"Username & Password Authentication is Required" is checked for http downloads on the Distribution Point, yet no authentication prompt appears on connection. Can't be right.

Hi all, We're starting to Partition our Macs with 2 partitions. 1 is for the OS, the other for User home folders. All accounts will be AD mobile home accounts, or our default admin account. Rebuilding will wipe the OS data partition only. Do we then need to correct the permissions on the Users home folders post rebuild? The accounts UniqueID & primary groups ID will be the same pre & post rebuild.

Hello all! We're running an MS AD system for user authentication on our Mac clients, and we were having a bit of trouble with group lookups. We finally tracked it down to the fact that the '/all domains' authentication search path wasn't actually picking up all the groups for some reason, and some of our groups were under '/[DOMAIN NAME]' instead. If we set the search path to ONLY /[DOMAIN NAME] other groups were lost (authentication breaks as well), and adjusting our "allow authentication from all domains in the forest" option hasn't helped. Anyway, besides the point. Once both /all domains and /[DOMAIN NAME] are setup in the search policy and contacts search paths, all the group information is pulled in and authentication works. Now we're looking for a a way to add /[DOMAIN NAME] to the search policy on all our Macs either via a script, or, preferably, a managed preference. I've searched around a bit, but so far haven't be

Hey everyone! I have been working with configuration profiles lately, and I know that you have to open up ports 2195/TCP, 2196/TCP, and 5223/TCP for the APNS to work and send the config profile to the computers. Understandably so, my networking guys are concerned about opening up our LAN to an external source - could potentially be bad. Are there any best practices out there that anyone is using? Or any ideas on how to get configuration profiles to work without opening up these ports? Thanks!

I'm running into an issue with some configurations not being able to lock the boot screen for my techs to know that they should not touch the computer things are still happening for imaging. I have a localization DMG package for other languages that seems to be interfering with it showing up. Any ideas on how to fix?

Hi all, We're building our macs to 10.8.2 BUT the JAMF Helper imaging screen is not always showing. What command can I run as a part of my imaging workflow to make sure it always displays? (The image is a modular one with multiple pkg's requiring to be installed on the boot volume).

Has anyone else had an issue where the Apple Software Update Server defined in the JSS looks like it's applied correctly (defaults read /Library/Preferences/com.apple.SoftwareUpdate CatalogURL shows the server), but it still pulls from Apple's Internet servers? I had to manually change the setting from Terminal before it starting looking at my internal SUS. If anyone else is having a similar issue, I'll submit a report to my account rep. I'm not sure how this is possible.

Looking to run a script with the -i option/argument (install.sh -i). Where do I input the -i? Script won't run without it being there.

The image works fine on older generation of mac book pros, however, with new retina macs out of the box with thunderbolt ethernet dongle it joins the domain,but name under sharing is blank, in casper shows up as "localhost" and in AD it joins named "no name". Is there something I'm missing?

We already have an Office 2011 14.2.5 pkg we created with Composer and deliver via Self-Service, and is also part of our config in Casper Imaging. I am wondering how admins are handling the updates that come out, as in the recent 14.3 from 14.2.5. What are some of the methods of deploying the 14.3 update. Are people just creating a new complete 14.3 pkg and reinstalling via policy or self-service, or just pushing out the 14.3 update. I am interested in the update process. thanks in advance John

Hi all, I'm using the "Son of InstallLion.pkg" utility (found at http://managingosx.wordpress.com/2012/07/25/son-of-installlion-pkg/) to create an installer package that will upgrade a user's computer to 10.8. The package itself runs just fine, but when I create a policy to install the package, nothing happens. The Casper logs say that it was installed successfully, but when the computer restarts, the OS has been left untouched. Log says: /usr/sbin/jamf is version 8.62 Executing Policy Install OS X 10.8 Mountain Lion... [STEP 1 of 3] Mounting afp://<server>/CasperShare to /Volumes/CasperShare... [STEP 2 of 3] Coopying InstallOSX_10.8.2_12C60.pkg... Installing InstallOSX_10.8.2_12C60.pkg... Successfully installed InstallOSX_10.8.2_12C60.pkg. Unmounting file server... [STEP 3 of 3] Running Recon... Locating mobile device records... Blessing i386 OS X System on /... Creating Reboot Script... Any ideas?

There seems to be an issue where quoted text gets bolded. I sent screenshots to the JAMF gods, but I wondered if anyone else is seeing it too? Two images: Existing Post (what you see in the Edit window)Update Your Post (what shows up when posted) Don external image linkexternal image link

How to scan for a program on computers using Casper?

ive been looking at these http://emeadeployment.blogspot.co.uk/2012/10/107-and-108-clients-do-not-generate.html http://support.apple.com/kb/HT5385 Below Works fine Find the line: auth optional pam_krb5.so use_first_pass use_kcminit Add the key "default_principal" to the end of the line. For example: auth optional pam_krb5.so use_first_pass use_kcminit default_principal Is this scriptable? I dont want to have to just push this out all the time. I have a mix of 10.6 and starting with a couple 10.8 machines my idea was to have a script that runs at start up something like #!/bin/sh # Carry out an OS version check OS=`/usr/bin/defaults read /System/Library/CoreServices/SystemVersion ProductVersion | awk '{print substr($1,1,4)}'` # If the OS is 10.6 then fix Kerberos TGT http://support.apple.com/kb/ht4100 if [[ "$OS" == "10.6" ]]; then sudo /usr/libexec/PlistBuddy -c "Add :rights:system.login.console:mechanis

Reading the Ars Technica review of 10.8, I see that Apple Updates are now rolled into the App Store. Which requires a Apple/iTunes ID account. How do I manage that with labs deployments? Do we have to make a Corporate/District/School level Apple ID for all Macs now? Thoughts? Patrick

Hello jamfnation- does anyone have an extension attribute that can report the Oracle java version in addition to Apple's versions?All the extension attributes I've seen are based on the java -version bash command, which only seems to return information about the apple-supplied JRE, not the one from Oracle.

Hi all. We have a minor issue during imaging new machines.When a machine will be imaged by Casper Imaging, a Post Install Script is created and added to the machine. This script should bind our machines to the AD using Centrify and update the Inventory.Somehow it seems that this is not happening.I tested the last client on Friday and let him reboot from HDD. Till now the scripts has not been executed.Is there a reason why this could be the case? Thanks in advance.

Hi all, I have an issue with needing to support new 10.8.2 machines with both FCP 7 & FCP X. Has anyone come across needing to do this? If so can you give me pointers or advice to consider while doing this. Cheers.

Hi folks, I have the possibility of completely re-architecting the JSS setup we have here as the current one has certain drawbacks. So if you were going to completely redesign your JSS set up, what would you aim for in your design?

Hi People, I'm new to casper and have been going through this forum to get a better idea of how policies and scripts work but I'm having a problem with the below mentioned script (which I found here and and have modified it to work in our environment) When I copy it to a workstation and run it through terminal as sudo it all works.But when I create a policy and have the script copied via Casper Admin only the MCX removal files portion of the script is working. The deleting of the home directories doesn't work. I'm hoping someone can shed some light on this for me. Thanks in advance for view and assisting! # Loop through users with homes in /Users; exclude any accounts you don't want removed (i.e. local admin and current user if policy runs while someone is logged in) for username in `ls /Users | grep -v admin | grep -v Shared`doecho "Removing user profile: $username"# dscl . delete /Local/Default/Users/$usernamerm -rf /Users/$usernamedone # Rem

We have some students who for various reasons have had iTunes restricted on their computers. In certain cases, we would like to restore their iTunes privileges but put limits on when they can access the application. I have looked at various options within Casper and have not found a way to do that. Is it possible to limit the times during a day a user has access to a particular application? If so, how? Thank you.

Here's what happened... I had an iPad 2 with a bad display so I backed it up to my computer and took it to the Apple Store. They exchanged the iPad for a new iPad 2. I've restored that iPad from the backup. Here is my problem... 1) When I boot the iPad it tells me I need to set a passcode (which was a requirement of one of the profiles the old iPad had) but when I go into settings I don't see any profiles installed. 2) When I try to enroll the iPad, it downloads the CA Certificate Payload and MDM Profile profiles but it doens't install the Self-Service app and Casper just shows the UDID and no other information for the device (it says it isn't enrolled). If I wipe the iPad, set it up as new and enroll it, everything works fine. Is there some way to get rid of the phantom profile that it seems to be installing with the restore so that I can get my data back and enroll the iPad or am I out of luck?

Hello All, I am testing the install of CS6 with policys. I created two packages to test. 1. CS6 Web prem with the updates installed created with AAMME 3.1 and 2. CS6 Web prem with no updates with AAMME 3.1. The policys I have in place are: 1st policy to cache, 2nd policy to uninstall cs5 and restart, & 3rd a policy to install from cache With I push the first PKG (with updates) with the above method I get two policy logs for the computer: 1st stating it was successfully installed2nd The install failed (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.) From there I check the console logs and I see errors for indd error code dw023 For the 2nd pkg (no updates) with the above policys method again two policy logs: 1st stating it was successfully installed2nd The install failed (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.) I che

I am getting the error:The version of “Java” on your system does not include the latest security updates and has been blocked. To continue using “Java”, download an updated version from Oracle’s website. I am running 1.7u11. I found two posts earlier today on Apple's forums of people experiencing the same issue beginning this morning. Are any of you guys seeing this?

Has anyone successfully polled the VRAM information through an Extension Attribute? I have been trying the following script without success: #!/bin/sh vram='system_profiler -detaillevel mini | grep 'VRAM' | cut -d : -f 2'echo"<result>$vram</result>" The command works without a hitch when I use it in Terminal.