Can someone be as to kind to give me some coding love! I need to create an Extension Attribute that calls an AD Group. I want to use this to make a smart group (X Users get X script.) Any help would be much appreciated! --Matt Lee, CCA/ACMT/ACPT/ACDTSenior IT Analyst / Desktop Architecture Team / Apple S.M.E / JAMF Casper AdministratorFox Networks Group

Hello all, Is it possible to identify which Macs have a firmware password set using smart groups? Many thanks Phill

Hello, Does anyone know how I can remove a manifest I imported from composer? I have imported a couple for testing and now want them gone but can't see to find that option. Thanks Dave

I wrote a simple script to pull the list of distribution points from the JSS using the rest api: https://yourjsscom:8443/apiFrontPage.rest. However after several successful runs Friday, today I'm met with an error. It looks like the structure of the File I'm downloading has changed from usual XML to this: {"distribution_points":{"distribution_point":[{"id":82,"name":"dp1.company.com"},{"id":18,"name":"dp2.company.com"},{"id":29,"name":"dp3.company.com"}, .... The code I was using in my script to get the list is: curl -o $temp_file.xml -u $jss_login https://casper.servername.com:8443/JSSResource/distributionpoints -X GET Does anyone know why this would change all of a sudden? Or how I can specifically curl an xml favor of the list? Thank you!

Sorry total scripting newbie here. I am trying to remove a user folder via a shell script in Casper Imaging that used to work great in DeployStudio:#!/bin/sh rm -R /Macintosh HD/Users/apple exit 0 I placed this .sh file in a config in Casper Admin, kick it off and the user folder is still there on reboot. has to be something in my syntax? For a frame of reference what I am trying to to:We lend users laptops with a local account on them, and then when the person returns the laptop, we wipe that user folder so the next person that uses the laptop doesn't see any of the previous web browsing history, files etc.

I created a dock, global pref.and desktop pattern with Composer 8.43. It created a .pkg (or .dmg) file then I re-imaged a new machine and had this run during the image process. After logging into the new machine none of these settings are set. The .pkg ran but the dock, background and global pref. are default. Should this be in a script? Thanks

Hi guys Getting this error when trying to install a certain package from the self service application. This is the part of the log where the error occurs; /usr/sbin/jamf is version 8.63 Executing Policy Install PolicyName... [STEP 1 of 4] Downloading http://casper.mycompany.com:80/CasperShare/Packages//PackageName.dmg... Error: Package not successfully downloaded: 33 I have browsed the forums and cannot find any posts with any helpful information. The rest of the policy downloads fine and executes properly. Other packages execute fine over http. This install policy also works fine when running on my dev machine. Anyone offer any help?Thanks in advance

I have noticed under the 'search inventory' option when looking at the 'Local User Accounts' field it no longer displays if an account is an admin user. Casper v8 showed this information. Does anyone know if its actually possible to get this information now in Casper v9 ?

Hi All, I'm looking for the Adobe Audit custom report, but can't seem to find it in the resource kit. Anyone got it?

We recently decided to upgrade our test environment to Casper 9. It did not go well. As it turns out, if your JSS is operating in clustered mode then you have to upgrade the cluster master first. Where this was throwing us off is that we periodically copy a dump of the live production database off to our test database and import that. There is a line in our automated script that should disable clustering mode on that database before we restart the tomcat process. To quote Nicky (who we got this from): Totally. Just run this command in mysql and restart tomcat: update jss_cluster_settings set clustered = 0; Turns out our implementation of this command wasn't working! Enough of our test environment issues. What have I learned? In a multiple JSS environment, upgrade the cluster master first then the others!

Hi, new customer in the last 6 months and we have enrolled nearly 1000 macs to our JSS but I know there are a few out there lurking in an odd office or 2, a student didn't com in to be added etc that we may have missed and not in the JSS. Is there a way to search for these so I can reach out to the user and get them in our office?

We have about 20 mac clients in my JSS listed as -Not Enrolled-Any guidance on best way to get them enrolled without physically touching them with the enroll.pkg file Thx, Tom

Hello, I'm working on a extension attribute to tell me what version of McAfee Virus scan is installed. I got some unexpected output and tracked the problem down to the source file containing a bunch of DOS carriage returns. How can I eliminate these characters without needing to install tools like dos2unix? script: #!/bin/bash declare -x PLIST="/etc/cma.d/EPOAGENT3700MACX/config.xml" declare -x NUMBER="$(cat "/etc/cma.d/EPOAGENT3700MACX/config.xml" | grep "<Version>.*</Version>" | sed -e 's/<Version>(.*)</Version>/1/' | awk '{print $1}' | tr -d '^M' )" # be sure to enter ^M as ctl+v then ctl+m. the text will be blue in vi. if [ -f "$PLIST" ] ; then declare -x VERSION="$NUMBER" else declare -x VERSION="Not Installed" echo "not installed $VERSION" fi echo "<results>$VERSION</results>" exit 0 output: bas

I have a piece of monitoring software that students at our school must have installed on their systems, which the students at school love to try and remove. I have built a smart group that identifies the systems that have had the software uninstalled, and I have a policy set up to install the software. If I set the scope to the Smart Group, and the policy to ongoing, would this make it so whenever a student uninstalls the software, they get moved into the smart group to have it reinstalled? I have many repeat offenders with this, and it has become tedious to manually reinstall the software whenever the remove it. Any advice, idea's would be appreciated. I am running Casper 9.0.1

Hey, I am trying to get the certs sorted out on our test 9.0 JSS, and I came across some old instructions that reference a hidden URL for accessing the internal CA on the JSS. Basically, it used to be just your JSS url with /ca.html added. http://www.jamfsoftware.com/libraries/pdf/white_papers/Manually_Installing_the_JAMF_Software_Server.pdf This does not work in 9.0. Is there another way to access the CA on a 9.0 JSS? Thanks, --Andy

Hi Guys, I started the update about 1.5 hours ago and the JSS seems to be stuck at "Updating encoding for applications (Step 2 of 3)..."How long did it take you to update? Any ideas?

i have a script i have created to do this but i keep getting a error code when i try to use casper remote to push it to a test machine. The script does the following. ``` !/bin/bash Sudo dseditgroup -o edit -n /Local/Default -u admin -p -a printerusers -t group lpadminn exit 0``` When i push this out it gives a error. Sending Wake On LAN command...Opening SSH Connection to 192.168.17.182...Authenticating...Successfully authenticated.Verifying Computer's Identity...The MAC Address has been verified.Checking Operating System Version...Running Mac OS X 10.8.4 (12E3067)Verifying /usr/sbin/jamf.../usr/sbin/jamf is current (8.71)Verifying /usr/sbin/jamfvnc.../usr/sbin/jamfvnc does not exist.Verifying /Library/Preferences/com.jamfsoftware.jamf.plist...Preparing Policy...Switching servers for load balacing...Executing Policy 2013-08-29 at 8:42 AM | tekhelp | 1 Computer...Creating directory structure for /Library/Application Support/JAMF/Downloads/Downloading name of server where

We use a dedicated management account in our environment, "casper". This account is present on every computer. We do not currently randomize the password. Occasionally machines will become managed by another account and I will need to repoint them to the "casper" account. This used to be achieved by running the command "sudo jamf recon -sshUsername casper -sshPassword <password>". At some point this command became obsolete. At the very least it no longer achieves the desired goal of changing the management account. We then achieved this by deploying a QuickAdd.pkg with the correct account settings. This no longer works because it seems the current crop of QuickAdd.pkg is single-use only. How can I remanage my computers with the correct account without having the task be a manual process?

Recently, our 10.8 users have been complaining of computers being stuck at "Checking Policies" and not shutting down. In my investigation, I found that running a recon seems to hang on Finding extension attributes (that's what happens when ssh'd in or locally). Anybody know how to fix it? I found two problems that make it hard to diagnose- there is no log of what attribute is being checked, and there is no way to disable an attribute. It would be great if the interface would allow enabling and disabling attributes- instead you'd have to delete it to stop checking. Which is annoying when you have 15 with custom scripts. Any help

Hello all - there don't seem to be many (if any) posts about McAfee Endpoint Protection for Mac and strategies for packaging this application so I thought I would see what you all think. Deploying the flat package downloaded from my McAfee Enterprise account through a policy simply dumps the .pkg on the root of the drive, and using a snapshot package installs the software but yields the attached error when launched. The package deploys and installs perfectly fine via ARD or DeployStudio, but I would prefer to use Casper. external image link As for the ePO script, I've been getting this error even after running ```sudo sh install.sh -i``` manually: "The install failed (The Installer encountered an error that caused the installation tofail. Contact the software manufacturer for assistance.)" Gatekeeper is off, and the -allowUntrusted flag was added to the install.sh script to try to get it through. Any ideas on how to get these two pieces deployed successfully

In releases prior to 9.0, one could manually run all policies associated with the every15/hour/etc trigger by: jamf policy -trigger everyHour We could also modify the associated scheduled tasks by visiting: [JSS8/tasks.html](JSS8/tasks.html) Casper 9.0 replaces the every15/hour/etc trigger with the Recurring Check-In trigger. Is there a way to manually run all policies associated with the Recurring Check-In trigger? Also, is the concept of Scheduled Tasks still present in 9.0? JSS9/tasks.html does not exist.

Hi folks, I am running Casper for about 90 iPads at a small high school.We are not restricting the App Store, but we are instructing students not to install apps. I'm trying to set up a notification that would alert me if ANY app is installed. I was wondering if anyone had any ideas.

Good morning, Having trouble getting the license recognized for a program called Git Tower. I'm wondering if anyone has any insight that can help me get this license recognized. I am using Composer to create this package. The license file has an entry in it that is referencing the machine that the program is being serialized on. The license file is a plist one that gets created after you serialize the program in ~/Library/Application Support/Tower (which I imagine is a typical workflow for these things) Here's what I've tried so far: -Creating the package without launching it, then creating a separate .dmg with the license file in it, then deploying both together through Casper Remote. The .dmg has FUT and FEU enabled and gets deployed after the .pkg installer.-Creating the package, serialized, as a .dmg with FUT & FEU enabled, and then deploying through Remote-Commenting the machine references/entry out of the plist, in the hope that it would get written to/r

We're having a problem with the search results between different users. We have an account that existed before we upgraded to v9. When doing searches with this account we can see several columns: name, model, managed, full name, os, serial number, department. However with an account that was created after the update search's only show the name column. I've been looking but can't find a setting for this?Cheers

Hi All, I had a set of Adobe CC packages that worked fine while on Casper 8.71, but since my update to Casper 9.0, they fail after a few minutes. It is very frustrating... The casper logs report "Failed to download files from http://casper/CasperShare/Packages/Adobe%20Photoshop%20CC_Install.pkg.bom." Has anyone else experienced this, and have any ideas what is happening? It seems strange that they where fine before the update to Casper 9.0, and now they are broken. I have rebuilt the packages, but I am still getting the same issue. I have also tried the fixes listed here https://jamfnation.jamfsoftware.com/discussion.html?id=7945 and https://jamfnation.jamfsoftware.com/discussion.html?id=7771