I need to delete the following folder. /Library/StartupItems/ES1000Service Can someone help me out with creating a script to do this? The ones that i have tried do not seem to work. Thanks,Jim

Hoping someone can help me out with this... The background: We run our 9.7.2 JSS on a 2008R2 Hyper-V vm which hosts our main CasperShare distribution point via Samba. Our ageing xserve has been providing NetBoot and a second distribution point via AFP which we have needed for imaging. I have wanted for some time to ditch our dependance on the xserve and we are not keen on relying on a physical box for NetBoot and an AFP CasperShare. I had looked earlier at getting a NetSUS 2.0 running on a 12.04LTS but encountered some difficulties and in the end shelved the project due to other things taking priority. Then last week our xserve started giving HDD related trouble and I decided it was time to get the project back off the shelf.... The current situation: I have NetSUS 3.02 running on a 14.04LTS vm on Hyper-V. After a lot of stuffing around (this is my first Linux server) I got things to the point where I have a CasperShare on the server too and have synced the share using Casper

Hi all, I'm trying to create a smart group across multiple JSS contexts via the rest API, and not having much luck. Basically, I want smart group that contains computers which haven't checked in over 50 days. I'm using: curl -skfu username:password https://jssaddress:8443/JSSResource/computergroups/id/0 -T /pathtofile/NoCheckin.xml -X POST; Here's my xml:<?xml version="1.0" encoding="UTF-8"?><computer_group><name>No check-in</name><is_smart>true</is_smart><criteria><size>1</size><criterion><name>Last Check-in</name><priority>0</priority><and_or>and</and_or><search_type>more than x days ago</search_type><value>50</value></criterion></criteria><computers></computer_group> I've used this technique to import policies, packages, and scripts, but I can't get it to POST my group. Has anyone don

Anyone out there a service provider that has any experience updating AST through Jamf? Were you able to get it to work? Any suggestions?

Started up a new JSS to replace our current JSS. I shut down the first one and went through the installer, everything was fine until I opened the webpage, http:127.0.0.1:9006 (something like that). It's just stuck on "initializing". Anyone know any solutions before I contact JAMF? I've given the SQL database all rights (following the instructions), I've restarted Tomcat and MySQL and restarted the Mac, it's been like this all weekend long (just returned).

Hey, Just looking for a bit of advice with a clustered JSS and certificates. Has anyone else seen the following errors and if so how did you fix them? Downloading required CA certificate(s)… There was an error. Error enrolling computer: Connection failure: “The request timed out.” We've created a secondary external JSS with a jss.net hostname and an SSL cert.Then we have an internal JSS with jss.local and a built in cert. When we change it to .net on both JSS' then we receive the above error when trying to enrol.

HI All, Having some issues with our new lab images where the default region is set to Australia - root, this will stop Applications such as word from opening...... When you change the region from this to Australia then word opens fine. I have tried this https://jamfnation.jamfsoftware.com/discussion.html?id=12955 setting the region but it fails station update_region not found. Any other ideas? Im not even sure where the region code comes from with the "Australia - root" thanks

Just curious on schools that are 1:1 - do you set your users as local admins so they have full control of their machines? Or do you restrict all software installation to items in Self Service? If you restrict admin, do you ever run into issues with users not able to add printers or anything? Thanks!

We have 1573 ipads in our school district. Over the last 4 years we have been using the totally unsupported, "Shared-Apple ID across many ipads" deployment method. After briefing most of my schools on the DEP, Managed VPP and Under-13 Apple ID programs; they all told me the same thing:"Unless someone tells me we have to move to these new programs, I'm not going to spend the time. What we are doing works for us."Or "I don't see any benefits to these programs considering the time we would have to put in to move us into them." I'm fine with it. But I'm wondering if others have come to similar conclusions or if I'm missing a good, persuasive point in favor of the 3 new programs?

Hey all, I am working on an after hours project in which I am trying to pull a password from Keychain. The command I am using is: security find-generic-password -wl "com.squirrels.Reflector-2" While this command does give back the correct data when run as a user and via Policy, it displays a message to the end user asking them to allow the lookup. The exact message is: While this is not the worst thing in the world (doesn't require admin authentication for the end user), I would like to remove it if possible from showing up. Anyone know of a way to suppress, accept, or add Terminal temporarily to the Access Control so that end users don't see this? Thanks!Kyle

I've been toying around with AutoPkgr lately to see if it would be a good fit. What I'm working on now is overrides to make it fit our needs. One of our needs is the ability to assign policies and groups to an existing site. Our organization is potentially large enough that we'll end up with multiple sites each with their own testing set up and builds, so to keep things nicely organized it'd be best to auto-assign things to the appropriate site. AutoPkgr works fine if no site is specified, but fails immediately if it's assigning to a pre-existing group that has a site or if you attempt to specify a site in an override file. Does anyone know of a way to add sites into the override files that works?

I was wondering if anyone has had any experience deploying the Pharos Popup client and Pharos Mapped printers through Casper Policies? I remember a gentleman in my CCA class stating that they did this at the university he works at, but he didn't go in to any detail as to how they accomplished it. Any assistance would be greatly appreciated.

I wrote a script and uploaded it onto casper admin. I want to make some changes to it, but I can't seem to find it on my local machine that I created it on. For packages in Casper Admin, I can reveal in finder. How do I find out the location of the script I saved?

I have a configuration (standard with smart) , I would like to have the computers that run this Smart config to also be put into a static group automatically. Is there a way or a script that can do this automatically ? to avoid having me to manually go into the JSS after each computer has been enrolled and add them to this static group.

We have usernames populated using "jamf recon -endUsername $user" on many machines. Is there a way to use the -endUsername option to clear the username record?

My company is increasing travel back and forth to China. I've read a lot about the PRC deploying spyware to machines. How are you mitigating this when the laptop returns to your office? I know we're not the only company dealing with this and any advice is welcome! Up to this point, we've been wiping the machine when it returns to our office (before putting it on our network). Thanks!

When is it best to activate FileVault2? And has anyone run into the issue of your primary admin account repeatedly surfacing first as a single login window before the system displays the username and password field? We do have a script in place that "disables automatic login," so that's not the problem. It's only after we reboot the machine that the username and password field appears, but if we reboot again the "list of users" icon re-appears with just the password field. Bizarre! Thanks in advance for any thoughts and/or tips to resolve this.

I'm looking to change the "require password" from Yosemite's default of 5 minutes, to immediately. Currently, some configuration profile or MDM profile is causing the option to be greyed out and I can't figure out what it is. Also, what is the difference between configuration profile and MDM profile? I understand that a MDM profile gets pushed when I enroll a machine into Casper -- is the MDM profile and configuration profile the same? We have one configuration profile set, which locks down some settings in system preferences. I've tried checking the require password immediately with no luck, and also tried to manually edit my own plist to set it to 5 seconds and uploaded the plist file in custom settings with no luck.

i've created an EA script that reports the size of /private/var/folders. I'm seeing, on some lab stations, this directory is getting up to as much as 67GB. Most of the office Macs are under 2GB, which still seems high to me. As i understand it, /private/var/folders/ is like some kind of icon cache. And the more users that login, the bigger it gets. How are others dealing with this? I'm thinking of scripting the removal of this folder on a regular basis.

Has anyone encounter the issue with 10.9 reporting/showing incorrect disk space remaining? Background--Early 2014 Macbook Air 11" 128GB HD. Shared student device. Students were logging in and chewing up the storage space. Found a script that runs at login to delete any non local accounts older then 7 days. Issue that I'm having is, storage space is being reported incorrect. I have checked on the laptop (hidden and non hidden folders) and there is no way that it would add up to around 100GB of data.

Can I pre-enroll iMacs, add these per-enrolled iMacs to a static group? if so how ? I have a policy that I want to run that is 'triggered' by 'enrollment', the 'scope' for this policy will be this static group? (the policy installs a network printer)

I have recently started looking at Recon and I just wanted to make sure I understood what I was looking at. It looks like Recon is just used for remote enrollment. In order to use Recon for this the target computer needs to have SSH enabled and you need to know a local admin username and password. Am I missing something?

In casper admin I have a lab configuration, how can I get the 10 lab iMacs to have the configuration run on them at the same time?I have no NetBoot available.I have a usb stick with OS X and casper imaging on it, for configuration to be run on one computer at a time, but want to speed this up and do multiple at a time.

Hello, I made a new JSS and made my URL https://jss.company.com:8443 when prompted. That doesn't work, the only way I can access my JSS is through https://127.0.0.1:8443. How can I properly create my URL?

will i be able to use the xerox print driver 3.50.0.pkg pulled from the downloaded .dmg? I just put the .pkg in the base configuration. Here is what happens when I run the .pkg straight up from a mac. I want to see how the .pkg runs/acts/behaves prior to using it in my configuration, so I run the driver .pkg (just like any normal at home mac user would) on a test mac, it goes through the installation steps and then stops at 'SELECT A PRINTER' waiting for me to either choose any discovered printers, type in ip/dns of printer or just click 'continue'. At this point the printer installation stops until i choose, so I choose 'continue'. After I choose 'continue' a popup informing me that 'print queue not created' appears, I click 'continue' again and the installation was successful. I am concerned that due to this step 'select a printer' I will not be able to use this xerox 3.50 driver, is this correct?