Hi all,I've been having problems getting the recovery partition just right with a compiled image using 10.10.4 and Casper Imaging 9.73. It seems when you build an image that has both the main partition and the recovery partition included using composer and then you compile it, it will only write the main image back during the compilation. I cannot seem to get the recovery partition to add using the old method of putting it in the configuration as an extra partition. If I do this then it names the recovery partition incorrectly and then Casper Imaging tries to set that as the boot drive and it boots to a folder with a question mark. Anyone else doing this successfully? I played with AutoDMG however this would dramatically change my workflow and I'm trying to avoid it for now. Gabe ShackneyPrinceton Public Schools

Hey everyone, I've seen this issue reported on various search results, namely this one at Apple Discussions. After doing a quick search on JAMF Nation, I don't see it discussed - so either I missed it or not many people are facing the issue. Here goes: When we mount a volume (either a .dmg or USB drive), the item shows up in Finder and is seen properly doing diskutil list and can be accessed without issue. Things that don't work:- Clicking the "eject" icon next to the volume name.- Dragging the volume to the trash Things that do work:- Ejecting the disk via command line hdiutil eject -force disk2s2 - Selecting the volume in Disk Utility and choosing "eject" It's not a show-stopper (we've been dealing with it since at least January - on all versions of Yosemite, including 10.10.4) but it's sure annoying. I can definitely script something and put it in Self Service, but it seems that you should be able to eject a mounted vol

hello, I have written a script which executes a policy and uses terminal notifier to notify the user of an installation. because terminal notifier cannot run during the login window, i check the currently logged in user, if the user is root (assume we are at the login window) , execute the policy and create a text file on the local machine, otherwise we are logged in and run the policy with terminal notifier. i then have a while loop which checks the existence of such a file and verifies the user is not root and then displays a terminal notifier window. Executing the script from terminal on the machine works perfectly fine…. however, as soon as I run the script through terminal it runs the script and nothing happens, its almost like it doesn't execute anything. I may be missing something simple here but I have tried to emulate the conditions locally by executing as root in the terminal. Has anyone seen anything like this before? I am receiving no error logs when the policy ru

Hi all, I've recently got back into the Support game having been away for a few years (CCA in 2008 - things look a little different now!). I've been tasked with creating a report of the Macs on the network (checked in last 90 days) that are pre-10.8, to work out if they can be upgraded or need to be replaced. Initially, I just want to identify how many there are and the names of said Macs - though a complete report of the hardware would be a bonus. I have to admit to feeling a bit rusty on this... I've been trying to create a Smart Group, using the OS version criteria, but it seems a bit long-winded to do and needs a lot of digging to find the relevant information. Any suggestions? ThanksJim

We have been needing to find a script that works to delete all the home folders in the Users directory except for four that we need to keep (map, tech, student, and admn). We have a setup of mobile home directories that are cached on each laptop when network users first use them. Here is the script that support helped build. I am getting a syntax error when running it at the first "for". #!/bin/sh ######################################################################################################## # # Copyright (c) 2013, JAMF Software, LLC. All rights reserved. # # Redistribution and use in source and binary forms, with or without # modification, are permitted provided that the following conditions are met: # * Redistributions of source code must retain the above copyright # notice, this list of conditions and the following disclaimer. # * Redistributions in binary form must reproduce the above copyright #

So the command I used to use to turn off the Active Directory password timeout is giving an error on the new MacBook Air's running 10.10.4. sudo dsconfigad -passinterval 0 The error I get is "Result of command:dsconfigad: No operation specified nor update requested"Just wondering if the command has changed?I should add that I'm looking back in the logs and this has been going on since February on various machines running 10.9.5 as well. I'm trying removing the extra sudo in the command to see if that resolves it.Gabe ShackneyPrinceton Public Schools

How would you setups FileVault 2 policy for AD joined computers so it enables all users that have currently already have logged in and for any future new users that login? Also for computers that are not AD joined but have multiple user accounts currently configured?

Background: I downloaded an application from the Mac App Store. (Skitch v1.0.7) I installed it on a recently imaged computer. I then created an installation package of the application with Composer 8.34. I uploaded the package via Casper Admin. Problem: When deploying to client computers, the first time the application is launched the user is prompted to authorize the install on this new computer using the credientials I used on my original download. Not what I want. I believe an "app store" application now stores data matching the app to the account/computer that originates the download in the application contents folder. Will we be forced to move to an iOS model for installing applications now that Apple wants us to exclusively use the app store? Has anyone seen this problem and developed a solution? Thanks in advance for posting possible solutions. -Mark

Not strictly Casper-related but posting here in the hope someone has seen this issue before…. We use the native AD plugin (bound via custom scripts) and have mapping to two AD attributes (uidNumber and gidNumber). After an initial image of Mavericks using Casper Imaging, I am able to log in to a test Mac just fine. However, since reimaging that test Mac, I’ve not been able to log in - entering my AD password has no effect. I get a spinny circle for a few seconds and am then prompted to re-enter it. If those attributes are not set, I can log in fine and a random 9-digit uid is generated. Our AD runs on Windows Server 2008 R2, and I know those attributes are populated correctly in the AD user accounts. A computer account was generated in the correct OU for our test Mac, and we've tried removing and recreating it. We have a green orb alongside our Network Account Server in the Users & Groups pane of System Preferences. I’m trying this over wired ethernet as we haven’t yet conf

I know that this question isn't directly related to Casper, but does anyone know of a way to disable the internal speakers on a system via a script or managed setting in Casper? I've been getting complaints from students that the noise levels in the computer labs are getting out of hand, so I'm trying to find a solution that forces the use of headphones without causing me a lot of grief in the process.

Hi all I'm trying to create an Extension Attribute to report back the status of a Global LaunchAgent which is in /Library/LaunchAgents When run from the user context it reports back correctly but when run as root it does not, i've gone through most of the dicussions and tried adding in ls -l /dev/console | cut -d " " -f4 then sudo -u to the logged in user but my script fu is weak. Can any one advise how to make the script below run the launchctl list command as the logged in user as an extension attribute ? Cheers,Andy #!/bin/sh agentloaded=`launchctl list | grep local.keepAlive.ADPassMon | awk '{print $NF}'` if [ "${agentloaded}" == "local.keepAlive.ADPassMon" ]; then echo "<result>Loaded</result>" else echo "<result>not loaded or installed</result>" fi

I have infront of me an iMac that has 256 Apple flash storage, but I cannot for the life of me get Casper Imaging to partition the drive and install the dual boot image we have. Is there a problem with SSD's?

Is it possible to enroll a new laptop using DEP, and then (somehow) have that laptop become managed, without me touching the device? I was told to avoid imaging, so all of the packages I need to install will be done after the laptop becomes managed. Thanks

Hello all, I am looking to remove the to startup screens Chrome shows when a user first launches the application. The "set google chrome as your default browser" and "set auto updates to run". I just want the users to get a default web page when they start the app for the first time and not these two questions. I want to set the default to "no" and auto updates "yes". Thanks

I have been reading through the various threads on managing Lync settings and gotten a lot of great information. I have gotten the automation piece in place using the script from @talkingmoose and that has worked out great. However, some of the settings we are trying to enforce simply aren't working. Most likely because I am doing something insanely wrong. ;) Some of the settings we are specifically looking to enforce/disable are the Audio Call’s, Video Calls, Idle timer, and the Lync plugin setting. The goal is that once we set these, the end user will not be able to change these settings. I don't necessarily agree with some of these settings being enforced but it isn't my call. I have opened a case with MS so hopefully I will get some guidance on that front but thought I would check in here as well. I have some screenshots below on what we want to do.

Hi everyone, Do anyone of you know a quick method to replicate your JSS DB on to a Test JSS? Thanks, Henry

Hey guys,Looking to see if anyone has any idea on how to grab a particular item from the Spotlight plist file. We are able to set the Spotlight settings via configuration profile, but now i need to use a script to check to see if the value is being managed or not. Since they seem to be in a dict, this is the part i am having trouble with. if i check defaults read /Users/$loggeduser/Library/Preferences/com.apple.Spotlight, it spits out everything. I would like to grab only the values we are looking for, { enabled = 0; name = "MENU_WEBSEARCH"; } { enabled = 0; name = "MENU_SPOTLIGHT_SUGGESTIONS"; },Here is what i have so far: #!/bin/sh loggeduser=`ls -l /dev/console | cut -d " " -f4` SPOT=defaults read /Users/$loggeduser/Library/Preferences/com.apple.Spotlight | "grab X" if [ $SPOT == "0" ] then : else jamf policy -trigger spotlight_config fi Thanks for looking.

This is happening randomly with no pattern on our AD accounts after imaging. Issues: Keychain access shows that the login keychain isn't created for anyone until the second login. The tech has to log in twice for everyone to receive a login keychain afterwards. Basically, I log in the first time and have no login keychain. I log in a second time and then everything is fine. Base image has no issues whatsoever. It's when I start installing Adobe CC 2014/2015 (no FEU/FUT) during imaging via a policy that this issues arises. I've tested ten machines and four of them did not have a login keychain. I even created a Keychains folder in the user template using Composer and that didn't work. What would be causing this issue? Only our base image has FEU/FUT, the additional packages do not. Other people having the same issue: https://jamfnation.jamfsoftware.com/discussion.html?id=7662 https://jamfnation.jamfsoftware.com/discussion.html?id=7462

I'm trying FEU for the first time but it doesn't seem to be working.Here is what I'm trying to accomplish. We just recently deployed network projectors throughout the building, I'm trying to send out profile with IP address/DNS names of projectors to Epson EasyMP Network Projection applications so when the user opens up the applications, the profile is already built with list of projectors in the building. The challenging part of this is that the projector list preferences are built within the user-level preferences folder. I ran through the usually with the composer to capture the data and I have several preferences files built into the /Users/Admin/Library/Preferences/ folder. I uploaded the DMG to the Casper Admin and checked the FEU check box. Then, created a self service policy to install the projector application with FEU check box checked from the policy as well. I ran this against the test machine from my AD account. However, the preferences files are only

We are attempting to deploy Cisco AnyConnect 4.1 but when attempting to connect we get a pop up indicating that OS X wants to use the System Keychain. Has anyone else come up against this?

We put our root certificates in the System keychain but now have a duplicate set of certs (one set is expired). Does anyone know of a way to remove certificates from the System keychain in an automated way? thanks in advance for any suggestions

On my enrolled macs if I turn Firewall ON, do i have to turn on any options for casper communication? will turning ON Firewall mess with JSSConnection? (recurring check-in, login/logout etc...)

When adding policies to the JSS Dashboard, they don't show progress - just grey circles - for active policies.Process to replicate:Edit a policyClick checkbox Show in JSS DashboardIt shows up on dashboard.When checking the Policy logs for the policy, it shows activity yet that activity isn't reflected on the JSS Dashboard. The Policy says:Completed: 0 Remaining: 0 Failed: 0I do see some policies updated with color graphs in the Policy view and when I check the non list view (block view?), yet even there the newly edited or created policies aren't updated.Is this expected behavior?

Is it possible to scope Self Service Plug-ins to specific groups? For example, I want to have a link to "QuickStart" guides for applications that are installed on specific Macs. Then scope a smart group with those apps installed, so those who do not have these apps installed won't see the link to the "QuickStart" guides

I would be interested to hear what others are using out there for this. Our current system no longer meets our needs and is antiquated. I seek to learn which systems are out there and actual Apple admins use, what they like and what they don't like. Now ideally, said ticketing system should also be able to be customized for multiple department use (such as HR/Maintenance), but that is not an absolute requirement. Thank you in advance for advice and suggestions,blackholemac