I have a fresh new Mountain Lion iMac (10.8.3) with Server app installed running only Software Updates. I have successfully connected client computers that are now happily receiving updates for every program except iLife apps from my SUS. I only have 10.8 clients connected to this server. The installed iLife is what was preinstalled from the factory and I would rather not uninstall it to install from a retail disk. My deployed 10.8 clients number is rising quickly and most of these computers will not be assigned an Apple ID. Am I doomed to stare at iLife update notifications until the end of time? (Please read as humor ) Let me know if I have left out any pertinent information about my deployment. Thanks for your time!

Wondering what people's preferences are on Configuration Profiles. I am looking at either creating a profile per payload such as a profile just for wireless settings, but I also thought about doing it all in one. What is the common preference on this one? I'd thing the first option would allow me to be more granular, but not sure. Thanks in advance!

Hey all what is the recommended way of using the InstallESD (in order to get recovery partition)?

Hey all,So I have been trying to remove the default setting in 10.8.3 to require a password during wake from sleep. I can acheive it through an osascript which also seems to work when I use it in either Casper Remote(advanced tab)or in ARD unix code, but I cannot get a policy to run it in the same advanced tab and I can't seem to get my scripting correct to make it run in a shell script. Any help would be lovely! This command also of course works in the local terminal window. I assume its because I need to translate the apple script to a shell command. Ideas? sudo osascript -e 'tell application "System Events" to set require password to wake of security preferences to false' Gabe ShackneyPrinceton Public Schools

I just installed Office with our Volume license installer on a clean OS X 10.8.3, then 14.1.0, then 14.3.2. The last update blew away the license, leaving me at the serialization wizard on first launch. It were as though no license had ever been present. I started again, and launched Outlook after the initial installation of Microsoft Office, then applied the updates. The product retained it serial number, and prompted me to upgrade the database. This is a big problem if one intends to roll out Office 14.3.2 to new machines. Can anyone else confirm?

Has anyone managed to figure out how to suppress the "Scrolling Direction" Setup Assistant that appears at first login in Lion? More info on the issue here: http://groups.google.com/group/macenterprise/browse_thread/thread/990fe986a46c3b9f I tried everything in that thread, including creating a ~/Library/SavedApplicationState/ and copying in a populated com.apple.SetupAssistant.savedState folder. Alas, the stupid scrolling direction window still pops up. I could see how this may be useful for an end user, but it is nothing but a nuisance in my Casper Imaging netboot image. Help!

Hi All, I've searched around online and haven't found a solution yet so I thought I'd post here. Does anyone know if there is a way to change the file association for Firefox so that PDFs download and open (with Preview or Adobe Reader) rather than use the "Adobe Acrobat NPAPI Plug-in"? Currently on our computers, PDFs are trying to use the NPAPI plug-in and are opening to a blank tab within Firefox. We'd rather have PDFs download and open with an app. Wondering if there is a way to do this with a terminal command or script to update a large number of computers with this issue. Thanks!~Joe

Is there anyway, for policies, to scope an exclusion list? IE: I'd like to have FV2 encryption deployed to all machines EXCEPT a select group/smart group. Thanks

We recently had a user upgrade his MacBook Air to OS X 10.8.3 (from 10.8.2). After the upgrade, policies in SelfService would fail immediately. There have been no Policy Logs captured for the failed events. I had the user reinstall the 8.62 QuickAdd.pkg and that immediately resolved the issue. Has anyone else had a similar experience?

Quick question, new to Casper Suite... We are running our JSS on a Mac mini. I haven't managed it, because I wasn't sure if that was a best practice. What do folks who run their JSS on Macs do? Do you manage it? I'd like to be able to have the Inventory, Purchasing, and other information; but obviously don't want to run lots of my standard policies on it, and don't want to re-scope everything.

We're starting to have some issues with our district apple id's getting used to authorize computers. So when 5 have been authorized, we can't get our provisional nodes authorized therefore no apps can get installed from Configurator onto the iPads. Just curious if anyone else is running into this and if you have a fix? In the past we used to be able to de authorize all computers and re authorize the provisional node, but Apple has done away with this feature in iTunes. Thanks,Chuck

Hello, I'm having an issue integrating the NetSUS applicance with our JSS. The appliance is storing updates. I have a single branch, called production. On the SUS, I set it as 'root branch'. On the JSS, I added the server with the FQDN, on port 80. I then created a policy for a test host to run SW updates agains the NetSUS appliance. From the documentation, this should pull updates from my 'production' branch, and not the main repository. It appears that when the policy is executed, it's pulling from the 'main' repo with all updates, and not the 'production' branch (that is set as root branch) as it should. As an example, iTunes 11.02 is not enabled on the production branch. But it was installed when the policy was ran from the JSS. I know my branch and catalogs are good. When I set my host manually to look at the production branch, I do NOT get iTunes 11.02 listed as an available update. When I set my host manually to look at the main

Just bought two new Mac Mini servers to replace aging XServe hardware. A couple of observations. Connecting to Data Center power:The Minis have two-prong power cords–no ground. All UPS devices in our data center are 240v. I hate to have a computer with a metal housing device plugged into 240v with no case ground… Found adapters, gritted teeth and plugged them in anyway. Connecting to the console:The Minis have mini display port and HDMI ports. No real path from HDMI to VGA to connect to the console, so mini display port to VGA adapters it is. Oops, I have to connect Promise Thunderbolt RAID arrays to the Minis. That uses the shared Thunderbolt/ MiniDisplay port. So do I have a choice–console or RAID connection? I hate to have to buy expensive digital to analog video converter just to get video to the console. Are any of you guys faced with the same issue trying to connect a display console and external storage via Thunderbolt? How are you handling it?

Does an API end-point exist to provide a list of computers in a building? I'm currently iterating through each computer item and sorting them into arrays that correspond with each building. However, pulling down information on each computer just to update the contents of a single building seems like too much work.

Previously duplicate machines in the Sophis Enterprise Console used to be fixed in the /etc/smb.conf by specifying the workgroup. Unfortunately in Mac OS 10.8+ there is no /etc/smb.conf At the mo there is no fix and i had to spread to 3 different people at Sophos to explain what the problem is.

Hi all, I am having difficulties adding an App Store App in 8.63. When I go to (Management -> Mobile Device App Catalog -> Add App -> App store App) when I do a search for the App I get no results. I have looked for Pages, Keynote, etc. and nothing pops up. I'm not behind a proxy and this used to work. I'm not opposed to adding it manually but wanted to see if there was something I was missing since the last update. The last time I had to add an App Store app was back in September 2012... Thanks!

If a drive was encrypted without the use of Casper. Is there an easy way to rotate and then capture a new recovery key?

I'd like to get my users up to date with security updates / software updates so we reduce variables in our infrastructure. I know plenty of ways to push updates or have the computer run softwareupdate -i -a, get users to go through Self Service, etc. etc. etc. Sounds like a great plan up until .... The dreaded question of reboots and how to handle them. How do you handle them if you cannot force one on them? The 5 minute auto restart option is not an option at all. How do you nag them to say, "You're computer just ran software update and it needs to restart, please do it as soon as possible". jamfHelper script in a policy through a smart group that says softwareupdate that requires reboot just ran? I worry that they'll ignore the pop up and just keep clicking OK for days and never reboot and then put the machine in a weird state.

https://github.com/darklordbrock/scripts/blob/master/UW-Milwaukee/mySWUcheck.sh I want to share this workflow I have setup. I have a smart group that will add machines that need a software update. The smart group gets a policy that runs this script at log out. I will ask the user during logout if they would like to install updates. The user can click NO three times. On the four log out the system will just install the updates. The script will tell if the updates need to reboot the system or just install. If the updates need to reboot, the script will have the system shutdown when they are done installing. With this being a log out script I thought it would be best to have the machine shutdown on a reboot needed. This way if the person is going to shut their machine down at the end of the day they can let this run and just go home, knowing the machine will shutdown with it is done. I have started to notice since I have been using this that most people do not log out or shutdown ve

Before I submit a feature request, is there a way to ensure that if a tech launches a Casper tool, they would be prompted if the version does not match JSS? In other words, JDoe opens Casper Admin 8.62, but we upgraded JSS to 8.63, so they would/should get a dialog along the lines of: Hi JDoe, I hope you're having a fantastic day. Oh, by the way, did you know your Casper Admin application is not at the latest version? Plese follow this link to be presented with a Self Service install of the latest version. :-)

Hi guys I've been trying to get the IDENTIFIER of a usb stick plugged in so i can use disk1s1 as a variable Im having problems cutting out the spaces and i was wondering if anyone knows how to just get disk1s1? This is what i have so far diskutil list | grep RALLY | grep disk 1: Windows_FAT_32 RALLY2 64GB 64.2 GB disk1s1

Brand new NetSUS installation of Ubuntu 10.04.4 using the 1.02 seed file. Fresh after the install, I've reconfigured the server for a static IP address, I've modified the adminHelper.sh script to work with DeployStudio .nbi bundles, and I've enabled ufw but have allowed access from the subnet that my workstation is on. I upload my newly generated "DSR-1083.nbi" bundle to the SMB share, I configure NetBoot to listen on my subnet, and click the Enable NetBoot button but nothing happens. The /etc/dhcpd.conf file looks correct--it has the path to the .sparseimage inside the .nbi bundle and everything. If I manually launch dhcpd from the command line, however: shelluser@NetSUS:~$ sudo /usr/local/sbin/dhcpd /usr/local/sbin/dhcpd: 2: Syntax error: ")" unexpected shelluser@NetSUS:~$ sudo /usr/local/sbin/dhcpd --version /usr/local/sbin/dhcpd: 2: Syntax error: ")" unexpected shelluser@NetSUS:~$ ls -l /usr/local/sbin/dhcpd -rwxr-xr-x 1 root root 66

For those of you using Casper FileVault configs who also encounter Fusion Drives, are you running into problems? With 10.8.2, encryption would fail (the Institutional key would be set, but the drive would not start encrypting). With 10.8.3, the key is set and the drive begins encrypting after the first reboot (as opposed to before it, like I see with non-Fusion Drives) BUT on the subsequent reboot, the machine fails to boot after unlocking (indefinite pinwheel). I recall somebody saying the -defer flag was causing trouble with Fusion Drives; I was hoping 10.8.3 would smooth out some kinks... silly me.

Anyone tried setting a startup/shutdown schedule in an energy saver payload pushed to a 10.8.2 machine? Every time the profile is installed in a fresh 10.8.2 install on a couple Late 2012 Mac Minis (machine specific build, of course) I can no longer log into these machines. I only get a white screen. I have tested this in a setting where the only thing thats different from a "fresh out of the box and fully updated" install is jamf 8.62 management and this one payload, so no packages or bindings or anything else.

What's the best way to trigger a policy ONLY if the compurter is logged off? Extension Attributes are not an option, since inventory data is gathered every 7 days (14 day window). We need to run "softwareupdate -i -a" only if the Macs are logged off. The policy is all set up and tested, just hung on how to trigger only for logged off Macs. :) Thoughts? TIADon