@Seangallagher, thanks for a great get together! It was great to hear others' talk about how they use the product, the new JSS 9.31, and some of the hoops/solutions everyone has to deal with. And I finally got a chance to meet the folks on this forum and Twitter. I'm not sure how you managed to get the conference room at the Apple Store, but wow...and a couple dozen people, not too shabby! Hope we do this again soon! :D

Hello - Is there a quick and easy way to prompt the user to accept/decline a remote control request via Casper Remote? Thanks for any help.

I'm hitting a brick wall with the configurator URL. I have "Allow Apple Configurator enrollment" enabled. I'm configuring the correct URL (i.e. using my server URL, rather than the one given in the example on the page). The process seems to go fine during the setup on the iOS device (although it doesn't prompt me for a user name and password, which I think it should). The device gets the MDM configuration profile, but it never seems to check in to JSS. I can't find it anywhere on the JSS, and the only profile downloaded is the initial configuration profile.

Hi there, I'm trying the following command to set the screen saver to turn on after 15 minutes: sudo defaults -currentHost write com.apple.screensaver idleTime -900 Which yielded the proper result: :~ jkuo$ defaults -currentHost read com.apple.screensaver { CleanExit = YES; PrefsVersion = 100; idleTime = 900; moduleDict = { moduleName = Arabesque; path = "/System/Library/Screen Savers/Arabesque.qtz"; type = 1; }; } It worked right the first time, but then after I changed the setting in system preferences and tried to change it again, it seems like the defaults command doesn't do anything anymore. :Scripts jkuo$ sudo defaults -currentHost write com.apple.screensaver idleTime -1000 :Scripts jkuo$ defaults -currentHost read com.apple.screensaver idleTime 120 Any ideas what might be happening here? Thanks!

I'm wondering if I need to run commands that need full root access, do I need to do it with sudo or if they actually run as root when ran with a policy? Probably an easy question.

In Configuration Profiles while adding restrictions to preference pane access for the user, I encountered an error while trying to set the default finder preferences.It opens up okay, showing me this.external image linkShowing more than one profile as it is shown in the picture above.I thought this was a little funny so I clicked the minus icon, but instead of removing it it sets back to this.external image linkA bit peeved, I clicked configure again only to be faced with another copy of the darn setting.I tried it a few more times to confirm and I am now left with about eight of them. :/Help would be greatly appreciated.

Hi, I'm fairly new to the Nation but have used the site before. I'm currently trying to figure out how to deploy Kaseya for use in both Casper Imaging and Self-Service. I've tried using Composer to take a "New & Modified Snapshot" and it seemed like it worked. I installed it on a test machine and it looks to install the application however it never shows up in our console which means there's something missing that's kicking off the service that speaks with our Kaseya console. The Kaseya installer is a(n) .app and it basically installs a service that runs on the machine. I looked in the Admin Guide for Casper 9.32 and found a section that speaks about how to package a .app installer, however due to it's unique nature the Kaseya installer is lacking those files. Any help or suggestions would be great!Thanks!Chris Giordano

Hey everyone! Since installing a new Cisco Ironport filter and ASA firewall, I have been having some issues with the App store in general. I can load the app store fine (as I am exempting the 17. range from Apple), but its almost as if the CSS for the page does not load. The store loads almost text only, with only a few icons. Additionally, the tables that hold the icons and make everything look "Pretty" and usable are not present. The text simply loads down the page like an old Blackberry mobile browser would. Any ideas on how to repair this issue? Through watching the logs I do not see it trying to access anything I have blocked, so I am try to isolate what exact ports and or other IP's need to be open. Thanks in advance! external image link

I'm starting to wonder if this is an issue with how our AD server(which i have no control over) is setup and not how the Mac AD plugin is configured. But i figure i should see if i'm doing something wrong on my end before complaining to our AD admin. I have the active directory plugin configured with everything checked in "User Experience", Use UNC path with SMB. But when i do a dscl read on my AD user, i don't see a SMBHome or any other mapping that would point to the AD home share. Which would look like this if i map it from finder smb://my.server.name/[username] I'm currently doing mobile accounts with "force local account" set, so it's not critical that this functionality work. I could just script the mounting, i suppose. So, my question is, should the AD admin have something setup special for Mac users to get the SMBHome mapping? The PCs mount their network home as expected thru AD.

I have a set of computers in a lab type of environment where I want the dock to be uniform on all machines and using my customizations. I currently have a package created for the dock items, and the following script setup to delete the com.apple.dockfixup.plist file because I don't want Apple to add icons when the machines auto update. I run this script at startup. #!/bin/bash rm -rf /Library/Preferences/com.apple.dockfixup.plist; Do any of you geniuses have a better way of handling this other than deleting the file on every startup?

following script being deployed via casper remote or policy #!/bin/sh osascript -e 'tell application "System Events" to delete login items'; and I get the following error: Runs perfect when run through local terminal Mounting Casper Distribution to /Volumes/casper...Running script Clear Login Items.sh...Script exit code: 1Script result: 43:54: syntax error: A plural class name can’t go after this identifier. (-2740) Any help would be appreciated.

EDIT: I have taken out the majority of this post. Start packaging receipts with an AppleID you control and control your users access to MAS and keep on top of updates. Academically it's useful to know you can use information from these two posts to get .pkgs out of the MAS so I have included it below, but DO NOT try to use this method to distribute MAS apps to end users. Read Rich's original post: http://derflounder.wordpress.com/2013/08/22/downloading-apples-server-app-installer-package/ My small post describing success using this with iLife apps: http://mattzago.com/blog/2013/10/21/getting-packages-out-of-the-app-store

HI,Has anyone by chance been able to configure the Atomic Learning iOS App so that it points to their https site (which allows users login with AD and so track their time) I tried using the Casper Focus URL configuration and dropping in our URL, but no worky: <dict><key>JSS_URL</key><string>https://www.atomiclearning.com/login/ourusername</string></dict>

I set up a lab, Casper 9.3 on Win2012. All the JSS and network requirements for profiles are meet, verified and in place, as best I can tell. First test profile, computer level, never makes it to the Mac. JAMF log shows: "jamf[6182]: Problem installing MDM profile." System log shows:mdmclient[6586]: ** ERROR ** [SCEPPlugin:0] <: [MDM_SCEP_Enroll] Calling SCEPGetCACert. CA Ident: --> -915 (OSStatus -915)mdmclient[6586]: ** ERROR ** [SCEPPlugin:0] <: [MDM_SCEP_Enroll] Retrying SCEPGetCACert with CA Ident: RetryCAIdent --> <NSOSStatusErrorDomain:-915>mdmclient[6586]: Error: Unable to contact the SCEP server at “https://casper.company.net:8443//CA/SCEP”. <MDM-SCEP:-915> from: InstallPayload in SCEPProfilePluginmdmclient[6586]: ** ERROR ** [Daemon:0] Unable to get MDM identity persistent reference with UUID: snip-4A414D460006 from profile: MDM Profile (snip-4A414D460003)mdmclient[6586]: ** ERROR ** [Daemon:0] Unable to find MDM identity in keycha

Please advise if QuickAdd package must be signed. When we install the package on our clients they turn up as "Verified" under Profiles. Is it necessary to Sign the QuickAdd packages ?

Guys, I'm trying to allow users to with managed, mobile accounts to add network interfaces without authenticating as admin. Specifically, I have Students with MacBook Airs that need to use Thunderbolt to Ethernet Adapters. They can "add" the interface with no problem, but when they click Apply, it requires Admin credentials. Any ideas?

The subject contains most of my keywords. I need to take these dscl mcx commands: sudo dscl . -mcxset /Users/admin com.google.Chrome AuthServerWhitelist always "*.domain.com" sudo dscl . -mcxset /Users/admin com.google.Chrome AuthNegotiateDelegateWhitelist always "*.domain.com" and apply them via Casper, rather than a script, if possible. I'm not great with MCX anymore (been too many years of mobileconfig for me), anyone have pointers on converting those commands to a Casper Managed Preference?

I am looking for documentation how to add users to JSS with limited permissions to perform tasks.At this point, I want to set up a group of users who can use Casper Image utility successfully, so I am trying to figure out what permissions to set on the group.If you can point me in the right direction that would be awesome!Don Parfet

Still fairly green to the Mac world and Casper.Not sure if it is coincidental, since upgraded to Casper 9.32 and NetSus to 3.01 (running netboot image 10.8.5), we can no longer run Casper imaging, failed with "An exception of class NilObjecException was not handled. The application must shutdown”. As we have not been running Casper imaging for over 6 months, think time to upgrade the Netboot image to 10.9.4, as most our machines are now on 10.9x.Build the minimal Base OS as per https://jamfnation.jamfsoftware.com/article.html?id=313. And set up root account and Casper imaging as per https://jamfnation.jamfsoftware.com/article.html?id=307. Test run the image from USB drive with Casper imaging, with success.Unfortunately unable to use Casper NetInstall Image Creator v4.0 to build Netboot image, as it only support afp share for distribution, and our current setup is using smb share for the distribution. (https://jamfnation.jamfsoftware.com/article.html?id=74)Instead, I used OSX &#0

Trying to get some dock management scripts that will trash the logged in users dock at logout and put back in the stock dock via some dockutil commands. The following runs fine via Casper Remote but not as a logout trigger in a policy: #!/bin/bash # Set the currently logged in user variable LoggedInUser=`who | grep console | awk '{print $1}'` PlistLocation="/Users/$LoggedInUser/Library/Preferences/com.apple.dock.plist"; # Remove all items from the dock /usr/local/bin/dockutil --remove all "${PlistLocation}" --no-restart; # Add the dock items in the following order /usr/local/bin/dockutil --add '/Applications/Launchpad.app' --replacing "Launchpad" --section apps "${PlistLocation}" --no-restart; /usr/local/bin/dockutil --add '/Applications/Safari.app' --replacing "Safari" --section apps "${PlistLocation}" --no-restart; /usr/local/bin/dockutil --add '/Applications/Photo Booth.app&#

Hi Folks, I'm very new to Mac & JAMF Casper world. So please bear with me first of all. We are using Casper 9.22 at the moment. We are trying to image Mac machines however at this point of time, we don't have Net Boot server up & running to kick off the image from network. So we are thinking to image Macs using startup/boot disk. I was reading in various documents that Casper Imaging must be part of the startup disk so that it can allow you to select relevant configuration before imaging but unfortunately I don't know how to add Casper Imaging utility into startup/boot disk. I just want whenever a Mac machine boots from startup/boot disk via USB then Casper Imaging should pop up & ask to select appropriate configuration & then imaging starts. Is it possible to configure this in Casper? If yes then please help me to get this done else please suggest another appropriate way to do this. Any help in this regard will be highly appreciable. Cheers!

I just started assigning devices to my Apple DEP. I downloaded the gigantic .CSV file but it contained things from over the years like iPods, Apple TV's, MacBooks, iMacs, iPads. Right now we are only concerned with managing iPads. My question is can I just add EVERYTHING in the .csv file (laptops, desktops, etc) to the DEP but only choose to manage the iPads in Casper?

Anyone ever seen this? server is 9.32Client is 10.7.5 I try to enroll via command line and look what happens... comptuername:~ macadmin$ sudo jamf enroll -promptJSS Username:jssaccountJSS Password:SSH Username:sshusernameSSH Password:Downloading the JSS CA Certificate...This computer was successfully enrolled to the JSS with the following device certificate: "blah blah blah"Retrieving inventory preferences from https://myjsss.server.com:8443/...Locating hard drive information...Locating accounts...Locating applications...Locating package receipts...Locating fonts...Locating plugins...Locating software updates...Searching path: /Library/Internet Plug-InsLocating printers...Searching path: /Users/admin/ApplicationsSearching path: /Users/randomuser/ApplicationsSearching path: /System/Library/FontsSearching path: /Library/FontsSearching path: /Applications/UtilitiesLocating hardware information (Mac OS X 10.7.5)...Searching path: /Library/Application Support/Adobe/FontsSearchi

Is there a way to not allow LDAP user to log in until there is a WIFI connection?

After 4 years, I finally updated my CCA (7.2 > 9.3), so requirements met for CCE. :) Anyone else going? Certified Casper Expert (CCE)http://www.jamfsoftware.com/training/certified-casper-expert-cce/