Is there anyway, for policies, to scope an exclusion list? IE: I'd like to have FV2 encryption deployed to all machines EXCEPT a select group/smart group. Thanks

We recently had a user upgrade his MacBook Air to OS X 10.8.3 (from 10.8.2). After the upgrade, policies in SelfService would fail immediately. There have been no Policy Logs captured for the failed events. I had the user reinstall the 8.62 QuickAdd.pkg and that immediately resolved the issue. Has anyone else had a similar experience?

Quick question, new to Casper Suite... We are running our JSS on a Mac mini. I haven't managed it, because I wasn't sure if that was a best practice. What do folks who run their JSS on Macs do? Do you manage it? I'd like to be able to have the Inventory, Purchasing, and other information; but obviously don't want to run lots of my standard policies on it, and don't want to re-scope everything.

We're starting to have some issues with our district apple id's getting used to authorize computers. So when 5 have been authorized, we can't get our provisional nodes authorized therefore no apps can get installed from Configurator onto the iPads. Just curious if anyone else is running into this and if you have a fix? In the past we used to be able to de authorize all computers and re authorize the provisional node, but Apple has done away with this feature in iTunes. Thanks,Chuck

Hello, I'm having an issue integrating the NetSUS applicance with our JSS. The appliance is storing updates. I have a single branch, called production. On the SUS, I set it as 'root branch'. On the JSS, I added the server with the FQDN, on port 80. I then created a policy for a test host to run SW updates agains the NetSUS appliance. From the documentation, this should pull updates from my 'production' branch, and not the main repository. It appears that when the policy is executed, it's pulling from the 'main' repo with all updates, and not the 'production' branch (that is set as root branch) as it should. As an example, iTunes 11.02 is not enabled on the production branch. But it was installed when the policy was ran from the JSS. I know my branch and catalogs are good. When I set my host manually to look at the production branch, I do NOT get iTunes 11.02 listed as an available update. When I set my host manually to look at the main

Just bought two new Mac Mini servers to replace aging XServe hardware. A couple of observations. Connecting to Data Center power:The Minis have two-prong power cords–no ground. All UPS devices in our data center are 240v. I hate to have a computer with a metal housing device plugged into 240v with no case ground… Found adapters, gritted teeth and plugged them in anyway. Connecting to the console:The Minis have mini display port and HDMI ports. No real path from HDMI to VGA to connect to the console, so mini display port to VGA adapters it is. Oops, I have to connect Promise Thunderbolt RAID arrays to the Minis. That uses the shared Thunderbolt/ MiniDisplay port. So do I have a choice–console or RAID connection? I hate to have to buy expensive digital to analog video converter just to get video to the console. Are any of you guys faced with the same issue trying to connect a display console and external storage via Thunderbolt? How are you handling it?

Does an API end-point exist to provide a list of computers in a building? I'm currently iterating through each computer item and sorting them into arrays that correspond with each building. However, pulling down information on each computer just to update the contents of a single building seems like too much work.

Previously duplicate machines in the Sophis Enterprise Console used to be fixed in the /etc/smb.conf by specifying the workgroup. Unfortunately in Mac OS 10.8+ there is no /etc/smb.conf At the mo there is no fix and i had to spread to 3 different people at Sophos to explain what the problem is.

Hi all, I am having difficulties adding an App Store App in 8.63. When I go to (Management -> Mobile Device App Catalog -> Add App -> App store App) when I do a search for the App I get no results. I have looked for Pages, Keynote, etc. and nothing pops up. I'm not behind a proxy and this used to work. I'm not opposed to adding it manually but wanted to see if there was something I was missing since the last update. The last time I had to add an App Store app was back in September 2012... Thanks!

If a drive was encrypted without the use of Casper. Is there an easy way to rotate and then capture a new recovery key?

I'd like to get my users up to date with security updates / software updates so we reduce variables in our infrastructure. I know plenty of ways to push updates or have the computer run softwareupdate -i -a, get users to go through Self Service, etc. etc. etc. Sounds like a great plan up until .... The dreaded question of reboots and how to handle them. How do you handle them if you cannot force one on them? The 5 minute auto restart option is not an option at all. How do you nag them to say, "You're computer just ran software update and it needs to restart, please do it as soon as possible". jamfHelper script in a policy through a smart group that says softwareupdate that requires reboot just ran? I worry that they'll ignore the pop up and just keep clicking OK for days and never reboot and then put the machine in a weird state.

https://github.com/darklordbrock/scripts/blob/master/UW-Milwaukee/mySWUcheck.sh I want to share this workflow I have setup. I have a smart group that will add machines that need a software update. The smart group gets a policy that runs this script at log out. I will ask the user during logout if they would like to install updates. The user can click NO three times. On the four log out the system will just install the updates. The script will tell if the updates need to reboot the system or just install. If the updates need to reboot, the script will have the system shutdown when they are done installing. With this being a log out script I thought it would be best to have the machine shutdown on a reboot needed. This way if the person is going to shut their machine down at the end of the day they can let this run and just go home, knowing the machine will shutdown with it is done. I have started to notice since I have been using this that most people do not log out or shutdown ve

Before I submit a feature request, is there a way to ensure that if a tech launches a Casper tool, they would be prompted if the version does not match JSS? In other words, JDoe opens Casper Admin 8.62, but we upgraded JSS to 8.63, so they would/should get a dialog along the lines of: Hi JDoe, I hope you're having a fantastic day. Oh, by the way, did you know your Casper Admin application is not at the latest version? Plese follow this link to be presented with a Self Service install of the latest version. :-)

Hi guys I've been trying to get the IDENTIFIER of a usb stick plugged in so i can use disk1s1 as a variable Im having problems cutting out the spaces and i was wondering if anyone knows how to just get disk1s1? This is what i have so far diskutil list | grep RALLY | grep disk 1: Windows_FAT_32 RALLY2 64GB 64.2 GB disk1s1

Brand new NetSUS installation of Ubuntu 10.04.4 using the 1.02 seed file. Fresh after the install, I've reconfigured the server for a static IP address, I've modified the adminHelper.sh script to work with DeployStudio .nbi bundles, and I've enabled ufw but have allowed access from the subnet that my workstation is on. I upload my newly generated "DSR-1083.nbi" bundle to the SMB share, I configure NetBoot to listen on my subnet, and click the Enable NetBoot button but nothing happens. The /etc/dhcpd.conf file looks correct--it has the path to the .sparseimage inside the .nbi bundle and everything. If I manually launch dhcpd from the command line, however: shelluser@NetSUS:~$ sudo /usr/local/sbin/dhcpd /usr/local/sbin/dhcpd: 2: Syntax error: ")" unexpected shelluser@NetSUS:~$ sudo /usr/local/sbin/dhcpd --version /usr/local/sbin/dhcpd: 2: Syntax error: ")" unexpected shelluser@NetSUS:~$ ls -l /usr/local/sbin/dhcpd -rwxr-xr-x 1 root root 66

For those of you using Casper FileVault configs who also encounter Fusion Drives, are you running into problems? With 10.8.2, encryption would fail (the Institutional key would be set, but the drive would not start encrypting). With 10.8.3, the key is set and the drive begins encrypting after the first reboot (as opposed to before it, like I see with non-Fusion Drives) BUT on the subsequent reboot, the machine fails to boot after unlocking (indefinite pinwheel). I recall somebody saying the -defer flag was causing trouble with Fusion Drives; I was hoping 10.8.3 would smooth out some kinks... silly me.

Anyone tried setting a startup/shutdown schedule in an energy saver payload pushed to a 10.8.2 machine? Every time the profile is installed in a fresh 10.8.2 install on a couple Late 2012 Mac Minis (machine specific build, of course) I can no longer log into these machines. I only get a white screen. I have tested this in a setting where the only thing thats different from a "fresh out of the box and fully updated" install is jamf 8.62 management and this one payload, so no packages or bindings or anything else.

What's the best way to trigger a policy ONLY if the compurter is logged off? Extension Attributes are not an option, since inventory data is gathered every 7 days (14 day window). We need to run "softwareupdate -i -a" only if the Macs are logged off. The policy is all set up and tested, just hung on how to trigger only for logged off Macs. :) Thoughts? TIADon

Has anyone out there used something simple like cURL to monitor if JSS goes down, and to restart Tomcat automatically if it gets no response?

I have a weird issue with the latest Flash Player installation. I've found that it installs just fine when a user is logged on, but if no one is logged on it will just sit at "Installing Adobe Flash Player 11.6.602.180.pkg" forever. Has anyone else come across this? Here's how the install is setup: PKG copies the install app (extracted from the dmg directly from Adobe) to /tmp, and a postflight script runs the command: "/private/tmp/Adobe Flash Player 11.6.602.180.app/Contents/MacOS/Adobe Flash Player Install Manager -install" An easy fix would be to change the trigger from every15 to logon. Thanks,Luke

I am working on creating a user setting and adding them to User Templets. I am working with 10.8.2 when I add the finder.plist that has disable fast user switching and then test login in I find fast user switching to not disabled. How can I make sure my User Templet has user fast user switching disabled

I've created a quick 10.8.3 BaseOS image using Composer to capture it, uploaded it to our distribution point, tried to use Casper Imaging to lay it back down and it gets stuck on "set Name to" and the screen just says Creating jamfHelper... The image itself works, I can lay it down via Disk Utility and everything seems fine. Any ideas?

Hello, Is there a way to not force the local iOS backup to be encrypted? We only have two policies deployed: one for WiFi, and the other with a web clip. However, every time people try to do the local backup, iTunes states that the iPad requires the backup to be encrypted. However, when I unenroll the device, it can backup fine without encryption. At this point, we are not planning on forcing backup encryption. Thanks, Tim

Hey, guys: I have a policy that I want to install Office 2011 14.2.3 and then apply the 14.3.2 update, but it always installs the 14.3.2 first (and fails, obviously) before installing the suite (which succeeds): Installing EN Microsoft Office 2011 14.3.2 Update.pkg... Installation failed. The installer reported: installer: Cannot install on volume / because it is disabled.installer: A version of the software required to install this update was not found on this volume. Installing EN Microsoft Office 2011.dmg... Closing package... [STEP 4 of 4] Running Recon... The two are set with sensible Priorities (10 for the install, 11 for the update). Perhaps policies don't look at the Priority setting, and Priority is only for Imaging? I'm not too fussed about it and have since acquired an installer that installs 14.3.2 to begin with, but am curious if this behaviour is normal and am wondering what a one-policy solution might be were I need to something sim

I'm new to Casper and new to scripting. I'm looking to apply a few dock items using dockutil at login once per user per machine. I am able to get the following script to run successfully via policy with a manual trigger... #!/bin/sh#### Script to add and remove items from dock using dockutil.###sleep 10# Remove Mail/usr/bin/sudo /usr/local/bin/dockutil --remove 'Mail' --no-restart --allhomes# Add OIT IP Helper/usr/bin/sudo /usr/local/bin/dockutil --add /Applications/OIT IP Helper.app --position beginning --no-restart --allhomes# Add Self Service/usr/bin/sudo /usr/local/bin/dockutil --add /Applications/Self Service.app --after 'OIT IP Helper' --no-restart --allhomes# Relaunch Dock/usr/bin/sudo killall Dock exit 0 When I run the same script with a login trigger it does not work, but it runs. I understand this could be due to login policy wanting to run as the service account for JSS but when I attempt to run it as a user I run the following and it fails b