Has anyone out there used something simple like cURL to monitor if JSS goes down, and to restart Tomcat automatically if it gets no response?

I have a weird issue with the latest Flash Player installation. I've found that it installs just fine when a user is logged on, but if no one is logged on it will just sit at "Installing Adobe Flash Player 11.6.602.180.pkg" forever. Has anyone else come across this? Here's how the install is setup: PKG copies the install app (extracted from the dmg directly from Adobe) to /tmp, and a postflight script runs the command: "/private/tmp/Adobe Flash Player 11.6.602.180.app/Contents/MacOS/Adobe Flash Player Install Manager -install" An easy fix would be to change the trigger from every15 to logon. Thanks,Luke

I am working on creating a user setting and adding them to User Templets. I am working with 10.8.2 when I add the finder.plist that has disable fast user switching and then test login in I find fast user switching to not disabled. How can I make sure my User Templet has user fast user switching disabled

I've created a quick 10.8.3 BaseOS image using Composer to capture it, uploaded it to our distribution point, tried to use Casper Imaging to lay it back down and it gets stuck on "set Name to" and the screen just says Creating jamfHelper... The image itself works, I can lay it down via Disk Utility and everything seems fine. Any ideas?

Hello, Is there a way to not force the local iOS backup to be encrypted? We only have two policies deployed: one for WiFi, and the other with a web clip. However, every time people try to do the local backup, iTunes states that the iPad requires the backup to be encrypted. However, when I unenroll the device, it can backup fine without encryption. At this point, we are not planning on forcing backup encryption. Thanks, Tim

Hey, guys: I have a policy that I want to install Office 2011 14.2.3 and then apply the 14.3.2 update, but it always installs the 14.3.2 first (and fails, obviously) before installing the suite (which succeeds): Installing EN Microsoft Office 2011 14.3.2 Update.pkg... Installation failed. The installer reported: installer: Cannot install on volume / because it is disabled.installer: A version of the software required to install this update was not found on this volume. Installing EN Microsoft Office 2011.dmg... Closing package... [STEP 4 of 4] Running Recon... The two are set with sensible Priorities (10 for the install, 11 for the update). Perhaps policies don't look at the Priority setting, and Priority is only for Imaging? I'm not too fussed about it and have since acquired an installer that installs 14.3.2 to begin with, but am curious if this behaviour is normal and am wondering what a one-policy solution might be were I need to something sim

I'm new to Casper and new to scripting. I'm looking to apply a few dock items using dockutil at login once per user per machine. I am able to get the following script to run successfully via policy with a manual trigger... #!/bin/sh#### Script to add and remove items from dock using dockutil.###sleep 10# Remove Mail/usr/bin/sudo /usr/local/bin/dockutil --remove 'Mail' --no-restart --allhomes# Add OIT IP Helper/usr/bin/sudo /usr/local/bin/dockutil --add /Applications/OIT IP Helper.app --position beginning --no-restart --allhomes# Add Self Service/usr/bin/sudo /usr/local/bin/dockutil --add /Applications/Self Service.app --after 'OIT IP Helper' --no-restart --allhomes# Relaunch Dock/usr/bin/sudo killall Dock exit 0 When I run the same script with a login trigger it does not work, but it runs. I understand this could be due to login policy wanting to run as the service account for JSS but when I attempt to run it as a user I run the following and it fails b

This is a new installation for me, I am relatively new to the product. I built a bunch of self-service packages, and tested a few deployments with no issues, this has been working fine for about a week. Today it seems out of nowhere the apps installed by self-service will not open, they show "no access". It looks like the owner (original creator of the initial package) is the only one who has access. These packages were made with a local admin account (captainla), but I am not sure why apps being deployed with Self Service are taking the captainla account as the owner, when System should own the apps, right? Thoughts?

I have a specific need to disable the Check for Updates Automatically in the Java Control Panel across multiple computers. I can successfully build the plist/dmg and distribute it via Casper. However, when the Java control panel is opened, the control panel resets the setting and enables Check for Updates Automatically. Any thoughts?

I'm working on cleaning up our licensing for Parallels as we have a few different license keys that have been used over the years. I'm trying to build an Extension Attribute that either provides me the key or tell me it's "wrong". If the license key is the correct one it will have a line "key_number=" and the key will begin with "PDEI". If it doesn't have the correct key, this line either won't exist or the key will be something other than "PDEI". I'm a total rookie at scripting so what I've put together is purely by piecing together other scripts with a whole lot of trial and error. Here is what I've come up with so far. PDKey=$(prlsrvctl info --license | grep 'key_number' | awk '{print $1}') if [ $PDKey -eq 0 ]; then echo "<result>Wrong</result>" else echo "<result>$PDKey</result>" fi This is the error I get on a machine with the correct

Is anyone experiencing an issue where uploaded Winclone sets that are received into Casper Admin require multiple sync sessions to distribution points? All uses of Casper Admin have their preferences set to "Modification Date" - and yet we are constantly re-syncing Winclone items that we can confirm are on the main distribution point. I am considering doing a single checksum sync, but in our environment that will take probably about a week to accomplish. Oh and why is Winclone an "Additional Tag" and not a "Third Party Product"? Any thoughts?

Recently I checked the computer records and found thatthere's no applications in the application details (which was there before) of the inventory for some machines. And there are no errors found in inventory update policy. If I do a manual "sudo jamf recon" it will get the inventory record updated correctly with all application details. I did a manual recon with -verbose and no issues found. To get this confirmed, I ran "sudo jamf recon" on a specific machine yesterday and confirmed all applications were on machine inventory but when I checked it today there are no apps in the inventory record of the machine. It seems like the auto inventory update (daily) caused it.

I'm trying to make some smart groups to catch the Office 2011 patches and I'm going cross eyed. Forinstance... Need one for any office 2011 that isn't 14.1.xthen one for 14.2then one for up to 14.2.3then one for 14.2.3-14.2.5 to go to 14.3 or 14.3.1Now 14.3.2 is out but requires 14.3.1 Is there a simple way to do this?

I have tested/tested and tested some more. Here's all I'm trying to do; --Use JAMFHelper to put a message on the screen telling the users some magical/awesome stuff is happening (I've tried both with and without the -startlaunchd option) --Have my shell script do the magical/awesome stuff, aka trigger a policy to run. --Then kill JAMFhelper and move on. (with the -kill command) The issue I'm having is, my script waits for jamfelper to close before ever moving on to the command to trigger the policy. I'm WAYYY okay with looking silly, and someone telling me that I'm missing something very obvious, and I really hope that's all it is. Thanks Everyone!

Has anyone successfully accomplished this? Works perfectly on 10.7+ using my config profile and $COMPUTERNAME for directory username.

I've noticed on a few systems that they are checking in, they have the current binary, proper accounts enabled, etc etc. But when I push software such as Flash or Java or ... just about anything, Casper remote will report successful, but when I go and check in teh JSS it shows as still not there. This one I've logged in locally and done a sudo jamf recon verbose and it goes through and does everything... then... quits. No error, no nothign. Successfully installed Adobe Flash Player.pkg. Unmounting file server... Running Recon... Retrieving inventory preferences from https://... Finding extension attributes... Locating hard drive information... Locating hardware information (Mac OS X 10.8.2)... Executing Unix applications... Locating accounts... Locating application details... ushofml312683:~ $ Finished. I've tried re-enrolling with -prompt and -verbose and it gets to teh recon and stops again... :~ $ sudo jamf enroll -verbose -prompt JSS Username: JSS Password

I have my mountNetworkShare.sh script set as a login policy and it's restricted to run only on internal network segments. The parameters of the policy are being honored, but the share still attempts to mount when I log in from offsite. It looks like the .plist file created in ~/Library/LaunchAgents is the culprit. Has anyone else seen this? I'm mounting end-user network home folders via smb and I'm using Kerberos. The only modification I made to the script was specifying smb and the name of the share.

Is it possible to restrict printing to a particular printer using AD security groups without adding them to a Windows printer server? I've been experimenting with CUPS allow groups, but have thus far been unsuccessful in restricting print access. In other instances we have configured default settings for printers in the local CUPS interface, captured it with Casper Admin, and deployed it seamlessly. This request has got me stumped. Any assistance would be greatly appreciated. Thanks!

Does the fdesetup sync command also work with AD? The documentation only refers to OD which we're phasing out.

What is the best way to get the RealName of the current logged in user? I am writing an Extension attribute to call an AD group and if the AD group contains a match of the real name of the logged in user to that of the AD group then you receive a Yes or No output.

So if a package (in this case, for firefox) is made with composer, and not all data you want to be deleted is (in this case, saved login/password info for gmail and such). What is the fastest method to fix this issue? And yes, I am only asking because the tech who pushed out the package checked fill existing user directories box. Otherwise I wouldn't care so much. Anyone have their hands on a quick script that scans the /Users/* directory of a machine and illuminates a certain file until its gone through all the folders?

I have a shortcut that points to a network drive that I need to deploy to several Macbooks desktop. I attempted to deploy the shortcut using composer then using self service so students can move the shortcut to their desktops but It didn't work, seems to me that composer is geared more to deploy dmg's and packages. Could someone tell me if is possible to do it with composer or if there's another way of deploying the shortcut? Macbooks use Snow Leopard 10.6.8

JSS Guru's, It has been brought to my attention as of recently that most new apple hardware my organisation purchases no longer allows us to image. I tested myself on a few 2013 MacBooks and iMacs using either netboot or an external drive with a replicated distribution point. I cant actually give any info about the error as all i get when i try holding the N key or the option key is a circle with a vertical line through it. I havent found much info out on the www about it but suspect it may be hardware or a firmware change apple have made that may of caused the issue. Sorry i am not the most knowledgable Apple guru out in the world but would really appreciate any feedback of what may bee the root cause of the issue as its hampering out deployment operations. Cheers.

Our techs deployed Snapz Pro X to a group of users, but forgot to enter the vol lic key. Anyone know where the key is stored so we can push to users? Also, we need to set Snapz Pro X to enable for all users on the Mac. TIADon

Every time we pull a report and select csv, we end up with an html file. So we have to navigate to ~/Downloads to select report.csv.html and remove the .html suffix. It's a drag...is it a bug...or should I file a feature report? Not complaining, just inquiring (yea, that's the ticket!). :) TIADon