I have a policy that creates a local admin and filevault2 enables it. It works fine but the picture I try to setup for the account is not getting assigned. Instead I get the default picture of a 'silhouette' of a person. 9.51 this is what i have tried in the picture location text box. None of these have worked, no picture of Soccer.tif "/Library/User Pictures/Sports/Soccer.tif" /Library/User Pictures/Sports/Soccer.tif /Library/User Pictures/Sports/Soccer.tif

I'd like to be able to Netboot around 50 machines at a time but for some reason we can't boot more than 11 at a time. Sometimes we boot a few more than 11 but never more than 13. 11 seems to be the norm. When we attempt to boot more than 11 it looks like their going to work but then they eventually just reboot to the internal HD. Any ideas? - jamie

Hi all,I'm facing an issue for the Macs of my company.I need to set up the network service order for the different interfaces.The main goal is to setup the interfaces as follow:1- Ethernet (built in, Thunderbolt or USB)2- WifiBasically I need to set up as primary interface any Eth connection detected and as secondary the Wifi. All the others can follow. Does anyone has a solution/suggestion for this?Thanks everybody. Cheers,Jack

I've been trying for a few weeks to implement sep as a self service item. Its working however, it never comes up with a managed client. Has anyone else ran into this problem?

Since I'm on my quest to revoke admin right from the users at my workplace I have to go through all applications and set them to not update or update themselves. Now I'm wondering how you manage the constant Adobe XI Pro updates? Anything that'd make this less of a hassle would be appreciated!

There's not a lot of documentation, or current discussion, about the Restore partition feature. I've created a restore image, made an OS package out of it with composer, uploaded that to my JDS, and in my test configuration I've setup a partition for the Restore partition. The physical drive is 750GB, my restore partition image is about 10GB. I have the format as JHFS+, Make a restore partition is checked, reimage the partition is checked, and append a name to the partition is checked. I've set the partition size up to 25GB, and the Maximum percentage from 5% (37.5GB on this drive) up to 100%! The imaging gets all the way through, but fails at the end with the same message, not enough space. What the heck?

Okay, I just know I'm missing something simple. How do I get something just on the current user's desktop? I can put it on all user's Desktop, and in the User Template folder. But I need to put a file just on the current user's desktop. :- I guess I could put it in /tmp and use a post-install script to move it to the current user's desktop. Is that the best option?

We're using 'Featured' as a flag to the users that this is an important update. We have self service policies that use smart groups to display updates to apps for the users to download. We don't push packages to our users since we just can't be sure what their internet is, or what they're doing, etc - we can if it was insanely critical though. I've edited the notifications.png and notificationsFeatured.png files so it has a red banner and the word "Important". I've replaced the original files and changed the permissions on them (trying to troubleshoot). And I've restarted apache. But my self-service app still shows the blue banners when I launch it. What else am I missing. I guess I could create a new war file, blow away everything, and have Tomcat repopulate everything? And I know I'll have to replace these files with each JSS update.

Hello, After imaging a Mac with Casper I receive this message once I boot the Mac to the desktop. I can not figure out what is causing this error message to pop up. You can click ok and it will go away for a while but will come right back. Has anyone else here seen this error message before and know what is causing it? OS: [-] Yosemite (10.10.4) Software installed during imaging: [-] Self Service[-] MS Office 2011 (Installed on base image)[-] Citrix Online Plug-In[-] Java JRE-8u45[-] Java For OS X 2014-001 Thank-you, -Anthony

I know this is an odd question, but I hope someone out in the JNation can assist. I am trying to setup a lab station build. On this build people login against our LDAP to a locked down profile. When they logout the profile is deleted. The hiccup I am having is that our LDAP doesn't have a UniqueID to map to. I was hoping to map every user who logs in to #601 or something. What I need to know is how to I flush that record during logout so the next user can login using the same UniqueID? I assume I have to run some sort of dscl command before I delete the home folder. Any help would be greatly appreciated!!!

I just got the NetBoot appliance up and running. Everything looks good from the appliance side of things; subnets are setup right, the image is uploaded (and named without a space in it), but I'm getting a kernel panic every time I try and boot a Mac from the server. Any ideas?

Still new to the Casper Suite. Trying to restrict the Photos app and was able to successfully kill the app via restricted software, but I see the Photos Agent still active in Activity Monitor. I tried creating a separate restricted software entry for the Photos Agent, but it keeps running for some reason. I've done the jamf manage terminal command to ensure it's updated. Any reason to think that the Photos Agent is necessary to the OS given that it's now baked into 10.10.4 Yosemite? See below:

I'm new to writing scripts in OS X. I need to copy a file (or preferably an alias) to the user's desktop. It is our AUP (in PDF form) that the board has decided needs to be on the desktop. I want to set it up as a script so if the user deletes it, I can push it back out via every15.Any help would be great fully appreciated. Eric

Only admin user ---- during imaging.. get error to reset to default but it never works.. cannot save any new application preferences ~library/application support get access denied. Set up machine add to domain login domain user twice and set as admin.. Install a string or separately in Self service works for that users.. But Chrome and firefox cannot access application support folder so cannot use Chrome or Firefox. 3.Same as no 2 but move to a department called install that has policies set to auto trigger instead of using self service .. this works on the domain user but support then cannot use FireFox or Chrome. I really want the settings to work. I created the apps using composer.. Used snapshot and created dmg.. For the Chrome creation I just dragged and dropped.

Recently, our organization has undertaken an effort to replace all SHA-1 SSL certificates with SHA-2. Our Casper servers in test and production are on the list. Concurrently with this, I observed that our Casper sites with SHA-1 certitificates would not open at all in Firefox 39 (current release) or in the Safari 9 beta. Both reference being unable to create a secure connections, with the Firefox error being more verbose (see picture). My guess was upgrading the SSL certs to SHA-2 would address this issue, but it hasn't. Our certificate vendor is Comodo/InCommon and I imported their root CA, intermediate, and obviously the one for Tomcat into a new keystore. Has anyone gone through this process and have anything to share? I am going to engage with our security folks as well but wanted to inquire here first. Thanks,Bryan

Still very new to Casper Suite, but I was looking to restrict apps like the App Store on all our managed computers. I have the App Store process set to be killed, but it doesn't seem to be instantaneous as I was hoping it would be. It takes a couple seconds to kill the app and if I try to reopen it the app reopens before it closes again after a couple seconds. When we tested this in the Jumpstart it seemed nearly instantaneous. Any suggestions?

I'm relatively new to JAMF and we didn''t cover any imaging info in my CCT course. Alas, I am tasked with building a new image for 3000+ Macs over the next few weeks. Joy. I'm building the new image based on 10.10 and I'm having a lot of problems getting the newly imaged Macs to auto join wifi and bind with AD. Any insight would be appreciated. I'm using the wifi script in the "scripts" section of JN (https://jamfnation.jamfsoftware.com/viewProductFile.html?id=135&fid=749) and I'm setting up AD in the "Directory Bindings" section of JSS. Both of these items are included in the imaging configuration along with the custom (though simple) base OS 10.10 image. When imaging MBA's with this config, they don't join wifi or bind with AD (even over the tbolt ethernet adapter). What's the trick? Any ideas?

We'd like to take a bunch of old Macs we recently replaced with new ones and re-image them with a very basic OS in preparation to donate or sell. If we could use the Casper Imaging to do this, that would speed things up for us, but I can't find a way to image with the barebones image I created without the JAMF files being automatically installed at the end of the imaging process. Is this possible to do?

where has the resource kit download dmg gone?

I created a policy to install Xerox Printer driver, and for the Trigger I set it as Custom and in the text box i entered TESTXeroxDriverCustomTrigger for its name, it will run once per computer. This is to TEST at this point, so I scoped it to ONE iMac I want to test it on. I want to create a second policy that will go into Self Service that installs a mapped xerox printer. Instead of putting the xerox print driver in this same policy I will call the Custom Trigger I created earlier. Since I have 4 xerox printers using the same driver I don't want each policy to keep installing the driver each time. Where in the Second policy do i enter the 'jamf policy -trigger TESTXeroxDriverCustomEvent' command ?? Can I put it in the payload 'Files and Processes' --> 'Execute Command' ? or create a 1 line script with that command and add the script to this policies 'script' payload? This is how I am thinking it will work and want it to work;

With 10.10 I've started to notice that my username aliases for AD mobile accounts seem to randomly vanish. We recently made the switch for our AD accounts to be namespace forest to append the domain at the start of the username to fullfill a request from our network department to help out with BYOD filtering. To prevent having our users have to do DOMAINUN, I made a script that runs on first login to add their plain username as an alias. Everything was working great up till 10.10.3. Has anyone else run into this? Or knows of a cleaner way to go about this, I'd love to hear it. Thanks.

Hello! I am needing to push out the 10.10.4 update to computers via a policy. I will be using the non-combo update since these are running 10.10.3 currently. I was wondering what is the best setup and if anyone has done this yet. Is is safe for me to download and drop the PKG from Apple right into Casper Admin? Thank you for any advise!-Thomas

I am attempting to bind my machines in AD while using Casper Imaging. I have a bind job that works just fine with any other operating system. But, for some reason, Yosemite refuses to do so. I have also created a Configuration Profile to accomplish this task and that works at times. But, not always. Has any one else encountered issues binding Yosemite machines to AD using Casper Imaging? If not, what is your workflow? Thanks!

Hi All, I am trying to manage the JSS backup utility via Mac OS X Screen Sharing. With Screen Sharing, everything is working as normal, except for when I open the JSS Backup Utility, nothing displays in the GUI window. It is blank. It also shows blank when I try and open the Java settings in the Mac System Preferences. Viewing directly from a monitor connected to the server, it is fine. Any ideas? Thanks! -Emily

Thought you could get rid of me!!!! We are starting a new Mac development project here and I have been tabbed to run it through its course. Feels good to be back dealing with a familiar project!