Is it possible to do this mapping? Then I can create smart groups based on the info in AD. Thanks, Matt

I am getting a "To open “Final Cut Server,” you need to download the Java Runtime Environment for Web Start applications" error although Java 6 and 7 have already been installed and the app launches and runs fine as a local administrator. (but not as a managed standard account it seems) I am not sure if this is a ByHost issue or is it possible use a policy to resolve the issue. Any help would be greatly appreciated.

We are having an issue where some of our AD users cannot log into Mountain Lion. The common thread is that their primary group id's (GID) are set to "-2" in AD. Not sure how/why this would have happened for these users, but they can all log into Lion without issue, just not ML. Just an FYI; you may not encounter this problem, but it is a major show-stopper for us. --Andy

Morning all. I have what I feel should be a simplistic request that's troubling me. I'm running a Launch Daemon (that ultimately runs as root, as all launch daemons do) that calls an applescript. That's running fine. The applescript, at some point, may need to launch an app. These are the methods tried: tell application "VerifyAndChangePassword" to launch this fails with: /usr/bin/myscript.scpt: execution error: An error of type -10810 has occurred. (-10810) do shell script "open -a /Applications/myapp.app" fails with: /usr/bin/com.bob.myscript.scpt: execution error: LSOpenURLsWithRole() failed for the application /Applications/VerifyAndChangePassword.app with error -10810. (1) any ideas? I may have to write a launch agent that monitors a plist and launches the app from there instead!

Is anyone doing this? I can't seem to get mine to actually fill with anything. I've set the log location to C:Program FilesJSSLogs but the jamfChangeManagement.log file is empty. I've gotten this to work easily before on Linux and OS X JSSes...

Trying to create three separate Smart Groups that gathers all 10.6.x, 10.7.x, 10.8.x Macs. It usually returns zero members. The JSS is very specific listing 10.6.3, or 10.7.2, 10.7.3, etc. I just want to know all the 10.6.x, 10.7.x, 10.8.x. regardless of the dot releases. I know this is possible, just not sure how to do it. Thanks in advance. John K

Hello,I have the following error when launching fresh install of Casper 8.52 on a OS X Server 10.7.4 and it doesn't launch An unexpected error occurred: NSInternalInconsistencyException Reason: Modal session requires modal window The program will close. #0 CoreFoundation 0x99425a45 raiseError() #1 libobjc.A.dylib 0x949de149 objc_exception_throw() #2 CoreFoundation 0x9938d289 +[NSException raise:format:arguments:] #3 Foundation 0x94b94233 -[NSAssertionHandler handleFailureInMethod:object:file:lineNumber:description:] #4 AppKit 0x902df478 -[NSApplication commonBeginModalSessionForWindow:relativeToWindow:modalDelegate:didEndSelector:contextInfo:] #5 AppKit 0x902dfd4c -[NSApplication beginSheet:modalForWindow:modalDelegate:didEndSelector:contextInfo:] #6 JAMFCore 0x000f3520 -[JAMFAuthenticationWindowContro

In a discussion someone mentioned they use purge memory in self service. Unfortunately I can't find the discussion. If it you please can you tell me how you did it? I cant see options in self service so I take it you must have a custom script Thanks

Happy Update Day, Everybody! We're using an auto updating script that silently reaches out to our update server and installs any Apple updates that do not require a restart. Works fantastically! Except for today... With the release of iTunes 11, some Macs are installing just fine. Others encounter this problem: Checking packages… Installing Package failed: Authorization is required to install the packages. Obviously we don't have admin users out there. I don't suppose anyone has a workaround for this, would they?

I have a number of devices that hang at "Checking for Policies" when logging off or rebooting. Has anyone seen this or know how to resolve it?

Using "dscl" to read a multi value attribute is causing me some trouble. I'd like to be able to read "dsAttrTypeNative:otherLoginWorkstations" but due to the multi value capability, I haven't been successful in doing so. Example: dscl /Active Directory/STARBUCKS/All Domains -read /Users/<userID> dsAttrTypeNative:otherLoginWorkstations Any thoughts on this one?

I'm running into a problem with 8.6.2 and a 10.8.2 MacBook Air fresh out of the box. I have setup a testing config in Casper Admin that has nothing in it. The only thing the config does is to apply the management account on the Management tab of the config. "Ensure computers..." is checked, as is "Create this account..." and "Hide this account...". I am using a Thunderbolt cable (MBA booted into Target Disk mode) with Casper Imaging running from an external USB drive (replication point is replicated to the USB drive, Casper Imaging app on the USB Drive) to "image" the machine. Casper Imaging completes with no problem. I disconnect the machine and restart it. The system comes up to the login screen, but the admin account does not work. I've tried dropping to the console (>console) and entering the admin account name, but I receive "Login Incorrect" and it just goes right back to the login prompt. Has anyone seen thi

I'm having a problem with Casper's built in Software Update Server setup. I want clients to use the full URL pointing directly to the catalog of our software update server (http://software.server.edu:8088/index-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog) instead of pointing to the index file (http://software.server.edu:8088/index.sucatalog). We've been having serious slow-downs using our software update server and my Apple SE informed me that pointing our clients to the full path would help solve this issue. Unfortunately, I don't see a way to do this in the server setup portion of our JSS. Any ideas or recommendations? We are currently on version 8.52. I read somewhere that using MCX settings or a script to make these changes is the only way to do this. I would hope that this change could be set in the server setup within the JSS.

Immediately after that you get "Could not initialize Photoshop because you do not have the necessary access privileges." Then Photoshop quits. The only way I've found to get around this is by deleting the user profile and recreating it. That seems to fix the problem. I did this yesterday for a user, but today the problem has occurred again. Uninstalling and reinstall CS4 does not help, neither does repairing permissions. What I do is move the user data to another partition, delete the account, then have them log back in, and move everything back over except the contents of their library folder. I do move back their ~/Library/AppSupport/Firefox and ~/Library/Safari folders though. After this Photoshop works a charm. So it's something in the library, but the usual culprits (preferences, app support, caches) don't seem to be causing it. Has anyone seen this before? What is the resolution, if any?

I have tried putting the Lync .mkpg into Casper admin, and deploying it via Casper Remote. It seems to install correctly, but when I start it I get a screen to accept or decline the licensing agreement. I select to accept and then Lync closes. I try it again and it does the same thing over again. Any suggestions?

Hey all, I was curious to know what other casper admins are using the plug-ins feature for? Currently we use it for easy access to our wiki, links to share point, and some helpful apple resources for new users. I noticed there was an ability to add a "plug-in bundle" but I haven't really seen much resources on how to create one, or just anything in general. Does anyone know of a good discussion or KBase article I can use just to gather more information on plug ins for self service? Thanks!

hi guys I have 3 pkgs in a folder and i wondered if it is possible to install them via the command line with a for statement. does anyone know if this is possible and how to do this? Thanks

We have a number of machines in our inventory which were Filevault 2 encrypted prior to upgrading to JSS 8.6. Is there a way for their individual recovery keys to be inventoried and retrieved or do the machines need to be unencrypted and then re-encrypted using the JSS?

Hey guys, What Am I missing? I am trying to get filevault 2 setup through the JSS to manage. I am following the guide and it says to look for "Disk Encryption Config" link under the management tab. There is nothing there regarding encryption. I don't see it at all, anywhere. Any help would be appreciated. Thanks -Jeff

Ok, maybe a little misleading for the title but I didn't know a better way to name it. Most of the time I have casper admin open on my Mac, which includes having the volume "CasperShare" mounted on my mac. If a policy happens to run while I have CA open, it will be running from "CasperShare 1." I have several policies that run post-folght scripts that use the jamf utility to install a package, etc, and I need to specify the correct path to the package. Any quick way of telling what mounted volume a script is running from?

I am setting up a remote JSS server and can not get the install to see the MySQL database on my other JSS server. I have verified that the user has the grants. mysql> show grants for jamfsoftware@casperapp3.tsys.com;+-------------------------------------------------------------------------------------------------------------------------------+| Grants for jamfsoftware@casperapp3.tsys.com |+-------------------------------------------------------------------------------------------------------------------------------+| GRANT USAGE ON *.* TO 'jamfsoftware'@'casperapp3.tsys.com' IDENTIFIED BY PASSWORD '*B8B7B8C47EF8381F4C2BBD441DAF0E52AEE035DF' || GRANT ALL PRIVILEGES ON `jamfsoftware`.* TO 'jamfsoftware'@'casperapp3.tsys.com' |+----------------------------------------------------------------------------------

We tested this in our LAB before applying to the live JSS. Casper Imaging is unable to connect OS X Server 10.7.5 (latest updates applied)JSS 8.62 I searched through Discussions and Knowledge Base...isn't there a fix for when Java update is applied and JSS stops working? I bounced Tomcat, then bounced the JSS box...same issue.... TIA external image link

We have a Smart Computer Group that contains computers we want to purge from JSS. For some reason we are getting the below error when we select Delete Computers. Is anyone seeing this? The admin has [x]Manage Smart Computer Groups and [x]Delete Inventory Items enabled for their account. I also tested with top level access to JSS, got the same error. [EDIT] We tested in both Safari and Firefox, got the same error...we also restarted Tomcat just in case it might be causing the problem. No luck. Thoughts? Ideas? TIADon external image link

I have a 10.8 netboot image that is used just to boot to the casper tools for imaging. In the beginning I had an issue where I'd receive the error above, so i referenced this article https://jamfnation.jamfsoftware.com/article.html?id=198 and made the netboot image larger. Problem solved. Then today I receive a few new macbook pros to image, and the problem is back. The system seems to recognize it has the appropriate space. And I've checked the virtual memory files to ensure there isn't anything hogging disk space. Any tips are greatly appreciated. Best

Hi All, Have any of you been successful in Casper 8.62 creating and using configuration profiles in the JSS to manage Docks Applications and Dock Items for OS X 10.8 computers? I go to Management -> Configuration Profiles -> Add Profile -> Create a Configuration Profile -> Dock -> Configure. When I click on the "+" sign under Dock Applications, the drop-down menu is blank. How do you populate this list? I tried going into Casper Admin and adding Dock items there but that doesn't seem to populate this list. Checked various browsers too…tried Firefox, Safari, and Chrome....tried on other computers too (various Macs and a Windows station too). Any ideas? Anyone else having this problem?~Joe