Hello,We have our student accounts defined as non-administrators, of course. However, we keep running into an issue when we push out new applications. They get the Quarantine notice that the application was downloaded from the Internet. However, they get this every time they open the application. So the Quarantine status never gets updated. We pushed out the "defaults write /Library/Preferences/com.apple.LaunchServices LSQuarantine -bool NO" setting to try turning off the LSQuarantine setting completely, but that doesn't seem to have worked. How should we be doing this? Tim

JAMFnation 4ever! JSS 9.23. All users running 10.8.5. Testing some scenarios out before implementing FileVault 2 on users' machines, I've noticed deleting an encrypted machine's record in the JSS and re-Reconing doesn't fill in the Recovery Key in the JSS. It recognizes the drive as encrypted in the Inventory tab, but lists Not Configured in the Management tab. Is there any way to repopulate that in this scenario short of decrypting and re-enabling encryption via the JSS? Thanks for any and all help! Michael

I am wondering if anyone has pushed iPad apps with Casper and tried to put them in folders on the iPads? I have a master iPad setup with all of the apps that were pushed with Casper in folders. I backed that up in supervision mode in Configurator and restored that backup to the rest of the iPads. Then I pushed out the apps to the iPads using Casper and they didn't go into folders. None of the folders even showed up. I tried it the other way around where I pushed the apps and then restored the backup and it creates the folders but doesn't install all of the apps or stalls out on them. Has anyone been successful with this? Thanks!

I am new to Casper Imaging. I have successfully created an image and on July 12th successfully imaged a computer using Casper Imaging 8.64. I then modified and recompiled the image and have had mixed successes and failures since then however none of these are showing up in the imaging logs. This makes troubleshooting the failures difficult. I am using the web portal (https://myserver.csd.loc:8443/autorunLogs.html) to attempt to view logs and the logs from July 12 are visible but none of the more recent attempts are. Also, in case it is important, my recent failures have been an apparent failure to create a login account on the new image and a failure to bind to a directory. Without logs or the ability to log in I am unable to troubleshoot further. How can I re-enable the creation of these imaging logs? Is there a server side log that can be referenced to see why the logs are not being created, or are not visible?

Does someone have a good resource for a thorough breakdown of how the APN + Managed preference technology works. Such as what data is being passed where and in what order, and what the purpose of each data transaction is? I have the list of ports and what direction the 'data' is sent on them, however I cannot find any specific information about what the data contains, and all of the previously mentioned parameters. I would think apple would have a breakdown of how their technology works other than "data on the ports and stuff to and from servers and clients", but I cannot find it. :) I found this however it is no where close to an official source and doesn't appear to be entirely accurate. http://www.justinrummel.com/how-apns-works-with-mdms-that-manage-osx-and-ios/

Our goal is to collect all the printers listed in the computer details printer window. We know it is in MYSQL. Just need to know which table it is in. When exporting the jamfsoftware printers table from mysql, all we get are the printers that were added to Casper. (network printers) The locally attached USB printers are in computer details with their serial numbers along with any network printers the user attaches to. Has any one been able to export this data? Which table is it in?

I am having an issue where I am not able to replicate out to my JDS instance. My experience is that I am able to see the JDS within Casper Admin, I hit sync and it mounts the webdav share, it looks like it starts to sync all the files, but at the end, it fails and the sync log produces many lines of the following: Output: <?xml version="1.0" encoding="UTF-8" standalone="yes"?><uploadResponse><id>20</id><md5></md5><message>Error uploading file to the JSS:java.io.FileNotFoundException: Temp directory not initialized</message><receivedSiw Within Finder, I am able to read/write to that webdav share but Casper Admin 9.24 never does a thing with it. So what is causing this and what can I do to correct it?

I was wondering if anyone has ever automated the Lync login based on the AD account logged into the device? I was attempting to use AppleScript and "Tell Application" to set up the account but Lync doesn't seem to have an AppleScript dictionary. Sincerely,T.J.

hey all, I've been thrown a quick project for installing Vjoon K4 Plug-ins for CS6, but we are getting little support from the vendor, so i've decide to attempt a repackage with Composer, and hoping someone out there has done this before. Normally there is an install app called vjoon K4 Clients for Adobe Creative Suite 6.app, which apparently places a Vjoon K4 folder in the Indesign and InCopy folders. this unfortunately seems hit or miss. In CS6 we also have a plugins folder also located at /Library/ApplicationSupport/Adobe/Plug-Ins/CS6/ and one of the things it does is run a few scripts that disable items in Extensions manager. If anyone has experience, can i just go to the /Library/ApplicationSupport/Adobe/Plug-Ins/CS6 instead of placing duplicate plugins in idesign and incopy? Any help would be appreciated.

I have a problem where the JSS has too many logs saved (I think the default setting was one year), to the point where the JSS/Tomcat hang when I try to view logs for some policies (like the daily inventory policy) and stop accepting incoming connections. I usually have to reboot the server to restore service. What's the best practice for keeping policy logs from backing up to the point where this occurs? How do I safely clear them out if the JSS can't even process them? I'm worried if I change the retention date to 90 days, it will kill the JSS/MySQL.

Over the weekend I upgraded our JSS to v9.24. All is workingwell but I am seeing 1 small bug in Imaging. Following the instructions onJamfnation <https://jamfnation.jamfsoftware.com/article.html?id=67>, Iupdated the version of the Casper Suite in my netboot image but every timeI kick off Casper Imaging with this netboot image on a client, I always getthe message "Casper Imaging is an application downloaded from theInternet. Are you sure you want to open it?" Thinking its because the original image was created with Gatekeeper on, so my question is, how can I edit this netboot image to "allow from anywhere" so I don't have to create a new netboot set?

Good day JAMFNation! All machines are running 10.8.5. JSS is 9.23. I've never dealt with FileVault in a non-security preference pane capacity. I've been following JAMF's guide at http://resources.jamfsoftware.com/documents/technical-papers/Administering-FileVault-2-on-OS-X-Mountain-Lion-with-the-Casper-Suite-v9.0.pdf and rtrouton's keynote at https://derflounder.wordpress.com/2013/10/17/slides-from-the-filevault-2-session-at-jamf-nation-user-conference-2013/, which has been an incredible resource. In JAMF's guide, there are instructions for exporting an institutional recovery key with a private key and instructions for exporting one without a private key. Rtrouton's keynote similarly has him exporting both, one with a private key and one without. Then he creates two Disk Encryption Configurations, one with each of his exports ("FileVault with Institutional Key" and "FileVault with Institutional Public Key"). When might you use one

Hi Folks, I'm very new to JSS Casper so please bear with me for this basic question :) I've a management account & its password defined however I need to change the password so that whenever a new machine gets enrolled, the new credentials should be applied at the new enrolled machine. I created a new Quick Add package through Recon defining a new password but this package is not being picked by self enrollment portal & machine still having the old password of management account. Can somebody guide me how can I change the password of management account in Quick Add package which is being downloaded dynamically through enrollment portal. Do I need to make the changes under JSS-->Computer Management--> User-Initiated Enrollment for Computers or somewhere else? Any help would be greatly appreciated!

Hello everyone, We are planning to start encrypting the drives on our Mac devices and wanted to reach out to all of you for advice on the best enterprise system out there. We are currently testing FileVault 2 as it is already built in but we think is not at the point we want to. Just to explain, and hopefully someone has a workaround, to decrypt or unlock a drive I need to always have the user's password. I thought that by having the recovery key any of the tech support associates would be able to proceed with a reimage process without the user's intervention to type the password (Individual and Institutional setups both require the users' credentials to unlock). Trying to mimic a Bitlocker setup on the Windows side in which by typing a recovery key you are able to access the data and therefore decrypt and modify the HD structure. So being this the case, we would like to try a 3rd party product and wondering which one is the best out there. Thank you

Hey all, Anyone know if there is a way to get the Inventory > General > Asset Tag of machine read from the jss and get that into the ARD fields? I use the 4 ARD fields of my machines.ARD 1 is populated by a script the reads the IOREG > Machine ModelARD 2 is populated by a script that reads the jamf versionARD 3 is manually typed in with the Build DateARD 4 would like to populate by reading back the Inventory > General > Asset Tag of machine. Here is the script: #!/bin/bash #Set Field 1 to MachineModel machineModel=`ioreg -l | grep product-name | awk '{print $4}' | tr -d '<">'` /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -computerinfo -set1 -1 $machineModel sleep 10 #Set Field 2 to JAMF Binary version JSSVERSION=`jamf version` /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -computerinfo -set2 -2 $JSSVERSION Thanks in advance as

We upgraded our JSS over the weekend to 9.24 from 8.72. I want to keep an eye on the clients as they update their binary to 9.24. I don't see a way to create a smart group based on binary version. Am I overlooking something or is there another way to do this?

With Mac OS X 10.8.5, SSD(!) boot device and Casper 8.64 the console login of a client policy request(?) doesn't teminate: bash-3.2# ps -ax | grep console   75 ??         0:00.13 /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console or bash-3.2# ps -ax | grep console36678 ??         0:00.46 /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console This causes no login window screen and happens after reboot and logoff (eventually after login and other policy requests(?), because often there are more then one "loginwindow console" processes hanging with ??). I login via terminal ssh and have to sudo kill -HUP <pid of loginwindow console>. After killing all these processes the login window screen appears immediatly. Any ideas for a work around?

I work at a High School and we need to set up labs for testing. We have a local user account that we need to log in and some testing software to launch. We typically do this to make it easy for the testing coordinators; they just come in and the software is already up. Since I do not want to type the username/password manually on each computer, I want to use a script or command to do this. In 10.6 I just ran these simple AppleScript commands from ARD or saved it as a script and ran it via Remote: osascript -e 'tell application "system events" to keystroke "username"' osascript -e 'tell application "system events" to delay 0.5' osascript -e 'tell application "system events" to keystroke return' osascript -e 'tell application "system events" to delay 0.5' osascript -e 'tell application "system events" to keystroke "password"' osascript -e 'tell application &#0

Hello together, I'm pretty new to scripting on OS X and hope that one of you can help me with this. I have a script that is supposed to check if a certain app is installed, get its version and do something if it's not yet installed. #!/bin/sh echo "Checking installed version" minVer=“2.1.0” installedVer=`system_profiler SPApplicationsDataType | grep -B7 "McAfee Endpoint Protection for Mac" | awk '/Version/ { print $2 }'` if [ -z "$installedVer" ] then echo "McAfee Endpoint Protection for Mac is not installed" else echo "Installed version is $installedVer" if [ “$installedVer” == “$minVer” ] then echo "Installed version $installedVer is up-to-date" exit 1 fi fi echo "Installing Mcafee Endpoint Protection 2.1.0" exit 1 The script works fine when I run in in Terminal but when I execute it via Casper Remote or policy I get the following: Sending Wake On LAN command... Opening SS

Has anyone else noticed an issue when uploading Shell scripts via Casper Admin using 9.23? Each time I try uploading one, Admin throws an "error 500" saying that it could not write to the Master Distribution Point, and after restarting Admin, it will show the scripts name but that it is missing. DMG and PKG files are working correctly.

We've deployed a few hundred iPads and have only had this happen twice. When this particular user navigates to the Self-Service and tries to download any free app they're fine; however, when they've tried to download our two applications that were prepaid with Volume Purchase Program codes (Pages & Keynote) they're prompted to Install, then input their Apple ID password, and are followed with a notice stating: "The code you entered has already been used." Has anyone experienced this and how did you fix it? This happened for both the apps this user tried.

I am looking for an script which will run Microsoft Autoupdate.app and search for available updates. If updates available script will list out all updates. then with the help of script if we update the Microsoft office.

Hi, Does anybody know how to change the "Faux NetBoot" name of the NetBoot/SUS Appliance to something else? RegardsFritz

I can image all day long but my staff can't until they remove 3 of the packages I made. What would cause this? The 3 packages they had to remove we're Firefox chrome and office 2011. All made on a clean Mac using snap shot, made by me. These packages install fine via self service. ( have not tried office via self service but the 2 browsers we have.) I can image the same config no prob with all of them but they have to remove the 3 packages to be able too. It takes me 4-6 minutes to push this stuff, they force quit at 8-10 minutes.

Hi Nation, We are currently using the Required Password preference in Managed Preferences. When the lock screen kicks in, our users see a black screen and must type their credentials to unlock the screen. I've been asked to temporarily re-brand our lock screen. The goal is to replace the black screen with an image. Probably a .jpg. I'd appreciate any tips on how to get this accomplished. Thanks, G Lo