I'm working to get a bunch of OS X machines discoverable on my work network so that they can be managed by SCCM/Parallels SCCM Plug-In. So far the best solution i have is to physically touch each machine and enable remote mgmt, vnc, and ssh. I have a shell script using kickstart that will do the remote management and vnc configuration, but i can't figure out what command in there would also enable ssh. Here's what I have so far: do shell script "/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -allowAccessFor -allUsers -privs -all -clientopts -setvnclegacy -vnclegacy yes -setvncpw -vncpw ** -restart -agent" password "" with administrator privileges So... What is the command I can throw in there to enable SSH as well? Is there some other solution to what I'm trying to do that's much better? Thanks in advance!

Greetings i know this is less of jamf/casper issue, however we'd ran into a wall with this one. For a while now we have an issue in a couple of our offices with the combination of wifi and mac's.The symptoms: wifi connection drops, when trying to reconnect the ssid's are not visible. when inserting a usb-wifi dongle. that can connect fine to the same SSID's. when walking over to a other part of the building the ssids become visable again, and walking back the issue is (temporary) resolved. The symptoms are occurring on all kinds of mac's (air 2008 and above till current) ProRetina's till current, osx 10.8, 10.9 and 10.10. both casper imaged, and retail. ios devices running 6,7,and8) the environment: over 150+ap's multiple sites, in a WLC environment. ssid's with both 802 authentication and with wpa and without auth. all effected. Troubleshooting performed: - connected a mac to a usb wifi dongle: no further issues- bluetooth disabled, no eff

Does anybody else have issues with checkmarking updates in SUS? For one thing, when I "select all" and then hit apply, they all come back as unchecked when the page refreshes. For a second issue, I seem to only be able to checkmark 995 updates total. Any additional updates that are checked will not apply properly.

Those of you who were participating in the developer releases or public beta of Yosemite (or even the dot zero release) may recall that there was an issue with Outlook 2011 not displaying the main window if you had the disclosure triangle open to show your list of folders in your mailbox. Sad to say, the Office 2011 14.5.0 update has resurrected this issue. Outlook will launch, but the main window will not open. You can create new messages and events via the menus, but that's it. If you keep that disclosure triangle closed when you quit the application, it'll launch just fine again.

Is anyone else seeing casper imaging not correctly blessing the internal drive after imaging completes? We keep seeing (since 9.7) Casper Imaging (from netboot with the checkbox selected to reboot to target drive) after imaging completes, it then boots to a folder with a question mark (or tries to boot back to the netboot). Gabe ShackneyPrinceton Public Schools

we replaced our fleet of teacher laptops with new ones. the old teacher laptop will be going into carts for use in the classroom. we had pulled al the user/building/department info from AD, but now that they will be going into carts for student use all that info needs to be removed. thats where i hit the wall. i can fill this info in bulk, but how do you remove it? any help would be appreciated

Hi All how to manage and edit sidebar on self service? like below, how to add and remove an item on the sidebar?

I have a user that cannot receive Compressor via VPP. We are successfully using VPP with managed distribution for OS X and iOS. Recently we purchased a single copy of Compressor 4.2 for evaluation. I have created a VPP assignment, which contains just Compressor. When I scope the assignment to this user, the recalculation dialog appears. After some time, I click back onto the assignment and the recalculation has completed, however when I look in the App Store, while logged in with the user's Apple ID, Compressor is not part of the purchase history. Looking at the VPP Account itself in Global Management, the Compressor line shows Total: 1, In Use: 1, Reported: 1. If I unscope the user from the assignment the In Use number drops to 0. Meanwhile I can successfully assign Compressor to a different user. And I can successfully assign other software to the "problem" user. I have tried deleting and recreating the user, redoing the VPP invitation, deleting and recreating the assignment, an

I have a bit of a head scratcher that I'm hoping people may be able to assist with. Attempting to set a default desktop background in my lab. Created a policy that deploys a package with desired image and a python script. It is set to run once on recurring check-in. All machines report that the policy has run w/o problem. However, none of the machines have taken the new background. The package has been unpacked, as the images are in /User/Shared as I requested. If I flush the machine from the list, go to the physical machine and run 'sudo jamf policy' from the terminal, the script runs just fine, I get a new background, and everything is happy. Except me, because I don't want to walk around and touch every machine. If anyone has any thoughts, I'd love to hear them. Happy to provide any further information if it is helpful.

Hello all, Does anybody know how I can disable the computer to computer networks with either a script or mcx setting? Thanks,

Hi, We have implemented Casper as our imaging and update solution option about 1 week ago and I am learning to drive it but having a few issues that i cant find clarity around so I thought id post a question and would really appreciate anyone taking the time to get back to me. When we implemented Casper we were taken through the composer and had a lesson on creating dmg and pkg's. We had a clean machine and downloaded the latest version of flash and installed it before opening the composer and creating the dmg, This was then dragged into the Casper Admin application and saved. I then created a policy that included the flash dmg created in composer to scope to only my test machine and all went well. The dmg installed correctly. I then tried to simply copy the latest java update dmg into the admin app and follow the same steps but i notice that the java update doesnt install and it is simply copies to the hard drive of the machine in the scope - what am i doing wrong here? Im th

Hi all some input if possible please We need a way to send out emails to all our Mac users, i'd like to use the method ofchoosing Action > Send Email from a smart group but this doesn't give me the option of including attachments (please correct me if i'm wrong and you can add attachments, i'd like to be wrong!) I'm looking at a way of getting the email addresses from the smart group All Manage Clients,i've exported the web page to a pdf so i have all the addresses in text form. Automator has a PDF to text action which will produce an rtf from the pdf.Can anyone suggest a way of extracting just the email addresses from the pdf or rtf ? or point me to another way to create a mail group from the JSS ? Thanks!Andy

Hello! We just created a new Yosemite image. I just replaced 10.10.2 with 10.10.3. The images here are all basically identical except for a few minor items. However, our Yosemite image refuses to bind to AD while our Mavericks image continues to work perfectly. I am using the same bind for both. I can manually bind the Yosemite machines once they are imaged, but that defeats the point of having it in there in the first place. Without the bind, no profiles are pulled down. Also, the machines are not enrolling in JAMF probably for related reasons. I'm stumped. I'll redo the 10.10.3 DMG if I have to since it's the only variable, but I don't want to if it's not the problem. Any advice would be greatly appreciated. :) PS: I'm looking for logs on a local machine after it has completed its image process. Do they exist there or on the JSS server? Thanks,SGN

We've recently changed our URL for our JSS from a .local address to a .net to enable us to use a third party cert for our external JSS. However, as part of this the URI for the PKI is not available externally. To enrol externally it needs the CA Authority cert which it can't access so the enrol fails. I'm trying to look at ways to edit the QuickAdd with a preflight and: jamfremoveFrameworkThen install the CA (CN=CompanyName (London) JSS Built-in Certificate Authority.pem Has anyone else had any luck with this, or any ideas on how to make this better? CheersJonny

I'd like to add a public cert to our JSS so that when users enroll their machines they don't receive any SSL errors. The JSS has about 115 machines in it at this point, but we have not implemented any Configuration Profiles as of yet. I assume this has been done before but I wanted to be know before hand if this would break things horribly. Aside from the MDM portion, has anyone done this before and noticed any major issues? The server being used is 2012R2. Thanks!

Hey folks, We recently switched from our default builtin self assigned SSL certificate to a properly signed certificate from an external CA. I created a policy which would update the JSS Url on all of our clients, as follows. defaults write /Library/Preferences/com.jamfsoftware.jamf.plist jss_url https://casper.domain.com:8443 What else do i need to do, if anything? One thought is the MDM profile. Does this need to be deleted and reapplied? If yes, what does that actually look like? Is it asking each user to re-enroll, or can i manage it completely unnoticed over ssh or some other remote management tools? The reason i ask about MDM, is because in system preferences, the "server" url is still the old one.. AND i suspect some of my smart groups are not updating properly, potentially, because of this also.. So what is the best practice, and next steps when changing the JSS Url?

Casper Team, I have a policy that needs to put files in the following locations. /Library/Fonts/System/Library/User Template/English.lproj/Library/Preferences//System/Library/User Template/English.lproj/Library/Preferences/Adobe InDesign/Version 7.5/en_US (Adobe InDesign/Version 7.5/en_US is a folder that I need to be created during the policy execution) I used the Disk Utility and Composer to create a DMG that contained the files but when the policy is executed none of the files are copied. I created a DMG that puts files in the /Users/Administrator/Desktop and that works fine. Does anyone know how I can put files in the following locations? We have different departments that need custom images. Thanks!Enzi Jauregui

Hello everyone, I'm curious as to why my Adobe applications are failing on HTTP download, I'm currently testing the deployment of nine Adobe CC applications. It works fine when installed during imaging, individually in policies or using self service. But, running a policy that kicks off at startup/recurring checkin to 20 iMac's makes the installer fail with the error: Downloading http://ipaddress/CasperShare/Packages/AdobeDreamweaver_Install.pkg.zip... Installing Adobe Dreamweaver... Installation failed. The installer reported: installer: Package name is AdobeDreamweaver installer: Upgrading at base path / installer: The upgrade failed (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.) The policy consists of 17 applications, and only the Adobe applications fail. Everything else installs fine. Basically, it works fine every other way besides using it in a mass policy. Any suggestions?

Does anyone know what interval the JSS regularly checks in with an AD server to aggregate updated lists of users and groups? Or is the connection persistent/on-demand? In our environment our search base is set pretty wide, e.g. "DC=pretendco,DC=net", but when a member of our directory services team moved several groups from one OU to another, we could no longer use our AD accounts to login to the JSS until he moved them back. Any thoughts on this?

SCENARIO 88 x iPad Air (1 grade level)each with an average of ~10 to 12GB usageuse single iCloud account with 1TB space for backup every single app has license for each device (via VPP spreadsheet)we configure 88 devices with same iTunes/iCloud account so that we don't need to push newly purchased app thru MDM. new apps automagically appear via "auto download" feature of iTunes Store BACKGROUND:We used to configure each iPad with their individual iCloud account, but the free 5GB is not cutting it. Most of the iPads keeps displaying a pesky warning that iCloud has ran out space. Question:For iCloud backup, is there a documented hard limit to the max number of devices you are allowed to associate with a single iCloud account? or the limit would simply be the available iCloud space? Is there a better way?

I am building out a laptop one-to-one program and am using mobile accounts (AD). Does anyone know if it is possible to automate the setting that allows only a specific user to create a mobile account? I would Love to be able to set the system to allow only the first mobile login, then lock it out. its a bit much to do it in the GUI for 700 macbook airs: System Preferences/Users & Groups/Login Options/Allow network users to log in at the login window/Options/Only these network users:define the user any help appreciated :-)

Hello, folks - Trying to set up some HP printers on new or re-wiped computer installs - in this case, HP5200 DTNs and an HP p3015. Also, in our environment, we are using DNS names via IP printers - LPD. Not sure what the best way to go about this is, but here's what I've tried:1) Snapshot an install and update of the printer, then deploy this as the driver, followed by printer captured by admin. Errors out. 2) Install driver package from Apple (https://support.apple.com/kb/dl907?locale=en_US), followed by printer captured by admin. Complains that printer is installed incorrectly, requires download to fix it, but then works. But, the idea is to have it work out of the gate. 3) Checked for drivers from HP - nope, they are handled by Apple update. Rather than continue to spin my wheels, I thought I'd check in and see what folks are doing for print drivers that are handled via Apple updates.

See attached image. Chrome is leaving a trail of odd entries for applications for me. Is anyone else experiencing this? This is under the computer >> Inventory >> Applications

Due to bureaucracy, my work environment has two completely different JSS installations set up. They don't really affect each other most of the time. Our JSS only has the network segments our department uses put in it. There are several other segments that may be used by the other JSS, but I have no idea which ones are in their JSS. There is a package that may need to run only while on our campus. Our network segments won't cover every possible building the machines we manage may be in. If I make a network segment(no default netboot/distribution point) that covered a network segment in the other JSS, would it interfere with the other JSS? I don't want to break their imaging or distribution to make one of our packages install more easily.

Hi everyone, I'm in the final stages of testing our 8.73 production database in a Casper 9.3 dev server. There are a few gaps post migration like no custom MCX keys being migrated or a few settings getting reset which can all be resolved with some manual reconfiguration. In testing I noticed the self service app has a key difference in version 9 from 8 in how it displays policy descriptions. I noticed V9 isn't able to display dot points with return character values. We have a quite a few descriptions setup up this way to highlight the features of the app the user is about to install or note any warnings before they run a policy. To give an example of this, here is what Skype in our self service looks like in version 8 external image link ...and what it translates too after migrating too version 9 external image link Now i've looked around JAMF Nation to see if any early adopters of Casper 9 reported similar issues last year but couldn't find anything. Being t