To unmanage a computer after the 9.0 upgade, do you "Remove MDM Profile" on the management tab of a computer entry, or is there a checkbox I'm missing?

So I was able to get support on the line to help getting my DMZ server to look for my intranet DB. Now upon launch, however, the DMZ server fails to initialize and give a Database Connection Error. The following error was encountered: Communications link failure. The last packet sent successfully to the server was 0 milliseconds ago. The driver has not received any packets from the server. Please verify the following items: -MySQL is running on [server IP] -MySQL is accepting network connections -The user jamf@[server IP] has been granted privileges to the jamf database Oh, to add to this, we just upgraded to 9.0 in the middle of this. And before you ask, yes we did point grant all privileges. On my intranet server, hosting the DB, it only allows me to show the JSS WebApp on the localhost, and it doesn't show any other servers tied in. Were running RHEL 6 in DMZ and RHEL 5 inside.

Hello all, I have a DP over India that I want to use as a netboot server as well. It is a Mac Mini running 10.8.4, i have installed server and enabled NetInstall and File Sharing services. I've uploaded a 10.8.4 netboot image to it and all services seem to be running perfectly fine:"sudo serveradmin fullstatus netboot" but, for some reason i'm not able to get the devices to boot to the netboot. I'm currently testing on a mbp that is under the same subnet and when i go to startup disk i can't see the netboot image i have enabled. Just wanted to pick your brains for possible steps i'm missing.Thanks a lot

One of my managed clients (a 10.8.4 server DP), is submitting malformed inventory.. Basically inventory is failing & it has a Recon date of 11/30/0002 at 12:00 AM in the JSS! I have re-repaired permissions, verified the disk.. Removed the mac from the JSS.. Removed the framework.. Made sure that DNS is correct & flushed the cache on the client.. Removed all JAMF keychain items & yet we still keep getting errors like the below: Thu Aug 22 16:44:34 SK-MAC-JSS-01 jamf[821]: Upgrading jamf agent... Thu Aug 22 16:44:54 SK-MAC-JSS-01 jamf[821]: Checksum of the jamf agent did not match. (md5: /private/tmp/jamfAgent: No such file or directory != 209ae2ad3b15f99cd63ac5c0c1f9470d) Thu Aug 22 16:44:54 SK-MAC-JSS-01 jamf[821]: Upgrading jamfHelper.app... Thu Aug 22 16:45:15 SK-MAC-JSS-01 jamf[821]: Checksum of the jamfHelper did not match. (md5: /private/tmp/jamfHelper.app/Contents/MacOS/jamfHelper: No such file or directory!=d3d9721ff246acac29f7d3f37e28b08c) Thu Aug 22 16:45:15 S

Hi Guys, I was just wondering if Casper 8 is going to support Mavericks or if we'll need to start looking @ 9. Just looking @ my project plan & worried I might not be able to squeeze in full v9 testing. (Hoping a JAMFer will reply & that this post will help others).

I setup a a 10.8.3 MacBook Pro with a Configuration Profile I created using the Apple iPCU and manual changes to the file so it would work at the loginwindow. This works as expected wireless connection before authenticating against Active Directory. The payload consists of the required certificates as well as the wireless SSID etc.. I've tried to replicate the same settings in JSS 8.64's as a Computer Level Config. Profile. The payload consists of the required certificates and SSID settings etc. the same as the iPCU. The Wireless connection appears at the loginwindow as expected but that's as far as it goes. If I login to the MacBook Pro with an Active Directory Account and then attempt to connect to the 802.1x Connection in the Network System Preference it sits there at "Authenticating" (This may be unrelated to why it's not working at the login window). Is there something Specific I need to do to get this configuration profile to work correctly w

I'm having a curious issue where machines being imaged aren't having their names applied. These machines haven't been imaged or reconned by the JSS in the past and if I add them to the inventory manually first they get named correctly. Where I encounter the issue is when I try to image a new machine, I enter its name into Casper imaging, the imaging logs say the computer name was set but the machines name ends up being blank. I haven't dug too deep yet but I wondered if anyone else had encountered this?

So we have four Distribution Points. Each is set to fail over to another Distribution Point. Not that we'd ever do something like this, but the question came up, and we honestly didn't have an answer... How does this work? I mean, yea, DP01 is down, so jamf goes to DP02. What happens if DP02 is also down? Does it go to its own failover which is DP03? Is it possible (please, not probable, just tossin' this out there) to end up with a loop? Does jamf only try to failover once? Does it keep failing over? How does jamf manage these fail-overs? Are policies effected? Should we see the log say "Dang, DP01 is down, going to DP02, what, that's down too...hmm, let's try DP03...." Just a thought, it would be nice to understand how jamf handles the actual failover when pushing policies. Don

So I've noticed that MCX for com.apple.screensaver.ByHost is not working properly in 10.8. In 10.6 & 10.7 I have the idle time set to 600seconds & module name set to flurry. I'm noticing on 10.8 machines this is not being enforced. If I can't get the MCX to apply, I guess I will start looking at using mcxToProfile as Command Profiles by default don't seem to allow you to set ByHost Prefs. Anyone else seeing this? If so, how are you getting around it?

So how does one delete the mysql db and start over w/o wiping the system?

Is there a way to request an inventory update for ALL managed devices. I can click on each one and hit the Blue Circle Arrow under Device Information, but how could I request a manual update for all?

I don't know much and I'm still muddling through Casper.I'm still waiting to implement a user interactive software update policy for mobile users forcing them to run updates which reboot their machines...In the meantime, I have the JavaForMacOSX10.6.Update16.dmg to manually roll out to our 10.6.8 machines with Casper. My issue is that a good number of the laptops I need to push to are remote with various network connections and uptime.From what little I know a .dmg is best in these conditions as it can be resumed where a .pkg cannot.Is there any way to repackage the .pkg into a .dmg for better update stability?If not, and I push the update via .pkg and the update is interrupted because of network or user instability, will clients eventually get updated or will interrupted updates cause further issues I don't want to deal with?Thanks for any assistance.

We are migrating our JSS to Redhat 6, is there a script or cron job that will start the JSS on reboot of the server? I can manually restart by restating Tomcat via the JSSDatabaseUtility but would like to have the JSS started automatically at boot.

Hi, What I am looking to find out is if there is a way to push different packages from different distribution points to clients. For example: I have an SMB distribution point in our datacenter that is large scale and suitable for pushing CS6 or other large packages from. I have another distribution point on the OS X server (mac mini) which is fine for the smaller packages like lync, chrome etc. I would like to make it so that the largest packages are pushed from the SMB share in the DC and the smaller ones from the mac mini. Is this possible to do with casper casper? Or does everything have to come from one distribution point alone? Many Thanks, Kai.

I've created a TextExpander package in Composer. When I deploy it to a test machine it installs, but the license doesn't work (it comes up unlicensed). I'm not sure if there's a license file that's tied to the individual machine or if Composer just missed the license file. Help?

We're using Parallels 8 in one of the lab environments at the university I work at. I've managed to put together a script that sets the default VM for whomever logs on to the machine, but I've been unable to set Parallels to launch at login. I've tried setting a Global Login Item for the Parallels Desktop.app. I've tried creating a Configuration Profile to force Parallels to launch, and that hasn't worked either. When creating the Configuration Profile, Parallels doesn't show up in the Applications drop down. Because of this I was trying to set it to launch under the Items area. It doesn't seem to be keeping the setting though. Once the configuration profile is created, it shows that it has one payload to deploy. If I edit the profile, the Items line that was supposed to launch Parallels is blank. Clicking save, or cancel, at this point causes the Payload count to drop to zero for this profile. I'm at a loss here. This is one of t

I'm working on a bash script designed to enable Macintosh (10.8) users that are given admin permissions from Active Directory, to retain their Admin credentials when they're not authenticating to AD (ie: took a work computer home and working offline). By default you lose Admin permissions if you can't authenticate... theoretically this script should add users from specified AD groups and make them local admins. I'm just running into one error near the end when it attempts to append the users from the groups, instead of doing so and exiting the script, it's stating, "No group name provided" three times. I'm a bash novice, so here's to some assistance! I've changed our AD domain to mytfa.org to keep it similar but inconspicuous as the word "example" when mirrororing "example.com" was thoroughly confusing in the various connotations of this script. #!/bin/bash### Script to detect if a user is a member of the admin group. If not, and they are not a student, it will add them.### say

Hey all my fellow JAMFers, Just curious if it is possible to set a local distribution point for a Pre-Stage on computers that will be imaged on network? or if you can somehow copy the autorun settings to my local DP and have machines use it i.e. If I wanted to image from my thunderbolt drive I set up with 2 partitions(bootable OS, and replicated DP w/ Casper Imaging at root), but still have it call down all the Pre-stage settings, and keep run count. I am able to image with the thunderbolt drive no problem, but it would be nice to keep a run count for my environment, and ease the learning curve for some of the technicians who would be using this mobile imaging solution. As it stands right now, everything images, but settings are blank when casper imaging launches, and none of the post run scrips are running(bind AD, JSS enrollment, hardening, etc.) which is just going to be a much larger learning curve for the technicians who will be assisting me. Ultimately, i

Hello all,I'm missing the possibility to create a Policy for a Specific User Group (Assign to Specific User Groups - Add User Groups - Lookup Groups) from the Active Directory Server like in Version 8.7. The binding to the AD Server is configured and working.Thank you in advance for your answers and best regards! Martin

Hi, We are running into issue with Script Parameters while adding it with the script. It works fine if we call that in the script, but when I run any command as currently logged in user the parameter variable $4 does not work. For ExampleI am specifying the string "TEST" in Parameter 4 Not Labeled while adding the script. When I call $4 in the script directly it works, but I need to run a command as currently logged in user. When I echo $4 as currently logged in user, its blank. My Script is to send an email based on the Script Parameter specified at Paramater 4($4). #!/bin/sh echo $4 # this echoes "TEST" LOGGEDUSERS=`who | awk '/console/ {print $1}'` su -l $LOGGEDUSERS -c 'echo "$4 Contents" | mail -s "Success" admin@test.com' # this triggers the mail but $4 value is blank in email Is there any way to call the script parameters while running the command as logged in user? Regards,Karthikeyan

I didn't want to hijack @johnklimeck's thread: https://jamfnation.jamfsoftware.com/discussion.html?id=6438 So here's a related issue...users who disable our hidden local admin account (not our hidden Casper management account). Aside from tracking/reporting these incidents, we need a way for Casper to recreate the account. Another twist is to remove the hiddenadmin user home directory if it happens to be in /Users. Three commands are needed: sudo dscl . delete /Users/hiddenadmin ; sudo rm -Rf /Users/hiddenadmin ; sudo jamf createAccount -username hiddenadmin -password xxxxxxxx -shell /bin/bash -admin -hiddenuser -home /private/var/hiddenadmin Admittedly this is a BFH, but it's the only sure fire way to ensure the account is always enabled. No issue with deleting the home directory, since nothing should be stored there anyways; no issue in blasting the account from dscl since it's a local account and we can't risk the account existing (with an unknow

I'm deploying 50 laptops with parallels for a customer. I built the deployment package and added our enterprise license. Tested the package and it works fine. However, when I deploy the same package via Target Mode Imaging (TMI) Parallels, and only Parallels, isn't loaded. If I move the package over to the just imaged system and run the Parallels installer it works great. Deploying the vm container works great via TMI as well. It's "only" the application that is the problem. My first thought was that the installer wasn't working because it's not a "flat" installer and our distribution point is a Windows server. But if I manually mount that distribution point and pull the package down by hand and install by double click it works fine. Any thoughts on why this .pkg won't work via TMI but will with a manual double click? Thanks in advance, pew

Hello All, I recently noticed that the warranty field for all my mac's displays as "N/A" and thought it was because Apple had deactivated my GSX service account. ARG! I got the account reinstated and have logged in successfully and tested successfully within the JSS GSX settings. Alas, my warrantly information still displays "N/A". I found one other thread on this that mentioned proxy settings as blocking the traffic but I've confirmed that there are no proxies in place on my JSS server. Any other thoughts? Is there another way I can test this traffic from my GSX server to see if it's being blocked? Thanks in advance! Tori Paulman

A few groups we support need to stay on FileMaker Pro 11, so we're packaging for deployment. We want to stifle the update prompt (image). When we capture ~/Library/Preferences/com.filemaker.client.pro.plist then toggle the update checkbox in FileMaker Pro 11 preferences, then capture the plist again, we only see a single key change. external image link Checkbox on: <key>Preferences:GenOptions</key> <integer>2438</integer> Checkbox off: <key>Preferences:GenOptions</key> <integer>2470</integer> BTW, the checkbox we want/need to disable is actually in FileMaker Pro prefs (not in the above dialog box...that should never appear): external image link It doesn't seem to do the trick...am I missing something? Where's the magic bullet for disabling update checking in FileMaker Pro 11? :) TIADon

We are trying to create a package with all our "User" settings to a dmg and then during image deploy the user settings using the FUT option, but we cannot seem to get it working correctly. We have created a new package in Composer, then copied across the /Users/<usersname>/Library/Preferences folder including the hidden plist files and the ByHost folder, when have then gone through the pacakge and stripped out the plists we are not setting then saving it to dmg. When then add the dmg to our Casper Admin Configuration with the FUT option selected. This does not appear to put any of the plists into the /System/Library/Users Templates/English.lproj/Library/Preferences If we use the FEU option aswell it does the Existing user but not the template.If we deploy the package once the computer is finished imaging or install to boot volume during image time it appears to work. Am i doing this right, or what am i missing?