I've been asked to look into ways of changing the curtain screen (I believe it's called). The screen that contains "The imaging process is finishing installing software" on the initial restart. Is there a way the image and/or text can be changed to our current standard (we already have an image etc. for our SCCM environment).

I am trying to add a printer from a Windows Server 2008 R2 Print Server. I have followed the instructions on http://support.apple.com/kb/HT3049 just to be sure. I am able to install the printer to my 10.8 system with both generic and its Dell drivers. The problem arises when I try to send a print. On the client, it looks as if the print went through successfully, but in the event log on the server, I get an Event 372 with the following error: The document *, owned by *, failed to print on printer *. Try to print the document again, or restart the print spooler. Data type: RAW. Size of the spool file in bytes: 360709. Number of bytes printed: 360709. Total number of pages in the document: 0. Number of pages printed: 0. Client computer: *.... Win32 error code returned by the print processor: 2147549183. Catastrophic failure Does anyone have any ideas? Has anyone else added printers in this way?

Hi. We want to provide some support DMGs to our IT support that is only visible to them to perform further tests and troubleshootings/repairs without downloading or installing any stuff on the machines. As we have a big number of offices with local Casper Servers we though about using the Casper Share for that purpose that get mounted when we run a script. The problem is that after the script run and the DMG get mounted it finishes and closes the DMG and the connection to the Sharepoint. Therefor we use a sleep timer in the script at the moment.Did anybody of you is using a simular setup to provide troubleshooting tools etc to IT support? Thanks

We have been trying to encourage our students to run their apple updates in Self Service from home, but they have not been successful in doing so. Whenever the student (or faculty member) attempt to get updates from Self Service, it looks like it runs for about 30 seconds and then stops and nothing happens. Looking at the logs I get the following for every attempt: /usr/sbin/jamf is version 8.64Executing Policy Install Apple Updates (Offsite)...[STEP 1 of 3]Setting Software Update preferences to apple.com for all accounts...Setting Software Update preferences to apple.com for root...[STEP 2 of 3]Installing all available Software Updates...Result of Software Update: Error: The request timed out.Software Update ToolCopyright 2002-2010 Apple [STEP 3 of 3]Running Recon... As you can tell by the error, we have it switching to the apple.com SUS for while they are at home, it looks like everything should be running correctly, but it times out and fails. Does anyone have any ideas that c

Hey all,So looks like the new Safari 6.0.4 changes the behavior of how our teachers interact with the Gradebook portion of PowerSchool. What used to happen is a teacher would login to powerschool then click on the grade book tab and Safari would download a file called launchgradebook.jnlp and then would autoopen this file. Now it seems like .jnlp files are flagged as not safe (even if you have the open "safe" files after downloading box checked in safari's general preferences) and it will not auto launch it after the download which in this environment is going to cause headaches. For now I'm disabling this update on our update server, but I wanted to see if anyone had a work around for this? Gabe ShackneyPrinceton Public School

When I am importing another configuration profile in Apple Configurator, I am getting an error saying that "This configuration profile already exists. Do you want to replace it ? Another version of this configuration profile named <Shared iPads> already exists in the library. Replacing it will overwrite its current contents." Let me add that I want to use 2 different configuration profiles because I want to keep the shared and one-to-one ipad profiles settings separate and handy. I think we can only import one configuration profile at a time in Apple Configurator.Please correct me if I am wrong.

When I re-enroll a machine by pushing out quickadd to machines that are enrolled (changing managment account and casper server) I get errors is there a better way to do this? The installer reported: 2013-05-10 08:41:15.776 installer[540:6003] Package /Library/Application Support/JAMF/Downloads/QuickAdd.pkg uses a deprecated pre-10.2 format (or uses a newer format but is invalid).

Hi All Just looking for some guidance on the above. I have an application that I have packaged but it requires the users $PATH variable to be edited. Just wondering how to go about doing this. I don't want to export my packaging machines .profile and add it to the package for the users machines, as they might have variables written from other installations and I don't want to overwrite them. So want to see if there is anything in the JSS that can possibly push out variables? We use DMG's in our environment so cannot run a post install script to add it. The users also want to use the application through command line from Terminal so I cannot even write a launcher.app to write the variable then launch the application. So, does anyone have any ideas on how to handle user variables? Thanks, Jim

I took the bog standard VirtualBox package and added it to the JSS. When it deploys as part of a policy, there are no issues, but if it is included as part of a configuration it fails to install. The imaging log does not show an error; the application simply does not exist on the machine after imaging. Has anyone seen something like this?

Hi... we are moving all our things from Deploystudio to casper... i had the jumpstart a year ago... and for some reason we are starting only now to configure everything... a few things are going out of my mind now... basically at the end, we want the ability to netboot machines, and they reimage automatically and right after packages and scripts installs.... for packages, scripts and policies, i don't have any problems with that... where i have problem is figure out all the pre imaging process... What kind of netboot to create, how to create it (because mine right now not working properly), and how to tell the netboot to go and get the casper information so it starts reimaging right away automatically... i have a netboot right now that starts.... but as soon as i login with admin account, screen stays grey and nothing... tried different things in the discussions section... looks like im missing something... i really feel stupid because i work with mac for lot of years... im u

Hello all, I'm currently creating software packages for Aperture and noticed the same issue I was having with Final Cut Studio 3. When I open the application on a new account, it asks to access your Contacts. While building the package with Composer, I answered yes to this prompt, but this setting did not carry over to the new machine (and new accounts) that I deployed the package too. Has anyone else experienced this and know a way to stop it from asking? EDIT: It occurs to me to let you all know we're running these on Mountain Lion. Thanks!

Initially Apple’s suggestion to use PEAP or TTLS protocols to connect Macs to corporate WIFI. Unfortunately we have a Cisco ACS server doesn’t handle TTLS and PEAP option is not on the cards due to computer cert method has been chosen for the entire site. We wanted to implement EAP-TLS 802.1x for Mac OS 10.6.8 clients with Corporate Build (AD bound Macs) with zero user interaction. So we have automated the below actions: On Windows Server; Create cert request Issue certExport certPlace on ftp server On Mac Client; Install CA Root certInstall CA chain certsInstall machine certSet trust level on certsCreate 802.1x system profileSet trusted certs for 802.1xSet machine cert for 802.1xSet username for 802.1x Broken command line (confirmed by Apple this command doesn't work after 10.6.4)"networksetup -settlsidentityonsystemprofile" (sample as below) was a show stopper. networksetup -settlsidentityonsystemprofile AirPort /$computername.yourcompany.com.pfx somepassword

I have an EA that pulls the version number of the Adobe Camera Raw plug-in on machines with the CS5 suite. It only seems to be returning info on 10.7 and 10.8 machines. This is my EA: #!/bin/bash # get the current version of the Camera Raw plug in echo -n "<result>" defaults read /Library/Application Support/Adobe/Plug-Ins/CS5/File Formats/Camera Raw.plugin/Contents/Info.plist CFBundleShortVersionString echo "</result>" If I run just the command <defaults read /Library/Application Support/Adobe/Plug-Ins/CS5/File Formats/Camera Raw.plugin/Contents/Info.plist CFBundleShortVersionString> on 10.7 it returns the correct value (6.7 (339)). When I try it on a 10.6.8 machine it returns:"The domain/default pair of (/Library/Application Support/Adobe/Plug-Ins/CS5/File Formats/Camera Raw.plugin/Contents/Info.plist, CFBundleShortVersionString) does not exist" I've done some googling but haven't found anything that pointed me to a c

Is there a way to browse all of the available extension attributes posted on JamfNation? I want to look through the whole catalogue and see what people have posted to see what kind of things people are doing that I might find useful.

Hey all: I have a Configuration Profile set up to push VPN settings to our users. IPSec Cisco using a Shared Secret and Group Name with $USERNAME in the Account section. Half the time this Profile gets pushed, it will populate the username in the account field, but the other half it leaves it blank. I DON'T KNOW WHY. Is there something I should be looking for? I'm pushing it as a User Level profile. Related to this, but more generally applicable, is there a simple way to re-push profiles? I've been toggling the Scope of profiles in order to get the "Distribute to New/Distribute to All" prompt, but a) sometimes the prompt page doesn't come up (why?); and b) what a silly way to do it. Let me know your thoughts! Michael

I'm not sure what's going on, this was working and now it's not. I am testing a Office 2011 installation based on the white paper I found. I simply dragged and dropped the Office installer into Casper and set it up according to the white paper. I have a test VM that I am using for this purpose. As I said, this was working but now it's not. The error in the logs say: Installation failed. The installer reported: installer: Error the package path specified was invalid: '/Library/Application Support/JAMF/Downloads/Office 2011 14.0.0 Installer.mpkg'. I haven't done anything different from when it was working. I've deleted the policy and recreated it. I even deleted the installer from Casper Admin and re-added it. I also unenrolled and reenrolled the VM and it's failing every time now with that error. I'm not sure what is going on or what's different. Any ideas? Thanks in advance.

I tried to adapt the script from https://jamfnation.jamfsoftware.com/discussion.html?id=6630 and I got it 1/2 working... but it always returns back that the file is not there, even though I can ssh into the test box and see that it is... Could someone point out where the logic is wrong? #!/bin/bash # # looks for the FVMaster keychain. files=('FileVaultMaster.keychain') subdirs=('/Library/Keychains') FVMaster" " for d in ${subdirs[@]}; do for f in ${files[@]]}; do if [ ! -z `find $d -maxdepth 1 -name $f` ]; then FVMaster=1 fi done done if [ $FVMaster]; then echo "<result>FileVaultMaster detected</result>" else echo "<result>FileVaultMaster Not found</result>" fi

I'm working on tracking our Google Chrome extensions and the first one that's been turned in to track is POSTman. Normally for our tracking I write a quick extension attribute to read a plist or run a command to get a version but with these Chrome extensions (reading a .json file) I'm scratching my head. If I run a simple cat /Library/Application Support/Google/Chrome/External Extensions/chrome/manifest.json | sed -n 3p from Terminal, I get an output I can work with :```"version":"0.8.0.4", If I try to expand that to an extension attribute script it breaks using: !/bin/sh PST=cat /Library/Application Support/Google/Chrome/External Extensions/chrome/manifest.json | sed -n 3pecho "<result>$PST</result>"``` Any help/thoughts would be appreciated.

We're currently trying to decide whether to lock the firmware on our next round of equipment arriving in a few months (2012 MacBook Airs). In our program, we allow our end-users to be administrators of their Macs, and one of the expectations is that they will keep their OS up to date (but not upgrade to the next major version). Part of this expectation is that they install any firmware updates that come down the pipe from Apple. Of course, this begs the question: If we firmware lock our 2012 MacBook Airs with a password that only the Tech Dept. knows, and a firmware update is released by Apple, will the firmware password prevent our end-users from updating the firmware? I've queried our Apple SE but he hasn't gotten a concrete answer yet. I'm hoping someone in this community knows the answer to this. [The primary reason we want to lock the firmware is to prevent our end-users from booting into the Recovery Partition and resetting our hidden user's password,

I'm testing locking firmware on machines in conjunction with Casper Imaging 8.7. I'm following the instructions in the Administrator's Guide (page 269). - Netboot to my imaging environment- In Casper Imaging, select "Custom Install" and under the "Accounts" section, have it add a firmware password. Once I do this, I can see the command in the left telling me it's going to do it, but when the machine images then reboots, there's no firmware password set. The Imaging Logs show no errors. Question: does Casper Imaging rely on a Recovery Partition to be present for this to work?

Recently we've begun the process of integrating our JSS inventory into our internal inventory. While I can find the model identifier as related to a units serial number, I've yet to find where the more human readable "Model" exists in the tables (directly related to the serial number) To be specific I can see that serial number xxxxxxxxxxxx is a MacBookPro8,1 but where does casper come up with 13-inch MacBook Pro (2011). I would much prefer to pull the full model name into my inventory than the Model Identifier. Can anyone point me in the right direction? Does this info even exist in the tables or does the JSS simply compare the model identifier against a known list of models? I admit that I'm posting this here in lieu of searching through the tables.

Through looking at other posts I've come up with this script which works fine when run from a terminal. I replace $3 with $USER when I run from terminal. #!/bin/sh currentuser=$3 smbhome=`dscl '/Active Directory/CSUMAIN/All Domains' -read /Users/$currentuser SMBHome | awk '{print $2}' | sed -e 's/\\\\\\/smb:///g' | sed 's:\\:/:g'` echo $smbhome if [ $? != "0" ] ; then echo could not get smb home. Offline? exit fi if [ "$smbhome" == '' ] ; then echo could not get smb home. Not defined for user $currentuser? exit fi #Make the users home folder and mount it... #Get rid of remnants if there was previously an issue... rmdir /Volumes/$currentuser mkdir /Volumes/$currentuser mount_smbfs $smbhome /Volumes/$currentuser #Place it in the Dock for the user defaults write com.apple.dock persistent-others -array-add "<dict><key>tile-data</key><dict>&l

Hi Nation Has anyone had trouble while testing Focus that it will not show up any apps to focus on apart from Safari. Every time I choose an iPad or choose to focus the group of iPads on an app, it won't show up any other app in the list for me to choose to focus on except Safari. Any ideas?

Is it safe to just drag the App from /Applications to Composer and package it up in a DMG?

I want to push out a script to tell who has Admin rights to their computer, is there a way I can do this on Casper report?