We have a Self Service policy that uninstalls a troublesome app, installs the latest version, then executes a command. On a small but irritating number of our machine, we seem to have this issue where the wrong DP is used: https://jamfnation.jamfsoftware.com/discussion.html?id=10408 (usually our DMZ DP which isn't accessible inside our network). This causes the app install to fail, but the policy goes on to execute the command. I would prefer the policy stop on the first failure. Is there a way to configure that? I could cache the app, and only have the policy available to machines that have the app cached but we really needed a quicker solution for this. Also, when the policy fails Self Service doesn't seem to give any notification of the failure. If you click on "Show Downloads" in Self Service it will show the failure, but our clients didn't know to look for that. Is there a way to make a failure obvious? Thanks.

I've run into a strange issue and I'd like to know if this is a bug or intentional. I've deployed a configuration profile that prohibits access to certain prefpanes such as Profile, Sharing, and App Store. When the restricted prefpanes are hidden, they become re-enabled. I've verified this is so on multiple 10.9.2 machines. I haven't yet tested to see if this behavior is present in 10.8, but I'm curious to hear whether or not this is by design or a bug.

After upgrade to Casper 9.2 Getting report in Jamf Log that "The computer was not Enrolled in MDM with the JSS. The Device Certificate did not install" The computers enroll and update inventory in JSS and install policies. Profile does not show in System Preferences. No Certificate or Private Key listed in Keychain. Looking at computers in JSS they show enrolled and contacting and Managed but MDM capability says No. Other computers that were already enrolled show contacting fine and receiving policies and MDM capability Yes and the Profile can be seen in System Preferences. I get the error whether I run QuikAdd.pkg, Recon, or command jamf enroll in Terminal.

Hey all,Here is something I am wondering if it exists. I have checked googled and got nothing. One process when we issue a Macbook Air to staff members is they sign an agreement form(physical paper). I am wondering if there is a 3rd party app where at first time logging in, the Agreement form is prompted, forcing them to check mark the box'es and type in their name and collect this data to a central location.

I just finished upgrading my JSS machine to 10.8 server, and upgraded JSS and Casper Suite apps to 8.71. Everything appears to be working as it did before, but when I tried packaging an upgrade to OSX 10.8 to deploy via self service, the policy fails with the following errors: /usr/sbin/jamf is version 8.71Executing Policy Install OSX Mountain Lion (10.8)...[STEP 1 of 6]Downloading http://172.16.0.105:80/CasperShare/Packages//Install OS X Mountain Lion.dmg...Verifying DMG...Error: The package does not appear to be on the server (404).[STEP 2 of 6]Creating directory structure for /Library/Application Support/JAMF/Downloads/Downloading http://172.16.0.105:80/CasperShare/Scripts/install_osx108.sh...Error running script: The script could not be found on the server.. I thought that perhaps a permissions issue had arisen after the 10.8 upgrade, but attempting to install other packages that existed prior to the upgrade is working fine, and the permissions on the share and on the files in

When I try to image my 10.9 osx hard disk to Casper 9 it doesn't let me choose the drive only an external drive on USB does this mean that the drive I want to image is not supported for imaging ? Also why would it allow me to choose a USB drive with no OS image on it at all ? Im still learning so please go easy on me :)

Hi all. I'm having an issue with Adobe CS6 that I haven't seen specifically mentioned in any of the numerous posts about CS6 distribution. After reading all of those threads, I was able to come up with a workflow that is successful in getting CS6 on the target machine and automatically serialized. However, every time a CS6 app is launched, an Adobe prompt comes up for Adobe product registration by way of an Adobe login. The product is serialized, but for some reason still wants registration. When I manually install on a machine (not using Casper) using the same AMEE package I uploaded into Casper Admin, the Adobe apps do not ask for Registration when launched. So somehow the Casper process is breaking that "already registered" flag that is a major benefit of using AMEE. The way I've been able to successfully distribute CS6 is this… Create package in AMEE 3.1, using the "ignore conflicts" option, and not installing any AIR-related pieces. Uplo

I am trouble shooting the fact that my desktop pic is not showing up.Is there something says that the desktop pic is supposed to end with a certain .extn?I have a policy that is copying the file over to the proper location. And it appears that the managed preference is being triggered as there is a file created in the /library/managedpreferences/ area but something is still not happy.Thoughts?

Has anyone else seen this?In my environment, I'm running JSS v9.3 on Ubuntu 12.04 LTS. I noticed after successfully imaging a computer when I go into the JSS and check the imaging log, it says "No Casper Imaging Logs". All policy logs and management logs appear fine. I checked the freshly imaged machines /var/log/jamf.log and found a few entries that concerned me... ... Mon Apr 21 12:31:46 NetBoot002 jamf[8359]: Creating .AppleSetupDone... Mon Apr 21 12:32:41 CETECH00A9659L jamf[200]: There was an error. **Connection failure: "The host jss.domain.com is not accessible."** Mon Apr 21 12:32:43 CETECH00A9659L jamf[467]: There was an error. **Connection failure: "The host jss.domain.com is not accessible."** Mon Apr 21 12:32:43 CETECH00A9659L jamf[554]: Could not connect to the JSS. Looking for cached policies... Mon Apr 21 12:32:51 CETEHC00A9659L jamf[1269]: Setting home page to 'http://www.[home page here].org' for Existing Us

I'd like to create a smart group/smart search with criteria to find non-SSD systems. I could add computer model of "Air" or "Retina" but this would miss Mac Mini and iMac systems. I see in Computer > Storage > Model "Apple SSD XXX" listed, but I can't figure out how to search on this criteria. Storage model, drive model, disk type, etc. don't show in the All Criteria area. Anyone got an idea?

Does anyone else use the QuickAdd package to enrol the machine using DeployStudio without any problems? I created a simple workflow, name the machine, skip registration and install the QuickAdd package created from Recon. For some reason I can't seem to get this to work; 'installer: The install failed (The following installation step failed: run postflight script for QuickAdd. Contact the software manufacturer for assistance.)' Thanks

So I'm trying to get a setting changed in chrome via JSS, but I'm running into some issues. First off, I had an issue importing manifest into the console, but was able to get that taken care of. Now, I'm having the issue that the setting is not being applied. Here is the actual code that should be changed in the manifest, but it's not being changed. <dict> <key>pfm_description</key> <string></string> <key>pfm_name</key> <string>EnableOnlineRevocationChecks</string> <key>pfm_targets</key> <array> <string></string> </array> <key>pfm_title</key> <string></string> <key>pfm_type</key> <string>boolean</string> </dict> I wouldn't have an issue changing the lines in the manifes

Is anybody doing this? If not, how are you getting around it (that is, backing up your database on a schedule)? I'm hitting a wall trying to access the db utility on a headless Linux server. I think it boils down to trying to X11 & sudo-ing the java command.

First attempt here installing NetSUS on Red Hat and am stuck just getting into the web interface for initial configuration. (honestly, I've only seen RHEL twice- yesterday and today!) Following the user guide, installation went fine. On the server, https://hostname.local/webadmin gives me a 'server not found' error. Same goes from another computer using either the hostname or IP. At the server, 127.0.0.1 does bring up the Apache test page. I'm sure this is a novice error- but that's where I'm at. Suggestions of where to start ?

Hi Everyone, We are getting ready to roll out casper here to our new users, but aren't going to re-image existing machines. I'm scoping policies in such a way that software will get installed if it needs to and have pretty much got the hang of that. I'm also going to be using docutil to make a standardized user dock. However, I'd only like that to be pushed out to new users on a machine, leaving existing user docks (that they probably have already customized) untouched. I can think of a hackish way of doing this by pushing out a hidden marker file that goes out to all current user folders right now and then having my dock script die if it finds that file. Is there a better way to do that? It would be really awesome if there was a policy trigger for first user login that I am just missing...

Good morning all,Has anyone able to script AudioDevice? I have a simple script to change the input and output source using "Audiodevice". #!/bin/sh # Outputspeaker.sh # /usr/local/bin/audiodevice output "WavTap" In Terminal, it works without a problem, but when scripting, it just ignores it. I've tested on 10.7 and 10.9 Thanks in advance!

I'm trying to make it so my 10.6.8 SUS will host Lion updates. I've followed these (http://support.apple.com/kb/HT4771) instructions but every time I start SUS back up the swupd.conf loses the changes I made. When I start SUS back up it seems to save my edited swupd.conf as swupd.conf.previous and a new swupd.conf is created. Do I have permission problems? My software update repository is not on the primary hard drive. Any ideas?

Hello all, We have multiple users with multiple mobile devices. However, we have one user with 2 (iphone/iPad) mobile devices which will only allow us to assign a single mobile device to a department. If we assign their iPhone to a department, it will remove the department from their iPad and vice versa. Like I said before, we have many users with multiple devices and they don't seem to get this issue. I've tried re-enrolling both the devices to jamf but it doesn't help. I'm a bit suck on what may be causing this. Any help will be greatly appreciated.

I'm running 8.73 and didn't notice any export button but is there a way to export a config profile from one created on the JSS? I'd rather not recreate it in apple configurator if at all possible :)

Already asked Rich T about this on twitter, but I thought I'd post here as well . . .I'm working on enabling filevault using the fdesetup command and a plist with a certificate embedded to create an institutional recovery key.Normally when using an institutional recovery key, you start by creating a keychain in keychain access. During that process, you set the password on the FV2 master keychain, which then is supplied at the command line when the recovery key is used to decrypt the disk.When using a plist with fdesetup, fdesetup creates the keychain from the embedded certificate in the plist. Since I didn't create the keychain, I don't know what password to use to unlock it. Anyone know what password is assigned to the FV2 master keychain when it's created by fdesetup?

I'm working on an extension attribute that gets a computer's OU. I found existing code, modified it, and it works great! However, when a user goes off campus, the EA script can't make the ldap query because our domain isn't accessible over the internet. This causes the EA to become blank. It updates to the proper value when the user comes back on campus. How can I tell an EA to leave the value it has alone? I tried to put something like this at the top of my script (changed my IP's for obvious reasons, but the rest of it is verbatim): ETH0IP=`ipconfig getifaddr en0` ETH1IP=`ipconfig getifaddr en1` if [[ $ETH0IP != "192.168"* ]] && [[ $ETH1IP != "192.168"* ]]; then exit 0 fi I thought that if I didn't have a <result> tag it might just kill the script. Unfortunately, I see the same behavior. Anyone else know how to solve this?

Within Casper Imaging 9.3, I have an uncompiled configuration that contains a few installs that are direct from their maker (example: Java 8 JDK or Xquartz 2.7.5). These are in .pkg format and I merely dropped them strait into Casper Admin and then added them into my configuration to deploy to 10.9.x boxes. My problem is, the two examples listed above do not seem to install during Casper Imaging but they will install just fine if done from Capser Remote. My questions are, why on earth does one pkg deploy correct using one product and not the other? Is there a secret to these pkgs to get them to install correctly from Casper Imaging? Must I really do everything in imaging as a DMG?

We have 70 new Late 2013 standard iMacs, and I have started imaging them to rollout shortly. In my testing in the last few days I have noticed that they have different energy saver settings than previous Macs (we have always set our lab Macs to sleep the display after 15 minutes and then the computer after three hours (or in some cases never)). The old system of sleeping the display and computer at separate times is now gone. Upon looking things up I found that the new Haswell iMacs have different power management (https://discussions.apple.com/thread/5460434). Does anyone know of a simple way that JSS could be used to maybe run a "pmset" to force the computer and display to sleep at different times? The pmset KB from Apple (https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man1/pmset.1.html) talks about having different timers for each, but I am not sure how to set them, or what the best practice others have found is.

We're having issues with a Canon printer driver and it seems a newer version seems to be fixing these issues.I'd like to create an Extension Attribute to show the same Driver Version shown under Options & Supplies > General tab for the printer in Printer & Scanners in System Preferences.Then I can setup a Policy to track the printer driver versions.Thanks for any assistance.

Is anyone using hash tags for package/file verification before they install the packages on client machines? We are looking for a way to ensure that none of our packages get corrupted either accidentally (through network issues) or intentionally (malicious intent). Short of writing a custom script for each installer to do a checksum, is anyone doing anything of the sorts for their JSS? Thanks. Chris