Alright. Since updating to JSS 9.3 (we've made each and every small jump since 9RC1) I've noticed (alright, I've been bashed over the head) Java's _appserver eating over 1000% CPU and running up inactive memory until the whole JSS locks up. Users utilizing "Self-Service" now cause a noticeable jump in CPU usage and enough RAM(inactive) so that if I don't watch it (think purge command) it will eventually lock up. Running Casper Imaging will lock up the JSS within a few minuets. Imaging a dozen computers will lock up the machine (Showing full inactive memory and _appserver CPU utilization) within seconds. Anyone else seeing this type of behavior? P.S. here's my setupJSS 9.3 and primary DP onMid 2010 MacPro w/8GB RAM running 10.8.5 and server 2.2.2The Boot device happens to run the JSSs MySQL DB but that's a nice OWC SSD.The Primary DP is running on an Arecra Internal RAID. NetBoot and SUS onMid 2010 MacPro w/8GB RAM running 10.9.2 and se

I have begun a 1-1 iPad deployment. Pre-stage enrollment works fine and configuration payloads are being applied. My problem is that when iTunes accounts are created using this procedure http://support.apple.com/kb/ht2534Almost all of the students receive timeout messages. I have restricted use of the iTunes App in a config profile. I know this seems like a dumb question but do I need the iTunes App to be fully enabled so that the Apple ID can be created?

Hi, I have a strange issue, If i open Casper Admin, enter creds to mount JSS, the share mounts on the desktop, but then when Casper Admin is about to open all i get is a thin 1 inch white line. I get a dock icon and menu but no Window, All other Casper tools work ok, i have re downloaded Casper suite, i'm running the same version as my JSS (9.31), i have updated Java. Any ideas?

Currently my company uses Centrify to bind Macs to our AD. When we go full steam ahead on our Casper Roll-out, part of this is removing Centrify and re-binding via the Apples AD plugin. I have a script that works for unbinding the Centrify side (/usr/sbin/adleave -u Blah -p Blah -r) but how can I in this same script re-add the computer to the domain with Apples built in AD Plug or the AD Binding I have setup in Casper? Reason for scripting this is so that I don't have to touch about 500 machines.

here is my problem. every printer we install via self service is getting this error "printer was not installed correctly": (screenshot)https://drive.google.com/open?id=0B4CyxN_vMBOLdldCRFJGckQ1Mms&authuser=0 now this can be fixed via reset printing system or repair permissions. LOCALLY only! the policies I have created in self-service that should be executing either of these remedies are not working. for example: i have made policy in self service that simply does a "fix disk permissions" (under maintenance).repairing disk permissions with disk utility fixes my installed printer. running my self-service policy that is suppose to have the same ending result! it does not however, error still persists. same goes for reseting printing system. If I right-click the printer pane in system prefs, click "reset printing system", enter ladmin credentials and reinstall printer via self-service... problem solved! If however I try to reset printing system via sc

Is there a way to have 2 separate divisions or companies in the Casper Suite? Basically, we are one company, but have 2 divisions that should not be able to see each other's inventory, devices, etc. On the same Casper Admin server, is there a way to have users from 2 different divisions log in but only get access to their division's devices?Forgive the generality of this question, we are still Casper noobs and have not worked much with the software.Appreciate any advise.Thanks,Brian

I have been trying to get our JSS cluster to report correctly for the IP of the client based on: https://jamfnation.jamfsoftware.com/article.html?id=305, I am still getting clients reporting in as the external interface of our F5 BIG-IP. Anyone have any sage wisdom with this? I have tried everything I can think of on both the F5 and the JSS but I am not getting anywhere.

Where is databaseutil.jar located in 10.9? Wanting to force a manual backup of MySQL.

This is somewhat related to the discussion at https://jamfnation.jamfsoftware.com/discussion.html?id=4987, but there are enough distinct differences, I wanted to create a new thread to see if anyone else has seen this issue. We have a configuration profile to push out several certificates, including our root and intermediary certificates, as well as requesting a machine certificate from the PKI server itself. We were able to get it working with our pilot users and many users after that, but only recently, we tried to add more computers into the group and found that the profile was not being created. After investigating this a little more with assistance from our JAMF rep, we were able to determine that the profile failed to be created and the JSS reported the management error:The 'Active Directory Certificate' payload could not be installed. The certificate request failed. The curious part is that some requests were made and granted while others failed. We have since dete

Hello all, Instead of emailing this to support, I thought I might start with the forums. I've noticed that managed iPads, when plugged into iTunes, require an encrypted backup to be made. I had some time today to dig into this, and it turns out the Configuration profile I install has 'Force encrypted backups' UNchecked. These are Supervised iPads, prepared using Apple Configurator, with the ability to connect to iTunes. Obviously running iOS 7.0.4, but I've noticed it with previous versions of iOS 7. I never deployed with iOS 6. In my testing, I am able to do an unencrypted backup after imaging with Configurator (not yet managed with Casper). Note that I do install the Casper Trust profile at this stage, so there are 3 profiles - Configurator Trust, Casper trust, and an initial WiFi. I then excluded the iPad so it would not get anyconfiguration profiles by modifying the scope of my smart group, and enrolled by installing the MDM profile with Configurator. This

Am I missing something? For free apps - Does this just link to the App in the App store and nothing else?

Hey Guys, Not sure if anyone else is running the netsus appliance on CentOS 7, but I ran into a few issues with the installation script for NetSUS_3.0.1.run. Just figured I should share some work arounds: Install Apache, Samba, and Xinet prior to running the installation script. You'll need to install these two dependencies (compat-db-headers-4.7.25-27.el7.noarch.rpm and compat-db47-4.7.25-27.el7.x86_64.rpm) Once you kick off the install script, any other blanks should be filled. NOTE: CentOS 7 no longer keeps daemons for httpd, smbd, and xinetd in /etc/ so the script will freak out and claim it's unable to start these services. You'll have to use "systemctl" to restart these services after the installation is complete. I would advise creating a script you could execute in the future if you ever need to restart or possible upgrade NetSUS in the future. I'm still testing things out, but did notice "Could not save settingsCould not save settingsCo

Excuse my ignorance… I have a pilot group for FileVault on some Mavericks MacBooks. I have a couple of questions. I apparently mistakenly understood that only pre-ordained users could unlock a FileVault encrypted drive. In testing, I find that even a non-admin account holders can access the drive. Is this expected? Have I done something wrong? It looks like any admin can turn FileVault off on a system. I pushed this out as a configuration profile. How can I prevent my users from disabling it?

Does Casper 8 or 9 log the external IP address of a machine as well as the internal IP address? We've had cases where a machine has been stolen and our current (non-Casper) reporting software (script the runs hourly and send some info) tries to log the external IP address (using sources like what's my ip, etc). This has helped us track down not only the machines but the thief.

Hi Not sure what the deal is, I was just doing some testing of policies in Self Service, and noticed that the never seem to finish. You can see the progress bar download the dmg or pkg. then it changes to "Running Policy "example"' and there is sits....any ideas? I thought it was my new packages I made, but it is doing it with older policies with older packages from last year too. Thanks!

Scope for a VPP assignment is set to one or more LDAP groups by setting Target Users to All Users, then clicking on Limitations and selecting one or more LDAP user groups (in our case, Active Directory). The users in this group have been assigned to their device (listing them in the JSS), and a VPP Invitation has been made and accepted for all users in each LDAP group. There are other VPP Assignments to distribute different App sets to different LDAP user groups. Question - when a user is removed is from one LDAP group in Active Directory (which is scoped to VPP_Assignment_1), and placed into a new LDAP group in Active Directory (which is scoped to VPP_Assignment_2), does the JSS automatically revoke the VPP_Assignment _1 apps and then re-license the user with the VPP_Assignment_2 apps? When/how does this take place given that neither VPP Assignment has been touched?

Casper Suite 9.31OS X 10.9.4 Clients are managed.Verified in JSS that Self Service is enabled with authentication off.Verified policy is scoped for Self Service.Ran jamf manage from terminal to verify management. Still no policies. :-( Any suggestions?

Hello, I recently was having issues with my NetBoot/SUS server on VMware and after a lot of searching on JAMFNation I found this article (https://jamfnation.jamfsoftware.com/discussion.html?id=4702) which describes the issues as not having enough disk space is causing the webadmin interface to not work properly. I recently had my Ubuntu VM disk spaced increased from 200 Gigs to 300 Gigs, but I am having issues re-sizing my current partition to add the extra 100 Gigs that was added to the server. Below is the process I am going through and would appreciate any help or advice on how to solve my problem. Logged into my NetBoot/SUS Ubuntu Server via vSphere. Entered in my NetSUS login / Password. Typed in the following command to view my drives.```df -h Results: Filesystem Size Used Avail Use% Mounted on /dev/mapper/NetSUS--vg-root 196G 51G 135G 28% / none 4.0K 0 4.0K 0% /sys/fs/cgroup udev

I need to remove the EFI firmware PW from a managed laptop('13 MBAir/10.9.4) so I can run in safe mode. After handing out more than 300 client machines they are now failing to log into either the admin side(local account) or the student mobile account side. The trigger for the failure seems to be a reboot of the client machines. The reboot is either forced by the client/JSS or just because the students feel a need to reboot. I want to run in safe mode so I can skip the Kernals as a potential fault for the failure of the clients. Some clients have lasted a week with no issues while others quit after only a few hours in circulation. I have tried to reimage the machines and they fail as well. The real issue is...I can't get to the affected HD except through a net boot server. I attempted to change directories so as to work on the affected HD but when I run the scripts I found on the JAMF Nation such as this one that CasperSally used: /bin/cp /Volumes/OS X Base System

I've been trying to deploy Office 2011 preferences using Casper this week without much success. I've been using the Configuration Profiles --> Custom Settings to create .plist files which should be copying to the System and User Profile directories with the .plists I've uploaded, but I've found this to not be the case. My environment: JSS Version: 9.32OS Version: 10.9.4 Here are the steps I'm following: 1) Set Preferences on User Account to Generate .plist Files2) Convert .plists to XML3) Upload into Casper as Custom Settings within Configuration Profiles Everything uploads fine and deploys fine, but when I evaluate the workstation I find that it copies the files to these directories, not the correct ones. Casper currently deploys my .plists to: - /Library/Managed Preferences- /Library/Managed Preferences/useraccount external image link However, when placed into these directories, the .plist preferences are not applied to the user or at a system le

Anybody know of a script (or something else) which can bypass or auto-complete the admin credential box when prompted for in Self Service? Specifically the prompt when you attempt to download an App store app.

Some weird occurrence is happening in our environment. First off: JSS 8.73, on a Mac ProClients are a mix of 10.6.8 and 10.8.5 (issue isn't happening on Mavericks)Our computer names are the computer's serial number Randomly, it seems, tray): is being added to the computer names of some clients. Yesterday I cleared out 30 of them to bring the total down to about 40 and I wanted to see if it was continuing to happen or something that happen before and just never was noticed. It seems it is continuing to happen as the total went back up to 73 this morning. I cleared them out by fixing the name in the JSS and then going through remote to reset computer names, which seems to work. It's just really annoying to do one by one when it's more than a few. It also seems some of the Macs I "fixed" yesterday, now have the tray): thing again in their computer name. Has anyone seen this before in their environment or know a way to just take part of the computer

Does anyone know where to obtain the extra content packages for Garageband 10.0?

Hi, My school just updated casper suite to 9.4. I notice i dont have ebook tab in computer section. Do i need to active anything first before using the features? What i know is previously I'm using 9.2 version ( if not mistaken ) then straight update to 9.4. Will this skip update will cause any problem? if yes, what should i do next ? can i revert back and update accordingly.

Hello everyoneI'd like to get some advice on how to improve my imaging workflow with Casper Suite and any other scripts. So here goes: I have a base OS image captured from a fresh MacBook Air, iWork is included, I have a user creatively named "user" on the image as a placeholder, cause I need to make a user to get through Setup Assistant. This is the base OS image I use in Casper Imaging for all computers. Employees get either a MacBook Air or a MacBook Pro Retina. Each laptop is used by only one person so they are the only user on their machine, except for the management account. Casper Imaging writes the operating system, the apps and printer they need (via a smart config per department), it sets the computer name which it asks me for and using the Custom option in Casper Imaging, it creates a user account in their name, which I set manually as I image each computer. I found this a little easier than making a user after the fact. Once imaging is done, I login as em