We are looking to collect the home page of our users' Safari, Firefox, and Chrome browsers. We do not need to set the home pages, only to report the home page of each browser. This might a script, or a set of scripts (or scripts driving extension attributes). The second part of this will be to report out the usage of each browser to determine the dominant browser on each system (assuming one user per system). [EDIT] While our IT provides only the ESR version of Firefox, our users are allowed to grab whatever they wish, security withstanding. [EDIT] A colleague has answered my question. Will post the script here soon.

I'm having a problem show up randomly on our 10.8.5 computers. The user will log out and when they attempt to log back in they are just shaken off. When I look at the system log I see this: Oct 21 09:14:58 COMPNAME SecurityAgent[129]: User info context values set for usernameOct 21 09:14:58 COMPNAME authorizationhost[300]: in pam_sm_authenticate(): Got user: usernameOct 21 09:14:58 COMPNAME authorizationhost[300]: in pam_sm_authenticate(): Got ruser: (null)Oct 21 09:14:58 COMPNAME authorizationhost[300]: in pam_sm_authenticate(): Got service: authorizationOct 21 09:14:58 COMPNAME authorizationhost[300]: in pam_sm_authenticate(): Context initialisedOct 21 09:14:58 COMPNAME authorizationhost[300]: in pam_sm_authenticate(): Stashing kcm credentials in enviroment for kcminit: username@domain.COMOct 21 09:14:58 COMPNAME authorizationhost[300]: in pam_sm_authenticate(): pam_sm_authenticate: ntlmOct 21 09:14:58 COMPNAME rpcsvchost[113]: failed to create secure channel: STATUS_ACCESS_DEN

Dose annone know were the ftp site is for getting the flash player .pkg? So i can use it to setup a policy to install it. Thanks

I'm probably missing something simple but it's just not coming to me at the moment. Scenario: 10.6 and 10.7 machines being upgraded to 10.9 via Self Service. JSS is 9.61, DPs are all AFP. Policies: I have one policy to cache the 10.9.5 installer onto the target machine. Then a second policy that removes an unwanted configuration profile (it was 10.7 specific) and then installs the cached OS. Issue: Everything goes through just fine and the machine finally reboots into 10.9.5. I need it at that point to do an immediate recon so it will pick up the appropriate policies for installation. I'm thinking along the lines of a single use launch daemon but haven't really worked with them before. Any pointers or (most likely better) ideas would be welcome. Thanks,TomT

Hello, I'm trying to create a policy that only grays out the policy tab in system preferences. I have that working except that it seems to gray out all other 3rd party system preference panels, except the ones that are explicitly included in the JSS (i.e. java control panel). We have several people that use programs like Hazel that require a system preference panel, and I can't figure out how to make it so ONLY the profiles pane is blocked. Any ideas?

Hey all, Does anyone have experience with migrating iPhones/iPads from Meraki over to JSS? The issue I'm running into is that I cannot enroll these devices into JSS b/c the Meraki profile is already on the device. Of course, once I remove the Meraki profile from the device, then I can enroll to JSS via SMS text. Is there any way around having to manually remove the Meraki profile for >400 users? Thanks in advance guys.

Hi, I have found 10.8+ computers easy to disable the warning about the available Yosemite update but I am looking for a way to do it on my old 10.6 computers. On the rest of my computers, I just have the Notification Center disabled. Let me know your thoughts! I know that I can go to each laptop and hide the update but I would like an easier way to push it out via a policy. Thank you!

In the past I've scoped polices to people in a department by adding all office computers, then setting a limitation to the relevant LDAP group, allowing them to run even if the computer wasn't assigned to the department correctly. I'm now at 9.62 and scope limitations offers only the options of Network Segments or iBeacons. Existing policies with limitations by LDAP group seems to still be working, but I can't limit new policies that way. Before I turn this in to a support call has anyone run into this before or have any suggestions on settings to check?

My 10.10 clients aren't reporting back the correct version to the JSS. The version displayed is (still) 10.9.5 Both my JSS as jamf framework version are 9.6

Is there any upgrade path to be followed while upgrading JSS. We are upgrading from 9.31 to 9.62. Can we do that straight away or do we need to follow another path. I couldn't find this information in the release notes.

Is there any way to promptly upgrade the Macbooks inventory in JSS.I have noticed that after upgrade to 10.10.1 the JSS is still showing 10.9.4 also after domain joined the Mac kept showing N/A till I reinstalled the QuickAdd package.

Hello Everyone, I have an issue where my OSX configuration profiles aren't showing up in their assigned category. The configuration profiles were previously assigned to categories and were displaying properly. This seemed to happen after we upgraded to 9.62. When I go into a profile it shows that it is currently assigned a category, but when I save it shows up under "No Category Assigned". I tried unassigning it from a category, saving the profile, and then re-assigning it. Still it won't show up in a category. I've tried multiple browsers on two different computers just to make sure it wasn't a browser display issue. This isn't affecting the iOS configuration profiles though, just OSX. I tried searching the forums to see if anybody else found this, but I didn't find any topics. So if this has been brought up before or I missed something I'm sorry. So, has anybody else seen this? Thanks, Scott

When creating an iOS enrollment profile there is a checkbox for "Display removal notification in inventory". Where does this notification show up when a user removes the enrollment profile? I just removed the enrollment profile from an iPad running iOS 8.1.2 (JSS is 9.62) and I don't see any notification in my Mobile Device list, or when looking at the device record itself. It shows as unmanaged, but I has hoping for something a little more "in my face" so that I would know when a user removed my ability to manage their device. The enrollment profile was installed using Apple Configurator on a supervised device. Thanks!

I know I can uninstall a JDS instance from this article here: https://jamfnation.jamfsoftware.com/article.html?id=340 , but I was wondering if anyone knows an easy way to simply update just the JDS URL without having to uninstall and reinstall? Is there an XML file maybe?

Like the title says, looking to purchase new iMacs for a lab. Currently we are running 10.9 Mavericks image we built and deploy with Casper Imaging. Since we are seeing problems with Yosemite, we are hesitant to update and would like to re-image the machines we purchase with the 10.9 image we currently use. What issues will I run into downgrading from 10.10 to 10.9?

I'm seeing an issue crop up randomly throughout my company where encrypted Time Machine drives will no longer mount. Some of these will mount on other computers but not the machine they are set as a backup destination for. Even after wiping keychain entries nothing happens. I tried changing the password on the drives too to no avail. Has anyone else experienced this problem? I'm going to start destroying the CS volumes and creating new encrypted backups but I would like to avoid that if at all possible.

All, I've been tasked to come up with a quick way to get the same functionality of KnockKnock.py https://github.com/synack/knockknock into an extension attribute. Knockknock.py is a script that has a "Who's There" output that contains a list of cron jobs, login items, startup items, KeXT files, launchD items, Launch Agents. login/out hooks, and browser extensions. I need a way to get these items into Casper for quick reporting. In the past, Casper collected the unix binaries but it doesn't seem to gather that in 9. i'm sure with some work, i could use system_profiler to pull this info an EA, but was wondering if anyone had a suggestion on making this work? I'd rather not push this script out to each device and have it create a local file. Thoughts?

Hi all, This isn't really JSS related but I'm wondering if anybody knows where to get info about the updates I have pending in my update server for OSX. I have found nothing to read about any of them. A lot are self explanatory but some I would like some more information on before testing them out. Thanks!

Where are these unicorns? http://support.apple.com/en-us/HT6596 None of my 10.8.5,10.9.5, or 10.10.1 show this update being available.

I have never touch Casper nor SQL. When trying to install JSS it is asking for my:Server Name: localhostServer Port: 3306Database Name: jamfsoftware (I have not created one. Any links on how to?)Username: jamfsoftware (is this for the OS admin or SQL user? How do I create one?)Password: Same question as above. Now I have followed the setup on this page:https://jamfnation.jamfsoftware.com/article.html?id=28This was very helpful but am stuck on trying to install JSS without really knowing what/how to use the SQL part. Thanks in advance.

We are receiving an error trying to set up new iPads that have been activated with DEP. When running Configurator the error message is"unable check iOS" or "unable to activate". A conversation with Apple Support tells us we must use either DEP or Configurator - we can not use Configurator to manage the iPads if they are enrolled through DEP. Is there a way that We can use Configurator to manage iPads that have been activated with DEP and enrolled in Casper?

I do have an Extension Attribute that is collecting an AD users login (on a Mac record) and then I am basically going to User and Location and pasting that info and doing an AD lookup (click blue mag glass icon) and all the info imports. One by one, is there a global or automated way to do this, with a script or EA. thanks in advance. john k

We are in the process of updating all our Macs to OS X 10.10 which involves moving them over to a new JSS server. I have everything working however noticed on a few devices that have moved to the new JSS (v9.6) inventory is failing. I have narrowed it down to trying to search the /Users/ folder for Applications. I have checked folder permissions and everything is fine. The weird thing is this only has happened on 3 devices so far out of 20... Has anyone else experienced this???

While experimenting with creating a new computer record via an API POST, I've found that when creating a minimal computer record (for example, just 'udid' and 'name'), the record becomes available in the JSS web interface, but no 'AutoRun Data' button is offered. If, however, I add a second computer record using the XML that I've taken from a 'complete' computer record (with identifying parameters like MACs, serial, udid, etc modified of course), this newly created record does offer the button to set AutoRun data. It appears that there is some minimum information (beyond Name and UDID) is needed in the computer record before the JSS will allow setting AutoRun data. Does anyone know what these items are? Thanks,Robin

Hey all,Not sure if anyone else has seen this, or is having the same issue, but I just noticed that, at least with version 9.61 of Composer, if I add in a script, like a postinstall script and I type directly into it, it INSISTS on converting all my quotes (double or single) into curly quotes. No matter what I do I cannot stop it from doing that, short of writing the script in an external application like TextWrangler (I usually do this anyway) and then copying/pasting it into the script editing window in Composer. Then it retains the straight quotes format, but typing directly in, no go.And there is no option I see in Composer's preferences to stop it from doing this. It doesn't seem linked to an external app like TextEdit either. I already changed TextEdit's preferences not to use curly quotes long ago. Restarting Composer hasn't helped. The bizarre behavior remains. I would think this has to be a bug. This is a script writing window, not a fancy text editor. It