Hello all,I'm missing the possibility to create a Policy for a Specific User Group (Assign to Specific User Groups - Add User Groups - Lookup Groups) from the Active Directory Server like in Version 8.7. The binding to the AD Server is configured and working.Thank you in advance for your answers and best regards! Martin

Hi, We are running into issue with Script Parameters while adding it with the script. It works fine if we call that in the script, but when I run any command as currently logged in user the parameter variable $4 does not work. For ExampleI am specifying the string "TEST" in Parameter 4 Not Labeled while adding the script. When I call $4 in the script directly it works, but I need to run a command as currently logged in user. When I echo $4 as currently logged in user, its blank. My Script is to send an email based on the Script Parameter specified at Paramater 4($4). #!/bin/sh echo $4 # this echoes "TEST" LOGGEDUSERS=`who | awk '/console/ {print $1}'` su -l $LOGGEDUSERS -c 'echo "$4 Contents" | mail -s "Success" admin@test.com' # this triggers the mail but $4 value is blank in email Is there any way to call the script parameters while running the command as logged in user? Regards,Karthikeyan

I didn't want to hijack @johnklimeck's thread: https://jamfnation.jamfsoftware.com/discussion.html?id=6438 So here's a related issue...users who disable our hidden local admin account (not our hidden Casper management account). Aside from tracking/reporting these incidents, we need a way for Casper to recreate the account. Another twist is to remove the hiddenadmin user home directory if it happens to be in /Users. Three commands are needed: sudo dscl . delete /Users/hiddenadmin ; sudo rm -Rf /Users/hiddenadmin ; sudo jamf createAccount -username hiddenadmin -password xxxxxxxx -shell /bin/bash -admin -hiddenuser -home /private/var/hiddenadmin Admittedly this is a BFH, but it's the only sure fire way to ensure the account is always enabled. No issue with deleting the home directory, since nothing should be stored there anyways; no issue in blasting the account from dscl since it's a local account and we can't risk the account existing (with an unknow

I'm deploying 50 laptops with parallels for a customer. I built the deployment package and added our enterprise license. Tested the package and it works fine. However, when I deploy the same package via Target Mode Imaging (TMI) Parallels, and only Parallels, isn't loaded. If I move the package over to the just imaged system and run the Parallels installer it works great. Deploying the vm container works great via TMI as well. It's "only" the application that is the problem. My first thought was that the installer wasn't working because it's not a "flat" installer and our distribution point is a Windows server. But if I manually mount that distribution point and pull the package down by hand and install by double click it works fine. Any thoughts on why this .pkg won't work via TMI but will with a manual double click? Thanks in advance, pew

Hello All, I recently noticed that the warranty field for all my mac's displays as "N/A" and thought it was because Apple had deactivated my GSX service account. ARG! I got the account reinstated and have logged in successfully and tested successfully within the JSS GSX settings. Alas, my warrantly information still displays "N/A". I found one other thread on this that mentioned proxy settings as blocking the traffic but I've confirmed that there are no proxies in place on my JSS server. Any other thoughts? Is there another way I can test this traffic from my GSX server to see if it's being blocked? Thanks in advance! Tori Paulman

A few groups we support need to stay on FileMaker Pro 11, so we're packaging for deployment. We want to stifle the update prompt (image). When we capture ~/Library/Preferences/com.filemaker.client.pro.plist then toggle the update checkbox in FileMaker Pro 11 preferences, then capture the plist again, we only see a single key change. external image link Checkbox on: <key>Preferences:GenOptions</key> <integer>2438</integer> Checkbox off: <key>Preferences:GenOptions</key> <integer>2470</integer> BTW, the checkbox we want/need to disable is actually in FileMaker Pro prefs (not in the above dialog box...that should never appear): external image link It doesn't seem to do the trick...am I missing something? Where's the magic bullet for disabling update checking in FileMaker Pro 11? :) TIADon

We are trying to create a package with all our "User" settings to a dmg and then during image deploy the user settings using the FUT option, but we cannot seem to get it working correctly. We have created a new package in Composer, then copied across the /Users/<usersname>/Library/Preferences folder including the hidden plist files and the ByHost folder, when have then gone through the pacakge and stripped out the plists we are not setting then saving it to dmg. When then add the dmg to our Casper Admin Configuration with the FUT option selected. This does not appear to put any of the plists into the /System/Library/Users Templates/English.lproj/Library/Preferences If we use the FEU option aswell it does the Existing user but not the template.If we deploy the package once the computer is finished imaging or install to boot volume during image time it appears to work. Am i doing this right, or what am i missing?

Hi All, I've been trying to add an app to the mobile device app catalog for over a day now. Originally I thought it might be the app store but 24 hours later the same problem is still there. I click on Management / Mobile Device App Catalog / Add App / App store app / enter Drive as the app name and pick the Australian App store (doesn't work if I use the US store either). Casper spins it's wheels for about 30seconds or so, then returns an empty list. Any ideas? Cheers,Chris.

I am attempting to deploy Creative Cloud for Teams, with basically everything included. I created the PKG just fine with Creative Cloud Packager. The first pkg i created didnt really work at all, regardless of if I was installing via casper or interactively. I scrapped that one (and the second one i built, which performed the same way). In order to eliminate variables, i built a fresh machine with a clean OS on a new partition, updated it so it is current, then installed JUST CCP. This partition is not managed or anything, its just a vanilla OS with CCP. I then downloaded all the content and built a new pkg with CCP. I tried to manually install this, and it installed just fine. Then, i uploaded it to casper, set up a policy and tried to install. This failed, with this error in the JAMF.log: Tue Aug 6 12:54:06 VM-ADOBECC-TST1 jamf[1065]: Installation failed. The installer reported: installer: Package name is CreativeCloud installer: Installing at base path / installer: Th

So this doesn't have anything to do with Casper, but hopefully someone knows a good answer. There is a need to have an internal drive in a MacPro show up as external. This is for a piece of software that won't run properly on an internal drive, but will on an external. Ugh... So some basic searches on Goog wasn't any helpful. Looking to see if anyone here has a solution. Where is the flag that marks a drive as internal or external, and can you modify/trick the OS into thinking one is one way or another? Thanks in advance.

I'd like to make a network segment to encompass our whole class B range. Is it possible by defining for e.g. nnn.nnn.1.1 - nnn.nnn.255.254 where nnn.nnn is our class B Regards, David

I have what I thought was a non issue.. but for the life of me I cannot get a command to run right.in the applications folder i have two similar items:drwxr-xr-x 5 admin admin 170B Sep 23 2011 SimBio Virtual Labs drwxr-xr-x 5 admin staff 170B Aug 7 09:07 SimBio Virtual Labs.app I need to delete the SimBio Virtual Labs folder.... not the app. If i try to path it out the OS just spits back no such file directory... it seem to identify the folder and app separately: SimBio Virtual Labs / SimBio Virtual Labs.app/ but will not take the command to delete the folder is there a way to specify the target as the folder? thanks

We are attempting to create a package in Self Service to allow a user to upgrade to Mountain Lion (from Lion). I've got the script and Mtn Lion package working to the point where it works to upgrade to Mtn Lion just fine except once it's up and running I find that the machine has lost its JAMF/Self Service connection - it now requires an admin username/password to install something from Self Service. Previously any user could launch an item in Self Service without an admin UN/PW. Also, I cannot then force install a package onto a machine, which also makes me think the connection is broken. When I reboot I no longer get the "checking for updates" message either. It also appears that our hidden admin user does not exist/work on the machine. If I then run the QuickAdd package locally, everything is fixed - however, I would prefer this be a smooth process that doesn't involve running anything after the upgrade to Mtn Lion. Any ideas on what I'm doing wrong

I have a secondary Linux distribution point that I would like to make available to Self Service users from outside of our network (ie, from home). I have set up the Linux server with an AFP share and defined it in JSS as a DP server, both with the AFP and HTTP information configured. For all I can tell, the Linux DP server itself is fully ready to accept requests (port 80 is open, Apache is running, etc). I have opened up my network firewall to get to the server via the browser outside our LAN and I can download packages from the CasperShare directory with no problems. When I attempt to download an application from Self Service on an external network, the policy fails. Logs show an attempt to mount the master AFP share, which fails, then the Linux AFP share, which also fails. However, no attempt is made to use the HTTP protocol. Questions:1) Why isn't Self Service trying HTTP to the Linux DP if I've defined how to get to it in JSS? In other words, how do I get JSS to use HT

Hey all, I apologize in advance if this has already been addressed, but I looked and could not find anything. We're having problems with our images holding our wireless settings (preferred SSID). I've tried baking them into the image and also using a script at first run (works when executed manually). For some reason it's not executing any of our scripts at first run (logs prove this to be the case). We're new to the Casper suite so I'd assume we've done something wrong. Here is the process we took when creating our image(s): Started with clean install on a MacBook Air Made a few changes (root, remote management, joined wifi, etc) Used Composer to build OS Package Made a configuration profile with the OS Package Anything wrong with this process? Is there any reason why it would not hold our wireless settings? We've tried this with both 10.7.5 and 10.8.4 on a MacBook Pro and Air. I've never had this problem in the past. I do see our network

I have a situation where I am working on doing a DMZ install of the JSS. what I was under the impression is that with a DMZ JSS there is a Database there for fail over as well as the one it is pointing to internally. Is this correct or is the DMZ JSS only pointing to the internal database and if it loses contact with the master it then is dead also. Currently the main JSS is running on a mac mini and houses the database.

So when a Domain Admin user logs on to a Mac for the first time the Mac automagically selects and greys out the [x] Allow user to administer this computer checkbox. They can sudo, etc. When we check JSS, it shows that user as non-admin. We had the user run "sudo jamf recon" to refresh JSS, but still shows as non-admin user. This is probably a moot issue, but we're curious. Should we be concerned that JSS doesn't recognize this user as an admin user? JSS is indeed bound to to the domain, as are all the Macs. Thanks,Don

Recently received some new 13" MacBook Air (6,2) devices and am trying to apply a configuration profile that involves a SCEP payload. When the profile is attempting to be applied to the machine, it fails with <NSOSStatusErrorDomain:-67693> within a few seconds of the notification being sent. I have recreated a new configuration profile and isolated the problem to be just the SCEP payload as being the cause of the problem. We are running Casper 8.71. Does anyone have any idea as to what this error means and how it can be corrected? We are not having this problem on systems that were updated from 10.8.3 to 10.8.4 bu

For those of you in environments where your Macs are bound to a central directory service (AD/LDAP/etc) and you've locked down SSH, can you clarify if it possible to lock it down via directory group vs just a single user account (as offered in the initial JAMF QuickAdd package)? The following script helps automate the secure SSH by user part, but just curious if it's also possible to define by a specific AD management group as well? https://jamfnation.jamfsoftware.com/viewProductFile.html?id=135&fid=460

Ok, so we have some users who alternate between bootable partitions, including IT folks. :) Casper seems to need a kick in the @$$ whenever the Mac is toggled between partitions...running sudo jamf enroll -prompt after switching bootable partitions fixes things. ;) Is there a best-practice for this scenario? How do we ensure once-per-computer policies run on each of the partitions? What if partitions are different OS'es? Casper should be intelligent enough to adjust during the standard inventory update, no? Thanks,Don

My company's current security posture coupled with the lack of a Symantec Data Loss Prevention client (OS X) have driven a new request: "...to have the ability to write to USB/DVD disabled for all Macs" I have been through the posts associated w/ disabling USB in its entirety, but I sure would like to stay away from overcompensating. I am also interpreting this security request as applicable to all removal media (thunderbolt/firewire etc). Any obvious solutions for this? Thanks in advance...

Hi everyone! I cannot find any documentation regarding the Autorun checkbox found in the Packages tab while editing or creating a policy. I understand what FEU and FUT do, but I'm at odds with Autorun. Automatically launch an application it has just installed? Thanks!Sal

We are a cross platform shop and currently re-share an Xsan/StorNext Volume via SMB on Windows Server 2008r2. Mac users often use one of those illegal characters which wreaks havoc with our backup and with our reshare. Is there a way to prevent OS X from saving files with characters considered to be Illegal on other OS's?

Until recently, we have been using Mac mini servers with Lion installed on them as our Casper Imaging stations. We could NetBoot over USB and image without issue, aside from occasionally long boot times on Thunderbolt machines. However, when we upgraded one of our minis to 10.8, we began to have issues with Casper Imaging. Our configuration was set up to run a shell script which would use command-line tools to perform a block copy of our selected image to our Macs. It worked without issue on all of our machines, be they MacBooks, MacBook Airs, or iMacs. However, after the upgrade, the shell script would occasionally be skipped by Casper Imaging and it would jump directly to the second item in the configuration. It would finish installing the other items in the configuration and reboot, as normal. However, due to the script being skipped the computer had not actually been imaged at all. As a test, I created a new configuration that simply used Casper Imaging to perform the block copy

Trying to rename student iPads and installing JSS enrollment profile using Configurator 1.3 (just updated to that a week ago...big mistake!). OS on the server is 10.7.5. It is constantly crashing for me. Something that usually takes 5 minutes has taken me days. I'm running out of time quickly here with summer half over. Googled it, and it sounds like I'm not the only one having this problem. Do I upgrade to 10.8, or do I wait for Apple to fix this? Thanks!