Might any of you have a recommended workflow in Casper 9 for the implementation of policies that would be "Global", as in equally applied to all Sites? Let's say for example, global software update, or Flash patching, etc. This might be obvious, but it seems to me I need to recreate the same policies individual for all Sites, which also means I need to create a lot of groups, and scope the permissions wisely.

:) https://jamfnation.jamfsoftware.com/jnucEvent.html?eventId=2&view=info

Is there a way to move the users to a group membership w/o deleting them first?

Having an issue on JSS 9.1 where the new Self-Service opens in Safari (not self-contained). Fresh iOS7Fresh enrollmentIssue occurs Existing EnrollmentiOS7 OTA updatenew Self-service downloaded via inventory updateIssue occurs Existing EnrollmentiOS6.1.3new Self-service downloaded via Inventory updateIssue does NOT occur.

As a recap, full details about signing up and pricing are in the updated attachment under resources in the mini-session.

Hi All, Losing it a bit with this one! We have a MacPro5,1 that we use as a test mac, it's also the Mac that we create out netboot images on. These images are used for Casper Imaging only. We can successfully boot this MacPro to a 10.6.8 & 10.7.3 images created on it.. but when trying to boot from either our 10.8 or 10.8.2 image that we CREATED on the MacPro it fails to boot. Just sits there with the spinning gear. A MacBookPro8,1 boots fine to these images & the MacPro will boot fine to the partition that we have the image on. I've deleted all the NetBoot Users on the server, deleted all folders under /NetBootClients.. MacPro has no firmware updates outstanding as far as i can tell.. any ideas? Server is Mac OSX 10.7.4

Has anyone had much experience with this? The pkgs I create from the CCP install fine when I run the original pkg but they fail when I import the pkg into Casper Admin then try and run via Self Service. I've tried importing the pkg into CA as well the old trick of putting the packages on a DMG, using the script linked from https://jamfnation.jamfsoftware.com/article.html?id=161 and both method fail after a time in SS. Please help?

Hey All, I am not sure how possible this is, but I am looking for a way to have admin user on a system, but to remove them from the Sudoers list - more or less, I want them to be able to do more or less what they like on the system in so far as installing software, accessing permissions and adding devices, but I do not want them to be able to get into Terminal and operate with Sudo privileges... Any ideas?

I can't for the life of me find out where VueScan is storing its serial number information. I've used Composer 8.7 to scan for file differences to create a package and all that shows is the Application itself (of course) and a vuescan.ini and vuescan.log file in ~/Library/Preferences. Operating under the pretense that it's stored in ~/Library/Preferences/vuescan.ini, I deleted that file and relaunched VueScan expecting it to ask for a serial number again and it didn't. I also used fseventer to see which files are touched/read while VueScan is launched, but it didn't show me anything that jumped out as being a licensing file. Anyone know definitively where VueScan 9.x stores it's licensing information? I want to package up the software for distribution to our Fine Arts students via Self Service.

I have a script which will remove our old Wireless SSID and add our NEW wireless SSID with password. I would like to make this available through self service. But I would only like the this Self service Policy only to be available if the computers are connected via Ethernet. Is this possible?

I have build a package using Apple PackageMaker, this will install an application and a preference (plist) file to the current logged in user. Now I wanted to add a post-flight script to the package, which can copy the same plist (for ex: com.test.plist) form the current logged in user to other user account on a machine also to the default user template (/System/Library/user template/...../Library/preferences) so any new user account created will have same preference file copied.I am new to scripting on Macs, please help in scripting the task. Thank You

I have been working on this issue for a while and can't seem to figure out a way to automate adding a computer object in Active Directory to a group that is also in Active Directory. We will soon be using 802.1x authentication over ethernet using machine certificates to authenticate, so I got everything in place to have machine certificates distributed via a Configuration Profile / MDM. This works fine once the computer object has been added to the AD group that has access to the machine certificate template on the CA. Unfortunately, there is a lot of paperwork required by my team to place the computer object into a group in Active Directory so I was hoping that I could automate this process. My ideal solution would be to have this process automated during the load script while the machines were being imaged. The machines would be bound to Active Directory, give the DCs time to replicate, then use either dscl or dsgroupedit to place the computer object into the group. This i

I have just upgraded a clients casper to 8.7. Now none of the Macs will join the wireless. We have system 802.11 Profile. Profile is populated with a default wireless account details, certificate and proxy. I have tried to recreate the profile with a new version, but fails to deploy with error "Profile missing information". Created the profile with IPCU and works fine on a unmanaged machine. As soon as I install the profile on a managed machine I get the same error from the command line. I have also tried enrolling machine in they're testing casper server which is still 8.64 and profiles work fine. Anyone else seen this? Also is it possible to role back the JSS server?

Each policy has a "Feature This Policy on the Main Page" checkbox. Is there a way to have an entire category show up on the main page? I checked the admin guide, I searched JAMF Nation, I used Google-Fu... TIADon

Looking at the updates on our JAMF ASUS we are noticing that the available updates do not match the latest updates that are listed on our Apple Server 10.8.4 SUS. There do not seem to be any updates listed for 10.8 (maybe others as well), is there some change that needs to be done in the conf file for the latest updates to be listed? The ASUS checks at 3.00 am each day and shows that this is being done.

Just wanted a sanity check. I was rolling with Dockutil 1.1.2 and 10.7 Lion running a user-owned launch item script that would manage the Dock once per user, per computer. It run beautifully with no issues whatsoever. Now after testing the exact same script used on 10.8 it either doesn't manage at all, or one or two items from the script are added. Sometimes logging out and back in reveals the fully managed Dock (equiv. to `killall Dock` I guess). If I run the script and view the dock.plist I can see the right keys and values being written, but then almost immediately it gets resorted back by the system to what I set as my default "blank" dock from the base image. (Note: dockutil does run as you see the Dock try to refresh afterwards...) Has anyone else had issues like this with dockutil and 10.8, if not how do you implement it? Where am I going wrong this time? My script worked perfectly in 10.7. Has anything changed in the 10.8 dock plist that would make the system

I would like to remove a JDS install, not only from the JSS using the GUI, but also the jamfds binary and associated files. I would assume a sudo jamfds -removeFramework would exist, but this command failed. Any ways of removing a JDS from a server? also JDS nees to be added as a New Primary Application in the discussion Forums.

Probably an easy fix - under the 8.71 version I had the JSS emailing me if certain smart groups changed and if certain policies encountered failures.Upon installing 9.01, I get emails about everything. For example, I have Restricted Software configured for FaceTime. We don't allow our students to use it.The option to have the JSS email when this action occurs, IS unchecked, yet, I receive an email every single time a kid tries it. I have looked thru the new JSS GUI and I cannot seem to find any global setting that says to email me on every event. Thoughts?

Can someone be as to kind to give me some coding love! I need to create an Extension Attribute that calls an AD Group. I want to use this to make a smart group (X Users get X script.) Any help would be much appreciated! --Matt Lee, CCA/ACMT/ACPT/ACDTSenior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper AdministratorFox Networks Group

Hello all, Is it possible to identify which Macs have a firmware password set using smart groups? Many thanks Phill

Hello, Does anyone know how I can remove a manifest I imported from composer? I have imported a couple for testing and now want them gone but can't see to find that option. Thanks Dave

I wrote a simple script to pull the list of distribution points from the JSS using the rest api: https://yourjsscom:8443/apiFrontPage.rest. However after several successful runs Friday, today I'm met with an error. It looks like the structure of the File I'm downloading has changed from usual XML to this: {"distribution_points":{"distribution_point":[{"id":82,"name":"dp1.company.com"},{"id":18,"name":"dp2.company.com"},{"id":29,"name":"dp3.company.com"}, .... The code I was using in my script to get the list is: curl -o $temp_file.xml -u $jss_login https://casper.servername.com:8443/JSSResource/distributionpoints -X GET Does anyone know why this would change all of a sudden? Or how I can specifically curl an xml favor of the list? Thank you!

Sorry total scripting newbie here. I am trying to remove a user folder via a shell script in Casper Imaging that used to work great in DeployStudio:#!/bin/sh rm -R /Macintosh HD/Users/apple exit 0 I placed this .sh file in a config in Casper Admin, kick it off and the user folder is still there on reboot. has to be something in my syntax? For a frame of reference what I am trying to to:We lend users laptops with a local account on them, and then when the person returns the laptop, we wipe that user folder so the next person that uses the laptop doesn't see any of the previous web browsing history, files etc.

I created a dock, global pref.and desktop pattern with Composer 8.43. It created a .pkg (or .dmg) file then I re-imaged a new machine and had this run during the image process. After logging into the new machine none of these settings are set. The .pkg ran but the dock, background and global pref. are default. Should this be in a script? Thanks

Hi guys Getting this error when trying to install a certain package from the self service application. This is the part of the log where the error occurs; /usr/sbin/jamf is version 8.63 Executing Policy Install PolicyName... [STEP 1 of 4] Downloading http://casper.mycompany.com:80/CasperShare/Packages//PackageName.dmg... Error: Package not successfully downloaded: 33 I have browsed the forums and cannot find any posts with any helpful information. The rest of the policy downloads fine and executes properly. Other packages execute fine over http. This install policy also works fine when running on my dev machine. Anyone offer any help?Thanks in advance