We've setup a Disk Encryption configuration and policy for FileVault2 (institutional key). We're intermittently getting the following error after imaging a system:"Error encrypting disk: Unknown error code 188" The policy trigger is set to "Recurring check-in" (every 5 mins) and the execution frequency is set to "Once per computer". I've tried manually pushing the policy using the <sudo jamf policy -event "" -verbose> and <sudo jamf policy -none -verbose> commands but the policy isn't found. When I tried to enable FileVault via System Preferences manually, an error came up stating that the boot drive config was corrupted.Any ideas on what to do besides re-image and hoping for the best?...

I'll try to keep it concise. we set up our master casper server in the MS building in our network. we would like to set up two more in the HS and K6 buildings that would mirror the master. the point being that the enrolled macs in their respected buildings would be served by the server in their building. (software updates and self-service) is their a guide on how to do this?

This has been dogging me for a long ass time and I finally am close to solving it. I know others are in the same boat so listen up: You have a proxy that systems must go through in order to access the outside world. You have an internal SUS that you're setting on client systems through whatever means (MCX in my case). You're collecting receipt information and when machines recon, you get an error during receipt collection (Curl is throwing this one) Cannot connect to swscan.apple.com. There may be a proxy in place. The resulting error means that on machines that actually have updates available when the user runs Software Update, a machine's inventory "Software Update" section reports zero updates. I always thought it odd that even though systems were pointed to an internal SUS they were trying to get out to Apple. Anyway, it seemed to me that an environment variable needed to be set. Because, you can do: sudo su http_proxy="http://my.company.proxy:por

Hello, I was wondering if it was possible to enroll Macs into Casper and another management system, like AirWatch? There are services/features our school likes in AirWatch. They are hoping to combine both. Thanks in advance!

Hi all, I am in the process of setting up a test Casper Imaging environment and I am running into a little difficulty. I have imported our current production JSS into our test environment and it imported successfully. However, when I try to connect to the test JSS with the Casper Admin application, it reverts back to the production JSS address every time you try to enter a new JSS address in the preferences. However, the correct CasperShare folder on the test server is mounted, even though in the preferences, the JSS address entry is pointing to the current production server. I have made sure to update all of the server information to reflect the change in distribution point, but there must be something else I am missing. I can also image a computer in our test environment, as the correct CasperShare is mounted, but I notice the newly imaged machine has Software Center pointing to our production server as well, so the computer never gets enrolled into the test JSS. Any help would

When we open google chrome and safari after imaging, we get a message "keychain can not be found to store chrome". We do not get this message when logged in the admin side only the user side. On the user side there is nothing stored in their keychain. How can we fix this?

Apple just pushed out a bunch of new channels to the AppleTVs. http://9to5mac.com/2014/06/24/apple-tv-adds-abc-news-aol-on-pbs-kids-willow-tv-and-redesigned-flickr-app/ Is there anyway to configure an AppleTV profile that automatically hides all new channels? It is a pain to have to go around to each AppleTV and manually hide new channels. Thanks! Corbin

When attempting to upgrade the JSS install on our xserve from 9.24 to 9.3, we're prompt with 'Web Application Ports in Use, Port 443 is already in use by another application. This is required to install a JDS on this server.' The Generic HTTPS port is likely in use by our 'Server' app [Websites - ON: Server Website (SSL)]. Our only option on that prompt is 'OK', can we continue with the install? If not, do we need to find what's using 443, then stop/remove it? We have a backup of 9.24, but did not want to proceed without hearing from the community.

Hey all, I'm having trouble with getting my search base working on my new server. However, it only seems to be with User Group Mappings. My (current) JSS server is on 8.73 and it works fine but with the new 9.3 it seems to not be working with the identical settings. I don't know much about AD or LDAP. However, I decided to run a few dscl commands to see if I could see a difference. So, my primary example is with a group named "gEUE." When I do a read of it in dscl it comes up with this as it's base path: dsAttrTypeNative:distinguishedName: CN=gEUE,OU=Groups,OU=World Headquarters,OU=Office Locations,DC=northamerica,DC=cerner,DC=net My search base on both servers is: OU=Office Locations,DC=northamerica,DC=cerner,DC=net but for some reason it doesn't find anything. EDIT: I suppose I should also say that it searches fine for users, just not for groups. Anyone have any thoughts?

First time using the PreStage feature of the JSS (9.32)I'm able to netboot and use Casper Image to push the PreStage Build. I'm having an issue with enrollment and management.After the process completes the computer shows as unmanaged in the JSS. If I "jamf manage" it says there are no valid credentials to enroll. I tried a quick add package that installs after reboot post build and I still had to manually enroll it with the "jamf manage" command. Im guessing a quick add package is needed so the caspercontrol account is added. But it seems im getting something wrong. First time I added the package to the build... didn't work. Next time I used composer thinking it had to be automated. Still didnt work with out manual intervention. Guys, what am I missing here...Thanks,-Ian

After our 8.73 > 9.31 migration, we had a bit of a struggle getting policies to work. Our JAMF buddy found the problem. JSS 9.31 has "Verify Packages" on by default. So packages without checksums will fail given the default "Always" setting. Set to "When available" if you want packages with checksums to be validated, else if no checksum it'll skip verification. Alerted JAMF, they're looking into changing the default to "Never" so checksums are ignored by default. HTH,Don

Hi, I am doing some testing, and am having some trouble with quickadd. I created a new quickadd package, and it DOES enroll when you run the package manually on a client. However, if you add it to the workflow to install on boot drive after imaging it does not enroll. I have done it this way for a few years now with no issues. But I am getting older and maybe forgot a setting. We just do target mode imaging and it has worked fine. Any ideas? It is creating the hidden JSS acount (unless the workflow is, I am not sure). Thanks! Steve

Last year i had a policy that created a hidden user account that was used by a single teacher to monitor her students via ARD. As of right now, the policy & script has been removed from our enivornment and i'm left with a handful of machines out there that have a hidden user called MONITOR. The account is hidden from users and groups, but its home folder is visible. Smart groups based on local user accounts do not seem to work if the account is hidden. Does anyone have a trick to getting machines into a smart group if they have a specific hidden account? Thanks and hope everyone has a great weekend!

I cannot get the Netboot service to actually start, I have gotten rid of any spaces and underscores, only periods are left (10.9.3NetBoot.nbi). Currently the server has an ip of 10.21.1.230, 255.255.0.0, 10.21.1.1. The current subnet entries are as follows:10.26.0.0/16 255.255.0.0 That should be correct, right?

Hi, We are in the process of creating the package and deploying Parallels Desktop 9 Enterprise Edition. I am following the Parallels Desktop Autodeploy packaging method provided by Parallels. License is not getting activated while installing the package. Install Logs says contact parallels team for assistance. If we launch manually and enter the License its getting activated. We are behind proxy but the manual License activation works fine. Is there any other way to package parallels other than auto deploy package? We did not had any issues with Parallels Desktop 8 auto deploy package since it activates offline. Thanks & Regards,Karthikeyan

Has anyone gotten packages created on Mavericks for CS6 that will install correctly on 10.9? I am having the hardest time. After many failed attempts to even create the package, I got one created, but then it fails to install. This is all locally, before even trying to distribute through Casper. Any advice would be welcome!

I've mostly scripted with PowerShell and vbscript and have no experience with shell scripting, so I apologize for the newbness of this question. I'm writing an extension attribute that has a line like this: ver='/usr/sbin/jamfds -v'echo "<result>$ver Installed</result>" When I run that from Terminal i see that $ver has a value of "jamfds 9.32" (which is what I expect). But when I look at a computer in the JSS I only get "/usr/sbin/jamfds -v Installed" in the value field. Any thoughts?

I have a script that i'm putting into Casper for techs to modify a plist on a users computer.It is using up to $10. Whenever I run the script field 10 (and 11) return odd results. example: #! /bin/sh echo $1echo $2echo $3echo $4echo $5echo $6echo $7echo $8echo $9echo $10echo $11 In Remote, add data to fields. in this example the number of the variable.external image link when it is run, i get a "/0" and a "/1" no matter what I enter for data. external image link ... anyone have this problem, or am just doing something stoopid? Peter

Hello, The script below works in Mountain Lion, but not Mavericks. We put this code into Automator as "Run Shell Script" and save it as an app. Users would double-click it to add printers. In Mavericks, it adds but when they print, it prints out garble. Thinking it is driver. Is the code below broken in Mavericks? **** PrinterName='Thomas - Guidance Main HP 4015'CUPSPort='Tho_154_73'Driver='HP LaserJet P4010_P4510 Series.gz' /usr/sbin/lpadmin -p $CUPSPort -E -v http://printexample.com/printers/$CUPSPort -P "/Volumes/example/public/Printer Install/DriversOSX/$Driver" -D "$PrinterName" -o printer-is-shared=false

We recently migrated fro 8.73 > 9.31 and one of the minor issues we ran into is our techs who are trying to control a remote Mac with Casper Remote is getting "There was an error creating resources on the JSS" errors. Looks like there is already a thread about the error, but slightly different in that the tech is trying to push a policy: https://jamfnation.jamfsoftware.com/discussion.html?id=8235 In our case, techs are set up using "Auditor" role as a template, plus the following Casper Remote rights...are we missing anything? external image link

Hi folks, I see a lot of useful options in the "managed preferences" section but I really don't know if we can use them as I couldn't find a way to actually see if the policy will run. Apart from that I'm not able to add the policy to my dashboard. Would be great to know there is a way to use managed preferences. Perhaps I am overlooking a setting here? By the way, I was looking for a way to set a default wallpaper on clients.

I'm having trouble with my 10.9.3 Netboot image with Casper Imaging. I built my Netboot image based on the following articles:https://jamfnation.jamfsoftware.com/article.html?id=307https://jamfnation.jamfsoftware.com/article.html?id=313 When I run my imaging workflow everything is skipped and it hangs on "Ensuring system files are hidden" forever. I have to force shutdown. It doesn't matter what my workflow contains, 2 packages or 25 it does the same thing with this Netboot image.

I am in the process of moving my file server from an AFP volume hosted on OS X server to an SMB volume hosted on Windows 2008 Server R2. I need to get the data, about 8 TB of it, moved over, but I'm having a difficult time with file/folder names in the transfer. I've tried rsync and robocopy and richcopy, yet all of them seem to fail at some point. Has anyone done this before, and what tool did you use to get the data to move over without error? If you used rsync, what switches did you use? Thanks! Steve

I have a 10.9.1 diskless Netboot image, a 10.9.1 Server configured as both an AFP distribution point, and a JDS for testing purposes. The issue is when I image with a configuration that has an ASR image and it goes to do a block level copy of the base OS image to the drive, if I choose the JDS version of the distribution as the share point to get data from, the block level copy stops part way through. After investigating the net boot machine while its doing the block level copy I can see in activity monitor in the Network sent/received that as its pulling down the image its uploading a ton of data (usually about half what it is pulling down, but if its pulling data at 80MB.sec, then its uploading 40MB/sec which is crazy). It's doing this because it's writing some large amount of data to the net boot's root volume which is effectively writing to the shadow file on the server. As its doing this, the net boot's root volume completely fills up after only getting a few

So now that I have replication working from our main site to my first test site, I am running into another issue.The only way I found that I was able to force a specific group of machines to have a new distribution point was using network segments. Not a problem for me. I've now got my test site with a fully replicated DP, and the machines at that site are now looking at the local distribution point. All of our installs are failing with the error message that the package couldn't be found. If I use casper remote from my machine in town, I can specify to use AFP/SMB when installing a package and sure enough it works fine out there. Is there a way for me to set all packages coming from this new DP to use AFP/SMB vs HTTP? I know this can be set on a per policy basis, but that will not work for our situation. Thanks!