Still very new to Casper Suite, but I was looking to restrict apps like the App Store on all our managed computers. I have the App Store process set to be killed, but it doesn't seem to be instantaneous as I was hoping it would be. It takes a couple seconds to kill the app and if I try to reopen it the app reopens before it closes again after a couple seconds. When we tested this in the Jumpstart it seemed nearly instantaneous. Any suggestions?

I'm relatively new to JAMF and we didn''t cover any imaging info in my CCT course. Alas, I am tasked with building a new image for 3000+ Macs over the next few weeks. Joy. I'm building the new image based on 10.10 and I'm having a lot of problems getting the newly imaged Macs to auto join wifi and bind with AD. Any insight would be appreciated. I'm using the wifi script in the "scripts" section of JN (https://jamfnation.jamfsoftware.com/viewProductFile.html?id=135&fid=749) and I'm setting up AD in the "Directory Bindings" section of JSS. Both of these items are included in the imaging configuration along with the custom (though simple) base OS 10.10 image. When imaging MBA's with this config, they don't join wifi or bind with AD (even over the tbolt ethernet adapter). What's the trick? Any ideas?

We'd like to take a bunch of old Macs we recently replaced with new ones and re-image them with a very basic OS in preparation to donate or sell. If we could use the Casper Imaging to do this, that would speed things up for us, but I can't find a way to image with the barebones image I created without the JAMF files being automatically installed at the end of the imaging process. Is this possible to do?

where has the resource kit download dmg gone?

I created a policy to install Xerox Printer driver, and for the Trigger I set it as Custom and in the text box i entered TESTXeroxDriverCustomTrigger for its name, it will run once per computer. This is to TEST at this point, so I scoped it to ONE iMac I want to test it on. I want to create a second policy that will go into Self Service that installs a mapped xerox printer. Instead of putting the xerox print driver in this same policy I will call the Custom Trigger I created earlier. Since I have 4 xerox printers using the same driver I don't want each policy to keep installing the driver each time. Where in the Second policy do i enter the 'jamf policy -trigger TESTXeroxDriverCustomEvent' command ?? Can I put it in the payload 'Files and Processes' --> 'Execute Command' ? or create a 1 line script with that command and add the script to this policies 'script' payload? This is how I am thinking it will work and want it to work;

With 10.10 I've started to notice that my username aliases for AD mobile accounts seem to randomly vanish. We recently made the switch for our AD accounts to be namespace forest to append the domain at the start of the username to fullfill a request from our network department to help out with BYOD filtering. To prevent having our users have to do DOMAINUN, I made a script that runs on first login to add their plain username as an alias. Everything was working great up till 10.10.3. Has anyone else run into this? Or knows of a cleaner way to go about this, I'd love to hear it. Thanks.

Hello! I am needing to push out the 10.10.4 update to computers via a policy. I will be using the non-combo update since these are running 10.10.3 currently. I was wondering what is the best setup and if anyone has done this yet. Is is safe for me to download and drop the PKG from Apple right into Casper Admin? Thank you for any advise!-Thomas

I am attempting to bind my machines in AD while using Casper Imaging. I have a bind job that works just fine with any other operating system. But, for some reason, Yosemite refuses to do so. I have also created a Configuration Profile to accomplish this task and that works at times. But, not always. Has any one else encountered issues binding Yosemite machines to AD using Casper Imaging? If not, what is your workflow? Thanks!

Hi All, I am trying to manage the JSS backup utility via Mac OS X Screen Sharing. With Screen Sharing, everything is working as normal, except for when I open the JSS Backup Utility, nothing displays in the GUI window. It is blank. It also shows blank when I try and open the Java settings in the Mac System Preferences. Viewing directly from a monitor connected to the server, it is fine. Any ideas? Thanks! -Emily

Thought you could get rid of me!!!! We are starting a new Mac development project here and I have been tabbed to run it through its course. Feels good to be back dealing with a familiar project!

Hello JAMF! At the moment we have about five devices in our JSS, before we get to big we would like to move the JSS to Server 2012. The part I'm slightly confused about: Our current URL is https://jss.domain.more:8443. Can I install the JSS on Windows, set it up with the same URL then shutdown the old JSS without it causing problem? Or will two URL's that match cause a problem? Thank you for reading!

I am attempting to add an active directory account to all of our Macs using the Local Account task in a policy in JSS. It adds the account fine on the mac but only adds it as a standard user, despite the fact I checked the box to allow the account to administer the computer. If anyone else has had this issue, I would greatly appreciate any help available.

I have file vault 2 computer configuration going on computers. User logs out and gets prompted to enter password for file vault 2 to turn on et.... I have a smart group with the criteria: FileVault 2 Individual Key Validation is 'valid' the only computer that shows up in this group is a single computer running 10.9the computers running 10.10 do not show up in this smart group. has anyone else encountered this ?

I'm wondering what everyone's thoughts are regarding whether UPS units are enough to protect sensitive electronics such as Mac Pro towers, iMacs and server room equipment. A couple of weeks ago I was researching UPS systems to replace an aging Belkin UPS of mine. With this UPS I am protecting a 2010 Mac Pro and RAID. I read that UPS systems don't really provide much power protection beyond that which a $30.00 hardware surge protector would provide - they just offer protection from data loss caused by improper shutdowns. As usual I settled on an APC BackUps Pro 1500. Now fast forward a few days to a client of mine. They have had a few lightning strikes in recent weeks that have caused some big disruption. The phone system needed to be rebooted. Their Fiery was effected to the point that the technician thought it might need to be replaced, but in the end it came back to life. And now two brand-new Mac Pro towers have gone schizophrenic. One to the point that Apple is go

The additional character in 10.10 has broken another script we use, but I'm not sure how to fix this one due to my limited scripting skills. I tried to remove the if statements referring to OS type since we have nothing older than 10.7 in use, and even they will be gone shortly, but I just ended up breaking the script in different ways. The unmodified script that breaks on 10.10: #!/bin/bash AP_NAME="NETWORK" AP_SEC="WPA2E" INDX=0 AIRPORT="" ALLINTERFACES="" IFS=' ' SW_VER=`/usr/bin/sw_vers -productVersion` if [ `echo "if(${SW_VER%.*}>=10.7)r=1;r"|/usr/bin/bc` -eq 1 ]; then APNAME="Wi-Fi" else APNAME="AirPort" fi # # Look for AirPort interface # for intf in `/usr/sbin/networksetup -listnetworkserviceorder | grep "^(H"`; do IFS=':,)' set $intf if [[ ($2 =~ ${APNAME} ) ]]; then AIRPORT=$4; fi done if [ `echo "if(${SW_VER%.*}>=10.6)r=1;r"|/usr

So this happened a few version ago & I was hoping it would just fix itself. The Self Service Description of all policies has gone misaligned. The close button is off in the upper right corner. Is there a way to reinstall the Self Service on the jss or edit some css etc...?

Has anyone been able to successfully connect to the JSS web interface using Mac OS X 10.11? We are unable to connect to the JSS via the web or when using Apple Configurator 2. Based on the error messages we are receiving it looks like the JSS does not adhere to what Apple has deemed as "best practices" for web security. I'm sure JAMF is working on this, but it makes it very difficult to test the upcoming releases. From Apple's technote on App Transport Security: App Transport Security is a feature that requires secure connections between an app and web services. The default connection requirements conform to the best practices for secure connections. Apps can override the default behavior and turn off App Transport Security. App Transport Security is available on iOS 9.0 or later, and on OS X 10.11 and later. and a little further down they outline what they consider best practices: • TLS requires at least version 1.2. • Connection ciphers are limited to those th

Hello, I need to gather Info on all " *.nsf files Lotus notes" on every mac. I want to be able to get full path, size, dates. They usually reside in /Users/Library/Application Support/IBM Notes Data/, but I want to do this for every user and then be able to run a report. Is this something I should create an EA or policy with a script maybe both? Thanks In advance. Chris

Has anyone noticed that as of 10.10.4, it is no longer possible to run the defaults write command to enable Secondary Mouse Click?? I have a login script that runs the command: sudo -u $3 defaults write com.apple.driver.AppleHIDMouse Button2 -integer 2 This has worked on all OS X versions so far however not currently working on 10.10.4. Its an interesting error as the Sys Prefs GUI displays that button 2 is set for Secondary Click but it is not working. If you go into Sys Prefs and manually change the option then put it back to Secondary Click, all is well however this is not an option when managing many hundreds of Mac's. I would be very interested to hear if anyone else has discovered this and of course if someone has a fix?

Dear JAMF friends, I wrote a script which users can run via the selfservice/policy. This script takes a long time to finish because i need to fetch several GBs from a server. Since there is some waiting time involved i'd like to give my users a popup notification like, 'your data is downloading', 'your data is extracting'. The jamf binary has those capabilities because it's able to give the cool transparent popups, and it would be awesome to use those in my script. Can give anyone an enlightening hint? Many thanks :)

Hey all, I'd like to be able to wipe a computer and start fresh with a new user, however I keep running into issues where policies that have a 'once per computer' execution frequency don't get triggered due to them being triggered before the wipe. I can't delete the computer in the jss because I need to preserve logs and any data attached to the physical machine, like purchasing info. If I use 'Once per user' I'm worried about running into conflicts where a single user has multiple computers. I don't want to clear logs individually because that is not a scalable solution. Get my drift?

Hi all, At School we have 2 Mac Labs for Art/Design with Epson IP Scanners. Currently, after imaging the lab, I need to manually add the scanner settings using a Local Admin Account. I'm looking for a .plist somewhere that stores the scanner details so I don't have to setup 40 machines with scanners every time I re-image the labs (currently every 3 months). The preferences must be system level as they carry across users, yet I can't find anything in /Library/Preferences or /System/Library/ Does anyone know where I can find such a plist or something I can package up to add to the imaging process so I can do zero-touch imaging? I'd like to avoid capturing a separate image if possible. Thanks in advance

I'm trying to create smart policies for distributing software packages based on location. I have a main office that handles about 80% of our total employees that sits under a single static IP address, perfect candidate for a network segment. I also have a few dozen remote users that have constantly rotating IP addresses. I'd like to be able to set policies for software distribution that says if you are on IP 1.1.1.1, use the local distribution point. All other IP addresses, mostly unknown, should use our cloud distribution point. I've been unable to set Network Segments for IP ranges, or 'All IPs but 1.1.1.1'. Is this possible? What other work arounds exist if it isn't?

I am new to JAMF and will be attending training soon, but I want to get a head start on getting setup on the Casper suite. I have read through a lot of documentation and forums, but there are still a few things puzzling me. First I have this issue, I created a Configuration Profile to bind my computers to AD, which appears to work fine, except the 'Namespace' option that I configured is not being applied to my machines. I can manually change the Namespace on my clients manually with a dsconfigad call, but I don't think I should have to. My second issues comes from troubleshooting that issue, I cannot find any logs that provide any useful information as to why my profile is applying all but that one setting. The impression I get from forums is that Casper does not currently have very good client logging capability. Is this accurate? Finally, from this issue, I am curious if people are more using Policies, to bind their clients, or Profiles?

We're starting to get reports of some machines failing to be able to connect to the internet after installing the 10.10.4 Delta update. One of the people affected is my boss, whose machine somehow started dying in the middle of our team call. sudo killall -HUP mDNSResponder returns a "no such process" error;ps -e | grep mDNSResponder shows no process running on his machine, whereas on mine it shows /usr/sbin/mDNSResponder. Is anyone else seeing this? This is potentially very bad for our people...