Hi All, I'm currently having an issue when enrolling my mac. I can successfully push software, policy's, AD binding e.t.c which i have created within JSS. But when it come down to logging in to my account on the MAC I'm having issues. It is saying no network accounts are available. When I am login to my local account it find the Ethernet fine and able to browse the internet and go on webpages etc. I and my team both think that it is the docking station that maybe causing issue of not allowing the mac to see the network. I'm currently using an Elgato Thunderbolt 2 docking station. please I need some help!!

Has anyone found a way to suppress/bypass this screen asking users to sign into Cloud Storage?

We added 3 local accounts for video editing on a lab of 2013 iMacs. It added the accounts with no issues.Video1, Video2, Video3. All with the same password. When logging into any one of them you are prompted for the the Admin password to repair the applications folder. Video1 & 2 both have no access to the Desktop, Downloads, or Documents folders. Video 3 does.Upon looking into the permissions for Video1 & 2's folders, Video3 has Read&Write access while Everyone Else is denied access, rendering the accounts unusable.We are going to go through and delete the accounts and add them manually as a temporary fix, but doing this in a busy school district is very difficult. How can I add accounts without getting permissions errors?

I have a couple questions for creating a Disk Encryption Configuration 1 - does individual recovery key get stored in JSS ?2 - If I choose 'management account' to be ENABLED, what 'management account' is it enabling? is it the 'managed by' listed in the JSS for that computer in the General section ?

One of the reasons we opted for DEP program for ipads was to avoid iCloud locked ipads. We have an ipad now which is assigned to DEP but still locked with student's iCloud ID. This is nuisance because the iPad was purchased by the school and remains school property until the device is Disowned from the DEP portal. If this is happening then either my information is not correct or DEP seems to have some loophole.

I'm trying to package and deploy LEGO mindstorms education NXT Software v2.1 to clients running OSX 10.8.4The installation CD supports up-till OSX 10.6 and there is a patch (from LEGO) which enables the software to run on 10.8 I run the install the disc, complete the install and restart (required by app). After which I install the patch and open the software to check if its working and it works! I then package it with composer (I have tried Normal snapshot and New & Modified snapshot) and push it to the client. Pushes successfully but an error pops up when I click on the appError code:1003 Any ideas?Thanks!

My company was purchased about 18 months ago and we are now working on Migrating my user over to the new domain. Users in the office this is no issue. We have a few remote employees that will need to get migrated as well. Does anyone know of a way to keep a VPN connection Live with Junos Pulse? I have tried using the Fast User Switching but once I click on Login Window, my connection is dropped. I have also tried using terminal and the login command, which allows the account to auth but doesn't created the home Dir it goes to /var/empty. Does anyone have any suggestions?

Hello all, I'm attempting to set the "Require Password After Screensaver" to NOT require a password in Yosemite via configuration profile. I have uploaded: <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "{field{*fldinst{HYPERLINK "http://www.apple.com/DTDs/PropertyList-1.0.dtd"}}{fldrslt cf4 http://www.apple.com/DTDs/PropertyList-1.0.dtd}}"> <plist version="1.0"> <dict> <key>askForPassword</key> <integer>0</integer> </dict> </plist>} as a custom configuration. The JSS seems to read it fine, showing:external image link However, none of my enrolled machines show the setting as disabled. The setting itself is unavailable (greyed out), so the computer is reading the config profile (as it also shows under profiles), and I can affect the require password timeframe option by adding: <key>askForPasswordDelay</key> <integer>900</integer> But for the li

I had a user working remotely enroll into JSS via the Casper Agent web-enroll. The machine was successfully added to Casper but then an automatic encryption policy kicked off (this has since been disabled and all encryption is done manually.), rebooted as per the policy and she immediately lost access to any local accounts and the encryption policy failed. This makes sense because the machine lost connectivity to Casper after it rebooted because the user was off-site. To make matters worse, our svcCasperAdmin account has a unique password automatically and randomly-generated. As it stands, the user is only able to see the svcCasperAdmin and Guest accounts when rebooting with no access to the former and no use outside of Safari to the latter. We were able to procure the recovery FileVault2 encryption key via Casper but because it's last communication/check-in was prior to the encryption, this key is not recognized by the svcCasperAdmin account. Any ideas on accessing the svcCasper

Does anyone know which plist this option for Apple Remote Desktop lies "Allow control of this computer when this application is running". I would like to create an MCX to make that option active. Thanks!

Hello, I have a ticket with JAMF open. We have been having a large amount of issues lately, and I decided to drop our old Casper infrastructure and do a total overhaul. So I have a brand new manually installed JSS (on rhel). The main issue I'm having at this point is that the tomcat cert isn't seeming to work properly. What I mean by this is that I have created a new java keystore and have imported signed tomcat and root certs signed by my AD CA. Browser-wise everything seems to be working fine, however I start to see things fall apart when I try enrolling my JDS and running the jamfds policy command. It says that the cert is bad... the server name either does not match, or it isn't signed. The other place I see a problem is in the Tomcat Settings page where there should be specifics about the cert, see attachment. Has anyone run into this issue? Do you have any suggestions?

It seems that I can no longer get the security-mode from the following methods on Yosmemite: echo "<result>nvram -p | grep security-mode</result>"orecho "<result>system_profiler | grep security-mode</result>"or echo "<result>/Library/Application Support/JAMF/bin/setregproptool -c</result>" I use the setregproptool placed in the JAMF/bin folder to set the EFI password using a policy at first login. The machine asks for the EFI password when option booting, but I just need the output for reporting/compliance. Is anyone else seeing this issue?

Hello folks, I hope everyone is doing well and that all the school system admins out there are having a smooth transition back. I am having a problem with some of our Self Service policies in OS X. The ones in question will display "Gathering Information..." along with a very quick progress bar when the user attempts to install them. Nothing actually gets installed on the machine and no policy logging event is generated by the action. I thought something was possibly corrupt with these policies or their packages until I removed their AD group limitations and set them to "All Computers" or "Specific Computers" only. When the AD limitations are gone, they work like a charm through Self Service. Has anyone else experienced this? Any ideas? Thanks as always!

I did some searching and couldn't find much about this feature. Does it work to help to distribute downloads over multiple servers? Is anyone else using it? I'm just using standard SMB/HTTP file shares that I sync manually with CasperAdmin, not a JDS. Thanks, ~Ted

For background, we are using DEP and want to force a password change to the users account once we deliver the machine. So we create the account out of the box, the machine logs in and policies apply, and then when we deliver the machine they have to change their pw. The policy runs a simple script: sudo pwpolicy -u $USER -setpolicy "newPasswordRequired=1" The script works great and when you reboot the user is forced to change the password. The problem is that we are getting popups at login for "talagent wants to use the "Local Items" keychain," "Messages Agent wants to the use the "Local Items" keychain," and "cloudpaird wants to use the "local items" keychain." This is a persistent error until removing ~/Library/Keychain/reallyLongString which isn't a viable solution, especially since the string is different every time. Are other people seeing this issue? Or are you forcing a pw change via a different met

Two weeks ago, we made our master DP a JDS instance running on Ubuntu 12.04LTS. Everything was working great until this morning when Casper Admin started prompting that "The master distribution point could not be mounted". I rebooted the JDS server and receive the same error. There doesn't seem to be much documentation for the JDS, so I was hoping someone could point me in the proper direction for troubleshooting why all of a sudden we are no longer able to mount the DP. Any suggestions are welcome! Thanks,Matt

Hi Guys; finally got this working (SSID, WPA2 Enterprise, TTLS & PEAP protocols and MSCHAPv2). Logins are taking between 2 and 3 minutes. any tips to getting faster logins TIA LS

Hi all, Hoping someone can help me here. We're going to be deploying crashplan ProE out to our org soon. In the installer script on the local machine there is a variable for %CP_USERNAME% (or similar) which needs to be the individuals email address. Is there anyway to pipe the casper $EMAIL variable into the Crashplan username variable? We do not have AD/LDAP to perform this function unfortunately. Once again, thank you all in advance.

We recently set up Box as an HTTPS only distribution point. The good news is this works flawlessly. The bad news is that since Casper Admin can't replicate to it, every file change currently has to be done by hand. I've been trying to work around that limitation. My goal is to create a simple script that mounts the webdav Box drive, runs rsync, and then unmounts it. I want to either schedule this to run every couple of hours or anytime the contents of the JSS folder changes. The machine it's running on is a Mac server running 10.10.5. So far, the only thing I've managed to get working fine is syncing(via rsync) to the Box distribution point if the share has been manually mounted. That's good, but it requires a user to be logged into the server at all times and manually running something. I'd like to automate it. From what I've been reading, the best thing to do would be to write up a small shell script and schedule it to run. This should ba

We have setup Block Adult Content on students ipad using configuration profiles. We need to know how does it work. Why the websites like below are blocked when we turn on this setting https://aifs.gov.au/cfca/publications/corporal-punishment-key-issues.

On Windows machines, I've always gone into the volume licensing center to download a copy of Office. For Mac, is it okay to download the installer from outlook.office365.com and use this .pkg to deploy to all the machines in my company?

Quick add.pkg adds administrator hidden account, but I also want to add a seperate administrator account through a policy, this account will not be hidden. On macs I am currently enrolling this unhidden admin account is already created and was manually created prior to Casper. If an add a user policy is run on a Mac that already has that user created, what will happen?New macs deployed via Casper imaging will get the hidden management account, along with the Unhidden admin account (probably add unhidden admin account via Casper imaging custom section).

I would like to deploy an in-house app via both the "Install Automatically/Prompt Users to Install" and Self Service methods. Some devices should get the app automatically. Some should have the option in Self Service. I have the app in the JSS and scoped appropriately for auto-install I then tried to create a second instance of the app for scoping to Self Service, but the JSS complained that "An app with the filename "APP-NAME.ipa" already exists." This would also be valuable for App-Store apps. Is there a way to do it? Thanks,-Dan

I've been seeing an issue with Casper Imaging. As part of a nuke and pave imaging workflow, I created a package from the app CreateUserPkg that creates my primary admin account. I was using ID=499. However, on first boot after Casper Imaging I kept getting a dialog box stating "OS X needs to repair your Library to run applications. Type your password to alow this." I would find the home directory was missing important folders such as Desktop, Pictures, Music, Movies and what there was of the home directory had incorrect permissions. I would end up booting in single-user mode, mounting the file system for writing and deleting the home directory to force a clean creation on next login after rebooting. After changing the account ID to 501, the first "normal" ID in OS X, all is well. The only thing I modified in the admin account creation package was the account ID. The app chose a new UUID, of course, and I didn't bother to make it the same as it doesn'

Hi.. We're using DEP in an AD environment.When setting up Mac for first time, the user is prompted to create a local account via the setup assistant. We have Casper run a policy that binds computer to AD and then restarts allowing user to login with their domain credentials. What we'd like to do is have Casper run a script that once user is logged into Mac with AD account that will search for and delete the local account that was created using the setup assistant upon first boot. Since people will no doubt create a local account with any name they want, I thought maybe we could run a DSCL command and find any local accounts with a Unique ID of "500-something" and then delete it. I thought maybe I'd build off of @donmontalvo instructions here, but I'm not a scripting whiz.https://jamfnation.jamfsoftware.com/discussion.html?id=5437 Whatchoo think? Maybe there's another way?