Is anyone experiencing an issue where uploaded Winclone sets that are received into Casper Admin require multiple sync sessions to distribution points? All uses of Casper Admin have their preferences set to "Modification Date" - and yet we are constantly re-syncing Winclone items that we can confirm are on the main distribution point. I am considering doing a single checksum sync, but in our environment that will take probably about a week to accomplish. Oh and why is Winclone an "Additional Tag" and not a "Third Party Product"? Any thoughts?

Recently I checked the computer records and found thatthere's no applications in the application details (which was there before) of the inventory for some machines. And there are no errors found in inventory update policy. If I do a manual "sudo jamf recon" it will get the inventory record updated correctly with all application details. I did a manual recon with -verbose and no issues found. To get this confirmed, I ran "sudo jamf recon" on a specific machine yesterday and confirmed all applications were on machine inventory but when I checked it today there are no apps in the inventory record of the machine. It seems like the auto inventory update (daily) caused it.

I'm trying to make some smart groups to catch the Office 2011 patches and I'm going cross eyed. Forinstance... Need one for any office 2011 that isn't 14.1.xthen one for 14.2then one for up to 14.2.3then one for 14.2.3-14.2.5 to go to 14.3 or 14.3.1Now 14.3.2 is out but requires 14.3.1 Is there a simple way to do this?

I have tested/tested and tested some more. Here's all I'm trying to do; --Use JAMFHelper to put a message on the screen telling the users some magical/awesome stuff is happening (I've tried both with and without the -startlaunchd option) --Have my shell script do the magical/awesome stuff, aka trigger a policy to run. --Then kill JAMFhelper and move on. (with the -kill command) The issue I'm having is, my script waits for jamfelper to close before ever moving on to the command to trigger the policy. I'm WAYYY okay with looking silly, and someone telling me that I'm missing something very obvious, and I really hope that's all it is. Thanks Everyone!

Has anyone successfully accomplished this? Works perfectly on 10.7+ using my config profile and $COMPUTERNAME for directory username.

I've noticed on a few systems that they are checking in, they have the current binary, proper accounts enabled, etc etc. But when I push software such as Flash or Java or ... just about anything, Casper remote will report successful, but when I go and check in teh JSS it shows as still not there. This one I've logged in locally and done a sudo jamf recon verbose and it goes through and does everything... then... quits. No error, no nothign. Successfully installed Adobe Flash Player.pkg. Unmounting file server... Running Recon... Retrieving inventory preferences from https://... Finding extension attributes... Locating hard drive information... Locating hardware information (Mac OS X 10.8.2)... Executing Unix applications... Locating accounts... Locating application details... ushofml312683:~ $ Finished. I've tried re-enrolling with -prompt and -verbose and it gets to teh recon and stops again... :~ $ sudo jamf enroll -verbose -prompt JSS Username: JSS Password

I have my mountNetworkShare.sh script set as a login policy and it's restricted to run only on internal network segments. The parameters of the policy are being honored, but the share still attempts to mount when I log in from offsite. It looks like the .plist file created in ~/Library/LaunchAgents is the culprit. Has anyone else seen this? I'm mounting end-user network home folders via smb and I'm using Kerberos. The only modification I made to the script was specifying smb and the name of the share.

Is it possible to restrict printing to a particular printer using AD security groups without adding them to a Windows printer server? I've been experimenting with CUPS allow groups, but have thus far been unsuccessful in restricting print access. In other instances we have configured default settings for printers in the local CUPS interface, captured it with Casper Admin, and deployed it seamlessly. This request has got me stumped. Any assistance would be greatly appreciated. Thanks!

Does the fdesetup sync command also work with AD? The documentation only refers to OD which we're phasing out.

What is the best way to get the RealName of the current logged in user? I am writing an Extension attribute to call an AD group and if the AD group contains a match of the real name of the logged in user to that of the AD group then you receive a Yes or No output.

So if a package (in this case, for firefox) is made with composer, and not all data you want to be deleted is (in this case, saved login/password info for gmail and such). What is the fastest method to fix this issue? And yes, I am only asking because the tech who pushed out the package checked fill existing user directories box. Otherwise I wouldn't care so much. Anyone have their hands on a quick script that scans the /Users/* directory of a machine and illuminates a certain file until its gone through all the folders?

I have a shortcut that points to a network drive that I need to deploy to several Macbooks desktop. I attempted to deploy the shortcut using composer then using self service so students can move the shortcut to their desktops but It didn't work, seems to me that composer is geared more to deploy dmg's and packages. Could someone tell me if is possible to do it with composer or if there's another way of deploying the shortcut? Macbooks use Snow Leopard 10.6.8

JSS Guru's, It has been brought to my attention as of recently that most new apple hardware my organisation purchases no longer allows us to image. I tested myself on a few 2013 MacBooks and iMacs using either netboot or an external drive with a replicated distribution point. I cant actually give any info about the error as all i get when i try holding the N key or the option key is a circle with a vertical line through it. I havent found much info out on the www about it but suspect it may be hardware or a firmware change apple have made that may of caused the issue. Sorry i am not the most knowledgable Apple guru out in the world but would really appreciate any feedback of what may bee the root cause of the issue as its hampering out deployment operations. Cheers.

Our techs deployed Snapz Pro X to a group of users, but forgot to enter the vol lic key. Anyone know where the key is stored so we can push to users? Also, we need to set Snapz Pro X to enable for all users on the Mac. TIADon

Every time we pull a report and select csv, we end up with an html file. So we have to navigate to ~/Downloads to select report.csv.html and remove the .html suffix. It's a drag...is it a bug...or should I file a feature report? Not complaining, just inquiring (yea, that's the ticket!). :) TIADon

How do I run a report/policy/script with casper to see what websites students visit with Macs?

Has anyone got a copy of Java for OS X 2013-001 installer?Please pass me the link if anyone has the original Apple installer (JavaForOSX2013-001.dmg) as the Apple Support site replaced it with the latest version. Thank you.

Is there a way to create a smart group based on if the user has Automatic Proxy Configuration set?

Is there a way to set a service agreement policy through Casper so all devices display a message before the login screen ?

JAMF Guru's, Our organisation is trying enrol all pre 2012 Apple hardware using the self enrol process. The problem is a lot of the users don't have admin rights which is required to install the quickadd.pkg. New apple hardware isn't an issue as out of the box deployments are configured correctly with JSS. The main issue is i have a large amount of users unable to enrol and require an IT Officer with local admin rights to patch them which is a timely exercise . Any ideas?

New KB provides a "fix" for the issue of our inability to enroll Macs: Enrollment Fails Using the Casper Suite or Recon Suite v8.63 or earlier with MySQL 5.6https://jamfnation.jamfsoftware.com/article.html?id=318 However, it does not tell us if it is safe to roll back JSS if we are already running 5.6? Can we shut down JSS, uninstall MySQL 5.6...then install MySQL 5.5 and start MySQL again? Is this safe? Is it recommended? PS, no option to post this question on the KB page...so posting here. TIADon

Hey all: I'm new to the scene so please be understanding if this is basic stuff. I had an HTTP Distribution Point working from a Mac mini running 10.8 Server (the same one running JSS and everything else Casper). It was working fine but I was asked to RAID1 the mini sever's internal drives. So I Carbon Copy Cloned the whole thing to an external, RAIDed the drives, Carbon Copy Cloned everything back. I booted back up and DHCP took over and assigned an IP, which sort of broke everything, but I reset up the IP and DNS, then re-ran the JSS installer, and everything was back up - except for the HTTP Distribution Point. The error when running a policy is this: /usr/sbin/jamf is version 8.63 Executing Policy Test (HTTP)... [STEP 1 of 1] Creating directory structure for /Library/Application Support/JAMF/Downloads/ Downloading http://SERVER.ca:80/CasperShare/Scripts/_DisplayMessage.sh... Error running script: The script could not be found on the server.. When

I would like to provide a .mobileconfig file to our remote Mac (not iOS) users that pre-populates the VPN settings for our organization. I have generated one and it works all except for the fact that I cannot get the profile to properly control the setting for "Send all Traffic Over VPN". I need that setting to be on (in a checked state). Here is my profile (with location specifics masked). Can anyone let me know where I might be going wrong? I thank folks in advance. I will note that Apple suggests use of the OverridePrimary key in their documentation. It doesn't seem to work though. The profile works other than that functionality though so if anyone knows perhaps a way that "Send all traffic over VPN" can be toggled in a script, that would work too. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version

Hi guys. This is my first post on here. I wanted to see if there is a good solution for what I'm trying to do. My company has 14 different buildings, each with their owner printers. Is there an elegant way to clear out a staff members printing system and then re-add all of the printers in one step?

Hi All, Java is driving me up the wall, I have the latest 6 2013 (1.6.0_41) update and it installs OK as a PKG, a prerequisite for Symantec AV live update (go figure...) however we have an application that launches a jnlp file that needs the Java web plugin. With Safari it refuses saying missing plugin, even though I tried the re-enabling article on the Apple website. However Firefox asks me what I want to use to launch it and it works OK. Java 7 update 15 installed manually works OK but installed as either a home grown snapshot PKG/DMG it does not. Install JRE7 by copying out the PKG from the Oracle package and deploying it still does not work.. How are you guys packaging and deploying JRE? Thanks, Barry