Looking for an Extension Attribute to determine if a Mac has Sharing > Printer Sharing is checked. Current Process:We currently send this command using Casper Remote to individual computers when needed to turn off printer sharing. We could create a policy to run this each week but are looking for something more automated.[cupsctl --no-share-printers] Ideal Process:Have an Extension Attribute which identifies computers that have Printer Sharing checked and add this device to a Smart Computer Group. A policy would be created scoped to this smart group which would run the command [cupsctl --no-share-printers] under Files and Processes. Any suggestions are appreciated?Thank you, Karl SengerSystems EngineerSchool District of MiltonMilton, WI

This is just an FYI for everyone. We have discovered the OVA for the NetSUS appliance is incompatible with ESXi 5.1 Update 1. The problem is the Ubuntu 14.04.1 LTS that the OVA is based on. The guest is constantly losing network connectivity and is unusable as a result. ESXi 5.1 update 2 or newer will work. Roger HerlingUL LLC

added a policy to add a local account in casper to use as an admin account to login to the MacAir computers we have here at school. I enabled both 'Allow user to administer computer and Enable user for FileVault 2' and added the computers to the scope. Once the policy is created and I restart the computer ( I can see the computer(s) check-in casper,) I can login to the computers as the admin with no issues The weird thing is that if I re-enrol a computer more than once (using sudo jamf enroll -prompt or using casper suite) the local admin account that I created stops working, Can't login to any of the computers as that local admin account. It happened once, created a new local account, it fixed the problem but I had to do a another re -enrolment more than once and the local account stopped working again. Any idea how to solve the problem? anything I'm doing wrong? Hope what I just said makes sense. Cheers, Henry

I'm trying to download a shell script from the distribution point and install it but i have no clue how to package it, If i put it as a script in the policy it doesn't install. is there a way to package it to install it on the computer so it will unzip and install?

Apologies for bringing up something that has been covered here before, but the solution still seems rather opaque to me as I have never used MCX for anything. We have about 200 Macs in labs and now that we are using Casper 9.61, I would like to stop using the default user template and use MCX or some other method involving MDM (if possible) to ensure our non-admin AD users who login to these Mac systems don't have to personalize Office 2011 and wait for its font cache to build every time they login for the first time -- which for some of our labs means every time they login. I see in my JSS there is a way to do some MCX things but I need a little more of a step-by-step guide to get this working. If you already have this working, please share. I read most of the articles I could find in messages here on JAMF Nation but a lot of them are dated or those websites don't exist anymore. This article in particular seems very good: http://managingosx.wordpress.com/2012/07/27/mountai

Is there anyway to search for a Mac running a bootcamp partition? Or maybe just search for NTFS partitions?

Aim : to get an application to automatically open upon login for users. Problem : I've been trying to figure out the best way to try and get an application to start at login for users. What i've found is that its impossible to do in Casper unless you have machines being controlled by work group manager. This is due to the fact that under the users preferences the login items are added as a dict entry. It would be possible to This is not an issue if you are creating these files for new users but they are for existing users who have already modified their login items. Solution : The only way around this that i found was to write a simple script to create my own personal folder within their library, from that i can then write a file which i use as a flag to turn on or off the automatic open command for the application. I use the simple "open" command to open the application every time and then exempt users by removing the file created in the directory i created.

Greeting all - When trying to open a hyperlink from any of the Office 2011 applications, I am met w/ the following error: Cannot locate the Internet server or proxy server. If I copy and paste the URL directly into any browser it opens without issue. Has anyone come across this in the past? Have you identified the cause and solution? If not, does anyone have any ideas that might resolve this issue? Office version: 14.2.3

Hello Everyone, I would like to first off thank everyone ahead of time for any advice and/or information.I work at a private school that has implemented a macbook program to our students. They receive the device their freshman year and get to keep it once they graduate our school. Once they graduate, we will need to start the process to transfer ownership of the device to them. The question is, what is the best practices for removing all casper related apps, configs, and framework from the device?As of right now, I have a self service policy that has a configuration that removes the apps, admin account, unbinds from AD, and then runs the sudo jamf removeframework. Problem is the app package removal is specific, is there a way to make it dynamic to remove all Casper installed Apps?

Strange question or not, not sure if this is but I'm asking. after imaging a computer, how are you admins getting user accounts setup on your imacs/macbook pros etc.. for users to then login? i'm assuming if the imaged mac is joined to an active directory domain, then the user can login with there active directory username/password. if these macs are not joined to a domain do I have to create user account(s) somewhere in the imaging process configuration?

Wondering if anyone else has come across this. I have a JDS running on RHEL, I initially tried to transfer an Adobe CC package that was about 14GB in size via Casper Admin...that didn't seem to work correctly, I Google'd looking for possible reasons why and I came across a few posts that Casper Admin has problems transferring packages larger than 10GB, that I would need to do a manual transfer. So I opened a Terminal to the JDS and used RSYNC to transfer the file over. It transfer into the CasperShare folder without any problems, when I run sudo jamfds inventory it gets deleted and I not sure why. When I look at the jamf.log, i see this line: 2015-01-15 11:04:28,079 INFO Deleting package "Adobe_CS_Video_2014_DEC_Install.pkg.zip" And then it completes sending inventory to the JSS. I then go into the JSS, and of course, looking at the JDS instance it doesn't show any packages. Not sure what's going on and/or how else to get this package onto the JDS. I am running Casper Suite 9

Has anyone packaged this with AAMEE?

Hi -- We're new to the JSS and are looking to create a script that will prompt the user on enrollment to choose if the device is Personal or Enterprise Owned, and then have it populate an Extension Attribute. Then we could create a smart group to exclude those personal devices from certain policies. Has anyone ever done something like this before or is there a better way?? Any help is GREATLY appreciated!

Hey guys, is there a way to set the time server before the mac is bound to AD? We have a script for this, but setting this to "After" won't set the time zone for the new imaged volume."At Reboot" will set the time server after the integrated AD bind, so that this won't work. The only way I see for this is to manually script the AD bind and set the time server before. Just wanted to check with you guys if there's another way I can't see at the moment... Thanks! :)

Issue: Just created a 10.10 NetInstall Image, using the 10.10 System Image Utility. Copied it up to my NetBoot Server running 10.9.5 and the most recent version of Server 3. The NetInstall image isn't displayed in the list of images. All my other NetBoot and NetInstall images are being displayed okay (just built a 10.9.5 NetInstall too, and it installed fine). In the past, there wasn't a requirement to have the most recent OS to serve out the most current OS NetInstalls (for example, I was serving OS X 10.9 NetInstall Images on my 10.6.8 Server before I upgraded). Is anyone else running into this? I tried rebuilding the NetInstall twice, to make sure it wasn't just a corrupted build from SIU. ~Ted

We are using the OSX (10.10) AD plug-in for our clients. So far dsconfig -preferred is set to nopreferred which should lead to dynamic server discovery.We are using MS DNS Servers with defined _sites to set the "right" Domain Controller. I wanted to check if it works correctly since it seems the clients do not use the right DC I can query the _sites withdig -t SRV _ldap._tcp."site-name"._sites."domain.com"The Answer-Section is correct. How can I check whether the client "knows" the right "site-name"Can anyone help me with the respective dig command? Any other remarks? Do you use the _sites or are you setting the dsconfig -preferred manually ?Thanks!

Is anyone else seeing this? We have JSS's on 9.61 authenticating to the same LDAP server without issue. Since bumping 3 x JSS's to 9.62 we can no longer auth with LDAP credentials....

I just upgraded on of my Apple software update servers from Mavericks to Yosemite. The software update service still says it's running but it doesn't actually work. Anyone have a similar experience or troubleshooting advice?

So since our upgrade to 9.63 we are seeing the JSS be very slow to respond. Working on it with support currently, but wondering if anyone else is seeing this? Gabe ShackneyPrinceton Public Schools

What happens when the number of systems in your casper inventory exceeds the number of systems you are licensed for? WIll things start breaking or not functioning anymore in the JSS? WIll casper arbitrarily decide which machines it will manage? We have a license for 585 machines but currently show 725 in inventory (and in red under the general jss settings tab). About 260 of those machines are no longer in use but we have to maintain inventory records for them for both legal and accounting purposes. Is there a way to reclaim those licenses? Would being over our "limit" affect the performance of the jss or client machines in any way. We do seem to be having an issue lately with machines that do not check in and I was wondering if this might be related.

Hey all, I'm trying to find a web based, simple to use, sign in/sign out style for the student laptop carts. How are some members here tracking cart usage? We want to be able to see the history of which teacher 'borrowed' the cart on what day (log) along with being able to reserve.

Systems Prefs > Network Anyone seeing anything like this: For some unknown reason, after imaging with Casper Imaging, and logging in for the firs time, Systems Prefs > Network,the "Ethernet" network interface is labeled "Wi-Fi". When you try to add Ethernet, you cannot, because it in reality it is Ethernet but named Wi-Fi. Adding or adjusting new network interfaces is subsequently just a mess. One has to completely remove all network interfaces and re-add. A pain. Very weird. I am not sure if this is a Casper Imaging thing, a Yosemite OS X thing, or a combo of the two. If I do a Casper Imaging with only the OS 10.10, it's fine. But if it's the full Configuration, with apps and scripts, this is what happens. It could be the OS 10.10 image. I am going to redo the base OS 10.10 image on a recently shipping Haswell iMac, and see what I get

Hi all, When we compile our configurations, we're constantly asked for administrator credentials throughout the process, which means we have to sit in front of the machine and type it in all day long. I feel like there'd be a simple resolution for this, but can't find anything through my searches. Anyone out there know how to stop this, so that we can kick off the compile and leave it to finish? Cheers,Gavin

I'm trying to tidy up my search domain script by only grabbing the available network interfaces. If I use my existing one from my first boot script I receive errors due the fact that not all of them are present. It doesn't effect the search domain being applied, but the end user sees the error through self service attempting to run it multiple times. Anyway here's what I have so far. I can't figure out how to escape the space in between say Display Ethernet or to keep Wi-Fi intact. #!/bin/bash declare -x SearchDomains="my.domain.com" export devlist="$(networksetup -listnetworkserviceorder | grep Hardware | sed -e 's/^(H.*rt: (.*), Device: (.*))/1/' -e 's/[()*#]//g' -e 's/[ -]/_/g')" echo My device list: for dev in ${devlist}; do /usr/sbin/networksetup -setsearchdomains ${dev} ${SearchDomains}; done echo exit 0

Colour me stupid, but I can't seem to find where I am able to edit this?The addition comment states "The Casper Suite version 9.5 introduces the ability to set and enforce mobile device names. Names can be set using a PreStage enrollment or from individual mobile device records."But I cannot seem to find where in my individual device record.