ello, I'm looking for more information regarding the login trigger of a policy, basically I have created four global policies to run at login, once per user. After testing this, it appears that only one policy will have run rather than all four... If I was to logout and then log back in it fires off another single login policy. As you can imagine I don't particularly want the user having to login and logout multiple times to make sure the computer is setup correctly. Can you tell me if this is expected behaviour? Is there another way/best practise way of setting up users configurations? For example, I have a policies that creates an Application folder in the users homes, enables certain system preferences padlocks, configures dockutil and disables AD timeout. Thanks

Hey Guys, Can't seem to get this work work as planned. Basically I need a way for the end user to be able to turn off the proxies with the least amount of effort. There are also 2 scenarios to this, 1 where they are admins and 2 where they are not admins. Also this has to be able to run when not connected to the JSS. Basically this will be used when at a location that has a captive portal to connect to wi-fi. Once the user has authenticated through the captive portal, they will need to enable the proxy back on for VPN access. This is what I have so far. #!/bin/bash CD="/Users/Shared/CocoaDialog.app/Contents/MacOS/CocoaDialog" ON='networksetup -setftpproxystate "Wi-Fi" on &&networksetup -setwebproxystate "Wi-Fi" on &&networksetup -setsecurewebproxystate "Wi-Fi" on' OFF='networksetup -setftpproxystate Wi-Fi off&&networksetup -setwebproxystate Wi-Fi off&&networksetup -setsecurewebproxystate W

In our PC environment we have something they like to call 'Password of the Day' which allows the help desk tech grand a limited time admin password to a user who is at home or otherwise not able to be helped directly.Is there any way this could be implemented with Casper?

Just discovered since upgrading to 9.01 that my mobile OTA URL enrollment does not work. Error is:Access DeniedThis invitation is not valid Invitation? I didn't think OTA URL enrollment used an invitation? I checked the settings for my User-Initiated Enrollment for Mobile Devices and my option is still checkmarked to allow enrollment without an invitation...soooo what gives?

Uh oh. We're about to upgrade from 8.73 to 9.32. We've been testing this process on our test environment and so far we've only hit one major snag. The admin accounts on the JSS lose their administrator permissions, and sadly that includes the local admin account too. So we can upgrade but then can't administer the JSS. Does anyone know of any way via MySQL to grant full admin rights to an account? If the worst happens, it'd be a good way to recover things nicely. Help!

I have a dmg that installs an application. The application is just the .app that gets placed into Applications. I know that if I index the dog in Casper Admin I can then remove the application from the client stations. Here is my question. If a user updates the software on their station but it is named the same thing, will the indexing of my dmg still allow me to remove the application from the client's station? Does the removal just go my file name or my some other indicator?

Is anyone running JDS on Linux? What are your thoughts about it? Does it work well?

Ok, so i have been messing around with dockutil for the passed few days. For the most part easy to use and works great. So I am trying to modify the Default User Template dock plist. In the dockutil --help it says to use the '/System/Library/User Template/English.lproj' plist. But when i go there, i do not have that plist. So I grab the default plist found in /System/Library/CoreServices/Dock.app/Contents/Resources/en.lproj/. And change it to com.apple.dock.plist, then push it out to the /System/Library/User Template/English.lproj folder. Run the dockutil script and get this back Script result: item Mail was not found in '/System/Library/User Template/English.lproj/Library/Preferences/com.apple.dock.plist' item Contacts was not found in '/System/Library/User Template/English.lproj/Library/Preferences/com.apple.dock.plist' item Maps was not found in '/System/Library/User Template/English.lproj/Library/Preferences/com.apple.dock.plist' item

We've setup a Disk Encryption configuration and policy for FileVault2 (institutional key). We're intermittently getting the following error after imaging a system:"Error encrypting disk: Unknown error code 188" The policy trigger is set to "Recurring check-in" (every 5 mins) and the execution frequency is set to "Once per computer". I've tried manually pushing the policy using the <sudo jamf policy -event "" -verbose> and <sudo jamf policy -none -verbose> commands but the policy isn't found. When I tried to enable FileVault via System Preferences manually, an error came up stating that the boot drive config was corrupted.Any ideas on what to do besides re-image and hoping for the best?...

I'll try to keep it concise. we set up our master casper server in the MS building in our network. we would like to set up two more in the HS and K6 buildings that would mirror the master. the point being that the enrolled macs in their respected buildings would be served by the server in their building. (software updates and self-service) is their a guide on how to do this?

This has been dogging me for a long ass time and I finally am close to solving it. I know others are in the same boat so listen up: You have a proxy that systems must go through in order to access the outside world. You have an internal SUS that you're setting on client systems through whatever means (MCX in my case). You're collecting receipt information and when machines recon, you get an error during receipt collection (Curl is throwing this one) Cannot connect to swscan.apple.com. There may be a proxy in place. The resulting error means that on machines that actually have updates available when the user runs Software Update, a machine's inventory "Software Update" section reports zero updates. I always thought it odd that even though systems were pointed to an internal SUS they were trying to get out to Apple. Anyway, it seemed to me that an environment variable needed to be set. Because, you can do: sudo su http_proxy="http://my.company.proxy:por

Hello, I was wondering if it was possible to enroll Macs into Casper and another management system, like AirWatch? There are services/features our school likes in AirWatch. They are hoping to combine both. Thanks in advance!

Hi all, I am in the process of setting up a test Casper Imaging environment and I am running into a little difficulty. I have imported our current production JSS into our test environment and it imported successfully. However, when I try to connect to the test JSS with the Casper Admin application, it reverts back to the production JSS address every time you try to enter a new JSS address in the preferences. However, the correct CasperShare folder on the test server is mounted, even though in the preferences, the JSS address entry is pointing to the current production server. I have made sure to update all of the server information to reflect the change in distribution point, but there must be something else I am missing. I can also image a computer in our test environment, as the correct CasperShare is mounted, but I notice the newly imaged machine has Software Center pointing to our production server as well, so the computer never gets enrolled into the test JSS. Any help would

When we open google chrome and safari after imaging, we get a message "keychain can not be found to store chrome". We do not get this message when logged in the admin side only the user side. On the user side there is nothing stored in their keychain. How can we fix this?

Apple just pushed out a bunch of new channels to the AppleTVs. http://9to5mac.com/2014/06/24/apple-tv-adds-abc-news-aol-on-pbs-kids-willow-tv-and-redesigned-flickr-app/ Is there anyway to configure an AppleTV profile that automatically hides all new channels? It is a pain to have to go around to each AppleTV and manually hide new channels. Thanks! Corbin

When attempting to upgrade the JSS install on our xserve from 9.24 to 9.3, we're prompt with 'Web Application Ports in Use, Port 443 is already in use by another application. This is required to install a JDS on this server.' The Generic HTTPS port is likely in use by our 'Server' app [Websites - ON: Server Website (SSL)]. Our only option on that prompt is 'OK', can we continue with the install? If not, do we need to find what's using 443, then stop/remove it? We have a backup of 9.24, but did not want to proceed without hearing from the community.

Hey all, I'm having trouble with getting my search base working on my new server. However, it only seems to be with User Group Mappings. My (current) JSS server is on 8.73 and it works fine but with the new 9.3 it seems to not be working with the identical settings. I don't know much about AD or LDAP. However, I decided to run a few dscl commands to see if I could see a difference. So, my primary example is with a group named "gEUE." When I do a read of it in dscl it comes up with this as it's base path: dsAttrTypeNative:distinguishedName: CN=gEUE,OU=Groups,OU=World Headquarters,OU=Office Locations,DC=northamerica,DC=cerner,DC=net My search base on both servers is: OU=Office Locations,DC=northamerica,DC=cerner,DC=net but for some reason it doesn't find anything. EDIT: I suppose I should also say that it searches fine for users, just not for groups. Anyone have any thoughts?

First time using the PreStage feature of the JSS (9.32)I'm able to netboot and use Casper Image to push the PreStage Build. I'm having an issue with enrollment and management.After the process completes the computer shows as unmanaged in the JSS. If I "jamf manage" it says there are no valid credentials to enroll. I tried a quick add package that installs after reboot post build and I still had to manually enroll it with the "jamf manage" command. Im guessing a quick add package is needed so the caspercontrol account is added. But it seems im getting something wrong. First time I added the package to the build... didn't work. Next time I used composer thinking it had to be automated. Still didnt work with out manual intervention. Guys, what am I missing here...Thanks,-Ian

After our 8.73 > 9.31 migration, we had a bit of a struggle getting policies to work. Our JAMF buddy found the problem. JSS 9.31 has "Verify Packages" on by default. So packages without checksums will fail given the default "Always" setting. Set to "When available" if you want packages with checksums to be validated, else if no checksum it'll skip verification. Alerted JAMF, they're looking into changing the default to "Never" so checksums are ignored by default. HTH,Don

Hi, I am doing some testing, and am having some trouble with quickadd. I created a new quickadd package, and it DOES enroll when you run the package manually on a client. However, if you add it to the workflow to install on boot drive after imaging it does not enroll. I have done it this way for a few years now with no issues. But I am getting older and maybe forgot a setting. We just do target mode imaging and it has worked fine. Any ideas? It is creating the hidden JSS acount (unless the workflow is, I am not sure). Thanks! Steve

Last year i had a policy that created a hidden user account that was used by a single teacher to monitor her students via ARD. As of right now, the policy & script has been removed from our enivornment and i'm left with a handful of machines out there that have a hidden user called MONITOR. The account is hidden from users and groups, but its home folder is visible. Smart groups based on local user accounts do not seem to work if the account is hidden. Does anyone have a trick to getting machines into a smart group if they have a specific hidden account? Thanks and hope everyone has a great weekend!

I cannot get the Netboot service to actually start, I have gotten rid of any spaces and underscores, only periods are left (10.9.3NetBoot.nbi). Currently the server has an ip of 10.21.1.230, 255.255.0.0, 10.21.1.1. The current subnet entries are as follows:10.26.0.0/16 255.255.0.0 That should be correct, right?

Hi, We are in the process of creating the package and deploying Parallels Desktop 9 Enterprise Edition. I am following the Parallels Desktop Autodeploy packaging method provided by Parallels. License is not getting activated while installing the package. Install Logs says contact parallels team for assistance. If we launch manually and enter the License its getting activated. We are behind proxy but the manual License activation works fine. Is there any other way to package parallels other than auto deploy package? We did not had any issues with Parallels Desktop 8 auto deploy package since it activates offline. Thanks & Regards,Karthikeyan

Has anyone gotten packages created on Mavericks for CS6 that will install correctly on 10.9? I am having the hardest time. After many failed attempts to even create the package, I got one created, but then it fails to install. This is all locally, before even trying to distribute through Casper. Any advice would be welcome!

I've mostly scripted with PowerShell and vbscript and have no experience with shell scripting, so I apologize for the newbness of this question. I'm writing an extension attribute that has a line like this: ver='/usr/sbin/jamfds -v'echo "<result>$ver Installed</result>" When I run that from Terminal i see that $ver has a value of "jamfds 9.32" (which is what I expect). But when I look at a computer in the JSS I only get "/usr/sbin/jamfds -v Installed" in the value field. Any thoughts?