I am trying to clean up the results that report back on my EA. I am sure this is something simple but my eyes are getting cross-eyed trying to get the correct syntax. I have an EA that reports back the board-id of the systems. echo "<result>$(ioreg -p "IODeviceTree" -r -n / -d 1 | grep "board-id")</result>" reports back "board-id" = <"Mac-6F01561E16C75D06"> To delete the "board-id" = I added the | awk '{print $3}' echo "<result>$(ioreg -p "IODeviceTree" -r -n / -d 1 | grep "board-id" **| awk '{print $3}'**)</result>" reports back **<"**Mac-6F01561E16C75D06**">** To delete the "" I added the | sed s/"//g echo "<result>$(ioreg -p "IODeviceTree" -r -n / -d 1 | grep "board-id" | awk '{print $3}' **| sed s/"//g)**</result>" reports back **<**Mac-6F01561E16C75D06**>** To delete the < I added the | sed s/<//g echo "<result>$(ioreg -p "IODeviceTree" -r -n / -d 1 | grep "board-id" | awk '{print $3}' **| sed s/<//g**)&

Afternoon everyone,Can anyone clear up my uncertainty....I recently downloaded Mavericks via the App Store using my own own personal Apple ID. I'd like to create a Mavericks configuration and am uncertain whether or not my Apple ID will be permanently linked with Mavericks as it is with other apps. Will users be able to update to the next release of OS X without knowing the Apple ID and password that I used to download Mavericks originally? Thanks,Kevin

So i've been trying to find out why our DMZ HTTPS DP isn't working anymore. Turns out it's entirely due to the version of curl present in 10.9. (curl is used by the jamf binary to get scripts and packages from HTTPS distribution points it seems). I'll quote the relevant part of this link: http://curl.haxx.se/mail/archive-2013-10/0036.html ... In Mavericks, Apple changed from curl 7.24.0 to 7.30.0, and in the process, they switched the TLS/SSL engine used by their curl, from OpenSSL to their own Secure Transport engine. Apple's OpenSSL is still at version 0.9.8 and I doubt they will ever upgrade it, so this change improves curl's security. This is because the new engine supports TLS 1.1 and 1.2, and many new-ish cipher suites not supported by that old version of OpenSSL. Problem i've noticed is this has broken our basic authentication on the server unless I force the "-3" option. I've already flagged this to JAMF in a problem ticket.

I Have 800+ students renaming restricted applications (games) and playing them from the desktop.Each time I block, they rename.Any hints on how I can stop this?

What do the parentheses do when adding criteria to a smart group? What's an example of where you would want them and where you would not?

JAMF Nation I know there is probably a easy terminal command or script to make a program relaunch once close. My company uses Messages for a IM with bonjour configured. End users keep on closing the program so they aren't available. Is there a way to script or managed preference to keep messages open?

Removing SpeedGrade CS6 resolves the recon issue and allows the updated inventory for that machine to be submitted to the JSS. We didnt have this issue in JSS 8.52 since upgrading +- 2 weeks ago to 8.62. Its our clients with CS6 Mastercollection that are not being reconned. After further investigations it seems that its only clients on 10.6.8 and 2 clients on 10.8.2 that are effected. Is anyone else experiencing this problem?

JAMF recommends to setup one Payload per Configuration Profile. Should this practice be followed even when the iPads are Supervised using Apple Configurator.

So I can successfully upgrade machines using the "drag and drop" of the installer into Casper Admin per the steps from the following document: http://resources.jamfsoftware.com/archive/Deploying-OS-X-v10.7-or-Later-with-the-Casper-Suite.pdf My question is how to run a policy or script of my choosing once the upgrade is compete. Since this is installing OS version dependent AD plugins the users will not be able to log in until this step is complete so it is imperative that it is done. The process currently looks like this: Cache Installer -> Make Policy Available in Self Service -> Run Script to unjoin machine, leaving the computer account and removing the OS Dependent plugins -> Reboot/Upgrade Any ideas or suggestions on how to accomplish this would be greatly appreciated!

Is there a way to automatically flush failed policy logs so that the policy is made available again in Self Service without an administrator having to flush the log manually?

We are unable to recognize a mounted DMG in System Image Utility with the goal of creating a Mavericks Netboot Image. Casper Suite 8.73 MBA Laptop A11 inch, Mid 2013OS: 10.9.1Configured as a base netboot image, using the guide "Creating a NetBoot Image and Setting Up a NetBoot Server"https://jamfnation.jamfsoftware.com/article.html?id=307and the guide "Creating a Minimal Base OS Image"https://jamfnation.jamfsoftware.com/article.html?id=313 MBA Laptop B11 inch, Mid 2013OS: 10.9.1Installed Casper Suite 8.73Used Composer to "Build an OS Package" of Laptop A's OS via thunderbolt target disk modeDMG Size: 6.52 GBMounted newly-created DMG, shown as 'Macintosh HD' (technically 'Macintosh HD 1' according to ```df``` command)Installed Server app 3.0.2 from Mac App StoreOpened app: /System/Library/CoreServices/System Image Utility.app Result: Drop down menu is grayed out with "No sources found" message. I've tried this sa

Hi... we configured manually some informations in ARD fields 1 and 2 in our admin console in casper. We want those information to be copied locally in the same fields on the specific computers... but those information does not seems to be copied onto computers... is there a way to do this ? so... : Some informations in ARD fields 1 a 2 in casper ... to be copied into ARD fields 1 and 2 on computers...

Wasn't there a discussion here about Geek Tools? Try as I might I can't find it anywhere any more...

I'm hoping to provide a way to take a Mac, quite literally, directly out of the box and image it (having never run Setup Assistant). I can disable the setup assistant, but the problem is that the management account does not seem to be added to the Mac (let alone the other account I'm trying to add via script). Is this just not possible? MUST the Setup Assistant run before we can image?

Currently I'm working on deploying a Windows 7 VM. However its tied to a MAK and only has x number of activations on it. I know I can scope it to outside of our network, but I'm unsure how to scope it to only run say, 300 times, and then not allow users to run again.

I have two JDS servers, no other distribution points. For some reason, no matter which "Default JDS Instance" is specified for the network segment that the computer is on, Casper Imaging will default to the first JDS, which is the master. I have tried a couple machines now on different subnets. After imaging, the client machines seem to be getting packages from the correct JDS, as expected. Is anyone else seeing this behavior?

I'm trying to test the password recovery option with FileVault, where you type your password incorrectly three times at the boot login. I get the prompt to enter the recovery key, i enter it and then it boots to the login screen where i'm prompted to enter a new password for my encrypted user. I enter a new password and it just shakes it off. I'm forced to enter my actual password. This is a Macbook Pro running 10.9 and i used JSSv9.2 to setup filevault2 with an individual key and institutional key. This is an AD bound user with a mobile account(which now that i think about it, might have something to do with the problem). Summoning @rtrouton][/url][/url][/url EDIT: I enabled a second standard user with FileVault and tried this with that user and i was able to reset the password. So, the issue seems to be with the AD bound user only. Found another thread on the topic: https://jamfnation.jamfsoftware.com/discussion.html?id=7400

Hey everyone! I am not too sure if this can be done but I am looking for a way I could block the Chrome Web Store within the browser then package Chrome for Self Service. My students have been finding more and more ways to make my days very long and stressful!! Or I am wondering if taking Chrome away would be the best bet for next year? I am open to any suggestions Thanks

Hi guys, I am pretty new with scripting and really don't have an idea how to solve my problem. And as I learned from JNUC '13 - never script alone :) Hope you can help! Unfortunately I have some Apps running with the wrong permissions, meaning kids can write into the package content to run other apps like Terminal or so. Now I wrote a script to see if the application is existent, if yes the script should check if the process is running, if yes kill process, mv the corrupt app to Utilities Folder (totally blocked for my students) and re-install a fixed version via policy trigger. So far everything works fine if I declare my variables in the script, but I would like to use it a little bit advanced by using the JAMF script parameters, so I could use the one script for similar problems. May you guys could check my code and let me know what I am doing wrong. The Script always stops working before it mv the app, equal if App is running or not :( Thanks in advance!Fabian #!/bin

Printer: imageRUNNER ADVANCE C5051Driver from Canon site: PS_v3.60_Mac.zip which covers Intel Mac OS X v10.5.8 - v10.8.0.Installed, configured, and added printer to Casper Admin from OS X 10.8.2.I also took the driver installer package "Canon_PS_Instraller.pkg" and added it directly to Casper Admin from the downloaded installer dmg.I have packaged presets (in a dmg) which I have at a lower priority which are being installed after the driver.I have a Policy to install everything.The install process from the policy is a success, yet during normal, local install on any machine, there is pop-up after the printer install finishes which asks for unidirectional or bidirectional. This pop-up doesn't exist when installing via Casper policy.I'm installing on a 10.6.8 client using Self Service everything seems to install fine. All settings are captured and the printer appears with the presets.When trying to use the added printer, the queue stops and never finishes.So any ide

Hello, Just wanted to get some clarification on some of the fields in the Directory Bindings setup since I am using MS Active Directory: Under mappings, are these to be mapped to attributes in Active Directory? What is the use case?Under administrative, is the "Allow administration by" field use to add these groups as admins on the computers or just to connect it to the domain? Thanks! Shawn

Preparing to begin packaging and was curious of any gotchas.I saw a couple PDFs here for CS5 and CS5.5, but the links lead to dead ends and a search didn't yield me anything.

Using JSS 9.22 and OS 10.8.5 and 10.9.x - when I try to add a printer via SS, they don't show up.I verified the policy is set to "add" the printer, but they never appear. the Logs show the printers were added successfully.

Hi.We provide some applications through Self Service where we want to deny the traffic for it on the systems firewall. We tried the following to block the application sudo /usr/libexec/ApplicationFirewall/socketfilterfw --add /Applications/APP.appApplication at path ( /Applications/APP.app ) added to firewall sudo /usr/libexec/ApplicationFirewall/socketfilterfw --blockapp /Applications/APP.appIncoming connection to the application is blocked If we check the App list it show the following:ALF: total number of apps = 1 1 : /Applications/APP.app ( Allow incoming connections ) We are not able to block the application.Any suggestions on that problem? Thanks,Maik

Hi, Since we have update to JSS 9.22 our tech-group seems to have lost the Privileges to get the restore key for FV2 when logging on to the Management server. looking at the privileges it has the "view Disk Encryption Recovery Key" checked but clicking on the "Get Filevault 2 Recovery key" just gives out a blank. Anything else i Need to enable to give them the Access ? Thanksannika