10.10.4 Macbook Air goes through its thin image configuration. Applications get installed, Self Service gets installed, but the computer does not get enrolled into my site. I have to afterwards run the quickadd.pkg to get it enrolled. anybody have an idea what might be causing this?from what i understand is that via the configuration should also do the enrollment. 9.51

Hi Guys, New CCT here, forgive my noobiness. Just trying to package iTunes 12.3.1 On blank 10.11 OS. Tried dragging the package from the iTunes12.3.1.dmg into Composer and building a package. The installer worked but then was hit with an error on test machines (screen shot attached). Test machines were both 10.10 and 10.11. Then under normal snap shot. I captured the installation and my only edit to the files was deleting users. The result was very similar, I'll get a screen shot after I re-image and test. Can anyone tell me how they've done it? Thanks a lot! EDIT - Attached error of normal snapshot. "This copy of

I have read overhttps://jamfnation.jamfsoftware.com/article.html?id=121 But this article does not apply for a Windows Server 2008R2 deployment. Firstly I have tested LDAP using ports 389 and 3268 which works fine. After enable SSL and changing the ports to 636 and 3269 the test fails saying Error: javax.naming.CommunicationException: x.x.x.x:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target] Suggestion: Ensure you can connect to x.x.x.x on port 636 Originally I assumed that the Microsoft certificate authority should handle any of the SSL certs for LDAPS, but after reading some Java related posts that does not seem like the case.http://social.technet.microsoft.com/Forums/windowsserver/en-US/fa6db195-699a-4e32-b442-8ff6ef716fad/certificates-in-windows-need-help which someone replies

Looking for a little help for a scripted removal of the Office 2016 login keychain item (credentials). The 'kind' begins with "MicrosoftOffice15_2_Data:ADAL:.....ends in long alphanumeric string". When doing a clean uninstall of the Office suite it would be nice to be able to automate the removal of this item as well. thanks in advance for any help!

I've been having trouble getting SPSS23 to install silently through Casper. I've customized the installer.properties file and created a package that will place the SPSS23 dmg, the installer.properties file, and the SPSS_Statistics_Installer.bin file into /Library/Application Support/SPSS23-Temp. I've also tweaked the silent install script I had for SPSS22 to look like this: #! /bin/sh #Silent Install using information in the installer.properties file sudo /Library/Application Support/SPSS23-Temp/SPSS_Statistics_Installer.bin -f /Library/Application Support/SPSS23-Temp/installer.properties #Firewall exceptions sudo /usr/libexec/ApplicationFirewall/socketfilterfw --unblockapp /Applications/IBM/SPSS/Statistics/23/SPSSStatistics.app sudo /usr/libexec/ApplicationFirewall/socketfilterfw --add /Applications/IBM/SPSS/Statistics/23/SPSSStatistics.app #Cleanup sudo rm -r /Library/Application Support/SPSS23-Temp While SPSS23 no longer needs Java 6, the silent installer for it

Manage a high school iPad program. We use Focus and it is working amazing for us. Ran into to the following problem: Student is focused into an app, lost internet connection, unable to un-focus, because the iPad Air is focused cannot turn the Wifi back on. I have tried everything I can think of, any suggestions?

Hey JAMFers!! Does anyone know of a way to upload attachments to computer objects in JSS. Preferably via a script. Im thinking of uploading auth logs to the JSS for PCI reporting. Thanks!! Shawn

I am trying to create an extension attribute that will report weather the proxy plugin "hola" has been installed on google chrome. The hola plugin installs files into the current logged in user's profile so I thought maybe some scripting that looked for one of the files existing or not would be a way to detect which students installed this plugin. I found another post here on JAMF nation that had some "if file exhist" work in it but I can't seem to adapt it for my needs. Here is my current script. Any thought on where I went wrong or a better approach? Thanks in advance and keep in mind I have VERY simple scripting skills. Data type = stringInput type = script Script: #!/usr/bin/env ruby result = File.exist?("result = File.exist?("/Users/'3$'/Library/ApplicationSupport/Google/Chrome/Default/Extensions/gkojfkhlekighikafcpjkiklfbnlmeio/1.2.449_0/js/cs_hola.js ") ? "yes" : "no" puts "<result>#{

Hey All, Just wanted to know if there is an easy way to find machines that reboot at a certain time period without pouring thru logs on each machine I have in a Static Group. Thanks everyone !

Will an existing restricted policy which is blocking El Capitan block this? If not, can it be restricted?(without a corporate update server) Thanks all in advance !!

Which means Casper will see it as an uninstalled Update. Which makes me sad. Is anyone else seeing this? Expansion: I already have OS X 10.11.1 installed. The App Store shows a download available in the Update section for OS X 10.11.1. But it is NOT the Combo Update that we all expect. It's actually the "Install OS X El Capitan.app", rev'd up to 10.11.1 (which they have always done) but now it's advertised in the Update section of the App Store. Solved. I'm an idiot. See below: But holy (&@#$*(&#$@% @bpavlov ! I think you're right. It just so happens that every VM, Desktop, & Laptop I checked all have the El Cap installer on them. And that is advertised as an Update for them. Once I actually found a device that didn't have the "Install OS X El Capitan.app" downloaded... not advertised. Well color me embarrassed. The sky ISN'T falling!

I've been pushing out Office 2016 updates since it came out, and while it hasn't always been smooth, it's been just fine. Lately(post 9.81) I've started seeing an absurd increase in invalid path errors. Here's an example from OneNote: Executing Policy Install Cached OneNote Update... Installing AUTO-Microsoft-Office-OneNote-15.15.1.pkg... Installation failed. The installer reported: installer: Error the package path specified was invalid: '/Library/Application Support/JAMF/Waiting Room/AUTO-Microsoft-Office-OneNote-15.15.1.pkg'. Running Recon... This would be a fine starting point if this happened for everyone. Right now, it seems to be 50/50 regardless of 10.10 or 10.11. I thought at first that maybe it was a download+install issue since we were using Box as a distribution point. To rule that out, I split it into two policies(cache&install cached). it happens at about the same rate. I've confirmed permissions were set correctly. I

So I created a new Netboot image with AutoCasperNBI with a 10.10.5 base with 9.81 casper imaging. I made sure to set modified rc.netboot file was checked. Booted to it and did a mount in terminal and it shows - /dev/disk0s2 on /private/var/netboot Any ideas would be great - could love not having to make a ram disk.

Hi All, I need assistance with deploying a printer with the Uncheck Share Printer. I have done some of the suggestions mention on other posts such as: https://jamfnation.jamfsoftware.com/featureRequest.html?id=1846 https://jamfnation.jamfsoftware.com/discussion.html?id=4174 https://jamfnation.jamfsoftware.com/discussion.html?id=11050 But not had any luck with the terminal commands. I have attached a screen shot of the policy I created. I would appreciate it if someone has input I can try. Thanks in advance

Hi All, As per the title I believe VPP can now be scoped to device as opposed to individuals, I can't seem to locate documentation on how to do it? Does anyone know the steps? Thanks all in advance :)

Ok, so I am having an issue installing non App Store software in Self-Service portal.. I am not sure if it's the fact that my current OS is El Capitan Beta.. But my coworker is running Yosemite, and he can install just fine.. As soon as I click on any software, I get "Cannot Install Item".. However, if I choose to install something you can get from the AppStore "Evernote" for instance, it works fine.. Anyone have any thoughts on why this may be happening? Or what I can do to resolve?

For whatever reason, the ComputerName on all of our macbook airs on campus have been changed to "Macbook Air". Obviously, this has been irritating to the end users and even more irritating to IT. I'm thinking there may be a way to use dscl to read the name of the computer from AD and then pipe that to a scutil --set ComputerName command. Does anyone have a good way to do this?

Hello, Thanks in advance for reading. I was hoping to create an EA that would report the domain controller the user authenticated against at the time of login. Is anyone currently doing something similar? I'd like to hear anyones thoughts on an efficient way to accomplish this. We have four domain controllers like DC01.dc.company.net so when I do a "dsconfigad -show" all you see is dc.company.net. Any thoughts on this are appreciated. Thank you in advance.

Last year I added some web pages that were displayed as part of self service, homepage, SIS login for student. I removed them to clean it up, much to my surprise the students missed them and just thought self service was broke. I can't remember how to add a webpage to self-service for OS. Any help for those that have done it more recently.

If you're still running JDS 9.65 you should be aware that the installer doesn't recognize OS X Server 5.0.4. Luckily I had a copy of 4.1.3 from another server I was able to copy over to my latest JDS box.

Have a student computer that hasn't checked in for a while. That machine has 9.73 while we are running 9.81 now. I would be happy to just input my ladmin password to get issue worked out using selfservice, but the ladmin password that was created during jumpstart was a random password (yup, bad idea). I know one time I used terminal to do things, but terminal is blocked app on student devices. The self service app shows up with updated apps, but will not execute any of them. I told the student there is one way that will for sure work, wipe machine, but I would prefer not to do that. Any ideas on how to get this to come back around? I did notice that around 15 other student devices have same issue with not checking in since same date as well as same 9.73 version.

I am trying to set up a test server for trials. I get the JAVA jdk and the mysql database set up but when I go to install the JSS I get this dialog: As I hope you can see, the server app window is visible in the background with 3 green dots on it so I have no idea what the dialog is trying to tell me. Do I need to have a FQDN for the server box for the JSS to recognize it or is there some other item I am missing? Thanks much

I am confused on why i am receiving different results when I create a smart group to tell me how many computers are encrypted. Here is my criteria and results on 2 test smart groups file vault 2 status IS Boot Partitions Encrypted = 46 File vault 2 Encryption State IS Encrypted = 56 56 is the correct answer, but not sure why I get 46 for the results for one of the smart groups.

In iOS 9, when you view the search screen to the left of the 1st home screen, you see Siri suggestions for contacts, nearby locations on Maps, and News articles. Some of these "news" articles are inappropriate for an education setting. Is there a way to disable these? The News app is already restricted and not available to the students, but the News suggestions on the search screen open in a Safari web view.

This is damn frustrating. Not sure if it's Apple's issue or Casper. Apple GSX (and MacTracker) lists the model name as "MacBook Pro (15-inch, Early 2011)" or "MacBook Pro (15-inch, Late 2011)" while Casper lists them both as "15-inch MacBook Pro (2011)"! I'm not sure if Casper is pulling this info from the hardware itself, or from an internal database. But it becomes a big issue when trying to separate Early from Late 2011 machines (13, 15 or 17). This is a big problem for me because I'm trying to create smart groups for policies so we can deploy Apple Hardware Test to our machines since we reimage them (which removes AHT). The Early models of 2011 MacBook Pros (13/15/17) use versions 3A208, 3A209, and 3A211 of AHT. While the Late models of 2011 MacBook Pros (13/15/17) use version 3A222. But I've found no way of differentiating between at least the Early and Late 2011 15" machines. I can't use Model ID, they're