Does anyone know of a good way to do this in an extension attribute or similar? I need to track down laptops that haven't yet been switched over to using AD accounts.

Hello, We have a JSS in our DMZ providing remote access for checkins/ Policies / ect. When users attempt to use Self Service they are getting the error "Could Not Connect to HTTP server to download x.pkg" From the DMZ JSS i am able to ping the JDS. Traffic for 80 & 443 are open between. Are there more ports i need to open between the DMZ and the JDS to ensure it works? Would putting a JDS on the DMZ JSS box be more efficient? All servers are running Ubuntu 12

I'm curious if there is a way that I can use an extension attribute to list the name of the computer object being used for the bind to Active Directory. All I can see in my JSS currently is a bind status of "Not Bound" or the name of the domain it is bound to. Since the name of the computer (hostname for example) does not always match the computer object name, I'd like to have that listed under the Operating System tab. I would imagine this is achievable via an extension attribute script, but I'm not positive which command would be easiest and most reliable to use.

Is anybody having any success managing Launchpad? It looks like it's an sqlite database, so I'm a little outside my comfort zone trying to manipulate it directly. (The ask from management is that we try and prevent certain utilities from showing up here, such as those automatically installed by Centrify).

Came across this by accident this morning and I'm a bit confused. Did I miss a thread somewhere ? (I've looked around and I don't see anything talking about this.) Using a test non admin local account on a 10.9.2 machine I was able to install an app from the Mac app store on that machine. I can pick any legit Apple ID to do so. I thought the user needed to be in the _appstore group for this to happen ? Or at least an admin account. Is this something new in 10.9 that I've missed ? I thought the user would need to have write access to the Applications folder. Went back to a 10.8.5 machine and sure enough it doesn't work. It asks for an admin password. So this behavior seems to be a 10.9 thing. For a one to one deployment I can see this as an ok thing. In some ways it could be a bonus. I was looking for ways to do this using the _appstore group. But for labs this could be a bit of a disaster. That would mean that any student with an Apple ID could install ap

I was curious if it's possible to add multiple lines of commands here? The box only shows a single text field rather than a multi-text field so I wasn't sure if I was to copy a script with multiple lines would run? Thanks.

We are still testing Mountain Lion before allowing installation across our environment and wireless config continues to give us trouble. We have WPA2 Enterprise security, and we use 802.1x network authentication via TLS (certificate based authentication), the certificate payload includes a wireless certificate and then root and corp certs in the trust. The profile is scoped at the system level for clients running 10.8+ The Config profile pushes out to Mountain Lion clients and they are able to connect to the network but they inevitably end up jumping on and off of the network, often when the screen is locked, which renders network users (Active Directory) unable to log back into their profile until they plug in to the network. Anyone else experiencing this? If you are any ideas for a fix? I can barely maintain a wi-fi connection for more than a few minutes. Our Lion clients continue to work just fine with the same network and certificate payloads.

Is there an easy way to create either a smart group or computer search that identifies computers outside of a network IP Range? Adding "IP address not like 10...*" doesn't seem to block out 10.1.1.1 for example. Maybe I'm not identifying the IP range correctly, but if anyone can offer me any better ways to do this that would be much appreciated! Thanks in advance Laura

Running JSS 9.24I wanted to customize the enrollment icon so I downloaded the DefaultEnrollmentLogin.png edited it with our logo on the screen and then saved it as a .png.... The file size grew from 19KBs to 133KBs. There isn't a restriction on file size, it just says "It is recommended that you use a file with the GIF or PNG format" I also made a .gif that is 98KBs. When I press Upload Login Page Icon, it gets to 99% and then hangs and continues to try, but never fully uploads. I also notice that the file size when uploading is different from actual size on the Mac, but didn't know if that was due to how they calculate file size. When I click save it says the icon has been uploaded and I can upload another icon or reset the icon, but the new icon does not appear on the enrollment page. I've tried other .png and .gif images, but it still just seems to hang at 99% It's not mission critical, but would add a nice touch to the enrollment page. From Chro

*That word is supposed to be REVOKE. I'm hoping someone can help me out of a jam. I am the MDM for a school that collects iPads over vacations. Some students, perhaps desperate to keep their iPads, left them home or didn't come to school on the morning of the collection. I wrote to these students, informing them that they were not to turn of their iPads over break and not until they bring the devices to me April 20th. My plan (now maybe backfiring!) was to issue the Remote Wipe, expecting that it would sit in the command queue waiting for the device to connect to wifi for execution--the same way inventory commands sit. The key thing here was being able to CANCEL the command for those students who indeed kept their iPads off during their vacations. HELP? The command is not queued or PENDING. It's just in the history as executed, even on those iPads with other commands in their queue. Now I have a situation.

I'm trying to use M.P. to setup an app. In the plist of the app it's got the <key>info here</key> and then <true/> <key>enableKeychainLockCheck</key> <true/> <key>enableNotifications</key> <true/> How do I enter that into the M.P.?

Hi All; I haven't seen a discussion about this in the forums that wasn't several years old and was wondering what suggestions there were for running casper off of. The current use case is imaging up to 10 machines at once of various makes and models with an ideal imaging time of <1 hour. Currently we have an older DELL Optiplex 745 running Norton Ghost with Windows XP that's able to image unto 3 machines in over an hour and a half each and with. While virtualization is a possibility, I think it may actually be faster and more prudent to just get a physical imaging server. Thanks for any help, :Theo

I am in a trial of Casper right now, and looking for a little guidance, if anyone has some to offer. I want to create a management or service account on each workstation, hide it from the local user, enable it for SSH, and turn SSH on (to allow Capser Remote). Is there a best practice approach for this from within JSS? I have seen a few different articles on this here at JAMFNATION and am not sure yet which way to go. Thanks in advance. Matthew Ellis

Hi, Is anyone doing 10.8 imaging with Casper Imaging and Multicasting? A quick chat with JAMF today revealed that they depreciated their multicast image tool.

Is there anyway to assign a site during imaging? When editing a Configuration there is no option to choose a site under the Management tab. Can you create QuickAdd packages and then just add them to the package part of the configuration to get around this? We have about 5 or 6 sites we will be putting into production. We could of course have users enroll after the fact but the worry is they will not end up not actually doing this. We would rather they are enrolled form the get go.

Hi all, I just made a brand new NetBoot image of 10.7.4 and after the build it's almost 13GBsTrashed most of the apps and utilities, ran monolingual also ... but wow 13GB !!! Used the latest method as described in Casper NetBoot Automator Action 1.1Anyone made a slimmed down low-fat netboot ? My previous 10.6.x netboot images were about 3.9 GBs thanks in advance.

Ok, I've hacked away for hours, but I just can't seem to finish an Applescript that I'm working on for our image. I've managed to create the following:- an Applescript that prompts for UserID, Password, Email and sets up an Outlook account I'd like to do the following within the same script:- take the UserID variable that was created above and edit the printers.conf file by changing the DeviceURI... from (current file text in printers.conf in cups.DMG that is deployed):lpd://EMPLOYEE@10.100.153.197 to:lpd://{UserID}@10.100.153.197 Sorry if that's complicated. Hard to be concise. I've search the posts on JAMF, but not breaking through.

I am running JSSv8.72. Focus v9.30. I can get kids enrolled so that they show up in the classes (devices are shown in Focus app). On the sidebar though, it doesn't say Websites and eBooks. Is there a piece I'm missing? Do I have to do something within a profile in order for it to work?

I am unable to delete a file from our Casper Admin that was demoed for us during the Jump Start. Under Type, it says "Built-In AD". The delete icon is grayed out, and there is no menu bar option for delete either. Is this normal?

Hello, Having an issue with the new version of Casper Imaging 8.64 and installing CS6 at restart. The package built with AAMEE is not installing. If I use Casper Imaging 8.63 it will install without issue. There has been no change to the package just the software used to image. Has anyone else run into this issue? Thanks

as topic states, we have been using Tlarkin's script to prompt the user to set their asset tag, but that is no longer working with our casper suite 9.22 and Mavericks. This is the script as we are currently using it: #!/bin/bash # use apple script and bash to get input from user to update asset tags in the JSS# by Tom Larkin# modified by Barnes, Walter 1/21/14# proof of concept, no warranty given, use at own risk # get user input from Apple Script and try to redirect output back into bash and user recon to update the JSS VARIABLE=$(sudo /usr/bin/osascript <<-AppleScript tell application "System Events" activate display dialog "Enter your asset number" default answer "Enter your Macbook's fixed asset tag number here" set theAnswer to (text returned of result) set cmd to "sudo /usr/sbin/jamf recon -assetTag " & theAnswer do shell script cmdend tell AppleScript) $VARIABLE exit 0 The JSS reports this

So I just wiped my SoftwareUpdate Server and redid it and now I can't seem to get 10.7 machines to connect to it properly. We use a profile to push the settings to all machines and it sets them all to http://myservername.interal:8088/index.sucatalog It looks like my 10.8 and 10.9 clients are seeing it based on this setting, but not my 10.7 or at least they are not showing errors like my 10.7 clients are. I followed the steps to get it to download the 10.9 updates as well and that seemed to work, but my 10.7 clients get software update server is not responding message. Any Ideas? Gabe ShackneyPrinceton Public Schools

What's the proper term? I kind'a like QuixieBootie..but....

CocoaDialog gurus.. can you please help? I wish to have a window with an indeterminate progress bar that's text fields are updated with the output of the jamf binary (in this case the output of jamf installAllCached & sudo jamf recon).. I'm just struggling a little & am sure someone else has done this.. please advise. (oh i'm using v3-beta7 btw)

I am using bits and pieces of tkimpton's script https://jamfnation.jamfsoftware.com/discussion.html?id=5327 and I am wanting to do an ip address comparison. How can I take the existing computer ip address and compare it to our ip range. as an example I have a computer that is at ip address 123.456.789.123 and I want to make sure that it falls in the range 123.456.xxx.xxx? All I want to compare are the first two sets of numbers and disregard the rest. Thanks in advance for any insight to this!