Does anybody have any suggestions on how I can create a smart computer group based on enrollment date/time? What i am trying to do is have a smart group to look at newly imaged machines (within the last 24 hours) so our JSS can run a policy to add icons to the dock like Microsoft Outlook, Microsoft Lync. etc....

Does anyone have the most recent JAMF CCA course book or know how I can obtain a copy prior to attending the course?

Hello JAMF Nation! We created an SMB share hosted on Windows Server 2012 last week and temporally made it our master distribution point. I replicated our AFP share to SMB and it worked great for two days before Casper admin/Imaging (Netboot for imaging) started refusing to mount it. In Casper Admin, I have to log off my account and log back in for it to mount even though I'm not connected to any shares. We have four accounts plus a security group in AD that has access to smb://servername/CasperShare:1) casperadmin with RW2) casperinstall with RO.3) My Windows admin account with RW (only person in the security group)4) Our Windows Sysadmin's domain admin account I can easily mount/access smb://servername/CasperShare in OS X and Windows without a problem, Casper is the only thing having an issue with it. Does it matter that we have two other folders inside smb://servername? Example: smb://servername1/Folder1 | smb://servername1/Folder2 | smb://servername1/CasperShare T

I feel like I'm going crazy, so someone please correct me if I'm wrong, but these are the steps we've used since 10.9 came out for making Casper Imaging images:1. Obtain OS X installer from Apple2. Drag OS X installer to Casper Admin3. Let Admin do it's thing, then save the package as an OS X installer4. Create a new configuration with that ESD file, configure for admin account, etc on those tabs & add our hide recovery HD script and our custom preconfig script5. Compile For 10.9.2, 10.9.3, and 10.9.5 this worked perfectly. 10.10 comes out and I follow the exact same steps - seems fine. Go to enable FileVault and there's no Recovery HD. So I ran it over and over and over - one out of five times, it created a Recovery HD. I know I can use another program to create my own image with Recovery HD, but I'm just curios if I'm going crazy or if other people are seeing this same result?

So I have 105 new macbook pro's I am setting up. I pulled one out of the box. Set it up with apps,binding,printers,settings etc. I then target booted it to my imac and launched composer. I then created a new base image and captured the macbook hard drive. I then loaded it to casper admin. Categorized it as a Base Image with a priority of 1. At this point all should be ready. I opened a second machine never booted and did a netboot to Casper. Chose the base image I made and chose to erase the current HD. The process goes through but after reboot I get a circle with a line through it. I was able to 'fix' this by going to internet recovery and running disk utility. I then ran a permission repair and a disk repair and reboot. It then restarted to my working image. Where did I mess up?

As a new institution to the JAMF Casper Suite I would like to enable machine log on through wireless to Macs that are bound to the domain. The goal is to try to mirror the wireless log on that is achieved on the Windows side by specifying through Group Policy the secure hidden wireless network (WPA2 Enterprise PEAP (MSCHAPv2)).So far I have configured a payload that specifies the Network settings that includes:• SSID• Hidden Network• Automatically Connect• No Proxy• Security Type• Use as a Login Window Configuration• Protocols o Accepted EAP Type is set to PEAP o Use Directory Authentication• Under Trust Allow Trust Exceptions is checked but nothing else is specified here Just this configuration alone displays an option on the log on screen to select the WiFi SSID specified or “None”. I can see that the wireless icon lights up for a moment then the log on fails. I have attempted to configure the AD Certificate without any luck the configuration profile fail

Hey all, so we recently moved away from a pair of Reposado servers to point our clients back out to Apple for their Software Update needs. I have a client that is stuck with the old setting and I can't get it to check Apple SUS. So the preferences for the SUS settings were being set by Managed Preferences. I removed the MCX, then ran a script that deleted the /Library/Managed Preferences/ directory and called jamf -mcx to rebuild another others that might be needed (none are being used now) I've run the jamf removeSWUSettings command and the softwareupdate --clear-catalog commands and still when I check for Software Updates it tries to connect to the local reposado server (which doesn't exist anymore.) From what I can tell this is working just fine on most computers, but a few are being stubborn. Any help or fresh ideas are welcome.

Doing a dry run in the lab, I installed 9.65 and restored our 8.73 database. Not too surprisingly at first launch of the web interface I'm getting a Startup Suspended, error updating the database schema. Being 24 updates behind, should I consider an incremental update or two prior to the current release? 9.2 --> 9.4 --> 9.65 ?

Hi Everyone, Has anyone seen an issue where computers get renamed to "localhost" on 10.9.2 and the latest version of the JSS? I saw this thread here: https://jamfnation.jamfsoftware.com/discussion.html?id=5078, but I'm not sure it still applies. The .plist file it references isn't present in my base image that I created with AutoDMG. Any thoughts that people have would be great!

Hey guys, I´ve got a Problem with my MS Office 2011 14.4.8. My Office Apps Word/Excel/Powerpoint are crashing when there is CS6 installed.When i don't install CS6, Office is running with no Problems. This report appears when i open an Office App: Microsoft Error Reporting log version: 2.0 Error Signature:Exception: EXC_BAD_ACCESSDate/Time: 2015-03-11 11:39:49 +0000Application Name: Microsoft WordApplication Bundle ID: com.microsoft.WordApplication Signature: MSWDApplication Version: 14.4.8.150116Crashed Module Name: MicrosoftMenuLibraryCrashed Module Version: 14.4.8.150116Crashed Module Offset: 0x00007165Blame Module Name: MicrosoftMenuLibraryBlame Module Version: 14.4.8.150116Blame Module Offset: 0x00007165Application LCID: 1031Extra app info: Reg=en Loc=0x0407Crashed thread: 0 After i log out and log in, Office runs for this User.But with another User, Office crashes again. The CS6 Paket was created with AAMEE 3.1. I think it´s a font Cache Problem, because after I use ´

Happy Friday! Anyone using irapp or other products/methods to provide remote mac services?http://www.coderebel.com/products/irapp-terminal-server If so, how did you find the experience? Do you recommend it?

I have just received our new test Macbook Pros. I am testing the application installs. The applications show as installed under JAMF but they do not show under finder or in the LaunchPad. However if I search for them under Spotlight , they are found and work. The apps were created on Yosemite 10.10.2 and installed on Yosemite 10.10.2.. However I did have issues with this machine and just reinstalled user the Apple recovery as I am in the process of setting up the Yosemite images. I installed using Self Service. I have never had this issue before?

We are new users of the Casper Suite here and have begun testing Yosemite upgrades and have run into some serious issues. Our test machines are iMacs running 10.9.5. We are able to deploy the Yosemite upgrade package via Casper Admin without any issues. The upgrade completely successfully and our users are able to log back in and use the machines normally However, at some point, usually within 24-48 hours of the upgrade, the machines completely hang up during use to the point where they need to be hard rebooted, during reboot they hang at the Apple Logo and never finish booting booting to Single-User Mode and running Disk Repair returns no errors in some cases we are not even able to boot to Safe Mode Has anyone run into these sort of issues?

Hey nation, I'm testing some student iPad restrictions and it seems like no matter what configuration I apply, just having the restrictions enabled under Mobile Devices > Configuration Profiles > New > Restrictions causes App distributions to be met with a login prompt asking for the user's AppleID password. If the user logs in, the App comes down. If they don't login then, they don't get the App. Has anyone had any experience with this? We would like for Apps to appear on the iPad with no user intervention whatsoever.

Hi all, Is is possible to trigger profiles based on location ?The idea here would be to restrict iPads when students are within school boundaries.iBeacon? SSID? Network Segment? Router itself? If not possible from a technical standpoint, how do you deal with that ? François

Is it possible to install packages via Casper v 9.6 to a machine that is encrypted using FileVault 2 and has been rebooted and stuck at the "login window" FV2 throws up there? Has the OS loaded enough to install packages from Casper? Thanks in advance.

Can anybody offer any insight as to how to go about scripting Keychain First Aid? I would like to add it as a Self Service Policy to repair keychain issues. Thanks!

So, we have a client that is going to be using "Foundstone" software to scan Macs/PC's for vulnerabilities. The client needs to be setup with a hidden account which is a normal user given SSH rights in order to scan/report on software, etc. One of the requirements is to leave the firewall on while turning off Stealth Mode - easy enough. sudo defaults write /Library/Preferences/com.apple.alf stealthenabled -int 0 The problem is that after flipping the Stealth Mode off, we can not get the ability to ping - and therefore scan the Macs - until after a reboot. We tried all sorts of things suggested here and elsewhere to get this to work, and so far, only a reboot does the trick. We're testing on 10.10.2/.3 at the moment and will likely have to run this on all the Macs going back to 10.6. I've love to find a way to get this setting flipped and not require a reboot as the client is highly averse to such things (don't ask). We've tried flipping this o

I know that this has been asked many ways but not sure how to do this specifically. I have 2 admin accounts on each machine. They are both added with the quick add package and I have have a script that regularly checks for and re adds the secondary account. The secondary(non casper management account) is actually the one that gets manually added on original images. I need to change that password.. How should I change the password or what is the best method.

Seeing some strange errors appearing when trying to use AutoCasperNBI with Casper 9.65. trying to create the NBI on a I7 iMac with a 1TB Fusion drive OS 10.10.2 we get the following in the logs: Thu Feb 26 10:55:22 AEDT 2015 NetBoot Name: 10.10.2.AutoCasperNBIThu Feb 26 10:55:22 AEDT 2015 Trying to get JSS versionThu Feb 26 10:55:23 AEDT 2015 Received JSS versionThu Feb 26 10:55:23 AEDT 2015 Checking JSS Version from https://<server>:8443/Thu Feb 26 10:55:23 AEDT 2015 JSS is: 9.65Thu Feb 26 10:55:23 AEDT 2015 Pre-Reqs met, Options & Build enabled.Thu Feb 26 10:55:23 AEDT 2015 NetBoot description enabledThu Feb 26 10:55:23 AEDT 2015 NetBoot description set to 'Mac OS 10.10.2 (14C109) with Casper Imaging 9.65 pointing to JSS https://<server>:8443/. Created by, <user> on: Thursday, 26 February 2015.'Thu Feb 26 10:55:26 AEDT 2015 Selected path to create .nbi is: /Users/<user>/Desktop/Thu Feb 26 10:55:26 AEDT 2015 Trying to get the Total size of '

Does anyone know of a way to prevent OS from checking for/receiving software updates? We're having a problem with 10.9.5 iMacs that are connected to external AV systems (these are iMacs set up in classrooms). After both 2015 security updates the on-board graphics freeze and require the mini-display port dongle to be disconnected and reconnected for the iMac display to "unfreeze." Essentially, I'm tired of re-imaging the machines once a week. Upgrading to Yosemite is currently not an option (that's Apple's official advice). I'm wondering if I can set a configuration profile to point at a nonexistent SUS to "prevent" any updates, but I don't know if this will just cause it to fail over to Apple's SUS. I have confirmed that a base 10.9.5 without the 2015 security updates do not have the frozen display issue and relayed this to Apple (who's stuck in the "upgrade to Yosemite" rut). Any ideas are greatly appreciated

Hi -- We are in the process of consolidating our Exchange environments to one. Part of that requires updating settings in outlook. I was successful in getting the Win side updated, but am having a hard time finding a tool to do this on the mac side. Essentially, the URL is changing from mail.company1.edu to mail.company2.edu. The users mail has been mirrored in both environments. Any help is greatly appreciated!!

I'm using a launch daemon based script to create a mount point and use "mount -t smbfs" to mount a common DFS share. The script works fine, however the issue I'm encountering is. The first user to login after imaging creates the mount point the permissions on the directory are preventing subsequent users who login from mounting the common DFS share. A number of forum's I've visited all suggest that a logout hook script to umount the share is the way to go. I'd like to stick with local scripts as the next phase will be to modify the script to only Map drives when connected to specific wired/wireless networks. Is there a better way to map the common DFS share?Logout hook's I thought were deprecated. What's the preferred method to run a script at logout/shutdown? Thanks

I am trying to get an LDAP connection setup in JSS to our AD server and I cannot get it to work. I put in the hostname and domain, but on the next step it says failed to verify user account. I've tried two user accounts, both are in good working order, neither locked and one of them was my own which has a decent number of permissions. I have Casper on a linux box. It can ping the domain just fine as well as the specific AD Server I pointed it to. Also of note, we have a domain domain.company.com as well as an alias for the domain "Arbitraryname." If I point it at domain.company.com it says "Please verify the username and password." If I point it to Arbitraryname it doesn't give any errors, just blanks out the password and does not progress. Which permissions does the service account specifically need? Also, our domain is setup with load balancing, so should I just point it to domain.company.com for the host as well as the domain? When you ping do

Hi All, is it possible to query the API for completed status of a policy, Also, is there a way to see/get this information from the JSS mysql database? Thanks