I am running JSSv8.72. Focus v9.30. I can get kids enrolled so that they show up in the classes (devices are shown in Focus app). On the sidebar though, it doesn't say Websites and eBooks. Is there a piece I'm missing? Do I have to do something within a profile in order for it to work?

I am unable to delete a file from our Casper Admin that was demoed for us during the Jump Start. Under Type, it says "Built-In AD". The delete icon is grayed out, and there is no menu bar option for delete either. Is this normal?

Hello, Having an issue with the new version of Casper Imaging 8.64 and installing CS6 at restart. The package built with AAMEE is not installing. If I use Casper Imaging 8.63 it will install without issue. There has been no change to the package just the software used to image. Has anyone else run into this issue? Thanks

as topic states, we have been using Tlarkin's script to prompt the user to set their asset tag, but that is no longer working with our casper suite 9.22 and Mavericks. This is the script as we are currently using it: #!/bin/bash # use apple script and bash to get input from user to update asset tags in the JSS# by Tom Larkin# modified by Barnes, Walter 1/21/14# proof of concept, no warranty given, use at own risk # get user input from Apple Script and try to redirect output back into bash and user recon to update the JSS VARIABLE=$(sudo /usr/bin/osascript <<-AppleScript tell application "System Events" activate display dialog "Enter your asset number" default answer "Enter your Macbook's fixed asset tag number here" set theAnswer to (text returned of result) set cmd to "sudo /usr/sbin/jamf recon -assetTag " & theAnswer do shell script cmdend tell AppleScript) $VARIABLE exit 0 The JSS reports this

So I just wiped my SoftwareUpdate Server and redid it and now I can't seem to get 10.7 machines to connect to it properly. We use a profile to push the settings to all machines and it sets them all to http://myservername.interal:8088/index.sucatalog It looks like my 10.8 and 10.9 clients are seeing it based on this setting, but not my 10.7 or at least they are not showing errors like my 10.7 clients are. I followed the steps to get it to download the 10.9 updates as well and that seemed to work, but my 10.7 clients get software update server is not responding message. Any Ideas? Gabe ShackneyPrinceton Public Schools

What's the proper term? I kind'a like QuixieBootie..but....

CocoaDialog gurus.. can you please help? I wish to have a window with an indeterminate progress bar that's text fields are updated with the output of the jamf binary (in this case the output of jamf installAllCached & sudo jamf recon).. I'm just struggling a little & am sure someone else has done this.. please advise. (oh i'm using v3-beta7 btw)

I am using bits and pieces of tkimpton's script https://jamfnation.jamfsoftware.com/discussion.html?id=5327 and I am wanting to do an ip address comparison. How can I take the existing computer ip address and compare it to our ip range. as an example I have a computer that is at ip address 123.456.789.123 and I want to make sure that it falls in the range 123.456.xxx.xxx? All I want to compare are the first two sets of numbers and disregard the rest. Thanks in advance for any insight to this!

I am looking for syntax help on how to PUT the <username> within ../JSSResource/computers/id/$ID/subset/location using curl. Any ideas? I should also state that I must use BASH to accomplish this task.

So I have noticed this lately with student laptops when I go to check on the details of their laptops. When I select a student and click on details I will scroll down the left side and when I see the Local User Accounts it says there are 76 accounts when all it should be the student and my admin account. This doesn't seem to harm the laptops or the student profile but I am just wondering what is going on because I didn't have any of this in the start of the year.

I came across a problem we have with Mavericks in reguards to the unlock of system preferences.As our users are non admin users on there machines they can acess some system resources like Network settings without them. After testing Mavericks we came across that this is not working any longer in the know way via the authorization file.According to AFTP548.com it's using a DB now for this purpose. But even with this solution provided here: http://www.afp548.com/2013/10/22/modifying-the-os-x-mavericks-authorization-database/ it's not working. The error we get is: NO [-60005] The clients has been upgraded from 10.8 to 10.9.Any ideas about this? Thanks for your help

So...I'm very aware of the carrot/stick methodology of managing iPads. Eg. Users who follow the rules and enroll "get the carrot" of full wifi access, use of camera, apps and such and users who fail to follow the rules "get the stick"...or a punishment of some sort like restricted camera access, placed in a penalty box Wifi, etc. I have given the various "punishments" over to the administration to decide what they are for a given issue. What I have been charged with doing is implementing them. The implementation I am seeing is a "punishment" mobileconfig file that is scoped to a static group. For example, if Johnny is messing around with the camera during class and it is decided that Johnny needs his camera disabled, the principal wants to be the one to put Johnny in the "disabled camera" static group. Here's the summed up problem simply...what are the absolute minimum rights I would have to grant to an administrative staf

Since we are able to kill a process that is restricted, can we, by extension, make a smart group from people who are running/not running a process? I want to pop up a dialog that tells the end user not to quit TeamViewer.

I've been having an issue with InDesign in a lab where the students use a network home directory(AFP). Occasionally, InDesign crashes when a student tries to open it. It seems to think that the preference files are in use somewhere even tho they are not. The solution to this is to navigate to ~/Library/Preferences/Adobe InDesign/Version 9.0/en_US/ and trash the file 'InDesign Defaults'. And this works but I want to create a Self Service policy that will delete this file for the user. But trying to rm /Network/server/user/path/to/InDesign Defaults as root gives a 'rm: InDesign Defaults: Resource busy' error. Any idea how i might be able to do this using a script? Maybe an Applescript run as the user?

Any one ever tried to execute more than one unix command in a single policy? We have a self service policy to update inventory. I'd like it to run both a JAMF Manage & JAMF Policy at the same time. Right now, I think I can only run 1 of those commands. Am I wrong? I know I could do this via script, however, that would require touching every policy that I need to force that against. Sorry if I'm re-asking something from the past, but I couldn't find a quick answer.

I'm looking for a way to display a message after the send button is pressed in Outlook 2011 when a message is sent to a specific recipient. Something like, "Are you sure you want to send this message?", in order to prevent messages from being sent to specific recipients. We have already limited who can send to these email addresses in our Exchange environment but would like to protect the people that have the ability to send to these sensitive addresses. Has anyone tried to do this? Any help would be very much appreciated.

Has anybody been using Filevault 2 on a system with multiple partitions and one of those being mounted at /Users?if so are you actually encrypting /Users and getting it to automount?I thought at one point FV2 was going to be Whole Disk Encryption, but it is not, it only encrypts your root/boot volume and leaves your data unencrypted on the other partition. So far in limited testing, when i encrypt the /Users partition it no longer mounts with the fstab entry, which is likely due to not having the passphrase to decrypt the disk.anyhow if anybody has figured this out I would love to hear it.

I've been trying to solve this myself for hours and I've been receiving the same error no matter what I try. I'm trying to write a launchagent plist with keepalive to ensure that in my stripped down NetBoot environment. If someone accidentally closes Casper Imaging it will re-open it. Simple, right? I used LaunchControl to run a simple "open" command on the application and on my personal laptop it worked wonderfully. I'd close the app, it'd re-open. Perfect. It's just not the same level of simplicity when trying to implement this on the root user account. Something isn't translating and I don't know what it is. Setting up LaunchControl the same way I did in my test, but this time logged in as root, only produces this error: LSOpenURLsWithRole() failed with error -10810 for the file /Applications/Casper Imaging.app. I even tried changing my NetBoot image to use a local admin account instead of root and configuring LaunchControl to r

I am hoping that my brain has just run away from me on this, but I am trying to get some brand new AppleTVs up and running, enrolled in the JSS with 802.1x auth and I am just having the damnedest time (mostly with Apple Configurator). Has any one else gotten this to work? Here's my basic process. 1) Get AppleTV turned on and updated (6.0)2) Plug AppleTV into ethernet (as 802.1x cannot be setup without a proper date and time, which the AppleTV can only get from the web3) Connect to computer with Apple Configurator via USB(My most successful settings are as follows)"Under Settings"- Set name to "Building. Rm. ### AppleTV"- Supervise "off"- Update iOS "Never update device"- erase before installing "grey" and unchecked- Restore "Dont' restore backup" "Under Setup" (once again, most successful configuration so far)-Skip Language (checked)-Skip Diagnostics (checked)-1 WiFi Payload as described below-3 Certifica

I have been asked to script populating /computers/name/MyComputer/subset/location/username/ +with the last person who logged in as a run-once API script. I was thinking I would grab from the JSS the +History >Computer Usage Logs> Username at last login field and use that to put to username but I cannot seem to find that info in the API. I also thought about capturing echo $3 at login (excluding some admin-side accounts) for a run-once to populate that field or grabbing the results of "last" and then putting it up to the JSS. I don't know... Anyway, does any body have any idea on where History >Computer Usage Logs> Username at last login info is hanging out or an opinion on how I might go about scripting this?

I'm following the article for adding custom system preference panes to be able to run with the config profiles as outlines in this article - https://jamfnation.jamfsoftware.com/article.html?id=204. The only one I can't seem to get working is WinShortCutter's to work. I got Java's and the Wacom's working, just not this one... has anybody gotten it to work?this is the info in OSXRestrictions.xml, incl the Java/Wacom one I added before. <dict> <key>displayName</key> <string>JavaControlPanel</string> <key>preferenceID</key> <string>com.oracle.java.JavaControlPanel</string> </dict> <dict> <key>displayName</key> <string>WacomTablet</string> <key>preferenceID</key> <string>com.wacom.settingsPrefPane</string> </dict> <dict> <

I have a web application that uses Java 7 and wanted to get it 'pre-approved' - which used to be easy with Apple's Java 6 as the certificates were originally distributed with MCX back in the day (which would now be done into the system keystore via Casper certificate distribution). But I don't think there's a way to do this for Java 7 is there? I was feeling very pleased when I found the 'system' certificate store at /Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/Home/lib/security/trusted.certs and have got myself as far as importing a cert with keytool keytool -importcert -noprompt -file mynewcert -keystore trusted.certs But that requires an inline interactive password setting. Is there a better way of going around doing this. It's a lot of work when I could just e-mail everyone saying "when it comes up the first time tick the OK, and don't ask again" and that will put it in their user home (~/Application Support

Hi guys Im trying to work out a script and wondered if anyone may be able to help? I am running a script at logout that will detect if the AC power is still plugged in and remind people to unplug it before they leave the office to avoid damage to battery cells. The problem i have is trying to work out to get an if argument that will detect if the battery power is more than 80%. This is what i have so far #!/bin/bash ##### ENVIRONMENT VARIABLES ##### # Specify a laptop using system profiler Laptop=`system_profiler SPHardwareDataType | grep -E "MacBook"` # Get the battery percentage Bat=`ioreg -n AppleSmartBattery -r | awk '$1~/Capacity/{c[$1]=$3} END{OFMT="%.2f%%"; max=c[""MaxCapacity""]; print (max>0? 100*c[""CurrentCapacity""]/max: "?")}'` # Specifying the message MSG="Your power cable is still plugged in. Remove it please otherwise you are at risk of damaging the cells in the battery l

I'm fairly new in learning scripting but google has been a good friend at times. Anyway I have a script that works in ARD to force an image in the /Library/Desktop Images folder as the background for multiple monitors but I can't get it to work from a policy and not certain what I'm doing wrong. This works in ARD but not from a policy or Casper Remote:osascript -e 'tell application "System Events" to set picture of every desktop to "/Library/Desktop Pictures/QICDesktop.jpg"' I've tried adding the #!/bin/sh but still get an error in logs of : Script result: 57:64: syntax error: Expected class name but found application constant or consideration. (-2741) Any help is appreciated. I'm more of a hardware guy and this may seem fairly easy to some so forgive the rookie scripting question.

I enrolled the iPad, everything finished ok, got message completed successfully, but this time selfservice icon didn't come up. Also checked the JSS server ipad is on the list, only error is "install profile is pending". Any suggestions are appreciated.