I know this is an odd question, but I hope someone out in the JNation can assist. I am trying to setup a lab station build. On this build people login against our LDAP to a locked down profile. When they logout the profile is deleted. The hiccup I am having is that our LDAP doesn't have a UniqueID to map to. I was hoping to map every user who logs in to #601 or something. What I need to know is how to I flush that record during logout so the next user can login using the same UniqueID? I assume I have to run some sort of dscl command before I delete the home folder. Any help would be greatly appreciated!!!

I just got the NetBoot appliance up and running. Everything looks good from the appliance side of things; subnets are setup right, the image is uploaded (and named without a space in it), but I'm getting a kernel panic every time I try and boot a Mac from the server. Any ideas?

Still new to the Casper Suite. Trying to restrict the Photos app and was able to successfully kill the app via restricted software, but I see the Photos Agent still active in Activity Monitor. I tried creating a separate restricted software entry for the Photos Agent, but it keeps running for some reason. I've done the jamf manage terminal command to ensure it's updated. Any reason to think that the Photos Agent is necessary to the OS given that it's now baked into 10.10.4 Yosemite? See below:

I'm new to writing scripts in OS X. I need to copy a file (or preferably an alias) to the user's desktop. It is our AUP (in PDF form) that the board has decided needs to be on the desktop. I want to set it up as a script so if the user deletes it, I can push it back out via every15.Any help would be great fully appreciated. Eric

Only admin user ---- during imaging.. get error to reset to default but it never works.. cannot save any new application preferences ~library/application support get access denied. Set up machine add to domain login domain user twice and set as admin.. Install a string or separately in Self service works for that users.. But Chrome and firefox cannot access application support folder so cannot use Chrome or Firefox. 3.Same as no 2 but move to a department called install that has policies set to auto trigger instead of using self service .. this works on the domain user but support then cannot use FireFox or Chrome. I really want the settings to work. I created the apps using composer.. Used snapshot and created dmg.. For the Chrome creation I just dragged and dropped.

Recently, our organization has undertaken an effort to replace all SHA-1 SSL certificates with SHA-2. Our Casper servers in test and production are on the list. Concurrently with this, I observed that our Casper sites with SHA-1 certitificates would not open at all in Firefox 39 (current release) or in the Safari 9 beta. Both reference being unable to create a secure connections, with the Firefox error being more verbose (see picture). My guess was upgrading the SSL certs to SHA-2 would address this issue, but it hasn't. Our certificate vendor is Comodo/InCommon and I imported their root CA, intermediate, and obviously the one for Tomcat into a new keystore. Has anyone gone through this process and have anything to share? I am going to engage with our security folks as well but wanted to inquire here first. Thanks,Bryan

Still very new to Casper Suite, but I was looking to restrict apps like the App Store on all our managed computers. I have the App Store process set to be killed, but it doesn't seem to be instantaneous as I was hoping it would be. It takes a couple seconds to kill the app and if I try to reopen it the app reopens before it closes again after a couple seconds. When we tested this in the Jumpstart it seemed nearly instantaneous. Any suggestions?

I'm relatively new to JAMF and we didn''t cover any imaging info in my CCT course. Alas, I am tasked with building a new image for 3000+ Macs over the next few weeks. Joy. I'm building the new image based on 10.10 and I'm having a lot of problems getting the newly imaged Macs to auto join wifi and bind with AD. Any insight would be appreciated. I'm using the wifi script in the "scripts" section of JN (https://jamfnation.jamfsoftware.com/viewProductFile.html?id=135&fid=749) and I'm setting up AD in the "Directory Bindings" section of JSS. Both of these items are included in the imaging configuration along with the custom (though simple) base OS 10.10 image. When imaging MBA's with this config, they don't join wifi or bind with AD (even over the tbolt ethernet adapter). What's the trick? Any ideas?

We'd like to take a bunch of old Macs we recently replaced with new ones and re-image them with a very basic OS in preparation to donate or sell. If we could use the Casper Imaging to do this, that would speed things up for us, but I can't find a way to image with the barebones image I created without the JAMF files being automatically installed at the end of the imaging process. Is this possible to do?

where has the resource kit download dmg gone?

I created a policy to install Xerox Printer driver, and for the Trigger I set it as Custom and in the text box i entered TESTXeroxDriverCustomTrigger for its name, it will run once per computer. This is to TEST at this point, so I scoped it to ONE iMac I want to test it on. I want to create a second policy that will go into Self Service that installs a mapped xerox printer. Instead of putting the xerox print driver in this same policy I will call the Custom Trigger I created earlier. Since I have 4 xerox printers using the same driver I don't want each policy to keep installing the driver each time. Where in the Second policy do i enter the 'jamf policy -trigger TESTXeroxDriverCustomEvent' command ?? Can I put it in the payload 'Files and Processes' --> 'Execute Command' ? or create a 1 line script with that command and add the script to this policies 'script' payload? This is how I am thinking it will work and want it to work;

With 10.10 I've started to notice that my username aliases for AD mobile accounts seem to randomly vanish. We recently made the switch for our AD accounts to be namespace forest to append the domain at the start of the username to fullfill a request from our network department to help out with BYOD filtering. To prevent having our users have to do DOMAINUN, I made a script that runs on first login to add their plain username as an alias. Everything was working great up till 10.10.3. Has anyone else run into this? Or knows of a cleaner way to go about this, I'd love to hear it. Thanks.

Hello! I am needing to push out the 10.10.4 update to computers via a policy. I will be using the non-combo update since these are running 10.10.3 currently. I was wondering what is the best setup and if anyone has done this yet. Is is safe for me to download and drop the PKG from Apple right into Casper Admin? Thank you for any advise!-Thomas

I am attempting to bind my machines in AD while using Casper Imaging. I have a bind job that works just fine with any other operating system. But, for some reason, Yosemite refuses to do so. I have also created a Configuration Profile to accomplish this task and that works at times. But, not always. Has any one else encountered issues binding Yosemite machines to AD using Casper Imaging? If not, what is your workflow? Thanks!

Hi All, I am trying to manage the JSS backup utility via Mac OS X Screen Sharing. With Screen Sharing, everything is working as normal, except for when I open the JSS Backup Utility, nothing displays in the GUI window. It is blank. It also shows blank when I try and open the Java settings in the Mac System Preferences. Viewing directly from a monitor connected to the server, it is fine. Any ideas? Thanks! -Emily

Thought you could get rid of me!!!! We are starting a new Mac development project here and I have been tabbed to run it through its course. Feels good to be back dealing with a familiar project!

Hello JAMF! At the moment we have about five devices in our JSS, before we get to big we would like to move the JSS to Server 2012. The part I'm slightly confused about: Our current URL is https://jss.domain.more:8443. Can I install the JSS on Windows, set it up with the same URL then shutdown the old JSS without it causing problem? Or will two URL's that match cause a problem? Thank you for reading!

I am attempting to add an active directory account to all of our Macs using the Local Account task in a policy in JSS. It adds the account fine on the mac but only adds it as a standard user, despite the fact I checked the box to allow the account to administer the computer. If anyone else has had this issue, I would greatly appreciate any help available.

I have file vault 2 computer configuration going on computers. User logs out and gets prompted to enter password for file vault 2 to turn on et.... I have a smart group with the criteria: FileVault 2 Individual Key Validation is 'valid' the only computer that shows up in this group is a single computer running 10.9the computers running 10.10 do not show up in this smart group. has anyone else encountered this ?

I'm wondering what everyone's thoughts are regarding whether UPS units are enough to protect sensitive electronics such as Mac Pro towers, iMacs and server room equipment. A couple of weeks ago I was researching UPS systems to replace an aging Belkin UPS of mine. With this UPS I am protecting a 2010 Mac Pro and RAID. I read that UPS systems don't really provide much power protection beyond that which a $30.00 hardware surge protector would provide - they just offer protection from data loss caused by improper shutdowns. As usual I settled on an APC BackUps Pro 1500. Now fast forward a few days to a client of mine. They have had a few lightning strikes in recent weeks that have caused some big disruption. The phone system needed to be rebooted. Their Fiery was effected to the point that the technician thought it might need to be replaced, but in the end it came back to life. And now two brand-new Mac Pro towers have gone schizophrenic. One to the point that Apple is go

The additional character in 10.10 has broken another script we use, but I'm not sure how to fix this one due to my limited scripting skills. I tried to remove the if statements referring to OS type since we have nothing older than 10.7 in use, and even they will be gone shortly, but I just ended up breaking the script in different ways. The unmodified script that breaks on 10.10: #!/bin/bash AP_NAME="NETWORK" AP_SEC="WPA2E" INDX=0 AIRPORT="" ALLINTERFACES="" IFS=' ' SW_VER=`/usr/bin/sw_vers -productVersion` if [ `echo "if(${SW_VER%.*}>=10.7)r=1;r"|/usr/bin/bc` -eq 1 ]; then APNAME="Wi-Fi" else APNAME="AirPort" fi # # Look for AirPort interface # for intf in `/usr/sbin/networksetup -listnetworkserviceorder | grep "^(H"`; do IFS=':,)' set $intf if [[ ($2 =~ ${APNAME} ) ]]; then AIRPORT=$4; fi done if [ `echo "if(${SW_VER%.*}>=10.6)r=1;r"|/usr

So this happened a few version ago & I was hoping it would just fix itself. The Self Service Description of all policies has gone misaligned. The close button is off in the upper right corner. Is there a way to reinstall the Self Service on the jss or edit some css etc...?

Has anyone been able to successfully connect to the JSS web interface using Mac OS X 10.11? We are unable to connect to the JSS via the web or when using Apple Configurator 2. Based on the error messages we are receiving it looks like the JSS does not adhere to what Apple has deemed as "best practices" for web security. I'm sure JAMF is working on this, but it makes it very difficult to test the upcoming releases. From Apple's technote on App Transport Security: App Transport Security is a feature that requires secure connections between an app and web services. The default connection requirements conform to the best practices for secure connections. Apps can override the default behavior and turn off App Transport Security. App Transport Security is available on iOS 9.0 or later, and on OS X 10.11 and later. and a little further down they outline what they consider best practices: • TLS requires at least version 1.2. • Connection ciphers are limited to those th

Hello, I need to gather Info on all " *.nsf files Lotus notes" on every mac. I want to be able to get full path, size, dates. They usually reside in /Users/Library/Application Support/IBM Notes Data/, but I want to do this for every user and then be able to run a report. Is this something I should create an EA or policy with a script maybe both? Thanks In advance. Chris

Has anyone noticed that as of 10.10.4, it is no longer possible to run the defaults write command to enable Secondary Mouse Click?? I have a login script that runs the command: sudo -u $3 defaults write com.apple.driver.AppleHIDMouse Button2 -integer 2 This has worked on all OS X versions so far however not currently working on 10.10.4. Its an interesting error as the Sys Prefs GUI displays that button 2 is set for Secondary Click but it is not working. If you go into Sys Prefs and manually change the option then put it back to Secondary Click, all is well however this is not an option when managing many hundreds of Mac's. I would be very interested to hear if anyone else has discovered this and of course if someone has a fix?