http://www.inkscape.org/en/download/mac-os/ whats the best way to go about it? Thank you!

Every once in a while we run across a computer that gives an error when launching Self Service. Either an exception fault, or have gotten some that say that Self Service doesn't work with this version of OS X. We have tried just deleting the Self Service.app from the Applications folder and then running a recon, thinking that it would just reinstall the app, but it doesn't. So far the only way we have gotten the app to reinstall is to removeframework and re-enroll. Is there a better method for reinstalling the Self Service app? Tim

When I have students open Self Service and try to download an app Self Service gets stuck on Running Policy.Has anyone seen this behavior before?

I know this is an issue that goes back to 10.5 and there are a few workarounds for it. What we've done in the past is to use Managed Preferences to set the key RequireAdminToAddPrinters in com.apple.mcxprinting to "False" and that's worked for 10.5 and 10.6. We're now migrating to 10.8 (leapfrogging 10.7) and I noticed that the com.apple.mcxprinting managed preference no longer works. Ran through the usual troubleshooting for managed prefs and everything looks good. I've only got about a dozen 10.8 clients deployed and we have Self Service policies setup to add printers and run the CUPS command for clearing the printer list, so end users aren't stuck without options for adding and removing printers (and to honest, I think they're pretty much trained at this point to use Self Service for that instead of hitting up System Preferences). Anyone else using com.apple.mcxprinting to allow non-admins to add and remove printers see this in 10.8? I'

Under "/Library/Managed Preferences/<USERID>" I have a plist for com.apple.systemuiserver that is setting restrictions on removable media (making it read only). I did have a Configuration Profile scoped to all computers, but excluded for my user ID, so i figured that was it and i mis-scoped it. But after removing the jamf framework from my system, manually deleting that plist, and validating that the "Profiles" section under system preferences is now gone i'm still seeing that plist recreated after reboots. I thought it could be something with Centrify since I had that installed, but I uninstalled that as well and rebooted. Are there any recommendations for troubleshooting this so I can identify why that plist continues to get recreated? I did notice a "complete.plist" in that folder as well which had a "source" attribute listing "mcx_user_<USERID>_<long string>", but unsure how to use that

We presently have 8.73 running on OSX 10.6.. We obviously need to upgrade and sooner than we had planned based on the latest advisory. Being somewhat new to this , it is difficult to decide the best path for upgrade.So far it seems that we cannot rely on the appropriate MAC hardware to be available.Our Mac Pro is powerful but out of warranty.How difficult is it to migrate from JSS 8.73 on MAC OSX 10.6 to a VM in a windows environment?what is involved in the reenrollment process and impact to the database?

Hi All, Graham Gilbert & myself are hosting another meet up, this time with the help of Amsys. Details & rough agenda below, please signup if around. http://www.londonappleadmins.org.uk/events/apple-admins-london-debut-event-sponsored-by-amsys/

How can I get the macs that are in the JSS to update the user field in users and locations with username when they log into the laptops? Thanks

I need a way to rename the "Automatic" network location to "Work" via the command line. I had a look at the man page for networksetup but don't see anything that would help. Has anyone found a way to accomplish this? Any advice is greatly appreciated. Thanks Keith

I'm wondering if it is possible to forward port 80 to 8443 in Tomcat. I'd like to be able to hand out a simpler JSS address to our tech departments and lose the requirement of appending :8443 to the end of the address. Is this possible with a connector? ExampleI'd like to type in https://jss.example.com and have it forward to https://jss.example.com:8443 Taking this a step further, would it be possible to also forward http requests to https as well? ExampleIf I were to type in http://jss.example.com, it would forward to https://jss.example.com:8443

Anyone had any issues creating a 10.9 net boot image? I ask because System Image Utility on any OS is refusing to accept my .dmg as a valid source.

Any idea if there is a configuration profile I can use to turn off the Office 2011 asking for startup information? I would like to be able to this in a profile if possible. I know there is managed setting for it but I am trying to stay away from those since one doesn't know how much longer that is supported. Has anyone done this in configuration profile?

Hello All, Long time lurker...first time poster. Does anyone have a good EA script for finding/reporting a folder size? I'm dealing with a similar issues found here: https://jamfnation.jamfsoftware.com/discussion.html?id=10555 On our lab machines, the /private/var/folders is getting to be a problem for us. The thread had a great direction, but i'm looking for an EA that people have had success using.

There seems to a problem with Casper 9.4 (haven't checked 9.5) ... Script parameter slots 10 & 11 are passed junk when populated or not Test script as so: #!/bin/bash echo "$1" echo "$2" echo "$3" echo "$4" echo "$5" echo "$6" echo "$7" echo "$8" echo "$9" echo "$10" echo "$11" exit 0 When executing via a policy with slots 10 & 11 populated or not, these slots are always passed the string /0 /1 Example results: Running script zzz_test_parameters... Script exit code: 0 Script result: / SYDIPG-VMXTEST05 4 5 6 7 8 9 /0 /1 Anyone else seen this, or can someone test on 9.5?

Is there a way for me to prevent a user from enrolling a device into JSS? I have a particularly wily student who wants his techno-fingers into everything and he keeps enrolling his personal mac into the system. I keep kicking him out, but the next day he's back in. What can I do?

Hey all, I need some suggestions. My managers have asked me to compose a list of the settings we set on the Macs compared to the Windows GPO we have set. I'm struggling to figure out the best way to write this up. I can't really find a way in the JSS to export of list of all the settings in an easy to read format. I know I can create some sort of list in the JSS Summary but that doesn't really give me the detail they want. I need a list of all the settings that are being set in each configuration profile and any policies with settings applied. Has anyone else had to do something like this? Any ideas? Jamie

I'm working with a customer who is deploying a large number of JDS systems—each in a different building—and would like to automate deployment as much as possible. Two questions: Is it possible to deploy a JDS system via script or some other mechanism? The installer requires entering information to define the local JDS as well as point it to the JSS. Certificates are also created during setup too. Now that Casper 9.5 is shipping as well as JDS 9.5, what options do I have to update these JDS systems? Can I deploy the JDS Installer package via Casper and will it update the existing JDS version? Or will I still need to manually double-click the JDS Installer on each system and go through the process of entering information again just to update?

I desire to change a WiFi setting on a batch of MacBooks, all running OS X 10.9.3. Specifically, I want to check/enable "Remember networks this computer has joined". Is this possible with CasperSuite, version 9.32? I have found many commands to reconfigure network settings, but I have not found this specific option.

Hey all. My only remaining hang up (that I'm aware of) for my using 10.8 in my labs at this point is getting a few general network shares mapped for users at login, these are not their home shares (those mount fine with the AD plug-in). Has anyone successfully used the last version of the mountNetworkShare script from the resource kit or are you using your own custom version of it that works with 10.8? For some reason the user is getting prompted to enter in their credentials as if the kerberos information isn't being handle properly from their AD login. Thanks.

Hello knowledgable Casper friends, We're in the process of rolling out enrollment into the JSS but we want to do some branding on the Self Service App to make it feel more integrated into the company itself. I've managed to find a way to change the icons (had a UX Designer make us a new logo for it, very exciting) and change the name of the application itself. However, when the application is launched, the title bar still says Self Service. external image link How far do I have to dig to get that renamed as well? I'm pretty code-savvy but I've never manually coded anything into a program so I'm not sure where to look. If any of you have successfully branded this portion of the Self Service app I'd love to hear what you did. Thanks!

In case you have not heard, the forthcoming 10.9.5 update will introduce a new requirement for app signatures that may present some problems depending on your client systems' Gatekeeper settings: http://www.tuaw.com/2014/08/04/apples-changes-to-app-signing-could-leave-some-apps-blocked-by I was curious what the impact would be with our base configuration so I came up with the following report script you may find useful: #!/bin/bash RPT_FILE=~/Signing_Report.csv for i in /Applications/*.app /Applications/Microsoft Office 2011/*.app /Applications/Utilities/*.app do version=`codesign -dv "$i" 2>&1 | grep "^Sealed Resources" | awk '{print $3}'` printf ""$i",$version " done > $RPT_FILE

Our Security Center system is reporting that our JSS is vulnerable because of out of date Java. Version running is Java 6 update 29 on Windows Server 2008 R2. To address this, I took a VMware snapshot of the server, installed Java Development kit 7, copied the policy files into the bin, uninstalled java 6 JRE and development kit and restarted the OS Apache Tomcat wouldn't start due to this error that I found in Windows event viewer in the system log: he Apache Tomcat 7 Tomcat7 service terminated with service-specific error Incorrect function First thing I did was go into the environmental variables and ensured that the JAVA variable was set to the new bin of files and restarted the OS, still no luck Reviewed logs but didn't find anything glaring I ended up reverting to my snapshot to get the JSS back up and running Is there a supported method of upgrading Java on a Windows Server based JSS without breaking Apache Tomcat?

Casper 9.5 is supposed to implement the ability to set mobile device names from individual mobile device records, but how? The name isn't editable in Inventory > General.

N

I did a quick test on v8 and v9 test environmets, and it seems renaming a Smart Computer Group does not "break" any links to Policies or EA's. I wanted to bounce this off the community, is there any harm/danger in renamging Smart Computer Groups? I need to add a prefix to the Smart Computer Groups, but I can't risk breaking anything linked to it. Anyone know from experience? In the past we renamed and didn't have any problems, but haven't done this in live v8 or v9 environments. TIADon