Last year I added some web pages that were displayed as part of self service, homepage, SIS login for student. I removed them to clean it up, much to my surprise the students missed them and just thought self service was broke. I can't remember how to add a webpage to self-service for OS. Any help for those that have done it more recently.

If you're still running JDS 9.65 you should be aware that the installer doesn't recognize OS X Server 5.0.4. Luckily I had a copy of 4.1.3 from another server I was able to copy over to my latest JDS box.

Have a student computer that hasn't checked in for a while. That machine has 9.73 while we are running 9.81 now. I would be happy to just input my ladmin password to get issue worked out using selfservice, but the ladmin password that was created during jumpstart was a random password (yup, bad idea). I know one time I used terminal to do things, but terminal is blocked app on student devices. The self service app shows up with updated apps, but will not execute any of them. I told the student there is one way that will for sure work, wipe machine, but I would prefer not to do that. Any ideas on how to get this to come back around? I did notice that around 15 other student devices have same issue with not checking in since same date as well as same 9.73 version.

I am trying to set up a test server for trials. I get the JAVA jdk and the mysql database set up but when I go to install the JSS I get this dialog: As I hope you can see, the server app window is visible in the background with 3 green dots on it so I have no idea what the dialog is trying to tell me. Do I need to have a FQDN for the server box for the JSS to recognize it or is there some other item I am missing? Thanks much

I am confused on why i am receiving different results when I create a smart group to tell me how many computers are encrypted. Here is my criteria and results on 2 test smart groups file vault 2 status IS Boot Partitions Encrypted = 46 File vault 2 Encryption State IS Encrypted = 56 56 is the correct answer, but not sure why I get 46 for the results for one of the smart groups.

In iOS 9, when you view the search screen to the left of the 1st home screen, you see Siri suggestions for contacts, nearby locations on Maps, and News articles. Some of these "news" articles are inappropriate for an education setting. Is there a way to disable these? The News app is already restricted and not available to the students, but the News suggestions on the search screen open in a Safari web view.

This is damn frustrating. Not sure if it's Apple's issue or Casper. Apple GSX (and MacTracker) lists the model name as "MacBook Pro (15-inch, Early 2011)" or "MacBook Pro (15-inch, Late 2011)" while Casper lists them both as "15-inch MacBook Pro (2011)"! I'm not sure if Casper is pulling this info from the hardware itself, or from an internal database. But it becomes a big issue when trying to separate Early from Late 2011 machines (13, 15 or 17). This is a big problem for me because I'm trying to create smart groups for policies so we can deploy Apple Hardware Test to our machines since we reimage them (which removes AHT). The Early models of 2011 MacBook Pros (13/15/17) use versions 3A208, 3A209, and 3A211 of AHT. While the Late models of 2011 MacBook Pros (13/15/17) use version 3A222. But I've found no way of differentiating between at least the Early and Late 2011 15" machines. I can't use Model ID, they're

So we have to clean up some legacy hidden home directories. The deleteAccount verb works fine, but it archives the home directories for these hidden accounts /Users/Deleted Users which we don't want. sudo jamf deleteAccount -username jdoe I know some of the jamf binary functions/options are hidden (geez, really wish JAMF would docment the whole enchalada), so I'm hoping there is a way to run this command WITHOUT archiving the deleted user's home directory. Happy holidays! Don

Hi guys, We are deploying a configuration profile which contains a network payload and certificates. The aim is for machines connected by WiFi to be authenticated at the login window so that we can perform management tasks. (machine based authentication) This works a treat. The machine authenticates and has an ip address. The problem I am having is that when a user logs in it doesn't seem to then pass through as the user - instead it stays stuck authenticated as the machine. The reason this is a problem is because in our environment we have different VLAN's for staff and students. Say for example, a staff member logs in we want this profile to pass through these staff credentials and then move them into the correct VLAN so that they can get more access to stuff. I had a brief look and saw someone mentioning a similar issue a while back but I seem to have lost that post now..... I tried to get round this by applying a user level configuration profile alongside this machin

So, the question is, where do we hold the "First Annual JNUC Beer Swap"? There are not many restaurants that are BYOB that would be convenient. There was some discussion of the Aloft hotel lobby, but I am not sure how they'd feel about outside booze, since there is a bar right there. Any other ideas as to where we could hold this shindig?

Is this possible? I have over 100 machines I need to assign to a particular building. Is there anyway to do them all at once?

I was able to get DEP and our on-site JSS tied together yesterday but was still having trouble getting the computers to enroll during the setup assistant. We fired up a hotspot to test DEP off our network and to our surprise it worked perfectly. I placed a call to our firewall (fortinet) support to see if there was something I did wrong. We fired up a remote session and they confirmed we had the ports unblocked in the firewall. During several tests they noted that the firewall policy was behaving properly and that the packets were being rejected from the Mac Server (sending back an "rst" or reset packet). Our Mac server is a Mac Mini running 10.9.5 with JSS 9.73. The firewall is off and it is on the same subnet as everything else (currently a flat open network). Am I wrong in thinking this has to be a firewall issue, regardless of what the support said, because DEP worked off our network? Here is the error from the log if that helps at all: 9/9/15 7:27:17.557 AM apspd[165]: stream:

Currently have a policy set to run on logout that runs a keychain cleanup script. Script works like a charm. The issue I'm having is getting the script to run when an AD user logs out. The script works fine when I use a local admin account: Executing Policy Keychain Remove Test... Mounting XXXXXX.edu to /Volumes/CasperShare... Running script keychain_remove.sh... Script exit code: 0 Script result: Deleted Disabled Auto Connect But when an AD user account logs out the system fails to mount the CasperShare: Executing Policy Keychain Remove Test... Mounting XXXXXX.edu to /Volumes/CasperShare... Error: Could not mount distribution point "itscasper01.uncw.edu". Currently using AFP and I've seen suggestions to move to HTTP downloads but really haven't seen a good explanation as to why or why not to move to HTTP downloads. Anyone have any ideas?

I pinged JamF Support about this as well but thought I would put it out in a discussion to see if anyone has any ideas. Here is info to provide scope: Version of Netboot/SUS appliance: 3.0 Server OS: Centos 6.5 (virtual server managed on a VMWare ESXi 5.5 host) Netboot image is OS X 10.9.0 When clicking "Enable Netboot Image" in the Netboot server page of the web application, the page refreshes and the service still is disabled, no error messages appear. The dashboard shows "DHCP Status: Not running" Troubleshooting steps performed:1. Re uploaded netboot image and made sure the folder name had no spaces (this is specificed in the administration guide)2. Added a subnet and netmask that is appropriate for what I am doing: subnet: 10.0.0.0netmask: 255.0.0.0 Confirmed in the Settings->Network settings that the values match what my environment calls for Restarted the server OS From what I can gather is that when you click "Enable Netboot Image" wh

Quick question to all: I'm now getting new machines that were purchased thru DEP. Broke out one to start testing and was wondering if there was a way to 'zero the machine out' and get it back to how it was right before i started testing? If i erase the JSS id and take all enrollment and jamf framework off the machine, can i re-use it for DEP testing and enrollments again and again? Or is it a one shot deal? What are others doing?

I am looking for the cleanest way to get self service icon to appear in the dock next to finder after completing the enrolment steps.

Odd "feature" I've encountered in VMWare Fusion 6. If you net boot an OS X VM and use Casper Imaging to deploy, it'll deploy the OS and it's own stuff ok but any other additional packages have their ownership completely screwed up. Usually the files are set to _unknown:_unknown. Anyone else encountered this?

Dear JNUC-elheads:I haven't seen any option to subscribe to/import calendar of sessions at JNUC. Is there/will there be one? In 2013 you had an awesome "Events by Taptera" app which really helped to set a schedule. If I recall, when evaluating two sessions taking place at the same time, the Events app would show if one of the sessions would be repeated a different day, which really helped to set an efficient schedule. I don't think you had anything last year, so I created my own Google calendar. If Taptera is out, I'd still rather subscribe to a calendar which you create. I am rather surprised we have to do that ourselves, frankly! Am I missing something?

What I am looking for is the ability to assign a VPP Managed App to a device without signing in with an Apple ID. From what I've read, it should be possible with iOS9. Our JSS is updated to the latest version. Because the device is managed, it keeps asking for an Apple ID to allow JAMFcloud to install apps. Any help is appreciated.

Hi I am successfully using the API to do various things we require. One of the items on my list is to automate the creation of Distribution Points in the Casper interface. I can do this successfully except for the fact that I am unable to set the SMB RO and RW User Passwords via the api for the distribution points (both on creation and by doing an update)? Has anyone managed to do this successfully? (I am able to set each of the other items required okay but without being able to set the passwords as well it really loses the benefit of an api call at all) Andrew

I'm trying to find out if it is possible to use Casper to force an Open Directory network account user to log in with a mobile account. We currently use Casper to bind the computers to Open Directory, but I can't find any settings having to do with mobile accounts. Thank you for any assistance you can provide.

My company is now an o365 customer, but we are still in the process of shifting to that model. The VL edition of Office 2016 appeared in VLSC and I would like to deploy this, especially after all of the great contributions here on jamf nation. But so far I haven't received a clear answer from Microsoft as to whether we are truly licensed for this or if we need to use the o365 version where every install counts against the five allotted to each user...my fear is that I deploy the VL version but then Microsoft asks for a true up based on what we've installed. Any other o365 customers received a good answer from Microsoft on this? thanks!

Hey JAMF People, Is anyone using CasperCheck? I have the script configured, I have the launchdaemon plist configured, I have the policy configured....perhaps I am just making this more complicated than it has to be....but for the life of me, now I can't figure out how to place the plist in /Library/LaunchDaemons of the client machines and how to place caspercheck.sh in /Library/Scripts of the client machines....can anyone assist? I am sure it's something simple that I am missing. If anyone isn't sure what caspercheck is: https://github.com/rtrouton/CasperCheck

I'm trying to set up a test JSS here, using Centos 7. Fresh OS install, up to date; latest MySQL 5.6 CS; downloaded the 9.8 installer & ran, no issues...but when I open the web browser to finish I get an error: JSS Startup Suspended The JSS can only **upgrade from version 8.0 or later.** Please install the latest release of Casper Suite 8 and then install the current version again. umm...what? Why would the installer think I'm upgrading a virgin database? I did a table repair in mysql - no issues. I re-ran the installer, and still the same. I do see that the install script mentions at the end: The time it takes to upgrade depends on the version you are upgrading to at the size of your database. Do not restart Tomcat during an upgrade. I assumed that this was a standard message...

We just moved to a 1-to-1 setup in our schools, and also have just recently deployed Casper. So far so good, but I'm having a problem getting Java to actually work as expected. I've tried several packages. I downloaded directly from Java.com, created a policy and pushed. However, this appears to work only for the browser plugin, not an actual java JVM to run apps or jars. I also created a similar package using autopkg and have found the same result. The plugin is installed, but no actual JVM. If I run java from the command line, I get a generic message saying: "No Java runtime present, requesting install." Which pops up the gui error saying "To view this web content, you need to install the Java Runtime Environment." The ONLY way I can get it working is to install the old Apple provided legacy Java 6, which then functions normally. Any suggestions that doesn't involve installing old cruft?