Anyone have an extension attribute or something that can tell if the security patch that was applied yesterday to fix the FREAK vulnerability has been applied or not?

Hi,I'am using JSS 9.31. I'd like to send an VPP invitation. When the user got the email he has to login with an user account and an password. From where do I get the information which user account or which password has to be filled in.The user has the name testuser. The Invitation form of the JSS comes in via email with this username. S.b. told me to fill in the account data of the apple id the user of this ipad usually uses. This doesn't work.Knows anybody help?

Hello, thank you for looking at my post. I have been working on the issue with /Private/Var/Folders growing in size. I took another members advice and am currently using this script: #!/bin/sh userList=`dscl . list /Users UniqueID | awk '$2 > 1000 {print $1}'` echo "Deleting mobile accounts…" for u in $userList ; do dscl . delete /Users/$u done echo "Deleting all user cached files…" rm -f -R /private/var/folders/* shutdown -r now I have created a Smart Group that records all MacBook Airs with less than 60GB of storage available and created a policy to run the above script on logout. If I leave the script "as is" it works fine. It removes what I need and reboots the machine. My only concern is under the "Logs" it states "Pending". If I remove the reboot command and execute the policy again the log shows "Completed". I'm pretty sure Recon is not running and submitting the inform

Hi guys How are you managing Acrobat Pro X that came with CS6? I can't use the Acrobat customisation wizard to disable updates because I use AAMEE enabling updates. I've tried the fix with the bUpdater false plist but that didn't work. I've resorted to renaming the Updater plugin within the app bundle.

I am running a Windows 2008r2 Server to host my JSS, I have setup a CasperShare based around this article... https://jamfnation.jamfsoftware.com/article.html?id=325 When I open up Casper Admin it tries to connect to the share but says it cannot mount distribution point.. So I went to mount it manually on my Macbook Air and I can mount the share just fine with both my read and my write account. I have triple checked the username and password settings in the JSS. Everything should be working as far as I can tell.

I have a mid 2010 Macbook Pro OS X 10.9.5 that is encrypted with FV2 and has a bad video board (no display or external monitor). Can I swap out the encrypted HD with a simialr "Good" MBP and then access that drive from the new computer? Or does it need to be decrypted in the original MBP first? I get the feeling that pre-boot is tied to EFI and some interaction with the recovery drive. If cannot swap the drive then access in good hardware, could I do this in Target Disk Mode? I do not have it in my hands yet. Any advice would be very helpful. Thanks in advance.

We use VMs to build our packages and do our installation testing because they’re easy to roll back and all that. An unavoidable side effect, though, is that I then lose the packages that I had in Composer under the SOURCES caption on the left. At first I thought this wasn’t a huge deal since I can simply drag the package back in to Composer and do a “Convert to Source” on it, right? Wrong. Every time I do this, even with a package that I JUST MADE IN COMPOSER, I get the following two error messages: Converting to source failedCommand failed with error code (1): '/usr/sbin/ installer' (null)and Command failed with error code (1): '/usr/sbin/installer' Clicking OK on both boxes takes me back to the Composer window, and I’m no closer to being able to modify or view the package than I was before I started. My question is this – is there a way to save the “guts” of the package as with programs like Iceburg or Packages, or do I just need to have a VM that I never

Wanted to know if anyone here is managing Flip4Mac I wanted to enforce these Flip4Mac browser plug-in settings under System Preferences -> Flip4Mac on all 10.9.5 clients we support- enable "Launch Flip Player"- enable "Always show movie controller" I have found out that it uses a plist net.telestream.wmv.plugin.plist. I created a profile out from the plist and I can see that it is pushed out to the clients under the path /Library/managedpreferences but it does not set the above. Flip4Mac version is 3.0 Phil

Hi, We have started rolling out Yosemite this week (10.10.2) and an employee mentioned that he can't use new the extensions features like the calculator widget in the today bar and the share menu in safari (It displays No Service). The default extensions simply aren't available in System Preferences. The extensions tab however is accessible. After some testing I came to the conclusion that this behaviour occurs when I set access restrictions in System Preferences and push the Configuration profile at a user level to the device. Even when I don't block anything (just select the payload) the extensions aren't there. The only two things that I want to block are the Profiles and Sharing tab. Anyone else on this? We are running the latest Casper version (9.65). Cheers

Does anyone know of a good place I can download 10.7 - 10.9 so I can use them for testing? Thanks! SHawn

We made a 10.10 and 10.9 NBI. Then made the 10.9.5 the default and set both to be diskless boot served over NFS (we also tried HTTP). But when we try to Netboot (again on the same device) - it skips straight past and attempts to load HDD. Images were created with System Image Utility (fails), AutoCasperNBI (fails). Any suggestions? I also used @ChrisSVCarter suggestion: server='<IP address of your server'netbootSet='<File name of your NBI image including extension> and now my NetInstall page on OS X Yosemite Server.app doesn't load anymore..... I do have backups of my OS, which files are associated with Netinstall so I can restore them? Or is a full system restore a better option?

I have printers already being deployed via self service, just the other day I saw that these printers now have a newer driver version released a couple days ago. If I want to get these printers to use the newer driver version just released, do I recreate the printers, upload them to CASPER, create the policies ..... And do that whole routine all over again? Just so they get the newly released driver?

XML seems to return data from my report just fine, but JSON (which I'd prefer) does not. I'm trying to consume data from this report in a 3rd party SaaS application and this is proving troublesome. This behavior is consistent across the board in JAMF, my consuming application (ServiceNow) and Postman chrome plugin. Disclaimer: I'm not a JAMF admin, so I'm not sure what data might be relevant to post here. external image link

Hi Nation, Hoping someone out there can push me in the right troubleshooting direction. I recently used Migration Assistant to migrate a home folder on a 2011 Macbook Pro running Mavericks into a 2014 MBPr running Yosemite. The new mac is bound to AD. The problem I'm running into on the MBPr is the user cannot login with his network credentials when the ethernet cable is plugged in. He can login when the ethernet cable is unplugged. Same thing when Screen Saver lock kicks in. The user's password only works when the ethernet cable is unplugged. Other user accounts have no problem logging in when the ethernet cable is plugged in. For giggles, I tried to unbind/rebind the mac. No luck on that front. Thanks in advance for your help!

Is there a way if I mount the drive on my NetBoot Xserve, to add a plist file specifying the Dock items seen when Macs are NetBooted? Since I can update the Casper Imaging App version by doing the same thing, I was wondering if it was possible to do it for the Dock itself. Thanks! Mike

Hi folks, Looking for some guidance on this. Here's my script that runs at every check-in, once a day. button=$(/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper -windowType hud -title "fun stuff" -icon /Library/Scripts/Adobe-IT.png -iconSize 225 -heading "Fun stuff" -description "Really cool things inside. Click continue to find out or Opt-out to not receive this anymore." -button1 "Continue" -defaultButton "1" -button2 "Opt-out") if [ "$button" == "2" ]; then open -n /Applications/Safari.app "http://www.google.com" echo "optout" elif [ "$button" == "0" ]; then open -n /Applications/Self Service.app echo "selfservice" fi It's a jamfhelper window with a couple buttons to do the following actions: if Continue clicked --> open Self serviceif Opt-out clicked --> open safari and the URL Wh

Has anyone tried to build one? Which method did you use?

Hi everyone, I'm new to working with the Casper suite, so I apologize if this turns out to be a simple question. I am currently in the process of trying to rebrand the Self Service app used at the company I work for (there are only a small number of Mac users, so this project is in its early stages). So far, I've been able to update the app with custom icons and a new name by modifying the info.plist file and have created a package for the newly branded version of the app, which I have deployed and tested on my own computers. However, since this is an environment where enrolled users already have the standard Self Service app installed on their machines, I wanted to know if anyone has recommendations on the best way to replace this with the new branded version of the app I've worked on. Should I be looking into creating a script which will detect and remove the older Self Service version or are there alternative solutions which you've found to work better? Thanks

I am working on a lengthy script (parentScript), part of which generates another script (childScript) I am using a method I cribbed from Andrina's TempAdmin.sh script, namely: echo"childScript line 1childScript line n" > location This has worked well for me for plists and scripts that do not have variables. BUT... if I send through a variable, the variable is calculated when the childScript is deployed. For instance, if the parentScript sends X=date '+%m%d%Y:%H:%M:%S' the childScript receives X=03052015:11:43:49 and then fails to execute properly. I can get around this by deploying the childScript separately, however I would prefer that the childScript only exist while the parentScript is running. Thanks in advance.

I feel like this one is probably super easy. I feel like I'm over thinking this and it's super simple but it's not working the way I would do it normally. Office for Mac Beta came out today, I'm sure you all know. I need to not allow my user base to download and install it, since...for whatever reason, these people like to go rogue and do whatever they want. Anyway, I've used the JSS' restricted software rule for a lot of things, but for whatever reason, I can't stop this one. I tried looking for the specific process name, but it seems to only open with the Installer application process. Am I missing something? Am I on crazy pills?

I have several iPad carts, and am pushing out 10-15 apps to each of them for their initial setup. I am doing this through Mobile Devices > Apps. The apps start to load, I put in the password, and then only about 10% of the devices complete successfully. On all the others there are at least 3 to 8 apps (and it is different each time) that say "Waiting" instead of "Loading." All of the other apps will install, but these never move past waiting. I tried rebooting the iPad, which works sometimes, but eventually I have to go into the App Store and stop/start the install and put the password in again. And on some devices I have to repeat this multiple times to get all the apps installed. Any thoughts? This is way too much work. I would use Configurator, but it was so flaky that it would take just as long.

We are using Configuration Profiles to manage our Mac OS X student systems. We use the restrictions to restrict which applications the students have access to. I've had to add a couple applications to the approved list and I save the profile and say Distribute to All Computers. I had a few teachers say their students don't have access to the new software so I decided to check their machines in the JSS and under the Management tab under the Failed Commands area it says "Profile with the Identifier 'xxxxx-xxxx-xxxxx' not found. <MDMClientError:89>" I recently upgraded to Casper 9.62 from 9.32 and moved from a Xserve to a Mac Pro 2013. I thought maybe after the upgrade something got screwed up with the configuration profiles that were already created so I created a new one that I could test this out on and it came up with the same error after I had made changes to it. I've recreated the certificates because it is a new server. I'm not

Hello again JAMF! Am I missing something here? I don't see an application to open, just folders. I'm new to AutoCasperNBI, is there something else I'm suppose to do? https://github.com/macmule/AutoCasperNBI

Hey everyone I am getting to the point where our CTO wants things such as Citrix Receiver, Outlook, File Shares, Safari etc.. to use single sign on/kerberos and even though some of these are configured to generate a ticket others are not. Someone introduced me to the Admit Mac website and I have been reading up on it. Do you still use it in your environment? Should I just see if the application owners from my job make kerberos available on their application? Thanks

Anyone else seeing this? It's happened before apparently... https://jamfnation.jamfsoftware.com/discussion.html?id=7673 Since upgrading our (windows) JSS to 9.65, data returned from the api is in json rather than XML. That breaks patchoo and some of my other scripts that interact with the API. Pushing fixes up soon if you are using them