When a new system comes in, I would like to be able to simply deploy the software and configurations needed to each system using the OS already installed via the imaging app off of an ssd. I also want the system to be automatically enrolled so it can be managed. I believe the device enrollment program can take care of this for me but at the moment I have to work through layers to try making that work and then also sometimes computers are purchased from other than Apple. I thought I might be able to just include quickadd.pkg as one of the deployed packages but it doesn't seem to work on more than one system when I tried it. Just copying the quickadd manually to a different system and running it sees it fail. Running JSS 9.32 at the moment. Am I missing something obvious?

Hi Everyone, we are trying to to Clear Recent Folders in Finder on all of our students machines as a one time pass because we had to hide a folder and don't want student being able to access this folder as this was a vulnerable folder to adding applications outside the whitelist/blacklist feature in JSS (Mac OS 10.9). For those that want to know. If you install Silverlight, this adds a PlayReady folder at /Library/Application Support/Microsoft/PlayReady. Dropping applications or copying and pasting them in this folder allows any application to be opened no matter the list. This folder is required for netflix so we don't want to change permissions as it requires specific permissions for netflix to work correct. But I I have tried to delete the com.finder.plist from the user library preferences folder. killall SystemUIServer and Finder. This method didn't work. Applescript didn't work as this requires enabling applescript editor under privacy-accessibility. I wou

We don't want to use the Apple Store method- it's clunky for 25+ users - and snapshotting the install results in an unstable app (thus far) - anyone attempting this?

Hello All, I'm new as a JSS Casper admin and having issues in trying to import my current Mac MySQL JSS DB to my Windows JSS. I've searched online and in the KB and can't find anything that could assist me. When importing the backed up database from last night from the Mac onto Windows I get this error: Warning: Using a password on the command line interface can be insecure.ERROR 2006 (HY000) at line 2363: MySQL server has gone away In the JSS Database Utility under Utilities - Restart MySQL & Change MySQL Settings are grayed out. The server is running Windows 2008r2, MySQL 5.6 Enterprise and JSS 9.51. Has anyone had this error and can share their wisdom in solving this?

This is going to sound silly, but I have posted a few scripts into discussions now, everybody else does it in a lovely indented grey box, I am old school and using plain text, how do I get with the cool kids and post them properly....

Hey guys and gals we have a 100basetx Full-Duplex setup here and cannot leave the adapters on automatic. I concocted a pretty amateur script full of if statements; it works but I am sure someone can help me clean it up with a case statement or something like that. #!/bin/sh # Declaring Variables en=`/usr/sbin/networksetup -listallnetworkservices | grep -x "Ethernet"` en1=`/usr/sbin/networksetup -listallnetworkservices | grep -x "Ethernet 1"` en2=`/usr/sbin/networksetup -listallnetworkservices | grep -x "Ethernet 2"` thunderbolt=`/usr/sbin/networksetup -listallnetworkservices | grep -x "Thunderbolt Ethernet"` usb=`/usr/sbin/networksetup -listallnetworkservices | grep -x "USB Ethernet"` display=`/usr/sbin/networksetup -listallnetworkservices | grep -x "Display Ethernet"` # Setting Devices # Setting Built-in Ethernet if [ "$en" = "Ethernet" ]; then /usr/sbin/networksetup -setMedia "Ethernet"

Hello, all. I am having an odd issue that I've only seen once before.When I try to connect a MacBook Air to our enterprise WiFi (WPA2 Enterprise, EAP-TLS with user certificate), it only shows the username and password prompt. There is no mode dropdown picker box to switch between Automatic (PEAP) and EAP (TLS). Has anyone ever seen that before? I tried: change to different profile, repair keychain, delete and recreate keychain, and even a reformat from recovery mode. Still I have the issue. I will attach a screenshot from a working machine and the one from this machine. It is a MacBookAir6,1, and I've tried this on 10.9.3, 10.9.4, and 10.9.5. The other device that is working is identical hardware that was bought at the same time. Help, it's driving me nuts!external image linkexternal image link

Hello All, After upgrading to 9.51, I noticed that the login page of Self Service was not as visually appealing as it used to be. Not sure if something is wrong or if its a new feature i missed. Here is a screenshot of my login page. external image link

http://www.inkscape.org/en/download/mac-os/ whats the best way to go about it? Thank you!

Every once in a while we run across a computer that gives an error when launching Self Service. Either an exception fault, or have gotten some that say that Self Service doesn't work with this version of OS X. We have tried just deleting the Self Service.app from the Applications folder and then running a recon, thinking that it would just reinstall the app, but it doesn't. So far the only way we have gotten the app to reinstall is to removeframework and re-enroll. Is there a better method for reinstalling the Self Service app? Tim

When I have students open Self Service and try to download an app Self Service gets stuck on Running Policy.Has anyone seen this behavior before?

I know this is an issue that goes back to 10.5 and there are a few workarounds for it. What we've done in the past is to use Managed Preferences to set the key RequireAdminToAddPrinters in com.apple.mcxprinting to "False" and that's worked for 10.5 and 10.6. We're now migrating to 10.8 (leapfrogging 10.7) and I noticed that the com.apple.mcxprinting managed preference no longer works. Ran through the usual troubleshooting for managed prefs and everything looks good. I've only got about a dozen 10.8 clients deployed and we have Self Service policies setup to add printers and run the CUPS command for clearing the printer list, so end users aren't stuck without options for adding and removing printers (and to honest, I think they're pretty much trained at this point to use Self Service for that instead of hitting up System Preferences). Anyone else using com.apple.mcxprinting to allow non-admins to add and remove printers see this in 10.8? I'

Under "/Library/Managed Preferences/<USERID>" I have a plist for com.apple.systemuiserver that is setting restrictions on removable media (making it read only). I did have a Configuration Profile scoped to all computers, but excluded for my user ID, so i figured that was it and i mis-scoped it. But after removing the jamf framework from my system, manually deleting that plist, and validating that the "Profiles" section under system preferences is now gone i'm still seeing that plist recreated after reboots. I thought it could be something with Centrify since I had that installed, but I uninstalled that as well and rebooted. Are there any recommendations for troubleshooting this so I can identify why that plist continues to get recreated? I did notice a "complete.plist" in that folder as well which had a "source" attribute listing "mcx_user_<USERID>_<long string>", but unsure how to use that

We presently have 8.73 running on OSX 10.6.. We obviously need to upgrade and sooner than we had planned based on the latest advisory. Being somewhat new to this , it is difficult to decide the best path for upgrade.So far it seems that we cannot rely on the appropriate MAC hardware to be available.Our Mac Pro is powerful but out of warranty.How difficult is it to migrate from JSS 8.73 on MAC OSX 10.6 to a VM in a windows environment?what is involved in the reenrollment process and impact to the database?

Hi All, Graham Gilbert & myself are hosting another meet up, this time with the help of Amsys. Details & rough agenda below, please signup if around. http://www.londonappleadmins.org.uk/events/apple-admins-london-debut-event-sponsored-by-amsys/

How can I get the macs that are in the JSS to update the user field in users and locations with username when they log into the laptops? Thanks

I need a way to rename the "Automatic" network location to "Work" via the command line. I had a look at the man page for networksetup but don't see anything that would help. Has anyone found a way to accomplish this? Any advice is greatly appreciated. Thanks Keith

I'm wondering if it is possible to forward port 80 to 8443 in Tomcat. I'd like to be able to hand out a simpler JSS address to our tech departments and lose the requirement of appending :8443 to the end of the address. Is this possible with a connector? ExampleI'd like to type in https://jss.example.com and have it forward to https://jss.example.com:8443 Taking this a step further, would it be possible to also forward http requests to https as well? ExampleIf I were to type in http://jss.example.com, it would forward to https://jss.example.com:8443

Anyone had any issues creating a 10.9 net boot image? I ask because System Image Utility on any OS is refusing to accept my .dmg as a valid source.

Any idea if there is a configuration profile I can use to turn off the Office 2011 asking for startup information? I would like to be able to this in a profile if possible. I know there is managed setting for it but I am trying to stay away from those since one doesn't know how much longer that is supported. Has anyone done this in configuration profile?

Hello All, Long time lurker...first time poster. Does anyone have a good EA script for finding/reporting a folder size? I'm dealing with a similar issues found here: https://jamfnation.jamfsoftware.com/discussion.html?id=10555 On our lab machines, the /private/var/folders is getting to be a problem for us. The thread had a great direction, but i'm looking for an EA that people have had success using.

There seems to a problem with Casper 9.4 (haven't checked 9.5) ... Script parameter slots 10 & 11 are passed junk when populated or not Test script as so: #!/bin/bash echo "$1" echo "$2" echo "$3" echo "$4" echo "$5" echo "$6" echo "$7" echo "$8" echo "$9" echo "$10" echo "$11" exit 0 When executing via a policy with slots 10 & 11 populated or not, these slots are always passed the string /0 /1 Example results: Running script zzz_test_parameters... Script exit code: 0 Script result: / SYDIPG-VMXTEST05 4 5 6 7 8 9 /0 /1 Anyone else seen this, or can someone test on 9.5?

Is there a way for me to prevent a user from enrolling a device into JSS? I have a particularly wily student who wants his techno-fingers into everything and he keeps enrolling his personal mac into the system. I keep kicking him out, but the next day he's back in. What can I do?

Hey all, I need some suggestions. My managers have asked me to compose a list of the settings we set on the Macs compared to the Windows GPO we have set. I'm struggling to figure out the best way to write this up. I can't really find a way in the JSS to export of list of all the settings in an easy to read format. I know I can create some sort of list in the JSS Summary but that doesn't really give me the detail they want. I need a list of all the settings that are being set in each configuration profile and any policies with settings applied. Has anyone else had to do something like this? Any ideas? Jamie

I'm working with a customer who is deploying a large number of JDS systems—each in a different building—and would like to automate deployment as much as possible. Two questions: Is it possible to deploy a JDS system via script or some other mechanism? The installer requires entering information to define the local JDS as well as point it to the JSS. Certificates are also created during setup too. Now that Casper 9.5 is shipping as well as JDS 9.5, what options do I have to update these JDS systems? Can I deploy the JDS Installer package via Casper and will it update the existing JDS version? Or will I still need to manually double-click the JDS Installer on each system and go through the process of entering information again just to update?