Late 2013 iMacs (14,1) and MBPs (11,1) with 8 GB RAM and Intel i5. All computers arrived with Yosemite. The failed workarounds:- Upgrading to 10.10.3 / supplemental 10.10.3 update- Using PMST to turn off hibernate and/or deep sleep (one user reported the problem worsening after this)- Restoring the OS- PRAM or SMC reset- Disabling Sophos

I want to apologize in advance...I am going to be taking the CJA course very soon and am looking forward to learning more about the back-end of JAMF databases and the API. I'm a bit of a noob with the API. Would someone know how to take an Excel CSV formatted with the following: Device Name (column1), Serial Number (column 2), Building, (column 3), Room Number (column 4). I want to take this spreadsheet and use the API to add the info contained in columns 3 and 4 to the JSS. There may be existing data there in the JSS and I would like it to be overwritten. I know this isn't McD's where I put in an order and receive it, but I hope someone here will take pity on me and teach me how to do this as it will help us with would could have been a bad data entry task. I know you can do Building with a mass action, but I can't do that with room number necessarily and this is why I want to go the API route. Thank you to any kind souls in advance,blackholemac

Hey everyone. In the past I have baked all my settings into the base, but wanted to try my hand at a clean base OS via AutoDMG and customizing it after the fact. I'm having trouble with settings I normally set in System Preferences > Security & Privacy. The two things I'd like to control are:2. Allow apps downloaded from: Anywhere3. Advanced... check 'Require an administrator password to access system-wide preferences' Composer doesn't seem to capture what is being changed/modified when I make these changes, so I am not sure how to set these settings en mass.

Here is the issue im having. If i have a mac with a local management admin account. And a AD linked Mobile account then i encrypt the system via a policy. it encrypts fine. i can add the mobile account and management account to file vault no problem. But when i go to login it require that i login to both FileVault and then to the mobile account. Is there away to have file vault auto log the user into the mobile account? So they only have to put in the cached password once?

Good Morning Nation We have been using paper cut on OS X for awhile now. No issues. I imaged a imac and went to set up and configure printing. Testing the setup the printer paused.I made sure we had the latest drivers and the latest paper cut client. Still the printer paused. I decided to test on my Yosemite iMac and El Capitan laptop. No problems. After many permiataions I discovered the common factor is if printing has been set up previously on the system. Meaning a new image or a user who wishes to print can not get paper cut to open after hitting the print button. If we set up to print using the ip of the printer no issues.Has anyone else seen this issue? Of course the windows admins say "Its working on windows so....."

Hello everyone! I have been playing around with autopkg the passed couple days and would love to get it working.It looks like everything is working until it has to talk to the JSS. It mounts our CasperShare but give me this error. Error mounting Url "smb://jssuser:jsspassord:@ourjss:139/caspershare$: None I was suggested to take a look at the defaults read and all of them look right to me defaults read com.github.autopkg JSS_REPOS - looks right defaults read com.github.autopkg JSS_URL - looks right defaults read com.github.autopkg JSS_VERIFY_SSL - says no SSL exists defaults read com.github.autopkg API_USERNAME - looks good defaults read com.github.autopkg API_PASSWORD - looks good

I am trying to get the jamfhelper to cover the screen as I run other policies, however it seems that the jamfhelper is working, but keeping the other policies from running until after I force quit jamfhelper. Any ideas what I might be doing wrong? Gabe ShackneyPrinceton Public Schools

Shared lab systems (OS X 10.10.5) in our environment are set to auto-login as a mobile Active Directory user. When auto-login takes place, the user does not get a Kerberos ticket granting ticket. If the user is manually logged in by entering the username and password at the login window, they do receive a TGT. I've confirmed this with multiple users (all mobile AD accounts) and the behavior has been consistent. Has anyone else come across this? It seems like something in the auto-login process has to be preventing the requesting of a TGT at login. Thanks!Eric

Hi JAMF Nation I have an issue with the login window: I created an user with casper and now the user is not displayed in the login window after an restart. If you log in with an other account and logout afterwards the user is displayed. Some information:- User ID is 504 (over 500)- User home folder is located in /Users/- There is no config profile which manages the login window- Username doesn't matter. I can take "test" or "user" etc. Any idea?

Dear all,Since the Adobe CS6 requires the old Java for OS X 2015-001https://support.apple.com/kb/dl1572?locale=en_AUCan I install the old as well as the latest Java 8 on the same machine?I am running 10.9.5Thanks.

Hey all, I'm just starting to familiarize myself with the API, but I don't know where to start with this. We're going to be trading ~1200 iPads in the next month. I need to delete the old 1200 from JSS, and I have the serial numbers of the devices that I need to delete. Is there a way for the API to reference something like a .csv file with serial numbers, then delete those mobile devices from JSS?

I receive this message when attempting to open Casper Admin. Does anyone know what might be the cause of this?

Hi everyone. Today was my first attempt to create an image with AutoDMG, but it never created a Recovery HD. Here is what I did and perhaps I missed a step as I am not completely clear what the workflow should be: I downloaded the latest El Capitan installer and added it to AutoDMG and created the .dmg Uploaded the dmg to Casper Admin and created a Standard config for it, then added the dmg to the config. Within the config I set up the management account we use and left 'Partitions' empty. NetBooted a computer, ran imaging to completion. After everything was said and done, I logged in and did diskutil list to see there was no Recovery Partition. Option boot, same thing: No Recovery HD. Some things I am unclear on are: Was my Casper Configuration improperly configured? Is there something specific I need to do when creating the image with AutoDMG to have it lay down the Recovery HD? If the computer I am building on via AutoDMG didn't have a Recovery HD, would that a

Using version 2.0.2, seeing same results with 10.9.5 and 10.10.5, running CLI or through policy administrator$ dockutil --remove '/Applications/Microsoft Office 2011/Microsoft Excel.app' --allhomes item /Applications/Microsoft Office 2011/Microsoft Excel.app was not found in /Users/administrator/Library/Preferences/com.apple.dock.plist also tried just using administrator$ dockutil --remove '/Applications/Microsoft Office 2011/Microsoft Excel.app' It does exist in the plist and I tried different combinations of ' ' and to deal with spaces <string>com.microsoft.Excel</string> <key>dock-extra</key> <false/> <key>file-data</key> <dict> <key>_CFURLAliasData</key> <data> AAAAAADUAAMAAQAA0QwbhgAASCsAAAAAAC0M +AA4/4oAANE4DXAAAAAAC

Quick question, Is there any way other than going through each of our 100+ policies to see who is using self service? I know there is logs on each computer but can't say it would be easy to get to all of them, or find them on our network at the same time or even a 1 week period So would be nice to have a EA to show the number of Apps downloaded through Self Service, maybe read the number of files inside receipt folder, but then this would also get the files pushed out through policies and not self service. thanks

Just by chance, I noticed when attempting to send a mass command to a number of our machines that several were not on the correct VLAN - they had 10.10.2X.XXX addresses instead of 10.10.6X.XXX. I've tried making a smart group which shows computers that don't have the correct IP Address for their particular VLAN, but it doesn't seem to like the wildcard. Does anyone know how I might accomplish this? This is what I have currently:

Just got a new machine, think it will be on El Capitan, and trying to netboot and get the no entry sign - So guess I need to update the netboot server? Is this a case of upgrading the whole server OS to El Capitan and everything should be OK? Or do I need to create a new netboot image? How do I do this? Whats the best way to snapshot the server in case anything fails? Just want to make sure I have everything right - Backup ServerUpdate OS to El CapitanCreate New NBI Any help would be hugely appreciated! First time doing this so keen to learn!

Hello JAMF! I'm currently using this to set my Energy Saver options. I can't seem to figure out how to UNCHECK the 'Put hard disk to sleep when possible' and CHECK Start up automatically after power failure'. I'm trying to avoid using Config Profiles for this because of some issues. Any help would be appreciated! if [[ $shortModel == "MacBook" ]]; then pmset -b sleep 15 disksleep 10 displaysleep 5 halfdim 1 pmset -c sleep 0 disksleep 0 displaysleep 30 halfdim 1 else pmset sleep 0 disksleep 0 displaysleep 30 halfdim 1 fi

Hey there, all! I'm trying to install AirMedia to client machines in my organization via a push policy and also extend availability in Self Service. The problem that I am running into is that at the end of the AirMedia installation wizard, a window titled "VersionChecker_Crestron_HD_Presenter" appears asking the user to install Soundflower as it's needed for audio functionality. I thought that this was strange and just added the Soundflower installer into the policy and set the priority such that the Soundflower installer runs before AirMedia. No such luck here either as the the same window prompts. I grabbed the PKG for AudioMedia directly from Crestron (link below). I guess I could run Composer and extract the "VersionChecker_Crestron_HD_Presenter" window but would prefer to leave the installer intact and add a script to suppress the window. How does this sound? Is there another approach that I should consider? http://www.crestron.com/downloads/software/AirMedia_OS_X_installer_1

Hello, I have been working on customizing the quickadd.pkg because our JSS is cloud hosted, our AD in on prem and we are not allowed to bind them because the methods used are not deemed secure enough for our security team. I have read Getting the Most out of your QuickAdd.pkg and have used it to create some scripts and enrollment work flows. I have extracted the postinstall.sh file, using tar through the CLI. Now that my script is ready, I don't know how to rebuild the quickadd. I know I could tar it back up but I am worried it will extract and not execute the contents. Is there a way to do this from the command line or is there an application which would make the whole thing a lot easier? Thank you in advance for your help.

OK, I've probably missed this somewhere, but I need to create a smart group based on the Macs that have run a script. There are 3 parts to this, 1 and 2 are complete. 1st policy deploy a folder and its contents to the Documents folder of an Admin account at start up. The folder and its contents cannot be altered in any way. -Created a Smart group of Macs with the folder and contents in place 2nd policy run a shell script against all devices that have the target folder in the correct location. The results from the script are save to the ~/Documents/Target/Output. 3rd policy should copy the contents of 'Output' from the local to a server location. I want to create a smart group based on whether the 2nd policy the shell script has run. So my 3rd policy is kicked off by membership of 'The Script has run' I think I'm missing something obvious any help appreciated. CheersPhil

Hi all,We are beginning our implementation of supervision on IOS and DEP. We are currently supervising using Configurator 2 but when I try to use configurator 2 to configure a device supervised through DEP I get an error saying the device is not supervised by an existing organization. It also says (suggests) to import an organization with the identity for the device. You can export the organization certificate from Configurator 2 or the whole Organization as well as being able to choose an existing identity (certificate) when creating a new Organization. The Configurator 2 doco indicates it is compatible with DEP. My question is how can I use the same identity across DEP, JSS and Configureator 2? many thanksRegardsGraeme

Trying to open Self Service.app from a policy. Essentially have SS open in the background and have a window displayed telling people they should really update their system. Half the systems it works on, the other half it doesn't. Using the "run command" in advanced policy field... open /Applications/Self Service.app Does anybody open an application from a policy, and if so, how are you doing it?