We have a New Mac Pro that will host our JSS and run Netinstall. When we set our current production server up last year we weren't using a DNS name in the JSS URL. I know, what were we thinking? I got all of my Mac devices point ed to the DNS name (https://your.jss.name.com:8443) rather that the server name (https://server1.xxx.xxx:8443. I created a policy for the Computers (/usr/sbin/jamf createConf -server your.jss.xxx.xxx), tested and that piece is good but I'm concerned about the iOS devices. I was told by my support rep that all the iOS devices have to be re-enrolled. Of course, not thrilled about that since I need to get this new Pro in production ASAP. Just wondering if anyone has some tricks up their sleeve on this one?

I've been working on 2 separate Configuration Profiles a User based one and a Computer based one. The first time I login to the freshly imaged machine the User Config. Profile is installed and can be seen in the Profiles Preference Pane. The Computer Config. Profile is not being deployed though. Currently I have to go into the Computer Config. Profile, Save it and "Distribute to All". Is this a bug?

Does anyone miss Casper Netboot Creator and the ability to install Casper Imaging with JSS settings and setup auto login as root, and also miss the handy LaunchPad Application that allowed you to launch Applications? If you follow the normal process you have to manually copy casper imaging and settings file, then setup to auto login as root, set to launch CI at login, and then when you netboot from this image you get the Dock as well, unless you auto hide, but its still accessible, and a full working finder than anyone can launch any applications etc. Ive create an application that simplifies all this and can also add my own Menu Item which as shortcuts to the usual Apps from the LaunchPad. Anyone who wants a copy can have it. All you need to do is create a Netboot image via Apple's System Imaging Utility for any OS X drive with root enabled. Then mount the Netboot image and use my tool to modify it. You can then use this over and over to modify the Netboot image as required,

Has anyone else noticed that the 9.31 JDS Linux installer gets stuck at 'creating JDS directory structure'? # ./JDS-Linux-Installer-9.31.run Verifying archive integrity... All good.Uncompressing JDS Installer..........Starting the JDS InstallationChecking installation requirements...Checking for a supported Linux OS...Red Hat Enterprise Linux Server 6.4 foundChecking for a 64-bit OS...OKPassed all requirements checking!Creating JDS directory structure

What's up JAMF Nation?? Okay tell me I'm making this too complicated, and you all have a really easy fix for me here.. Problem: If I'm using Casper Imaging from an external disk and imaging machine, I can't enroll it into our JSS (because the machine is not connected to our network). What I need: Is there a way to run our QuickAdd silently after the machine is booted to our network (When the JSS is available)? I'll be running this from our temporary 'deployment account' which is an admin. At the end of the deployment process I'll run a recon -endUsername $USER, to be sure it's assigned to the correct user. Though I don't want the tech to have to click 'next' 'next' 'next'. Okay.. now gimme your super easy solution that I'm over looking! ThanksBill

Is there a way to disable students from changing the wallpaper on the iPads? I looked in the configuration profile on casper but I don't see a setting anywhere. Thanks

Hello, Anyone have a good trick on how I could install a JDS on a centos VM instead of RH or Ubuntu? I noticed @winningham.2, you mentioned on github that you were trying to get net/sus and ids working together on centos, maybe you could point me the right way? Thanks Dave

I am looking to create a new policy for software update to try to capture some of our laptop carts. These machines are either inaccessible or in use, so I have a hard time keeping them updated. Does anyone have a nifty way of setting it up so that only install software updates that do not require a restart are installed? It's not ideal, but it's better than never doing any updates on these machines.

I'm trying to create a package to deploy Lync via Self Service. I have created two, but neither one will deploy anything. I am not sure what I am doing wrong. I did one with snapshots and with the other I used the M$ DMG file. When I "install" from self service, it runs but nothing called Lync shows up in Applications. Any thoughts?

I've see a couple of things related to this with, white list and black list for folders. I work at a school and for next year i would like to make it so that if a kid downloads a .dmg they cant mount it and run the .app from the mounted .dmg. Any thoughts Thanks

Post version 9 upgrade, we have almost 70 out of 1200 computers that didn't get the updated 9.24 binary, still running at 8.73. Compounded, it looks like they are't checking in. Any other option other than manually touching these and re-running the quick-add?

Hi! I have recently stumbled upon an issue with netbooting older MBP's to my latest 10.9 NBI. Every time I try to boot I get the prohibitory symbol. I can't figure it out and it is driving me insane. I have tried the following: Making sure the NBI has no spaces in the nameDeleted some Kernel Extensions to make the kernelcache < 35 mbSet the NBI as default I really want to try and have a universal NBI for my helpdesk folks, but if this cant be done, I understand. Just wanted to know if anyone has seen this problem? Also, I used the System Image Utility Tool to build the NBI

Hey all:We are on an 802.1x network and pretty soon our client certificates are expiring and we need to cut over to new ones. I am trying to accomplish the cutover without any interruption to service. GlobalSign is our certificate authority. Our systems have a globalsign Root CA certificate and what I would like to do is set that cert to be explicitly trusted for all users so that when we cut over (now and in the future as these certs expire every year) they don't have to accept client certificates. I have not found a great way to do this: first thing I tried: On one machine, I marked the certificate as explicetly trusted within Keychain access then export the cert into a file. Created a config profile in the JSS and uploaded the cert then scoped the policy to a machine. Still get prompts second thing i tried: Exported the cert like I did above but attempting to import it via the Security command line and telling it to be trusted (but just get an error reading file) Anyone ha

We are supervising the students' iPads using AC. We have installed Trust Profile i.e. CA Payload and MDM profile on these iPads as part of this process. On JSS the Configuration profile is setup for Exchange purpose for these iPads. The problem is when the iPad picks up the Exchange payload it doesn't allow any field to be entered for Exchange settings, all the fields like email, username, password is disabled except password. Are we supposed to set up the exchange settings manually ? that would be quite painful. Please note that I have set up the keywords behind in Exchange payload like $EMAIL, $USER. I do have another configuration profile for teachers which is working fine but their iPads are not supervised using AC.

i have a script that creates a few scripts on the users computers.and one of the scripts seems to pull the variable out of the script. any idea how to fix this? This is what i write: #Creates the script that the Launchd will call to make the popup echo "#!/bin/sh SUSNOTE= softwareupdate -l | grep '*' -c terminal-notifier -message 'There are several updates waiting for you in Self Service Click her to launch Self Service' -title ' $SUSNOTE Pending Updates' -activate com.jamfsoftware.selfservice -appIcon /.pVault/Spark.png " > /var/uits/UpdateWarningPopup.sh but once the file is created on the users computer, the script looks like this: #!/bin/sh SUSNOTE= softwareupdate -l | grep '*' -c terminal-notifier -message 'There are several updates waiting for you in Self Service Click her to launch Self Service' -title ' Pending Updates' -activate com.jamfsoftware.selfservice -appIcon /.pVault/Spark.png I'm assum

Hi There, New to Casper. As more and more apps are released via the app store, it feels less obvious how best to deploy applications like Keynote 6 and iPhoto 9.5 via Casper. Has anyone been able to successfully package these two apps? Should one just run composer while the App Store installs these on a system?

It seems that my config profiles are all messed up after upgrading to 9.31. When I click on what used to be the restrictions for what was available in the system preferences panes, now displays machine restrictions (smart groups, buildings, etc) but no actual preferences listing what's enabled or disabled. Same with my app store updates only profile...

We are imaging 10.8.4 onto new machines via NetInstall and have attempted to use Casper Netboot Automator Action (https://jamfnation.jamfsoftware.com/viewProduct.html?id=140&view=info) with the System Imaging Utility. Our resulting NBI does not have the expected results. First, when the NBI is booted to, the user is prompt to sign in to an Apple ID (so we hit skip), then when the OS loads, Casper Imaging never opens. What's the deal? Is Casper Netboot Automator Action no longer supported? Is there a new version in the works? Do I have to manually install imaging and manually force it to open? How does one disable the Apple ID prompt?

Searched around a bit but no luck finding my solution yet. I want to reduce my footprint in the JSS for the amount of space my packages are taking up as I prepare to add a distribution point with Amazon AWS. Packages folder is nearly 77 GB. I deleted a bunch of un-needed packages from Casper Admin, save and replicate, all looks good in CA. I go to the Packages folder in the CasperShare and the packages are all there and the size is still 77 GB. What gives?

We have a Self Service policy that uninstalls a troublesome app, installs the latest version, then executes a command. On a small but irritating number of our machine, we seem to have this issue where the wrong DP is used: https://jamfnation.jamfsoftware.com/discussion.html?id=10408 (usually our DMZ DP which isn't accessible inside our network). This causes the app install to fail, but the policy goes on to execute the command. I would prefer the policy stop on the first failure. Is there a way to configure that? I could cache the app, and only have the policy available to machines that have the app cached but we really needed a quicker solution for this. Also, when the policy fails Self Service doesn't seem to give any notification of the failure. If you click on "Show Downloads" in Self Service it will show the failure, but our clients didn't know to look for that. Is there a way to make a failure obvious? Thanks.

I've run into a strange issue and I'd like to know if this is a bug or intentional. I've deployed a configuration profile that prohibits access to certain prefpanes such as Profile, Sharing, and App Store. When the restricted prefpanes are hidden, they become re-enabled. I've verified this is so on multiple 10.9.2 machines. I haven't yet tested to see if this behavior is present in 10.8, but I'm curious to hear whether or not this is by design or a bug.

After upgrade to Casper 9.2 Getting report in Jamf Log that "The computer was not Enrolled in MDM with the JSS. The Device Certificate did not install" The computers enroll and update inventory in JSS and install policies. Profile does not show in System Preferences. No Certificate or Private Key listed in Keychain. Looking at computers in JSS they show enrolled and contacting and Managed but MDM capability says No. Other computers that were already enrolled show contacting fine and receiving policies and MDM capability Yes and the Profile can be seen in System Preferences. I get the error whether I run QuikAdd.pkg, Recon, or command jamf enroll in Terminal.

Hey all,Here is something I am wondering if it exists. I have checked googled and got nothing. One process when we issue a Macbook Air to staff members is they sign an agreement form(physical paper). I am wondering if there is a 3rd party app where at first time logging in, the Agreement form is prompted, forcing them to check mark the box'es and type in their name and collect this data to a central location.

I just finished upgrading my JSS machine to 10.8 server, and upgraded JSS and Casper Suite apps to 8.71. Everything appears to be working as it did before, but when I tried packaging an upgrade to OSX 10.8 to deploy via self service, the policy fails with the following errors: /usr/sbin/jamf is version 8.71Executing Policy Install OSX Mountain Lion (10.8)...[STEP 1 of 6]Downloading http://172.16.0.105:80/CasperShare/Packages//Install OS X Mountain Lion.dmg...Verifying DMG...Error: The package does not appear to be on the server (404).[STEP 2 of 6]Creating directory structure for /Library/Application Support/JAMF/Downloads/Downloading http://172.16.0.105:80/CasperShare/Scripts/install_osx108.sh...Error running script: The script could not be found on the server.. I thought that perhaps a permissions issue had arisen after the 10.8 upgrade, but attempting to install other packages that existed prior to the upgrade is working fine, and the permissions on the share and on the files in

When I try to image my 10.9 osx hard disk to Casper 9 it doesn't let me choose the drive only an external drive on USB does this mean that the drive I want to image is not supported for imaging ? Also why would it allow me to choose a USB drive with no OS image on it at all ? Im still learning so please go easy on me :)