We are in the process of creating a new management account and have one small question regarding the inner machinations of the JSS: Does the JSS determine which management account credentials to use for a particular client by the mgmt account information stored for that client in it's inventory record? Thanks in advance,Ken

Good afternoon,I am having an issue with first logins with our Macbook Airs. We have a 802.1 network with WPA2 Personal encryption. When logging in for the first time we have no issues at all over ethernet - creates the mobile account and then everything is good. Once logged out, the laptop drops the WiFi - (or is connected but not pingable) and we are not able to log into new accounts. This is an issue with our roaming student laptops, as each student will have their own login and may move between computers. It is not feasible to log into them on every computer before the new year (or at least does not sound like much fun). Is there a way to keep the WiFi adapter on and connected? Any other ideas on authenticating our AD users while connected to WiFi for the first time? Thank you!

Hi all... i have been going through the procedure : https://derflounder.wordpress.com/2014/04/23/caspercheck-an-auto-repair-process-for-casper-agents/ Very complete procedure... but my results looks negative. caspercheck.sh is in /Library/Scripts/com.company.caspercheck.plist is in /Library/LaunchDaemons/ My policy is created as per the procedure and all scripts also... Nothing is returned in the extension attribute created by the procedure.... looks like no communication is done between all the scripts of the CasperCheck procedure...

I have already successfully created a netboot image using AutoDMG and CasperNBI(? spelling). Can I use that same AutoDMG image for my minimal image in Casper Suite? I see so many posts on this that I am getting so confused. I created the AutoDMG for the latest 10.10.3 installer on a 10.10.3 system.

JSS and JDS installs are 9.21. I am receiving the same error on two different Ubuntu 12.04 servers when I try to install a JDS: The SSL certificate is invalid. Verify that it is not self-signed or expired, and that the hostname matches. We just updated our GoDaddy SSL cert on our current JSS running on an Xserve, and have had no issues with machines checking in or errors when hitting the site. On this Ubuntu server, I have set /etc/hostname to jds3.myserver.org and updated /etc/hosts file: 127.0.0.1 localhost 127.0.1.1 jds3.myserver.org Running hostname --fqdn returns jds3.myserver.org This is what the setup looks like: JDS Hostname: jds3.myserver.org JSS URL: https://jss.myserver.org:8443 JSS Username: myuser JSS Password: Allow untrusted SSL certificate? (y/n): n The SSL certificate is invalid. Verify that it is not self-signed or expired, and that the hostname matches. check /usr/local/jds/logs/jamf.log for more information. The logs show: 2013-12-19 1

In case anyone else is searching for this information, I wanted to post this here, since our entire Creative Cloud deployment went down today. I know this isn't directly Casper related, but since many of us are familiar with Adobe Creative Cloud licensing and packaging, I figure having it here might help, for future reference - this is a copy and paste from what I wrote on the Adobe Enterprise Deployment forum page. First off, i want to commend Adobe Enterprise Support for responding back to me after I was on hold for over an hour and then gave up and left a voice mail. The Adobe engineer I spoke with explained that the license number we were using was a "Grand Gesture" license that was given out to most volume license users of Adobe CS6 after Creative Cloud was released. As an IT admin, my Adobe Licensing account was provided with one of these 18 month licenses that expired, even though my university had negotiated a Creative Cloud enterprise license with Adobe. Un

So were going through some testing on our macs and discovered that an individual (who doesn't have admin rights) can go into single user mode and esclate their permissions to admin. So the simple question is how do we disable a user from being able to go into single user mode. Searching on the web it referred to a /etc/rc.boot file. I don't see that file in our current build (10.10.1 and 10.10.3). I do see rc.comm, rc.imagin, and rc.netboot. So which one should I edit to disable single user mode, and more specifically - how. Is this the right file to edit, or is there another file? I'd like to avoid using a firmware password if possible at first to make life easier for users. What are you guys out there doing?

For anyone interested in updating to Yosemite, SmartNotebook 11.4 is no longer supported according to Smart Technologies. Smart officially is stating "one must upgrade to version 14.2 AND have an Advantage membership moving forward". This was not acceptable for me/us so i found this fellas workaround to restore SmartNotebook 11.4 for use in Yosemite: http://lkrms.org/running-smart-notebook-11-4-on-os-x-yosemite/

Hey Guys, I am trying to get the serial number of our thunderbolt docks with ioreg or system_profiler to have an extension attribute for the docks in Casper. So far I got this $ system_profiler SPThunderboltDataType Thunderbolt: Thunderbolt Bus: Vendor Name: Apple Inc. Device Name: MacBook Pro UID: 0x0001000F01673350 Firmware Version: 17,2 Domain UUID: 3F75FB1E-3A50-C95C-B5FC-0FF493EC3B19 Port: Status: Device connected Link Status: 0x2 Current Link Width: 0x2 Receptacle: 1 Cable Firmware Version: 1.0.16 Cable Serial Number: C4M435600SSF797A5 Link Controller Firmware Version: 0.11.0 Port: Status: No device connected Link Status: 0x7 Current Link Width: 0x1 Receptacle: 2 Link Controller Firmware Version: 0.11.0 Thunderbolt 2 Express Dock HD: Vendor Name: Belkin International, Inc. Device

I am starting to see this message when i look at my smart group of Yosemite computers. Does anyone have any information to resolve or has anyone experienced this message lately??

Why this script is removing just the last entry? tell application "rm - rf/Library/LaunchDaemons/com.vsearch.daemon.plist" "Library/InputManagers/CTLoader" "System/Library/Frameworks/v.framework" "System/Library/Frameworks/VSearch.framework" "Library/PrivilegedHelperTools/Jack" "Library/InputManagers/CTLoader" "Library/Application Support/Conduit/" "~Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin" "~Library/Internet Plug-Ins/TroviNPAPIPlugin.plugin" "Applications/Genieo" "Applications/InstallMac" "Applications/Uninstall Genieo" "Applications/Uninstall IM Completer.app" "Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client" "~Library/Application Support/Genieo" "~Library/Application Support/com.genieoinnovation.Installer" "Library/Launch

Hi all File this under strange!! I have spent some of today scripting and the script is using a policy. I have had some strange results for a couple of machines during the day and when I looked closely at the script output, it appears to be using an older version of the script which contained a glaring bug that produced a vast quantity of text including line numbers and attempts to run commands in directories it shouldn't have. As I said, glaring bug! Anyway, the script itself was updated earlier in the day and I have seen a couple of machines in the last hour or 2 run the old script. After I flushed the log they ran the newer version! Confused. I am using 9.32 in production (soon to upgrade to 9.7x) and wondered if anyone had experienced this quirk. All I can think is that the machines took so long to process the script that they actually started before the updated version was done but it seems unlikely. But possible. I am using 9.32 on Linux with a couple of JAMF Fi

Has anyone had any luck with suppressing Silverlight update notifications? Inside ~/Library/com.microsoft.silverlight.plist the UpdateMode value that can be changed from 1-(on) to 2-(off). I tried to just package up a com.microsoft.silverlight.plist file with the value set to off, but after pushing out to a test Mac I find that the setting isn't respected by Silverlight Preferences, even though the new value is set in the target's plist file. Even if I just change the value directly on the test Mac Silverlight Preferences.app won't respect the change. Any help would be awesome. I've got a few delicate-flower type users that don't want to see the notifications. :-)

I'm working on our OS X 10.10 image (my first image build after taking over the process) and all is working fine, except a policy we have created to install 25 packages is not being allowed to run to completion. We run this same policy in our current 10.9 image with no problem. The policy for 10.10 is cloned from the 10.9 policy, with the only changes being all references to 10.9 changed to 10.10. The part of the script in question that is failing: Install Standard Software Set via Policy loginfo "Installing Standard Software Set via Policy"/usr/sbin/jamf policy -trigger Imaging_${OS} & Get the Process ID of the last command run in the background ($!) and wait for it to complete (wait) SUPID=echo "$!"wait $SUPID When I check the initialsetup.log that is created during the this process I see that this policy is given less than 60 seconds to run, not enough time to put down all of the packages and install. Some do work, such as our Identity Finder pa

One of the Macbooks from our students' Macbooks trolley has become headache for us. We have tried HD permissions and other stuff, cut the long story short, we suspected the firmware and sent it to Apple for firmware upgrade and Apple did that and now we have returned this Macbook fresh from Apple store. We tried first installing QuickAdd.pkg and then tried "sudo jamf enroll -prompt" and got the following errors respectively. The installation failed. The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. Error enrolling computer: CRUD operation Error - An error has occured while creating, reading, updating or deleting a device. If this remain unresolved then we would request Apple to replace this Macbook with another one. Please note that other Macbooks and iPads are going good with imaging and etc. There are no other issues like certificate expired etc.

Sort of newbie here to scripting so looking for some help! I want to get the hard drive etc to show up on users desktops as they update to Yosemite or get a new computer with Yosemite. I'll include portion of the script below, I'm sure it's an easy fix, just need some knowledgeable eyes. !/bin/bash Initial setup script for Mac OS X 10.10.x Last modified 05.27.2015 Show icons for hard drives, servers, and removable media on the desktop /usr/bin/defaults write com.apple.finder ShowExternalHardDrivesOnDesktop -bool true/usr/bin/defaults write com.apple.finder ShowHardDrivesOnDesktop -bool true/usr/bin/defaults write com.apple.finder ShowMountedServersOnDesktop -bool true/usr/bin/defaults write com.apple.finder ShowRemovableMediaOnDesktop -bool true

Hello everyone! I have been having a bit of a challenge in the last few days with one of my Pre-Stage setups. It will hang at 'Performing Block Copy' and will force quit Imaging - it looks like this is happening when Casper Imaging is trying to erase the target drive. Also, the drive will not unmount and erase when NetBooted, which leaves me to believe there is a problem with the NetBoot Image... I have checked here for some answers, but nothing has worked so far, not even editing the rc.netboot file and adding a RAMDisk. To be fair, this (the RAMDisk) fix did work prior to updating to 8.63, but doesn't seem to be working anymore. I am really at a loss here, does anyone have any ideas about what might be causing this problem? Thanks! EDIT: Also, when updating the NBI with the RAM Disk fix in the rc.netboot file, I am no longer able to netboot any computers, the computer will immediately shut off. Prior to updating the rc.netboot file, the destination drive was mou

I'm working to get a bunch of OS X machines discoverable on my work network so that they can be managed by SCCM/Parallels SCCM Plug-In. So far the best solution i have is to physically touch each machine and enable remote mgmt, vnc, and ssh. I have a shell script using kickstart that will do the remote management and vnc configuration, but i can't figure out what command in there would also enable ssh. Here's what I have so far: do shell script "/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -allowAccessFor -allUsers -privs -all -clientopts -setvnclegacy -vnclegacy yes -setvncpw -vncpw ** -restart -agent" password "" with administrator privileges So... What is the command I can throw in there to enable SSH as well? Is there some other solution to what I'm trying to do that's much better? Thanks in advance!

Greetings i know this is less of jamf/casper issue, however we'd ran into a wall with this one. For a while now we have an issue in a couple of our offices with the combination of wifi and mac's.The symptoms: wifi connection drops, when trying to reconnect the ssid's are not visible. when inserting a usb-wifi dongle. that can connect fine to the same SSID's. when walking over to a other part of the building the ssids become visable again, and walking back the issue is (temporary) resolved. The symptoms are occurring on all kinds of mac's (air 2008 and above till current) ProRetina's till current, osx 10.8, 10.9 and 10.10. both casper imaged, and retail. ios devices running 6,7,and8) the environment: over 150+ap's multiple sites, in a WLC environment. ssid's with both 802 authentication and with wpa and without auth. all effected. Troubleshooting performed: - connected a mac to a usb wifi dongle: no further issues- bluetooth disabled, no eff

Does anybody else have issues with checkmarking updates in SUS? For one thing, when I "select all" and then hit apply, they all come back as unchecked when the page refreshes. For a second issue, I seem to only be able to checkmark 995 updates total. Any additional updates that are checked will not apply properly.

Those of you who were participating in the developer releases or public beta of Yosemite (or even the dot zero release) may recall that there was an issue with Outlook 2011 not displaying the main window if you had the disclosure triangle open to show your list of folders in your mailbox. Sad to say, the Office 2011 14.5.0 update has resurrected this issue. Outlook will launch, but the main window will not open. You can create new messages and events via the menus, but that's it. If you keep that disclosure triangle closed when you quit the application, it'll launch just fine again.

Is anyone else seeing casper imaging not correctly blessing the internal drive after imaging completes? We keep seeing (since 9.7) Casper Imaging (from netboot with the checkbox selected to reboot to target drive) after imaging completes, it then boots to a folder with a question mark (or tries to boot back to the netboot). Gabe ShackneyPrinceton Public Schools

we replaced our fleet of teacher laptops with new ones. the old teacher laptop will be going into carts for use in the classroom. we had pulled al the user/building/department info from AD, but now that they will be going into carts for student use all that info needs to be removed. thats where i hit the wall. i can fill this info in bulk, but how do you remove it? any help would be appreciated

Hi All how to manage and edit sidebar on self service? like below, how to add and remove an item on the sidebar?

I have a user that cannot receive Compressor via VPP. We are successfully using VPP with managed distribution for OS X and iOS. Recently we purchased a single copy of Compressor 4.2 for evaluation. I have created a VPP assignment, which contains just Compressor. When I scope the assignment to this user, the recalculation dialog appears. After some time, I click back onto the assignment and the recalculation has completed, however when I look in the App Store, while logged in with the user's Apple ID, Compressor is not part of the purchase history. Looking at the VPP Account itself in Global Management, the Compressor line shows Total: 1, In Use: 1, Reported: 1. If I unscope the user from the assignment the In Use number drops to 0. Meanwhile I can successfully assign Compressor to a different user. And I can successfully assign other software to the "problem" user. I have tried deleting and recreating the user, redoing the VPP invitation, deleting and recreating the assignment, an