I have a post-installation bash script for a package where I want to have different logic to determine whether the package is being deployed via Self Service vs a policy. For example, I may want to have different jamfHelper messages to appear depending upon the method of deployment. I would keep the advantage of having a single package, rather than creating separate packages for each deployment method. I am at a loss as to how to determine the logic. I would appreciate it if somebody can point me in the right direction. Thanks.

Hello - I am wondering why the following apple script works fine in 10.8.x via manual execution and through Self Service - but in 10.9 it only works when manually executed but not through a Self Service policy? tell application "System Preferences" reveal pane "Sharing" activateend tell Any pointers?Appreciate any help.

We have 20 new Sharp copiers en route for delivery, days ahead of when they were regularly scheduled so of course I'm a little behind in deployment plans. We'll be rolling out the new copiers via Self Service of course to about 1500 clients. Question here on driver rollout. If I have say 5 different drivers that need to be installed on the clients, should I have a policy that runs to install the 5 manufacturer pkg files to all the machines, or use composer to create 1 pkg file that includes all necessary drivers? Last, install the drivers as part of the printer install policy in Self Service?

Hi,In casper focus, the teacher is unable to see the username of the student on his iPad until the name of the iPad is same as the student name. we have setup the usernames of the students in jss also we have assigned/ bind the iPads to AD users using Apple Configurator but the teacher doesn't know by looking the casper focus that which iPad belongs to which student. Any suggestion?

Hi all, I'm running into a strange problem while trying to create a new enrollment profile. What I've got:JSS 9.11 (Windows 2008 r2)iPad 3,4 (4th Gen, wi-fi) - iOS 7 (11A465)Apple Configurator 1.4 What happens:After creating a new MDM Profile in the JSS (no fields populated or boxes checked other than "Display removal notification in inventory"), it fails to install via Configurator. The error I receive is: "The server certificate for 'https://apple.this.sucks:8443//otaenroll/' is invalid." Code: 23002 Domain: MCHTTPTransactionErrorDomain However after cloning that same profile and checking the iPCU box for iOS 6, everything works fine. Any ideas? James

Since we updated to 9.22, every computer we enroll in the JSS gets our 802.1x wireless configuration profile installed but when you attempt to connect to it, it asks for the authentication credentials, which are supposed to come from that profile. So far we haven't noticed this with iPads. This is on both computers that are re-enrolled and new computers with a fresh copy of OS X.

What do we do if we need to increase the JSS licenses for mobile devices. Is there any spill threshold where JAMF will overlook extra 5% or something. How would we increase the No. of licenses like either in blocks of 10 or 20 or we can just increase as we go.

We have installed Trust profile and MDM profile using apple configurator, can we also install configuration profiles using apple configurator ?

I have followed the setup instructions for connecting our JSS server to apples GSX resources.I am using an account set up as a Manager.That account also has access to Web Services.I have populated all the needed fields on the JSS.When I run the JSS test feature it returns "A connection to the GSX server was successful." What should my expectations be at this point. Should I immediately see information under the inventory of my Macs.Is the JSS downloading the information from apple and doing some behind the scenes work that needs 24 hours or so.I am expecting to see the information under the "Purchasing" area on the inventory of any given Mac. Is that correct? If someone is using this feature in 9.2 I'd sure appreciate your input in what I should be expecting. Not sure if I should be troubleshooting or just sitting tight and letting things bake a bit. Thanks in advance Sincerely,Paul Price

Hi, does anyone know whether it's possible to auto setup a default wallpaper image on iPads using Casper?

The last I remember we can setup a VPN in profiles or install a VPN app/client on the iPads. However, there is no way to: force the user to only use the VPN app prevent the user from deleting the profiles Am I wrong on this?

I am trying to correlate the factors which contributed to this issue, but the only change in my environment was the JSS update to 9.22. In any event, I am finding that my self service policies which have a restart configured - whether it be immediate or timed - is not executing. In the console I see that after the policy runs, it displays the following:Blessing i386 OS X system on /...Reboot. 10.4+. BackgroundAdding launchd task to reboot ... then nothing happens...Has anyone experienced this?

I am attempting to make a script that will sync Illustrator custom dictionaries. The user will run this via Self Service when they make edits or want to make sure they are current. Here is the script #!/bin/sh #Sync User Dictionaries for Illustrator #Current useruser=ls -l /dev/console | cut -d " " -f 4 #Duplicate current Dictionary file cp /Users/$user/Library/Application Support/Adobe/Linguistics/UserDictionaries/ATE User Dictionary/all/added.txt /Users/$user/Library/Application Support/Adobe/Linguistics/UserDictionaries/ATE User Dictionary/all/BUadded.txt # Cat dictionary file to server stored Dictionary file cat /Users/$user/Library/Application Support/Adobe/Linguistics/UserDictionaries/ATE User Dictionary/all/added.txt /Volumes/Mac_Assembly/NEW_Script/MasterDictionary/addedsync.txt > /Users/$user/Library/Application Support/Adobe/Linguistics/UserDictionaries/ATE User Dictionary/all/addededits.txt # Copy edited file in place of old file. cp /Users/$user/Librar

Sorry for being in the wrong forum. I just want to ask anyone who has encountered "The time zone setting for your computer has changed. Would you like to update the time zone setting for Outlook" pop up, asking you to update your time zone or not even if nothing has changed. This annoying pop up comes in every 10-15 minutes. Thanks everyone.

Hello JAMFnation! JSS: 9.21Master DP: OS X 10.8.5 with Server.app I've created a few packages for Adobe app installs with Creative Cloud Packager. All have been uploaded via Casper Admin. Issue is, I get this error whenever I do anything with them: Failed to download files from http://jss.server.com/CasperShare/Packages/AdobeAcrobatXIPro.pkg/index.bom. That was me simply trying to cache the package via Remote. That's an Acrobat-only package, but I get the same for each of the various CC packages, using Remote, policy or Self Service policy. Permissions look OK. They replicated fine. Packages install OK manually. Other possibly relevant info: All DPs are sharing over HTTP. Upgraded to 9.21 from 8.73 a couple of months ago. Things have been good, though. We were also getting this error with a printer driver, but the printer ended up being decommissioned anyway, so we never really resolved it. It doesn't fail right away at all. I would say it takes pretty close t

Some of the staff are using multiple google calendars except their personal google/ email calendar. How can we add multiple calendars on iPad/ iPhone. I have added the calendars to my account using https://www.google.com/calendar/iphoneselect but the calendars are not yet showing up on my iPad/ iPhone. Is configuration profile's exchange setting is not allowing the other calendars to show up or are there more settings that I need to do for Cal Dav in configurations profiles. Any suggestions would be appreciated.

Absent an externally-facing JSS, anyone have an effective means for posting policy messages to your users when not on your network? We're in midst of deferred FileVault rollout so I've created a daily message policy reminding our folks to logout to encrypt. However, most of our users travel and are not on network most of the time, which is preventing the reminder from triggering. My initial thought was to leverage an offline policy for this, but I just noticed that's only available for policies executed ongoing and my notification is set to execute daily. Is there an alternate means to execute ongoing with a manual trigger every 24 hours (never done that)?

We seem to have a recurring issue with a variety of iMacs and MBPs whereby users are no longer able to login to the machine. At one point in the past when a number of machines were hit with this issue, a simple reboot seemed to resolve the issue across the board. However, since 10.7.5 was released there still seems to be the same issues occurring sporadically. Our fix lately has been to touch the machine, unjoin from the domain and rejoin to the domain (which requires adding back in the piece for Admin users). All the machines are imaged with an Active Directory binding (on 10.7.4), but we noticed that a computer object doesn't exist in Active Directory until after we've unjoined/rejoined. Has anyone else experienced this login issue or have any suggestions? Much appreciated.

in settings>computer management>Directory Bindings I filled in all our AD info created a policy to distribute to all computers recurring checkin + Ongoing fails: log = similar to this: Mon Dec 10 15:12:27 cr-imac102874 jamf[239]: An error occurred binding to Active Directory: dsconfigad: The plugin encountered an error processing request. (10001). (Attempt 1)Mon Dec 10 15:12:38 cr-imac102874 jamf[239]: An error occurred binding to Active Directory: dsconfigad: The plugin encountered an error processing request. (10001). (Attempt 2)Mon Dec 10 15:12:49 cr-imac102874 jamf[239]: An error occurred binding to Active Directory: dsconfigad: The plugin encountered an error processing request. (10001). (Attempt 3)Mon Dec 10 15:12:59 cr-imac102874 jamf[239]: An error occurred binding to Active Directory: dsconfigad: The plugin encountered an error processing request. (10001). (Attempt 4)Mon Dec 10 15:13:10 cr-imac102874 jamf[239]: An error occurred binding to Active Directory: dsconfiga

Hello, I'm working on a user friendly app that will handle corporate client pre-reqs for my environment and the enrollment into the JSS. I'm prompting the user for their NT credentials during this process so I thought I could leverage them to download a QuickAdd package from https://yourjss:8443/osxenroll Is there a way from terminal to download a quick add from this page via bash (REST via curl)? I was looking over https://yourjss:8443/api but didn't see anything. The reason I don't want to pull down a QuickAdd created by Recon (non-expiring invitation ID) is because the user who is enrolled is logged if the enroll page is used, and the quickadd downloaded is only good once. Is the a way to accomplish this? Thank you!

We are reviewing/testing options for our move to Casper 9. In particular, we will need to decide what OS to use for our distribution points. We will be moving away from Mac OS X (and AFP) to Windows (SMB/IIS) or Linux (RHEL/SAMBA/Apache). The JDS will be a possibility for us, but for purposes of this discussion I would like to focus on SMB/share-based distribution. I've done some testing with W2K8 and W2K12 Server at both home and work environments and have run into the following problem ... I can NetBoot and use Casper Imaging to lay down OS/Configuration perfectly using either W2K8/12 server SMB shares. However, as soon as I try to deliver packages via Policy I get consistent "Can't mount a distribution point" failures. As soon as I turn on IIS and use HTTP on these servers for my policies all is well. I've tried with both local and domain accounts with same result. I can mount the share using the read and read/write account perfectly fine. Again, Casper Ima

Is anyone out there using Kerberos authentication in order to setup Outlook 2011?

I'm attempting to create a dual boot with two equal partitions of OS10.9 and a winclone image/package. Should I be creating a Bootcamp (Windows) partition within my JSS configuration and selecting the winclone image, OR selecting the partition option when creating a Winclone pkg, including that in the configuration, and then not specifying any partitioning info? Thanks.

Hey all:In our institution we use Microsoft System Center Configuration Manager (SCCM) to install Windows updates on desktop computers. With our Staff systems, we make updates available at a specific time and the staff can defer the updates for up to 48 hours (or they can update right away) and then SCCM automatically downloads and installs the updates and warns the user about a reboot. Is there a way to mirror this kind of functionality with Software Updates policy? I see that I can make updates available at a specific time but to force a deadline didn't come very apparent to me and I haven't seen this in Jamf Nation anywhere. Any advice would be appreciated

I have an principal at a school that would like to periodically copy a few files to every teacher's laptop. I would like to have a self service item for him to initiate when he wants. The self service item would copy the files to a server and then flush the logs of a policy that would copy the files to every teacher's laptop when it checked in. Setting up the self service item to copy the files to the server is easy enough, script will make that easy, as is creating the policy to copy the files to every teacher's laptop, another script. What I don't know is how have the self service item flush the policy's logs. The principal does not have access to the JSS database to flush the logs, trying to make this as easy as possible for him. If anyone has any idea as to how to complete this I would be appreciative. If you have an idea on another way to complete this that would also be helpful.