Hi everyone, Do anyone of you know a quick method to replicate your JSS DB on to a Test JSS? Thanks, Henry

Hey guys,Looking to see if anyone has any idea on how to grab a particular item from the Spotlight plist file. We are able to set the Spotlight settings via configuration profile, but now i need to use a script to check to see if the value is being managed or not. Since they seem to be in a dict, this is the part i am having trouble with. if i check defaults read /Users/$loggeduser/Library/Preferences/com.apple.Spotlight, it spits out everything. I would like to grab only the values we are looking for, { enabled = 0; name = "MENU_WEBSEARCH"; } { enabled = 0; name = "MENU_SPOTLIGHT_SUGGESTIONS"; },Here is what i have so far: #!/bin/sh loggeduser=`ls -l /dev/console | cut -d " " -f4` SPOT=defaults read /Users/$loggeduser/Library/Preferences/com.apple.Spotlight | "grab X" if [ $SPOT == "0" ] then : else jamf policy -trigger spotlight_config fi Thanks for looking.

This is happening randomly with no pattern on our AD accounts after imaging. Issues: Keychain access shows that the login keychain isn't created for anyone until the second login. The tech has to log in twice for everyone to receive a login keychain afterwards. Basically, I log in the first time and have no login keychain. I log in a second time and then everything is fine. Base image has no issues whatsoever. It's when I start installing Adobe CC 2014/2015 (no FEU/FUT) during imaging via a policy that this issues arises. I've tested ten machines and four of them did not have a login keychain. I even created a Keychains folder in the user template using Composer and that didn't work. What would be causing this issue? Only our base image has FEU/FUT, the additional packages do not. Other people having the same issue: https://jamfnation.jamfsoftware.com/discussion.html?id=7662 https://jamfnation.jamfsoftware.com/discussion.html?id=7462

I'm trying FEU for the first time but it doesn't seem to be working.Here is what I'm trying to accomplish. We just recently deployed network projectors throughout the building, I'm trying to send out profile with IP address/DNS names of projectors to Epson EasyMP Network Projection applications so when the user opens up the applications, the profile is already built with list of projectors in the building. The challenging part of this is that the projector list preferences are built within the user-level preferences folder. I ran through the usually with the composer to capture the data and I have several preferences files built into the /Users/Admin/Library/Preferences/ folder. I uploaded the DMG to the Casper Admin and checked the FEU check box. Then, created a self service policy to install the projector application with FEU check box checked from the policy as well. I ran this against the test machine from my AD account. However, the preferences files are only

We are attempting to deploy Cisco AnyConnect 4.1 but when attempting to connect we get a pop up indicating that OS X wants to use the System Keychain. Has anyone else come up against this?

We put our root certificates in the System keychain but now have a duplicate set of certs (one set is expired). Does anyone know of a way to remove certificates from the System keychain in an automated way? thanks in advance for any suggestions

On my enrolled macs if I turn Firewall ON, do i have to turn on any options for casper communication? will turning ON Firewall mess with JSSConnection? (recurring check-in, login/logout etc...)

When adding policies to the JSS Dashboard, they don't show progress - just grey circles - for active policies.Process to replicate:Edit a policyClick checkbox Show in JSS DashboardIt shows up on dashboard.When checking the Policy logs for the policy, it shows activity yet that activity isn't reflected on the JSS Dashboard. The Policy says:Completed: 0 Remaining: 0 Failed: 0I do see some policies updated with color graphs in the Policy view and when I check the non list view (block view?), yet even there the newly edited or created policies aren't updated.Is this expected behavior?

Is it possible to scope Self Service Plug-ins to specific groups? For example, I want to have a link to "QuickStart" guides for applications that are installed on specific Macs. Then scope a smart group with those apps installed, so those who do not have these apps installed won't see the link to the "QuickStart" guides

I would be interested to hear what others are using out there for this. Our current system no longer meets our needs and is antiquated. I seek to learn which systems are out there and actual Apple admins use, what they like and what they don't like. Now ideally, said ticketing system should also be able to be customized for multiple department use (such as HR/Maintenance), but that is not an absolute requirement. Thank you in advance for advice and suggestions,blackholemac

I have a policy that creates a local admin and filevault2 enables it. It works fine but the picture I try to setup for the account is not getting assigned. Instead I get the default picture of a 'silhouette' of a person. 9.51 this is what i have tried in the picture location text box. None of these have worked, no picture of Soccer.tif "/Library/User Pictures/Sports/Soccer.tif" /Library/User Pictures/Sports/Soccer.tif /Library/User Pictures/Sports/Soccer.tif

I'd like to be able to Netboot around 50 machines at a time but for some reason we can't boot more than 11 at a time. Sometimes we boot a few more than 11 but never more than 13. 11 seems to be the norm. When we attempt to boot more than 11 it looks like their going to work but then they eventually just reboot to the internal HD. Any ideas? - jamie

Hi all,I'm facing an issue for the Macs of my company.I need to set up the network service order for the different interfaces.The main goal is to setup the interfaces as follow:1- Ethernet (built in, Thunderbolt or USB)2- WifiBasically I need to set up as primary interface any Eth connection detected and as secondary the Wifi. All the others can follow. Does anyone has a solution/suggestion for this?Thanks everybody. Cheers,Jack

I've been trying for a few weeks to implement sep as a self service item. Its working however, it never comes up with a managed client. Has anyone else ran into this problem?

Since I'm on my quest to revoke admin right from the users at my workplace I have to go through all applications and set them to not update or update themselves. Now I'm wondering how you manage the constant Adobe XI Pro updates? Anything that'd make this less of a hassle would be appreciated!

There's not a lot of documentation, or current discussion, about the Restore partition feature. I've created a restore image, made an OS package out of it with composer, uploaded that to my JDS, and in my test configuration I've setup a partition for the Restore partition. The physical drive is 750GB, my restore partition image is about 10GB. I have the format as JHFS+, Make a restore partition is checked, reimage the partition is checked, and append a name to the partition is checked. I've set the partition size up to 25GB, and the Maximum percentage from 5% (37.5GB on this drive) up to 100%! The imaging gets all the way through, but fails at the end with the same message, not enough space. What the heck?

Okay, I just know I'm missing something simple. How do I get something just on the current user's desktop? I can put it on all user's Desktop, and in the User Template folder. But I need to put a file just on the current user's desktop. :- I guess I could put it in /tmp and use a post-install script to move it to the current user's desktop. Is that the best option?

We're using 'Featured' as a flag to the users that this is an important update. We have self service policies that use smart groups to display updates to apps for the users to download. We don't push packages to our users since we just can't be sure what their internet is, or what they're doing, etc - we can if it was insanely critical though. I've edited the notifications.png and notificationsFeatured.png files so it has a red banner and the word "Important". I've replaced the original files and changed the permissions on them (trying to troubleshoot). And I've restarted apache. But my self-service app still shows the blue banners when I launch it. What else am I missing. I guess I could create a new war file, blow away everything, and have Tomcat repopulate everything? And I know I'll have to replace these files with each JSS update.

Hello, After imaging a Mac with Casper I receive this message once I boot the Mac to the desktop. I can not figure out what is causing this error message to pop up. You can click ok and it will go away for a while but will come right back. Has anyone else here seen this error message before and know what is causing it? OS: [-] Yosemite (10.10.4) Software installed during imaging: [-] Self Service[-] MS Office 2011 (Installed on base image)[-] Citrix Online Plug-In[-] Java JRE-8u45[-] Java For OS X 2014-001 Thank-you, -Anthony

I know this is an odd question, but I hope someone out in the JNation can assist. I am trying to setup a lab station build. On this build people login against our LDAP to a locked down profile. When they logout the profile is deleted. The hiccup I am having is that our LDAP doesn't have a UniqueID to map to. I was hoping to map every user who logs in to #601 or something. What I need to know is how to I flush that record during logout so the next user can login using the same UniqueID? I assume I have to run some sort of dscl command before I delete the home folder. Any help would be greatly appreciated!!!

I just got the NetBoot appliance up and running. Everything looks good from the appliance side of things; subnets are setup right, the image is uploaded (and named without a space in it), but I'm getting a kernel panic every time I try and boot a Mac from the server. Any ideas?

Still new to the Casper Suite. Trying to restrict the Photos app and was able to successfully kill the app via restricted software, but I see the Photos Agent still active in Activity Monitor. I tried creating a separate restricted software entry for the Photos Agent, but it keeps running for some reason. I've done the jamf manage terminal command to ensure it's updated. Any reason to think that the Photos Agent is necessary to the OS given that it's now baked into 10.10.4 Yosemite? See below:

I'm new to writing scripts in OS X. I need to copy a file (or preferably an alias) to the user's desktop. It is our AUP (in PDF form) that the board has decided needs to be on the desktop. I want to set it up as a script so if the user deletes it, I can push it back out via every15.Any help would be great fully appreciated. Eric

Only admin user ---- during imaging.. get error to reset to default but it never works.. cannot save any new application preferences ~library/application support get access denied. Set up machine add to domain login domain user twice and set as admin.. Install a string or separately in Self service works for that users.. But Chrome and firefox cannot access application support folder so cannot use Chrome or Firefox. 3.Same as no 2 but move to a department called install that has policies set to auto trigger instead of using self service .. this works on the domain user but support then cannot use FireFox or Chrome. I really want the settings to work. I created the apps using composer.. Used snapshot and created dmg.. For the Chrome creation I just dragged and dropped.

Recently, our organization has undertaken an effort to replace all SHA-1 SSL certificates with SHA-2. Our Casper servers in test and production are on the list. Concurrently with this, I observed that our Casper sites with SHA-1 certitificates would not open at all in Firefox 39 (current release) or in the Safari 9 beta. Both reference being unable to create a secure connections, with the Firefox error being more verbose (see picture). My guess was upgrading the SSL certs to SHA-2 would address this issue, but it hasn't. Our certificate vendor is Comodo/InCommon and I imported their root CA, intermediate, and obviously the one for Tomcat into a new keystore. Has anyone gone through this process and have anything to share? I am going to engage with our security folks as well but wanted to inquire here first. Thanks,Bryan