I have a bit of a head scratcher that I'm hoping people may be able to assist with. Attempting to set a default desktop background in my lab. Created a policy that deploys a package with desired image and a python script. It is set to run once on recurring check-in. All machines report that the policy has run w/o problem. However, none of the machines have taken the new background. The package has been unpacked, as the images are in /User/Shared as I requested. If I flush the machine from the list, go to the physical machine and run 'sudo jamf policy' from the terminal, the script runs just fine, I get a new background, and everything is happy. Except me, because I don't want to walk around and touch every machine. If anyone has any thoughts, I'd love to hear them. Happy to provide any further information if it is helpful.

Hello all, Does anybody know how I can disable the computer to computer networks with either a script or mcx setting? Thanks,

Hi, We have implemented Casper as our imaging and update solution option about 1 week ago and I am learning to drive it but having a few issues that i cant find clarity around so I thought id post a question and would really appreciate anyone taking the time to get back to me. When we implemented Casper we were taken through the composer and had a lesson on creating dmg and pkg's. We had a clean machine and downloaded the latest version of flash and installed it before opening the composer and creating the dmg, This was then dragged into the Casper Admin application and saved. I then created a policy that included the flash dmg created in composer to scope to only my test machine and all went well. The dmg installed correctly. I then tried to simply copy the latest java update dmg into the admin app and follow the same steps but i notice that the java update doesnt install and it is simply copies to the hard drive of the machine in the scope - what am i doing wrong here? Im th

Hi all some input if possible please We need a way to send out emails to all our Mac users, i'd like to use the method ofchoosing Action > Send Email from a smart group but this doesn't give me the option of including attachments (please correct me if i'm wrong and you can add attachments, i'd like to be wrong!) I'm looking at a way of getting the email addresses from the smart group All Manage Clients,i've exported the web page to a pdf so i have all the addresses in text form. Automator has a PDF to text action which will produce an rtf from the pdf.Can anyone suggest a way of extracting just the email addresses from the pdf or rtf ? or point me to another way to create a mail group from the JSS ? Thanks!Andy

Hello! We just created a new Yosemite image. I just replaced 10.10.2 with 10.10.3. The images here are all basically identical except for a few minor items. However, our Yosemite image refuses to bind to AD while our Mavericks image continues to work perfectly. I am using the same bind for both. I can manually bind the Yosemite machines once they are imaged, but that defeats the point of having it in there in the first place. Without the bind, no profiles are pulled down. Also, the machines are not enrolling in JAMF probably for related reasons. I'm stumped. I'll redo the 10.10.3 DMG if I have to since it's the only variable, but I don't want to if it's not the problem. Any advice would be greatly appreciated. :) PS: I'm looking for logs on a local machine after it has completed its image process. Do they exist there or on the JSS server? Thanks,SGN

We've recently changed our URL for our JSS from a .local address to a .net to enable us to use a third party cert for our external JSS. However, as part of this the URI for the PKI is not available externally. To enrol externally it needs the CA Authority cert which it can't access so the enrol fails. I'm trying to look at ways to edit the QuickAdd with a preflight and: jamfremoveFrameworkThen install the CA (CN=CompanyName (London) JSS Built-in Certificate Authority.pem Has anyone else had any luck with this, or any ideas on how to make this better? CheersJonny

I'd like to add a public cert to our JSS so that when users enroll their machines they don't receive any SSL errors. The JSS has about 115 machines in it at this point, but we have not implemented any Configuration Profiles as of yet. I assume this has been done before but I wanted to be know before hand if this would break things horribly. Aside from the MDM portion, has anyone done this before and noticed any major issues? The server being used is 2012R2. Thanks!

Hey folks, We recently switched from our default builtin self assigned SSL certificate to a properly signed certificate from an external CA. I created a policy which would update the JSS Url on all of our clients, as follows. defaults write /Library/Preferences/com.jamfsoftware.jamf.plist jss_url https://casper.domain.com:8443 What else do i need to do, if anything? One thought is the MDM profile. Does this need to be deleted and reapplied? If yes, what does that actually look like? Is it asking each user to re-enroll, or can i manage it completely unnoticed over ssh or some other remote management tools? The reason i ask about MDM, is because in system preferences, the "server" url is still the old one.. AND i suspect some of my smart groups are not updating properly, potentially, because of this also.. So what is the best practice, and next steps when changing the JSS Url?

Casper Team, I have a policy that needs to put files in the following locations. /Library/Fonts/System/Library/User Template/English.lproj/Library/Preferences//System/Library/User Template/English.lproj/Library/Preferences/Adobe InDesign/Version 7.5/en_US (Adobe InDesign/Version 7.5/en_US is a folder that I need to be created during the policy execution) I used the Disk Utility and Composer to create a DMG that contained the files but when the policy is executed none of the files are copied. I created a DMG that puts files in the /Users/Administrator/Desktop and that works fine. Does anyone know how I can put files in the following locations? We have different departments that need custom images. Thanks!Enzi Jauregui

Hello everyone, I'm curious as to why my Adobe applications are failing on HTTP download, I'm currently testing the deployment of nine Adobe CC applications. It works fine when installed during imaging, individually in policies or using self service. But, running a policy that kicks off at startup/recurring checkin to 20 iMac's makes the installer fail with the error: Downloading http://ipaddress/CasperShare/Packages/AdobeDreamweaver_Install.pkg.zip... Installing Adobe Dreamweaver... Installation failed. The installer reported: installer: Package name is AdobeDreamweaver installer: Upgrading at base path / installer: The upgrade failed (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.) The policy consists of 17 applications, and only the Adobe applications fail. Everything else installs fine. Basically, it works fine every other way besides using it in a mass policy. Any suggestions?

Does anyone know what interval the JSS regularly checks in with an AD server to aggregate updated lists of users and groups? Or is the connection persistent/on-demand? In our environment our search base is set pretty wide, e.g. "DC=pretendco,DC=net", but when a member of our directory services team moved several groups from one OU to another, we could no longer use our AD accounts to login to the JSS until he moved them back. Any thoughts on this?

SCENARIO 88 x iPad Air (1 grade level)each with an average of ~10 to 12GB usageuse single iCloud account with 1TB space for backup every single app has license for each device (via VPP spreadsheet)we configure 88 devices with same iTunes/iCloud account so that we don't need to push newly purchased app thru MDM. new apps automagically appear via "auto download" feature of iTunes Store BACKGROUND:We used to configure each iPad with their individual iCloud account, but the free 5GB is not cutting it. Most of the iPads keeps displaying a pesky warning that iCloud has ran out space. Question:For iCloud backup, is there a documented hard limit to the max number of devices you are allowed to associate with a single iCloud account? or the limit would simply be the available iCloud space? Is there a better way?

I am building out a laptop one-to-one program and am using mobile accounts (AD). Does anyone know if it is possible to automate the setting that allows only a specific user to create a mobile account? I would Love to be able to set the system to allow only the first mobile login, then lock it out. its a bit much to do it in the GUI for 700 macbook airs: System Preferences/Users & Groups/Login Options/Allow network users to log in at the login window/Options/Only these network users:define the user any help appreciated :-)

Hello, folks - Trying to set up some HP printers on new or re-wiped computer installs - in this case, HP5200 DTNs and an HP p3015. Also, in our environment, we are using DNS names via IP printers - LPD. Not sure what the best way to go about this is, but here's what I've tried:1) Snapshot an install and update of the printer, then deploy this as the driver, followed by printer captured by admin. Errors out. 2) Install driver package from Apple (https://support.apple.com/kb/dl907?locale=en_US), followed by printer captured by admin. Complains that printer is installed incorrectly, requires download to fix it, but then works. But, the idea is to have it work out of the gate. 3) Checked for drivers from HP - nope, they are handled by Apple update. Rather than continue to spin my wheels, I thought I'd check in and see what folks are doing for print drivers that are handled via Apple updates.

See attached image. Chrome is leaving a trail of odd entries for applications for me. Is anyone else experiencing this? This is under the computer >> Inventory >> Applications

Due to bureaucracy, my work environment has two completely different JSS installations set up. They don't really affect each other most of the time. Our JSS only has the network segments our department uses put in it. There are several other segments that may be used by the other JSS, but I have no idea which ones are in their JSS. There is a package that may need to run only while on our campus. Our network segments won't cover every possible building the machines we manage may be in. If I make a network segment(no default netboot/distribution point) that covered a network segment in the other JSS, would it interfere with the other JSS? I don't want to break their imaging or distribution to make one of our packages install more easily.

Hi everyone, I'm in the final stages of testing our 8.73 production database in a Casper 9.3 dev server. There are a few gaps post migration like no custom MCX keys being migrated or a few settings getting reset which can all be resolved with some manual reconfiguration. In testing I noticed the self service app has a key difference in version 9 from 8 in how it displays policy descriptions. I noticed V9 isn't able to display dot points with return character values. We have a quite a few descriptions setup up this way to highlight the features of the app the user is about to install or note any warnings before they run a policy. To give an example of this, here is what Skype in our self service looks like in version 8 external image link ...and what it translates too after migrating too version 9 external image link Now i've looked around JAMF Nation to see if any early adopters of Casper 9 reported similar issues last year but couldn't find anything. Being t

Hi All I was trying to deploy a chrome package to the whole company, but unfortunately we found after the deployment a new home directory was added under /Users on everyone's Mac. how can i remove this home directory?for exapmle, the home directory is /Users/test i created a shell like the following !/bin/sh rm -rf /Users/test i tried this shell, can remove /Users/test by inputing sudo ./deleletestdirrectory.sh locally, but none of them got removed on JSS. this is kind of urgent, could someone help on this ? thanks so much

Hi All,I'm fairly new to casper, but it was my understanding that after imaging (using pre-stage imaging) that configuration profiles should be pushed out automatically. However after we image our computers can sit there and will never get there configuration profiles. i can manually 'sudo jamf manage' to get them to apply to the computers but it would be nice for them to apply with zero touch. Currently have the computers in a a department and have the config profile scoped to that department. example below

to give users a choice to install either Mavericks or Yosemite.can I have both Mavericks and Yosemite self service upgrade policies at the same time? I currently have about 20 computers with Mavericks already cached, if I add this same computer group to now get Yosemite cached, will they interfere with each other? If I remove Mavericks from Self Service, and add Yosemite, what happens to the computers that already got the cache of Mavericks? Will it interfere with Yosemite caching and installing?

Hi y'all, I'm considering a modular approach to the Creative Cloud apps, and I recently discovered that running the uninstaller (created by Adobe CCP) disassociates the device from the license in the Adobe Portal, deactivating it. That's great, except what if I have multiple packages in Self Service (say, one for video production and one for web design)? Would uninstalling one, deactivate the Creative Cloud license for both? Has anyone found themselves in similar waters? It's safe to assume we are only interested in the full Creative Cloud license (all of the apps) for this example. Thanks!

I have a user level configuration profile that is intended to restrict system preferences so that students cannot access many of them. However this profile is applying when I login as the local administrator. Any idea why this might be happening. My Configuration Profiles looks like so: 1 Restrictions PayloadLevel set to: User Level Scoped to Student computers and student LDAP groups. Is there anyway to add an exception to a local account... shouldn't the local account be an exception by default since it's a user level profile?

Hi All, While wondering about a way to automated the removal of departed users from casper I wrote a script that uses the REST API to accomplish that.It relies on the python-jss module and finds all users without a computers assigned to them and removed them from the JSS. Also sends out an email with a list of users that were deleted.Feedbacks are welcome as always.Cheershttps://jumpt.wordpress.com/2015/05/09/automate-users-removal-from-casper-via-rest-api/

I have a Base OS configuration that has 10.10.dmg and some basic .pkgs to install and also a RecoveryHD 10.10 configuration that just contains the recoveryHD.dmg. in the Base OS configuration I configured the 'partitions' tab as follows; partition name: recovery hd partitionsize: 1GBmaximum partition of drive: 100%format: journaled HFS+make the partition a restore partition: UNCHECKEDconfiguration: RecoveryHD 10.10re-image the partition if it already exists: UNCHECKEDappend to computer name: LEFT BLANK my question is; since the configuration settings for the BaseOS configuration has the partition tab configured with the recoveryHD configuration, when the Base OS configuration runs, will it 'call' the 'RecoveryHD 10.10' configuration to create the recovery hd on the computer being imaged?? (along with creating the BaseOS partition) or do i need to add the recoveryHD.dmg into the BaseOS configuration? does the Recovery partition and the Resto

Hello Jamf Community, I wanted to ask if there is a way to display, for example, Usernames or other attributes in the JSS computer search overview. E.G, if you look for all computer objects, without any definitions, it would be great to display the username in a different column and not only the computer name itself. Is that possible or is there any feature request for it?