Hi! I have recently stumbled upon an issue with netbooting older MBP's to my latest 10.9 NBI. Every time I try to boot I get the prohibitory symbol. I can't figure it out and it is driving me insane. I have tried the following: Making sure the NBI has no spaces in the nameDeleted some Kernel Extensions to make the kernelcache < 35 mbSet the NBI as default I really want to try and have a universal NBI for my helpdesk folks, but if this cant be done, I understand. Just wanted to know if anyone has seen this problem? Also, I used the System Image Utility Tool to build the NBI

Hey all:We are on an 802.1x network and pretty soon our client certificates are expiring and we need to cut over to new ones. I am trying to accomplish the cutover without any interruption to service. GlobalSign is our certificate authority. Our systems have a globalsign Root CA certificate and what I would like to do is set that cert to be explicitly trusted for all users so that when we cut over (now and in the future as these certs expire every year) they don't have to accept client certificates. I have not found a great way to do this: first thing I tried: On one machine, I marked the certificate as explicetly trusted within Keychain access then export the cert into a file. Created a config profile in the JSS and uploaded the cert then scoped the policy to a machine. Still get prompts second thing i tried: Exported the cert like I did above but attempting to import it via the Security command line and telling it to be trusted (but just get an error reading file) Anyone ha

We are supervising the students' iPads using AC. We have installed Trust Profile i.e. CA Payload and MDM profile on these iPads as part of this process. On JSS the Configuration profile is setup for Exchange purpose for these iPads. The problem is when the iPad picks up the Exchange payload it doesn't allow any field to be entered for Exchange settings, all the fields like email, username, password is disabled except password. Are we supposed to set up the exchange settings manually ? that would be quite painful. Please note that I have set up the keywords behind in Exchange payload like $EMAIL, $USER. I do have another configuration profile for teachers which is working fine but their iPads are not supervised using AC.

i have a script that creates a few scripts on the users computers.and one of the scripts seems to pull the variable out of the script. any idea how to fix this? This is what i write: #Creates the script that the Launchd will call to make the popup echo "#!/bin/sh SUSNOTE= softwareupdate -l | grep '*' -c terminal-notifier -message 'There are several updates waiting for you in Self Service Click her to launch Self Service' -title ' $SUSNOTE Pending Updates' -activate com.jamfsoftware.selfservice -appIcon /.pVault/Spark.png " > /var/uits/UpdateWarningPopup.sh but once the file is created on the users computer, the script looks like this: #!/bin/sh SUSNOTE= softwareupdate -l | grep '*' -c terminal-notifier -message 'There are several updates waiting for you in Self Service Click her to launch Self Service' -title ' Pending Updates' -activate com.jamfsoftware.selfservice -appIcon /.pVault/Spark.png I'm assum

Hi There, New to Casper. As more and more apps are released via the app store, it feels less obvious how best to deploy applications like Keynote 6 and iPhoto 9.5 via Casper. Has anyone been able to successfully package these two apps? Should one just run composer while the App Store installs these on a system?

It seems that my config profiles are all messed up after upgrading to 9.31. When I click on what used to be the restrictions for what was available in the system preferences panes, now displays machine restrictions (smart groups, buildings, etc) but no actual preferences listing what's enabled or disabled. Same with my app store updates only profile...

We are imaging 10.8.4 onto new machines via NetInstall and have attempted to use Casper Netboot Automator Action (https://jamfnation.jamfsoftware.com/viewProduct.html?id=140&view=info) with the System Imaging Utility. Our resulting NBI does not have the expected results. First, when the NBI is booted to, the user is prompt to sign in to an Apple ID (so we hit skip), then when the OS loads, Casper Imaging never opens. What's the deal? Is Casper Netboot Automator Action no longer supported? Is there a new version in the works? Do I have to manually install imaging and manually force it to open? How does one disable the Apple ID prompt?

Searched around a bit but no luck finding my solution yet. I want to reduce my footprint in the JSS for the amount of space my packages are taking up as I prepare to add a distribution point with Amazon AWS. Packages folder is nearly 77 GB. I deleted a bunch of un-needed packages from Casper Admin, save and replicate, all looks good in CA. I go to the Packages folder in the CasperShare and the packages are all there and the size is still 77 GB. What gives?

We have a Self Service policy that uninstalls a troublesome app, installs the latest version, then executes a command. On a small but irritating number of our machine, we seem to have this issue where the wrong DP is used: https://jamfnation.jamfsoftware.com/discussion.html?id=10408 (usually our DMZ DP which isn't accessible inside our network). This causes the app install to fail, but the policy goes on to execute the command. I would prefer the policy stop on the first failure. Is there a way to configure that? I could cache the app, and only have the policy available to machines that have the app cached but we really needed a quicker solution for this. Also, when the policy fails Self Service doesn't seem to give any notification of the failure. If you click on "Show Downloads" in Self Service it will show the failure, but our clients didn't know to look for that. Is there a way to make a failure obvious? Thanks.

I've run into a strange issue and I'd like to know if this is a bug or intentional. I've deployed a configuration profile that prohibits access to certain prefpanes such as Profile, Sharing, and App Store. When the restricted prefpanes are hidden, they become re-enabled. I've verified this is so on multiple 10.9.2 machines. I haven't yet tested to see if this behavior is present in 10.8, but I'm curious to hear whether or not this is by design or a bug.

After upgrade to Casper 9.2 Getting report in Jamf Log that "The computer was not Enrolled in MDM with the JSS. The Device Certificate did not install" The computers enroll and update inventory in JSS and install policies. Profile does not show in System Preferences. No Certificate or Private Key listed in Keychain. Looking at computers in JSS they show enrolled and contacting and Managed but MDM capability says No. Other computers that were already enrolled show contacting fine and receiving policies and MDM capability Yes and the Profile can be seen in System Preferences. I get the error whether I run QuikAdd.pkg, Recon, or command jamf enroll in Terminal.

Hey all,Here is something I am wondering if it exists. I have checked googled and got nothing. One process when we issue a Macbook Air to staff members is they sign an agreement form(physical paper). I am wondering if there is a 3rd party app where at first time logging in, the Agreement form is prompted, forcing them to check mark the box'es and type in their name and collect this data to a central location.

I just finished upgrading my JSS machine to 10.8 server, and upgraded JSS and Casper Suite apps to 8.71. Everything appears to be working as it did before, but when I tried packaging an upgrade to OSX 10.8 to deploy via self service, the policy fails with the following errors: /usr/sbin/jamf is version 8.71Executing Policy Install OSX Mountain Lion (10.8)...[STEP 1 of 6]Downloading http://172.16.0.105:80/CasperShare/Packages//Install OS X Mountain Lion.dmg...Verifying DMG...Error: The package does not appear to be on the server (404).[STEP 2 of 6]Creating directory structure for /Library/Application Support/JAMF/Downloads/Downloading http://172.16.0.105:80/CasperShare/Scripts/install_osx108.sh...Error running script: The script could not be found on the server.. I thought that perhaps a permissions issue had arisen after the 10.8 upgrade, but attempting to install other packages that existed prior to the upgrade is working fine, and the permissions on the share and on the files in

When I try to image my 10.9 osx hard disk to Casper 9 it doesn't let me choose the drive only an external drive on USB does this mean that the drive I want to image is not supported for imaging ? Also why would it allow me to choose a USB drive with no OS image on it at all ? Im still learning so please go easy on me :)

Hi all. I'm having an issue with Adobe CS6 that I haven't seen specifically mentioned in any of the numerous posts about CS6 distribution. After reading all of those threads, I was able to come up with a workflow that is successful in getting CS6 on the target machine and automatically serialized. However, every time a CS6 app is launched, an Adobe prompt comes up for Adobe product registration by way of an Adobe login. The product is serialized, but for some reason still wants registration. When I manually install on a machine (not using Casper) using the same AMEE package I uploaded into Casper Admin, the Adobe apps do not ask for Registration when launched. So somehow the Casper process is breaking that "already registered" flag that is a major benefit of using AMEE. The way I've been able to successfully distribute CS6 is this… Create package in AMEE 3.1, using the "ignore conflicts" option, and not installing any AIR-related pieces. Uplo

I am trouble shooting the fact that my desktop pic is not showing up.Is there something says that the desktop pic is supposed to end with a certain .extn?I have a policy that is copying the file over to the proper location. And it appears that the managed preference is being triggered as there is a file created in the /library/managedpreferences/ area but something is still not happy.Thoughts?

Has anyone else seen this?In my environment, I'm running JSS v9.3 on Ubuntu 12.04 LTS. I noticed after successfully imaging a computer when I go into the JSS and check the imaging log, it says "No Casper Imaging Logs". All policy logs and management logs appear fine. I checked the freshly imaged machines /var/log/jamf.log and found a few entries that concerned me... ... Mon Apr 21 12:31:46 NetBoot002 jamf[8359]: Creating .AppleSetupDone... Mon Apr 21 12:32:41 CETECH00A9659L jamf[200]: There was an error. **Connection failure: "The host jss.domain.com is not accessible."** Mon Apr 21 12:32:43 CETECH00A9659L jamf[467]: There was an error. **Connection failure: "The host jss.domain.com is not accessible."** Mon Apr 21 12:32:43 CETECH00A9659L jamf[554]: Could not connect to the JSS. Looking for cached policies... Mon Apr 21 12:32:51 CETEHC00A9659L jamf[1269]: Setting home page to 'http://www.[home page here].org' for Existing Us

I'd like to create a smart group/smart search with criteria to find non-SSD systems. I could add computer model of "Air" or "Retina" but this would miss Mac Mini and iMac systems. I see in Computer > Storage > Model "Apple SSD XXX" listed, but I can't figure out how to search on this criteria. Storage model, drive model, disk type, etc. don't show in the All Criteria area. Anyone got an idea?

Does anyone else use the QuickAdd package to enrol the machine using DeployStudio without any problems? I created a simple workflow, name the machine, skip registration and install the QuickAdd package created from Recon. For some reason I can't seem to get this to work; 'installer: The install failed (The following installation step failed: run postflight script for QuickAdd. Contact the software manufacturer for assistance.)' Thanks

So I'm trying to get a setting changed in chrome via JSS, but I'm running into some issues. First off, I had an issue importing manifest into the console, but was able to get that taken care of. Now, I'm having the issue that the setting is not being applied. Here is the actual code that should be changed in the manifest, but it's not being changed. <dict> <key>pfm_description</key> <string></string> <key>pfm_name</key> <string>EnableOnlineRevocationChecks</string> <key>pfm_targets</key> <array> <string></string> </array> <key>pfm_title</key> <string></string> <key>pfm_type</key> <string>boolean</string> </dict> I wouldn't have an issue changing the lines in the manifes

Is anybody doing this? If not, how are you getting around it (that is, backing up your database on a schedule)? I'm hitting a wall trying to access the db utility on a headless Linux server. I think it boils down to trying to X11 & sudo-ing the java command.

First attempt here installing NetSUS on Red Hat and am stuck just getting into the web interface for initial configuration. (honestly, I've only seen RHEL twice- yesterday and today!) Following the user guide, installation went fine. On the server, https://hostname.local/webadmin gives me a 'server not found' error. Same goes from another computer using either the hostname or IP. At the server, 127.0.0.1 does bring up the Apache test page. I'm sure this is a novice error- but that's where I'm at. Suggestions of where to start ?

Hi Everyone, We are getting ready to roll out casper here to our new users, but aren't going to re-image existing machines. I'm scoping policies in such a way that software will get installed if it needs to and have pretty much got the hang of that. I'm also going to be using docutil to make a standardized user dock. However, I'd only like that to be pushed out to new users on a machine, leaving existing user docks (that they probably have already customized) untouched. I can think of a hackish way of doing this by pushing out a hidden marker file that goes out to all current user folders right now and then having my dock script die if it finds that file. Is there a better way to do that? It would be really awesome if there was a policy trigger for first user login that I am just missing...

Good morning all,Has anyone able to script AudioDevice? I have a simple script to change the input and output source using "Audiodevice". #!/bin/sh # Outputspeaker.sh # /usr/local/bin/audiodevice output "WavTap" In Terminal, it works without a problem, but when scripting, it just ignores it. I've tested on 10.7 and 10.9 Thanks in advance!

I'm trying to make it so my 10.6.8 SUS will host Lion updates. I've followed these (http://support.apple.com/kb/HT4771) instructions but every time I start SUS back up the swupd.conf loses the changes I made. When I start SUS back up it seems to save my edited swupd.conf as swupd.conf.previous and a new swupd.conf is created. Do I have permission problems? My software update repository is not on the primary hard drive. Any ideas?