Hey guys...I've made a configuration profile using profile manager on OS X Server 3.2.1. I'm making it there so my 3rd party preference panes don't get greyed out with restrictions in configuration profiles as they do when made on the JSS directly. Is there a way to export this configuration profile from profile manager and/or the client they're installed on from profile manager and then import to the JSS for use and deployment? Let me know what you guys think and thanks as always for any help you provide. This is for JSS 9.61 and then also possibly 8.73.

How can I deploy an empty folder named "Room 23" on a desktop or dock on a mac cart??

I just downloaded the Adobe Distribution license for Flash. I went to the download link provided by Adobe and downloaded install_flash_player_14_osx_pkg.dmg which says it is the version for System Administrators. There is another version... not labeled as for System Administrators... I downloaded it also... not sure which one I need to use. In a nutshell, I want to push out the Flash Update and turn on the silent auto-update feature on the Mac Clients. I know there are many views on turning on Auto-Update... I am not as concerned as other... It's my decision and I am totally fine with Flash auto updating in my environment. If it were a Java Update, I would feel differently. Does anyone have a working "set procedure" to deploy the latest Flash with Casper and deploy via Self Service? Thanks,Ray

Is the Jamf NetSus (3.0.2) solution able to distribute Yosemite updates out of the (virtual) box, or do I need to update come configs I cannot see anything in the documentation about supported OS versions? Thanks in advance! Mike

Has anyone done any work to create an Extension attribute to list systems that have a mobile account? Doesn't necessarily need to iterate what those accounts are (although it would be nice), just that there are 1 or more. Reason I want it is that we use AD accounts, and FV2 can't be enabled for an AD account until they're mobile. So i want to scope my FV2 policy to only systems that have a mobile AD user.

Has anyone seen this issue with:/usr/local/sbin/jamfds enroll --prompt cat /usr/local/jds/logs/jamf.log...reveals the following:xxxx-xx-xx xx:xx:xx,527 ERROR (77, 'Problem with the SSL CA cert (path? access rights?)')Traceback (most recent call last): File "/home/dev/jenkins/workspace/jamfds-build-release/label/build-rhel-jds.jamfsw.corp/build/pyi.linux2/jamfds/out00-PYZ.pyz/jss_comm", line 81, in _performerror: (77, 'Problem with the SSL CA cert (path? access rights?)’)...

Hi all, I am very new to JAMF and need some help. In our environment we are not able to set up a LDAP. And currently when computers are added to the inventory the location field is left blank. Is there a way to bind Location information with the subnet the computer is on. I have set up the multiple locations/building/subnets we have and would like a way for the location to be auto-populated based on the IP it receives. Thanks for any and all help.Amit

Anyone have a command to change the default paper size for all users in Yosemite?

Hi All, I am REALLY new to scripting and bash scripts. I just wrote my first one and can execute it from Terminal on a test machine. I have set the .sh file to be executable as well. I have copied it over to Casper Admin and applied it to run at reboot. The settings from the script are not set. We only have the imaging suite (not the whole suite with self service). We are using Casper Admin 8.72. Thanks for any help! Any suggestions on what I am doing wrong? #!/bin/bash #This script is to set the initial settings of OS X machines. #Enable Remote Destkopsudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -on -users admin -privs -all -agent -menu #Set All Users and User Permissions sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -allowAccessFor -allUsers -privs -DeleteFiles -ControlObserve -TextMessages -OpenQuitApps -GenerateReports -RestartShutDown -Sen

Hello, I have an LDAP integration which is working fine but i am having problems filling the Building information.Problem is that on my LDAP I don't have a field just for Building. It is actually the first 3 letters from a field called UserLocation.For example:User location is MNL 05K325 where MNL is the building.Is there anyway I can trim it to fill in the Building information?

Hello, Is anyone having issues specifically with Under 13 Student Apple IDs with DEP on the MDM side of things? Are you having success with DEP and Student Apple IDs Under 13?

EDIT: To save everyone the trouble who runs across this post posting the TL;DR version. - Couldn't get older macs to boot to a 10.8 NBI or 10.9 NBI on a Yosemite Host running Server v4 unless the NBI I'm using is 10.10. My old macs can't boot or install 10.10 so they weren't booting. Newer macs booting 10.10 fine. - Tried AutoCasperNBI, tried Casper NetInstall Image Creator, tried AutoDMG, tried building from scratch an image of a Macbook Pro, tried building from scratch an image of an old original Mac, tried wiping clients folder, tried making sure it was the only NBI in the folder, tried PRAM resets on boot, tried everything I could think of. @pblake][/url found the fix for me. I installed Server v3.2.1 on a Macbook Pro running 10.9.5 then was able to boot a 10.9 NBI on old and new machines. I can also boot 10.8 NBIs now. So for now I will run this 10.9 macbook pro and never update it for imaging anything older than 10.10. I will also run the 10.10 server for anything newer that

I have recently started using Jamf with our organization. I have about 20 users who have already installed FileVault on their computer. I tried enabling a policy on their computer with our new file vault settings form Jamf. It successfully rebooted their computer and the policy says it was completed, but it does not save the key to the JSS. Is there any way to have it save the recovery key from an existing file vault to JSS without unencrypting the entire disk, then re-encrypting it?

when creating (running JSS 9.61 on OS X.7)Create an account that has "Ready only" access to the share.Create an account that has "Ready & Write" access to the share. Is it just a matter of going into system preferences and creating 2 standard users and providing them the above access?I have done this and now both accounts are created, and both accounts are seen in the 'DISPLAY LOGIN WINDOW' -- list of users Is this supposed to be the case ??? these 2 users are not actually used for anything but the file share distribution point and will not be used to login with?

Here’s what we are on: MacBook pro retina 2014JSS version 9.3OSX version 10.9.xOSX bind to our AD domain during casper imaging processSoftware load on startup: casper, crashplan, symantec. We deployed about 30 macs back in July of 2014, everything was running ok until late October of 2014.All of sudden, about half of the users developed an issue where upon a reboot, it would take about 5 min before they can enter their password.Some of them will need another 5 min after they enter their password before they see their desktop. This happens with the domain account as well as the local admin account we had setup on machine with issues.Looking back on the logs with the machines in question, some of them got some MDM client error as well as an error that says "this account has been deleted from under us".We’ve worked with the jamf support group in removing the jamf framework and the issue still happens.Wonder if anyone has seen anything like this and can lend a hand? Thanks!

We are looking to collect the home page of our users' Safari, Firefox, and Chrome browsers. We do not need to set the home pages, only to report the home page of each browser. This might a script, or a set of scripts (or scripts driving extension attributes). The second part of this will be to report out the usage of each browser to determine the dominant browser on each system (assuming one user per system). [EDIT] While our IT provides only the ESR version of Firefox, our users are allowed to grab whatever they wish, security withstanding. [EDIT] A colleague has answered my question. Will post the script here soon.

I'm having a problem show up randomly on our 10.8.5 computers. The user will log out and when they attempt to log back in they are just shaken off. When I look at the system log I see this: Oct 21 09:14:58 COMPNAME SecurityAgent[129]: User info context values set for usernameOct 21 09:14:58 COMPNAME authorizationhost[300]: in pam_sm_authenticate(): Got user: usernameOct 21 09:14:58 COMPNAME authorizationhost[300]: in pam_sm_authenticate(): Got ruser: (null)Oct 21 09:14:58 COMPNAME authorizationhost[300]: in pam_sm_authenticate(): Got service: authorizationOct 21 09:14:58 COMPNAME authorizationhost[300]: in pam_sm_authenticate(): Context initialisedOct 21 09:14:58 COMPNAME authorizationhost[300]: in pam_sm_authenticate(): Stashing kcm credentials in enviroment for kcminit: username@domain.COMOct 21 09:14:58 COMPNAME authorizationhost[300]: in pam_sm_authenticate(): pam_sm_authenticate: ntlmOct 21 09:14:58 COMPNAME rpcsvchost[113]: failed to create secure channel: STATUS_ACCESS_DEN

Dose annone know were the ftp site is for getting the flash player .pkg? So i can use it to setup a policy to install it. Thanks

I'm probably missing something simple but it's just not coming to me at the moment. Scenario: 10.6 and 10.7 machines being upgraded to 10.9 via Self Service. JSS is 9.61, DPs are all AFP. Policies: I have one policy to cache the 10.9.5 installer onto the target machine. Then a second policy that removes an unwanted configuration profile (it was 10.7 specific) and then installs the cached OS. Issue: Everything goes through just fine and the machine finally reboots into 10.9.5. I need it at that point to do an immediate recon so it will pick up the appropriate policies for installation. I'm thinking along the lines of a single use launch daemon but haven't really worked with them before. Any pointers or (most likely better) ideas would be welcome. Thanks,TomT

Hello, I'm trying to create a policy that only grays out the policy tab in system preferences. I have that working except that it seems to gray out all other 3rd party system preference panels, except the ones that are explicitly included in the JSS (i.e. java control panel). We have several people that use programs like Hazel that require a system preference panel, and I can't figure out how to make it so ONLY the profiles pane is blocked. Any ideas?

Hey all, Does anyone have experience with migrating iPhones/iPads from Meraki over to JSS? The issue I'm running into is that I cannot enroll these devices into JSS b/c the Meraki profile is already on the device. Of course, once I remove the Meraki profile from the device, then I can enroll to JSS via SMS text. Is there any way around having to manually remove the Meraki profile for >400 users? Thanks in advance guys.

Hi, I have found 10.8+ computers easy to disable the warning about the available Yosemite update but I am looking for a way to do it on my old 10.6 computers. On the rest of my computers, I just have the Notification Center disabled. Let me know your thoughts! I know that I can go to each laptop and hide the update but I would like an easier way to push it out via a policy. Thank you!

In the past I've scoped polices to people in a department by adding all office computers, then setting a limitation to the relevant LDAP group, allowing them to run even if the computer wasn't assigned to the department correctly. I'm now at 9.62 and scope limitations offers only the options of Network Segments or iBeacons. Existing policies with limitations by LDAP group seems to still be working, but I can't limit new policies that way. Before I turn this in to a support call has anyone run into this before or have any suggestions on settings to check?

My 10.10 clients aren't reporting back the correct version to the JSS. The version displayed is (still) 10.9.5 Both my JSS as jamf framework version are 9.6

Is there any upgrade path to be followed while upgrading JSS. We are upgrading from 9.31 to 9.62. Can we do that straight away or do we need to follow another path. I couldn't find this information in the release notes.