This is somewhat related to the discussion at https://jamfnation.jamfsoftware.com/discussion.html?id=4987, but there are enough distinct differences, I wanted to create a new thread to see if anyone else has seen this issue. We have a configuration profile to push out several certificates, including our root and intermediary certificates, as well as requesting a machine certificate from the PKI server itself. We were able to get it working with our pilot users and many users after that, but only recently, we tried to add more computers into the group and found that the profile was not being created. After investigating this a little more with assistance from our JAMF rep, we were able to determine that the profile failed to be created and the JSS reported the management error:The 'Active Directory Certificate' payload could not be installed. The certificate request failed. The curious part is that some requests were made and granted while others failed. We have since dete

Hello all, Instead of emailing this to support, I thought I might start with the forums. I've noticed that managed iPads, when plugged into iTunes, require an encrypted backup to be made. I had some time today to dig into this, and it turns out the Configuration profile I install has 'Force encrypted backups' UNchecked. These are Supervised iPads, prepared using Apple Configurator, with the ability to connect to iTunes. Obviously running iOS 7.0.4, but I've noticed it with previous versions of iOS 7. I never deployed with iOS 6. In my testing, I am able to do an unencrypted backup after imaging with Configurator (not yet managed with Casper). Note that I do install the Casper Trust profile at this stage, so there are 3 profiles - Configurator Trust, Casper trust, and an initial WiFi. I then excluded the iPad so it would not get anyconfiguration profiles by modifying the scope of my smart group, and enrolled by installing the MDM profile with Configurator. This

Am I missing something? For free apps - Does this just link to the App in the App store and nothing else?

Hey Guys, Not sure if anyone else is running the netsus appliance on CentOS 7, but I ran into a few issues with the installation script for NetSUS_3.0.1.run. Just figured I should share some work arounds: Install Apache, Samba, and Xinet prior to running the installation script. You'll need to install these two dependencies (compat-db-headers-4.7.25-27.el7.noarch.rpm and compat-db47-4.7.25-27.el7.x86_64.rpm) Once you kick off the install script, any other blanks should be filled. NOTE: CentOS 7 no longer keeps daemons for httpd, smbd, and xinetd in /etc/ so the script will freak out and claim it's unable to start these services. You'll have to use "systemctl" to restart these services after the installation is complete. I would advise creating a script you could execute in the future if you ever need to restart or possible upgrade NetSUS in the future. I'm still testing things out, but did notice "Could not save settingsCould not save settingsCo

Excuse my ignorance… I have a pilot group for FileVault on some Mavericks MacBooks. I have a couple of questions. I apparently mistakenly understood that only pre-ordained users could unlock a FileVault encrypted drive. In testing, I find that even a non-admin account holders can access the drive. Is this expected? Have I done something wrong? It looks like any admin can turn FileVault off on a system. I pushed this out as a configuration profile. How can I prevent my users from disabling it?

Does Casper 8 or 9 log the external IP address of a machine as well as the internal IP address? We've had cases where a machine has been stolen and our current (non-Casper) reporting software (script the runs hourly and send some info) tries to log the external IP address (using sources like what's my ip, etc). This has helped us track down not only the machines but the thief.

Hi Not sure what the deal is, I was just doing some testing of policies in Self Service, and noticed that the never seem to finish. You can see the progress bar download the dmg or pkg. then it changes to "Running Policy "example"' and there is sits....any ideas? I thought it was my new packages I made, but it is doing it with older policies with older packages from last year too. Thanks!

Scope for a VPP assignment is set to one or more LDAP groups by setting Target Users to All Users, then clicking on Limitations and selecting one or more LDAP user groups (in our case, Active Directory). The users in this group have been assigned to their device (listing them in the JSS), and a VPP Invitation has been made and accepted for all users in each LDAP group. There are other VPP Assignments to distribute different App sets to different LDAP user groups. Question - when a user is removed is from one LDAP group in Active Directory (which is scoped to VPP_Assignment_1), and placed into a new LDAP group in Active Directory (which is scoped to VPP_Assignment_2), does the JSS automatically revoke the VPP_Assignment _1 apps and then re-license the user with the VPP_Assignment_2 apps? When/how does this take place given that neither VPP Assignment has been touched?

Casper Suite 9.31OS X 10.9.4 Clients are managed.Verified in JSS that Self Service is enabled with authentication off.Verified policy is scoped for Self Service.Ran jamf manage from terminal to verify management. Still no policies. :-( Any suggestions?

Hello, I recently was having issues with my NetBoot/SUS server on VMware and after a lot of searching on JAMFNation I found this article (https://jamfnation.jamfsoftware.com/discussion.html?id=4702) which describes the issues as not having enough disk space is causing the webadmin interface to not work properly. I recently had my Ubuntu VM disk spaced increased from 200 Gigs to 300 Gigs, but I am having issues re-sizing my current partition to add the extra 100 Gigs that was added to the server. Below is the process I am going through and would appreciate any help or advice on how to solve my problem. Logged into my NetBoot/SUS Ubuntu Server via vSphere. Entered in my NetSUS login / Password. Typed in the following command to view my drives.```df -h Results: Filesystem Size Used Avail Use% Mounted on /dev/mapper/NetSUS--vg-root 196G 51G 135G 28% / none 4.0K 0 4.0K 0% /sys/fs/cgroup udev

I need to remove the EFI firmware PW from a managed laptop('13 MBAir/10.9.4) so I can run in safe mode. After handing out more than 300 client machines they are now failing to log into either the admin side(local account) or the student mobile account side. The trigger for the failure seems to be a reboot of the client machines. The reboot is either forced by the client/JSS or just because the students feel a need to reboot. I want to run in safe mode so I can skip the Kernals as a potential fault for the failure of the clients. Some clients have lasted a week with no issues while others quit after only a few hours in circulation. I have tried to reimage the machines and they fail as well. The real issue is...I can't get to the affected HD except through a net boot server. I attempted to change directories so as to work on the affected HD but when I run the scripts I found on the JAMF Nation such as this one that CasperSally used: /bin/cp /Volumes/OS X Base System

I've been trying to deploy Office 2011 preferences using Casper this week without much success. I've been using the Configuration Profiles --> Custom Settings to create .plist files which should be copying to the System and User Profile directories with the .plists I've uploaded, but I've found this to not be the case. My environment: JSS Version: 9.32OS Version: 10.9.4 Here are the steps I'm following: 1) Set Preferences on User Account to Generate .plist Files2) Convert .plists to XML3) Upload into Casper as Custom Settings within Configuration Profiles Everything uploads fine and deploys fine, but when I evaluate the workstation I find that it copies the files to these directories, not the correct ones. Casper currently deploys my .plists to: - /Library/Managed Preferences- /Library/Managed Preferences/useraccount external image link However, when placed into these directories, the .plist preferences are not applied to the user or at a system le

Anybody know of a script (or something else) which can bypass or auto-complete the admin credential box when prompted for in Self Service? Specifically the prompt when you attempt to download an App store app.

Some weird occurrence is happening in our environment. First off: JSS 8.73, on a Mac ProClients are a mix of 10.6.8 and 10.8.5 (issue isn't happening on Mavericks)Our computer names are the computer's serial number Randomly, it seems, tray): is being added to the computer names of some clients. Yesterday I cleared out 30 of them to bring the total down to about 40 and I wanted to see if it was continuing to happen or something that happen before and just never was noticed. It seems it is continuing to happen as the total went back up to 73 this morning. I cleared them out by fixing the name in the JSS and then going through remote to reset computer names, which seems to work. It's just really annoying to do one by one when it's more than a few. It also seems some of the Macs I "fixed" yesterday, now have the tray): thing again in their computer name. Has anyone seen this before in their environment or know a way to just take part of the computer

Does anyone know where to obtain the extra content packages for Garageband 10.0?

Hi, My school just updated casper suite to 9.4. I notice i dont have ebook tab in computer section. Do i need to active anything first before using the features? What i know is previously I'm using 9.2 version ( if not mistaken ) then straight update to 9.4. Will this skip update will cause any problem? if yes, what should i do next ? can i revert back and update accordingly.

Hello everyoneI'd like to get some advice on how to improve my imaging workflow with Casper Suite and any other scripts. So here goes: I have a base OS image captured from a fresh MacBook Air, iWork is included, I have a user creatively named "user" on the image as a placeholder, cause I need to make a user to get through Setup Assistant. This is the base OS image I use in Casper Imaging for all computers. Employees get either a MacBook Air or a MacBook Pro Retina. Each laptop is used by only one person so they are the only user on their machine, except for the management account. Casper Imaging writes the operating system, the apps and printer they need (via a smart config per department), it sets the computer name which it asks me for and using the Custom option in Casper Imaging, it creates a user account in their name, which I set manually as I image each computer. I found this a little easier than making a user after the fact. Once imaging is done, I login as em

I have a very uncomplicated workflow setup in Casper Imaging: it basically binds the computer, names the computer and updates the inventory. Everything in this workflow works fine, but the binding which does not work at all. I started out today running JSS 8.64 (out of date I know, but it's summer) and I was not able to get any of our Macs to bind to the server. I have since updated to 8.71, created a new Netboot image that is up to date (OS 10.7.5) and has Casper imaging 8.71 running on it which has had no impact. I still can not bind. I attempted to add the bindToLDAP.sh script to the workflow but that didn't work either. I changed the priority to 1 for the bind through JSS and tried the same with the script. I am at the end of what I know and I am looking for help. If any of you have had similar situations and know a way out, I would appreciate it. Thanks,Dan

Hey there, best community in the world: We have Casper set up on our internal network, everything working pretty much as we like it. The request now is to make Self Service available to our users outside our network. I've read the article at https://jamfnation.jamfsoftware.com/article.html?id=174, which discusses setting up a second JSS, in the DMZ, and pointing it to the internal one. I may be missing a whole lot, but would it not be possible to just move our current Casper server (JSS and Distribution Point on the same box) into the DMZ and be done with it? Thoughts?

I was hoping to know if anyone can tell me how to give more RAM to tomcat on a headless linux server. I feel really stupid posting this since I am a CJA :(

When Erase Target drive is selected the actual image is not getting installed to the selected drive. If the option is unchecked the image goes through fine. This is happening on version 9.31. Anyone run into this before?

I've found a few scripts claiming to do this, but cannot find one that works. Any thoughts? Going from appleworks 6 to word formatting and in batch. Have a few teachers with hundreds of old appleworks documents that i don't want to convert by hand. Gabe ShackneyPrinceton Public Schools

Hi all, So I've got NetSUS set up on Linux, and created a NetBoot Image using NetInstall Creator (https://jamfnation.jamfsoftware.com/viewProduct.html?id=13&view=info), using Casper Imaging 9.4 When I go to image a machine, it erases the disk, tries a block copy of our OS base image. It seems like the block copy doesn't do anything because it "completes" in a few seconds, and then it goes back to erasing the disk again, and then proceeds to install all the packages but fail on every one. It also fails to reboot, and there is nothing installed, no OS, nothing else. Any ideas what I might be doing wrong here? Actions from Casper Imaging log: Initializing Imaging Process... Mounting https://jds-01.ourdomain.com/CasperShareDAV/... Preparing disk for block copy... Performing Block Copy of 10_9_4_base.dmg... Cleaning up after block copy... Erasing Macintosh HD... Installing 10_9_4_base.dmg... Installing 1Password 3.8.22.

I am planning on setting up a test/beta environment to prepare for the next version of Casper and OS X 10.0, along with patchoo. The MacMini running OS X server and test Macs will be on their own VLAN, so it is just a matter of getting the JSS configured correctly on the Mac mini. I have an external drive that has a Carbon Copy Cloner bootable backup every night. Is it a good idea to turn off MySQL on the production OS X Server and do an updated clone and then use that to image the MacMini or am I better off doing a fresh MySQL install? Thanks! Corbin

In large environments we've always had different environment, so we can do testing and development, for example: • JSS (live environment)• JSS-TEST (testing environment; clone of live environment)• JSS-DEV (new/beta version testing) My colleagues and I were discussing the possibility of using the new Sites feature as a way to do testing (where we've always used JSS-TEST). Is anyone here using Sites for testing? If so, how has it been working out? Good? Bad? Any gotchas? Of course once we start kicking Sites around, we'll post our experiences, hoping to get some feedback before we do. :) TIA,Don