Hi all Was wondering if someone might be able to help. I have machines booting from a diskless NetBoot image created with apples imaging tools. (Automator action doesn't work) This automatically logs in as a account called local-admin, launches Casper imaging and goes through the imaging process. At the very end before the machine reboots it says **Connection Error Connecting to https://xxxxx:8443/ :42** I am using a launch daemon and script as a work around to recognise this in the system log and to force reboot after 5 minutes. I have always had this problem and support couldn't help because they didn't know what is causing this. If anyone else has had this problem please can you let me know because i fear my mental state is turning quite funny :(

We have a script we've been testing that removes a bad wi-fi entry from the keychain of the local user. When this runs on the every15 trigger set in the JSS policy, the logs state the keychain entry doesn't exist. However, if we go to the computer and run the script from Self Service (separate policy, set to just run from SS), it works perfectly! It removes the entry, shows this in the logs and fixes their issues. I feel like I'm missing something really simple but I could sure use advice! - Brandon

We're not entirely sure to proper way to remove the Self-Service and unenroll a device from the JSS? Do we just delete the record in the JSS and remove the profiles? If so, we find that the Self-Service icon stays after sometimes; what is the proper way to remove the self-service and unenroll the iOS device? Thank you.

Hello JAMFnation discussion community. Long time listener first time caller... We are trying to track if a local account is created instead of a OD network account. I was looking into smart groups but I don't think the username "is like" is going to accomplish this goal for me. I wanted to do a smart group so I could get an email when a local account is created. I was going to move on to figuring out a script to do this but is there a feature of JSS that I'm missing that will accomplish this goal? Thanks for looking/contributing if you do! ~Jon

Taking a gamble here on what might sound like a silly question, but I figure its worth it :-) Can a netboot set be used for a wide arrange of machines, or do we need 1 for each type of hardware we have? We have a couple of netboot sets that we created with our 2012 13" MacBook Air and 2011 13" MacBook Pro but we can't get some of our older machines on the network to boot into Casper with these, like 2009/10 Imacs 2009 Pro Tower. Thx, Tom

We have a SUS running on 10.6.8 providing updates. Just tried deploying the 11.1.0 iTunes update and although the install appears to work, it actually breaks iTunes and it wont launch; system.log reports com.apple.launchd.peruser.254786553[559] ([0x0-0x34034].com.apple.iTunes[1391]): Exited with code: 1 I've deleted the update on the server and have a newly downloaded version, but same problem. If I manually download iTunes and install it manually, then that works fine. Anyone having a similar issue or have seen anything like this who can provide some insight? Sean

Anyone else lose their clustering config when upgrading to v.9.11?

Might any of you have a recommended workflow in Casper 9 for the implementation of policies that would be "Global", as in equally applied to all Sites? Let's say for example, global software update, or Flash patching, etc. This might be obvious, but it seems to me I need to recreate the same policies individual for all Sites, which also means I need to create a lot of groups, and scope the permissions wisely.

:) https://jamfnation.jamfsoftware.com/jnucEvent.html?eventId=2&view=info

Is there a way to move the users to a group membership w/o deleting them first?

Having an issue on JSS 9.1 where the new Self-Service opens in Safari (not self-contained). Fresh iOS7Fresh enrollmentIssue occurs Existing EnrollmentiOS7 OTA updatenew Self-service downloaded via inventory updateIssue occurs Existing EnrollmentiOS6.1.3new Self-service downloaded via Inventory updateIssue does NOT occur.

As a recap, full details about signing up and pricing are in the updated attachment under resources in the mini-session.

Hi All, Losing it a bit with this one! We have a MacPro5,1 that we use as a test mac, it's also the Mac that we create out netboot images on. These images are used for Casper Imaging only. We can successfully boot this MacPro to a 10.6.8 & 10.7.3 images created on it.. but when trying to boot from either our 10.8 or 10.8.2 image that we CREATED on the MacPro it fails to boot. Just sits there with the spinning gear. A MacBookPro8,1 boots fine to these images & the MacPro will boot fine to the partition that we have the image on. I've deleted all the NetBoot Users on the server, deleted all folders under /NetBootClients.. MacPro has no firmware updates outstanding as far as i can tell.. any ideas? Server is Mac OSX 10.7.4

Has anyone had much experience with this? The pkgs I create from the CCP install fine when I run the original pkg but they fail when I import the pkg into Casper Admin then try and run via Self Service. I've tried importing the pkg into CA as well the old trick of putting the packages on a DMG, using the script linked from https://jamfnation.jamfsoftware.com/article.html?id=161 and both method fail after a time in SS. Please help?

Hey All, I am not sure how possible this is, but I am looking for a way to have admin user on a system, but to remove them from the Sudoers list - more or less, I want them to be able to do more or less what they like on the system in so far as installing software, accessing permissions and adding devices, but I do not want them to be able to get into Terminal and operate with Sudo privileges... Any ideas?

I can't for the life of me find out where VueScan is storing its serial number information. I've used Composer 8.7 to scan for file differences to create a package and all that shows is the Application itself (of course) and a vuescan.ini and vuescan.log file in ~/Library/Preferences. Operating under the pretense that it's stored in ~/Library/Preferences/vuescan.ini, I deleted that file and relaunched VueScan expecting it to ask for a serial number again and it didn't. I also used fseventer to see which files are touched/read while VueScan is launched, but it didn't show me anything that jumped out as being a licensing file. Anyone know definitively where VueScan 9.x stores it's licensing information? I want to package up the software for distribution to our Fine Arts students via Self Service.

I have a script which will remove our old Wireless SSID and add our NEW wireless SSID with password. I would like to make this available through self service. But I would only like the this Self service Policy only to be available if the computers are connected via Ethernet. Is this possible?

I have build a package using Apple PackageMaker, this will install an application and a preference (plist) file to the current logged in user. Now I wanted to add a post-flight script to the package, which can copy the same plist (for ex: com.test.plist) form the current logged in user to other user account on a machine also to the default user template (/System/Library/user template/...../Library/preferences) so any new user account created will have same preference file copied.I am new to scripting on Macs, please help in scripting the task. Thank You

I have been working on this issue for a while and can't seem to figure out a way to automate adding a computer object in Active Directory to a group that is also in Active Directory. We will soon be using 802.1x authentication over ethernet using machine certificates to authenticate, so I got everything in place to have machine certificates distributed via a Configuration Profile / MDM. This works fine once the computer object has been added to the AD group that has access to the machine certificate template on the CA. Unfortunately, there is a lot of paperwork required by my team to place the computer object into a group in Active Directory so I was hoping that I could automate this process. My ideal solution would be to have this process automated during the load script while the machines were being imaged. The machines would be bound to Active Directory, give the DCs time to replicate, then use either dscl or dsgroupedit to place the computer object into the group. This i

I have just upgraded a clients casper to 8.7. Now none of the Macs will join the wireless. We have system 802.11 Profile. Profile is populated with a default wireless account details, certificate and proxy. I have tried to recreate the profile with a new version, but fails to deploy with error "Profile missing information". Created the profile with IPCU and works fine on a unmanaged machine. As soon as I install the profile on a managed machine I get the same error from the command line. I have also tried enrolling machine in they're testing casper server which is still 8.64 and profiles work fine. Anyone else seen this? Also is it possible to role back the JSS server?

Each policy has a "Feature This Policy on the Main Page" checkbox. Is there a way to have an entire category show up on the main page? I checked the admin guide, I searched JAMF Nation, I used Google-Fu... TIADon

Looking at the updates on our JAMF ASUS we are noticing that the available updates do not match the latest updates that are listed on our Apple Server 10.8.4 SUS. There do not seem to be any updates listed for 10.8 (maybe others as well), is there some change that needs to be done in the conf file for the latest updates to be listed? The ASUS checks at 3.00 am each day and shows that this is being done.

Just wanted a sanity check. I was rolling with Dockutil 1.1.2 and 10.7 Lion running a user-owned launch item script that would manage the Dock once per user, per computer. It run beautifully with no issues whatsoever. Now after testing the exact same script used on 10.8 it either doesn't manage at all, or one or two items from the script are added. Sometimes logging out and back in reveals the fully managed Dock (equiv. to `killall Dock` I guess). If I run the script and view the dock.plist I can see the right keys and values being written, but then almost immediately it gets resorted back by the system to what I set as my default "blank" dock from the base image. (Note: dockutil does run as you see the Dock try to refresh afterwards...) Has anyone else had issues like this with dockutil and 10.8, if not how do you implement it? Where am I going wrong this time? My script worked perfectly in 10.7. Has anything changed in the 10.8 dock plist that would make the system

I would like to remove a JDS install, not only from the JSS using the GUI, but also the jamfds binary and associated files. I would assume a sudo jamfds -removeFramework would exist, but this command failed. Any ways of removing a JDS from a server? also JDS nees to be added as a New Primary Application in the discussion Forums.

Probably an easy fix - under the 8.71 version I had the JSS emailing me if certain smart groups changed and if certain policies encountered failures.Upon installing 9.01, I get emails about everything. For example, I have Restricted Software configured for FaceTime. We don't allow our students to use it.The option to have the JSS email when this action occurs, IS unchecked, yet, I receive an email every single time a kid tries it. I have looked thru the new JSS GUI and I cannot seem to find any global setting that says to email me on every event. Thoughts?