Executing Policy Microsoft Office 2011... Mounting CasperShare (company) to /Volumes/CasperShare... verbose: Result of mount attempt: - The operation couldn’t be completed. (com.jamfsoftware.core.errors error 211.) verbose: Result code of mount attempt: 211 Error: Could not mount distribution point "CasperShare".Submitting log to https://company:8443/ Does anyone know what causes this issue? Installing these packages via Self Services last Friday worked just fine. Rebooted the iMac multiple times.

The short story is that I pushed out software that required a restart. I set the restart to occur within 2 hours after the policy completes. However, one user had the policy forced on them because they were past the deferral date I setup. Now the user is in a meeting and Casper naturally says it's going to restart within the next 90 mins. Is there a way to stop the reboot from occurring?

Hey everyone Happy Friday!!I am working on a script to set the com.apple.Safari.plist to allow the java applet to run in untrusted mode for our VPN to work. The script below works and the changes appear in the plist but then are quickly erased and replaced with the original version. I am at my wits end today with this. Right now the only way to have it stick is to change it manually through safaris preferences. Please Help!! some useful infoSystem OS: 10.10.2Safari version:8.03 #!/bin/bash # @Author: Roger Herling w/credit to maxbehr and bajankinch # @email: roger.herling@ul.com # @Date: 2014-11-10 14:22:27 # [~Last] Modified by: 46199 # [~Last] Modified time: 2014-11-11 13:25:58 # Purpose: Cheange Safari's default security settings for Java to allow the SSL VPN Extender to run on Mac OS X #Casper User variable USER=$3 # enable logging exec 3>&1 4>&2 trap 'exec 2>&4 1>&3' 0 1 2 3 exec 1>/var/log/javafix1.log 2>&1 #path t

Has anyone successfully deployed the default text encoding option for outlook for mac?I tried composer and it did not give me anything. Thanks guys.

run this command on your FileVault 2-encrypted Mac: defaults write /Library/Preferences/.GlobalPreferences MultipleSessionEnabled -bool false oh, apple.

You need local admin rights on a Mac in order to run the QuickAdd package to enroll a Mac into Casper, regardless of which method you use - invitation, or self-enroll or whatever, it always comes doing to needing local admin rights in order to install the QuickAdd package. Is there any way around this? I know it's OS X's built in security settings asking for admin permission, but it's a pain for our users that don't have admin rights.

Would someone be willing to look at my ARD line from my FB script? For some reason the primary admin account doesn't have SSH access. It's created with the createadmin tool 1.24, I can login to the user and everything else, the results from kickstart say that the user was added, but I still can't SSH in unless I go into sharing and enable all users. /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -on -clientopts -setvnclegacy -vnclegacy yes -clientopts -setvncpw -vncpw <password> -users admin1,admin2 -privs -all -allowAccessFor -specifiedUsers -restart -agent -menu Starting... Activated Remote Management. admin1: Set user remote access. admin2: Set user remote access. Set the client options. Setting allow all users to NO. Setting all users privileges to 1073742079. Done.

I followed to a T the instructions creating a minimal netinstall image and captured it using Composer, then used SIU to create the netboot image. I also enabled diskless netboot for the NBI. When I boot to it and launch Casper Imaging the selected configuration immediately fails when it tries to block copy the image with the NilObjectException error. I verified this does not occur when running the same job booted to an external drive with Lion installed, so it apparently is rooted in the netboot image I made. I am not sure what the issue could be because as I said I followed the steps exactly as provided by the knowledge base. I have a vague sense it may be a read/write error but composer does not allow you to specify that IIRC. Any ideas? I have a support ticket open but the thought is because it is the NBI I may be on my own.

The JSS main administrator has self service install upon enrollment of computers (imacs/mbpro/mbairs). I manage a Site, if I create a software policy to say 'install skype' and leave the scope tab not configured but make the policy available in self service, will this work and populate self service with 'skype' for users in my site to install on their computers? the policies GENERAL tab is set at 'recurring check-in' 'once per computer' right now when 'self service' is opened, there is nothing in it, no self service items available. when does 'self service' items get added?since I am only Site admin, will I be able to configure how self service looks? such as adding web links etc..?

Hi Everyone,We are looking for a way to encrypt the Macs using FV2 without exposing the login credentials to the outside world. The only thing we have found so far is this command:sudo diskutil cs convert disk0s2 -passphrase passphraseThe problem comes in with how to manage that once it is in place. We like the functionality of having a "Disk Password" on boot vs showing someone a login ID, but we don't yet have a great way to manage it or even change it without decrypting and re-encrypting. We use JSS 9.62 running a Mavericks environment. If anyone has any insight, that would be great!! Thanks,Tom

Hello, I am wondering if someone has an idea of a script or something that would allow me to make all managed computers in the JSS show something in the "Computer Info" section of ARD. I have tried creating some settings changes with composer, but have not had it work on any test machines yet. Essentially what I would like to do is have it say something like "JSS Managed" in the computer info field when I'm scanning all of my networks with ARD, so at a glance I can tell which machines are managed and which ones aren't. It may be something that we even put the JSS version in to, so that we can change it every time it gets updated, and quickly look through ARD and figure out which computers have not updated themselves yet. Any ideas?

Is there anyway to disable some of the spotlight options in System Preferences? An example of this is to uncheck the Bing Web Searches when using Spotlight and others. Thanks

To run recon locally to enroll a computer, how do I get recon on that local mac?Put Casper suite on it then run recon? Then remove the suite?

Hi All, I am new to this tool. I am looking for some documents which can help me to learn and implement. ThanksKishore

How can I force a network drive to show on the desktop upon logging in? I can get the user's home drives, but not the shared network drives.

Hi, We've got a few printers in our organization that we initially put in Self Service that were installed by most of our employees. Recently, some settings needed to be changed for the printers, so that they would go through a network share instead of a direct IP address. I've updated the printer in the policy (for Self Service), but now need a way to automate a remove and reinstall of the printers on the user's computers. What I've got so far is a really simple bash script to remove the printers: lpadmin -x My_Printer1lpadmin -x My_Printer2lpadmin -x My_Printer3 My question is, is there a bash command I can append to the end of this script to launch the policy to install the printer again from Self Service? I'd be willing to try another approach if anyone was kind enough to offer one. Thanks in advance.

What's everyone doing for AD binding execution frequency? I was thinking of setting it to weekly to just rebind every computer using the default JSS Directory Binding. Does anyone have a script to determine if the trust is broken? Thanks!

We have been asked to lock down our users wallpaper. We locked the wallpaper down by placing a PNG in a folder in the /Library/FolderthatstoresPNG. Everyone has permissions to this folder. Then lock the wallpaper down with a config profile. BAM! wallpaper locked down. Well then some one was smart enough to REplace our PNG with their own PNG......So now their background is whatever they replace that PNG with. We have underestimated the sneaky sneak of some people. So now i have place the PNG in our hidden management account which is in /private/var/Managementaccount/Documents no one has permissions to this folder, so when the config profile looks for the PNG it does not find it. Is it a permissions thing? or is it that the PNG is in a hidden account? How are other people managing wallpapers? Thank you! and happy FRIDAY!

I've been busy deploying a set of JSSs, one JSS for each of my clients. With one JSS I have encountered an issue that I have not encountered with the others. What is happening is the OS X enrollment in the JSS seems to be working properly except the MDM profile is not appearing in System Preferences. The devices are appearing as enrolled in the JSS, and so far seem to be functioning normally with the JSS. Policies are executing successfully. So far the only thing I can determine to be amiss is that the MDM profile is not appearing in System Preferences. MDM profiles for iOS devices are correctly appearing in Settings/General. Does anyone have any insight as to why the MDM is not installing in System Preferences when enrolled? I am using User Initiated enrollment. Thank you.

I am sure the answer to this is completely obvious and I am just missing it for some reason. The bug with using Casper Imaging over NetBoot with a JDS master DP is really beating me up, so for the group of Macs I've got that are frequently re-imaged, I've changed to a different workflow that I actually like better: NetBoot the Mac and use Casper Imaging only to lay down a base OS image Run a script on first boot that kicks off a policy to install packages and do all the other "stuff" that is needed I've set up the policy and manually kicked it off after reimaging, but I cannot for the life of me figure out where to put the FirstRun script. Here on JAMFNation I see numerous mentions of FirstRun scripts and a lot of cool ideas on other things that can be done with them. But what is the right way to automatically trigger the script after imaging completes and the Mac reboots?

Anybody try to package Tableau? It's some sort of analytics software. The base install is just a drag/drop into /Applications but then it wants admin rights to install the licensing service..

Hi everyone, I am trying to block specific websites to a number of iOS devices in Casper via the Configuration Profiles. Looks like I have two options: - only allow specific websites- block specific websites However, when I test the second option, it also blocks other content, not just those specific websites. For instance, it blocks telegraph.co.uk. Is there a way to block just specific websites? Thanks!

I'm working on a script that would be used while a device is in the Netboot state. The script will remove the device from the JSS and Active Directory then format the HD. The part i'm hoping someone can assist with is how to get the Computer Name based on the UUID. I'm getting the UUID with the following script. uuid=$(/usr/sbin/ioreg -rd1 -c IOPlatformExpertDevice | /usr/bin/grep -i "UUID" | /usr/bin/cut -c27-62) I'm hoping this is possible so i can avoid having to prompt the tech for the device name.

Hey all,Just a quick run down of my environment...we are running MBA OS X 10.7 in a active directory environment. We just found out the new centralized printing with has an issue with how OS X sends a print job. When the OS X sends a print job to our print server (smart look server), its sends the print as "Full Name" located in the System preference/users & groups. The smart look server looks at the username field and OS X is sending that information as "Full Name" instead of the account name(username). When I change the "Full Name" to my "account name/username" (in my case "Kim, Johnny" to "jkim"), the printer sees the job is from "jkim" and is able to print. I am thinking maybe a script I can push to pull the account name and rename the "Full Name" field. Also, for those who know AD, the username has to be pulled from "User logon name" located in the account tab in AD. Reason being is be

All,I have built an NTP Patch check Attribute to identify computers not patched, and silently patch them automaticallyhttps://jumpt.wordpress.com/2015/01/07/ntp-vulnerability-check-attribute-for-casper/Feel free to comment and provide feedbackCheers