Hi... is it possible to publish through self service certain amount of pdf files like procedure.... for specific computer group or active directory group ?

I deleted a bunch of old files off the root server via C.Admin. Now when I scroll down to JDS Instances and hit replicate it errors out saying it can't find the packages (duh). What am I doing wrong?

First post jamfnation... With 10.8.X we were able to setup a default dock with the Apps we wanted by modifying and then fixing permission on the plist:/System/Library/CoreServices/Dock.app/Contents/Resources/English.lproj/default.plist After making the changes we wanted, any new (English speaking) users that would login would get our customized dock. We are a pretty open environment, and I wanted to let the user change their dock like they prefer, so I don't want to enforce any dock items, just build a standard one. However, with Mavericks this no longer works. I can see that there is now a directory en.lproj instead of the English.lproj, but I would expect that deleting a user's com.apple.dock.plist in /Users/<username>/Library/Preferences and then killing the dock would force it to pull a new copy of the default.plist. Deleting that com.apple.dock.plist is not resetting the dock at all. Does anyone know where Mavericks is saving a user's dock information? Doe

Hi All, We use Remote desktop at the moment and have just recently introduced JSS/Casper into the environment my question is how would you go about importing all your machines from remote desktop to JSS/Casper? Thank SEN73

Hello, We are in the process of switching from Windows 7 tablets to MAcBook Airs. I'm working on writing an Applescript that will migrate a user's backup data from the tablet into the correct folders on the Mac. I've got the script pretty well ironed our, but now see that I need the variable for the logged in user. I have tried set user to do shell script "/usr/bin/logname" and set user to do shell script "/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }'" but they both result in an error on the JSS of: Script result: /private/tmp/MacPCDataRestore.scpt: execution error: No user interaction allowed. (-1713) Any ideas on how to accomplish this in an Applescript? I could do this all as a shell script, but I wanted to be able to pop up dialog boxes letting the user know what was happening. So the other option would be how to display messages from a shell script. Thanks, Tim

For reasons beyond of my control push connectivity is not permitted in our organization, so I cannot enable configuration profiles from my apple server. I was able to manually configure JAMF to enable configuration profiles but I would like the ability to export the configuration profiles a la iPhoneConfigUtility. Is there a way to export profiles created via JAMF?

With the changes to 10.9's app store lock down and the config profile not working through the JSS/APNS push, is there a way to download the config profile and then bundle it up so it gets installed via the deployment workflow?

This is a hidden feature that was worked in last summer but currently if you do not include CN=$PROFILE_IDENTIFIER in the subject name for the certificate your certificate will expire and never renew. When you add CN=$PROFILE_IDENTIFIER to the subject name then click on General mandatory you will have an option below Level computer/user drop down that appears "Redeploy Profile". This is how frequent it will redeploy the profile which will delete the existing Certificate and deliver a new certificate. One thing to consider is like in our environment you have to be on the network to see our CA. So I have our profile scoped to all computer but they have to be on networks that have access to the CA. This way if they do not have access to the network it doesn't remove the certificate leaving the user unable to connect to our VPN solution.

Hey All, We upgraded our Casper 8 to Casper 9 and found a few problems today. I now can't search by computer name (without a full user's name)example: To Find John Doe's Macbook Pro I used to be able to search for John and get all Johns, then click on the one I want. Now I must search: John Doe. Is this by design? I also use the peripherals page with menus to keep track of assigned equipment. Now I can no longer edit my peripherals pages (adding new entries in the computer account, for example.) I tried adding a new peripheral (to see if the old ones didn't migrate correctly) and that didn't seem to work. Any ideas? Thanks!

Figured id ask, Im sure this have been covered before, I have 11 Systems running 10.8.3 to 10.8.5 that i want to upgrade to OSX 10.9. In the past i Used my Macbook Pro running OSX server and had a netinstall image of OSX and upgrade them using netInstall, Id like do this again or if anyone has a better way to do this with a 3rd party software id love to hear it, Also i have not made a net boot image of OSX in a long time so any refresher on that would be great. I plan to go about this on Thursday at a remote site and wanted a quick and easy way to go about it without just using Flash Drives or copying the file to a Master system and then copying it to each System as i Upgrade them. Once again Im casperless and pretty much use ARD to manage my systems, Id love to find a way i can do this via ARD but nothing really stands out other then creating some kind of automator Script.... again Suggestions welcome thanks you@

I have students that are changing the times on their iPads. I'm finding out that some of them are doing it in order to install something called GBA4iOS, which is a Gameboy emulator. Wondering if there is a way to detect if/when kids rollback the time in order to install "stuff" like this? Thanks,

The jamf binary can be used to add mcx, curious if there's a way to remove mcx? The reason I ask, sometimes there are hidden functions that don't show when pulling up the jamf binary help pages. $ jamf -help mcx Usage: jamf mcx Usage: jamf mcx -username <username> -username The username of the account that Managed Preferences are being applied to. Notes: When run without the -username flag, Managed Preferences are applied for the Computer Level. $ TIADon

What if you actually want to use the iCoud Key-chain in your AD environment? Let me give you the cliff notes on our set up. (Keep in mind I inherited this system I am the new help desk manager) - 500 plus Mac users. (we enable root and admin account, then add users. They are ALL local admins. Yeah I know bad idea.) - Bound to AD.- First.Last and AD password is required to log into their mac. -Password set to NEVER expire. (yeah I know bad)- 120 iPads and growing. -Windows Servers. (we still have a bunch of PC's)- Staff Wi-Fi is accessed by the users AD credentials.-If someone has to have their Mac repaired or serviced they simply write their user name and password down and hand it to my staff! (Yeah I know even MORE of a bad idea.) With that said I have my orders.... NO CHANGES to the Password system unless I can make it easy and SIMPLE! Here is what I would like to have happen. 1. If the user goes to System Preffs and changes their user password I want it to change the ke

SO this is just a general question just to see what others are doing, maybe someone has a great method that's better then ours. Basically, im trying to evaluate our work flow to see what would work best, we have alot of systems like im sure most of you do that are system that had Firewire 800, no thunderbolt, or even some that have no firewire and just USB (2008 macbooks), This causes us to run into some clunky issues of having to have adapters, or cloning the systems to a DMG, most of our external drives also are Firewire 800, so we have Firewire 800 to thunderbolt adapters. Im thinking thiers a better way to handle Migration assistant clones, or 1:1 clones using maybe deploy studio or just attaching a large external drive to our Mac pro server and using it for DMG clones and mounting the image to migrate it or 1:1 clone. At the moment, its kind of a mixed bag, we sometimes have to clone data to an external drive because the original drive has performance issues, so then usin

If I create a general profile for all devices that blocks 17+ apps in the Restrictions payload, and then create a separate profile that I only want to apply to a subset of devices, which has a Restrictions payload to disable Siri. How is the final set of permissions determined. Each payload will conflict with the other.. one allows Siri but disables 17+, the other disables Siri but allows 17+.

Hi All, I've successfully pulled information out of our JSS using the API. Now I have a new challenge: setting an extension attribute via the API. Is this even possible?

I'm looking to start up a User Group in the Kansas City area, to include both sides of the state line. I know there are a number of users in the area. Please shoot me an email mark.hughes@kckps.org if this seems of interest to you.

I am experiencing a problem with the 10.9 Netboot being able to boot the newly released Retinas and older Macbook Pros (non-retinas). I built the Netboot image from the new Retinas. They boot fine, the older MBPs do not. I know the new Retinas forked 10.9, but my usual tricks aren't working. Namely, running recovery on the new Retinas, putting the install files on a USB drive, and running the Retina Mavericks build install on the MBP. Then building the Netboot image from that machine. It still boots the new Retinas, but not the older MBPs.

Hey all, I got this working for Fusion 5 after many unsuccessful attempts, however since we upgraded to Jamf 9 I am unable to Create a similar workflow for installing VMWare Fusion 6 and having the license key included. I have looked at some of the resources here on the nation, but have found nothing that was up to date. My goal is to create or use the Vmware Fusion 6 installer and have the serial already installed. Then make available in self service. Any help would be appreciated.

Is there a way to have the quickadd package restart the machine after it finishes enrolling the device? I am using self enroll and want the machine to restart after the end user finishes the enroll process. ThanksLarry

I just restricted a bunch of application software, logged out as a standard user and when I logged back in, I keep getting "CoreLocationAgent" errors. Anyone ever encounter this issue? I also had the restrict applications enabled under management preference set to user level.

Has anyone been successful with opening the lock on the network preference pane in 10.9? I was using the old way of enable preference panes by running a script with the following commands in 10.8: /usr/libexec/PlistBuddy -c "set rights:system.preferences:class allow" /etc/authorization /usr/libexec/PlistBuddy -c "set rights:system.preferences.timemachine:class allow" /etc/authorization /usr/libexec/PlistBuddy -c "set rights:system.preferences.network:class allow" /etc/authorization /usr/libexec/PlistBuddy -c "set rights:system.preferences.energysaver:class allow" /etc/authorization /usr/libexec/PlistBuddy -c "set rights:system.preferences.printing:class allow" /etc/authorization /usr/libexec/PlistBuddy -c "set rights:system.preferences.datetime:class allow" /etc/authorization In 10.9 PlistBuddy no longer works and you have to use the security command: security authorizationdb write system.preferences allow security authori

JSS 8.62I am having an issue with the "Enable Firewall.sh" script from JamfNation when I run it in a policy. I have this run on all machines, even if the machines has the firewall already enabled, because there have been times when a user has disabled their firewall and I want the machine to re-enable it. POLICY:Triggered by loginSet to Run the script as Before with parameter 4 = TRUE On some of the computers I am getting this error/policy failure log. /usr/sbin/jamf is version 8.62Executing Policy Enable Firewall...Creating directory structure for /Library/Application Support/JAMF/Downloads/Downloading https://jamfserver:443/software/Scripts/enableFirewall.sh...Running script enableFirewall.sh...Script exit code: 0Script result: Enabling Firewall for OS 10.8 ...launchctl: Error unloading: com.apple.alf.useragent Anyone know why this is having an issue unloading the com.apple.alf.useragent?

I know I'm a few weeks late on this at this point. I took notes on this presentation, but maybe I wrote down something wrong. I think the presenter when he was talking about cocoa dialog and terminal notifier mentioned something like pleasewait.app. Does anyone remember that? I can't seem to find anything called pleasewait.app using google or my google powers aren't strong enough. What I need to do is have something pop up and sort of take up the screen while some processes happens in the back. Thanks ahead of time!Bob

I have created a local admin account using below given script and its working fine for me. #!/bin/sh#Creating a new user.dscl . -create /Users/test6#Setting users default shell.dscl . -create /Users/test6 UserShell /bin/bash#Setting up users Full Namedscl . -create /Users/test6 RealName TEST6dscl . -create /Users/test6 UniqueID 512dscl . -create /Users/test6 PrimaryGroupID 20dscl . -create /Users/test6 NFSHomeDirectory /Users/test5dscl . -passwd /Users/test6 123456dscl . -append /Groups/admin GroupMembership test6 I am not enough knowledgeable in scripting part.I am looking for solution code for searching next available UniqueID from the system when i run the script.any idea will appreciated.