Is it possible to use an App Lock setting in a Configuration Profile for an iOS device to lock it to Safari? What application Bundle ID should we use? We tried "com.apple.Safari" but that did not seem to work.

I'm new to scripting the MAC OS and looking for some help to gather version info from a plist file. My goal is to create an extension attribute that will use a bash script to tell me if clients have MozyEnterprise installed. Mozy doesn't seem to install in the typical app directory but installs itself as a system preference. The location to the plist file is /Library/Preferencepanes/MozyEnterprise.prefPane/Contents/info.plist. Within this plist file there is a key named "Get Info string" which is a string type that has a value of "MozyEnterprise 2.13.0 ©2006-2012 Mozy" the version number I'm trying to extract and setup. Thanks for any help anyone can provide.

Hi everyone, we used to create a logout *.sh script to execute at user logout. This script deletes all user accounts with a number in their profile since our students all have that. Now I'd like to implement the same in Casper and already enabled login/logout hooks. Also I created the script but I can not find where/how to attach the script to execute on a machine. *Deleted unnecessary info*

Hi guys In Mavericks with a cinema display attached there is an options tab in the display preferences there is an option tab. In order to make a change you have to unlock the padlock, but users don't have admin rights. Doesn't anyone know if it is possible to script the option to "Pressing the displays power turn the display on and off"? Thanks Tim

So...here's one I've been wracking my brain with. We are planning to pilot a number of Macs to our organization in the coming months. Windows Machines bound to AD using Network accounts, all have data on them, being migrated to piloting Macbook Airs also AD bound using same network accounts. Need to get the data migrated in a simple way that even the users can follow directions and not screw up...Nothing I can think of is easy enough. Any suggestions?

Hello, For some reason I can't seem to get my head around this and apologies in advance for sounding dumb but what is the difference exactly? At present we have a master File Share Distribution point which we pump all our items (pkgs/scripts/configs) into via Casper Admin. This is currently configured as File Sharing over SMB. I noticed we have a JDS Instance which allows us to replicate (this doesn't replicate for some reason) but not exactly sure why it is there! Why not setup another File Share Distribution point with File Sharing/HTTP enabled? Thanks in advance.

We have a New Mac Pro that will host our JSS and run Netinstall. When we set our current production server up last year we weren't using a DNS name in the JSS URL. I know, what were we thinking? I got all of my Mac devices point ed to the DNS name (https://your.jss.name.com:8443) rather that the server name (https://server1.xxx.xxx:8443. I created a policy for the Computers (/usr/sbin/jamf createConf -server your.jss.xxx.xxx), tested and that piece is good but I'm concerned about the iOS devices. I was told by my support rep that all the iOS devices have to be re-enrolled. Of course, not thrilled about that since I need to get this new Pro in production ASAP. Just wondering if anyone has some tricks up their sleeve on this one?

I've been working on 2 separate Configuration Profiles a User based one and a Computer based one. The first time I login to the freshly imaged machine the User Config. Profile is installed and can be seen in the Profiles Preference Pane. The Computer Config. Profile is not being deployed though. Currently I have to go into the Computer Config. Profile, Save it and "Distribute to All". Is this a bug?

Does anyone miss Casper Netboot Creator and the ability to install Casper Imaging with JSS settings and setup auto login as root, and also miss the handy LaunchPad Application that allowed you to launch Applications? If you follow the normal process you have to manually copy casper imaging and settings file, then setup to auto login as root, set to launch CI at login, and then when you netboot from this image you get the Dock as well, unless you auto hide, but its still accessible, and a full working finder than anyone can launch any applications etc. Ive create an application that simplifies all this and can also add my own Menu Item which as shortcuts to the usual Apps from the LaunchPad. Anyone who wants a copy can have it. All you need to do is create a Netboot image via Apple's System Imaging Utility for any OS X drive with root enabled. Then mount the Netboot image and use my tool to modify it. You can then use this over and over to modify the Netboot image as required,

Has anyone else noticed that the 9.31 JDS Linux installer gets stuck at 'creating JDS directory structure'? # ./JDS-Linux-Installer-9.31.run Verifying archive integrity... All good.Uncompressing JDS Installer..........Starting the JDS InstallationChecking installation requirements...Checking for a supported Linux OS...Red Hat Enterprise Linux Server 6.4 foundChecking for a 64-bit OS...OKPassed all requirements checking!Creating JDS directory structure

What's up JAMF Nation?? Okay tell me I'm making this too complicated, and you all have a really easy fix for me here.. Problem: If I'm using Casper Imaging from an external disk and imaging machine, I can't enroll it into our JSS (because the machine is not connected to our network). What I need: Is there a way to run our QuickAdd silently after the machine is booted to our network (When the JSS is available)? I'll be running this from our temporary 'deployment account' which is an admin. At the end of the deployment process I'll run a recon -endUsername $USER, to be sure it's assigned to the correct user. Though I don't want the tech to have to click 'next' 'next' 'next'. Okay.. now gimme your super easy solution that I'm over looking! ThanksBill

Is there a way to disable students from changing the wallpaper on the iPads? I looked in the configuration profile on casper but I don't see a setting anywhere. Thanks

Hello, Anyone have a good trick on how I could install a JDS on a centos VM instead of RH or Ubuntu? I noticed @winningham.2, you mentioned on github that you were trying to get net/sus and ids working together on centos, maybe you could point me the right way? Thanks Dave

I am looking to create a new policy for software update to try to capture some of our laptop carts. These machines are either inaccessible or in use, so I have a hard time keeping them updated. Does anyone have a nifty way of setting it up so that only install software updates that do not require a restart are installed? It's not ideal, but it's better than never doing any updates on these machines.

I'm trying to create a package to deploy Lync via Self Service. I have created two, but neither one will deploy anything. I am not sure what I am doing wrong. I did one with snapshots and with the other I used the M$ DMG file. When I "install" from self service, it runs but nothing called Lync shows up in Applications. Any thoughts?

I've see a couple of things related to this with, white list and black list for folders. I work at a school and for next year i would like to make it so that if a kid downloads a .dmg they cant mount it and run the .app from the mounted .dmg. Any thoughts Thanks

Post version 9 upgrade, we have almost 70 out of 1200 computers that didn't get the updated 9.24 binary, still running at 8.73. Compounded, it looks like they are't checking in. Any other option other than manually touching these and re-running the quick-add?

Hi! I have recently stumbled upon an issue with netbooting older MBP's to my latest 10.9 NBI. Every time I try to boot I get the prohibitory symbol. I can't figure it out and it is driving me insane. I have tried the following: Making sure the NBI has no spaces in the nameDeleted some Kernel Extensions to make the kernelcache < 35 mbSet the NBI as default I really want to try and have a universal NBI for my helpdesk folks, but if this cant be done, I understand. Just wanted to know if anyone has seen this problem? Also, I used the System Image Utility Tool to build the NBI

Hey all:We are on an 802.1x network and pretty soon our client certificates are expiring and we need to cut over to new ones. I am trying to accomplish the cutover without any interruption to service. GlobalSign is our certificate authority. Our systems have a globalsign Root CA certificate and what I would like to do is set that cert to be explicitly trusted for all users so that when we cut over (now and in the future as these certs expire every year) they don't have to accept client certificates. I have not found a great way to do this: first thing I tried: On one machine, I marked the certificate as explicetly trusted within Keychain access then export the cert into a file. Created a config profile in the JSS and uploaded the cert then scoped the policy to a machine. Still get prompts second thing i tried: Exported the cert like I did above but attempting to import it via the Security command line and telling it to be trusted (but just get an error reading file) Anyone ha

We are supervising the students' iPads using AC. We have installed Trust Profile i.e. CA Payload and MDM profile on these iPads as part of this process. On JSS the Configuration profile is setup for Exchange purpose for these iPads. The problem is when the iPad picks up the Exchange payload it doesn't allow any field to be entered for Exchange settings, all the fields like email, username, password is disabled except password. Are we supposed to set up the exchange settings manually ? that would be quite painful. Please note that I have set up the keywords behind in Exchange payload like $EMAIL, $USER. I do have another configuration profile for teachers which is working fine but their iPads are not supervised using AC.

i have a script that creates a few scripts on the users computers.and one of the scripts seems to pull the variable out of the script. any idea how to fix this? This is what i write: #Creates the script that the Launchd will call to make the popup echo "#!/bin/sh SUSNOTE= softwareupdate -l | grep '*' -c terminal-notifier -message 'There are several updates waiting for you in Self Service Click her to launch Self Service' -title ' $SUSNOTE Pending Updates' -activate com.jamfsoftware.selfservice -appIcon /.pVault/Spark.png " > /var/uits/UpdateWarningPopup.sh but once the file is created on the users computer, the script looks like this: #!/bin/sh SUSNOTE= softwareupdate -l | grep '*' -c terminal-notifier -message 'There are several updates waiting for you in Self Service Click her to launch Self Service' -title ' Pending Updates' -activate com.jamfsoftware.selfservice -appIcon /.pVault/Spark.png I'm assum

Hi There, New to Casper. As more and more apps are released via the app store, it feels less obvious how best to deploy applications like Keynote 6 and iPhoto 9.5 via Casper. Has anyone been able to successfully package these two apps? Should one just run composer while the App Store installs these on a system?

It seems that my config profiles are all messed up after upgrading to 9.31. When I click on what used to be the restrictions for what was available in the system preferences panes, now displays machine restrictions (smart groups, buildings, etc) but no actual preferences listing what's enabled or disabled. Same with my app store updates only profile...

We are imaging 10.8.4 onto new machines via NetInstall and have attempted to use Casper Netboot Automator Action (https://jamfnation.jamfsoftware.com/viewProduct.html?id=140&view=info) with the System Imaging Utility. Our resulting NBI does not have the expected results. First, when the NBI is booted to, the user is prompt to sign in to an Apple ID (so we hit skip), then when the OS loads, Casper Imaging never opens. What's the deal? Is Casper Netboot Automator Action no longer supported? Is there a new version in the works? Do I have to manually install imaging and manually force it to open? How does one disable the Apple ID prompt?

Searched around a bit but no luck finding my solution yet. I want to reduce my footprint in the JSS for the amount of space my packages are taking up as I prepare to add a distribution point with Amazon AWS. Packages folder is nearly 77 GB. I deleted a bunch of un-needed packages from Casper Admin, save and replicate, all looks good in CA. I go to the Packages folder in the CasperShare and the packages are all there and the size is still 77 GB. What gives?