Is there a way to re-deploy a configuration profile that was only made available in Self Service? E.g. I have our Exchange configuration available in self service Profiles tab to assist staff and students with their email configuration. I assumed that if I removed the profile from Settings / General / Profiles that it would show back up in the Profiles tab of Self Service but in reality that hasn't happened. Any thoughts or suggestions are appreciated!

Hi all, Just wondering if anyone of you guys know or had experience setting up multiple NetSUS instances on different sites that are all on different subnets?Can you setup one of the NetSUS to be your master SUS and have the other instances sync to the master?How can this be done? Thanks in advance.

I am setting up a new JSS on Windows Server 2008 R2 64-bit and have hit a snag. I have the JDK/JRE version 1.7 installed, but the JSS installer fails telling me "The JSS requires Java 1.6 or later to be installed to function properly. Please verify that you have Java 1.6 or later installed and try running the JSS installer again." I've verified my PATH includes the JRE bin directory. Does the JSS really need a java version from the 1.6 family?

All, We're testing a domain migration from AD-A to AD-B. Basically the workflow I am using is: dsconfigad -remove to remove the Mac from the old domain, then dsconfigad -add <options> to bind to the new domain. This all works fine. The issue I'm running into is when the user account (migrated with ADMT from old domain A to new domain B) tries to log in after the domain move. I get the "Unable to create mobile account" error on login. Usually this has meant permissions aren't set right on the users homefolder, but not in this case. I thought maybe the cached AD account on the Mac might be causing a problem, so I've been moving the homefolder outside of users, then using dscl . -delete to remove the user account, then moving the homefolder back and setting permissions on it. I still get the error message. If I don't move the homefolder back the Mac creates a new mobile profile just fine, so it's definitely something inside the homefolder.

I cant upload the apple signed .pem file to JSS using the Push Notification Certificate Assistant with JSS hosted on Win 2008 R2 servers. In the "Upload Cert" field will reset to no files selected and show "You must upload your certificate" message in red at the top every time I select the .pem file and click continue. See the linked pictures for better understanding .. external image link external image link JSS Ver.:8.6Server OS: Windows 2008 R2 Also I have tried Safari, FF to see if this is a browser issue but both browsers have the same issue. I have been successful with uploading the .pem file from connecting to a JSS 8.6 WebApp hosted on a linux server in our DEV environment but we need to get this sorted as all our PROD servers are Windows Server 2008R2. Thanks.

Curious if anyone else tried to use that discount code from JNUC for Macworld 2014 and now the discount is not working? Was their some kind of Cut off date to book by for it to work? Kind of hugely disappointed on this.

I'm testing out imaging a new computer from our JDS server via Netboot. When I go through and select everything, I get a popup stating "The certificate for this WebDAV server was signed by an unknown certifying authority. You might be connecting to a WebDAV server that is pretending to be "jds.server.com", which could put your confidential information at risk. Would you like to connect to the WebDAV server anyway? The buttons are Show Cert, Cancel and Continue Is there way around that popup?

I Have the following problem:I have to create a script that does nothing more than copy a folder from destination A into the home-directory of the actually logged-in user. The script should be executed by SelfService.The idea is to have the source folder as parameter value $4, the actually logged-in user as parameter value $5 and the destination as parameter value $6.I use the following values:$4 = /private/tmp/Folder_A$5 = `ls -l /dev/console | cut -d " " -f 4`$6 = `/Users/$(echo "$(ls -l /dev/console | cut -d " " -f 4)")/Documents/`If I test the script in a terminal window it works fine, but if I execute it by SelfService, the values in $5 and $6 are not executed as values but as text instead. The result is an error message: 'Script result: cp: `/Users/$(echo "$(ls -l /dev/console | cut -d " " -f 4)")/Documents/`: No such file or directory…' Value $4 works fine. I already tried to cut the leading "``" without succ

For years, we have been having our end-users add printers via Self Service and it's worked flawlessly. Recently, we're seeing the following behavior: 1) End-user adds a printer(s)2) CUPS is supposed to stop itself and then restart, but this doesn't seem to be happening.3) The end-result is that no printers are listed in the "Print & Scan" system prefs pane. A few notes; - on a machine where this has occurred, when I try to restart CUPS at the command line using sudo launchctl start org.cups.cupsd but it does not actually start CUPS again. I know this because browsing to http://localhost:631 on the machine returns errors like "Cannot connect to server"- a restart of the system actually gets CUPS running again and the just-added printers show up, but we don't feel it's acceptable to ask our end-users to have to restart their system just for adding a printer. This *used* to work just fine all the way through Casper 7.x to Casper 9.2.1.

I'm re-architecting away from an all Mac OS Casper infrastructure. Can a JDS and NetSUS coexist happily on the same RHEL VM?

We previously used FileWave, which what the computer was removed from the group, the application was also removed. We've now got most our install policies setup, but since Casper doesn't auto-uninstall an app when a computer or user is removed from a group, what is the best method or industry standard among users for processing uninstalls?

I have a syntax issue I am hoping someone can help me with... I am trying to write to $HOME/fubar upon user login with a BASH script ran as a policy within JAMF. I was thinking that $3 would return a username of the user logging in (lets say the local user is smith.1 who has just logged in, so $3=smith.1 and his homedir is /Users/smith.1/). Now if I say, ```touch ~$3/jamf.txt I would then expect in the root of smith.1's homedir to see jamf.txt, aka /Users/smith.1/jamf.txt Alas, this is not working and it seems that while *3=smith.1* an ``` ls ~smith.1 returns "No such file or directory" within a debugging phase of my script and thus the rest of the script fails. My question is, how does one create a script within JAMF that understands who just logged in and writes a file to that user's homedir and what then does $3 do for me? To borrow another post's code, for example sake, why does the following fail? defaults write ~$3/Library/Preferences/com.ap

Hi All - I've noticed that after upgrading to Mavericks, I am having to reinstall Java 6 in order for SEP LiveUpdate to work properly. I know that Mavericks disables Java 6, but is there an easier way to re-enable Java 6 rather than reinstalling the client?

I'm attempting to update the JSS from v9.21 to v9.22 on a Windows 2008 R2 (SP1) Server without success. The JSS Installer runs until the 'Upgrading web app and starting Tomcat 7 service...' stage and then produces an error: 'There was an error installing the JSS, please check the JSSInstaller.log located at C:WindowsTemp' The log file reads: Restoring DataBase.xml...Restored Database.xml.Starting Tomcat7 Windows Service...There was an error starting Tomcat. So it is not obvious why Tomcat cannot be started. Disk space is also not an issue. Any advice would be greatly appreciated.

We have our Macs set to auto-logout after 5 minutes of inactivity. Is there a way to script a dialog box to come up before the logout? Something along the lines of: "You are about to be logged out due to inactivity. Press continue if you wish to continue using this computer." Then, if they don't click continue, they are forced out.

Opening the site in Firefox 24.0 ESR, when I am editing a script, select some code, and hit <CTRL> -C on the keyboard the cancel button in the window is invoked..... You cannot right click on the text and click copy either.... A: If any changes were made to the script they are lost!B: If you did it to move lines of the script elsewhere in the script you have to go back into edit mode to paste them. Was the cancel button actually mapped to CTRL-C by JAMF programmers or am I overlooking something obvious? I'm using JSS 9.2

I was browsing reddit and came across this in /r/Applehelp: external image link Along with this request: external image link Thank you to Damien Barrett for upholding the K12 IT Admin Code!

I'm trying to enroll 20 AppleTVs via Configurator. I've called Apple support 3 times on the issue, each time the phone call lasts over an hour and I have to end the call to do other things. Still no resolution. Here's the scenario: When you plug the AppleTV into Configurator, it pops up a setup assistant. You select Enroll > Casper MDM from the first screen, then it will prompt you for the device name and other profiles you want to install. Then you click Next again and it will wipe the AppleTV, install the latest software and reboot your ATV. As it's walking through the final configurations after reboot, it gets to the step "Updating device properties." It sits there for about 30 seconds and then errors out. The error is:Unable to update device propertiesError details: The operation timed out. Code: -402653172 Domain: com.apple.mdk.amderror If I skip Enroll (and therefore cannot set a name nor a WiFi profile, thus removing 90% of the re

Setting the following variable to gather the user logging in and utilizing it via sudo used to work. The command now reports the console user as root. I have no idea when the behavior changed. When I setup the script initially it was working fine. That was Casper ver 9.1. Now at 9.22 it doesn't work. I have no idea if it is related to the release version or not. consoleuser=ls -l /dev/console | /usr/bin/cut -d " " -f 4/usr/bin/sudo -u $consoleuser CMDHERE before this would result in:/usr/bin/sudo -u johndoe CMDHERE now it results in:/usr/bin/sudo -u root CMDHERE Getting the value for the last logged in user out of com.apple.loginwindow.plist gets the last logged in user, not the current. IE, the script is running before com.apple.loginwindow.plist is updated. Has anyone else seen this? I've seen people recommend using a launch hook. I'd prefer not.

We are a private High School in Northern California and are about to implement a 1:1 iPad program for our 1800 students. We decided that we did not want our students to be able to download any app they wanted from the Apple App Store and have elected to upload the Apple Apps we will provide (eg Keynote, Numbers etc) as JAMF In-House apps. We have bought sufficient VPP codes to cover our needs so we can alway demonstrate that we have legally purchased the apps we distribute this way. There are a couple of twists that need to be followed to make it work, but the end result is what we want. That is no App Store on the iPad but the ability to distribute Apple apps. Neither Apple or JAMF officially support this solution. Anyway enough of the background... We have hit a problem with one app out of the 20 or so we have set-up this way, Pages. An iPad can download Pages as expected, but as soon as JAMF executes a inventory of the iPad, it removes Pages from the iPad. Has anyone else encou

Not exactly sure why - but for some reason whenever I run softwareupdate -l from a 10.9 box, it says no updates available with our internal SUS. The internal SUS is 10.9, and shows patches are available in the Server.app If I do a sudo jamf removeSWUSettings and then do a softwareupdate -l then it shows available updates.

For Safari 6.1, has anyone come up with a way to manage trusted sites? Safari: About Internet plug-in managementhttp://support.apple.com/kb/HT5954 Example, we have a dozen sites that use Citrix, Flash, etc., that we don't want users to get prompted about. Is there a way to prevent the prompt for the list of sites?

I had an old CS4 package that was improperly removed from the JSS. I think it was manually deleted from the master CasperShare directory, and then later from CasperAdmin- or something stupid like that. Anyway, the package absolutely is not on the JSS, not present in Casper Admin; but every time I sync a DP, I get: ERROR: Cannot copy AdobeCS4DS.dmg (AdobeCS4DS.dmg) because it does not exist on the master distribution point.Any ideas how I can eradicate this ghost for good?

Okay...so we are starting our second week with Casper Suite and during this process we provided our network diagram of what we wanted to do and was told it would all work. Well....not so much. So here's a question for all of you on one of the "hiccups" we are experiencing. We have 3 JDS's with obviously 1 root (A) and both children (B & C) talking directly to A. We have B & C in a DNS Round Robin which works great, we haven't had any issues with that, but our idea was that A would not serve any clients except as a NetBoot server, but wouldn't actually serve packages. A is really more of a backup repository I guess. So the question is.... Is there anyway to "block" clients from trying to get packages from JDS A? We only want the clients to get packages from JDS's B & C which are in a round robin (jds.company.com). I did see that we can use network segments to setup default JDS's that would trickle down to the computer, b

Can someone please confirm that the Casper Management Logs (Imaging, Application usage, Remote usage, etc) are gone in version 9? If so then this is a tough hit for us - we have been reporting metrics from these logs to our management throughout our Casper deployment. I guess now I have some explaining to do...