Is there a jamf binary command to forget Casper receipts residing in /Library/Application Support/JAMF/Receipts/, in the same way that Apple's pkgutil --forget <receipt> command removes receipts residing in /private/var/db/receipts/?

We are attempting to install an EFI password on some test machines and are experiencing some issues. Our procedure is as follows: (1) Put the setregproptool inside /Library/ApplicationSupport/JAMF/bin(2) Create a .pkg package for the setregproptool that has been uploaded to Casper Admin. Distribution of this file seems to work successfully.(3) Run a JAMF policy on the Accounts tab for Open Firmware/EFI Password with Mode set to "Command" and the Set box checkmarked. The issue is that whenever #3 is run we get an error that "EFI Password is already set". If I option boot to get to the manual EFI Password Utility - it's not set. I can set it, reboot, and unset it, reboot, and the policy does the same thing. Any thoughts on what the issue might be? I initially was thinking maybe the setregproptool might be a "one off" thing that was triggered on our first test machine before I packaged it and distributed - but I recaptured the setregproptool and still

How are you all doing WiFI based AD authentication? We have an 802.1X solution that was implemented before I arrived. You can connect to the SSID but you won't get an IP address until you supply an AD username and password. That makes life interesting if you have computers that can't be permanently wired to Ethernet all the time ... like laptops. On our standard 10.8 build, I tried a modified script tied to a LaunchAgent to detect if there was no ethernet access and then mount an existing 802.1x profile on the computer. No go, wifi on, network connected, no IP as it didn't pass credentials through. Tried config profiles using the "Use as a Login Window configuration" option. Found that this method only works for us when a user account already exists on the system. If someone logging in doesn't have an existing account, it fails. We're pretty tied to our existing 802.1x implementation thanks to the requirements of JANET (www.ja.net if you're i

Hi, I'm having difficulty with Netboot from an Xserve running Lion Server. We are in a different subnet but have a helper address in the firewall that is the gateway between the two subnets. When I try netbooting from one of our client mac's by holding the N key downat startup I get:Big globe, Little Globe, Circle with Cross through itBig globe, Little Globe, Circle with Cross through itBig globe, Little Globe, Folder with Cross through it then it gives up and boots normally I got a port mirrored on the network switch and plugged various testmachines in and captured the network traffic whilst the above was happening.What I see is the sftp download of the booter file but when that ends Idon't see the NFS traffic start up. I can manually sftp and download the booter file.I can also manually mount the NFS share and traverse all the way into theNetboot image and access the DMG. On another server, I set it up to be the same as the first server- OS X Lion Server- s

I've used Removable Mac Addresses, but we were hoping to add some sort of label as our number of Ethernet to ThunderBolt adapters has grown dramatically this year. I assume we're still stuck with unlabeled connectors? Do some of your use both fields? Add it to the removable MAC addresses, and also create a peripheral type with a custom label?

I am using the JAMF Written "display message" script to display a security warning to my end Users. When I let the JAMF automated policy run, no matter what (I'd say 98.5% of the time) I seem to get the below: /usr/sbin/jamf is version 8.62 Executing Policy Outlook Security Script Force... Mounting smb://loujsslps01.humana.com/CasperShare to /Volumes/CasperShare... Running script Microsoft Outlook alert Forced.sh... Script exit code: 1 Script result: Displaying message to user... 36:758: execution error: An error of type -10810 has occurred. (-10810) Unmounting file server... As a work around I tried a variety of scenarios that all fail. I've copied the script to a JSS directory that I store certain local content on workstations for easier self service and have a policy that just calls that script file. I've also run the script directly from the policy both with a before and after execution. All fail. If I run the script through Casper Remote or SSH into

I have some kiosk machines that need to automatically login on boot, but I can't seem to get my package to work properly at imaging time even though it works once I'm logged into the machine. I created a package that contains the kcpassword file (permissions are correct) and this postinstall script. #!/bin/sh /usr/sbin/jamf createAccount -username ***** -realname ***** -password ***** –home /Users/***** –shell /bin/bash /usr/bin/defaults write /Library/Preferences/com.apple.loginwindow.plist autoLoginUser ***** /usr/bin/defaults write /Library/Preferences/com.apple.loginwindow.plist autoLoginUserUID ### This package works as anticipated when pushed through Casper Remote, but not from Casper Imaging, even when deployed at first boot. Anyone have an idea why?

How can one make the 10.8 image auto connect to Radius Wireless before logging in, so that users are able to authenticate over Wi-Fi. After authentication, it should switch to using their AD credentials to access the network. We would not like them to be able to stay on the radius connection.

Hi JAMF Nation, I've lost the ability to manage a 2011 Macbook Pro (OS 10.7.5) so I'm trying to run a sudo jamf enroll but the enrollment always gets stuck at Locating mobile device records. sea-xxxxxxxx:~ xxxxxxxxx$ sudo jamf enrollDownloading the JSS CA Certificate...There were (1) previous JAMF device identities found on this computer. Removing...This computer was successfully enrolled to the JSS with the following device certificate: "AD9DCCB5-DD5B-5AAB-8525-B7327FF15EA9"Retrieving inventory preferences from https://sfo303ut06.na.corp.yrbrands.com:8443/...Finding extension attributes...Locating hard drive information...Locating hardware information (Mac OS X 10.7.5)...Executing Unix applications...Locating accounts...Locating applications...2013-07-12 08:33:25.161 jamf[1214:a07] CFPropertyListCreateFromXMLData(): Old-style plist parser: missing semicolon in dictionary.Locating package receipts...Locating printers...Locating software updates...Locating fonts.

Okay so i want to see if anyone is or has experienced this besides me. We have our jss and 3 distribution points which are running mountain lion. We can image 8 to ten computer at a time but after we do two or three batches that number decreases and images start to fail. We then need to log on to the server and clear out the client0 folder restart the server once sometimes more and can then image again.

I'm having a bear of a time understanding what this log error message means. I've scrubbed data, I've deleted profiles and recreated them and have re-enrolled all of our Mac OS X 10.8 clients. I've even escalated to support, but was hoping some seasoned JSS admins out here might know or have seen similar error messages. Here are relevant portions of our log files from finishing the Tomcat initialization to the point where the error recurs. I thank anyone in advance for assistance in troubleshooting. 2013-07-11 14:42:15,346 [INFO ] [InitializeServer ] - Finished JSS Initialization.2013-07-11 14:42:20,738 [ERROR] [MDMComputerAction ] - <?xml version="1.0" encoding="UTF-8" standalone="no"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1"> <dict> <key>ErrorDomain</key> <string

If you work in the Enterprise or in Education managing Macs and/or iOS devices please plan to join us for the first gathering of our San Francisco Bay Area macbrained.org Mac Admin Community. At this kick-off we want to help build the format and agenda for future meetings in and around San Francisco, Silicon Valley, and the South Bay. Let's build this local community together! RSVP NOW! http://macbrainedorgkickoff.splashthat.com/ WEBSITE: http://www.macbrained.orgEMAIL: info@macbrained.org

I'm considering deploying a pre-configured Firefox profile for new staff computers and I'm wondering if anyone has tried this and whether there were any problems doing it. On a fresh system, I installed the latest version of Firefox and used Composer to capture the Firefox and Mozilla folders located at ~/Library/Application Support as well as a couple plist files (com.apple.ATS.plist and org.mozilla.firefox.plist) from ~/Library/Preferences after I made some very basic setting changes in Firefox's preferences. I inspected all the various files located in those folders and only one (secmod.db) seems to have a path referencing files located in the current users folder. A little Googling reveals the secmod.db and cert8.db files are files that apparently can be deleted and new ones will get created at launch time. So I removed those files from the list of captured files. My limited testing reveals things seem to work as anticipated. I know when you launch Firefox for the fi

Is it possible to push out a supervisor profile to iPads via the JAMF system? We have a bunch of iPads that have been deployed and are looking to install the iBoss mdm profile on the device to provide web filtering off site. However it requires that the supervisory profile be on the devices first.

I'm looking at these 2 settings. Configure SSH (Remote Login) to only allow access for this user - Under Settings, Casper Admin, Configuration, Management. Ensure SSH is running - Under Settings, Computer Management Framework Settings, Startup Item. I believe number 1 is the option to setup Secure SSH so that Casper Remote can connect to the client machines and do its thing. Number 2 is Normal SSH and is the one that appears ticked under Sharing when enabled. What I don't understand is with number 1 ticked and number 2 unticked Casper Remote doesn't work. How can I ensure that Casper Remote can access clients without giving access to other users ie The more secure the better? I'm running Casper 8.71

Weird one here. I'm trying to make a deployable Bootcamp image through Self Service. I have properly made Winclone image which has been successfully tested through the command line. I have a script that "appears" to work that is loosely based on another script that appeared on here a while back. So i've created a non-flat package in Composer that places all the relevant files into /private/tmp/BootCampDeploy and then runs a postflight script to do the actual work. The package and script actually work but I find this in the policy log: /usr/sbin/jamf is version 8.71 Executing Policy Bootcamp Deployment... [STEP 1 of 3] Mounting afp://server/CasperShare to /Volumes/CasperShare... [STEP 2 of 3] Copying Win7BootCampV4.pkg... Installing Win7BootCampV4.pkg... Installation failed. The installer reported: dyld: DYLD_ environment variables being ignored because main executable (/System/Library/PrivateFrameworks/Install.framework/Resources/runner) is setuid or setgid installer: Package name i

Hello All, Im posting a few questions and hope you guys have some pointers for me : How to apply mac os 10.8 updates auto. in casper for non admin user ? How to package updates for smart notebook with composer ? How to remotely delete smart response and smart boards tools trial installed by notebook ?

Hi guys Does anyone know how to make VMware fusion recognise my vms on an external drive? I'm on a laptop and I keep running out of space. I'm kinda thinking of symbolic links. Has anyone else done something similar?

I am moving away from Apple Portable Home Directories in favor of CrashPlan and would like to stop HomeSyncing on computers that already have Mobile accounts. I am running tests on my own account and am a bit perplexed.No matter what I do my computer keeps trying to HomeSync. I removed my user account from the Directory Group that had home syncing configured. I deleted the managed preferences on my machine, I unbound and rebound the computer. If I run the ID command in terminal it clearly shows I am not part of the Portable Home Directory group. I deleted the MCX plist, I deleted the ~/FileSync folder but my computer is determined to HomeSync. Does anyone know where the settings for home sync are hiding??? BTW - I also ran dscacheutil -flushcache and when I hold the option key when logging into my account, it does not show any Mobile Account group...

Running into an issue where imaged laptops are displaying the "Are you sure you want to open this application downloaded from the Internet" Dialogue box with applications that have been added (Skype, Hipchat, etc). This is persistent in the user account, as the system thinks the main admin account has downloaded all the applications. Found the following article, but it explained the way to disable the flag on one app: https://jamfnation.jamfsoftware.com/article.html?id=59 I have also tried a few more scripts, all to no avail, as they seem to want to affect incoming downloads, not "existing" ones. So here is the question. Do we need to be opening all apps in Composer before we package, and will this make a difference? (It seems all info for this stuff is captured in com.apple.quarantine, but not sure if this would be a part of the capture, i also would much rather the user plists are created fresh, although I suppose I could manually remove before packaging) If

I plan to use the "once per computer" execution frequency in some of my policies, but I'd like to know if computers where the policy has already executed once have their status reset after being imaged. In other words, if I image a machine, will once-per-computer policies re-initiate on that machine as if they had never run?

Hi All, Currently trying to use Scenario 2 (from https://jamfnation.jamfsoftware.com/article.html?id=173) from a 10.7.5 client machine. All seems to work fine, but on the reboot of the installer app the machine will boot to an Apple Logo and Kernel Panic. The installer app is cached locally first and the executable within launched from Self service using the settings above.If the installer app is launched manually (although requiring local admin authorisation) it will work fine - ruling out a bad installer. Any ideas / assistance please? Darren

Hi, I need to do an audit to get a list of which of our Macs have an active VMware virtual machine installed. It's sort of been "every man for himself" with regard to people installing Windows VMs, but there is an effort underway to get these VMs bound to our Active Directory domain and managed by IT (so they can have AV and patches, etc. the same way our Windows desktops do). I can easily find out who has VMware Fusion installed... but that tells me nothing, because somewhere along the line a past employee added VMware Fusion to our default configuration, so a great many people have the app, but don't have a license installed or any VMs created.

We have a laptop cart and configuration profiles created in JSS that tell which WIFI network the laptop should connect to. The config profile are scoped out correctly in JSS. But for some reason the config profiles are being removedor are not applying thus causing the laptop to have no wifi connection. The students connect to a guestpublic wifi but they cannot print ...thus the helpdesk getting calls about no printing for the cart. I doubt the students are navigating to Syst PreferencesProfiles and deleting the profile. My questions is - is there a systematic way that the profiles are being deleted or are just not applying? I can create a config profile in 10.8.x server Profile manager to never remove the profile without authorization. So this profile is locked down I guess. That tested good. But the JSS created profiles are not applying on random computers and at one point in time they were applying.

So were starting to use more of the enrollement process where we send users the link for the enroll page and they download the package and it does the rest. What's odd is that when a user runs the package they get prompted to install Java SE 6 Runtime because it's needed. Even if they choose "Not Now" things still work...but is there a way to get rid of that requirement since it's not needed? I noticed that during the whole imaging process it pops that install like 2-3 times. Is there some older Casper systems that still need this? Were trying to move away from Java all together and would like to resolve this issue.