I read through this thread and I'm still having issues. All I want to get working is having a new iPad enrolled with iOS 9 through DEP and let self service automatically download with no apple id needed. These iPads I'm working on are already setup through DEP and are on iOS 9. They are not assigned to any user and are in scope to receive Self Service. I followed these instructions to deploy Self Service Manually instead of automatically. I also went to my VPP and purchased 2000 copies of self service, and they are showing under VPP in Casper. I lookup the device in Casper and see that Self Service is in scope, I press Update Inventory and see Self Service trying to install, on the iPad it prompts me to sign into iTunes, I don't want to be prompted so I press cancel. Then in Casper it says failed, please log in to your iTunes Store account. What am I doing wrong and how can I get this working?

I am trying to run recon (9.72) locally on a 10.11 mac mini. I launch the program, enter all of the requested information and click the enroll button and I am immediately hit with an error that is on the attached screen shot. Any thoughts on what I am doing wrong?

Good afternoon, We utilize both the Casper Suite and DeployStudio for imaging our computers. After JAMF moved the binary to provide compatibility with OS X 10.11, we are finding that our previous working setup is now broken. Allow me to elaborate on how our setup works... Our base image, computer naming, and OS-level patches are installed using DeployStudio. The last step of that workflow installs a in-house written script containing jamf command line statements. For those of you unfamiliar with DeployStudio there are two steps with the workflow. The first step is the actual copying of the image down to the client, which is completed while the machine is connected to our DeployStudio NetBoot server. Once this finishes, the client machine reboots into to the second step which is a first-boot script known as ds_finalize.sh. That script first installs the JSS QuickAdd.pkg, we created from Recon, then calls the in-house script we wrote that has command line statements for JSS policies

I have created an advanced search for finding all laptops that don't have GarageBand on them. I have a laptop beside me that has GarageBand on it that showed up in the search. I think it may be due to my not understanding how to correctly specify the name of the app of interest. Anybody have any guidance on this issue?

I've got a lab with 20 computers in it and configured login and logout script policies. They are ongoing policies triggered by login or logout respectively. They've been working great the last month. However, as of 2 days ago, a seemingly random half of the computers stopped getting the policy. the other half work fine. The ones that are having problems also havent checked-in in 2 days. -- I dont know why. Are there any troubleshooting tips I can use to try and fix this issue?

I received an email from a user today who told me his old computer is showing up under his Find My Mac account. The computer was reimaged and given to a new person. The original user sees the computer's current location and new name and (I assume) he has the ability to lock/wipe/etc. Are there best practices for making sure a computer is no longer associated with an iCloud account for FMM before redeploying? Would it require the old user to manually log out or is it something I can do through the JSS or my imaging tool (DeployStudio)? Obviously it would just take one disgruntled former employee to cause some problems for us under the current situation.

All, I am attempting to install Creative Suite 5.5 Design Standard on an iMac Intel (27-inch, Late 2012) running OS X 10.10.5. When installing the suit from Self Service, I receive the error below. It's worth noting that this package has been well-tested. Additionally, the CS5.5 package also failed to install when the contents were saved locally and the installer was run from the machine itself. This would rule out an issue with Self Service. I am guessing that CS 5.5 is not supported on OS X 10.10.5 but wanted to verify with others.

Maybe I'm having a brain fart here, or I just haven't figured out the logic, but we just purchased a few licenses of an App via VPP using the MDM method - we upgraded our JSS to v9.81 and forced the content into our JSS and are now trying to use VPP Assignments to distribute the app - via users? Why users? I was thinking it would be distributed to devices? What am I missing? How do I get the app to this specific iPad in my hands? Do I need to reset it and login with a specific user that the app will be distributed to? What if that user has logged into multiple iPads? Many thanks!

I have worked with Apple and have our DEP program setup. We have created the proper connection between Apple and our JSS and have also created the PreStage Enrollments. I have it setup also so that my devices are automatically supervised and registered through our MDM without the option of removing the MDM profile (all things we have been hoping for). However, when I go through the setup process with one of my iPads I am testing, I attempt to set the iPad up as a new iPad, am told that my school will automatically configure the iPad, I choose "Next" and I get the error: "The configuration for your iPad could not be downloaded from "my school" Invalid Profile.I have looked through every setting I could imagine and do not see the root of the issue. I am wondering if it has to do with the trust certificate and it not being installed, but would assume that is happening in the background as a part of the enrollment. Anyone else had this issue or have suggestio

I created a configuration profile for the Energy Saver, setting desktop/laptops computer sleep and display sleep at certain time intervals, along with put hard disk to sleep etc... now that the policy is set, I do not see a LOG tab to show me the computers that the profile has so far been applied to, why is this not visible like it is for Policies ? I have it showing on the JSS dashboard, but can not see it based on individual computer status.

We upgraded our JSS to v9.81 (from 9.61) and that appears to have gone according to plan. We have a question, though, on Step #3 about modifying the server.xml file on a windows server for "Ciphers for Tomcat HTTPS Connections". https://jamfnation.jamfsoftware.com/article.html?id=384 When I edited the server.xml file using notepad, I copied and pasted over the ciphers data and saved the file. However, after restarting Tomcat, the JSS fails to load. If I replace the server.xml file with the original the JSS loads just fine. Am I editing the file incorrectly? Is it necessary to do this update? Any hints or tricks? Thanks!

Woo hoo!

Can JAMF confirm whether NetInstall Creator works or not? If so, what versions of JSS and OS X are supported? https://jamfnation.jamfsoftware.com/viewProduct.html?id=13 "Record Last Updated: 1/11/13 at 10:41 AM by nick" PS, hoping this tool doesn't wither and blow away...DeployStudio offers NetInstall capability (runtime), would like to see that capability maintained at JAMF. :) Don

I am running a local JSS 9.73 and similar casper imaging. I created a base 10.10.5 image and threw some packages with it that I have tested work. When the computer is imaged (after erasing the drive), the computer comes up with the software installed, but no MNM profiles in system preferences, the JAMF binaries are on the computer tho. I added a quickadd package to the mix post OS install, and it sill is not enrolled. I am using a local SSD distribution which is a replication of the distribution point. any ideas?

Hi All, Here's my plist for a scheduled restart: When I loaded this to one of my test machine it went on a restart loop. I want my kiosk machines to restart everyday on a specific time. Do I need to put in the Weekday key? How can I achieve this? Thank youErwin

Is there currently a JAMF UG in San Diego? If not, should we start one?I am the Casper & Apple admin for a major military installation in San Diego, and I would love to meet some of the other Casper admins, share knowledge, tips/tricks, etc.

Hello guys, Is there any way a brand new, out of the box Mac can Netboot directly without manually going through the setup assistant? Current process: New iMac shipped from Apple Unbox and plugged in the ethernet cable and go through the setup assistant Go to System Preferences, Startup Disk > Netboot Server Name Here What I would like: Plug Mac in, hold N and auto netboot. Surprisingly, this worked on a Macbook Pro Retina last week, but not the iMac's today.

I would like to block the iOS 9 update in fear of the apps not being compatible. Is there any way to do this?

So i have a 500mb pkg file that creates a recovery partition. Im connecting to my internal network via our guest wifi and vpn to make it appear as if im one of our field users. When i watch the activity monitor and force a jamf policy update. It downloads instead of 500mb 1gb of data before running the package on the system. no other policy i have at check in should be downloading / installing anything. is this a normal behavior?

I've been struggling with this for a few days now but can't seem to figure out what's going. We are deploying two configuration profiles on our machines - one setting the Login Window preferences and another for Security & Privacy where the user is prompted to enter their password 5 minutes after the computer goes to sleep. However, I'm getting a weird issue where even though I haven't set the user to be prompted to enter their password immediately after the computer sleeps, a number of machines have this setting locked. I've tried reapplying the config profile several times, but it's very inconsistent, mostly defaulting to prompt the user immediately after sleeping. Looking at the details of the two config profiles, however, I'm seeing this: And these are my config profile settings Even though there's no setting for it, it appears the Login Window payload has a screensaver preference which doesn't require a password. Does anyone know why the Login Window has a screensav

Encountered an interesting one during our pre-release testing: SMB2 to some of our server shares doesn't work properly. Mounted a known working share on 10.8 and it works there. Try the same thing again on 10.9 and it can't navigate or see folders down from the root folder. However if you force 10.9 to mount the drive by using cifs://server.address/ which gets 10.9 to mount the share as SMB1 it works! The only way round this that i've found is the following code: # Create nsmb.conf file temporarily and tell it to force SMB1 use. echo "[default]" >> ~/Library/Preferences/nsmb.conf echo "smb_neg=smb1_only" >> ~/Library/Preferences/nsmb.conf The catch is i've only made this work on a per user basis, rather than over the entire computer. Hopefully this will help anyone else having issues.

Update: AutoCaspeNBI has been released, for more information see: https://macmule.com/autocaspernbi/ Hi All, Over the past couple of months I've been working on an app that with streamline NetBoot creation for use with Casper Imaging (as well as creation of Read-Only DMGs to restore to USB sticks.. if that's your thing). The basic idea is that you start with an clean never booted OS.dmg either from AutoDMG https://github.com/MagerValp/AutoDMG, Casper Admin http://macmule.com/2014/03/06/how-to-create-an-never-booted-os-dmg-using-casper-admin/ or a Composer captured OS.dmg from a never booted Mac (as in with forked builds). Then add a copy of Casper Imaging, from there you can click build or amend the options on the first window or click the options button for more. All the options should have popovers that explain their functions in a bit more detail. Most of the options set will be written to a plist (~/Library/Preferences/com.macmule.AutoCasperNBI.plist) will allows fo

Is there anything that can be reported on (EA maybe?) that can easily identify if or when a machine was imaged via Casper Imaging?

I'm trying to do the following: On an Active Directory joined Mac, the first time a user logs in, set the Dock to have a certain set of items in the Dock. The Mac is domain joined with network accounts only, not Mobile accounts. I also delete the locally created user folders (for the network users only) on a regular schedule, and the next time they log in, I want that Dock recreated. I also flush the policy log of the computer when this script runs. I've tried this a few different ways, all with inconsistent behavior: Created a Policy with a Dock Items payload to load the dock, and set it to execute once per user. Preloaded com.apple.dock.plist into the user template folder Created a Policy with a script using dockutil to preload the dock, and set it to execute once per user. None of these seems to operate consistently. I sometimes get the right dock created, other times the default Mac dock, and other times it keeps the same settings from the last time that user logg

Hello everyone, Followed this guide from Officeformachelp and it went fine. The problem occurs when I try to package the schedule.http://www.officeformachelp.com/outlook/exchange/setup-script/ To begin, I grabbed everything in /HDD/Users/username/Documents/Microsoft User Data/Office 2011 Identities/Main Identity and /Library/Company/Outlooksetupscript and put it in Composer and selected FUT and FEU in Casper Admin. The good news, everything seems to install fine. Bad news, it doesn't load properly and I get this error: How do I package this properly?