I have noticed under the 'search inventory' option when looking at the 'Local User Accounts' field it no longer displays if an account is an admin user. Casper v8 showed this information. Does anyone know if its actually possible to get this information now in Casper v9 ?

Hi All, I'm looking for the Adobe Audit custom report, but can't seem to find it in the resource kit. Anyone got it?

We recently decided to upgrade our test environment to Casper 9. It did not go well. As it turns out, if your JSS is operating in clustered mode then you have to upgrade the cluster master first. Where this was throwing us off is that we periodically copy a dump of the live production database off to our test database and import that. There is a line in our automated script that should disable clustering mode on that database before we restart the tomcat process. To quote Nicky (who we got this from): Totally. Just run this command in mysql and restart tomcat: update jss_cluster_settings set clustered = 0; Turns out our implementation of this command wasn't working! Enough of our test environment issues. What have I learned? In a multiple JSS environment, upgrade the cluster master first then the others!

Hi, new customer in the last 6 months and we have enrolled nearly 1000 macs to our JSS but I know there are a few out there lurking in an odd office or 2, a student didn't com in to be added etc that we may have missed and not in the JSS. Is there a way to search for these so I can reach out to the user and get them in our office?

We have about 20 mac clients in my JSS listed as -Not Enrolled-Any guidance on best way to get them enrolled without physically touching them with the enroll.pkg file Thx, Tom

Hello, I'm working on a extension attribute to tell me what version of McAfee Virus scan is installed. I got some unexpected output and tracked the problem down to the source file containing a bunch of DOS carriage returns. How can I eliminate these characters without needing to install tools like dos2unix? script: #!/bin/bash declare -x PLIST="/etc/cma.d/EPOAGENT3700MACX/config.xml" declare -x NUMBER="$(cat "/etc/cma.d/EPOAGENT3700MACX/config.xml" | grep "<Version>.*</Version>" | sed -e 's/<Version>(.*)</Version>/1/' | awk '{print $1}' | tr -d '^M' )" # be sure to enter ^M as ctl+v then ctl+m. the text will be blue in vi. if [ -f "$PLIST" ] ; then declare -x VERSION="$NUMBER" else declare -x VERSION="Not Installed" echo "not installed $VERSION" fi echo "<results>$VERSION</results>" exit 0 output: bas

I have a piece of monitoring software that students at our school must have installed on their systems, which the students at school love to try and remove. I have built a smart group that identifies the systems that have had the software uninstalled, and I have a policy set up to install the software. If I set the scope to the Smart Group, and the policy to ongoing, would this make it so whenever a student uninstalls the software, they get moved into the smart group to have it reinstalled? I have many repeat offenders with this, and it has become tedious to manually reinstall the software whenever the remove it. Any advice, idea's would be appreciated. I am running Casper 9.0.1

Hey, I am trying to get the certs sorted out on our test 9.0 JSS, and I came across some old instructions that reference a hidden URL for accessing the internal CA on the JSS. Basically, it used to be just your JSS url with /ca.html added. http://www.jamfsoftware.com/libraries/pdf/white_papers/Manually_Installing_the_JAMF_Software_Server.pdf This does not work in 9.0. Is there another way to access the CA on a 9.0 JSS? Thanks, --Andy

Hi Guys, I started the update about 1.5 hours ago and the JSS seems to be stuck at "Updating encoding for applications (Step 2 of 3)..."How long did it take you to update? Any ideas?

i have a script i have created to do this but i keep getting a error code when i try to use casper remote to push it to a test machine. The script does the following. ``` !/bin/bash Sudo dseditgroup -o edit -n /Local/Default -u admin -p -a printerusers -t group lpadminn exit 0``` When i push this out it gives a error. Sending Wake On LAN command...Opening SSH Connection to 192.168.17.182...Authenticating...Successfully authenticated.Verifying Computer's Identity...The MAC Address has been verified.Checking Operating System Version...Running Mac OS X 10.8.4 (12E3067)Verifying /usr/sbin/jamf.../usr/sbin/jamf is current (8.71)Verifying /usr/sbin/jamfvnc.../usr/sbin/jamfvnc does not exist.Verifying /Library/Preferences/com.jamfsoftware.jamf.plist...Preparing Policy...Switching servers for load balacing...Executing Policy 2013-08-29 at 8:42 AM | tekhelp | 1 Computer...Creating directory structure for /Library/Application Support/JAMF/Downloads/Downloading name of server where

We use a dedicated management account in our environment, "casper". This account is present on every computer. We do not currently randomize the password. Occasionally machines will become managed by another account and I will need to repoint them to the "casper" account. This used to be achieved by running the command "sudo jamf recon -sshUsername casper -sshPassword <password>". At some point this command became obsolete. At the very least it no longer achieves the desired goal of changing the management account. We then achieved this by deploying a QuickAdd.pkg with the correct account settings. This no longer works because it seems the current crop of QuickAdd.pkg is single-use only. How can I remanage my computers with the correct account without having the task be a manual process?

Recently, our 10.8 users have been complaining of computers being stuck at "Checking Policies" and not shutting down. In my investigation, I found that running a recon seems to hang on Finding extension attributes (that's what happens when ssh'd in or locally). Anybody know how to fix it? I found two problems that make it hard to diagnose- there is no log of what attribute is being checked, and there is no way to disable an attribute. It would be great if the interface would allow enabling and disabling attributes- instead you'd have to delete it to stop checking. Which is annoying when you have 15 with custom scripts. Any help

Hello all - there don't seem to be many (if any) posts about McAfee Endpoint Protection for Mac and strategies for packaging this application so I thought I would see what you all think. Deploying the flat package downloaded from my McAfee Enterprise account through a policy simply dumps the .pkg on the root of the drive, and using a snapshot package installs the software but yields the attached error when launched. The package deploys and installs perfectly fine via ARD or DeployStudio, but I would prefer to use Casper. external image link As for the ePO script, I've been getting this error even after running ```sudo sh install.sh -i``` manually: "The install failed (The Installer encountered an error that caused the installation tofail. Contact the software manufacturer for assistance.)" Gatekeeper is off, and the -allowUntrusted flag was added to the install.sh script to try to get it through. Any ideas on how to get these two pieces deployed successfully

In releases prior to 9.0, one could manually run all policies associated with the every15/hour/etc trigger by: jamf policy -trigger everyHour We could also modify the associated scheduled tasks by visiting: [JSS8/tasks.html](JSS8/tasks.html) Casper 9.0 replaces the every15/hour/etc trigger with the Recurring Check-In trigger. Is there a way to manually run all policies associated with the Recurring Check-In trigger? Also, is the concept of Scheduled Tasks still present in 9.0? JSS9/tasks.html does not exist.

Hi folks, I am running Casper for about 90 iPads at a small high school.We are not restricting the App Store, but we are instructing students not to install apps. I'm trying to set up a notification that would alert me if ANY app is installed. I was wondering if anyone had any ideas.

Good morning, Having trouble getting the license recognized for a program called Git Tower. I'm wondering if anyone has any insight that can help me get this license recognized. I am using Composer to create this package. The license file has an entry in it that is referencing the machine that the program is being serialized on. The license file is a plist one that gets created after you serialize the program in ~/Library/Application Support/Tower (which I imagine is a typical workflow for these things) Here's what I've tried so far: -Creating the package without launching it, then creating a separate .dmg with the license file in it, then deploying both together through Casper Remote. The .dmg has FUT and FEU enabled and gets deployed after the .pkg installer.-Creating the package, serialized, as a .dmg with FUT & FEU enabled, and then deploying through Remote-Commenting the machine references/entry out of the plist, in the hope that it would get written to/r

We're having a problem with the search results between different users. We have an account that existed before we upgraded to v9. When doing searches with this account we can see several columns: name, model, managed, full name, os, serial number, department. However with an account that was created after the update search's only show the name column. I've been looking but can't find a setting for this?Cheers

Hi All, I had a set of Adobe CC packages that worked fine while on Casper 8.71, but since my update to Casper 9.0, they fail after a few minutes. It is very frustrating... The casper logs report "Failed to download files from http://casper/CasperShare/Packages/Adobe%20Photoshop%20CC_Install.pkg.bom." Has anyone else experienced this, and have any ideas what is happening? It seems strange that they where fine before the update to Casper 9.0, and now they are broken. I have rebuilt the packages, but I am still getting the same issue. I have also tried the fixes listed here https://jamfnation.jamfsoftware.com/discussion.html?id=7945 and https://jamfnation.jamfsoftware.com/discussion.html?id=7771

Hello,Is there a thread, FAQ, etc where all the issues with upgrading to v9 are listed so I can make an informed decision on whether to upgrade?Thanks.

I have a smart group created for Macs with out of date Flash Player installed. The logic is simply "Plug-in Title has Flash Player.plugin" and " Plug-in Version is not 11.8.800.94" However the Title logic is faulty. I receive reports of anything that contains "Flash" or "Player". I need it to take "Flash Player.plugin" as one literal string. Encapsulating the string in quotes and escaping the space has not worked.

Hi all, We have one MacBook that will boot to NetBoot, then re image. However on first boot the first run script does not run & if you manage to login to it you can only connect to port 80 websites. Trying to connect to the JSS or any port 443 site results in Safari giving an error that it cannot connect. Time is correctly set on the mac, so it's not that & the image is & has been used on many other macs. I'm thinking a hardware issue, but seems odd that it works on a NetBoot. Thoughts?

I've had zero problems with my 10 Mac OS distribution points, but my first attempt at using a Windows share is failing. (My account manager is looking into it also). I can manually mount the windows share with the casperadmin account (which is local to the server) without any problems, and read/write is fine. But when Casper Admin 8.71 tries to Replicate it errors with "The distribution point could not be mounted". The one odd thing, to me, is that since the casperadmin account is local account on the server, when I connect manually, I have to prefix the username with hostname. i.e.: hostnamecasperadmin So, I'm also using that syntax in the r/w username field in the server config. I have no access to the server, and am awaiting that admin to advise if he has any useful logs. Thoughts?

Dear all, We have just purchase Casper for our MDM and are primarily a Microsoft windows network. I know it's recommended to install Casper on Server 2008 but I have recently setup a 2012 server and obviously want to keep my applications running on the most recent OS if possible. Will this make tech support difficult/impossible in future, if I have tech issues am I just going to be making things difficult for myself and left unsupported? Or will the software simply just not work on 2012 at the moment? Any input greatly appreciatedThanksDuncan

Trying to come to grips with the new search syntax (which, honestly, I'm not sure is an improvement...): The manual sez to use a hyphen to exclude a term from results, but it doesn't seem to actually work. I've tried searching for partial computer names (i.e. DRE* - *MacPro*), with & without the *, with & without spaces, "" marks - but it never returns anything. Also tried this with apps - but it just seems to be broken. Does this work for anybody? If so, how do you get results?

Hi Guys, I realise this a case of do the training, but I dont have the luxury this week while my colleague (the apple Jedi) is away. I've created a new Configuration Profile in Casper Manager... and now I want to deploy that configuration to a NEW Mac Pro. But each time I boot to the network drive it starts building a different configuration profile... QUESTION: How do I choose which configuration profile? am I even trying to build it the correct way? Thanks for your patience and with the guy with next to no apple Midi-chlorians Jeff