Finally getting around to asking a question I've been meaning to ask for a long time. Is there a doc describing using keyword search terms here at jamfnation? Especially for terms requiring more than one word. For example today I'm trying to search for "Subscribed Calendars." No matter the combinations I try I get mostly irrelevant returns. i.e. Subscribed + Calendars Subscribed & Calendars "Subscribed Calendars"

Hey Guys, I am wondering what the main difference is between using McAfee EndPoint Encryption over using FileVault 2. Does McAfee just escrow FV2 keys or does it use its own native encryption? I have looked around the internet but can not seem to find any information on how McAfee encrypts the drives. Thanks in advance!

Hi all, What would be the line/commands to delete all network locations except for two (one named "Ethernet" and one named "Wi-Fi"). I want to delete any other network locations users may have except for two that i've create on their machines. Thanks for your help forum!!!

When using jamf enroll -invitation how do you create the invitation ID?Or if using the older version how do you create the SSH Password hash? Thanks!

I am trying to collect a string from the OEAO plist. The script I wrote works via ARD, but does not work as an EA in Casper. Any ideas as to what I am doing wrong? Is there a better way to collect the string for the destinationFolder Key? #!/bin/sh loggedInUser=/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }' /usr/libexec/PlistBuddy -c "print :destinationFolder" /Users/$loggedInUser/Library/Preferences/com.softhing.oeao3.plist Thanks!

http://support.apple.com/kb/HT5678 The details are saved in ~/Library/Preferences/com.apple.Safari.plist as follows; this is an example of a saved site where Java is always permitted to run: <key>WhitelistedBlockedPlugins</key> <array> <dict> <key>PluginHostname</key> <string>foo.company.com</string> <key>PluginIdentifier</key> <string>com.oracle.java.JavaAppletPlugin</string> <key>PluginLastVisitedDate</key> <date>2013-04-16T21:14:29Z</date> <key>PluginName</key> <string>Java Applet Plug-in</string> <key>PluginPageURL</key> <string>https://foo.company.com/somejavathing</string> <key>PluginPolicy</key> <string>PluginPolicyNeverBlock</string> </dict>

I'm trying to lock the desktop using a config profile (restrictions) my default picture path is: /Library/Desktop Pictures/Galaxy.jpg and its not switching over automatically. Am I missing something?

I am trying to create a cloud distribution point using Amazon S3. The JSS returns the error: Unable to create distribution for this bucket But when I check my buckets there is a bucket similar to jamf235a039ede4741fe831b0e31287c6c7d created. Anyone have any luck with this?Thanks!

Hello everyone,I am experiencing issues with uninstalling Symantec Endpoint Protection 12.1.2 so that I can install version 12.1.4 I am trying to use the script that is mentioned in this thread: https://jamfnation.jamfsoftware.com/discussion.html?id=9271 I added "RemoveSymantecMacFiles" to Casper Admin and tried to run the script on a test computer with 12.1.2 installed. I get the following error: Sending Wake On LAN command...Opening SSH Connection to 128.135.xxx.xxx...Authenticating...Successfully authenticated.Verifying Computer's Identity...The MAC Address has been verified.Checking Operating System Version...Running Mac OS X 10.9.1 (13B4116)Verifying /usr/sbin/jamf.../usr/sbin/jamf is current (9.3)Verifying /Library/Preferences/com.jamfsoftware.jamf.plist...Preparing Policy...Executing Policy 2014-10-10 at 11:19 AM | dkirk | 1 Computer...Creating directory structure for /Library/Application Support/JAMF/Downloads/Downloading http://128.135.xxx.xxx/Scripts/Remov

Is there a way in terminal to list all interfaces of a certain type? For example, In System Information under the Network category i can see a Type column which has values of AirPort, Ethernet, and PPP (PPPSerial). I'd like to be able to list out everything of type "Ethernet"

Please forgive me in advance. I am VERY VERY new to Casper and it was pretty much dumped in my lap. I am having an issue when an AD bind is pushed when imaging, the shell for any network user becomes /usr/bin/tcsh. Local accounts have it listed as /bin/bash and in the Directory Bindings of the JSS it lists Default User shell as /bin/bash. The only thing we pushed besides the OS and Casper AD bind, was the creation of the Casper Admin account and a local Administrator account. We have1. Bound the machine manually. This loads the correct shell of /bin/bash.2. Deleted out the Directory Binding and added it again, making sure we weren't inputting anything (We had inherited all of the previously created binds from the previous admin).

Hey guys, Ive been having a bit of trouble creating a package for a piece of software called FX Maths using Composer. The software contains 4 different applications that require a license to run so i have been using the "New and Modified" snapshot technique to create the installer for distribution. The issue im having is strange and not one i have encountered before. The final installer package installs the 4 applications correctly and all of them are licensed and in working order. However, only 2 of the 4 applications have their correct icon in the applications folder, the other two have generic icons. If i open either of the applications the icon will reappear, but only for the remainder of the time in which the application is active. I have tried packaging each application individually but still experience the same issue with the same two icons. Has anybody come across this before and found a solution? Kind regards, Sam Cooper

Looking through a few of the discussions here it was easy to get a Java 7 policy working. Except I've run into a little snag with getting the disabled update checking preference to stick. Using Composer I capture the following:1. Install Java 7.2. Open the Java Control Panel.3. On the Update tab I disable the automatic update checking.4. When I apply the change I am prompted for administrator credentials, so I enter those credentials.5. Clean up the capture (just the Recent Items preference in /private/*6. Build the DMG However when I go right back into the Java Control Panel I discover the disabled setting has reverted back to on. Since I am prompted for an admin credential upon applying the change I would expect to find the plist file in Macintosh HD/Library/Preferences. But I don't. Instead I find the file "com.oracle.javadeployment.plist" in ~/Library/Preferences. Inside I find the value: <dict> <key>/com/oracle/javadeployment/</key>

We recently upgraded from JSS 8.x (which uses MAC Address as primary identifier) to 9.x (which uses UUID). Is it possible for a computer that last checked in when we were on JSS 8.x to be reimaged under JSS 9.x, and show up as a duplicate? We have not seen any issue, but the question came up and we wanted to see if someone here has the answer before we open a ticket. TIA,Don

At my institution we are using the Belkin Thunderbolt Express dock with many of the Macbook Pros we've deployed and have been mostly pleased with them. Recently, we have begun encrypting the laptops with FileVault 2 in order to comply with the results of a security audit. What we've begun experiencing is that any peripherals, in particular the keyboard and mouse, plugged into the dock are disabled until after login on encrypted machines. Once logged in, the dock is fine again.Has anyone seen this and/or have any idea of a solution to prevent this from happening?

I have a script that worked perfectly the last 2 school years so probably pre-Casper 9. Since we upgraded to Casper 9 mid school year last year. This script figures out who the current logged in user is and then hits Active Directory to get their AD group which is their graduation class and their full name. We then have departments named the same in Casper. This worked beautifully in the past but seems to have broken some time in the last year. And maybe it's my script but that hasn't changed. #!/bin/bash getUser=`ls -l /dev/console | awk '{ print $3 }'` getclass=`dscl '/Active Directory/ACADEMIC/All Domains' -read /Users/$getUser dsAttrTypeNative:distinguishedName | awk '{ FS=","; print $2 }' | awk '{ FS="="; print $2 }'` getRealName=`dscl '/Active Directory/ACADEMIC/All Domains' -read /Users/$getUser RealName | grep -v ":"` jamf recon -endUsername $getUser -department "$getclass"

I apologize if this has already been asked - I searched and didn't find anything on it. Has anyone else tried compiling the 10.10 GM Developer Preview into an image using Casper Admin on 9.52? We'd like to test the image through Casper Imaging but it won't compile through the normal method of dragging and dropping the installer into Admin. (I can get it to work by creating the installer through Disk Utility and creating a separate Recovery HD image, but wanted to see if anyone has had any luck with the basic Admin imaging.) I know this isn't in Production yet, but I was wondering if anyone else had seen this and/or had any suggestions. The error message box is huge, but here it is: Installing OSInstall.mpkg...<progress status="Installing OSInstall.mpkg...">installer: Packages name is OS Xinstaller: Installing at base path /Volumes/Dev 10.10 GMinstaller:PHASE:Preparing for installation...installer:PHASE:Preparing the disk...installer:STATUS:Ver

When a new system comes in, I would like to be able to simply deploy the software and configurations needed to each system using the OS already installed via the imaging app off of an ssd. I also want the system to be automatically enrolled so it can be managed. I believe the device enrollment program can take care of this for me but at the moment I have to work through layers to try making that work and then also sometimes computers are purchased from other than Apple. I thought I might be able to just include quickadd.pkg as one of the deployed packages but it doesn't seem to work on more than one system when I tried it. Just copying the quickadd manually to a different system and running it sees it fail. Running JSS 9.32 at the moment. Am I missing something obvious?

Hi Everyone, we are trying to to Clear Recent Folders in Finder on all of our students machines as a one time pass because we had to hide a folder and don't want student being able to access this folder as this was a vulnerable folder to adding applications outside the whitelist/blacklist feature in JSS (Mac OS 10.9). For those that want to know. If you install Silverlight, this adds a PlayReady folder at /Library/Application Support/Microsoft/PlayReady. Dropping applications or copying and pasting them in this folder allows any application to be opened no matter the list. This folder is required for netflix so we don't want to change permissions as it requires specific permissions for netflix to work correct. But I I have tried to delete the com.finder.plist from the user library preferences folder. killall SystemUIServer and Finder. This method didn't work. Applescript didn't work as this requires enabling applescript editor under privacy-accessibility. I wou

We don't want to use the Apple Store method- it's clunky for 25+ users - and snapshotting the install results in an unstable app (thus far) - anyone attempting this?

Hello All, I'm new as a JSS Casper admin and having issues in trying to import my current Mac MySQL JSS DB to my Windows JSS. I've searched online and in the KB and can't find anything that could assist me. When importing the backed up database from last night from the Mac onto Windows I get this error: Warning: Using a password on the command line interface can be insecure.ERROR 2006 (HY000) at line 2363: MySQL server has gone away In the JSS Database Utility under Utilities - Restart MySQL & Change MySQL Settings are grayed out. The server is running Windows 2008r2, MySQL 5.6 Enterprise and JSS 9.51. Has anyone had this error and can share their wisdom in solving this?

This is going to sound silly, but I have posted a few scripts into discussions now, everybody else does it in a lovely indented grey box, I am old school and using plain text, how do I get with the cool kids and post them properly....

Hey guys and gals we have a 100basetx Full-Duplex setup here and cannot leave the adapters on automatic. I concocted a pretty amateur script full of if statements; it works but I am sure someone can help me clean it up with a case statement or something like that. #!/bin/sh # Declaring Variables en=`/usr/sbin/networksetup -listallnetworkservices | grep -x "Ethernet"` en1=`/usr/sbin/networksetup -listallnetworkservices | grep -x "Ethernet 1"` en2=`/usr/sbin/networksetup -listallnetworkservices | grep -x "Ethernet 2"` thunderbolt=`/usr/sbin/networksetup -listallnetworkservices | grep -x "Thunderbolt Ethernet"` usb=`/usr/sbin/networksetup -listallnetworkservices | grep -x "USB Ethernet"` display=`/usr/sbin/networksetup -listallnetworkservices | grep -x "Display Ethernet"` # Setting Devices # Setting Built-in Ethernet if [ "$en" = "Ethernet" ]; then /usr/sbin/networksetup -setMedia "Ethernet"

Hello, all. I am having an odd issue that I've only seen once before.When I try to connect a MacBook Air to our enterprise WiFi (WPA2 Enterprise, EAP-TLS with user certificate), it only shows the username and password prompt. There is no mode dropdown picker box to switch between Automatic (PEAP) and EAP (TLS). Has anyone ever seen that before? I tried: change to different profile, repair keychain, delete and recreate keychain, and even a reformat from recovery mode. Still I have the issue. I will attach a screenshot from a working machine and the one from this machine. It is a MacBookAir6,1, and I've tried this on 10.9.3, 10.9.4, and 10.9.5. The other device that is working is identical hardware that was bought at the same time. Help, it's driving me nuts!external image linkexternal image link

Hello All, After upgrading to 9.51, I noticed that the login page of Self Service was not as visually appealing as it used to be. Not sure if something is wrong or if its a new feature i missed. Here is a screenshot of my login page. external image link