Just wondering how everyone using web help desk is getting the data from the mobile devices to sync. We were using the API's to import the data and sync, using the sample python scripts in the JAMF SDK. However since the poodle SSL issue it looks like the python script has stopped working. Trying to now get around this issue: Any ideas?Gabe ShackneyPrinceton Public Schools

Anybody have an idea on why I keep having this policy fail? Computer check-in with no issues etc.. but when this policy runs, it fails Running 9.65File Share DP = MasterFile Sharing Protocol of Server = SMBPort = 139Use HTTP Downloads = Checked Executing Policy Cache OS X Mavericks Installer...Caching package InstallOSXMavericksInstallESD.dmg...Downloading http://casper.local/jssdist/Packages/InstallOSXMavericksInstallESD.dmg...The network connection was interrupted while downloading the package from http://casper.local/jssdist/Packages/InstallOSXMavericksInstallESD.dmg. Attempting to reconnect...Downloading http://casper.local/jssdist/Packages/InstallOSXMavericksInstallESD.dmg...The network connection was interrupted while downloading the package from http://casper.local/jssdist/Packages/InstallOSXMavericksInstallESD.dmg. Attempting to reconnect...Downloading http://casper.local/jssdist/Packages/InstallOSXMavericksInstallESD.dmg...The network connection was interrupted while downl

I am checking to see if the JSSDatabaseUtility can be launched/used/configured where the MySQL DB is located on a different server. I am working on the Mac OS X platform in my DEV environment. Right now when I launch the JSSDatabaseUtility from my DEV JSS, I get a prompt stating the path to the MySQL binaries could not be found and asks me to locate them... of course they are located on another server, so I'm kinda stuck. Trying to see what options I may have here at this point. Thanks in advance for any feedback!

Trying to make something more glamorous than it should be. I have an apple script that's fairly simple for cleaning up wifi on our workstations when our VPN client mucks DNS/Search domains. do shell script "networksetup -setsearchdomains 'Wi-Fi' empty" user name "ADMIN" password "PASSWORD" with administrator privileges do shell script "networksetup -setdnsservers 'Wi-Fi' empty" with administrator privileges Trying to make that infinitely more portable and glamorous and I reealise that I can make lists easily with something like set PORTS to do shell script "networksetup -listallnetworkservices | tail -n +2" but I'm scratching my head as to how to make my list become a string to enable buttons to accommodate various hardware models/port configs. Any help would be appreciated. And before you ask why an AppleScript, it's because we're deploying to both admins (who can elevate) and non-adm

if i have a policy that is triggered at 'enrollment complete', does the computer that is getting enrolled need to be in the scope of that policy?

Anybody used Office 2011's SP1 addition of import identity and import rge to automate importing Entourage identities/archives? I can't seem to find much in the way of syntax for those commands. I did find JAMFs solution for GUI scripting, but I would rather use the built-in scriptability of the app. Any ideas would be GREAT!

So I was working on packaging some applications and wanted to test it on a machine. I went to admin dropped the file, gave it info data. I then went into the console to create a policy for it...all worked fine. So then I opened remote and it said it can't reach the server (error 403). So I went back to the web console, I can connect to it fine and look at all the things. I then tried to open admin, got the can't reach server error again. I looked at my keychains thinking a proxy setting might be blocking it up, removed the proxy keychains and tried again - same issue. Just to make sure it wasn't a bigger issue then my machine I tried from other machines and it works fine. So any idea why my iMac is all of a sudden getting 403 error when trying to connect with admin and remote? Never seen this happen before.

I've been dipping my toes into AutoPkg lately. I've been building Java, Silverlight, and a few others that all come with handy version extensions. I noticed that the Office one returns a string of "true","false", or "Not Installed". This makes it super easy to target a group (Office out of date = true) and never have to touch it again. That'd be really handy for all those other extensions. Unfortunately, they all return the version number. That's really handy, but I'd love to modify it to be more like the Office one. That way I don't have to go update the "Out_Of_Date_Java" group's criteria every time a new version comes out. Here's what I have for my ExtensionTemplate for Java: <computer_extension_attribute> <name>Java Out Of Date</name> <description /> <data_type>String</data_type> <input_type> <type>script</type>

We are in the process of creating a new management account and have one small question regarding the inner machinations of the JSS: Does the JSS determine which management account credentials to use for a particular client by the mgmt account information stored for that client in it's inventory record? Thanks in advance,Ken

Good afternoon,I am having an issue with first logins with our Macbook Airs. We have a 802.1 network with WPA2 Personal encryption. When logging in for the first time we have no issues at all over ethernet - creates the mobile account and then everything is good. Once logged out, the laptop drops the WiFi - (or is connected but not pingable) and we are not able to log into new accounts. This is an issue with our roaming student laptops, as each student will have their own login and may move between computers. It is not feasible to log into them on every computer before the new year (or at least does not sound like much fun). Is there a way to keep the WiFi adapter on and connected? Any other ideas on authenticating our AD users while connected to WiFi for the first time? Thank you!

Hi all... i have been going through the procedure : https://derflounder.wordpress.com/2014/04/23/caspercheck-an-auto-repair-process-for-casper-agents/ Very complete procedure... but my results looks negative. caspercheck.sh is in /Library/Scripts/com.company.caspercheck.plist is in /Library/LaunchDaemons/ My policy is created as per the procedure and all scripts also... Nothing is returned in the extension attribute created by the procedure.... looks like no communication is done between all the scripts of the CasperCheck procedure...

I have already successfully created a netboot image using AutoDMG and CasperNBI(? spelling). Can I use that same AutoDMG image for my minimal image in Casper Suite? I see so many posts on this that I am getting so confused. I created the AutoDMG for the latest 10.10.3 installer on a 10.10.3 system.

JSS and JDS installs are 9.21. I am receiving the same error on two different Ubuntu 12.04 servers when I try to install a JDS: The SSL certificate is invalid. Verify that it is not self-signed or expired, and that the hostname matches. We just updated our GoDaddy SSL cert on our current JSS running on an Xserve, and have had no issues with machines checking in or errors when hitting the site. On this Ubuntu server, I have set /etc/hostname to jds3.myserver.org and updated /etc/hosts file: 127.0.0.1 localhost 127.0.1.1 jds3.myserver.org Running hostname --fqdn returns jds3.myserver.org This is what the setup looks like: JDS Hostname: jds3.myserver.org JSS URL: https://jss.myserver.org:8443 JSS Username: myuser JSS Password: Allow untrusted SSL certificate? (y/n): n The SSL certificate is invalid. Verify that it is not self-signed or expired, and that the hostname matches. check /usr/local/jds/logs/jamf.log for more information. The logs show: 2013-12-19 1

In case anyone else is searching for this information, I wanted to post this here, since our entire Creative Cloud deployment went down today. I know this isn't directly Casper related, but since many of us are familiar with Adobe Creative Cloud licensing and packaging, I figure having it here might help, for future reference - this is a copy and paste from what I wrote on the Adobe Enterprise Deployment forum page. First off, i want to commend Adobe Enterprise Support for responding back to me after I was on hold for over an hour and then gave up and left a voice mail. The Adobe engineer I spoke with explained that the license number we were using was a "Grand Gesture" license that was given out to most volume license users of Adobe CS6 after Creative Cloud was released. As an IT admin, my Adobe Licensing account was provided with one of these 18 month licenses that expired, even though my university had negotiated a Creative Cloud enterprise license with Adobe. Un

So were going through some testing on our macs and discovered that an individual (who doesn't have admin rights) can go into single user mode and esclate their permissions to admin. So the simple question is how do we disable a user from being able to go into single user mode. Searching on the web it referred to a /etc/rc.boot file. I don't see that file in our current build (10.10.1 and 10.10.3). I do see rc.comm, rc.imagin, and rc.netboot. So which one should I edit to disable single user mode, and more specifically - how. Is this the right file to edit, or is there another file? I'd like to avoid using a firmware password if possible at first to make life easier for users. What are you guys out there doing?

For anyone interested in updating to Yosemite, SmartNotebook 11.4 is no longer supported according to Smart Technologies. Smart officially is stating "one must upgrade to version 14.2 AND have an Advantage membership moving forward". This was not acceptable for me/us so i found this fellas workaround to restore SmartNotebook 11.4 for use in Yosemite: http://lkrms.org/running-smart-notebook-11-4-on-os-x-yosemite/

Hey Guys, I am trying to get the serial number of our thunderbolt docks with ioreg or system_profiler to have an extension attribute for the docks in Casper. So far I got this $ system_profiler SPThunderboltDataType Thunderbolt: Thunderbolt Bus: Vendor Name: Apple Inc. Device Name: MacBook Pro UID: 0x0001000F01673350 Firmware Version: 17,2 Domain UUID: 3F75FB1E-3A50-C95C-B5FC-0FF493EC3B19 Port: Status: Device connected Link Status: 0x2 Current Link Width: 0x2 Receptacle: 1 Cable Firmware Version: 1.0.16 Cable Serial Number: C4M435600SSF797A5 Link Controller Firmware Version: 0.11.0 Port: Status: No device connected Link Status: 0x7 Current Link Width: 0x1 Receptacle: 2 Link Controller Firmware Version: 0.11.0 Thunderbolt 2 Express Dock HD: Vendor Name: Belkin International, Inc. Device

I am starting to see this message when i look at my smart group of Yosemite computers. Does anyone have any information to resolve or has anyone experienced this message lately??

Why this script is removing just the last entry? tell application "rm - rf/Library/LaunchDaemons/com.vsearch.daemon.plist" "Library/InputManagers/CTLoader" "System/Library/Frameworks/v.framework" "System/Library/Frameworks/VSearch.framework" "Library/PrivilegedHelperTools/Jack" "Library/InputManagers/CTLoader" "Library/Application Support/Conduit/" "~Library/Internet Plug-Ins/ConduitNPAPIPlugin.plugin" "~Library/Internet Plug-Ins/TroviNPAPIPlugin.plugin" "Applications/Genieo" "Applications/InstallMac" "Applications/Uninstall Genieo" "Applications/Uninstall IM Completer.app" "Library/PrivilegedHelperTools/com.genieoinnovation.macextension.client" "~Library/Application Support/Genieo" "~Library/Application Support/com.genieoinnovation.Installer" "Library/Launch

Hi all File this under strange!! I have spent some of today scripting and the script is using a policy. I have had some strange results for a couple of machines during the day and when I looked closely at the script output, it appears to be using an older version of the script which contained a glaring bug that produced a vast quantity of text including line numbers and attempts to run commands in directories it shouldn't have. As I said, glaring bug! Anyway, the script itself was updated earlier in the day and I have seen a couple of machines in the last hour or 2 run the old script. After I flushed the log they ran the newer version! Confused. I am using 9.32 in production (soon to upgrade to 9.7x) and wondered if anyone had experienced this quirk. All I can think is that the machines took so long to process the script that they actually started before the updated version was done but it seems unlikely. But possible. I am using 9.32 on Linux with a couple of JAMF Fi

Has anyone had any luck with suppressing Silverlight update notifications? Inside ~/Library/com.microsoft.silverlight.plist the UpdateMode value that can be changed from 1-(on) to 2-(off). I tried to just package up a com.microsoft.silverlight.plist file with the value set to off, but after pushing out to a test Mac I find that the setting isn't respected by Silverlight Preferences, even though the new value is set in the target's plist file. Even if I just change the value directly on the test Mac Silverlight Preferences.app won't respect the change. Any help would be awesome. I've got a few delicate-flower type users that don't want to see the notifications. :-)

I'm working on our OS X 10.10 image (my first image build after taking over the process) and all is working fine, except a policy we have created to install 25 packages is not being allowed to run to completion. We run this same policy in our current 10.9 image with no problem. The policy for 10.10 is cloned from the 10.9 policy, with the only changes being all references to 10.9 changed to 10.10. The part of the script in question that is failing: Install Standard Software Set via Policy loginfo "Installing Standard Software Set via Policy"/usr/sbin/jamf policy -trigger Imaging_${OS} & Get the Process ID of the last command run in the background ($!) and wait for it to complete (wait) SUPID=echo "$!"wait $SUPID When I check the initialsetup.log that is created during the this process I see that this policy is given less than 60 seconds to run, not enough time to put down all of the packages and install. Some do work, such as our Identity Finder pa

One of the Macbooks from our students' Macbooks trolley has become headache for us. We have tried HD permissions and other stuff, cut the long story short, we suspected the firmware and sent it to Apple for firmware upgrade and Apple did that and now we have returned this Macbook fresh from Apple store. We tried first installing QuickAdd.pkg and then tried "sudo jamf enroll -prompt" and got the following errors respectively. The installation failed. The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance. Error enrolling computer: CRUD operation Error - An error has occured while creating, reading, updating or deleting a device. If this remain unresolved then we would request Apple to replace this Macbook with another one. Please note that other Macbooks and iPads are going good with imaging and etc. There are no other issues like certificate expired etc.

Sort of newbie here to scripting so looking for some help! I want to get the hard drive etc to show up on users desktops as they update to Yosemite or get a new computer with Yosemite. I'll include portion of the script below, I'm sure it's an easy fix, just need some knowledgeable eyes. !/bin/bash Initial setup script for Mac OS X 10.10.x Last modified 05.27.2015 Show icons for hard drives, servers, and removable media on the desktop /usr/bin/defaults write com.apple.finder ShowExternalHardDrivesOnDesktop -bool true/usr/bin/defaults write com.apple.finder ShowHardDrivesOnDesktop -bool true/usr/bin/defaults write com.apple.finder ShowMountedServersOnDesktop -bool true/usr/bin/defaults write com.apple.finder ShowRemovableMediaOnDesktop -bool true

Hello everyone! I have been having a bit of a challenge in the last few days with one of my Pre-Stage setups. It will hang at 'Performing Block Copy' and will force quit Imaging - it looks like this is happening when Casper Imaging is trying to erase the target drive. Also, the drive will not unmount and erase when NetBooted, which leaves me to believe there is a problem with the NetBoot Image... I have checked here for some answers, but nothing has worked so far, not even editing the rc.netboot file and adding a RAMDisk. To be fair, this (the RAMDisk) fix did work prior to updating to 8.63, but doesn't seem to be working anymore. I am really at a loss here, does anyone have any ideas about what might be causing this problem? Thanks! EDIT: Also, when updating the NBI with the RAM Disk fix in the rc.netboot file, I am no longer able to netboot any computers, the computer will immediately shut off. Prior to updating the rc.netboot file, the destination drive was mou