I -- I want to do something simple, but no matter what way I write the following script, it doesn't seem to change anything; #!/bin/bash #Backup the original authorization file /bin/cp /etc/authorization /etc/authorization.original.backup # Unlock Energy Saver preference pane /usr/libexec/PlistBuddy -c 'Set :rights:system.preferences.energysaver:group everyone' /etc/authorization Or #Copy the authorization file to a temporary location & make it a plist /bin/cp -pr /etc/authorization /private/tmp/authorization.plist #Allow Device region code to be set /usr/libexec/PlistBuddy -c 'Set :rights:system.device.dvd.setregion.initial:group everyone' /private/tmp/authorization.plist # Unlock the Energy saver preference pane /usr/libexec/PlistBuddy -c 'Set :rights:system.preferences.energysaver:group everyone' /private/tmp/authorization.plist # Move file back to original location /bin/mv /private/tmp/authorization.plist /etc/authorization The script

Is it possible to set something up to show two icons on boot up.. one for windows 7 and one for mt lion 10.8? The user would click on what they want and it would take them to the appropriate OS. It would be nice to have this instead of holding in option. I tried researching this, but couldn't seem to come across it. Any help would be greatly appreciated! Thanks!!

I ran into this issue on a number of MacBook Airs where I work. Here's a fix:1. On a MacBook Air (mid 2012) install the update. You can use Software Update or download and install it manually (http://support.apple.com/kb/DL1655).2. When prompted, select the option to Restart during the installation process. The computer will restart but the Firmware Updater will not be run.3. After the computer restarts, enter a password to unlock the disk and continue starting up.4. When the computer finishes starting up use the following terminal command exactly as it appears below to prepare the update: sudo bless --mount / --firmware /System/Library/CoreServices/Firmware Updates/HardDriveUpdate3/hdfw.efi --payload /System/Library/CoreServices/Firmware Updates/HardDriveUpdate3/HDFW --nextonly --setBoot --shortform You may see a message similar to the one below after executing this command. If no other messages appear then you can ignore it and proceed to the next step. Could not get informat

We are starting a 1 on 1 program this year and we have some 1 year old laptops that we purchased last year that we would like to upgrade the OS. I have imaged a few of them and I was wondering how to get the DLE terms to appear when the computer boots up like our new machines that we received. These older computer are going to be spares for the student if something happens to theirs.

In network preferences / Advanced, there's a checkbox to "Require Administrator Authorization to turn wi-fi on or off" that I want checked ("true") for all of our computers on our network. I found the preferences.plist file that stores this checkbox value (/Library/Preferences/SystemConfiguration/preferences.plist), but I'm no "scripter". Does anyone know how to write a script that would effectively change the RequireAdminPowerToggle section of that plist file from "false" to "true"? I can't roll that entire plist file out to every computer via a policy because I don't want to change ComputerName for all of our computers. In other words, I can't have this particular plist file for every computer on our network - I just need that value changed from false to true. Can anybody help? I wish I knew more about scripting...

I have been looking over some of the discussions that have already been had around this topic, but i haven't been able to get a clear picture as to if i am able to do what i am trying to do. There are apps on the mac app store that i wish my users to have access too, however i want them to download and install using self-service and not the mac app store. Is it possible to obtain the apps (only the free apps, or volume licensed apps, will not be using cracked app) from the app store or other sources and then have it installable from self service. Secondly.. the updates for these apps. Ideally i would like these to take place using my managed apple update server (like the OS updates) and not the app store if possible, as the users will not have access to the app store. is any of this possible, and if so, could i please get a bit of a 'how-to' on this? as i have been searching for the answers to this for days and i need to get this done asap.

We've got some volunteers today that are going to supervise all 400 of our ipads. That said, we're planning on using Casper Focus, but weren't alerted of the volunteers in time to do some testing. So off the bat, do you recommend pushing Casper Focus as an app from Apple Configurator or having students download the app?

OS: 10.8.2 and 10.8.3JSS: 8.62DNS: 2003 Active Directory I am having an issue that is only apparent with managed Mountain Lion clients. When you image a Mac through Casper Imaging using a managed build, the Mac will automatically grab whatever name a reverse lookup can find in DNS and overwrite the name of the Mac and eventually update that name in the JSS, more often than not this name is not correct at all due to stale records in DNS. When you image a Mac with a completely custom build in Casper Imaging (not managed via the JSS) then it keeps the name set in the application and does not lose it to the name in DNS. I assumed it was a built-in issue with ML but since testing the non-managed build and it working, I have turned to you guys for help... I do not "reset" computer names in any policy in the JSS and cannot see where this must be coming from. Andrew Edit: I do use a hostname script to set the name for HostName, LocalHostname and ComputerName, the issue still oc

Hello,We have updated our netboot image to handle our new MacBook Airs running, what we call, 10.8.4a. With this update, we also updated the to include the 8.71 binary for Casper Imaging. We are now noticing that when starting the Casper Imaging app, it stalls at the information screen stating "Checking https://<ourjssserver>:8443" for a full minute before finishing opening. Once opened everything continues on without any problems. This wasn't happening when we were running 8.62. Any ideas why the slowdown? Tim

When we try to replicate to one (of many) Isilon shares, Casper Admin 8.64 sits there showing: external image link A peek at the Casper Admin log shows the error is continuous, with each error showing up 5-6 times, seems to be in some sort of loop: external image link The Packages folder only has PKG/DMG files in it...although non flat PKG files will have .DS_Store files in its' hierarchy. This is only happening on one (of many) Isilon shares...has anyone seen this before? TIADon

Is there a jamf binary command to forget Casper receipts residing in /Library/Application Support/JAMF/Receipts/, in the same way that Apple's pkgutil --forget <receipt> command removes receipts residing in /private/var/db/receipts/?

We are attempting to install an EFI password on some test machines and are experiencing some issues. Our procedure is as follows: (1) Put the setregproptool inside /Library/ApplicationSupport/JAMF/bin(2) Create a .pkg package for the setregproptool that has been uploaded to Casper Admin. Distribution of this file seems to work successfully.(3) Run a JAMF policy on the Accounts tab for Open Firmware/EFI Password with Mode set to "Command" and the Set box checkmarked. The issue is that whenever #3 is run we get an error that "EFI Password is already set". If I option boot to get to the manual EFI Password Utility - it's not set. I can set it, reboot, and unset it, reboot, and the policy does the same thing. Any thoughts on what the issue might be? I initially was thinking maybe the setregproptool might be a "one off" thing that was triggered on our first test machine before I packaged it and distributed - but I recaptured the setregproptool and still

How are you all doing WiFI based AD authentication? We have an 802.1X solution that was implemented before I arrived. You can connect to the SSID but you won't get an IP address until you supply an AD username and password. That makes life interesting if you have computers that can't be permanently wired to Ethernet all the time ... like laptops. On our standard 10.8 build, I tried a modified script tied to a LaunchAgent to detect if there was no ethernet access and then mount an existing 802.1x profile on the computer. No go, wifi on, network connected, no IP as it didn't pass credentials through. Tried config profiles using the "Use as a Login Window configuration" option. Found that this method only works for us when a user account already exists on the system. If someone logging in doesn't have an existing account, it fails. We're pretty tied to our existing 802.1x implementation thanks to the requirements of JANET (www.ja.net if you're i

Hi, I'm having difficulty with Netboot from an Xserve running Lion Server. We are in a different subnet but have a helper address in the firewall that is the gateway between the two subnets. When I try netbooting from one of our client mac's by holding the N key downat startup I get:Big globe, Little Globe, Circle with Cross through itBig globe, Little Globe, Circle with Cross through itBig globe, Little Globe, Folder with Cross through it then it gives up and boots normally I got a port mirrored on the network switch and plugged various testmachines in and captured the network traffic whilst the above was happening.What I see is the sftp download of the booter file but when that ends Idon't see the NFS traffic start up. I can manually sftp and download the booter file.I can also manually mount the NFS share and traverse all the way into theNetboot image and access the DMG. On another server, I set it up to be the same as the first server- OS X Lion Server- s

I've used Removable Mac Addresses, but we were hoping to add some sort of label as our number of Ethernet to ThunderBolt adapters has grown dramatically this year. I assume we're still stuck with unlabeled connectors? Do some of your use both fields? Add it to the removable MAC addresses, and also create a peripheral type with a custom label?

I am using the JAMF Written "display message" script to display a security warning to my end Users. When I let the JAMF automated policy run, no matter what (I'd say 98.5% of the time) I seem to get the below: /usr/sbin/jamf is version 8.62 Executing Policy Outlook Security Script Force... Mounting smb://loujsslps01.humana.com/CasperShare to /Volumes/CasperShare... Running script Microsoft Outlook alert Forced.sh... Script exit code: 1 Script result: Displaying message to user... 36:758: execution error: An error of type -10810 has occurred. (-10810) Unmounting file server... As a work around I tried a variety of scenarios that all fail. I've copied the script to a JSS directory that I store certain local content on workstations for easier self service and have a policy that just calls that script file. I've also run the script directly from the policy both with a before and after execution. All fail. If I run the script through Casper Remote or SSH into

I have some kiosk machines that need to automatically login on boot, but I can't seem to get my package to work properly at imaging time even though it works once I'm logged into the machine. I created a package that contains the kcpassword file (permissions are correct) and this postinstall script. #!/bin/sh /usr/sbin/jamf createAccount -username ***** -realname ***** -password ***** –home /Users/***** –shell /bin/bash /usr/bin/defaults write /Library/Preferences/com.apple.loginwindow.plist autoLoginUser ***** /usr/bin/defaults write /Library/Preferences/com.apple.loginwindow.plist autoLoginUserUID ### This package works as anticipated when pushed through Casper Remote, but not from Casper Imaging, even when deployed at first boot. Anyone have an idea why?

How can one make the 10.8 image auto connect to Radius Wireless before logging in, so that users are able to authenticate over Wi-Fi. After authentication, it should switch to using their AD credentials to access the network. We would not like them to be able to stay on the radius connection.

Hi JAMF Nation, I've lost the ability to manage a 2011 Macbook Pro (OS 10.7.5) so I'm trying to run a sudo jamf enroll but the enrollment always gets stuck at Locating mobile device records. sea-xxxxxxxx:~ xxxxxxxxx$ sudo jamf enrollDownloading the JSS CA Certificate...There were (1) previous JAMF device identities found on this computer. Removing...This computer was successfully enrolled to the JSS with the following device certificate: "AD9DCCB5-DD5B-5AAB-8525-B7327FF15EA9"Retrieving inventory preferences from https://sfo303ut06.na.corp.yrbrands.com:8443/...Finding extension attributes...Locating hard drive information...Locating hardware information (Mac OS X 10.7.5)...Executing Unix applications...Locating accounts...Locating applications...2013-07-12 08:33:25.161 jamf[1214:a07] CFPropertyListCreateFromXMLData(): Old-style plist parser: missing semicolon in dictionary.Locating package receipts...Locating printers...Locating software updates...Locating fonts.

Okay so i want to see if anyone is or has experienced this besides me. We have our jss and 3 distribution points which are running mountain lion. We can image 8 to ten computer at a time but after we do two or three batches that number decreases and images start to fail. We then need to log on to the server and clear out the client0 folder restart the server once sometimes more and can then image again.

I'm having a bear of a time understanding what this log error message means. I've scrubbed data, I've deleted profiles and recreated them and have re-enrolled all of our Mac OS X 10.8 clients. I've even escalated to support, but was hoping some seasoned JSS admins out here might know or have seen similar error messages. Here are relevant portions of our log files from finishing the Tomcat initialization to the point where the error recurs. I thank anyone in advance for assistance in troubleshooting. 2013-07-11 14:42:15,346 [INFO ] [InitializeServer ] - Finished JSS Initialization.2013-07-11 14:42:20,738 [ERROR] [MDMComputerAction ] - <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1"> <dict> <key>ErrorDomain</key> <string

If you work in the Enterprise or in Education managing Macs and/or iOS devices please plan to join us for the first gathering of our San Francisco Bay Area macbrained.org Mac Admin Community. At this kick-off we want to help build the format and agenda for future meetings in and around San Francisco, Silicon Valley, and the South Bay. Let's build this local community together! RSVP NOW! http://macbrainedorgkickoff.splashthat.com/ WEBSITE: http://www.macbrained.orgEMAIL: info@macbrained.org

I'm considering deploying a pre-configured Firefox profile for new staff computers and I'm wondering if anyone has tried this and whether there were any problems doing it. On a fresh system, I installed the latest version of Firefox and used Composer to capture the Firefox and Mozilla folders located at ~/Library/Application Support as well as a couple plist files (com.apple.ATS.plist and org.mozilla.firefox.plist) from ~/Library/Preferences after I made some very basic setting changes in Firefox's preferences. I inspected all the various files located in those folders and only one (secmod.db) seems to have a path referencing files located in the current users folder. A little Googling reveals the secmod.db and cert8.db files are files that apparently can be deleted and new ones will get created at launch time. So I removed those files from the list of captured files. My limited testing reveals things seem to work as anticipated. I know when you launch Firefox for the fi

Is it possible to push out a supervisor profile to iPads via the JAMF system? We have a bunch of iPads that have been deployed and are looking to install the iBoss mdm profile on the device to provide web filtering off site. However it requires that the supervisory profile be on the devices first.

I'm looking at these 2 settings. Configure SSH (Remote Login) to only allow access for this user - Under Settings, Casper Admin, Configuration, Management. Ensure SSH is running - Under Settings, Computer Management Framework Settings, Startup Item. I believe number 1 is the option to setup Secure SSH so that Casper Remote can connect to the client machines and do its thing. Number 2 is Normal SSH and is the one that appears ticked under Sharing when enabled. What I don't understand is with number 1 ticked and number 2 unticked Casper Remote doesn't work. How can I ensure that Casper Remote can access clients without giving access to other users ie The more secure the better? I'm running Casper 8.71