Is OS X prompting me for something behind that black screen? How can I check the logs since the Mac's in question are in a reboot loop? Has JAMF thought about adding a process bar to Casper Imaging's "Installing Software" page?

Hello all. I am having a very strange issue with the JAMF ASUS appliance. When I enable an update (check the box) and click on apply, after a brief refresh period the branch re-loads and does not have the updates I selected marked any longer. I have attempted to reboot the server it is running on and that didn't fix the issue. Has anybody else seen this or know how to fix it? Thanks.

Hello everyone! We are looking at using iBeacons in our k-12 environment. Just looking for suggestions on what models people are using and how are they using them. Thanks everyone

I am using the setTimeServer.sh script provided by JAMF. When I look in /etc/ is see ntp.conf and when i vi ntp.conf it says in the file ; server time.apple.com i'm on the east coast and it is set to west coast time and Cupertino, CA time zone all other enrolled macs are getting the script fine and i do not see this log message for others. On this one newly imaged mbpro I am getting the following log message. Script result: Setting network time server to: ntp.blobface.xxx...2015-03-09 12:44:36.026 systemsetup[2384:507] ** -[ADMNetworkTimeClient _ntpSetEnabled:] /etc/ntp.conf doesn't exist. You need to create it first before ntpd can start sucesfullysetNetworkTimeServer: ntp.blobface.xxxNetwork Time is already on.

When creating a policy, does the activation for date and time need to be set? Or can the policy run simply based on it's trigger and execution frequency?

My network guy and I did some work on our LDAP (AD) mappings. I now have the mappings as I want them but I would like to know if there is a magic incantation that will force an update of all my records in the JSS at once with the new data or do I have to do them all individually? Thanks for any help.

Hey everyone- I am looking to update my Self Service with the newest Java update but instead of being easy, like in the past when I could just drop the file from the Java download in Admin, now it is saying that it will not accept it because it sees it as a third party app??!! I have tried going to Composer to build from there but when I loaded the created package into Admin my entire system bugged out and could not find the distribution point anymore unless I took that package out and restarted my server. So all in all my afternoon yesterday was horrible and I don't even want to bring up the Flash massacre that ended my morning yesterday.... Is anyone else having issues with Java or how do you get around this to make my day a whole lot better?!

Mac Mini keeps showing up as unmanaged after enrolling it. I cant push any policies to it. I have removed it and enrolled it again, still running into the same issue.. Thanks

I'm having an issue trying to get Yosemite upgrade pushed out to students with locked down computers.For 10.8 and 10.9 we had it set up to where they'd run a policy putting the installer.app in their applications, and then run a script targeting this the "Install OS X Whatever" executable file to run like so: /Applications/Install OS X Mountain Lion.app/Contents/MacOS/Install OS X Mountain Lion& But with 10.10 in the Contents/MacOS/ folder all there is is the InstallAssistant executable. Is there any way to get this to work?

Short time reader here, newbie Jamf admin to boot. Stood up JSS 8.6 and upgraded to 9.1.1 and just tonight to 9.2, have a large org with lots of devices and complex network. Most networks are analogous to buildings which usually contain one or more specific departments, such that the departments are often (but not always) unique to each building. Almost every building also has a server that can act as the jamf distribution point. I've defined the buildings, departments, distribution points, and network segments. It sounds like I can run recon on a network segment manually and get it to apply the building and department values to discovered devices. That's generally undesireable as I have hundreds of network segments. Can a recon also assign dept/building to an already discovered device? (At best my reading of the docs suggests maybe.) It seems like the "override" checkbox in the Network Segments should provide what I am looking for - to automatically assign b

In testing, everything worked great for us. After that phase, we rolled it to a couple users in production and now all machines including our test ones don't work so great. I take a machine that is bound to our AD domain and add a 802.1x profile so that the device connects via Wi-FI adapter. This works great. I then enable "create a mobile account at login" and logout. I login as an administrative AD user, and as expected the Mac creates a local account. I then enable file-vault and reboot. At this point, the Mac sits at the un-encrypt login prompt (as is normal for a FV machine) with the AD user I just created the mobile account for. I authenticate, and the machine begins to boot. Once I get to the user's desktop, I am not connected to my 802.1x specified network, and as such I'm not connected as an AD user. My local user no longer has admin privileges (since it is derived from AD group membership). To make it work, I logout from this failed session (not reb

While troubleshooting http errors when running a cache policy I noticed no web server root directory /library/server/webDoes this mean Apache tomcat did not install correctly when JSS was installed?HI see the /library/jss/tomcat

Hi. I tried to fetch the current users UID for a script echo "checking Users UID"UID=id -u $loggedInUserecho "$UID" The output is: Desktop/user_info.sh: line 44: UID: readonly variableFurther there was the idea to check if this is a UID between 501 and 1000 to display if it's a local or AD/OD account. It would be nice if anybody has an idea how I could approach that?! Thanks,Maik

I missed Charles' presentation yesterday, is there any info about "Bushel" online yet?

[D-008217] Fixed an issue that prevented Casper Imaging from creating multiple partitions when imaging a drive that has core storage enabled. http://resources.jamfsoftware.com/documents/products/documentation/Casper-Suite-9.65-Release-Notes.pdf

I am trying to find the right options for a limited user to be able to pushout a FileVault configuration. It works fine as an admin user, but so farwith the limited user account when I attempt to push the FileVaultconfiguration I get the error "there was an error creating resources on the JSS"I have tried this solution with no joy so far https://jamfnation.jamfsoftware.com/discussion.html?id=8235

When checking Inventory, under 'local user accounts' I see some of the inventoried iMacs/MBPros/MBAirs displaying both the 'LOCAL USER ACCOUNTS' & 'HIDDEN LOCAL USER ACCOUNTS' so under the local user accounts it will have a total around 80. While on other iMacs/MBPros/MBAirs it is just displaying the 'LOCAL USER ACCOUNTS' only for a total of around 4 (whatever the computer has). Has anyone else seen this?computers are all getting enrolled the same way, quick add.pkghow would i get those 'HIDDEN LOCAL USER ACCOUNTS' not to display in the inventory? it doesn't seem to be a big deal, but I don't like the inconsistency. thanks

Hey folks! I'm looking for a way to easily determine if a software update package from Apple requires a restart. Since I always have a battle with my users to get them to restart and run updates, I'd like to start forcing updates of items that don't require a restart. So, any ideas short of writing my own SQL query? Thanks! Steve

Dear all, As title, can jss send a command wipe the device data and then automatically re-enroll?

It appears Apple no longer offers Xcode through their dev site, when you go to download it, it links back to the MAS. Are we back to the old method of putting MAS in Debug mode?

Hey guys, I'm a bit stuck at this place. I need to make the preference pane Date & Time available for everyone without admin privileges. I know that this has to be done with the authorization DB. I found the respective key here: system.preferences.datetime http://www.dssw.co.uk/reference/authorization-rights/index.html Regardless what I changed in the authorization, I didn't get this working. Does anyone have had a similar problem and / or knows how to deal with the permissions in the authorization DB? This isn't very well documented from Apple. These are the links I found but unfortunately didn't help me in any case... https://www.afp548.com/2013/10/22/modifying-the-os-x-mavericks-authorization-database/https://derflounder.wordpress.com/2014/02/16/managing-the-authorization-database-in-os-x-mavericks/ Thanks,Michael

Ok, I've seen a few posts on aspects of this but I'd like to get some feedback from JAMFNation on how they deal with the following requirement. We are working on a 10.8 deployment for a development project. All of the developers will be using Xcode, Ruby on Rails, Java, Python, MySQL and other tools. Our security team has a number of requirements, the primary 2 being "no local admin rights" and "restrict ALL software installs to Self Service". So we have a logon script that adds the console user to the _developer group by default. But we keep running into elevation problems. For example, the first time you launch Xcode and create a new project or install the SDKs, you need admin rights to continue. Other examples are Ability to stop/start MySql, change network settings (toggle proxy and modify proxy bypass mostly) and more. I've spent the last couple of days working on understanding the syntax for the sudoers file but have come to realize th

Hi Guys, Is anyone else experiencing these issues with mounts through Self Service with the Open command. None of our shares are mounting.

The Apple Configurator 1.7.1 is giving error that it couldn't allocate resource while trying to Supervise the iPad.

Hey all, I work in a small school district & I'm working on our new images (10.7 for WhiMacs & 10.10 for all of the aluminum models) for deployment this summer. I was hoping to start using configuration profiles a little more heavily. We tried doing this last year and couldn't get it to work, but I could've sworn I saw something in one of the previous JSS version release notes that said they'd fixed scoping to local users... We've just recently upgraded our JSS to 9.62. So, here's the dealio. Our image has 3 local users (student, teacher & hidden admin). I'm mostly concerned with the student account. Specifically, I want to be able to "lock down" both the student dock & desktop background (and a few other things). The problem is, I also am not allowed to lock down these items for the teacher user, so I need to scope only to the student user. We have (in previous years), set the "system immutable" flag on t