Hey All, Just wanted to know if there is an easy way to find machines that reboot at a certain time period without pouring thru logs on each machine I have in a Static Group. Thanks everyone !

Will an existing restricted policy which is blocking El Capitan block this? If not, can it be restricted?(without a corporate update server) Thanks all in advance !!

Which means Casper will see it as an uninstalled Update. Which makes me sad. Is anyone else seeing this? Expansion: I already have OS X 10.11.1 installed. The App Store shows a download available in the Update section for OS X 10.11.1. But it is NOT the Combo Update that we all expect. It's actually the "Install OS X El Capitan.app", rev'd up to 10.11.1 (which they have always done) but now it's advertised in the Update section of the App Store. Solved. I'm an idiot. See below: But holy (&@#$*(&#$@% @bpavlov ! I think you're right. It just so happens that every VM, Desktop, & Laptop I checked all have the El Cap installer on them. And that is advertised as an Update for them. Once I actually found a device that didn't have the "Install OS X El Capitan.app" downloaded... not advertised. Well color me embarrassed. The sky ISN'T falling!

I've been pushing out Office 2016 updates since it came out, and while it hasn't always been smooth, it's been just fine. Lately(post 9.81) I've started seeing an absurd increase in invalid path errors. Here's an example from OneNote: Executing Policy Install Cached OneNote Update... Installing AUTO-Microsoft-Office-OneNote-15.15.1.pkg... Installation failed. The installer reported: installer: Error the package path specified was invalid: '/Library/Application Support/JAMF/Waiting Room/AUTO-Microsoft-Office-OneNote-15.15.1.pkg'. Running Recon... This would be a fine starting point if this happened for everyone. Right now, it seems to be 50/50 regardless of 10.10 or 10.11. I thought at first that maybe it was a download+install issue since we were using Box as a distribution point. To rule that out, I split it into two policies(cache&install cached). it happens at about the same rate. I've confirmed permissions were set correctly. I

So I created a new Netboot image with AutoCasperNBI with a 10.10.5 base with 9.81 casper imaging. I made sure to set modified rc.netboot file was checked. Booted to it and did a mount in terminal and it shows - /dev/disk0s2 on /private/var/netboot Any ideas would be great - could love not having to make a ram disk.

Hi All, I need assistance with deploying a printer with the Uncheck Share Printer. I have done some of the suggestions mention on other posts such as: https://jamfnation.jamfsoftware.com/featureRequest.html?id=1846 https://jamfnation.jamfsoftware.com/discussion.html?id=4174 https://jamfnation.jamfsoftware.com/discussion.html?id=11050 But not had any luck with the terminal commands. I have attached a screen shot of the policy I created. I would appreciate it if someone has input I can try. Thanks in advance

Hi All, As per the title I believe VPP can now be scoped to device as opposed to individuals, I can't seem to locate documentation on how to do it? Does anyone know the steps? Thanks all in advance :)

Ok, so I am having an issue installing non App Store software in Self-Service portal.. I am not sure if it's the fact that my current OS is El Capitan Beta.. But my coworker is running Yosemite, and he can install just fine.. As soon as I click on any software, I get "Cannot Install Item".. However, if I choose to install something you can get from the AppStore "Evernote" for instance, it works fine.. Anyone have any thoughts on why this may be happening? Or what I can do to resolve?

For whatever reason, the ComputerName on all of our macbook airs on campus have been changed to "Macbook Air". Obviously, this has been irritating to the end users and even more irritating to IT. I'm thinking there may be a way to use dscl to read the name of the computer from AD and then pipe that to a scutil --set ComputerName command. Does anyone have a good way to do this?

Hello, Thanks in advance for reading. I was hoping to create an EA that would report the domain controller the user authenticated against at the time of login. Is anyone currently doing something similar? I'd like to hear anyones thoughts on an efficient way to accomplish this. We have four domain controllers like DC01.dc.company.net so when I do a "dsconfigad -show" all you see is dc.company.net. Any thoughts on this are appreciated. Thank you in advance.

Last year I added some web pages that were displayed as part of self service, homepage, SIS login for student. I removed them to clean it up, much to my surprise the students missed them and just thought self service was broke. I can't remember how to add a webpage to self-service for OS. Any help for those that have done it more recently.

If you're still running JDS 9.65 you should be aware that the installer doesn't recognize OS X Server 5.0.4. Luckily I had a copy of 4.1.3 from another server I was able to copy over to my latest JDS box.

Have a student computer that hasn't checked in for a while. That machine has 9.73 while we are running 9.81 now. I would be happy to just input my ladmin password to get issue worked out using selfservice, but the ladmin password that was created during jumpstart was a random password (yup, bad idea). I know one time I used terminal to do things, but terminal is blocked app on student devices. The self service app shows up with updated apps, but will not execute any of them. I told the student there is one way that will for sure work, wipe machine, but I would prefer not to do that. Any ideas on how to get this to come back around? I did notice that around 15 other student devices have same issue with not checking in since same date as well as same 9.73 version.

I am trying to set up a test server for trials. I get the JAVA jdk and the mysql database set up but when I go to install the JSS I get this dialog: As I hope you can see, the server app window is visible in the background with 3 green dots on it so I have no idea what the dialog is trying to tell me. Do I need to have a FQDN for the server box for the JSS to recognize it or is there some other item I am missing? Thanks much

I am confused on why i am receiving different results when I create a smart group to tell me how many computers are encrypted. Here is my criteria and results on 2 test smart groups file vault 2 status IS Boot Partitions Encrypted = 46 File vault 2 Encryption State IS Encrypted = 56 56 is the correct answer, but not sure why I get 46 for the results for one of the smart groups.

In iOS 9, when you view the search screen to the left of the 1st home screen, you see Siri suggestions for contacts, nearby locations on Maps, and News articles. Some of these "news" articles are inappropriate for an education setting. Is there a way to disable these? The News app is already restricted and not available to the students, but the News suggestions on the search screen open in a Safari web view.

This is damn frustrating. Not sure if it's Apple's issue or Casper. Apple GSX (and MacTracker) lists the model name as "MacBook Pro (15-inch, Early 2011)" or "MacBook Pro (15-inch, Late 2011)" while Casper lists them both as "15-inch MacBook Pro (2011)"! I'm not sure if Casper is pulling this info from the hardware itself, or from an internal database. But it becomes a big issue when trying to separate Early from Late 2011 machines (13, 15 or 17). This is a big problem for me because I'm trying to create smart groups for policies so we can deploy Apple Hardware Test to our machines since we reimage them (which removes AHT). The Early models of 2011 MacBook Pros (13/15/17) use versions 3A208, 3A209, and 3A211 of AHT. While the Late models of 2011 MacBook Pros (13/15/17) use version 3A222. But I've found no way of differentiating between at least the Early and Late 2011 15" machines. I can't use Model ID, they're

So we have to clean up some legacy hidden home directories. The deleteAccount verb works fine, but it archives the home directories for these hidden accounts /Users/Deleted Users which we don't want. sudo jamf deleteAccount -username jdoe I know some of the jamf binary functions/options are hidden (geez, really wish JAMF would docment the whole enchalada), so I'm hoping there is a way to run this command WITHOUT archiving the deleted user's home directory. Happy holidays! Don

Hi guys, We are deploying a configuration profile which contains a network payload and certificates. The aim is for machines connected by WiFi to be authenticated at the login window so that we can perform management tasks. (machine based authentication) This works a treat. The machine authenticates and has an ip address. The problem I am having is that when a user logs in it doesn't seem to then pass through as the user - instead it stays stuck authenticated as the machine. The reason this is a problem is because in our environment we have different VLAN's for staff and students. Say for example, a staff member logs in we want this profile to pass through these staff credentials and then move them into the correct VLAN so that they can get more access to stuff. I had a brief look and saw someone mentioning a similar issue a while back but I seem to have lost that post now..... I tried to get round this by applying a user level configuration profile alongside this machin

So, the question is, where do we hold the "First Annual JNUC Beer Swap"? There are not many restaurants that are BYOB that would be convenient. There was some discussion of the Aloft hotel lobby, but I am not sure how they'd feel about outside booze, since there is a bar right there. Any other ideas as to where we could hold this shindig?

Is this possible? I have over 100 machines I need to assign to a particular building. Is there anyway to do them all at once?

I was able to get DEP and our on-site JSS tied together yesterday but was still having trouble getting the computers to enroll during the setup assistant. We fired up a hotspot to test DEP off our network and to our surprise it worked perfectly. I placed a call to our firewall (fortinet) support to see if there was something I did wrong. We fired up a remote session and they confirmed we had the ports unblocked in the firewall. During several tests they noted that the firewall policy was behaving properly and that the packets were being rejected from the Mac Server (sending back an "rst" or reset packet). Our Mac server is a Mac Mini running 10.9.5 with JSS 9.73. The firewall is off and it is on the same subnet as everything else (currently a flat open network). Am I wrong in thinking this has to be a firewall issue, regardless of what the support said, because DEP worked off our network? Here is the error from the log if that helps at all: 9/9/15 7:27:17.557 AM apspd[165]: stream:

Currently have a policy set to run on logout that runs a keychain cleanup script. Script works like a charm. The issue I'm having is getting the script to run when an AD user logs out. The script works fine when I use a local admin account: Executing Policy Keychain Remove Test... Mounting XXXXXX.edu to /Volumes/CasperShare... Running script keychain_remove.sh... Script exit code: 0 Script result: Deleted Disabled Auto Connect But when an AD user account logs out the system fails to mount the CasperShare: Executing Policy Keychain Remove Test... Mounting XXXXXX.edu to /Volumes/CasperShare... Error: Could not mount distribution point "itscasper01.uncw.edu". Currently using AFP and I've seen suggestions to move to HTTP downloads but really haven't seen a good explanation as to why or why not to move to HTTP downloads. Anyone have any ideas?

I pinged JamF Support about this as well but thought I would put it out in a discussion to see if anyone has any ideas. Here is info to provide scope: Version of Netboot/SUS appliance: 3.0 Server OS: Centos 6.5 (virtual server managed on a VMWare ESXi 5.5 host) Netboot image is OS X 10.9.0 When clicking "Enable Netboot Image" in the Netboot server page of the web application, the page refreshes and the service still is disabled, no error messages appear. The dashboard shows "DHCP Status: Not running" Troubleshooting steps performed:1. Re uploaded netboot image and made sure the folder name had no spaces (this is specificed in the administration guide)2. Added a subnet and netmask that is appropriate for what I am doing: subnet: 10.0.0.0netmask: 255.0.0.0 Confirmed in the Settings->Network settings that the values match what my environment calls for Restarted the server OS From what I can gather is that when you click "Enable Netboot Image" wh

Quick question to all: I'm now getting new machines that were purchased thru DEP. Broke out one to start testing and was wondering if there was a way to 'zero the machine out' and get it back to how it was right before i started testing? If i erase the JSS id and take all enrollment and jamf framework off the machine, can i re-use it for DEP testing and enrollments again and again? Or is it a one shot deal? What are others doing?