We have no managed profiles, no configuration profiles, no policies set at login or log out. What boxes do I need to check or uncheck to make that stupid pop-up window go away and my staff not take 1 to 2 minutes to log into their macs. This is actually ticking me off and its my program! LOL I have worked with JAMF tech support on this issue 2 different times and they have not been able to tell me what is causing this either.

I was wondering if anyone on the forums is using the JAMF SCCM plug 2.0 and what their experience has been so far. We are in the middle of getting it configured and it has been somewhat difficult. If anyone has any tips or undocumented workarounds please post or contact me off list. jbush (at) expedia (dot) com

Casper Admin is not showing the dock item for Google Chrome. I have tried running Casper Admin on multiple Macs with Chrome installed with no luck. Ctrl-click - options - leave in dock did not make a difference. Does anyone out there know how to get all dock items to show up, or perhaps a workaround?

We are looking to have a script run at logout that rsyncs the data from a Users (AD user) local Documents and Desktop folders to their shared drive that is already mounted on their system. The script that I had gotten working in terminal works well as it rsyncs the data just the one way from the local to the user share. I think though I need to modify it to use the $3 variable so Casper understand to run it on user logout and not system logout as this keeps failing. I may also think about trying to have it rsync the contents of desktop from the share back to the local desktop on login. We are doing this specifically for our elementary school students so its almost like redirection without using redirection lol. Any help would make me very grateful. Here is what I got with help from Ben Greisler:#!/bin/sh#By Ben Greisler ben@kadimac.com July 23, 2012klistuser=whoami #echo $klistuser pathb=$(echo `dscl localhost -read /Search/Users/$klistuser dsAttrTypeStandard:OriginalHomeDirect

For some reason, the JSS has started pointing machines to an incomplete URL for Apple updates. We use Apple's default, no SUS has been configured in the JSS but this is the log I get, both using policies or with the Remote app. Setting Software Update Server to http://:/index.sucatalog for all accounts... Installing all available Software Updates... Result of Software Update: Error: Could not connect to the server. Software Update Tool Copyright 2002-2010 Apple I've run the command sudo jamf removeSWUSettings just in case but since manual update works, I doubt it has anything to do with the machine prefs. I'm running out of ideas… Thanks

I have a user that wants to install AEM 7.1.1 (December '13) on his CS6. I ran Adobe RUM, but he said it didn't update to the 7.1.1 version. I so went back to AAMEE and told it to create an update pkg. The AEM only updates to 6.0.8. So I took the downloaded copy of teh AEM 7.1.1 and told it to add update, but it wouldn't because it wasn't supported by that version of AAMEE.

I feel like I'm missing something simple here.I'm imaging Mac laptops with Casper imaging. After installing a custom OS, my configuration is set to install Office 2011 followed by a couple of update packages.The configuration finishes and everything except for the updates get installed. Only base Office gets added. I'm using v 9.2 of imaging. Priorities seem to be set right too. Am I missing something? Thanks.-John

Is there a way to search for computers by Application version? I want to know which computers do not have Google Chrome version 33. I see you can search by Application but not by a specific version.

Hello,We have our student accounts defined as non-administrators, of course. However, we keep running into an issue when we push out new applications. They get the Quarantine notice that the application was downloaded from the Internet. However, they get this every time they open the application. So the Quarantine status never gets updated. We pushed out the "defaults write /Library/Preferences/com.apple.LaunchServices LSQuarantine -bool NO" setting to try turning off the LSQuarantine setting completely, but that doesn't seem to have worked. How should we be doing this? Tim

JAMFnation 4ever! JSS 9.23. All users running 10.8.5. Testing some scenarios out before implementing FileVault 2 on users' machines, I've noticed deleting an encrypted machine's record in the JSS and re-Reconing doesn't fill in the Recovery Key in the JSS. It recognizes the drive as encrypted in the Inventory tab, but lists Not Configured in the Management tab. Is there any way to repopulate that in this scenario short of decrypting and re-enabling encryption via the JSS? Thanks for any and all help! Michael

I am wondering if anyone has pushed iPad apps with Casper and tried to put them in folders on the iPads? I have a master iPad setup with all of the apps that were pushed with Casper in folders. I backed that up in supervision mode in Configurator and restored that backup to the rest of the iPads. Then I pushed out the apps to the iPads using Casper and they didn't go into folders. None of the folders even showed up. I tried it the other way around where I pushed the apps and then restored the backup and it creates the folders but doesn't install all of the apps or stalls out on them. Has anyone been successful with this? Thanks!

I am new to Casper Imaging. I have successfully created an image and on July 12th successfully imaged a computer using Casper Imaging 8.64. I then modified and recompiled the image and have had mixed successes and failures since then however none of these are showing up in the imaging logs. This makes troubleshooting the failures difficult. I am using the web portal (https://myserver.csd.loc:8443/autorunLogs.html) to attempt to view logs and the logs from July 12 are visible but none of the more recent attempts are. Also, in case it is important, my recent failures have been an apparent failure to create a login account on the new image and a failure to bind to a directory. Without logs or the ability to log in I am unable to troubleshoot further. How can I re-enable the creation of these imaging logs? Is there a server side log that can be referenced to see why the logs are not being created, or are not visible?

Does someone have a good resource for a thorough breakdown of how the APN + Managed preference technology works. Such as what data is being passed where and in what order, and what the purpose of each data transaction is? I have the list of ports and what direction the 'data' is sent on them, however I cannot find any specific information about what the data contains, and all of the previously mentioned parameters. I would think apple would have a breakdown of how their technology works other than "data on the ports and stuff to and from servers and clients", but I cannot find it. :) I found this however it is no where close to an official source and doesn't appear to be entirely accurate. http://www.justinrummel.com/how-apns-works-with-mdms-that-manage-osx-and-ios/

Our goal is to collect all the printers listed in the computer details printer window. We know it is in MYSQL. Just need to know which table it is in. When exporting the jamfsoftware printers table from mysql, all we get are the printers that were added to Casper. (network printers) The locally attached USB printers are in computer details with their serial numbers along with any network printers the user attaches to. Has any one been able to export this data? Which table is it in?

I am having an issue where I am not able to replicate out to my JDS instance. My experience is that I am able to see the JDS within Casper Admin, I hit sync and it mounts the webdav share, it looks like it starts to sync all the files, but at the end, it fails and the sync log produces many lines of the following: Output: <?xml version="1.0" encoding="UTF-8" standalone="yes"?><uploadResponse><id>20</id><md5></md5><message>Error uploading file to the JSS:java.io.FileNotFoundException: Temp directory not initialized</message><receivedSiw Within Finder, I am able to read/write to that webdav share but Casper Admin 9.24 never does a thing with it. So what is causing this and what can I do to correct it?

I was wondering if anyone has ever automated the Lync login based on the AD account logged into the device? I was attempting to use AppleScript and "Tell Application" to set up the account but Lync doesn't seem to have an AppleScript dictionary. Sincerely,T.J.

hey all, I've been thrown a quick project for installing Vjoon K4 Plug-ins for CS6, but we are getting little support from the vendor, so i've decide to attempt a repackage with Composer, and hoping someone out there has done this before. Normally there is an install app called vjoon K4 Clients for Adobe Creative Suite 6.app, which apparently places a Vjoon K4 folder in the Indesign and InCopy folders. this unfortunately seems hit or miss. In CS6 we also have a plugins folder also located at /Library/ApplicationSupport/Adobe/Plug-Ins/CS6/ and one of the things it does is run a few scripts that disable items in Extensions manager. If anyone has experience, can i just go to the /Library/ApplicationSupport/Adobe/Plug-Ins/CS6 instead of placing duplicate plugins in idesign and incopy? Any help would be appreciated.

I have a problem where the JSS has too many logs saved (I think the default setting was one year), to the point where the JSS/Tomcat hang when I try to view logs for some policies (like the daily inventory policy) and stop accepting incoming connections. I usually have to reboot the server to restore service. What's the best practice for keeping policy logs from backing up to the point where this occurs? How do I safely clear them out if the JSS can't even process them? I'm worried if I change the retention date to 90 days, it will kill the JSS/MySQL.

Over the weekend I upgraded our JSS to v9.24. All is workingwell but I am seeing 1 small bug in Imaging. Following the instructions onJamfnation <https://jamfnation.jamfsoftware.com/article.html?id=67>, Iupdated the version of the Casper Suite in my netboot image but every timeI kick off Casper Imaging with this netboot image on a client, I always getthe message "Casper Imaging is an application downloaded from theInternet. Are you sure you want to open it?" Thinking its because the original image was created with Gatekeeper on, so my question is, how can I edit this netboot image to "allow from anywhere" so I don't have to create a new netboot set?

Good day JAMFNation! All machines are running 10.8.5. JSS is 9.23. I've never dealt with FileVault in a non-security preference pane capacity. I've been following JAMF's guide at http://resources.jamfsoftware.com/documents/technical-papers/Administering-FileVault-2-on-OS-X-Mountain-Lion-with-the-Casper-Suite-v9.0.pdf and rtrouton's keynote at https://derflounder.wordpress.com/2013/10/17/slides-from-the-filevault-2-session-at-jamf-nation-user-conference-2013/, which has been an incredible resource. In JAMF's guide, there are instructions for exporting an institutional recovery key with a private key and instructions for exporting one without a private key. Rtrouton's keynote similarly has him exporting both, one with a private key and one without. Then he creates two Disk Encryption Configurations, one with each of his exports ("FileVault with Institutional Key" and "FileVault with Institutional Public Key"). When might you use one

Hi Folks, I'm very new to JSS Casper so please bear with me for this basic question :) I've a management account & its password defined however I need to change the password so that whenever a new machine gets enrolled, the new credentials should be applied at the new enrolled machine. I created a new Quick Add package through Recon defining a new password but this package is not being picked by self enrollment portal & machine still having the old password of management account. Can somebody guide me how can I change the password of management account in Quick Add package which is being downloaded dynamically through enrollment portal. Do I need to make the changes under JSS-->Computer Management--> User-Initiated Enrollment for Computers or somewhere else? Any help would be greatly appreciated!

Hello everyone, We are planning to start encrypting the drives on our Mac devices and wanted to reach out to all of you for advice on the best enterprise system out there. We are currently testing FileVault 2 as it is already built in but we think is not at the point we want to. Just to explain, and hopefully someone has a workaround, to decrypt or unlock a drive I need to always have the user's password. I thought that by having the recovery key any of the tech support associates would be able to proceed with a reimage process without the user's intervention to type the password (Individual and Institutional setups both require the users' credentials to unlock). Trying to mimic a Bitlocker setup on the Windows side in which by typing a recovery key you are able to access the data and therefore decrypt and modify the HD structure. So being this the case, we would like to try a 3rd party product and wondering which one is the best out there. Thank you

Hey all, Anyone know if there is a way to get the Inventory > General > Asset Tag of machine read from the jss and get that into the ARD fields? I use the 4 ARD fields of my machines.ARD 1 is populated by a script the reads the IOREG > Machine ModelARD 2 is populated by a script that reads the jamf versionARD 3 is manually typed in with the Build DateARD 4 would like to populate by reading back the Inventory > General > Asset Tag of machine. Here is the script: #!/bin/bash #Set Field 1 to MachineModel machineModel=`ioreg -l | grep product-name | awk '{print $4}' | tr -d '<">'` /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -computerinfo -set1 -1 $machineModel sleep 10 #Set Field 2 to JAMF Binary version JSSVERSION=`jamf version` /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -computerinfo -set2 -2 $JSSVERSION Thanks in advance as

We upgraded our JSS over the weekend to 9.24 from 8.72. I want to keep an eye on the clients as they update their binary to 9.24. I don't see a way to create a smart group based on binary version. Am I overlooking something or is there another way to do this?

With Mac OS X 10.8.5, SSD(!) boot device and Casper 8.64 the console login of a client policy request(?) doesn't teminate: bash-3.2# ps -ax | grep console   75 ??         0:00.13 /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console or bash-3.2# ps -ax | grep console36678 ??         0:00.46 /System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow console This causes no login window screen and happens after reboot and logoff (eventually after login and other policy requests(?), because often there are more then one "loginwindow console" processes hanging with ??). I login via terminal ssh and have to sudo kill -HUP <pid of loginwindow console>. After killing all these processes the login window screen appears immediatly. Any ideas for a work around?