I am looking for syntax help on how to PUT the <username> within ../JSSResource/computers/id/$ID/subset/location using curl. Any ideas? I should also state that I must use BASH to accomplish this task.

So I have noticed this lately with student laptops when I go to check on the details of their laptops. When I select a student and click on details I will scroll down the left side and when I see the Local User Accounts it says there are 76 accounts when all it should be the student and my admin account. This doesn't seem to harm the laptops or the student profile but I am just wondering what is going on because I didn't have any of this in the start of the year.

I came across a problem we have with Mavericks in reguards to the unlock of system preferences.As our users are non admin users on there machines they can acess some system resources like Network settings without them. After testing Mavericks we came across that this is not working any longer in the know way via the authorization file.According to AFTP548.com it's using a DB now for this purpose. But even with this solution provided here: http://www.afp548.com/2013/10/22/modifying-the-os-x-mavericks-authorization-database/ it's not working. The error we get is: NO [-60005] The clients has been upgraded from 10.8 to 10.9.Any ideas about this? Thanks for your help

So...I'm very aware of the carrot/stick methodology of managing iPads. Eg. Users who follow the rules and enroll "get the carrot" of full wifi access, use of camera, apps and such and users who fail to follow the rules "get the stick"...or a punishment of some sort like restricted camera access, placed in a penalty box Wifi, etc. I have given the various "punishments" over to the administration to decide what they are for a given issue. What I have been charged with doing is implementing them. The implementation I am seeing is a "punishment" mobileconfig file that is scoped to a static group. For example, if Johnny is messing around with the camera during class and it is decided that Johnny needs his camera disabled, the principal wants to be the one to put Johnny in the "disabled camera" static group. Here's the summed up problem simply...what are the absolute minimum rights I would have to grant to an administrative staf

Since we are able to kill a process that is restricted, can we, by extension, make a smart group from people who are running/not running a process? I want to pop up a dialog that tells the end user not to quit TeamViewer.

I've been having an issue with InDesign in a lab where the students use a network home directory(AFP). Occasionally, InDesign crashes when a student tries to open it. It seems to think that the preference files are in use somewhere even tho they are not. The solution to this is to navigate to ~/Library/Preferences/Adobe InDesign/Version 9.0/en_US/ and trash the file 'InDesign Defaults'. And this works but I want to create a Self Service policy that will delete this file for the user. But trying to rm /Network/server/user/path/to/InDesign Defaults as root gives a 'rm: InDesign Defaults: Resource busy' error. Any idea how i might be able to do this using a script? Maybe an Applescript run as the user?

Any one ever tried to execute more than one unix command in a single policy? We have a self service policy to update inventory. I'd like it to run both a JAMF Manage & JAMF Policy at the same time. Right now, I think I can only run 1 of those commands. Am I wrong? I know I could do this via script, however, that would require touching every policy that I need to force that against. Sorry if I'm re-asking something from the past, but I couldn't find a quick answer.

I'm looking for a way to display a message after the send button is pressed in Outlook 2011 when a message is sent to a specific recipient. Something like, "Are you sure you want to send this message?", in order to prevent messages from being sent to specific recipients. We have already limited who can send to these email addresses in our Exchange environment but would like to protect the people that have the ability to send to these sensitive addresses. Has anyone tried to do this? Any help would be very much appreciated.

Has anybody been using Filevault 2 on a system with multiple partitions and one of those being mounted at /Users?if so are you actually encrypting /Users and getting it to automount?I thought at one point FV2 was going to be Whole Disk Encryption, but it is not, it only encrypts your root/boot volume and leaves your data unencrypted on the other partition. So far in limited testing, when i encrypt the /Users partition it no longer mounts with the fstab entry, which is likely due to not having the passphrase to decrypt the disk.anyhow if anybody has figured this out I would love to hear it.

I've been trying to solve this myself for hours and I've been receiving the same error no matter what I try. I'm trying to write a launchagent plist with keepalive to ensure that in my stripped down NetBoot environment. If someone accidentally closes Casper Imaging it will re-open it. Simple, right? I used LaunchControl to run a simple "open" command on the application and on my personal laptop it worked wonderfully. I'd close the app, it'd re-open. Perfect. It's just not the same level of simplicity when trying to implement this on the root user account. Something isn't translating and I don't know what it is. Setting up LaunchControl the same way I did in my test, but this time logged in as root, only produces this error: LSOpenURLsWithRole() failed with error -10810 for the file /Applications/Casper Imaging.app. I even tried changing my NetBoot image to use a local admin account instead of root and configuring LaunchControl to r

I am hoping that my brain has just run away from me on this, but I am trying to get some brand new AppleTVs up and running, enrolled in the JSS with 802.1x auth and I am just having the damnedest time (mostly with Apple Configurator). Has any one else gotten this to work? Here's my basic process. 1) Get AppleTV turned on and updated (6.0)2) Plug AppleTV into ethernet (as 802.1x cannot be setup without a proper date and time, which the AppleTV can only get from the web3) Connect to computer with Apple Configurator via USB(My most successful settings are as follows)"Under Settings"- Set name to "Building. Rm. ### AppleTV"- Supervise "off"- Update iOS "Never update device"- erase before installing "grey" and unchecked- Restore "Dont' restore backup" "Under Setup" (once again, most successful configuration so far)-Skip Language (checked)-Skip Diagnostics (checked)-1 WiFi Payload as described below-3 Certifica

I have been asked to script populating /computers/name/MyComputer/subset/location/username/ +with the last person who logged in as a run-once API script. I was thinking I would grab from the JSS the +History >Computer Usage Logs> Username at last login field and use that to put to username but I cannot seem to find that info in the API. I also thought about capturing echo $3 at login (excluding some admin-side accounts) for a run-once to populate that field or grabbing the results of "last" and then putting it up to the JSS. I don't know... Anyway, does any body have any idea on where History >Computer Usage Logs> Username at last login info is hanging out or an opinion on how I might go about scripting this?

I'm following the article for adding custom system preference panes to be able to run with the config profiles as outlines in this article - https://jamfnation.jamfsoftware.com/article.html?id=204. The only one I can't seem to get working is WinShortCutter's to work. I got Java's and the Wacom's working, just not this one... has anybody gotten it to work?this is the info in OSXRestrictions.xml, incl the Java/Wacom one I added before. <dict> <key>displayName</key> <string>JavaControlPanel</string> <key>preferenceID</key> <string>com.oracle.java.JavaControlPanel</string> </dict> <dict> <key>displayName</key> <string>WacomTablet</string> <key>preferenceID</key> <string>com.wacom.settingsPrefPane</string> </dict> <dict> <

I have a web application that uses Java 7 and wanted to get it 'pre-approved' - which used to be easy with Apple's Java 6 as the certificates were originally distributed with MCX back in the day (which would now be done into the system keystore via Casper certificate distribution). But I don't think there's a way to do this for Java 7 is there? I was feeling very pleased when I found the 'system' certificate store at /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/security/trusted.certs and have got myself as far as importing a cert with keytool keytool -importcert -noprompt -file mynewcert -keystore trusted.certs But that requires an inline interactive password setting. Is there a better way of going around doing this. It's a lot of work when I could just e-mail everyone saying "when it comes up the first time tick the OK, and don't ask again" and that will put it in their user home (~/Application Support

Hi guys Im trying to work out a script and wondered if anyone may be able to help? I am running a script at logout that will detect if the AC power is still plugged in and remind people to unplug it before they leave the office to avoid damage to battery cells. The problem i have is trying to work out to get an if argument that will detect if the battery power is more than 80%. This is what i have so far #!/bin/bash ##### ENVIRONMENT VARIABLES ##### # Specify a laptop using system profiler Laptop=`system_profiler SPHardwareDataType | grep -E "MacBook"` # Get the battery percentage Bat=`ioreg -n AppleSmartBattery -r | awk '$1~/Capacity/{c[$1]=$3} END{OFMT="%.2f%%"; max=c[""MaxCapacity""]; print (max>0? 100*c[""CurrentCapacity""]/max: "?")}'` # Specifying the message MSG="Your power cable is still plugged in. Remove it please otherwise you are at risk of damaging the cells in the battery l

I'm fairly new in learning scripting but google has been a good friend at times. Anyway I have a script that works in ARD to force an image in the /Library/Desktop Images folder as the background for multiple monitors but I can't get it to work from a policy and not certain what I'm doing wrong. This works in ARD but not from a policy or Casper Remote:osascript -e 'tell application "System Events" to set picture of every desktop to "/Library/Desktop Pictures/QICDesktop.jpg"' I've tried adding the #!/bin/sh but still get an error in logs of : Script result: 57:64: syntax error: Expected class name but found application constant or consideration. (-2741) Any help is appreciated. I'm more of a hardware guy and this may seem fairly easy to some so forgive the rookie scripting question.

I enrolled the iPad, everything finished ok, got message completed successfully, but this time selfservice icon didn't come up. Also checked the JSS server ipad is on the list, only error is "install profile is pending". Any suggestions are appreciated.

We just upgraded to version 9.3 but I cannot find where we enter the websites for Casper Focus to choose from when focusing iPads. We've VERY excited about this feature!

Is this a stupid question? Is there a way to install configuration profiles via a policy. I want to map some drives via configuration policy, but I want them to happen at a certain time and date. Is there a way to deploy them via a policy? If anyone knows how to do this, please let me know. If not, would anyone else see a value in it, should it be a feature request. Thanks!

Hey All, Is there anyone running JSS in VMware without issues? We have JSS installed on a Windows Server, under VMware, and the setup used to work. Now unfortunately, all newly enrolled computers (since the last couple of months) are not MDM enrolled and I am not able to push any configuration profiles to them. Initially we were told to upgrade our JSS environment to v9 to have it fixed but this did not work. Note that all computers enrolled before the last couple of months continue to work, its just the new ones refuse to. - in MySQL running following command will return the apn_token field empty for all new computers."select computer_name, computer_id, apn_token from computers; " We tried to troubleshoot this problem with our Casper techs and were informed that this is likely caused by VMware. Any thoughts?

Does anyone know how to import an Anchor Certificate into Configurator 1.5? (Casper 9.3). It's the only step I'm having difficulty with in the MDM enrollment. When I click the "+" under Anchor Certificates, I have no option to import the one I downloaded from JSS.

My boss wants the infrared receiver disabled on all our Macs that support this feature. Does anyone have an example of an extension attribute so I can scope the Macs to verify the that all of them get the infrared disabled. Thanks! Corbin

Hey guys...searched some discussions on here but didn't come across anything I could use. Has anyone had any luck with putting and keeping an Apple TV on an Enterprise WPA2 WiFi network with a time requirement? We can get all the certificates, trusts, etc on the Apple TV through Apple Configurator but it cannot join our wireless because the Apple TV (at first) doesn't know the correct time. It cannot connect to the network wirelessly to grab the time either. Anyone come across a way to get this to work without resorting to a hard wire ethernet connection? Any feedback would be appreciated.

For some reason I don't have the VPP Accounts option under Global Management. Is anyone else seeing this? I have the new DEP option but VPP is missing for me. I should say, its also odd that when I click on the Users tab I get an access denied even though all permissions are set fully for my account and the local account.

Hello all, I already have a support case open with JAMF but was hoping to spread the net a little wider in case somebody has seen this issue before. For some 10.8.5 machines (and only 10.8.5 machines, as 10.7 and 10.9 never experience this issue), wether it be a self enrollment package or a generic quick add package, it fails during the post flight script part of the install. When running the installer I get this verbose output:installer: Installing QuickAdd….....installer:installer: Configuring the installation…installer: Validating package…installer: Writing files…installer: Writing package receipt…installer: Finishing the Installation….....installer: Running QuickAdd installer script…#installer: The install failed (The following installation step failed: run postflight script for QuickAdd. Contact the software manufacturer for assistance.) When I try to manually enroll it tells me: Downloading the JSS CA Certificate...There was an error.Error enrolling computer: Unable to establ