Weird one here. I'm trying to make a deployable Bootcamp image through Self Service. I have properly made Winclone image which has been successfully tested through the command line. I have a script that "appears" to work that is loosely based on another script that appeared on here a while back. So i've created a non-flat package in Composer that places all the relevant files into /private/tmp/BootCampDeploy and then runs a postflight script to do the actual work. The package and script actually work but I find this in the policy log: /usr/sbin/jamf is version 8.71 Executing Policy Bootcamp Deployment... [STEP 1 of 3] Mounting afp://server/CasperShare to /Volumes/CasperShare... [STEP 2 of 3] Copying Win7BootCampV4.pkg... Installing Win7BootCampV4.pkg... Installation failed. The installer reported: dyld: DYLD_ environment variables being ignored because main executable (/System/Library/PrivateFrameworks/Install.framework/Resources/runner) is setuid or setgid installer: Package name i

Hello All, Im posting a few questions and hope you guys have some pointers for me : How to apply mac os 10.8 updates auto. in casper for non admin user ? How to package updates for smart notebook with composer ? How to remotely delete smart response and smart boards tools trial installed by notebook ?

Hi guys Does anyone know how to make VMware fusion recognise my vms on an external drive? I'm on a laptop and I keep running out of space. I'm kinda thinking of symbolic links. Has anyone else done something similar?

I am moving away from Apple Portable Home Directories in favor of CrashPlan and would like to stop HomeSyncing on computers that already have Mobile accounts. I am running tests on my own account and am a bit perplexed.No matter what I do my computer keeps trying to HomeSync. I removed my user account from the Directory Group that had home syncing configured. I deleted the managed preferences on my machine, I unbound and rebound the computer. If I run the ID command in terminal it clearly shows I am not part of the Portable Home Directory group. I deleted the MCX plist, I deleted the ~/FileSync folder but my computer is determined to HomeSync. Does anyone know where the settings for home sync are hiding??? BTW - I also ran dscacheutil -flushcache and when I hold the option key when logging into my account, it does not show any Mobile Account group...

Running into an issue where imaged laptops are displaying the "Are you sure you want to open this application downloaded from the Internet" Dialogue box with applications that have been added (Skype, Hipchat, etc). This is persistent in the user account, as the system thinks the main admin account has downloaded all the applications. Found the following article, but it explained the way to disable the flag on one app: https://jamfnation.jamfsoftware.com/article.html?id=59 I have also tried a few more scripts, all to no avail, as they seem to want to affect incoming downloads, not "existing" ones. So here is the question. Do we need to be opening all apps in Composer before we package, and will this make a difference? (It seems all info for this stuff is captured in com.apple.quarantine, but not sure if this would be a part of the capture, i also would much rather the user plists are created fresh, although I suppose I could manually remove before packaging) If

I plan to use the "once per computer" execution frequency in some of my policies, but I'd like to know if computers where the policy has already executed once have their status reset after being imaged. In other words, if I image a machine, will once-per-computer policies re-initiate on that machine as if they had never run?

Hi All, Currently trying to use Scenario 2 (from https://jamfnation.jamfsoftware.com/article.html?id=173) from a 10.7.5 client machine. All seems to work fine, but on the reboot of the installer app the machine will boot to an Apple Logo and Kernel Panic. The installer app is cached locally first and the executable within launched from Self service using the settings above.If the installer app is launched manually (although requiring local admin authorisation) it will work fine - ruling out a bad installer. Any ideas / assistance please? Darren

Hi, I need to do an audit to get a list of which of our Macs have an active VMware virtual machine installed. It's sort of been "every man for himself" with regard to people installing Windows VMs, but there is an effort underway to get these VMs bound to our Active Directory domain and managed by IT (so they can have AV and patches, etc. the same way our Windows desktops do). I can easily find out who has VMware Fusion installed... but that tells me nothing, because somewhere along the line a past employee added VMware Fusion to our default configuration, so a great many people have the app, but don't have a license installed or any VMs created.

We have a laptop cart and configuration profiles created in JSS that tell which WIFI network the laptop should connect to. The config profile are scoped out correctly in JSS. But for some reason the config profiles are being removedor are not applying thus causing the laptop to have no wifi connection. The students connect to a guestpublic wifi but they cannot print ...thus the helpdesk getting calls about no printing for the cart. I doubt the students are navigating to Syst PreferencesProfiles and deleting the profile. My questions is - is there a systematic way that the profiles are being deleted or are just not applying? I can create a config profile in 10.8.x server Profile manager to never remove the profile without authorization. So this profile is locked down I guess. That tested good. But the JSS created profiles are not applying on random computers and at one point in time they were applying.

So were starting to use more of the enrollement process where we send users the link for the enroll page and they download the package and it does the rest. What's odd is that when a user runs the package they get prompted to install Java SE 6 Runtime because it's needed. Even if they choose "Not Now" things still work...but is there a way to get rid of that requirement since it's not needed? I noticed that during the whole imaging process it pops that install like 2-3 times. Is there some older Casper systems that still need this? Were trying to move away from Java all together and would like to resolve this issue.

What type of asset recovery/tracking software do you folks use? Basically we are a medium sized school district considering going from just a few hundred iPads to doing an iPad 1:1 pilot program, and I'm trying to cover all the bases. Sure there is Find my iPhone, but that was primarily designed for consumer use from what I know of it. I want to see what other folks in both the enterprise and the EDU sectors are using. If you are using Find my iPhone, feel free to tell me about how. Privacy policy and issues with tracking? Do you folks not track the devices and handle it through your legal department (i.e.. a signed contract to receive one)? Feel free to discuss this asset management aspect in any way you feel is relevant. Thank you in advance.

Is it just me, or do you have to quit and re-launch Admin for this option to reckognize a newly-added package?

Are any of you out there in JAMFNation are using custom /Library/LaunchDaemons/com.jamfsoftware.task.1.plist for different groups? In the environment where I am I have three production groups that I'd like to change the check-in times from every 1/2 hour to once a day. (presently they have scripts that run on startup - check-in and then remove the framework - problem being - machines don't get restarted often...) Also thinking of setting a report day/time. Would there be any issues you could think of setting this schema up - besides installing the plist as a post installer script?

I get the impression that it's not possible to do this, but just wanted to confirm: Is it in fact possible to get 'Removable Mac Address' information via the JAMF REST API? Thanks,R

We have a script setup that prompts to enter a new computer name. It runs after login after imaging, and the account logged in is the local admin group that is setup somewhere in the process. I am trying to make a newer image that functions the same way as the existing one, but I'm not sure where to place this script. It is placed in Applications/Utilities after image and I believe is removed after it runs. Sorry if this is a basic question. I have tried reading the documentation and doing some searches but I am having trouble understanding the way imaging for the Macs works and unfortunately no one else here knows.

Ok here it is; I have sent this to over 20 people on this list so far and still I have been asked for it. So I have decided to post it here. It works just fine for MacOS X 10.6.x built-in CiscoVPN. You can also use it with Casper Policy for quite deployment. You can get the logo from the link below for Self Service.http://rocketdock.com/addon/icons/14259 Please read the beginning of the script for instructions. Script can do with the tidying up I guess... Enjoy Cem #!/bin/sh # This script configures built-in VPN (Cisco IP Sec) for logged in user. Server, Shared Secret, DNS Search Domains and Web Proxy # Requires JAMF framework and "yourcompany VPN.networkConnect" package to be installed to the "/Applications/Utilities/" first. This file will be removed after. # To edit this script, do "command - F" from your keyboard and use "Replace & Find" function from your favourite text editor. # Simply replace "yourcompany" to your co

Hey, guys: I've set up a Mobility Configuration Profile to "Create mobile account when user logs in to network account" for our Open Directory (10.6.8). Of course, being a User Level profile, this doesn't get applied until after first login. So the first time we log in with a network user it creates a network account, then the Configuration Profile gets applied, so the next time we login, a proper mobile account gets created. This is okay, but is there any way to get the mobile account on first login? Lemme know your thoughts! Michael

Hey Guys, Has anyone run into an issue deploying CS6 Web and Design Premium as part of a configuration? I normally deploy CS6 as part of a configuration when rolling out a computer lab, but since I upgraded to Casper 8.64 I will not deploy it anymore. The process takes its natural course, up to the point when the machine reboot to finish installing the software in the adobeinstall account, which installs other application in the configuration like Symantec Endpoint Protection and ADmitMac, then just reboots without deploying CS6. Here is the error message I am seeing from the install.log: Mar 24 01:46:11 ADT-MLDESK-01 installd[5995]: ./preinstall: AAMEE Installer : Exit code of AdobeDeploymentManager is (79) Mar 24 01:46:11 ADT-MLDESK-01 installd[5995]: ./preinstall: AAMEE Installer : Exit ... Mar 24 01:46:11 ADT-MLDESK-01 install_monitor[5999]: Re-included: /Applications, /Library, /System, /bin, /private, /sbin, /usr Mar 24 01:46:11 ADT-MLDESK-01 installd[5995]: PackageKit: r

We're about to flip the switch on a load balancing situation, which is the "best practice"? Change DNS entires on the network so that the load balancer takes the name of the previous master JSS? Or change the JSS URL within JSS itself under Global Management Framework Settings to the current Load Balancer name? We're trying to do this as seamlessly as possible with clients not re-enrolling into JSS. The first choice I worry about other services that maybe using the original DNS name and breaking (i.e. my distribution point replication scripts), but with the 2nd option I worry about having to re-create new certificates for the new load balancer and things internally with JSS that I'm not aware of breaking when I make that change. Thoughts?

Does anyone have a successful script that imports a prebuilt VM into Fusion While keeping the list of vm's that are currently in vmware.? The deploy documents from vmware don't work and the jamf ones don't talk about this.

Hello. I noticed that the existing Guideline to package VMware is not up to date to the latest version 5.Can anybody tell me how version 5 is packed via Composer? Thanks a lot.

I've created a test windows distribution point. Made local accounts for both casperadmin and casperinstall. I've replicated my main distribution point to the test distribution point on the windows vm with CasperShare on drive D. I was pleased when it succeeded... When using a boot drive that kicks off Casper Imaging, I see the site, but it can not mount it... My debugging showed that I can mount the CasperShare on the VM using my credentials (smb://servername/CasperShare), but can't using either casperinstall or casperadmin. Do we need a service account in order to be able to mount these shares over the network?

Does anyone know if the github netsus project will install on redhat? If not is there a documented method to setup the netsus environment using redhat as the base OS? Thanks.

Just a friendly heads up that Java 7 Update 25 has been released. http://javadl.sun.com/webapps/download/AutoDL?BundleId=78698

We're trying to migrate our Workgroup Manager preferences to JSS and we're not finding managed preference templates for a lot of our WGM settings. Here are a few of the keys I've found in our WGM configuration that I can't find equivalents for in JSS. Can anyone help me find these? *com.apple.finder- ComputerViewOptions_Arrangement- ComputerViewOptions_IconSize- ComputerViewOptions_ListIconSize- ComputerViewOptions_ShowRelativeDates- DesktopViewOptions_Arrangement- DesktopViewOptions_IconSize- IconViewOptions_Arrangement- IconViewOptions_IconSize- ListViewOptions_IconSize- ListViewOptions_ShowRelativeDates *com.apple.LaunchServices- LSHandlers- LSHandlerContentType- LSHandlerRoleAll *com.apple.mcxprinting- AllowLocalPrinters- DefaultPrinter- RequireAdminToAddPrinters- RequireAdminToPrintLocally- ShowOnlyManagedPrinters- UserPrinterList-Raw- FooterFontName- FooterFontSize- PrintFooter- PrintMACAddress- RequireAdminToAddPrinters- RequireAdminToPrintLocally- ShowOnl