After lots of searching and testing its time to turn to the Nation. We have our Mavericks upgrade working perfectly via Self Service with cached installers and a policy but I can't get an OS upgrade to work properly in Casper Imaging with a Configuration. Some machines go through the motions in Casper imaging but upon reboot it is still 10.7. Other machines upon reboot just have a spinning wheel when trying to load the OS. Ive tried using a custom pkg I created with createOSXinstallPkg, another created with autodmg and even tried the ESD file (compiled). Hoping this is an easy one that I am overlooking?

Hi Folks, Recently I faced a peculiar issue when we imaged an old Macbook Pro (Mid 2009) using reference image which was captured using latest Macbook Pro model (Late 2013). Image got installed fine but it messed up all network devices. For e.g. LAN card is showing as Wi-Fi under Network. It is also showing thunderbolt port in Network devices however physically there is no thunderbolt port available at old Mac. I'm using Casper 9.22 version. Did anyone faced this issue & what could be the solution of this annoying problem? If anybody needs further information then please let me know. Thanks in anticipation!

I need an extension attribute to check if the logged in user (or any user) on a given machine is an AD user. We are trying to weed out users who are not authenticating against AD. We are using mobile accounts. Here is what I have at this point: #!/bin/sh result=$(ls -al /Users/ | grep Domain | awk '{print $4}') if [ "$result" == "MYDOMAINDomain" ]; thenresult="AD User"elseresult="Local User"fi echo "<result>$result</result>" exit 0 However, I see there are some users who slipped through who have authenticated, probably because they are logged in as local users but have authenticated to AD in the past (?). I could also test against users who are over 600 users by running: dscl . -list /Users UniqueID and filtering out users under 600, but am unclear on how to do that filtering. In any scenario, there is probably a more graceful way of doing this, and am wondering if anyone has any suggestions? Thanks.

Hi There! Does anyone know of a way to clear the fields in the "User and Location" tab of the JSS. I know that I can use the 'jamf recon' command to enter new data into those fields but I'd like a way to quickly make those fields empty using, preferably through the jamf recon command (so I can place it in a shell script) or during the imaging process. Any ideas?

I would like to set a computer record's name in the JSS and on the computer to it's DNS name. Doing the computer itself is easy, using scutil or jamfhelper. Getting the change up to the JSS is harder. I can run jamf recon, but that takes forever. Ideally I would like this option in Casper Imaging and in Prestage Imaging, so that all policies are using the correct name from the beginning, like joining the domain, etc. Does anyone else use DNS as their authority for names, and if so, how do you go about getting the JSS to use those names?

Recently migrated to JSS 9.31 and for our Help Desk we are starting with Audit template (full READ access), and adding rights to create/edit/delete searches. Somewhere along the way these users ended up with Inventory Display Options write access...is there a way to fix this? There doesn't seem to be a JSS access checkbox for that (I remember there is/was in JSS 8.x). Don

Hi,I would like to remove a firmware password on machines have OS X 10.7 and others have OSX 10.8.I created a policy which will copy the setregproptool depending on the OSX version to the /Library/Application support/JAMF/bin folder, Then added to the policy to run the following command:/Library/Application Support/JAMF/bin/setregproptool -d -o 'current firmware password'It says it was completed and run the policy but the machine still have the firmware password if I try to run the command manually into terminal it works and the firmware password removed.I tried to run the EFI Password feature on the JSS as well with NONE value to remove it. it was asking for the current firmware password and timing out.I would appreciate someone to tell me what am I missing here. 1- Is there any known issue with the JSS to run a command as it worked before for me when I setup firmware password.2- Do I need to include the current firmware password somewhere in my policy for EFI Password feat

I have read several discussions regarding issues with NetBoot however I haven't been able to get my issue solved so I'm asking the JAMFNation for HELP!!!. I am using a Mac Mini located in our datacenter running OSX 10.9.2 hosting a Netboot Image of 10.9.2 (13C64) and according to the Network team all the pointers/helpers are in place. Test device A is MacBookPro6,2 (netboot fails)Test device B is MacBookPro11,3 (netboot works fine) Logs from the Netboot Server when I Netboot test device A...3/25/14 1:22:29.759 PM bootpd[40654]: BSDP INFORM [en0] 1,58:b0:35:f9:26:d3 NetBoot005 arch=i386 sysid=MacBookPro6,23/25/14 1:22:29.759 PM bootpd[40654]: NetBoot: [1,58:b0:35:f9:26:d3] BSDP ACK[LIST] sent 10.250.7.146 pktsize 3003/25/14 1:22:30.510 PM bootpd[40654]: BSDP INFORM [en0] 1,58:b0:35:f9:26:d3 NetBoot005 arch=i386 sysid=MacBookPro6,23/25/14 1:22:30.510 PM bootpd[40654]: NetBoot: [1,58:b0:35:f9:26:d3] BSDP ACK[LIST] sent 10.250.7.146 pktsize 3003/25/14 1:22:31.509 PM bootpd[4065

Hey guys, I was updating my image recently and I decided to move to Java Runtime 7. I noticed that after I started using this, the Extension Attribute stops working, or rather it reports as not installed even though it is. This is the EA that I'm using: #!/bin/sh #Check if java_home is defined javaHome=`/usr/libexec/java_home 2> /dev/null`; if [ ! -z $javaHome ] then vers=`java -version 2>&1 | grep "java version" | awk '{print substr($3,2,length($3)-2);}'` echo "<result>$vers</result>" else echo "<result>Not Installed</result>" fi I think I know what the problem is, I just don't know how to fix it.It seems that when it tries to run "java -version" from terminal it fails because we don't install the JDK. (If I go to terminal and type "java -version" it attempts to give the site to install the JDK). We would rather not install the JDK as well, unless necessary. Anyone have

NetSUS is up and running. It is downloading updates, the URLs are accessible, all updates are enabled, and it seems to be properly behaving. And to keep things simple, I have one branch. It is named "root", is marked as root, and the catalog URL is http://redacted-server-name-here/content/catalogs/index_root.sucatalog When I point a client to the NetSUS, it pulls the catalog but only sees one available update (Remote Desktop Client 3.7.1). However, if I point the client to my internal MacSUS or to Apple's SUS, there are 6 updates available. Those 6 updates are in the NetSUS catalog, marked as downloaded, and enabled. If it were an issue with the branch or the naming scheme, I'd expect to see 0 updates available. And If I disable the RDC 3.7.1 update, the client finds 0 available, which indicates that NetSUS is working to some degree. I just can't figure out why the other updates are missing as options on the client. This seems to be an issue with NetSUS and

Hi All, Does anyone already have a script for a user to initiate their own local to mobile account migration via Self Service? The machine will already be bound to AD. The scenario will be:1. User runs Local to Mobile Account Migration script via Self Service.2. Rename computer to serial number3. Log out the current user4. Delete the current user's account keeping their local home directory.5. User then logs in with their AD credentials picking up the local home directory. (all local usernames match AD usernames.) Thanks! ;)

Script running: JDS_Linux_Installer-9.0.run[root@utasjdssby Downloads]# sh JDS_Linux_Installer-9.0.run Verifying archive integrity... All good.Uncompressing JDS Installer..........Starting the JDS InstallationChecking installation requirements...Checking for a supported Linux OS...Red Hat Enterprise Linux Server 6.4 foundChecking for a 64-bit OS...OKPassed all requirements checking!Creating JDS directory structureInstalling apache...Enabling ssl...Installing security module...Verifying archive integrity... All good.Uncompressing JDS API Installer........Starting JDS API InstallationInstalling php...Copying API filesgrep: /etc/httpd/conf.d/ssl.conf: No such file or directoryWriting API RewriteRule...sed: can't read /etc/httpd/conf.d/ssl.conf: No such file or directorygrep: /etc/httpd/conf.d/ssl.conf: No such file or directoryDisabling Idexes on APIsed: can't read /etc/httpd/conf.d/ssl.conf: No such file or directoryRestarting apache...Finished deploying the JDS API applicatio

When we migrated from 8.73 > 9.31, we found the "Migrate" button in Casper Admin 9.31. We alerted JAMF, since docs only say migration is needed if you're going to JDS/Cloud. I'll post separate observations under "JSS 9.31" header. HTHDon

Is anybody else seeing this? I had this problem with 9.23-25 when packaging anything with Composer and that was resolved in 9.3. I just realized I'm seeing the old problem remains in 9.3 for Recon.app. The problem is that when I create a quickadd package and drag it into Casper Admin, the MD5 shows a local path with an error stating: index.bom:,No,such,file,or,directory external image link This used to happen with every PKG I made in Composer, but that issue has since been resolved. Any ideas? I even tried building the package on a different computer with a fresh image on it.

I have a policy to trigger at 'check-in' with the execution frequency to run 'once per computer', I am curious to know if this policy fails to run appropriately (registers in the JSS as failed) will it know to run again or has it already registered the execution frequency of running just the once?

Hi folks, Wondering if anyone has any experience with this. Client had registered their JSS with DEP but it was never going to work, as their JSS was not publicly exposed/it had a private .lan DNS hostname/URL. So, we changed the hostname, configured internal and external DNS, regenerated the built-in SSL cert, restarted Tomcat, and opened up inbound ports 8443 and 80 to the JSS. Tested it and everything works, both on the local LAN and on the Internet. Unsuprisingly, trying to activate a DEP-enrolled iPad resulted in an error about "A server with the specified hostname could not be found". So, we logged back into the DEP portal, removed the MDM server and created a new one, with a newly-downloaded Public Key. Downloaded the token file, recreated it in the JSS, and re-scoped everything to the new server in the JSS. Still getting the "The configuration for your iPad could not be downloaded from xxx. A server with the specified hostname could not be found." Trying

After clicking start on the netboot settings, this is what is written to the syslog. dhcpd: /etc/dhcpd.conf line 22: expecting hexadecimal number. dhcpd: option vendor-encapsulated-options 01:01:02:08:04:01:00:02:0E:80:17:61:66: dhcpd: /etc/dhcpd.conf line 23: right brace expected. dhcpd: next-server dhcpd: ^ dhcpd: /etc/dhcpd.conf line 27: expecting a declaration dhcpd: } dhcpd: ^ dhcpd: Configuration file errors encountered -- exiting

Hi Folks, I'm making progress working up to replacing our monolithic DeployStudio imaging with Casper. I'm having trouble with our custom User Template. In 10.9.3 the user template (for English speakers) is located at: /System/Library/User Template/English.lproj/ Once I do all the customizations I drag the template from the Finder (while logged into the GUI as root) to the left side of Composer and build as PKG and deploy. The problem is, the User Template does not get deployed to the path above, it seems to get deployed to the top of the target hard drive, which is useless and leaves locked folders there that should not be there such as Desktop, Movies, Music and Pictures. I suppose the stuff in Library/Application Support and Library/Preferences ends up in the main Library folder which is also incorrect. I'm probably creating this the package the wrong way because I'm new here. If you are not falling over laughing please set me straight. ;) Thanks. Jim

We have a Macbook at each VLAN broadcasting some printers so staff and students can print from iPads. However, printers don't always show up on the iPads. Sometimes "Reset Network" on the iPad or just rebooting the Mac helps but not all that often. Any other things I could try to get the printer list to populate more reliably?

Error installing Office2011-1442Update_EN-US.dmg: Set to install as either a self service, or at login, logout, or startup. Triggers work, but office is still showing up as 14.4.1 throughout the application list. Even if the policy runs at reboot. Logs show that the package is installing ok... Downloading https://jds.*.org/CasperShare/Office2011-1442Update_EN-US.dmg... Verifying DMG... Verifying package integrity... Installing Office2011-1442Update_EN-US.dmg... Closing package... Any suggestions on what to try?

In searching JAMF Nation I've found bits and pieces to the answer to my question, but I'd like to put the question out there to see how you're handling this. We haven't yet signed up for the new VPP and we currently don't have MAS apps available for deployment. I've been testing deployment of iPhoto 9.5 and packaged it up without the _MASReceipt folder. I've read that doing so would prevent MAS on the client end from picking up updates. In testing I've found that to not be true and now my client is stuck with an iPhoto update that it cannot run for obvious reasons. On the original machine that packaged iPhoto, I deleted iPhoto and re-downloaded it to obtain the newest build. I've read multiple suggestions that I should not simply update the app and re-package. So after a successful updated rebuild of the iPhoto package (9.5.1) I sent it over to the client that originally received the 9.5 install. I used Casper Remote to install the latest ve

I've found plenty of excellent scripts for removing mobile accounts that create a home directory on login but I haven't found any that remove network account home directories. I have some lab computers that do not "create mobile account at login" and a user home folder is created. These users are not in dscl so the scripts like the example below do not work for me. I'm trying to clear out the home folders for these network logins but don't know enough about bash to rework this script. #!/bin/sh userList=`dscl . list /Users UniqueID | awk '$2 > 1000 {print $1}'` echo "Deleting account and home directory for the following users..." for a in $userList ; do find /Users -type d -maxdepth 1 -mindepth 1 -not -name "*.*" -mtime +7 | grep "$a"; if [[ $? == 0 ]]; then dscl . delete /Users/"$a"; #delete the account rm -r /Users/"$a"; #delete the home directory fi done Inputting this line in te

Hi, So the big start of our massive JSS infrastructure upgrade is starting this week. One small detail to sort out and that's how to change the address that our clients are looking for the JSS. We're going to have our new address and our existing address co-exist on the DNS pointing to the same server. I'll change the JSS address in our existing 8.62 server. Do I have to do any more work than that? I vaguely recall that Jared wrote a script attached to a policy to set this on the clients and I don't know if that would be required or not.

Is anyone else running into this issue? I have tried both to apply this update during imaging, Self Service and policy push and all three result in Office losing it's key. I updated via Microsoft Update and had no issues.

I know I am missing something simple here, but what is it? I have a 1GB mpkg that I need to deploy through policy. I have user interaction enabled, with option to defer (I know that if I disable the option to defer, that would be one solution to my question, so let's assume its a requirement). I created the package in Packages. The policy has the mpkg as its package. The mpkg will copy a few pkgs to the client computer and the mpkg's post-installation script will 1) throw up a cocoaDialog splash screen with progress bar, 2) install the software from the pkgs, 3) and configure the software. My question: How can I get a splash screen showing on the client computer while the policy's 1GB mpkg is being copied to the computer?