We are using the OSX (10.10) AD plug-in for our clients. So far dsconfig -preferred is set to nopreferred which should lead to dynamic server discovery.We are using MS DNS Servers with defined _sites to set the "right" Domain Controller. I wanted to check if it works correctly since it seems the clients do not use the right DC I can query the _sites withdig -t SRV _ldap._tcp."site-name"._sites."domain.com"The Answer-Section is correct. How can I check whether the client "knows" the right "site-name"Can anyone help me with the respective dig command? Any other remarks? Do you use the _sites or are you setting the dsconfig -preferred manually ?Thanks!

Is anyone else seeing this? We have JSS's on 9.61 authenticating to the same LDAP server without issue. Since bumping 3 x JSS's to 9.62 we can no longer auth with LDAP credentials....

I just upgraded on of my Apple software update servers from Mavericks to Yosemite. The software update service still says it's running but it doesn't actually work. Anyone have a similar experience or troubleshooting advice?

So since our upgrade to 9.63 we are seeing the JSS be very slow to respond. Working on it with support currently, but wondering if anyone else is seeing this? Gabe ShackneyPrinceton Public Schools

What happens when the number of systems in your casper inventory exceeds the number of systems you are licensed for? WIll things start breaking or not functioning anymore in the JSS? WIll casper arbitrarily decide which machines it will manage? We have a license for 585 machines but currently show 725 in inventory (and in red under the general jss settings tab). About 260 of those machines are no longer in use but we have to maintain inventory records for them for both legal and accounting purposes. Is there a way to reclaim those licenses? Would being over our "limit" affect the performance of the jss or client machines in any way. We do seem to be having an issue lately with machines that do not check in and I was wondering if this might be related.

Hey all, I'm trying to find a web based, simple to use, sign in/sign out style for the student laptop carts. How are some members here tracking cart usage? We want to be able to see the history of which teacher 'borrowed' the cart on what day (log) along with being able to reserve.

Systems Prefs > Network Anyone seeing anything like this: For some unknown reason, after imaging with Casper Imaging, and logging in for the firs time, Systems Prefs > Network,the "Ethernet" network interface is labeled "Wi-Fi". When you try to add Ethernet, you cannot, because it in reality it is Ethernet but named Wi-Fi. Adding or adjusting new network interfaces is subsequently just a mess. One has to completely remove all network interfaces and re-add. A pain. Very weird. I am not sure if this is a Casper Imaging thing, a Yosemite OS X thing, or a combo of the two. If I do a Casper Imaging with only the OS 10.10, it's fine. But if it's the full Configuration, with apps and scripts, this is what happens. It could be the OS 10.10 image. I am going to redo the base OS 10.10 image on a recently shipping Haswell iMac, and see what I get

Hi all, When we compile our configurations, we're constantly asked for administrator credentials throughout the process, which means we have to sit in front of the machine and type it in all day long. I feel like there'd be a simple resolution for this, but can't find anything through my searches. Anyone out there know how to stop this, so that we can kick off the compile and leave it to finish? Cheers,Gavin

I'm trying to tidy up my search domain script by only grabbing the available network interfaces. If I use my existing one from my first boot script I receive errors due the fact that not all of them are present. It doesn't effect the search domain being applied, but the end user sees the error through self service attempting to run it multiple times. Anyway here's what I have so far. I can't figure out how to escape the space in between say Display Ethernet or to keep Wi-Fi intact. #!/bin/bash declare -x SearchDomains="my.domain.com" export devlist="$(networksetup -listnetworkserviceorder | grep Hardware | sed -e 's/^(H.*rt: (.*), Device: (.*))/1/' -e 's/[()*#]//g' -e 's/[ -]/_/g')" echo My device list: for dev in ${devlist}; do /usr/sbin/networksetup -setsearchdomains ${dev} ${SearchDomains}; done echo exit 0

Colour me stupid, but I can't seem to find where I am able to edit this?The addition comment states "The Casper Suite version 9.5 introduces the ability to set and enforce mobile device names. Names can be set using a PreStage enrollment or from individual mobile device records."But I cannot seem to find where in my individual device record.

Hey guys...I've made a configuration profile using profile manager on OS X Server 3.2.1. I'm making it there so my 3rd party preference panes don't get greyed out with restrictions in configuration profiles as they do when made on the JSS directly. Is there a way to export this configuration profile from profile manager and/or the client they're installed on from profile manager and then import to the JSS for use and deployment? Let me know what you guys think and thanks as always for any help you provide. This is for JSS 9.61 and then also possibly 8.73.

How can I deploy an empty folder named "Room 23" on a desktop or dock on a mac cart??

I just downloaded the Adobe Distribution license for Flash. I went to the download link provided by Adobe and downloaded install_flash_player_14_osx_pkg.dmg which says it is the version for System Administrators. There is another version... not labeled as for System Administrators... I downloaded it also... not sure which one I need to use. In a nutshell, I want to push out the Flash Update and turn on the silent auto-update feature on the Mac Clients. I know there are many views on turning on Auto-Update... I am not as concerned as other... It's my decision and I am totally fine with Flash auto updating in my environment. If it were a Java Update, I would feel differently. Does anyone have a working "set procedure" to deploy the latest Flash with Casper and deploy via Self Service? Thanks,Ray

Is the Jamf NetSus (3.0.2) solution able to distribute Yosemite updates out of the (virtual) box, or do I need to update come configs I cannot see anything in the documentation about supported OS versions? Thanks in advance! Mike

Has anyone done any work to create an Extension attribute to list systems that have a mobile account? Doesn't necessarily need to iterate what those accounts are (although it would be nice), just that there are 1 or more. Reason I want it is that we use AD accounts, and FV2 can't be enabled for an AD account until they're mobile. So i want to scope my FV2 policy to only systems that have a mobile AD user.

Has anyone seen this issue with:/usr/local/sbin/jamfds enroll --prompt cat /usr/local/jds/logs/jamf.log...reveals the following:xxxx-xx-xx xx:xx:xx,527 ERROR (77, 'Problem with the SSL CA cert (path? access rights?)')Traceback (most recent call last): File "/home/dev/jenkins/workspace/jamfds-build-release/label/build-rhel-jds.jamfsw.corp/build/pyi.linux2/jamfds/out00-PYZ.pyz/jss_comm", line 81, in _performerror: (77, 'Problem with the SSL CA cert (path? access rights?)’)...

Hi all, I am very new to JAMF and need some help. In our environment we are not able to set up a LDAP. And currently when computers are added to the inventory the location field is left blank. Is there a way to bind Location information with the subnet the computer is on. I have set up the multiple locations/building/subnets we have and would like a way for the location to be auto-populated based on the IP it receives. Thanks for any and all help.Amit

Anyone have a command to change the default paper size for all users in Yosemite?

Hi All, I am REALLY new to scripting and bash scripts. I just wrote my first one and can execute it from Terminal on a test machine. I have set the .sh file to be executable as well. I have copied it over to Casper Admin and applied it to run at reboot. The settings from the script are not set. We only have the imaging suite (not the whole suite with self service). We are using Casper Admin 8.72. Thanks for any help! Any suggestions on what I am doing wrong? #!/bin/bash #This script is to set the initial settings of OS X machines. #Enable Remote Destkopsudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -on -users admin -privs -all -agent -menu #Set All Users and User Permissions sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -allowAccessFor -allUsers -privs -DeleteFiles -ControlObserve -TextMessages -OpenQuitApps -GenerateReports -RestartShutDown -Sen

Hello, I have an LDAP integration which is working fine but i am having problems filling the Building information.Problem is that on my LDAP I don't have a field just for Building. It is actually the first 3 letters from a field called UserLocation.For example:User location is MNL 05K325 where MNL is the building.Is there anyway I can trim it to fill in the Building information?

Hello, Is anyone having issues specifically with Under 13 Student Apple IDs with DEP on the MDM side of things? Are you having success with DEP and Student Apple IDs Under 13?

EDIT: To save everyone the trouble who runs across this post posting the TL;DR version. - Couldn't get older macs to boot to a 10.8 NBI or 10.9 NBI on a Yosemite Host running Server v4 unless the NBI I'm using is 10.10. My old macs can't boot or install 10.10 so they weren't booting. Newer macs booting 10.10 fine. - Tried AutoCasperNBI, tried Casper NetInstall Image Creator, tried AutoDMG, tried building from scratch an image of a Macbook Pro, tried building from scratch an image of an old original Mac, tried wiping clients folder, tried making sure it was the only NBI in the folder, tried PRAM resets on boot, tried everything I could think of. @pblake][/url found the fix for me. I installed Server v3.2.1 on a Macbook Pro running 10.9.5 then was able to boot a 10.9 NBI on old and new machines. I can also boot 10.8 NBIs now. So for now I will run this 10.9 macbook pro and never update it for imaging anything older than 10.10. I will also run the 10.10 server for anything newer that

I have recently started using Jamf with our organization. I have about 20 users who have already installed FileVault on their computer. I tried enabling a policy on their computer with our new file vault settings form Jamf. It successfully rebooted their computer and the policy says it was completed, but it does not save the key to the JSS. Is there any way to have it save the recovery key from an existing file vault to JSS without unencrypting the entire disk, then re-encrypting it?

when creating (running JSS 9.61 on OS X.7)Create an account that has "Ready only" access to the share.Create an account that has "Ready & Write" access to the share. Is it just a matter of going into system preferences and creating 2 standard users and providing them the above access?I have done this and now both accounts are created, and both accounts are seen in the 'DISPLAY LOGIN WINDOW' -- list of users Is this supposed to be the case ??? these 2 users are not actually used for anything but the file share distribution point and will not be used to login with?

Here’s what we are on: MacBook pro retina 2014JSS version 9.3OSX version 10.9.xOSX bind to our AD domain during casper imaging processSoftware load on startup: casper, crashplan, symantec. We deployed about 30 macs back in July of 2014, everything was running ok until late October of 2014.All of sudden, about half of the users developed an issue where upon a reboot, it would take about 5 min before they can enter their password.Some of them will need another 5 min after they enter their password before they see their desktop. This happens with the domain account as well as the local admin account we had setup on machine with issues.Looking back on the logs with the machines in question, some of them got some MDM client error as well as an error that says "this account has been deleted from under us".We’ve worked with the jamf support group in removing the jamf framework and the issue still happens.Wonder if anyone has seen anything like this and can lend a hand? Thanks!