I have worked with Apple and have our DEP program setup. We have created the proper connection between Apple and our JSS and have also created the PreStage Enrollments. I have it setup also so that my devices are automatically supervised and registered through our MDM without the option of removing the MDM profile (all things we have been hoping for). However, when I go through the setup process with one of my iPads I am testing, I attempt to set the iPad up as a new iPad, am told that my school will automatically configure the iPad, I choose "Next" and I get the error: "The configuration for your iPad could not be downloaded from "my school" Invalid Profile.I have looked through every setting I could imagine and do not see the root of the issue. I am wondering if it has to do with the trust certificate and it not being installed, but would assume that is happening in the background as a part of the enrollment. Anyone else had this issue or have suggestio

I created a configuration profile for the Energy Saver, setting desktop/laptops computer sleep and display sleep at certain time intervals, along with put hard disk to sleep etc... now that the policy is set, I do not see a LOG tab to show me the computers that the profile has so far been applied to, why is this not visible like it is for Policies ? I have it showing on the JSS dashboard, but can not see it based on individual computer status.

We upgraded our JSS to v9.81 (from 9.61) and that appears to have gone according to plan. We have a question, though, on Step #3 about modifying the server.xml file on a windows server for "Ciphers for Tomcat HTTPS Connections". https://jamfnation.jamfsoftware.com/article.html?id=384 When I edited the server.xml file using notepad, I copied and pasted over the ciphers data and saved the file. However, after restarting Tomcat, the JSS fails to load. If I replace the server.xml file with the original the JSS loads just fine. Am I editing the file incorrectly? Is it necessary to do this update? Any hints or tricks? Thanks!

Woo hoo!

Can JAMF confirm whether NetInstall Creator works or not? If so, what versions of JSS and OS X are supported? https://jamfnation.jamfsoftware.com/viewProduct.html?id=13 "Record Last Updated: 1/11/13 at 10:41 AM by nick" PS, hoping this tool doesn't wither and blow away...DeployStudio offers NetInstall capability (runtime), would like to see that capability maintained at JAMF. :) Don

I am running a local JSS 9.73 and similar casper imaging. I created a base 10.10.5 image and threw some packages with it that I have tested work. When the computer is imaged (after erasing the drive), the computer comes up with the software installed, but no MNM profiles in system preferences, the JAMF binaries are on the computer tho. I added a quickadd package to the mix post OS install, and it sill is not enrolled. I am using a local SSD distribution which is a replication of the distribution point. any ideas?

Hi All, Here's my plist for a scheduled restart: When I loaded this to one of my test machine it went on a restart loop. I want my kiosk machines to restart everyday on a specific time. Do I need to put in the Weekday key? How can I achieve this? Thank youErwin

Is there currently a JAMF UG in San Diego? If not, should we start one?I am the Casper & Apple admin for a major military installation in San Diego, and I would love to meet some of the other Casper admins, share knowledge, tips/tricks, etc.

Hello guys, Is there any way a brand new, out of the box Mac can Netboot directly without manually going through the setup assistant? Current process: New iMac shipped from Apple Unbox and plugged in the ethernet cable and go through the setup assistant Go to System Preferences, Startup Disk > Netboot Server Name Here What I would like: Plug Mac in, hold N and auto netboot. Surprisingly, this worked on a Macbook Pro Retina last week, but not the iMac's today.

I would like to block the iOS 9 update in fear of the apps not being compatible. Is there any way to do this?

So i have a 500mb pkg file that creates a recovery partition. Im connecting to my internal network via our guest wifi and vpn to make it appear as if im one of our field users. When i watch the activity monitor and force a jamf policy update. It downloads instead of 500mb 1gb of data before running the package on the system. no other policy i have at check in should be downloading / installing anything. is this a normal behavior?

I've been struggling with this for a few days now but can't seem to figure out what's going. We are deploying two configuration profiles on our machines - one setting the Login Window preferences and another for Security & Privacy where the user is prompted to enter their password 5 minutes after the computer goes to sleep. However, I'm getting a weird issue where even though I haven't set the user to be prompted to enter their password immediately after the computer sleeps, a number of machines have this setting locked. I've tried reapplying the config profile several times, but it's very inconsistent, mostly defaulting to prompt the user immediately after sleeping. Looking at the details of the two config profiles, however, I'm seeing this: And these are my config profile settings Even though there's no setting for it, it appears the Login Window payload has a screensaver preference which doesn't require a password. Does anyone know why the Login Window has a screensav

Encountered an interesting one during our pre-release testing: SMB2 to some of our server shares doesn't work properly. Mounted a known working share on 10.8 and it works there. Try the same thing again on 10.9 and it can't navigate or see folders down from the root folder. However if you force 10.9 to mount the drive by using cifs://server.address/ which gets 10.9 to mount the share as SMB1 it works! The only way round this that i've found is the following code: # Create nsmb.conf file temporarily and tell it to force SMB1 use. echo "[default]" >> ~/Library/Preferences/nsmb.conf echo "smb_neg=smb1_only" >> ~/Library/Preferences/nsmb.conf The catch is i've only made this work on a per user basis, rather than over the entire computer. Hopefully this will help anyone else having issues.

Update: AutoCaspeNBI has been released, for more information see: https://macmule.com/autocaspernbi/ Hi All, Over the past couple of months I've been working on an app that with streamline NetBoot creation for use with Casper Imaging (as well as creation of Read-Only DMGs to restore to USB sticks.. if that's your thing). The basic idea is that you start with an clean never booted OS.dmg either from AutoDMG https://github.com/MagerValp/AutoDMG, Casper Admin http://macmule.com/2014/03/06/how-to-create-an-never-booted-os-dmg-using-casper-admin/ or a Composer captured OS.dmg from a never booted Mac (as in with forked builds). Then add a copy of Casper Imaging, from there you can click build or amend the options on the first window or click the options button for more. All the options should have popovers that explain their functions in a bit more detail. Most of the options set will be written to a plist (~/Library/Preferences/com.macmule.AutoCasperNBI.plist) will allows fo

Is there anything that can be reported on (EA maybe?) that can easily identify if or when a machine was imaged via Casper Imaging?

I'm trying to do the following: On an Active Directory joined Mac, the first time a user logs in, set the Dock to have a certain set of items in the Dock. The Mac is domain joined with network accounts only, not Mobile accounts. I also delete the locally created user folders (for the network users only) on a regular schedule, and the next time they log in, I want that Dock recreated. I also flush the policy log of the computer when this script runs. I've tried this a few different ways, all with inconsistent behavior: Created a Policy with a Dock Items payload to load the dock, and set it to execute once per user. Preloaded com.apple.dock.plist into the user template folder Created a Policy with a script using dockutil to preload the dock, and set it to execute once per user. None of these seems to operate consistently. I sometimes get the right dock created, other times the default Mac dock, and other times it keeps the same settings from the last time that user logg

Hello everyone, Followed this guide from Officeformachelp and it went fine. The problem occurs when I try to package the schedule.http://www.officeformachelp.com/outlook/exchange/setup-script/ To begin, I grabbed everything in /HDD/Users/username/Documents/Microsoft User Data/Office 2011 Identities/Main Identity and /Library/Company/Outlooksetupscript and put it in Composer and selected FUT and FEU in Casper Admin. The good news, everything seems to install fine. Bad news, it doesn't load properly and I get this error: How do I package this properly?

I have several larger updates that we prefer caching before pushing out. We accomplish this by adding the package twice to the same policy. The first one is set to cache and the second one is set to install cached. I've started noticing that the order on several of them keeps changing from caching first to installing cached first. This results in a failure to install a package that doesn't exist yet followed by that package being downloaded. On some policies I can just pop in and fix the order. On others, it immediately resets the order to Install Cached and then Cache. I can't figure out a rhyme or reason for it. Can anyone help me determine why some policies are reversing orders and others are not?

Hi all, I've noticed that the machines I image in Target Disk Mode end up having issues with Spotlight. Nothing other than web results (URL, movies, etc) and dictionary terms show up; None of the local applications show. I've seen a couple other posts on JAMF Nation but they are all pretty old, pre-dating Yosemite so those results haven't really worked for me. I've tried the following to see if it would net me the desired results (they didn't): sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.metadata.mds.plist Source I've also tried this: rm /.metadata_never_index rm /.fseventsd/no_log sudo mdutil -E -a -i on SourcePretty much any mdutil command presents me with the same error message: ~ Administrator$ sudo mdutil -E / Password: /: Indexing and searching disabled. SEA-EIS-EWindell:~ Administrator$ If anyone has any suggestions that would be much appreciated. I really like the ease of Thunderbolt imaging, however if I continue

Curious if anyone in the community utilizes this? I've configured it on our Casper server but keep running into the following error: When I check Console I don't receive much insight to what could be happening? Sep 17 16:39:55 admins-Mac-Pro.local AutoPkgr[58403]: (FULL AUTOPKG TRACEBACK) File "/usr/local/bin/autopkg", line 1660, in <module> sys.exit(main(sys.argv)) File "/usr/local/bin/autopkg", line 1654, in main exit(subcommands[verb]['function'](argv)) File "/usr/local/bin/autopkg", line 1420, in run_recipes search_github=make_suggestions) File "/usr/local/bin/autopkg", line 346, in load_recipe recipe = load_recipe(parent_id, [], recipe_dirs) File "/usr/local/bin/autopkg", line 332, in load_recipe search_github=search_github) File "/usr/local/bin/autopkg", line 248, in locate_recipe % (indef_article, name)) EOFError: EOF when reading a line Also, is it recommended to use .jss v

Hello nation, So we discovered vShare today. I am still a pretty new iOS/OS X admin so I wasn't aware that something like this existed. Apparently users can download an App via a website like vshare dot com and get access to an illegitimate App store which allows them to install even more Apps, even though we have the regular Apple App Store disabled. We have reprimanded the offending users, blocked access to vshare dot com on and off site and I see how I can track users with vShare installed via our search features, but... Is anyone aware of any other sites like this that we should block? Have any suggestions for our situation? Know of other Apps like this that I should be on the lookout for? Thanks!

Hi All, I just updated to Firefox 39 and found that i could no longer connect to the JSS admin console. Firefox would throw the following error when trying to connect. Secure Connection Failed An error occurred during a connection to <JSS DNS>:8443. SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key) The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem. I believe this is cause by the team over at Mozilla being strict about allowing connections to sites that use versions of TLS that a suceptible to the LogJam vulnerability. more info here https://weakdh.org/ As a workaround i have found modifying the server.xml file in/usr/local/jss/tomcat/conf/sever.xml Change the line chipher string FROM: ciphers="SSL_RSA_WITH_RC4_128_MD5, SSL_RSA_WITH_RC

Title says it all. Thanks

Peeps... Has anyone tried 9.8 and uploading their Apple provided GSX certificate? I did so last night, and got an error stating that the key pair was missing. (see attached) I already emailed Apple GSX support, but just thought I'd throw this out there to see if anyone else was experiencing the same...

Hello Everyone, I have a Creative Cloud Package that I created and tested and it comes out around 7.2GB. Whenever I go to upload it to the DP via Casper Admin it only uploads about 2GB and that's it. I re-created the Package, deleted and tried resending, but the same thing. Any ideas? Thanks!