Hi AllCan someone tell me the process required to recover redemption codesif you have a supervised, dead iPad that is going in to Apple for repair/replacement?I suspect it's "CALL APPLE" and if so, how painful is it, how long is the wait, do they give you trouble?Or is there another method, like an online form or anything?Thanks!Sandy

I remember that even though you could sync a wireless and the Casper Enrollment profile with Configurator, you still had to tap the screen a bunch of times to accept and allow the profiles to be used AND even more taps if the devices were new. This in turn caused timeout issues with multiple iOS devices. Is this still the case? I'll admit we haven't looked at the Configurator in a while, but looking at Casper Focus and the need to use Supervise in Configurator thought I would ask. Patrick

Hey all, I'm trying to verify if a Mac to be reimaged is already in active directory. We autogenerate a new name for the mac each time it is reimaged, and I don't want it binding to the AD with an old name, so I wanted to check the name against AD before imaging using dscl. ComputerName=`diskutil list | grep disk0 | grep "2:" | awk '{print $3}'` ## Find if the computer is already in Active Directory. If it is, exit. We need to remove it from AD IsInAD=$(dscl /Active Directory/All Domains/ -read /Computers/$ComputerName$ | grep UniqueID) It works great from a mac that is bound to the same directory. I was wondering if there is a way to do this from a Mac that IS NOT bound to the same directory (or any directory, actually). Does anyone have any experience with this? Andrew

I'd like to move our users Profiles to a secondary partition. I've been trying various scripts with limited success. When I came across the "Mobility" option in Configuration Profiles I thought I was onto a good thing. I can only set this option up under User Level not Computer. The issue I'm having is the first time a user logs in their profile is being created on the primary partition. Subsequent logins are then directed to the second partition. Is there a way to apply this profile at the first login? I found the suggestion by dzmudzki - https://jamfnation.jamfsoftware.com/discussion.html?id=4855 However now when I login it's creating a "phantom" user profile on the primary partition while creating the proper profile on the secondary partition.

This is driving me absolutely mad, and I am probably just missing something silly. I am pointing our 10.6/10.7 clients to our internal SUS server, which works like a charm. For the life of me I can't figure out the correct settings to add Apple's SUS servers to Casper, both via the Software Update servers settings in Casper or via MCX. Can someone tell me what server/port I should be entering in order to set 10.8 clients to connect to Apple's SUS servers. Thanks! http://swscan.apple.com:8088/index.sucatalog does not work when deployed via MCX to 10.8 clients.

I recall there being a specific requirement to allow App Lock to work. I want to say the device had to be supervised, is this correct?

Has anyone successfully completed an advanced search that will display the computer OS and the Local User Accounts? I am able to search for a single Local User Account by looking for specific users via the "Receipts" options, but would like to do a mass search for all 10.8 machines and have the local user accounts displayed (or exported) as well.

Does anyone have this in pkg format? Apple's scrubbed it from existence apparently. I need to run a few legacy updates to this version specifically...

We seem to have started having a problem with Remote Login on our Mac OSX systems. We have (had) them set to allow access for "All users". Recently, many of them have changed to Allow access for "Only these users" and, because no users are selected, we lose the ability to ssh to the systems, meaning no Casper remote, etc… What could be causing this setting to keep changing and how can I stop it? I have a policy that runs this command daily, but it doesn't seem to impact it./System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -allowAccessFor -allUsers -privs -all

Hello JAMF Gurus,I need to package a few apps that require a license, the problem is that when creating the dmgs on composer, if I add the license key during the capture, it loads the license file within the logged user folder. What are you guys doing with this type of apps and deployments ? any advice would be greatly appreciated. Thanks

Hi, We're having a few problems running inventory through Recon's Network Scanner (the error message is "Recon Failed" after installing the JAMF binary). So, it actually installs, but it can't send any information to the JSS.We (myself and JAMF's support) have troubleshooted the problem for a while and know that the issue is being created due to the proxy (Websense) the machines have configured. I see all traffic being passed and permitted through our proxy from the machines who are being inventoried. Has anybody encountered this sort of situation before?Is there a specific URL or IP that needs to be allowed on the proxy?

The PDF mentioned in the title is here: http://www.jamfsoftware.com/libraries/pdf/white_papers/Deploying-CrashPlan-PRO-with-the-Casper-Suite.pdf I'm not able to do step 3 in the "Configuring the CrashPlan PRO Client Installer" because the installer is no longer an .mpkg - It's a .pkg so I am not able to "View Contents" of the package or cd into the .../Contents/Resources/ directory within the package. I noticed this white paper was written in July 2010 and I'm very new with Crashplan Pro. Did something change between the time the paper was written or with CrashPlan Pro? By the way, I downloaded the client installer directly from our Crash Plan Pro server and directly off Crashplan's site. So far, all the installers are .pkg and not .mpkg files. I have Pacifist and can see the contents of the installer package but the structure is not what I expected and I am not sure how to create a custom installer because I am not sure what to pull out and

Hi Guys, I'm looking for a way through MCX to manage our Macs sidebar settings so they are like the external image link I've downloaded manifest below, but am not sure what i'm doing with it! https://jamfnation.jamfsoftware.com/viewProductFile.html?id=135&fid=421 Anyone else manage this via MCX? If so, can you post your MCX?? this is for 10.7.x clients btw

I am relatively new to jamfnation while i have been a customer for a few years. My question is: Is it possible to host a 10.8.3 netboot image on a 10.6.8 server and if so how can one get there? I have tried building a base image and using that as my netboot image, using the automator on a 10.8.3 machine to configure it for casper but to no avail. I have also followed the articles below to a T and have not had success. Please help. It seems that the machine is connecting to the server but it cannot load my netboot image. I am getting this far in the log and it stops server bootpd[726]: NetBoot: [1,0:3:93:8d:e0:f4] BSDP ACK[SELECT] sent 172.16.x.xxx pktsize 450 Thanks for all of your insights thus far through the KB articles and discussions. https://jamfnation.jamfsoftware.com/article.html?id=307https://jamfnation.jamfsoftware.com/article.html?id=313

Hey all: First time setting up a software update server. Server seems good. If I manually set a machine to use that server, it works fine. But I set a network segment to use the update server in the JSS web interface and this didn't seem to catch. Machines were still going to Apple for updates. What might I be missing here? Michael

We've run into a snag when testing CrashPlan PROe deployment via Casper using JAMF's instructional PDF. While running the policy at login, the custom files will be planted into /Library/Application Support/CrashPlan/ and the application will install. The user name successfully connects to their LDAP account but the home folder path is empty, so nothing is selected to backup. So far we've tried using the recommended setting in our userinfo.sh file: CP_USER_HOME="$HOME" When that left the result blank when we examined the install.log we tried this one: CP_USER_HOME="/Users/$user" And that resulted in the entire /Users folder being selected for backup... Ugh!We're running 10.8.3 with Mobile Accounts from Active Directory, so the user's short name matches their LDAP account and home folder title. Any suggestions?

Before I start building a second OS configuration, I wanted to confirm that my iMac 2013 10.8.3 DMG will not work for a Macbook Air Configuration. I know that there are some differences, such as the ethernet over USB, etc, but thought it wouldn't hurt to ask; we just got our first set of MBAs in.

Hi, Looking for input from people who have used/are using the above products in conjunction with Casper. Which one is best in your opinion? Specific examples? Thanks!

Hi All, On 10.7.x i've managed to knock up a profile that meant the clients would request a Machine certificate from our AD Certificate Authority. As per: http://support.apple.com/kb/HT4784 This now links to a new document for 10.8, http://support.apple.com/kb/HT5357. This new profile is also available in 8.6, I've tried filling out the profile.. but it errors with the message: The 'Active Directory Certificate' payload could not be installed. The certificate request failed. If I manually download the profile from the JSS & then run, i'm prompted for a username & password.. none seemingly work.. also the apple document for 10.8 states: Prompt for credentials: Disregard this option for computer certificates. However, I do not see the option to disregard the prompts.. has anyone got this working or is it a bug?

When performing some things, such as the Adobe-blessed method of installing Flash, you have to get an installer application to the local machine. What is the best practice for doing this? My distribution point is over https, so I was thinking I could write a script and use Curl to pull a .zip file from the JSS or another server to the local system and then unpack it, but was curious if there was an easier way that I'm overlooking?

http://www.macupdate.com/app/mac/4783/adobe-flash-player Fun!

...I'm sure VMWare's marketing department are not thrilled about it. ;) http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=2006093 external image link Relevance: vetting Mac packages on virtual machines...what's not to like? Er, aside from Apple's EULA... Don

I need to find a way to change the login window background image resolution to fit for every screen size, or different monitor that might be connected. So far I am either getting tiles or oversize or fits (if I match the computers screen rez). I have tried 256 x 256 pixels as in original but getting tiles. png file path is in here:/System/Library/Frameworks/AppKit.framework/Versions/C/Resources/NSTexturedFullScreenBackgroundColor.png I wish Casper Configuration Profiles could have handled this too... just looking at it, but can't see anything related. Anyone has achieved this? Cheers Cem

I'm working on a 10.8.3 image to be deployed using NetBoot and Casper Imaging. When building the image I can get everything so it's working fine. Network users can log in and access the appropriate resources without error. I've used Apple's Disk Utility and also tried Carbon Copy Cloner to compress the final DMG. The issue appears after deploying the compressed DMG using the above mentioned process. After imaging I bind to Active Directory and enroll in Profile Manager so new users are able to log in. I've got it set to create a mobile account when the user logs in (not sure if this is part of the cause, but I doubt it since the issue did not appear on the machine used to create the image). Now, we've imaged and a new user logged in. Let's say this user tries to launch Microsoft Word. The application loads fine, but an error message appears stating, "You don't have permission to use the application 'Microsoft AU Daemon." So my qu

Working on a script which detects the current logged in userID, tests for UniqueID > 1000.Problem: my user accounts include white space in their "user name" causing the script to fail.Could anyone take a look and advise where I am going wrong here please!! Thank You! #!/bin/bashloggedInUser=/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }'accountType=dscl . -read /Users/$loggedInUser 2> /dev/null | grep UniqueID | cut -c 11- if [[ "$accountType" -gt "1000" ]]; then echo "demoting mobile account: $loggedInUser"echo "UniqueID:$accountType" /usr/sbin/dseditgroup -o edit -d "$loggedInUser" -t user admin else echo "Must be local admin account: $loggedInUser" fiexit 0