What's everyone doing for AD binding execution frequency? I was thinking of setting it to weekly to just rebind every computer using the default JSS Directory Binding. Does anyone have a script to determine if the trust is broken? Thanks!

We have been asked to lock down our users wallpaper. We locked the wallpaper down by placing a PNG in a folder in the /Library/FolderthatstoresPNG. Everyone has permissions to this folder. Then lock the wallpaper down with a config profile. BAM! wallpaper locked down. Well then some one was smart enough to REplace our PNG with their own PNG......So now their background is whatever they replace that PNG with. We have underestimated the sneaky sneak of some people. So now i have place the PNG in our hidden management account which is in /private/var/Managementaccount/Documents no one has permissions to this folder, so when the config profile looks for the PNG it does not find it. Is it a permissions thing? or is it that the PNG is in a hidden account? How are other people managing wallpapers? Thank you! and happy FRIDAY!

I've been busy deploying a set of JSSs, one JSS for each of my clients. With one JSS I have encountered an issue that I have not encountered with the others. What is happening is the OS X enrollment in the JSS seems to be working properly except the MDM profile is not appearing in System Preferences. The devices are appearing as enrolled in the JSS, and so far seem to be functioning normally with the JSS. Policies are executing successfully. So far the only thing I can determine to be amiss is that the MDM profile is not appearing in System Preferences. MDM profiles for iOS devices are correctly appearing in Settings/General. Does anyone have any insight as to why the MDM is not installing in System Preferences when enrolled? I am using User Initiated enrollment. Thank you.

I am sure the answer to this is completely obvious and I am just missing it for some reason. The bug with using Casper Imaging over NetBoot with a JDS master DP is really beating me up, so for the group of Macs I've got that are frequently re-imaged, I've changed to a different workflow that I actually like better: NetBoot the Mac and use Casper Imaging only to lay down a base OS image Run a script on first boot that kicks off a policy to install packages and do all the other "stuff" that is needed I've set up the policy and manually kicked it off after reimaging, but I cannot for the life of me figure out where to put the FirstRun script. Here on JAMFNation I see numerous mentions of FirstRun scripts and a lot of cool ideas on other things that can be done with them. But what is the right way to automatically trigger the script after imaging completes and the Mac reboots?

Anybody try to package Tableau? It's some sort of analytics software. The base install is just a drag/drop into /Applications but then it wants admin rights to install the licensing service..

Hi everyone, I am trying to block specific websites to a number of iOS devices in Casper via the Configuration Profiles. Looks like I have two options: - only allow specific websites- block specific websites However, when I test the second option, it also blocks other content, not just those specific websites. For instance, it blocks telegraph.co.uk. Is there a way to block just specific websites? Thanks!

I'm working on a script that would be used while a device is in the Netboot state. The script will remove the device from the JSS and Active Directory then format the HD. The part i'm hoping someone can assist with is how to get the Computer Name based on the UUID. I'm getting the UUID with the following script. uuid=$(/usr/sbin/ioreg -rd1 -c IOPlatformExpertDevice | /usr/bin/grep -i "UUID" | /usr/bin/cut -c27-62) I'm hoping this is possible so i can avoid having to prompt the tech for the device name.

Hey all,Just a quick run down of my environment...we are running MBA OS X 10.7 in a active directory environment. We just found out the new centralized printing with has an issue with how OS X sends a print job. When the OS X sends a print job to our print server (smart look server), its sends the print as "Full Name" located in the System preference/users & groups. The smart look server looks at the username field and OS X is sending that information as "Full Name" instead of the account name(username). When I change the "Full Name" to my "account name/username" (in my case "Kim, Johnny" to "jkim"), the printer sees the job is from "jkim" and is able to print. I am thinking maybe a script I can push to pull the account name and rename the "Full Name" field. Also, for those who know AD, the username has to be pulled from "User logon name" located in the account tab in AD. Reason being is be

All,I have built an NTP Patch check Attribute to identify computers not patched, and silently patch them automaticallyhttps://jumpt.wordpress.com/2015/01/07/ntp-vulnerability-check-attribute-for-casper/Feel free to comment and provide feedbackCheers

We have had a few students that have, for various reasons, switched appleID's this year after entering into the Managed distribution agreement. This has become quite problematic for us, in that the only way we can access the apps that are assigned to the user are by logging out of the ID they are supposed to be using, logging into their old id, downloading the app and then going back to the correct appleID. Are there any other work arounds for this?I have tried removing them from the scope, removing all instances of them receiving apps and re-inviting them, but continue to get the message that the "user is already associated" Please help!

Hey, So I'm curious about if there is a way to flush an existing cache through the JSS itself, without having to go through a terminal command. Here's my situation. I had 10.10.1 cacheing on all computers running 10.9.x, and now that 10.10.2 has come out, I would love to just clear that out and have it cache 10.10.2 instead. Is there a relatively simple way to do this?

Hey All, I just finished an upgrade of Casper 9.25 to 9.63 that returned no errors, yet I'm unable to restart Tomcat7 after the installation has completed. Would this be due to the Tomcat config files being overwritten, as it's installed by default when using the JSS Installer? The service returns no error, but stops immediately after it starts. Happy to provide more information, and thanks in advance for the help!

For years this has annoyed me, but why doesn't the implementation of XMPP used by OS X Server work with iOS? Am I crazy or what? This seems like something that institutions would want. We use it for chat on Mac OS and Windows just fine. It would be great to have it working with iOS and Android too. Anyone doing this? thanks!

We have a request from one of the clients we support to deploy EnCase software to the Mac environment. Has anyone here used Casper to deploy this? Deployment is to mixed 10.4/5/6 Macs running mix of PowerPC/Intel architecture. Was hoping to hear from anyone about any gotcha's, deployment issues, post-deployment issues, etc. I went to the Guidance Software site, they require a Dongle ID to access their KB library and support forums, so we're unable to do the usual legwork... Thanks,Don

Hi guys I'm on 10.8.2 and I have noticed since 10.8 now and again I am getting a grey screen where the login window should be. I am finding I have to reboot about 3 times to get the login screen. Has anyone else experienced this? Think I'm going mad now

Anyone deployed this way, or working on it now? We're working to set up Yosemite upgrades via Casper. Our cloud distribution point is hosted on Rackspace. So far, no success in caching/install cached or straight install. No errors in policy. Policies are set exactly as described in "Deploying-OS-X-v10.7-or-Later-with-the-Casper-Suite.pdf". Caching policy log is as follows, but after policy runs, nothing is cached:Executing Policy Cache OS X Yosemite...Caching package Install OS X Yosemite.InstallESD.dmg...Downloading https://9bbaa494b4fe0c9e8570-5b2b231437995cc73773c37901d2ed4d.ssl.cf1.rackcdn.com/Install%20OS%20X%20Yosemite.InstallESD.dmg...Verifying DMG...Running Recon...Retrieving inventory preferences from https://jss.jamfcloud.com/winnow/...Locating accounts...Locating software updates...Searching path: /ApplicationsGathering application usage information... Straight install policy runs but does not install anything:Executing Policy Install OS X Yosemite...Downloa

I have a question, I have our student one to one computers restricted so they can only open things from the Applications folder and nothing in the Utility's and nothing elsewhere. When they open Google Chrome it pops up is there any quick script I could roll out that fixes this? Nicholas

Our Macbooks join domain at following triggers. - login- recurring policy the problem is that even though the mac has joined the domain, the Inventory is not updated for a while and the smart group is not updated and keep showing that computer as domain not joined. Consequently the domain join process keeps repeating itself at the triggers mentioned above.

Back in Version 8 of the JSS you used to be able to search a user name and see all the useage logs for that user. Is there now a similar feature? I am trying to track a users usage on a particular date. Gabe ShackneyPrinceton Public Schools

Hello all, fairly new to Casper suite, and using 9.63.Is there a way to have apps appear in multiple categories? - I have the categories broken down (OX updates, Productivity, etc) and I want to create an "ALL" category to place the apps in as well. Thanks

I've created an extension attribute to list the number of USB printers a computer has, returning an integer. I can create a Smart Group or Advanced Search based on the results, but is there any way to return a sum of printers as the result rather than a count of computers with USB printers?

Hey Gang, Our set up:JSS v9.63 Our Issue:We're seeing that editing info in the JSS via the web interface doesn't save certain crucial information. This includes (but maybe isn't limited to): package limitations, timing for launching policies and more. I posted a video to better demonstrate what we're seeing. Browsers Tested:Chrome v39.0 & Safari 7.1.2 Here's the link to the vid: https://www.youtube.com/watch?v=L9P31uDn69M&feature=youtu.be As you can see in the video, the JSS will not save changes we're trying to make to a particular pkg's limitations. Only by going to the file via the Casper Admin application can changes be made. Is anyone else seeing this problem? If so, have you found a fix for it? Cheers and thanks!

Hi all, We're being asked to remove local admin rights from our users but some users will still require sudo access. How can I remotely add a user to sudoers? I've tried running this command with a policy/casper remote/ARD but it's not working: echo 'username ALL=(ALL:ALL) ALL' >> /etc/sudoers The command executes successfully but when I check the sudoers file nothing has changed.

I have created a package with CreateOSXInstallPkg (nothing but the OS in the package) and put it into Self Service for testing. If File Vault is enabled, we're getting this error message: Copying InstallOSX_10.10.1_14B25.pkg...Installing InstallOSX_10.10.1_14B25.pkg...Installation failed. The installer reported: installer: Package name is OS Xinstaller: Installing at base path /installer: The install failed (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.) If File Vault is NOT enabled, everything works just fine. Has anyone else seen this or have any suggestions as to what may be causing it? From everything I read on the site for that software, it should prompt for the FileVault password on reboot, but the policy is failing before it even tries to finish up and reboot itself. Just in case anyone needs to know, we're running Casper 9.62.

I've spent my day working with FV2 and VMWare images. Now that I have the VMWare imaging issues resolved, i moved on to testing the FV2 (which is why I was messing with VMWare in the first place). When I follow Rich's guide to enable FV through Self Service - I ran into a problem that seemed to stem from the root user being disabled - according to https://jamfnation.jamfsoftware.com/discussion.html?id=7051. for giggles I removed the command from the firstboot script and rebuilt the machine (a VM and a MBP) Lo and behold when I log out of SS it prompts to enter my PW (yay!!!) and then immedately throws up the following message (slightly paraphrased) (boo!!!). There was a problem enabling FV on your computer. You should use system preferences security & privacy to view or change filevault. The only thing in the log when I search for "filevault" is ManagedClient[597]: MCX.doCmdLogout: setupFileVaultFDE enable returned 18