Hi All Just looking for some guidance on the above. I have an application that I have packaged but it requires the users $PATH variable to be edited. Just wondering how to go about doing this. I don't want to export my packaging machines .profile and add it to the package for the users machines, as they might have variables written from other installations and I don't want to overwrite them. So want to see if there is anything in the JSS that can possibly push out variables? We use DMG's in our environment so cannot run a post install script to add it. The users also want to use the application through command line from Terminal so I cannot even write a launcher.app to write the variable then launch the application. So, does anyone have any ideas on how to handle user variables? Thanks, Jim

I took the bog standard VirtualBox package and added it to the JSS. When it deploys as part of a policy, there are no issues, but if it is included as part of a configuration it fails to install. The imaging log does not show an error; the application simply does not exist on the machine after imaging. Has anyone seen something like this?

Hi... we are moving all our things from Deploystudio to casper... i had the jumpstart a year ago... and for some reason we are starting only now to configure everything... a few things are going out of my mind now... basically at the end, we want the ability to netboot machines, and they reimage automatically and right after packages and scripts installs.... for packages, scripts and policies, i don't have any problems with that... where i have problem is figure out all the pre imaging process... What kind of netboot to create, how to create it (because mine right now not working properly), and how to tell the netboot to go and get the casper information so it starts reimaging right away automatically... i have a netboot right now that starts.... but as soon as i login with admin account, screen stays grey and nothing... tried different things in the discussions section... looks like im missing something... i really feel stupid because i work with mac for lot of years... im u

Hello all, I'm currently creating software packages for Aperture and noticed the same issue I was having with Final Cut Studio 3. When I open the application on a new account, it asks to access your Contacts. While building the package with Composer, I answered yes to this prompt, but this setting did not carry over to the new machine (and new accounts) that I deployed the package too. Has anyone else experienced this and know a way to stop it from asking? EDIT: It occurs to me to let you all know we're running these on Mountain Lion. Thanks!

Initially Apple’s suggestion to use PEAP or TTLS protocols to connect Macs to corporate WIFI. Unfortunately we have a Cisco ACS server doesn’t handle TTLS and PEAP option is not on the cards due to computer cert method has been chosen for the entire site. We wanted to implement EAP-TLS 802.1x for Mac OS 10.6.8 clients with Corporate Build (AD bound Macs) with zero user interaction. So we have automated the below actions: On Windows Server; Create cert request Issue certExport certPlace on ftp server On Mac Client; Install CA Root certInstall CA chain certsInstall machine certSet trust level on certsCreate 802.1x system profileSet trusted certs for 802.1xSet machine cert for 802.1xSet username for 802.1x Broken command line (confirmed by Apple this command doesn't work after 10.6.4)"networksetup -settlsidentityonsystemprofile" (sample as below) was a show stopper. networksetup -settlsidentityonsystemprofile AirPort /$computername.yourcompany.com.pfx somepassword

I have an EA that pulls the version number of the Adobe Camera Raw plug-in on machines with the CS5 suite. It only seems to be returning info on 10.7 and 10.8 machines. This is my EA: #!/bin/bash # get the current version of the Camera Raw plug in echo -n "<result>" defaults read /Library/Application Support/Adobe/Plug-Ins/CS5/File Formats/Camera Raw.plugin/Contents/Info.plist CFBundleShortVersionString echo "</result>" If I run just the command <defaults read /Library/Application Support/Adobe/Plug-Ins/CS5/File Formats/Camera Raw.plugin/Contents/Info.plist CFBundleShortVersionString> on 10.7 it returns the correct value (6.7 (339)). When I try it on a 10.6.8 machine it returns:"The domain/default pair of (/Library/Application Support/Adobe/Plug-Ins/CS5/File Formats/Camera Raw.plugin/Contents/Info.plist, CFBundleShortVersionString) does not exist" I've done some googling but haven't found anything that pointed me to a c

Is there a way to browse all of the available extension attributes posted on JamfNation? I want to look through the whole catalogue and see what people have posted to see what kind of things people are doing that I might find useful.

Hey all: I have a Configuration Profile set up to push VPN settings to our users. IPSec Cisco using a Shared Secret and Group Name with $USERNAME in the Account section. Half the time this Profile gets pushed, it will populate the username in the account field, but the other half it leaves it blank. I DON'T KNOW WHY. Is there something I should be looking for? I'm pushing it as a User Level profile. Related to this, but more generally applicable, is there a simple way to re-push profiles? I've been toggling the Scope of profiles in order to get the "Distribute to New/Distribute to All" prompt, but a) sometimes the prompt page doesn't come up (why?); and b) what a silly way to do it. Let me know your thoughts! Michael

I'm not sure what's going on, this was working and now it's not. I am testing a Office 2011 installation based on the white paper I found. I simply dragged and dropped the Office installer into Casper and set it up according to the white paper. I have a test VM that I am using for this purpose. As I said, this was working but now it's not. The error in the logs say: Installation failed. The installer reported: installer: Error the package path specified was invalid: '/Library/Application Support/JAMF/Downloads/Office 2011 14.0.0 Installer.mpkg'. I haven't done anything different from when it was working. I've deleted the policy and recreated it. I even deleted the installer from Casper Admin and re-added it. I also unenrolled and reenrolled the VM and it's failing every time now with that error. I'm not sure what is going on or what's different. Any ideas? Thanks in advance.

I tried to adapt the script from https://jamfnation.jamfsoftware.com/discussion.html?id=6630 and I got it 1/2 working... but it always returns back that the file is not there, even though I can ssh into the test box and see that it is... Could someone point out where the logic is wrong? #!/bin/bash # # looks for the FVMaster keychain. files=('FileVaultMaster.keychain') subdirs=('/Library/Keychains') FVMaster" " for d in ${subdirs[@]}; do for f in ${files[@]]}; do if [ ! -z `find $d -maxdepth 1 -name $f` ]; then FVMaster=1 fi done done if [ $FVMaster]; then echo "<result>FileVaultMaster detected</result>" else echo "<result>FileVaultMaster Not found</result>" fi

I'm working on tracking our Google Chrome extensions and the first one that's been turned in to track is POSTman. Normally for our tracking I write a quick extension attribute to read a plist or run a command to get a version but with these Chrome extensions (reading a .json file) I'm scratching my head. If I run a simple cat /Library/Application Support/Google/Chrome/External Extensions/chrome/manifest.json | sed -n 3p from Terminal, I get an output I can work with :```"version":"0.8.0.4", If I try to expand that to an extension attribute script it breaks using: !/bin/sh PST=cat /Library/Application Support/Google/Chrome/External Extensions/chrome/manifest.json | sed -n 3pecho "<result>$PST</result>"``` Any help/thoughts would be appreciated.

We're currently trying to decide whether to lock the firmware on our next round of equipment arriving in a few months (2012 MacBook Airs). In our program, we allow our end-users to be administrators of their Macs, and one of the expectations is that they will keep their OS up to date (but not upgrade to the next major version). Part of this expectation is that they install any firmware updates that come down the pipe from Apple. Of course, this begs the question: If we firmware lock our 2012 MacBook Airs with a password that only the Tech Dept. knows, and a firmware update is released by Apple, will the firmware password prevent our end-users from updating the firmware? I've queried our Apple SE but he hasn't gotten a concrete answer yet. I'm hoping someone in this community knows the answer to this. [The primary reason we want to lock the firmware is to prevent our end-users from booting into the Recovery Partition and resetting our hidden user's password,

I'm testing locking firmware on machines in conjunction with Casper Imaging 8.7. I'm following the instructions in the Administrator's Guide (page 269). - Netboot to my imaging environment- In Casper Imaging, select "Custom Install" and under the "Accounts" section, have it add a firmware password. Once I do this, I can see the command in the left telling me it's going to do it, but when the machine images then reboots, there's no firmware password set. The Imaging Logs show no errors. Question: does Casper Imaging rely on a Recovery Partition to be present for this to work?

Recently we've begun the process of integrating our JSS inventory into our internal inventory. While I can find the model identifier as related to a units serial number, I've yet to find where the more human readable "Model" exists in the tables (directly related to the serial number) To be specific I can see that serial number xxxxxxxxxxxx is a MacBookPro8,1 but where does casper come up with 13-inch MacBook Pro (2011). I would much prefer to pull the full model name into my inventory than the Model Identifier. Can anyone point me in the right direction? Does this info even exist in the tables or does the JSS simply compare the model identifier against a known list of models? I admit that I'm posting this here in lieu of searching through the tables.

Through looking at other posts I've come up with this script which works fine when run from a terminal. I replace $3 with $USER when I run from terminal. #!/bin/sh currentuser=$3 smbhome=`dscl '/Active Directory/CSUMAIN/All Domains' -read /Users/$currentuser SMBHome | awk '{print $2}' | sed -e 's/\\\\\\/smb:///g' | sed 's:\\:/:g'` echo $smbhome if [ $? != "0" ] ; then echo could not get smb home. Offline? exit fi if [ "$smbhome" == '' ] ; then echo could not get smb home. Not defined for user $currentuser? exit fi #Make the users home folder and mount it... #Get rid of remnants if there was previously an issue... rmdir /Volumes/$currentuser mkdir /Volumes/$currentuser mount_smbfs $smbhome /Volumes/$currentuser #Place it in the Dock for the user defaults write com.apple.dock persistent-others -array-add "<dict><key>tile-data</key><dict>&l

Hi Nation Has anyone had trouble while testing Focus that it will not show up any apps to focus on apart from Safari. Every time I choose an iPad or choose to focus the group of iPads on an app, it won't show up any other app in the list for me to choose to focus on except Safari. Any ideas?

Is it safe to just drag the App from /Applications to Composer and package it up in a DMG?

I want to push out a script to tell who has Admin rights to their computer, is there a way I can do this on Casper report?

Hi AllCan someone tell me the process required to recover redemption codesif you have a supervised, dead iPad that is going in to Apple for repair/replacement?I suspect it's "CALL APPLE" and if so, how painful is it, how long is the wait, do they give you trouble?Or is there another method, like an online form or anything?Thanks!Sandy

I remember that even though you could sync a wireless and the Casper Enrollment profile with Configurator, you still had to tap the screen a bunch of times to accept and allow the profiles to be used AND even more taps if the devices were new. This in turn caused timeout issues with multiple iOS devices. Is this still the case? I'll admit we haven't looked at the Configurator in a while, but looking at Casper Focus and the need to use Supervise in Configurator thought I would ask. Patrick

Hey all, I'm trying to verify if a Mac to be reimaged is already in active directory. We autogenerate a new name for the mac each time it is reimaged, and I don't want it binding to the AD with an old name, so I wanted to check the name against AD before imaging using dscl. ComputerName=`diskutil list | grep disk0 | grep "2:" | awk '{print $3}'` ## Find if the computer is already in Active Directory. If it is, exit. We need to remove it from AD IsInAD=$(dscl /Active Directory/All Domains/ -read /Computers/$ComputerName$ | grep UniqueID) It works great from a mac that is bound to the same directory. I was wondering if there is a way to do this from a Mac that IS NOT bound to the same directory (or any directory, actually). Does anyone have any experience with this? Andrew

I'd like to move our users Profiles to a secondary partition. I've been trying various scripts with limited success. When I came across the "Mobility" option in Configuration Profiles I thought I was onto a good thing. I can only set this option up under User Level not Computer. The issue I'm having is the first time a user logs in their profile is being created on the primary partition. Subsequent logins are then directed to the second partition. Is there a way to apply this profile at the first login? I found the suggestion by dzmudzki - https://jamfnation.jamfsoftware.com/discussion.html?id=4855 However now when I login it's creating a "phantom" user profile on the primary partition while creating the proper profile on the secondary partition.

This is driving me absolutely mad, and I am probably just missing something silly. I am pointing our 10.6/10.7 clients to our internal SUS server, which works like a charm. For the life of me I can't figure out the correct settings to add Apple's SUS servers to Casper, both via the Software Update servers settings in Casper or via MCX. Can someone tell me what server/port I should be entering in order to set 10.8 clients to connect to Apple's SUS servers. Thanks! http://swscan.apple.com:8088/index.sucatalog does not work when deployed via MCX to 10.8 clients.

I recall there being a specific requirement to allow App Lock to work. I want to say the device had to be supervised, is this correct?

Has anyone successfully completed an advanced search that will display the computer OS and the Local User Accounts? I am able to search for a single Local User Account by looking for specific users via the "Receipts" options, but would like to do a mass search for all 10.8 machines and have the local user accounts displayed (or exported) as well.