Anyone else experiencing intermittent Casper Admin Crashes when they upload packages? The symptoms are that I upload a package to Casper Admin and when it finishes uploading (or I assume its finished) it crashes with a EXC_BAD_ACCESS in the crash dump. I restart Casper Admin and my package is on the server. This has always happened on different machines with different OS's. Its disconcerting. Even happened during my jumpstart.

Since we are finally getting ready to deploy office 2011, I decided to make an official package for it. I've been following teh scripted steps in http://www.officeformachelp.com/office/administration/deployment/casper/ Some of the stuff is a little wonky with composer 8.52 (postflight scripts refused to save until I deleted the default one and then recopied the proper one). Anyway - to make a long story short - the directions said to put 'must be installed at image time' does that mean I can't push the install/config separate? do I need another bundle to handle that portion?

Hey all, I'm curious if the defaults that can be set within a network segment should be working as i would expect them to... We have 7 remote sites, and each site has their own file share distribution point as well as apple software update server. I was hoping to be able to simply set the default SUS and distribution point within each network segment, and then have machines automatically use the local SUS and DP once they update their inventory @ that location. That doesn't seem to be happening, at least not with the SUS setting. I believe in the past I had a script update the SUS catalogue URL that was in a policy triggered by a network change. Is that still the method i'm going to need to go through to manage each sites specific SUS? If this is the case, then what should be the expected behavior of setting those two default settings for a network segment? Thanks Everyone!

I'm just setting up a new JSS installation for our (sometimes rather globally distributed) employees that doesn't require that they're on a VPN, and would like to make sure their macs can check in without exposing the JSS itself to all the horrible things out there. Sadly, there is very little documentation about this that I could find. While chatting with our security folks, they said they'd be pretty comfortable with this if the web interface wasn't accessible on the wide internet (there should be inside-the-VPN web service to access the JSS's web interface). One of my guesses is that since the web interface's URL routes all seem to go to .html pages, we can have our load balancer setup just 403 requests to those pages if they come from outside the VPN. That works pretty well so far - nobody can log into the web interface like this, and I feel that this can already eliminate a bunch of terrible security problems (fewer XSS vectors, for one!). How

I noticed this at the very end of the Release notes and it's very concerning to me. "An error is displayed if a user logs in to a managed computer with a mobile account and the computeris bound to Active Directory, and the login takes several minutes." This would destroy me, is this 100% across the board for all Mobile Accounts that are bound to AD?

Hi, I was wondering if it is possible to auto populate the user account name into a VPN payload created in Configuration Profiles. I would like the users to be able to just click on the VPN Status on the menu bar to connect & when prompted enter their password - no having to go into System preferences to add any details.(Using os10.9 machines) Thanks

Hello Jamfnation, Can anybody please help me with the following issue: I need a policy to run once per computer, but it should trigger at a custom event, which would be, that 2 configuration profiles have already been applied before. Thanks for any input!

After migration from JAMFSERVEROLD to JAMFSERVERNEW (different hostnames) i get an error "Error creating Certificate Authority" after the import of data via the database import tool. I cannot see any options into the webinterface to create new certificates. etc.. just the error and the message to contact Jamf support. For your info: I exported the old data and import into the new server. I use CasperSuite 9. Any idea?

I had this login script working great #!/bin/shdscl . append /Groups/admin GroupMembership $3 It would make users from AD admin on computers so they are able to install software at home. Now it has stopped working and no idea why. Any thoughts?? Thanks

Hi guys, I'm trying to create an enrollment profile to use with Apple Configurator. Target iOS Version doesn't show iOS7 (shows only iOS 4 to 6). We are on v9.3, what am I missing ? Thanks.

Hi All, I am in the process of working through a new Mavericks build and have run into some issues with dock icons that are delivered by policy. When I run the policy on the new Mavericks machines the dock reloads it self but has non of the desired dock icons in place. However after a re boot they appear. I have tested the same policy on a 10.7.5 machine in one of the labs and it works fine. Casper is on version 9.21 Any ideas?

I'm trying to add the VPN icon to the menu bar. I've been trying to use this script: defaults write com.apple.systemuiserver menuExtras -array-add "/System/Library/CoreServices/Menu Extras/vpn.menu" killall SystemUIServer -HUP I can type this into terminal and it works perfectly, however if I create it as a script in Jamf, it does not work. Any ideas?

Hey all,I have a script: #!/bin/sh sudo dsconfigad -passInterval 0 exit 0 However its been randomly returning this "dsconfigad: No operation specified nor update requested" in the policy logs.I'm not sure what this means, however it does say successful.Any ideas? Is it still working or do I have to push a new command out do you think? Gabe ShackneyPrinceton Public Schools

Used Enabled System Preference Panes template to grey out the Security & Privacy and Desktop & Screen Saver Preference Panes. I removed <string>com.apple.preference.desktopscreeneffect</string> and <string>com.apple.preference.security</string> from the list to accomplish this. It worked fine, but also greyed out iCloud and Flash Player preference panes in Lion, since they are not included in the template. I was able to reactive the security and Screen Saver prefs pane by using the original template again, but iCloud and Flash Player are still greyed out. Can anyone tell me how to reactivate those two pref panes?

Working on imaging a cart of computers and have a workflow set up in Casper Imaging. I have users already created in the base image. Also have some things setup to install and scripts to run after image reboot. Once the computer reboots it auto logins in and then i see the casper screen where it says that the computer is finishing the image process. in my previous work flows i have to login to a user before that started. Anyone else run into this?? Anyway i can get back to that??

So I'm trying to bind to AD using a policy. It's actually binding just fine, but it uses the computer's current name of "Admin's Mac Mini" to bind. I made a little shell script to use scutil and set the three names (Hostname, LocalHostName and ComputerName) to the serial number, then run the policy. However, it's still binding using the computer's previous name. Is there a way to specify a computer name in the bind policy? Or a way to refresh the system so that it actually binds using the recently set (and currently ignored) computer name? FYI, I'm trying to use the serial number as the computerID when binding. I know it can be done via command line using the jamf binary using the computerID parameter, but to do that, I need to specify my credentials on the command line which I can't do for security reasons. The next step for me is going to be to set the computer name, force a reboot, then do the bind, but that seems like a

ran the following script on a macbook air... after doing so... SSH does not work.. and when you try to reboot, it stays at the Apple logo screen... /usr/sbin/jamf createAccount -username CasperAdminAccount -realname CasperAdminAccount -password whatever -home /private/var -admin -hidden -secureSSH

In Casper JSSHow come when I go to Mobile Devices -> Apps -> NEWApp Store App -> Nextand do a search for Money - Learn to Count Money, the app I'm looking for does not show up. Here's the link to the app. https://itunes.apple.com/us/app/money-learn-to-count-money/id342123042?mt=8 Thanks!

I have a policy that simply runs a Execute Command of "softwareupdate --install --all". This command works fine locally and applies any pending software updates. However when I run it from JAMF i get this: Executing Policy Run Software Updates... Running command softwareupdate --install --all... Result of command: Software Update Tool Copyright 2002-2012 Apple Inc. Finding available software ...and then nothing. It's like it ends the process right then and doesn't let it continue. Has anyone else experienced this?

Hi, Thanks for reading. We deployed a JSS server, in addition with network homefolders in a company. We setup several configuration profiles for homefolder sync, network mounts, etc. Clients use Microsoft Office (2011) Outlook for Mac to read their email which is hosted on the company exchange server. Email works well, but when one client gets a message one of their emails is being put in quarantine and needs to be released, they have to click on a provided link to release it. By default the Mac's open Safari, and then is being asked for a administrator username/password to unlock a certain keychain for the system to use with the website. It says for the website **.outlook.com a certificate is needed. It displays a JSS certificate in the window but when I fill in the admin user&pass, it comes back with the same window to fill in the username and password again. We tried opening the same link in firefox, then all works well and the email is released from quarantine. The c

When changing name's in General Tab for computer it ends up going back to the old name after saving it. What's the best way to change the computer name and it actually stay's the new name ?? Thanks

Hey all,I had thought my Netboot server was set up correctly. I can boot to it and access the JSS no problem. My issue is I can't unmount my Macintosh HD disk. I have diskless selected but no dice. When I boot off the network I'm still using local resources. This means I can't image any computers through Netboot. Any suggestions? What might I be overlooking? Thanks,Jason

Anyone seeing errors creating new packages with Composer 9.3 and using Casper admin 9.3 and deploying packages with Self Service? I created several new updated packages uploaded them to Casper Admin then updated the policy and I am seeing the following in the install logs in the associated policy: [STEP 2 of 3]Verifying package integrity...Installation failed. The package could not be verified. Verifying package integrity...Installation failed. The package could not be verified.[STEP 3 of 3]Running Recon... So far this is on three new packages including a new Office 14.4.1 update. I am not using HTTP as deployment method on my DS server shares. I hope this is not another bug. Thank you.

I'm re-architecting our Casper infrastructure to eliminate a dozen Xserve DP's. I've not gotten experience with the JDS yet. If my root JDS is in the US, and I have a child JDS in London, can the London JDS cascade DP sync to an SMB share? Or can JDS only sync to other JDS's.

I am attempting to use @tlarkin script #!/bin/bash # generate local user account based on UID of greater than 1000, if multiple AD accounts exist this will grab all of them userList=$(/usr/bin/dscl . list /Users UniqueID | /usr/bin/awk '$2 > 1000 { print $1 }') for u in ${userList} ; do /usr/sbin/dseditgroup -o edit -a ${u} -t user admin done exit 0 To make our edir users admins. It works with our test account but not our dev users. I am assuming it is not working because our user names have a space in them? Our test account does not have a space and it works just fine with that account. Any idea's how to make this work with a username that does have a space? Or a different way to make those users admin?