I have been using the same password for my management accounts for a couple of years. The windows desktops will soon be getting randomly assigned passwords that are accessible via Active Directory with a schema mod. What are the implications of setting the policy to generate the management password? Can I see the management password somewhere after it has been set? I'd assume this is generated on a per client basis? I'm also looking at using filevault2 full disk encryption, does this password change policy mess with that at all? Thank you,Ken Edgar

Hello, we are taking down WGM at one of our sites that is utilizing OD (normally we use AD which helps us out by mounting the network home on the dock). I am looking for the simplest way to have an alias on the desktop or dock to their OD Server Home. I have been trying to script the desktop shortcut by using *-ln -s afp://sharename.site.org/$USERS ~/Desktop This is generating a plain white alias file that tells me the original item cannot be found and the share is mounted when I am running it. I'm just looking for the easiest way to have users manually save their work as opposed to WGM running Home Syncing. If what I am trying to attempt is not the best route, I'm open to any and all options. Thanks Everyone.

Currently I use SMB but want to switch to http/https. I am using a Mac running 10.10 Do I have to switch off the SMB shares on the 10.10? What settings do need setup on the 10.10 to be ready for this?

On preinstalled OS X (we’re not imaging), when we add a new Active Directory user account to Active Directory bound Macs that are already Casper members we see an issue nearly identical to the one posted here: https://jamfnation.jamfsoftware.com/discussion.html?id=15425. “I’m seeing a few specific folders being created as files as I log into my AD accounts on my new MBAir Image. So far its affecting Calendars, ColorSync, Components, Dictionaries, KeyBindings, Keychains, Mail and QuickLook.” The chief difference between that post and our issue is that the files are created alongside the user folders, but with similar names to the user folders, and this interferes with keychain access, etc. Once the duplicate named files are manually deleted, the issue is resolved.

Hi Guys We use a multi context environment. For deploying scripts, packages etc. on all contexts I am using the API. I'm currently working on a shell script which contains 2 arrays (contexts and the XML's). How do I loop through those two arrays without creating a huge script? I created this so far: #!/bin/bash # variables jss=https://jss.example.com:8443 user=example password=example filepath=~/Scripts/ jssresource=JSSResource/scripts/id/0 # all xml in one array xml=( 'script1.xml' 'script2.xml' 'script3.xml' 'script4.xml' 'script5.xml' ) # all context in one array context=( 'test1' 'test2' 'test3' 'test4' 'test5' ) # loop through context and XML /bin/echo "`date`: Loop through context and XML" for ((i = 0; i < "${#context

I am still testing Office2016 and plan on deploying in December. I have the app packaged and sitting in Self Service. I wanted the application to be available in Self Service but it installed...to all of the computers including the labs. What am I missing? Thanks in advance

We're running NetSUS 3.0.2 on CentOS 6.7 just for software updates. To support 10.11 I tested out updating it to NetSUSLP 4.0.0. The update went without issue, but after the first sync several current updates, like 10.9.5 and 10.10.5, were marked as deprecated. Once I cleared out the deprecated updates, no 10.9.5 or 10.10.5 updates were available. So, I restored my pre-update snapshot and started testing on a fresh install of CentOS. In a fresh install, there are only 634 updates available in the web interface and there are several obvious updates missing, like 10.9.5, 10.10.5, and 10.11.1. When I test out the 4.0.0 Ubuntu appliance there are 1,185 updates available and all the updates I expect to see are there. I'd prefer to run the NetSUSLP in CentOS so I've started investigating the issue. Before I spend too much time on it I thought it would be worthwhile to bring the issue to the group to see if anyone else has experienced this or if anyone has any sugge

I have a group of people that need remote access to a handful of macs. However, I don't wnat to give them access to all macs. My thought was to create a group with remote rights, add them to that, and then Create a "Site" with the machines they need access to in there. Then grant that group that specific site access.However I can't find a way to add a machine to the site.

I am using the Casper 9.72 and followed some instructions from a related thread to obtain the newly released Flash Player update. I signed up at Adobe's site for an administrator distribution license and downloaded a copy of Flash Player 18.0.0.203. This was then uploaded to Casper Admin and a Smart Computer Group and policy were created to carry out the software update via a "recurring check-in" trigger. Our organization would like to push this out to users only with Adobe Flash Player 18.0 and greater so the following criteria was set in the smart group. Application Title has "Adobe Flash Player Install Manager.app"andApplication Version like "18.0.0"andApplication Version is not "18.0.0.203" After saving this group, I hit view and see that 128 computers are included in this grouping. Because we are merely testing this push for the time-being, a more narrow scope has been used. The policy has been created and is enabled. The trigger

Hey guys, I am writing a script for use as an extension attribute which will check for the existence of Sublime Text.app, check that the console user isn't a local admin or root, and then go an check both Sublime Text 2 and also Sublime Text 3 and report back on whether either or is licensed. The script seems to be working for the most part, but I am getting a failure on the defaults read even though it should not be running when Sublime isn't installed (the script should just return "NA" to the JSS and exit). Any ideas? #!/bin/sh thisUser=`stat -f '%u %Su' /dev/console | awk '{ print $2 }'` STV=`defaults read /Applications/Sublime Text.app/Contents/Info.plist CFBundleIdentifier` if test -e /Applications/Sublime Text.app; then if [ $thisUser = "root" ]; then echo "User is root, bailing." exit elif [[ $thisUser == *admin* ]]; then echo "User is the local admin, bailing." ex

Hello everyone! I'm currently setting up a test Netboot image with OS X 10.11.1 and Casper Imaging 9.81 using AutoCasperNBI. My goal is to successfully image a 2015 iMac with Casper Imaging using Netboot. The problem is, whenever Casper Imaging is finished, it reboots back into Netboot instead of Macintosh HD. This creates an endless reboot loop. The other issue is simple Finder. We use "Simple Finder" and whenever I want to switch to "Full Finder" for troubleshooting, it doesn't work. The screen flashes then goes back to "Simple Finder". The error it gives is "The last time you opened Finder, it unexpectedly quit while reopening windows. Do you want to try again?" I'm going to recreate the Netboot image with Simple Finder turned off and try out Casper Imaging's Debug Folder. If I use an OS X 10.10.5 Netboot image, I just get a Prohibitory symbol instantly. The imaging config is simple: OS X 10.11.1 Casper Suite tools

Recently updated to 9.81 and beginning testing of my El Cap image. While AD binding is working (machine is bound, I can login), the 'Allow Administration by' setting is not taking. User Experience tab is also not being set. Any suggestions? EDIT: Same AD configuration is working on my 10.10.5 computers just fine..

This may be a little off topic but... We are trying to create a bank of 20 or so Mac Minis that students can access remotely. The physical devices will be in our data center and the students in a random classroom. I know we can use VNC and I am looking at Bomgar and Remotix. The biggest issue I foresee is how would a student know which device is available and not already being remote controlled. Has anyone tackled this issue? Thanks, Peter

@bentoms and other AutoCasperNBI users... I am having trouble figuring out how to solve this. Issue is when when applying a 10.11.1 image (15B42 created with autoDMG..no addl pkgs) and utilizing v1.3.0 of AutoCasperNBI. The process seems to kick off fine, runs for a while and write a fair amount of data ... but then after a while, the process halts with "Error: Generating Kernel cache" I have looked through the logs...(snippet below) Mon Nov 9 19:00:05 PST 2015 Language Code is: en Mon Nov 9 19:00:05 PST 2015 Trying to set NetBoot's OS Language Mon Nov 9 19:00:05 PST 2015 NetBoot's OS Language set Mon Nov 9 19:00:05 PST 2015 Trying to get input layout id for: U.S. Mon Nov 9 19:00:05 PST 2015 Keyboard Layout ID set to 0 Mon Nov 9 19:00:05 PST 2015 Trying to set NetBoot's Input Language Mon Nov 9 19:00:06 PST 2015 NetBoot's Input Language set Mon Nov 9 19:00:06 PST 2015 Trying to disable Spotlight on /Volumes/2016-Q1_10111_981 1 Mon Nov 9 19:00:06 PST 20

Hi all, I've just posted something about AutoCasperNBI, AutoImagrNBI & El Capitan TL:DR It's coming, but not yet & help appreciated.

Casper Imaging now seems to clear any already existing EAs when enrolling a computer. We pre-create a properly named computer in the JSS using the API, put some extra information (like desired Language and so on) into text-only EAs, and the use Casper Imaging. After Casper Imaging does it's thing, those extra EAs are all empty. The settings in <https://jamfnation.jamfsoftware.com/discussion.html?id=10828> do not seem to apply anymore. Has anyone else seen this? Christoph

Hi all, We are just getting our Casper install sorted after the jumpstart. I am aware there are various posts about being unable to mount the share (SMB), but I think my problem is a little more unique. I'm testing policies, and sometimes I get them wrong. If a policy fails for some reason which is NOT mount related (for example my package was faulty), it gives me the "Policy Failed to Run" box. Fair enough. However, if I then try to run the same policy again, or another policy, I continue to get the "Policy Failed to Run" box, but the logs show that it failed to mount the distribution point. I'm unsure why it is not dismounting after a FAILED policy, but dismounts fine with a SUCCESSFUL policy. JSS 9.81 SMB Distribution Point Mac OS X 10.10.5 Clients Any advice is appreciated!

I am kind of late to the party for managing firefox preferences the right way and I keep seeing references to this mythical CCK Wizard. All references to it I can find are broken links or "page does not exist". As far as I can tell it was a firefox plugin that allowed you to directly modify the about:config... which sounds great! Anyone know how I can get access to it? I dont see any references to it since about 2014. Bonus: Tips for managing Firefox/Chrome settings in general are appreciated!

We have staff members clicking on our guest network. I would like to find a script that removes the guest network from the network connections lists. I believe its called the perferred network list. Is there any way we can do this?

I have a Timemachine setting problem. And I dig this problem 2 weeks ago but not any progress. Envirment:100 ad doamin Mac pros100 non ad domain Mac book airi have created a backup storage path : afp://server-mp.oocl.com/Backups Problem:1) If I use timemachine profile setting which can't apply to the non AD domain mac book. Because the login mac book are offline before login so i can't apply it by mount drive at logon item2) So i try to use script to let the computer run the tmutil script when the machine can ping the company network DNS. But the script 'tmutil setdestination afp://$user:$pass@server-mp.oocl.com/backups'. that need the user AD password but i dont know how to set variables to let user input the password by them self Below is the script i dig #!/bin/bash curuser=ls -l /dev/console | cut -d " " -f 4 itest=$(ping -c 1 146.222.5.160 | grep "100.0% packet loss" | wc -l) while [ $itest == "1" ] do sleep 5

When I open the App Store on my Mac mini server and click on an update to Server.app it will prompt for an Apple ID. It has my Apple ID greyed out. Since I'm not the only administrator of this server, I'm curious if that means another admin would not be able to update Server.app. How are others addressing this? Are you simply packaging it with composer and then deploying it out?

Anyone know of a way to show the Computer Name from Sys Prefs > Sharing in the menu bar? We have a lot of edit suites and this would be handy when assisting users.

this is my config profile. set to install automatically. looks ok to me but i keep getting this error. Install Configuration Profile EXCHANGE - The operation couldn’t be completed. (ProfileDomainPluginController error 101.) my google-fu is failing me on this one.

Hi Folks, I would like to create have a script, that checks if 10.9, 10.10 or 10.11 is used so syadminctl or dscl is invoked for creating a user on a machine. As you can see, the script is checking the OS Version and checking the next available UserID. After that, the script jumps to the end and gives error of unexpected end of file. What is missing here? Cheers,Holger #!/bin/sh # create_user_1.2.sh # # # if [ "$(id -u)" != "0" ]; then echo "Sorry, you are not root. Please run with sudo!" exit 1 fi # === For creating a User we need some input! === echo "Enter your desired user name: " read USERNAME echo "Enter a full name for this user: " read FULLNAME echo "Enter a password for this user: " read -s PASSWORD # ==== # A list of groups the user should belong to # This makes the difference between admin and non-admin users. echo "Is this an administrative user? (y/n)" read GROUP_ADD if [ "$GROUP_A

Hey there, maybe one of you have some experience with CCP over proxyserver and can help me. In the release notes of CCP 1.92 they are talking about "Better support for proxy environments". So better is relativ to me, because in my it-environments it does not work. I still have to connect to the internet over an designated connection. Which is quite long-winded. What i have tried right now:- Using CCP with Auto Proxy Discovery (WPAD) as also Automatic Proxy Configuration (PAC)- Removed proxy credentials from keychain and checked if CCP triggers the system proxy credential prompt.- When entering my adobeID in CCP my email address gets check ok. After confirm my password and waiting short time CPP jumps back to start with an small error message: "Ooops something has gone wrong, pleace try again..." So, the connection for verify the adobeID seems to work over proxy but thats all. How to find out were it gets stuck. At least i need some facts if it is caused CCP or