So i have a 500mb pkg file that creates a recovery partition. Im connecting to my internal network via our guest wifi and vpn to make it appear as if im one of our field users. When i watch the activity monitor and force a jamf policy update. It downloads instead of 500mb 1gb of data before running the package on the system. no other policy i have at check in should be downloading / installing anything. is this a normal behavior?

I've been struggling with this for a few days now but can't seem to figure out what's going. We are deploying two configuration profiles on our machines - one setting the Login Window preferences and another for Security & Privacy where the user is prompted to enter their password 5 minutes after the computer goes to sleep. However, I'm getting a weird issue where even though I haven't set the user to be prompted to enter their password immediately after the computer sleeps, a number of machines have this setting locked. I've tried reapplying the config profile several times, but it's very inconsistent, mostly defaulting to prompt the user immediately after sleeping. Looking at the details of the two config profiles, however, I'm seeing this: And these are my config profile settings Even though there's no setting for it, it appears the Login Window payload has a screensaver preference which doesn't require a password. Does anyone know why the Login Window has a screensav

Encountered an interesting one during our pre-release testing: SMB2 to some of our server shares doesn't work properly. Mounted a known working share on 10.8 and it works there. Try the same thing again on 10.9 and it can't navigate or see folders down from the root folder. However if you force 10.9 to mount the drive by using cifs://server.address/ which gets 10.9 to mount the share as SMB1 it works! The only way round this that i've found is the following code: # Create nsmb.conf file temporarily and tell it to force SMB1 use. echo "[default]" >> ~/Library/Preferences/nsmb.conf echo "smb_neg=smb1_only" >> ~/Library/Preferences/nsmb.conf The catch is i've only made this work on a per user basis, rather than over the entire computer. Hopefully this will help anyone else having issues.

Update: AutoCaspeNBI has been released, for more information see: https://macmule.com/autocaspernbi/ Hi All, Over the past couple of months I've been working on an app that with streamline NetBoot creation for use with Casper Imaging (as well as creation of Read-Only DMGs to restore to USB sticks.. if that's your thing). The basic idea is that you start with an clean never booted OS.dmg either from AutoDMG https://github.com/MagerValp/AutoDMG, Casper Admin http://macmule.com/2014/03/06/how-to-create-an-never-booted-os-dmg-using-casper-admin/ or a Composer captured OS.dmg from a never booted Mac (as in with forked builds). Then add a copy of Casper Imaging, from there you can click build or amend the options on the first window or click the options button for more. All the options should have popovers that explain their functions in a bit more detail. Most of the options set will be written to a plist (~/Library/Preferences/com.macmule.AutoCasperNBI.plist) will allows fo

Is there anything that can be reported on (EA maybe?) that can easily identify if or when a machine was imaged via Casper Imaging?

I'm trying to do the following: On an Active Directory joined Mac, the first time a user logs in, set the Dock to have a certain set of items in the Dock. The Mac is domain joined with network accounts only, not Mobile accounts. I also delete the locally created user folders (for the network users only) on a regular schedule, and the next time they log in, I want that Dock recreated. I also flush the policy log of the computer when this script runs. I've tried this a few different ways, all with inconsistent behavior: Created a Policy with a Dock Items payload to load the dock, and set it to execute once per user. Preloaded com.apple.dock.plist into the user template folder Created a Policy with a script using dockutil to preload the dock, and set it to execute once per user. None of these seems to operate consistently. I sometimes get the right dock created, other times the default Mac dock, and other times it keeps the same settings from the last time that user logg

Hello everyone, Followed this guide from Officeformachelp and it went fine. The problem occurs when I try to package the schedule.http://www.officeformachelp.com/outlook/exchange/setup-script/ To begin, I grabbed everything in /HDD/Users/username/Documents/Microsoft User Data/Office 2011 Identities/Main Identity and /Library/Company/Outlooksetupscript and put it in Composer and selected FUT and FEU in Casper Admin. The good news, everything seems to install fine. Bad news, it doesn't load properly and I get this error: How do I package this properly?

I have several larger updates that we prefer caching before pushing out. We accomplish this by adding the package twice to the same policy. The first one is set to cache and the second one is set to install cached. I've started noticing that the order on several of them keeps changing from caching first to installing cached first. This results in a failure to install a package that doesn't exist yet followed by that package being downloaded. On some policies I can just pop in and fix the order. On others, it immediately resets the order to Install Cached and then Cache. I can't figure out a rhyme or reason for it. Can anyone help me determine why some policies are reversing orders and others are not?

Hi all, I've noticed that the machines I image in Target Disk Mode end up having issues with Spotlight. Nothing other than web results (URL, movies, etc) and dictionary terms show up; None of the local applications show. I've seen a couple other posts on JAMF Nation but they are all pretty old, pre-dating Yosemite so those results haven't really worked for me. I've tried the following to see if it would net me the desired results (they didn't): sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.metadata.mds.plist Source I've also tried this: rm /.metadata_never_index rm /.fseventsd/no_log sudo mdutil -E -a -i on SourcePretty much any mdutil command presents me with the same error message: ~ Administrator$ sudo mdutil -E / Password: /: Indexing and searching disabled. SEA-EIS-EWindell:~ Administrator$ If anyone has any suggestions that would be much appreciated. I really like the ease of Thunderbolt imaging, however if I continue

Curious if anyone in the community utilizes this? I've configured it on our Casper server but keep running into the following error: When I check Console I don't receive much insight to what could be happening? Sep 17 16:39:55 admins-Mac-Pro.local AutoPkgr[58403]: (FULL AUTOPKG TRACEBACK) File "/usr/local/bin/autopkg", line 1660, in <module> sys.exit(main(sys.argv)) File "/usr/local/bin/autopkg", line 1654, in main exit(subcommands[verb]['function'](argv)) File "/usr/local/bin/autopkg", line 1420, in run_recipes search_github=make_suggestions) File "/usr/local/bin/autopkg", line 346, in load_recipe recipe = load_recipe(parent_id, [], recipe_dirs) File "/usr/local/bin/autopkg", line 332, in load_recipe search_github=search_github) File "/usr/local/bin/autopkg", line 248, in locate_recipe % (indef_article, name)) EOFError: EOF when reading a line Also, is it recommended to use .jss v

Hello nation, So we discovered vShare today. I am still a pretty new iOS/OS X admin so I wasn't aware that something like this existed. Apparently users can download an App via a website like vshare dot com and get access to an illegitimate App store which allows them to install even more Apps, even though we have the regular Apple App Store disabled. We have reprimanded the offending users, blocked access to vshare dot com on and off site and I see how I can track users with vShare installed via our search features, but... Is anyone aware of any other sites like this that we should block? Have any suggestions for our situation? Know of other Apps like this that I should be on the lookout for? Thanks!

Hi All, I just updated to Firefox 39 and found that i could no longer connect to the JSS admin console. Firefox would throw the following error when trying to connect. Secure Connection Failed An error occurred during a connection to <JSS DNS>:8443. SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message. (Error code: ssl_error_weak_server_ephemeral_dh_key) The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem. I believe this is cause by the team over at Mozilla being strict about allowing connections to sites that use versions of TLS that a suceptible to the LogJam vulnerability. more info here https://weakdh.org/ As a workaround i have found modifying the server.xml file in/usr/local/jss/tomcat/conf/sever.xml Change the line chipher string FROM: ciphers="SSL_RSA_WITH_RC4_128_MD5, SSL_RSA_WITH_RC

Title says it all. Thanks

Peeps... Has anyone tried 9.8 and uploading their Apple provided GSX certificate? I did so last night, and got an error stating that the key pair was missing. (see attached) I already emailed Apple GSX support, but just thought I'd throw this out there to see if anyone else was experiencing the same...

Hello Everyone, I have a Creative Cloud Package that I created and tested and it comes out around 7.2GB. Whenever I go to upload it to the DP via Casper Admin it only uploads about 2GB and that's it. I re-created the Package, deleted and tried resending, but the same thing. Any ideas? Thanks!

Hi All, Over the past few weeks I have been busy making some major changes to AutoCasperNBI, & really need some testers to make sure it's working as it should pre releasing it as version 1.2. Changes below & URL to get the pre-release is: https://github.com/macmule/AutoCasperNBI/releases/ Enhancement: Reduce DMG size further by using .sparseimage Enhancement: Check for updates before creds Enable Disk Utilities debug mode NetBoot Image Description does not get written to NBImageInfo.plist 10.9.x NBI created in 10.10.x won't boot Put Casper Imaging into Debug mode AutoCasperNBI reading MB as GB when calculating space Correct typo in TimeMachine ToolTip Change Add Packages/Certs to remember last location & not always change. "Cannot Read OS Version" from Composer captured OS.dmg's Add timeout for JSS URL Automatically Compact NetBoot Image Automatically Expand Image Update Icons for JSS 9.5 Remove status blobs Detail everything in "Always Set

Any of you folks using FileVault know what mechanism controls the ability to make sure the account that unlocks a disk (at power-on auth) is automatically logged on? I'm seeing intermittent behavior in some cases, where it may or may not automatically log the unlocking user into OS X.

Hello. I have 19.2GB of jamfbin files in my MySQL folder. They are actually named jamfbin.00123 (the numbers change) and there are multiple files created per minute for no reason I can find. Each file is approximately 15MB and there is an index file. File type is the numbers behind the jamfbin (i.e. jamfbin.00123 is filetype 00123). My drive keeps filling up, I need to get these figured out. Do I need to keep them? How are they generating? Help?

Hi I'm creating an update script for the application Dropbox.app. Now I would like to grab the version number from https://www.dropbox.com/install. I tried with following shell command:. #!/bin/sh latestver=`/usr/bin/curl -s -A https://www.dropbox.com/install | egrep -o '<span id="version_str">* for Mac</span>'` But it doesn't work. Any hint? Thanks!

I'm currently trying to update Mobile Device ConfigurationProfiles' exclusions scope In order to do this, the following steps are being taken: Read the Mobiledeviceconfigurationprofile (in XML). Modify that configuration profile (Add a mobiledevicedevice to the exclusions/mobiledevices scope). Use that updated profile as the body for the PUT request when updating a profile. After these actions I get a Http 409 status code returned : Note: The code examples below have been modified for easy reading. so for example, exception handling is not included. Example C# Code //Service Declaration JSSApi.MdmInterfaceClient AppleApi = new JSSApi.MdmInterfaceClient(); //Read the Profile - Scroll down to see response var XmlProfileResponse = AppleApi.ReadMobileConfigurationProfile(mConfig.Id.ToString(), inXML:true); XElement XmlDocX = XElement.Parse(XmlProfileResponse); XmlDocX.Element("scope").Element("exclusions").Element("mobile_devices") .

I have a policy to upgrade from 10.7 OR 10.8 to 10.9 in Self Service. I left the settings in the Restart Options to it's default for the 'user logged in action' which is RESTART IF A PACKAGE OR UPDATE REQUIRES IT and for the 'delay' AMOUNT OF TIME TO WAIT BEFORE THE RESTART BEGINS = 5 minutes. I ran the policy from self service, 5 minute box popped up informing me to save, warning me that the computer would reboot in 5 minutes and to log out. I waited 5 + minutes without doing anything, leaving the pop up box on the screen, not clicking the OK button, to see if the mac would reboot but it did not, then I logged out and about 5 minutes later it rebooted. Is this how it is supposed to work? should it restart after 5 minutes even if the user is logged in? even if the user does not click the OK button when they are told that the computer will restart in 5 minutes?

Is it possible to retrieve a list of devices based on a Site?When retrieving a list of all devices, no site or anything related to a device's building/site is being exposed through the api. See the XMl below: <mobile_devices> <size>2</size> <mobile_device> <id>6</id> <name>iPad</name> <device_name>iPad</device_name> <udid>dd1dff5d598e3fce####16288f0b9bf1551d0eb2</udid> <serial_number>DMPPQ7BZ##VJ</serial_number> <phone_number/> <wifi_mac_address>9C:35:##:53:##:84</wifi_mac_address> <managed>true</managed> <supervised>true</supervised> <model>iPad Air 2 (Wi-Fi)</model> <model_identifier>iPad5,3</model_identifier> <modelDisplay deprecated="9.4">iPad Air 2 (Wi-Fi)</modelDisplay> <model_display>iPad Air 2 (Wi-Fi)</model_display> <username/&g

I was helping another JSS install figure out why their imaging was taking 1h40m while ours was only taking 15m. Turns out the issue is that theirs was installing and ours was block copying. I let them know that was the issue, and they asked what the difference was. I had no answer other than that one was significantly faster. I tried looking it up online, but I can't find a satisfactory explanation of the difference. What exactly is the difference between block copy and an install of an OS?

This is a strange question... but can anyone think of a way to limit access to a Self Service Policy to only the assigned user of a machine in the JSS? So if User A is the assigned user of Machine A, and User B is the assigned user of Machine B. I want User A to be able to see and run the policy only Machine A, and have it not be available in Self Service on Machine B for their user. And vice versa. I should specific the users in question would be LDAP users.

We are pleased to announce that the Casper Suite 9.8 beta is available for download. This beta is available to all Casper Suite customers. You are able to test this release from a hosted instance or download the installer. More details are available upon enrollment in the program. To do so, please go to the beta program portal here in JAMF Nation. Enroll today and share your feedback in the beta discussions or submission form in the portal. Thank you! Sam JohnsonVP, Customer Service