Hi I am trying to hide some System Preferences in Yosemite. I have been using the same login script from 10.7 and I cannot figure out why it stopped working in Yosemite. I also tried using a configuration profile but because it blocks 3rd Party preferences I cannot use it because it would be a huge task to manage. Does anyone have a way to hide the preferences in Yosemite ? We are using it as a deterrent for iCloud, Mail and Notifications. defaults write /Users/$3/Library/Preferences/com.apple.systempreferences.plist HiddenPreferencePanes -array "com.apple.preferences.icloud" "com.apple.preferences.internetaccounts" "com.apple.preference.notifications" chown $3:staff /Users/$3/Library/Preferences/com.apple.systempreferences.plist ThanksJeff

First attempt installing 9.22 on a Win 2012 server. At first I was getting errors starting Tomacat, but it was successfully unpacking root.war according to the logs. Then I deleted the JSS folder in Program Files and tried again, now it's failing on unpacking root.war. All the other logging is successful. Should I expect the 9.2 .msi to work properly on a 2012 server, or do I need to wade through a manual install? I thought there was some discussion about this here, but I can't find it. Any guidance would be appreciated.

So I just had a policy give me the "Complete Message" even though it failed. I wasn't expecting this but honestly, the term "Complete Message" doesn't give any notion of success or failure. I just assumed it meant success. Has anyone else seen this behavior? If so, perhaps we should put in a feature request for two messages, one on successful completion and one on failure. What do you guys and gals think?

hi Guys,Is it correct that DEP has not yet been launched in Australia. The account we use to login into VPP portal from the same account we can login to deploy.apple.com and we downloaded the .vpptoken which is working fine and has added Users tab in our jss but when we try to click/ access DEP it gives an error of account not eligible. We are unable to start DEP until we download the DEP token from Apple. If this is correct does someone know why it has not yet available in Australia and when its going to be.

So I've been digging about for this one for a couple days with ML and wanted to see if anyone else was trying similar. Specifically, I'd like to retain having the UNC path for the SMB home mounted for end users, but due to some access permissions and the way home folders get mounted from DFS we end up with a "?" in our dock. The AD plugin appears to create a managed preference for the dock on first login of a user. I've tried removing the dock portion of /Library/Preferences/OpenDirectory/Configurations/Active Directory/DOMAIN.plist, and while I thought I'd had some initial luck with this, I can't reproduce it working with a first run script: /usr/libexec/PlistBuddy -c "Delete :module options:ActiveDirectory:managed client template:mcx_application_data:com.apple.dock" /Library/Preferences/OpenDirectory/Configurations/Active Directory/PRODUCTION.plist It does delete the array, but the managed preference is still written for the user. Incid

I have computers which are FV2 encrypted but don't show up in the smart group we created. We even had one system leave the group when upgrading from 10.10.0 to 10.10.1 I don't think it's a Yosemite issue though as we have Mavericks systems that are also not being included. The criteria which only finds 30 out of 39 systems is:FileVault 2 Status is Boot Partitions Encrypted The criteria which finds the 39 systems is:FileVault 2 Status is Boot Partitions Encryptedor FileVault 2 Recovery Key Type is Only Individualor FileVault 2 Recovery Key Type is Only Institutional What's odd is if I have the criteria set only toFileVault 2 Recovery Key Type is Only Individualor FileVault 2 Recovery Key Type is Only Institutional It picks up even more systems, ones which aren't encrypted, so why would it see that the key was present. I've heard murmurings of Smart Group bugs but haven't read anything recently. I'm running JSS 9.6.29507.c JAMF hosted.

HI,I am at JSS 9.6.1We have HP Printers and Canon Copiers. All are available in Self Service, scoped by subnet.The newest driver packages are installed separately on all mac computers. I started pushing out HP 3.0 in Sept.I noticed that some models of HPs in a computer Inventory record now show NO PPD for some installed printers.MY first thought was that HP changed PPD drivers (ala Canon last year) but I have removed and reinstalled and verified against HP that the driver being used is the latest. When I recon the machine, it still shows "No PPD" in the JSS. So far the printers appear to print fine.Not looking for a fix but before I spend time digging deeper, wondering if someone else could take a look at their printers in computer inventory records (if you have HP) and see if you're seeing similar lack of info. Color Laser Jets in particular seem to be most common offender.Thanks!Sandy

I've enabled an EFI firmware password on a test system (never used it before). My initial thought was that all Startup key combinations would still work, I'd just be prompted for the firmware password but that doesn't seem to be true. So far only Command-R and Option keystrokes work. Is this expected behavior? Apples documentation doesn't differentiate between key combinations that work with or without a firmware password set. http://support.apple.com/en-us/HT201255 Just trying to understand which options should work before deciding to enable it or not.

Hey JAMFers, I have been creating reports the last week based on last-check in, and am wondering if anyone has a way, or extension attribute that reports the exact date/time(MM/DD/YYYY at XX:XX am/pm) v.s. showing variables like "About a minute ago" or "Yesterday at X:XX". I know it probably sounds kind of funny, but our asset management team asked about. Does anyone have any quick ideas? It seems like I could probably leverage an extension attribute of some sort, but I'm not sure. Thanks for any advice in advance!

I'm playing with JDS with the intent of swapping our storage at some point soon. So I setup a new JSS server in a VM. It is working well, I thought. When I try to add the JDS to it, I get the following error. Any ideas? I guess i need to rebuild my self signed certificate on my server, but I'm not quite sure how to do that... ##### Enter JDS and JSS information ##### JDS Hostname: jds1mydomain.edu JSS URL: https://tuna.mydomain.edu:8443/ JSS Username: maint JSS Password: Allow untrusted SSL certificate? (y/n): y error: (51) - SSL: certificate subject name (tuna Self Signed) does not match target host name 'tuna.mydomain.edu'

I am trying to use a configuration profile to restrict access to 3 system preferences. I am successfully able to restrict iCloud, Mail and Notifications, however, it also restricts my 3rd Party preferences for Java, Flash and Y-Soft. Any ideas on how to correct this ? Or an alternate way, my old script isn't working any more. defaults write /Users/$3/Library/Preferences/com.apple.systempreferences.plist HiddenPreferencePanes -array "com.apple.preferences.icloud" "com.apple.preferences.internetaccounts" "com.apple.preference.notifications" chown $3:staff /Users/$3/Library/Preferences/com.apple.systempreferences.plist ThanksJeff

All Macs are bound to our AD (Windows2012R2) by Casper (9.61)I see some Mavericks clients loosing the ability to contact the AD. Error Message is like "Cannot contact the Domain Controller". Rebinding helps. But what's the cause? I am suspecting the default 30 days windows policy setting for the maximum allowable age for a computer account password: http://technet.microsoft.com/en-us/library/jj852252(v=ws.10).aspxDid anyone investigate that further? Or is it irrelevant for OSX ?Thanx a lot!

I've got a user who was just informed her mother has been diagnosed with a dire medical condition. She is wondering if there is any way of retrieving deleted voice mail messages from AT&T's system. I highly doubt that but it doesn't hurt to ask. So here I am in hopes of someone who has been down this road knowing the ins and outs of this. However, she did recently get a new iPhone and still has the old iPhone. Working with the old iPhone seems more likely to produce a positive result. Maybe with a jailbreak I would be able to access the data? Does anyone know about the possibility of pulling this off?

Hey guys! We just recently started using Casper Suite in our organization and I've run into an issue. Basically, we have a bunch of computers that have different LocalHost names compared to their Active Directory names. Usually, their LocalHost name is correct (meaning it shows up correctly in JSS) but the one in Active Directory is not. What is the best way of finding the wrongly named clients, rename them, unbind them and then re-bind them again? I thought I'd do the following:1. Grep the bound name of all clients2. Filter out the correctly bound names3. Create a group with the erroneous names4. Associate them with unbindAD.sh, rename the computer using a script and then let JSS bind them again I wrote a script that greps the computer name as shown in Active Directory: #!/bin/sh ADNAME=`dsconfigad -show | grep "Computer Account" | awk '{print $4}' | rev | cut -c 2- | rev` echo "$ADNAME" exit 0 The script works fine, I tested it on my o

I get this pop-up each time running 'casper admin' so I click 'Mount Share' and 'casper admin' opens up. Am I getting this because I am trying to run 'casper admin' from the same computer the share is on? First time I have setup Casper Suite/JSS, this is a test environment running on OS X.9, but i want to get it setup just like an actual production environment. I created a share at the root of 'macintosh hd' called JSSDIST, created two new users (one has RW and other R). Is this the correct way of creating this share? the rest of the pop-up message says: OS X can lock up if a file share is mounted from the same computer it is being shared from. If you would like to continue, click the 'Mount Share' button. If you would like to work without having the share mounted, click the 'work without share' button. To quit and launch casper admin on another computer, click the 'quit' button.

bit of a strange one, we have a JSS (v9.4), with a single site. There is a computer that I can locate using the API by name, serial number etc, but searching the inventory using the web interface its not there. Have searched with various bits of known info from the machines inventory record, it just doesn't show up. So far I've tried: A MySQL DB check and repair Restarting tomcat Restarting the server The JSS is running on Windows Server 2008 R2 incase that has a bearing (I don't think it would). Any suggestions?

Has anyone packaged and deployed paid extras for GarageBand 10 successfully?

How exactly is FV2 disk encryption configuration supposed to work? i want each user that logs in to be prompted to enter their password to be FV enabledis this possible? I only seen this happen once for the first user, afterwards I had to go ENABLE each additional user manually. I have Require FileVault 2 Require users to enable FileVault 2 based on one of the following eventsAT NEXT LOGOUT what should the policies trigger and execution frequency be ? (i have it on logout and ongoing)

I have a group that's demanding admin rights so they can add some sites to the java exceptions. Is there a way for me to script (or something) that out so I don't have to grant the rights?

Has anyone had any luck using them? Either the ones you select New From Template or ones you can download and install from jamf nation? We're using Casper 9.5 and CrashPlan PROe 3.6.3.2. None of them seem to produce any results(the only one that works is getting the users GUID). I've tried troubleshooting them in the terminal and as just normal shell scripts myself but with no results.

We have a problem with our current Wifi authentication and FileVault 2 Encrypted Machines: Our laptop users log in with a domain account and password and our wifi is applied via a configuration profile and authenticated with certificates and the domain credentials at login. On non-encryptd machines this works fine. On encrypted machines our authentication to the wifi fails since it seems that the EFI must be unlocked first before you can authenticate. If we login from the FileVault2 login, logout of the account to the standard login window and then login again the authentication works fine. Has anybody else experienced this or have any ideas on why this may be happening?

So we recently had someone printout some documents that seemed slightly questionable and I am looking for a way to see what computer may have been on a specific website by searching web history. Anyone know of a way to search web history for Safari/Firefox/Chrome? I have it narrowed down to a small group of computers but would rather know if they went to this specific website for sure. I could go through the content filter/firewall but thought this would be easier. Gabe ShackneyPrinceton Public Schools

I've ran into an odd problem where a particular type of iMac refuses to apply managed preferences. They're older machines (iMac Intel (Mid 2007) we were thinking about plugging into some third level functionality and I can't recall if we've had this issue previously. So far I've ran into two different iMacs (same model) that have this problem. Tried the various methods for getting managed prefs working and if I run a mcx verbose command, the iMac will display everything it's supposed to apply, just nothing appears in the Managed Prefs folder. JAMF is the only thing managing the devices so there's no conflict with WGM. They otherwise behave as expected (report in to Inventory, can push out software, etc.). Anyone else have this problem and have any suggestions?

Is there a way in Yosemite to disable iCloud Drive, without completely disabling iCloud?

Hi everyone. Not sure how many others have early access to the Casper Suite 8.5 gold master (I'm testing it against open tickets/defects I have with JAMF Support), but I encountered a new issue today in Casper Imaging 8.5, and, I'm just trying to figure out if it has to do with my configurations/environment, or, an actual bug in the software. I have contacted JAMF support about this... I have a shell script that runs as a 'post-imaging' task. It launches three different policies once the imaging is complete and the computer reboots. During the imaging process, I'm getting the following error message when Casper Imaging goes to build the FirstRun Script at the end of the imaging process, where it goes to add my "postimage_desktops.sh" script to the First Run script: "An exception of class NilObjectException was not handled. The application must shut down." This script hasn't changed in about two years, and worked in previous vers