I'm wondering if there is a way to configure Accessibility settings via Casper or script? It seems like something that should be in Configuration Profiles, as that would be the way to establish a trusted security chain for configuring this. Before I dig in and see if custom settings can control this I wanted to double check and make sure nobody else has already figured this out. What I want to do is define the list of apps under "Allow the apps below to control your computer" in Mavericks (or the equivalent in previous versions) so that AppleScript, A Better Snap Tool, TextExpander, and other applications that interact via Accessibility can function without requiring an administrator to approve them on every Mac.

Okay, so I've searched and searched and can't quite figure out how to add the 10.9 catalog URL to Reposado using the NetBoot SUS appliance. Any help would be appreciated.

When trying to replicate packages from our JSS to a JDS via admin client everything seems to be working in that the progress bar keeps moving and packages are showing as being replicated. But when looking at the share on the JDS there is nothing in the share and the "replicated" packages do not show in the file system. Both JSS and JDS are on Redhat 6.4 VM's. Also the share on the JDS has both owner and group as "root". Has anyone else seen this, or is there more documentation somewhere about how the JDS works?

How can one go about stopping clients from changing the Sharing/Computer name? --Matt LeeFNG Sr. IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper AdministratorFox Networks Groupmatthew.lee at fox.com<mailto:matthew.lee at fox.com> Need Help? Call the Help Desk at (310) 969-HELP (ext 24357) or online at http://itteam<http://itteam/>Help Desk Hours: Mon-Fri, 6AM-6PM PST

Hi all, Anyone had any experiences deploying Safari extensions? Can you share your experience & workflow? Cheers!

Anyone got a script that will create an FSTAB file from UUID at imaging? Or any hints on how to target the volume being imaged via script to write a file to it?

Would there be an easy way to delay the execution of a self service policy, if a software installation or script is being run in the background? I have an ongoing issue where a user attempts to execute a self service policy, but the policy fails because it 'could not mount a distribution point' due to the fact that another software package or script (running in the background) has already mounted the DP. Appreciate any help!

Anyone have a way for the "proper and correct" Search Domain name to appear in OS X Sys Prefs > Network > DNS > Search Domains. My last gig (after DNS was upgraded and corrected, with Infoblox hardwar, etc.), this info appeared automatically with the "new" and correct DNS Servers (names and IPs), and the corresponding Search Domain. All of which are "greyed" and pushed out (I suspect via DHCP). In my current environment we are picking up the old "legacy" Windows 2003 domain DNS servers with no Search Domain, Although OS X is adding an entry just called "local". I can enter the correct domain name and this resolves a host of things, but its the manual entry part. Any ideas on where this info lives in OS X. Hopefully the network people will implement the new DNS soon. thanks in advance, John

Hi all, First time post and trying out some of the tools. I found that when you take a normal screenshot with Composer and then proceed with installing the application, it provides you with a file structure of modified/new files which is great. However, if for example there are managed preferences or serial keys that have been modified within 'sinergi/Library/Preferences' and then a package is created. I am curious if this package will inherit users library preferences or if the package will create this additional path once the package is installed? Ideally, we have a lot of software with licenses (as many others have) so we tend to create software packages with the licenses included, how do you get around this using composer? Thanks.

From what I can see the only needed port is 8088; does this encompass the client getting everything it needs from the SUS, or do the more standard ports 80/443 need to be opened up as well? I am trying to get my ducks in a row before making the request to our network engineers to have the ports opened up.

Is there a possibility to change the language of JSS without changing the language of the Mac client? Since 9.x the JSS is automatically showing a german translation if the client is configured in german. Don't get me wrong. I appreciate that JAMF is offering a german translation now. But many of the translation is very strange and sometimes disturbing (or funny, depending on how you look at it.). ;) For example the tab 'History' in a clients inventory is named 'Anamnese'. 'Anamnese' is the 'medical history' of a patient, and not of a computer. The tab 'Management' in the same location is named 'Geschäftsleitung'. Which means 'company management', and not management of a computer. But the best one I found so far is in the PKI settings (External CA). There you can read the following sentence:'Durch das Öffnen der Klappe kann sich der Schlauch geringfügig verschieben, so dass die Blasen aus dem Bereich d

I am in the process of setting up a test jss running 8.73. I built up the new machine and keep getting this error Could not execute with administrator privileges. when I try to run the JSSDatabaseUtil to restore the database. I can run it from the command line, sudo java -jar JSSDatabaseUtil.jar, but something is off when I do that as well. It keeps complaining about using passwords from the command line and then the restore fails after about 15 minutes. Anyone else see anything like this? I am not sure if this is due to java security settings or something with 8.73

I need to create an extension attribute that checks the java keystore to see if several certificates have been installed. This EA is part of a larger report on SAP readiness for the Macs in our fleet. Does anyone know the commands to use to get this done? We are running OS X 10.8.2 and Java 7

One interesting feature I saw in the Google tool Munki/Simian (http://google-opensource.blogspot.com/2011/01/simian-mac-os-x-package-deployment-via.html) is that you can push patches to Macs even when they're off the corporate network. Is this possible with CasperSuite?

I might be overlooking an easy fix, but here goes... I am testing the process to update 10.8 machines to 10.9 using Self service... the caching of the package and installation work with no problems. Upon reboot and logon, the machine's inventory has not yet been updated, and as a result it still displays 10.8.x as the OS version. I have multiple policies that are triggered based on 10.9 OS, which impact the users initial experience. The question is, how can i best ensure that after these machines are updated to 10.9, the inventory updates when the user logs on for the first time after the upgrade (or soon after)? Thanks.

We are on the cusp of rolling out Mavericks to our users and our Network Admin is getting concerned about the strain of sending 1100 5.5GB packages ( almost 6TB! ) OTA. I did a little searching, but was unable to ascertain how/if Casper manages bandwidth usage. Is this something that is innately managed by Casper or do I need to stagger my deployment to meet our throughput limitations? He can also throttle the output from the distribution point, but I am concerned this might result in some very long download times if Casper pushes them all out at the same time through a small pipe. Any ideas / comments / insights would be appreciated

Hi! I am hoping that someone can clear up something I am having trouble wrapping my head around. To give you some back story, we have in the process of moving out Casper server from Mountain Lion Server to RedHat or Ubuntu. Currently we have the CasperShare, DB, and JSS all on one server. We want to decentralize our setup so that the pieces are all on separate servers. I have a virtual test environment right now, all running Ubuntu. So we have separate servers for the JSS, the DB and the CasperShare is running off our FreeNAS server. The question I had is how the heck would I setup to allow HTTP for downloads since the CasperShare is not on the sam server as the JSS. Is the article I found on JAMFNation, it says that I would need to use a symbolic link from the caspershare to /www/CasperShare. How can this be achieved if the share is not on the JSS? Here is the article in question: https://jamfnation.jamfsoftware.com/article.html?id=216

I have been having some issues with issuing the newest Microsoft Office updates on Self Service for all the staff and students. I download the update from the website and then open the .dmg file and pull the pkg file into Casper Admin and then make the policy on JSS. I did a few test runs but when it is almost to the end it will fail-is there something with the pkg file or the policy that I need to do something different with? Anyone have a quick fix with this?

Might be a quick easy fix, but hoping someone can help. I work at a school and manage 800+ computers (2013 MacBook Air) after adding game emulators, web browsers, and non-apple developer applications to the restricted software list, I'm finding students have been running things in the downloads/desktop folders.Has anyone else seen this and found a fix?Any help would be great,Thank you.

HiI've only been running Casper for 10 days so far so please excuse if any of this sounds pretty straightforward!We use custom company Office templates which are installed into the application folder on each mac that has the software installed i.e /Applications/Microsoft Office 2011/Media/Templates/xxxx. In the past I used ARD to first delete the contents and then install a fresh set of templates. The reason for this is that some of the files were removed or renamed and didn't want old files to remain in the folder.I want to achieve the same thing in Casper as it was quite time consuming and also machines were missed if they weren't connected to the network.I have packaged the templates and configured a policy which adds them to a new mac successfully. However I actually want to first remove the old templates folder and the MS standard templates, then install the new set of templates in their place. The package will need to be updated regularly as and when required and w

Is there a good way to get notifications of updates to App Store apps you're distributing via Casper other than having them installed on your computer?

I had an issue where I had to create a local admin user named admin on a few of our computers. What is the best way to get casper to remove that account so we only have the standard user left.

Hello JAMF Nation. I'm new to Casper and was wondering if there is a way to disable the "Checking for policies" pop-up when logging in and/or logging off? Thanks!

I've found one of the systems we have is not talking to our Casper server. It stopped two days ago. I can still ssh into the system and run recon. Below is the recon I ran. The recon gets to Locating package receipts... and stops. Running it in verbose mode gets lots of information prior to Locating package receipts... and it just sits there. Any hints at how we get the communication back up? Thanks in advance. bash-3.2# jamf reconRetrieving inventory preferences from https://ourserver:8443/...Finding extension attributes...Locating hard drive information...Locating hardware information (Mac OS X 10.6.8)...Executing Unix applications...Locating accounts...Locating applications...2012-09-06 10:54:13.723 jamf[8065:903] CFPropertyListCreateFromXMLData(): Old-style plist parser: missing semicolon in dictionary.Locating package receipts...

When I migrate to JDS's... Where does it copy my master deploy for first replication, my JSS sitting in the DMZ or the one sitting behind the dmz?