I am having an issue where I am not able to replicate out to my JDS instance. My experience is that I am able to see the JDS within Casper Admin, I hit sync and it mounts the webdav share, it looks like it starts to sync all the files, but at the end, it fails and the sync log produces many lines of the following: Output: <?xml version="1.0" encoding="UTF-8" standalone="yes"?><uploadResponse><id>20</id><md5></md5><message>Error uploading file to the JSS:java.io.FileNotFoundException: Temp directory not initialized</message><receivedSiw Within Finder, I am able to read/write to that webdav share but Casper Admin 9.24 never does a thing with it. So what is causing this and what can I do to correct it?

I was wondering if anyone has ever automated the Lync login based on the AD account logged into the device? I was attempting to use AppleScript and "Tell Application" to set up the account but Lync doesn't seem to have an AppleScript dictionary. Sincerely,T.J.

hey all, I've been thrown a quick project for installing Vjoon K4 Plug-ins for CS6, but we are getting little support from the vendor, so i've decide to attempt a repackage with Composer, and hoping someone out there has done this before. Normally there is an install app called vjoon K4 Clients for Adobe Creative Suite 6.app, which apparently places a Vjoon K4 folder in the Indesign and InCopy folders. this unfortunately seems hit or miss. In CS6 we also have a plugins folder also located at /Library/ApplicationSupport/Adobe/Plug-Ins/CS6/ and one of the things it does is run a few scripts that disable items in Extensions manager. If anyone has experience, can i just go to the /Library/ApplicationSupport/Adobe/Plug-Ins/CS6 instead of placing duplicate plugins in idesign and incopy? Any help would be appreciated.

I have a problem where the JSS has too many logs saved (I think the default setting was one year), to the point where the JSS/Tomcat hang when I try to view logs for some policies (like the daily inventory policy) and stop accepting incoming connections. I usually have to reboot the server to restore service. What's the best practice for keeping policy logs from backing up to the point where this occurs? How do I safely clear them out if the JSS can't even process them? I'm worried if I change the retention date to 90 days, it will kill the JSS/MySQL.

Over the weekend I upgraded our JSS to v9.24. All is workingwell but I am seeing 1 small bug in Imaging. Following the instructions onJamfnation <https://jamfnation.jamfsoftware.com/article.html?id=67>, Iupdated the version of the Casper Suite in my netboot image but every timeI kick off Casper Imaging with this netboot image on a client, I always getthe message "Casper Imaging is an application downloaded from theInternet. Are you sure you want to open it?" Thinking its because the original image was created with Gatekeeper on, so my question is, how can I edit this netboot image to "allow from anywhere" so I don't have to create a new netboot set?

Good day JAMFNation! All machines are running 10.8.5. JSS is 9.23. I've never dealt with FileVault in a non-security preference pane capacity. I've been following JAMF's guide at http://resources.jamfsoftware.com/documents/technical-papers/Administering-FileVault-2-on-OS-X-Mountain-Lion-with-the-Casper-Suite-v9.0.pdf and rtrouton's keynote at https://derflounder.wordpress.com/2013/10/17/slides-from-the-filevault-2-session-at-jamf-nation-user-conference-2013/, which has been an incredible resource. In JAMF's guide, there are instructions for exporting an institutional recovery key with a private key and instructions for exporting one without a private key. Rtrouton's keynote similarly has him exporting both, one with a private key and one without. Then he creates two Disk Encryption Configurations, one with each of his exports ("FileVault with Institutional Key" and "FileVault with Institutional Public Key"). When might you use one

Hi Folks, I'm very new to JSS Casper so please bear with me for this basic question :) I've a management account & its password defined however I need to change the password so that whenever a new machine gets enrolled, the new credentials should be applied at the new enrolled machine. I created a new Quick Add package through Recon defining a new password but this package is not being picked by self enrollment portal & machine still having the old password of management account. Can somebody guide me how can I change the password of management account in Quick Add package which is being downloaded dynamically through enrollment portal. Do I need to make the changes under JSS-->Computer Management--> User-Initiated Enrollment for Computers or somewhere else? Any help would be greatly appreciated!

Hello everyone, We are planning to start encrypting the drives on our Mac devices and wanted to reach out to all of you for advice on the best enterprise system out there. We are currently testing FileVault 2 as it is already built in but we think is not at the point we want to. Just to explain, and hopefully someone has a workaround, to decrypt or unlock a drive I need to always have the user's password. I thought that by having the recovery key any of the tech support associates would be able to proceed with a reimage process without the user's intervention to type the password (Individual and Institutional setups both require the users' credentials to unlock). Trying to mimic a Bitlocker setup on the Windows side in which by typing a recovery key you are able to access the data and therefore decrypt and modify the HD structure. So being this the case, we would like to try a 3rd party product and wondering which one is the best out there. Thank you

Hey all, Anyone know if there is a way to get the Inventory > General > Asset Tag of machine read from the jss and get that into the ARD fields? I use the 4 ARD fields of my machines.ARD 1 is populated by a script the reads the IOREG > Machine ModelARD 2 is populated by a script that reads the jamf versionARD 3 is manually typed in with the Build DateARD 4 would like to populate by reading back the Inventory > General > Asset Tag of machine. Here is the script: #!/bin/bash #Set Field 1 to MachineModel machineModel=`ioreg -l | grep product-name | awk '{print $4}' | tr -d '<">'` /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -computerinfo -set1 -1 $machineModel sleep 10 #Set Field 2 to JAMF Binary version JSSVERSION=`jamf version` /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -computerinfo -set2 -2 $JSSVERSION Thanks in advance as

We upgraded our JSS over the weekend to 9.24 from 8.72. I want to keep an eye on the clients as they update their binary to 9.24. I don't see a way to create a smart group based on binary version. Am I overlooking something or is there another way to do this?

With Mac OS X 10.8.5, SSD(!) boot device and Casper 8.64 the console login of a client policy request(?) doesn't teminate: bash-3.2# ps -ax | grep console   75 ??         0:00.13 /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console or bash-3.2# ps -ax | grep console36678 ??         0:00.46 /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console This causes no login window screen and happens after reboot and logoff (eventually after login and other policy requests(?), because often there are more then one "loginwindow console" processes hanging with ??). I login via terminal ssh and have to sudo kill -HUP <pid of loginwindow console>. After killing all these processes the login window screen appears immediatly. Any ideas for a work around?

I work at a High School and we need to set up labs for testing. We have a local user account that we need to log in and some testing software to launch. We typically do this to make it easy for the testing coordinators; they just come in and the software is already up. Since I do not want to type the username/password manually on each computer, I want to use a script or command to do this. In 10.6 I just ran these simple AppleScript commands from ARD or saved it as a script and ran it via Remote: osascript -e 'tell application "system events" to keystroke "username"' osascript -e 'tell application "system events" to delay 0.5' osascript -e 'tell application "system events" to keystroke return' osascript -e 'tell application "system events" to delay 0.5' osascript -e 'tell application "system events" to keystroke "password"' osascript -e 'tell application &#0

Hello together, I'm pretty new to scripting on OS X and hope that one of you can help me with this. I have a script that is supposed to check if a certain app is installed, get its version and do something if it's not yet installed. #!/bin/sh echo "Checking installed version" minVer=“2.1.0” installedVer=`system_profiler SPApplicationsDataType | grep -B7 "McAfee Endpoint Protection for Mac" | awk '/Version/ { print $2 }'` if [ -z "$installedVer" ] then echo "McAfee Endpoint Protection for Mac is not installed" else echo "Installed version is $installedVer" if [ “$installedVer” == “$minVer” ] then echo "Installed version $installedVer is up-to-date" exit 1 fi fi echo "Installing Mcafee Endpoint Protection 2.1.0" exit 1 The script works fine when I run in in Terminal but when I execute it via Casper Remote or policy I get the following: Sending Wake On LAN command... Opening SS

Has anyone else noticed an issue when uploading Shell scripts via Casper Admin using 9.23? Each time I try uploading one, Admin throws an "error 500" saying that it could not write to the Master Distribution Point, and after restarting Admin, it will show the scripts name but that it is missing. DMG and PKG files are working correctly.

We've deployed a few hundred iPads and have only had this happen twice. When this particular user navigates to the Self-Service and tries to download any free app they're fine; however, when they've tried to download our two applications that were prepaid with Volume Purchase Program codes (Pages & Keynote) they're prompted to Install, then input their Apple ID password, and are followed with a notice stating: "The code you entered has already been used." Has anyone experienced this and how did you fix it? This happened for both the apps this user tried.

I am looking for an script which will run Microsoft Autoupdate.app and search for available updates. If updates available script will list out all updates. then with the help of script if we update the Microsoft office.

Hi, Does anybody know how to change the "Faux NetBoot" name of the NetBoot/SUS Appliance to something else? RegardsFritz

I can image all day long but my staff can't until they remove 3 of the packages I made. What would cause this? The 3 packages they had to remove we're Firefox chrome and office 2011. All made on a clean Mac using snap shot, made by me. These packages install fine via self service. ( have not tried office via self service but the 2 browsers we have.) I can image the same config no prob with all of them but they have to remove the 3 packages to be able too. It takes me 4-6 minutes to push this stuff, they force quit at 8-10 minutes.

Hi Nation, We are currently using the Required Password preference in Managed Preferences. When the lock screen kicks in, our users see a black screen and must type their credentials to unlock the screen. I've been asked to temporarily re-brand our lock screen. The goal is to replace the black screen with an image. Probably a .jpg. I'd appreciate any tips on how to get this accomplished. Thanks, G Lo

I have a post-installation bash script for a package where I want to have different logic to determine whether the package is being deployed via Self Service vs a policy. For example, I may want to have different jamfHelper messages to appear depending upon the method of deployment. I would keep the advantage of having a single package, rather than creating separate packages for each deployment method. I am at a loss as to how to determine the logic. I would appreciate it if somebody can point me in the right direction. Thanks.

Hello - I am wondering why the following apple script works fine in 10.8.x via manual execution and through Self Service - but in 10.9 it only works when manually executed but not through a Self Service policy? tell application "System Preferences" reveal pane "Sharing" activateend tell Any pointers?Appreciate any help.

We have 20 new Sharp copiers en route for delivery, days ahead of when they were regularly scheduled so of course I'm a little behind in deployment plans. We'll be rolling out the new copiers via Self Service of course to about 1500 clients. Question here on driver rollout. If I have say 5 different drivers that need to be installed on the clients, should I have a policy that runs to install the 5 manufacturer pkg files to all the machines, or use composer to create 1 pkg file that includes all necessary drivers? Last, install the drivers as part of the printer install policy in Self Service?

Hi,In casper focus, the teacher is unable to see the username of the student on his iPad until the name of the iPad is same as the student name. we have setup the usernames of the students in jss also we have assigned/ bind the iPads to AD users using Apple Configurator but the teacher doesn't know by looking the casper focus that which iPad belongs to which student. Any suggestion?

Hi all, I'm running into a strange problem while trying to create a new enrollment profile. What I've got:JSS 9.11 (Windows 2008 r2)iPad 3,4 (4th Gen, wi-fi) - iOS 7 (11A465)Apple Configurator 1.4 What happens:After creating a new MDM Profile in the JSS (no fields populated or boxes checked other than "Display removal notification in inventory"), it fails to install via Configurator. The error I receive is: "The server certificate for 'https://apple.this.sucks:8443//otaenroll/' is invalid." Code: 23002 Domain: MCHTTPTransactionErrorDomain However after cloning that same profile and checking the iPCU box for iOS 6, everything works fine. Any ideas? James

Since we updated to 9.22, every computer we enroll in the JSS gets our 802.1x wireless configuration profile installed but when you attempt to connect to it, it asks for the authentication credentials, which are supposed to come from that profile. So far we haven't noticed this with iPads. This is on both computers that are re-enrolled and new computers with a fresh copy of OS X.