What has made it feel like a success? Are there any hidden considerations that should be brought up? What should I expect from something like this? Is it more like a meet and greet or more information oriented (or both)? I am looking at starting one up in the Portland, OR area and would sure like a little setup information as this will be my first time at attending something like this. Thanks!

Hey! At my office we have many users who are always connected to our network through VPN. One user is using 10.7.5 and we want to upgrade them to 10.8.5. I've been unable to connect to anyone on VPN through Casper Remote, ARD, etc... Any thoughts?

So I've never worked with SafeGuard before and am curious as to how folks are deploying it. I've tried a login policy for right after Imaging that will call jamfHelper to fs mode, install Sophos, then run the activateSophos script as provided in the resource kit, but I always get an error 31 upon reboot as if the product isn't completely installed. Anyone run into this? What does your workflow look like? Thanks!

Hello Everyone, Recently, I found Auto DMG. Nice little program that turns the OSX installer into a DMG file with updates, I love it. It also has a portion to inject any pkg files to include with the DMG. I attempted to put the QuickAdd.pkg i created with Recon in there to auto enroll during imaging. So far It appears to not work, I still have to add the quickadd.pkg to my payload to get it to enroll the machine. Is there something i'm missing with this? any help would be appreciated.

I know I can go from Mac to PC using smb://(computer name)/C$ Is there a reverse to this? Is there anyway way to connect to a Mac's hard drive from a PC?

I'd really like to create Smart Groups based on the ports and switches the computers are plugged into.I've Found this awesome app called "whichswitch.app". Tells me enough info to create the smart groups but is locked behind a lot of GUI muck. Has anyone got any scripts (bash, perl, python, anything really) that can capture the CDP Packets or the LLDP Packets on a network interface and parse out port and switch info? Here is what I've found so far, an LLDP tutorial that I'm not able to get working:http://www.adminsys.ch/2012/09/12/add-lldp-information-absolute-manage-mac-os/ And which switch, the program that got me looking down this rabbit hole:http://www.computernetworkbasics.com/whichswitch thank you in advance for any information. PS: I'm not sure why this is tag Aperture.I'd Un-tag but I have no idea how.

If someone has a moment can you please run the following script via policy and confirm casper see's it as a failure. I've tried for days to explain to support that this is a bug in their log parsing but they will not listen and are now suggesting I have their team write me a script for a fee. I'm about ready to start pulling my hair out. Since I can't seem to get them to help I'd at least like someone here to back me up on what I am seeing. The following simulates the output of my script and in my testing, provides the same 'failure' result in the target system's JSS logs. echo "Script result: ---> Computing dependencies for watch ---> Cleaning watch ---> Scanning binaries for linking errors ---> No broken files found."exit 0

I have a policy to cache Mavericks to a scoped client. The policy excludes all clients that belong to a smart group of machines that have the "Install OS X Mavericks.InstallESD.dmg" already cached. When the dmg is cached it runs an inventory update to update the smart groups. The problem that i've been running in to is that when the policy fails due to a loss of connection with the JSS or whatever, i have to go in and flush the error log to have it run again. So, what i want to do is set the policy to "ongoing" so when it does fail, it will just resume when it checks in again. My question is, if the policy is set to ongoing and to run at checkin(every 15 minutes), will multiple sessions of the same policy run if the download takes longer than 15 minutes? my assumption is no and that this policy will only run again if it fails to cache the installer.

After our 9.2 upgrade from 8.7x I ran the upgrade the was requested by casper admin. It ran smoothly and I thought I had completed the whole upgrade process without any problems! I was wrong though. The Casper Admin upgrade process zipped up our packages and winclone images. It's been a couple weeks since then and I just tried to restore my first dual-boot image. No success. I've got a call in to my account rep, but since I don't see anything on jamfnation about it I thought I'd post a note.

Hey guys, I have some questions on a clustered JSS in a DMZ. I'm not clear with this completely. I used https://jamfnation.jamfsoftware.com/article.html?id=174 and the port list in the install guide for this, but here are my missing things: Which Ports are needed to communicate from the DMZ JSS to the master JSS? I assume this is 443 in both directions. Correct? Is MySQL (3306) needed from DMZ JSS to master JSS? When I get an external name and IP for the DMZ JSS, such as https://jss.mycompany.com, do I have to point the internal clients to this external URL too? Thanks!Michael

So I've run into a small problem. Brand new iMacs image with casper imaging without a problem. If you take that 10.9.4 machine and put 10.8 using our old image server they image fine. But after putting 10.8 on them you can not use casper. They freeze a little ways in to block for block copy. I can not bring up the log because it is a hard freeze. We just setup our server so I'm not sure where to look on our JSS. Again if I put a brand new iMac in the same location / connection and settings the image process completes without error. I've also used disk util before imaging to repartition the drive with no luck. I also imaged a brand new iMac, put 10.8 on and tried to image again and it freezes. external image link external image link

We have a script that we are trying to allow a user to run without having the need to input admin credentials. Basically the script checks for a valid IP on Ethernet and if it finds it, it shuts off WiFi and exits. If it doesn't see a valid IP on Ethernet it checks WiFi and looks for a valid IP. If it finds it, it exits. If it doesn't it shuts the airport off, removes all the networks, turns airport back on, installs a configuration profile and reconnects up to our network. The script works perfectly but as soon as we deploy it to a test box as either a .command or as a .app it prompts for admin credentials to turn the WiFi off, then again to turn it back on and again to install the profile. After researching it we are at a loss as to how to allow the contents of the script to run without interruption. Our end goal is to have an app or an alias to a .command file that resets the wireless setting on site by the current user who is not an admin on the machine. Any he

Created the Chrome Remote Desktop Host DMG and pushed that out, but now I'd like to force the app into Chrome app list as well. Anyone been able to push out Chrome apps with Casper?

Im trying to create an auto login user in 10.9.It worked in 10.8 but doesn't seem to work in 10.9. I've created a pkg with the following files but no luck:/etc/kcpassword/Library/Preferences/com.apple.loginwindow.plist I have also tried Per Olofsson's createuserpkg which creates the account but does not autologin the user. Any ideas?

We are starting a Self Service based upgrade from OSX 10.8 to 10.9 on our fleet of macs. Using the latest 10.9.4 installer I have created a policy to cache it to the mac then the user can initiate the upgrade to Mavericks from the cached package.The upgrade works well except the macs are no longer connected to our WPA2 Wi-Fi network.If they select the company network the mac will prompt for the Wi-Fi password that the mac remembered pre-upgrade. This seems to be an issue with the Wi-Fi details not being moved correctly to the new Local Items Keychain. Does anyone have a work around to this issue?Thanks in advance!

I have a Casper 9.31 test server that I imported a copy of our production database into and now I want to remove the SMTP server settings so that I don't get unnecessary emails from the test server. However, I cannot find a way to do this. There is no Delete button, and emptying the "Server and Port" and "Sender Email Address" fields only result in red arrows indicating errors and not allowing me to Save with empty fields. I can work around this by just putting in a bogus email server address, but this will just add more error messages in the log file which I am trying to avoid as I troubleshoot some other issues with our production database. Before I report this as a bug I just wanted to ask if I am missing something. Is there somewhere else I need to go to disable this?

Hello, Is there any way to change the privileges of the start button on the login screen so anyone can press it? EG: I have some laptops used in a classroom environment that unfortunately have to have fast user switching turned on.The reason for this is incase someone doesn't log out and just closes the lid and puts it away, the next person can login without any bother, however this then leads to one of our managed printer popups getting super confused and spewing errors out everywhere. What I would like to achieve is making it so that anyone can press the restart button on the login screen or when in their account and it not pop up asking for the admin credentials due to someone else already being logged in.Based on the fact os x is unix I was hoping there is some group I can add all users to, to allow restart by anyone under any condition

ello, I'm looking for more information regarding the login trigger of a policy, basically I have created four global policies to run at login, once per user. After testing this, it appears that only one policy will have run rather than all four... If I was to logout and then log back in it fires off another single login policy. As you can imagine I don't particularly want the user having to login and logout multiple times to make sure the computer is setup correctly. Can you tell me if this is expected behaviour? Is there another way/best practise way of setting up users configurations? For example, I have a policies that creates an Application folder in the users homes, enables certain system preferences padlocks, configures dockutil and disables AD timeout. Thanks

Hey Guys, Can't seem to get this work work as planned. Basically I need a way for the end user to be able to turn off the proxies with the least amount of effort. There are also 2 scenarios to this, 1 where they are admins and 2 where they are not admins. Also this has to be able to run when not connected to the JSS. Basically this will be used when at a location that has a captive portal to connect to wi-fi. Once the user has authenticated through the captive portal, they will need to enable the proxy back on for VPN access. This is what I have so far. #!/bin/bash CD="/Users/Shared/CocoaDialog.app/Contents/MacOS/CocoaDialog" ON='networksetup -setftpproxystate "Wi-Fi" on &&networksetup -setwebproxystate "Wi-Fi" on &&networksetup -setsecurewebproxystate "Wi-Fi" on' OFF='networksetup -setftpproxystate Wi-Fi off&&networksetup -setwebproxystate Wi-Fi off&&networksetup -setsecurewebproxystate W

In our PC environment we have something they like to call 'Password of the Day' which allows the help desk tech grand a limited time admin password to a user who is at home or otherwise not able to be helped directly.Is there any way this could be implemented with Casper?

Just discovered since upgrading to 9.01 that my mobile OTA URL enrollment does not work. Error is:Access DeniedThis invitation is not valid Invitation? I didn't think OTA URL enrollment used an invitation? I checked the settings for my User-Initiated Enrollment for Mobile Devices and my option is still checkmarked to allow enrollment without an invitation...soooo what gives?

Uh oh. We're about to upgrade from 8.73 to 9.32. We've been testing this process on our test environment and so far we've only hit one major snag. The admin accounts on the JSS lose their administrator permissions, and sadly that includes the local admin account too. So we can upgrade but then can't administer the JSS. Does anyone know of any way via MySQL to grant full admin rights to an account? If the worst happens, it'd be a good way to recover things nicely. Help!

I have a dmg that installs an application. The application is just the .app that gets placed into Applications. I know that if I index the dog in Casper Admin I can then remove the application from the client stations. Here is my question. If a user updates the software on their station but it is named the same thing, will the indexing of my dmg still allow me to remove the application from the client's station? Does the removal just go my file name or my some other indicator?

Is anyone running JDS on Linux? What are your thoughts about it? Does it work well?

Ok, so i have been messing around with dockutil for the passed few days. For the most part easy to use and works great. So I am trying to modify the Default User Template dock plist. In the dockutil --help it says to use the '/System/Library/User Template/English.lproj' plist. But when i go there, i do not have that plist. So I grab the default plist found in /System/Library/CoreServices/Dock.app/Contents/Resources/en.lproj/. And change it to com.apple.dock.plist, then push it out to the /System/Library/User Template/English.lproj folder. Run the dockutil script and get this back Script result: item Mail was not found in '/System/Library/User Template/English.lproj/Library/Preferences/com.apple.dock.plist' item Contacts was not found in '/System/Library/User Template/English.lproj/Library/Preferences/com.apple.dock.plist' item Maps was not found in '/System/Library/User Template/English.lproj/Library/Preferences/com.apple.dock.plist' item