So we have to clean up some legacy hidden home directories. The deleteAccount verb works fine, but it archives the home directories for these hidden accounts /Users/Deleted Users which we don't want. sudo jamf deleteAccount -username jdoe I know some of the jamf binary functions/options are hidden (geez, really wish JAMF would docment the whole enchalada), so I'm hoping there is a way to run this command WITHOUT archiving the deleted user's home directory. Happy holidays! Don

Hi guys, We are deploying a configuration profile which contains a network payload and certificates. The aim is for machines connected by WiFi to be authenticated at the login window so that we can perform management tasks. (machine based authentication) This works a treat. The machine authenticates and has an ip address. The problem I am having is that when a user logs in it doesn't seem to then pass through as the user - instead it stays stuck authenticated as the machine. The reason this is a problem is because in our environment we have different VLAN's for staff and students. Say for example, a staff member logs in we want this profile to pass through these staff credentials and then move them into the correct VLAN so that they can get more access to stuff. I had a brief look and saw someone mentioning a similar issue a while back but I seem to have lost that post now..... I tried to get round this by applying a user level configuration profile alongside this machin

So, the question is, where do we hold the "First Annual JNUC Beer Swap"? There are not many restaurants that are BYOB that would be convenient. There was some discussion of the Aloft hotel lobby, but I am not sure how they'd feel about outside booze, since there is a bar right there. Any other ideas as to where we could hold this shindig?

Is this possible? I have over 100 machines I need to assign to a particular building. Is there anyway to do them all at once?

I was able to get DEP and our on-site JSS tied together yesterday but was still having trouble getting the computers to enroll during the setup assistant. We fired up a hotspot to test DEP off our network and to our surprise it worked perfectly. I placed a call to our firewall (fortinet) support to see if there was something I did wrong. We fired up a remote session and they confirmed we had the ports unblocked in the firewall. During several tests they noted that the firewall policy was behaving properly and that the packets were being rejected from the Mac Server (sending back an "rst" or reset packet). Our Mac server is a Mac Mini running 10.9.5 with JSS 9.73. The firewall is off and it is on the same subnet as everything else (currently a flat open network). Am I wrong in thinking this has to be a firewall issue, regardless of what the support said, because DEP worked off our network? Here is the error from the log if that helps at all: 9/9/15 7:27:17.557 AM apspd[165]: stream:

Currently have a policy set to run on logout that runs a keychain cleanup script. Script works like a charm. The issue I'm having is getting the script to run when an AD user logs out. The script works fine when I use a local admin account: Executing Policy Keychain Remove Test... Mounting XXXXXX.edu to /Volumes/CasperShare... Running script keychain_remove.sh... Script exit code: 0 Script result: Deleted Disabled Auto Connect But when an AD user account logs out the system fails to mount the CasperShare: Executing Policy Keychain Remove Test... Mounting XXXXXX.edu to /Volumes/CasperShare... Error: Could not mount distribution point "itscasper01.uncw.edu". Currently using AFP and I've seen suggestions to move to HTTP downloads but really haven't seen a good explanation as to why or why not to move to HTTP downloads. Anyone have any ideas?

I pinged JamF Support about this as well but thought I would put it out in a discussion to see if anyone has any ideas. Here is info to provide scope: Version of Netboot/SUS appliance: 3.0 Server OS: Centos 6.5 (virtual server managed on a VMWare ESXi 5.5 host) Netboot image is OS X 10.9.0 When clicking "Enable Netboot Image" in the Netboot server page of the web application, the page refreshes and the service still is disabled, no error messages appear. The dashboard shows "DHCP Status: Not running" Troubleshooting steps performed:1. Re uploaded netboot image and made sure the folder name had no spaces (this is specificed in the administration guide)2. Added a subnet and netmask that is appropriate for what I am doing: subnet: 10.0.0.0netmask: 255.0.0.0 Confirmed in the Settings->Network settings that the values match what my environment calls for Restarted the server OS From what I can gather is that when you click "Enable Netboot Image" wh

Quick question to all: I'm now getting new machines that were purchased thru DEP. Broke out one to start testing and was wondering if there was a way to 'zero the machine out' and get it back to how it was right before i started testing? If i erase the JSS id and take all enrollment and jamf framework off the machine, can i re-use it for DEP testing and enrollments again and again? Or is it a one shot deal? What are others doing?

I am looking for the cleanest way to get self service icon to appear in the dock next to finder after completing the enrolment steps.

Odd "feature" I've encountered in VMWare Fusion 6. If you net boot an OS X VM and use Casper Imaging to deploy, it'll deploy the OS and it's own stuff ok but any other additional packages have their ownership completely screwed up. Usually the files are set to _unknown:_unknown. Anyone else encountered this?

Dear JNUC-elheads:I haven't seen any option to subscribe to/import calendar of sessions at JNUC. Is there/will there be one? In 2013 you had an awesome "Events by Taptera" app which really helped to set a schedule. If I recall, when evaluating two sessions taking place at the same time, the Events app would show if one of the sessions would be repeated a different day, which really helped to set an efficient schedule. I don't think you had anything last year, so I created my own Google calendar. If Taptera is out, I'd still rather subscribe to a calendar which you create. I am rather surprised we have to do that ourselves, frankly! Am I missing something?

What I am looking for is the ability to assign a VPP Managed App to a device without signing in with an Apple ID. From what I've read, it should be possible with iOS9. Our JSS is updated to the latest version. Because the device is managed, it keeps asking for an Apple ID to allow JAMFcloud to install apps. Any help is appreciated.

Hi I am successfully using the API to do various things we require. One of the items on my list is to automate the creation of Distribution Points in the Casper interface. I can do this successfully except for the fact that I am unable to set the SMB RO and RW User Passwords via the api for the distribution points (both on creation and by doing an update)? Has anyone managed to do this successfully? (I am able to set each of the other items required okay but without being able to set the passwords as well it really loses the benefit of an api call at all) Andrew

I'm trying to find out if it is possible to use Casper to force an Open Directory network account user to log in with a mobile account. We currently use Casper to bind the computers to Open Directory, but I can't find any settings having to do with mobile accounts. Thank you for any assistance you can provide.

My company is now an o365 customer, but we are still in the process of shifting to that model. The VL edition of Office 2016 appeared in VLSC and I would like to deploy this, especially after all of the great contributions here on jamf nation. But so far I haven't received a clear answer from Microsoft as to whether we are truly licensed for this or if we need to use the o365 version where every install counts against the five allotted to each user...my fear is that I deploy the VL version but then Microsoft asks for a true up based on what we've installed. Any other o365 customers received a good answer from Microsoft on this? thanks!

Hey JAMF People, Is anyone using CasperCheck? I have the script configured, I have the launchdaemon plist configured, I have the policy configured....perhaps I am just making this more complicated than it has to be....but for the life of me, now I can't figure out how to place the plist in /Library/LaunchDaemons of the client machines and how to place caspercheck.sh in /Library/Scripts of the client machines....can anyone assist? I am sure it's something simple that I am missing. If anyone isn't sure what caspercheck is: https://github.com/rtrouton/CasperCheck

I'm trying to set up a test JSS here, using Centos 7. Fresh OS install, up to date; latest MySQL 5.6 CS; downloaded the 9.8 installer & ran, no issues...but when I open the web browser to finish I get an error: JSS Startup Suspended The JSS can only **upgrade from version 8.0 or later.** Please install the latest release of Casper Suite 8 and then install the current version again. umm...what? Why would the installer think I'm upgrading a virgin database? I did a table repair in mysql - no issues. I re-ran the installer, and still the same. I do see that the install script mentions at the end: The time it takes to upgrade depends on the version you are upgrading to at the size of your database. Do not restart Tomcat during an upgrade. I assumed that this was a standard message...

We just moved to a 1-to-1 setup in our schools, and also have just recently deployed Casper. So far so good, but I'm having a problem getting Java to actually work as expected. I've tried several packages. I downloaded directly from Java.com, created a policy and pushed. However, this appears to work only for the browser plugin, not an actual java JVM to run apps or jars. I also created a similar package using autopkg and have found the same result. The plugin is installed, but no actual JVM. If I run java from the command line, I get a generic message saying: "No Java runtime present, requesting install." Which pops up the gui error saying "To view this web content, you need to install the Java Runtime Environment." The ONLY way I can get it working is to install the old Apple provided legacy Java 6, which then functions normally. Any suggestions that doesn't involve installing old cruft?

Printers that were working fine in 10.9 are now not always working after upgrading to 10.10. The print job stays paused. Printing to a Windows printer server via spools along with Papercut. The print job is not even getting to the server, get’s paused on the MacBook Air. Set up the printers new in 10.10 and added them into the JSS. Still no go when installed from Self Service. When I look at the printer in System Preferences the printer icon is generic and “Kind” is blank. Errors I noticed in Console12/10/14 8:34:45.944 AM com.apple.kextd[22]: com.apple.filesystems.smbfs failed sandbox check; omitting.12/10/14 8:34:45.954 AM SHARPAuctionRoom[703]: Loading com.apple.filesystems.smbfs status = -60394698912/10/14 8:34:45.967 AM sandboxd[147]: ([703]) smb(703) deny system-kext-load Thoughts? Ideas? Am I missing something obvious?

Hi Everyone! Does anyone have a script that will "uninstall" all versions of Shockwave 12 completely from my Macs?

All of our managed clients are pointing to an internal SUS (that works great) however clicking the 'Free Upgrade' button on the El Capitan banner downloads the installer. It is not enabled in the SUS. Does an OS upgrade go straight to the Apple SUS or something? Feel like I'm missing something basic here.

Server has a weak ephemeral Diffie-Hellman public key ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY Version 45.0.2454.85 (64-bit) Worked fine yesterday. Is this a Chrome issue or a JSS issue? JSS 9.73.

When installing a Adobe PS package via Self Service, I'm getting this error: Running JSS version 9.8. Executing Policy HS Adobe Photoshop CS6 Install 2015-16... [STEP 1 of 3] Mounting Main Distribution Point to /Volumes/CasperShare... [STEP 2 of 3] Caching package Adobe_HS_PS_2014-15_Install.dmg... [STEP 3 of 3] Running script installPKGfromDMG.sh... Script exit code: 0 Script result: Variable "dmgName" value is set to: Adobe_HS_PS_2014-15_Install.dmg Mounting the DMG Adobe_HS_PS_2014-15_Install.dmg... DMG mounted successfully as volume /Volumes/Adobe_HS_PhotoShop_2014-15_Install on device /dev/disk1. Installing Package Adobe_HS_PhotoShop_2014-15_Install.pkg from mount path /Volumes/Adobe_HS_PhotoShop_2014-15_Install... /Library/Application Support/JAMF/tmp/installPKGfromDMG.sh: line 169: /usr/sbin/jamf: No such file or directory There was an error installing the package. Exit Code: 1 Unmounting disk /dev/disk1... "disk1" unmounted. "disk1" ejected

Has anyone installed the JSS v 9.61 on RHEL 6.6? Are there any incompatibilities with using RHEL 6.6?

Hey all, I couldn't find anyone talking about this on the Nation, which surprised me. Apparently, GateKeeper rearms itself after 30 days unless this pair is written: sudo defaults write /Library/Preferences/com.apple.security GKAutoRearm -bool NO Even after disabling GK at imaging and again with a profile, I've got some machines that are rearming after 30 days. My next step will be to write the pair above, but I don't understand why the rearm is occurring if I have a config profile set. Anyone run into this? OS X 10.10.5, JSS 9.65