Hello All, Upon using a script to delete all non-admin users I am getting a very annoying keychain message. The script is: #!/bin/sh # Define current user current_user=`ls -l /dev/console | awk '{print $3}'` # Loop through users with homes in /Users; exclude any accounts you don't want removed (i.e. local admin and current user if policy runs while someone is logged in) for username in `ls /Users | grep -v aaalabs | grep -v $current_user` do echo "Removing user: $username" dscl . delete /Users/$username rm -rf /Users/$username done # Remove all sharepoint groups to speed up login. for group in `dscl . list /Groups | grep "com.apple.sharepoint"` do echo "Deleting group: $group" dscl . delete /Groups/$group done # Remove MCX files rm -rf "/Library/Managed Preferences" Upon logging in, I now receive the error message "The system was unable to unlock your Keychain". This message is simple enough to bypass with a c

I need to lock down Firefox so our users cannot change the proxy settings themselves. I see how in CCK I can set the proxy settings but this does not prevent users from opening Firefox preferences and changing the settings. How do I prevent users from changing Firefox preferences? - Jamie

Hello, I am bringing online a brand new JSS install(OS X server) on a site where it hasn't been in use. I installed the JSS and pointed it to the wrong URL. I specifically didn't add the s in https nor :8443 in the address when prompted. I've found that I can change the address under Settings->Global Management Framework Settings->JSS URL and changed it. Are there any concerns I should have about having put the incorrect URL in while initializing the software? Aside from my concerns regarding my ability to follow directions.... Thank you. I could blank the database and start over at this point. Should I though? Or am I just worrying about nothing? Thank you.

Anyone built a plain 10.7.5 NetBoot image and if so how big is it? Referring to a very plain image, OS install, fully patched, did not remove any applications, added Casper Imaging. When I built it the NetBoot.dmg file is 16.55GB. My previous 10.7.3 NetBoot.dmg file was 6.5GB. I can't for the life of me figure out where 10GB came from...

Software Update ran using Self Service points to our internal SUS and Ihave a notification email (as attached). I have checked the Mac with "lastreboot" command and it has been rebooted after the update.Have you seen this before? It is with repetition pattern of/SourceCache/AppleFSCompression/AppleFSCompression-24.4. Any ideas?Also I am keep getting repeated notifications! Cem

Hello, I'm looking to download the latest Safari update 6.0.2 for Lion. I'd like to include that package in my configurations so that a newly setup machine is current. For 6.0.1 I was able to locate the direct download by peeking in an InstaDMG catalog but i'm not having any luck with the latest version. thanks,greg

Any guinea pigs? :) http://support.apple.com/kb/DL1609

We moved our JSS to a VM last week (used to be on a Mac Mini) and now Casper Imaging / NetBoot crashes all the time. The JSS is working fine now in the VM environment, and the JSS does have the Mac Mini's address as a DP. Casper imaging is pointing to and connecting to the new VM IP address / DNS name. Client OS X machine can netboot, opens Casper Imaging at login, select image etc. Get to Performing Block Copy... crash, hang Thx John

Is there a way to ignore an update coming from Apple's SUS without running a local SUS? I have a group of machines that are trying to install an update every night. They say they are successful, but then they install the same update the next day.

I am attempting to deploy a clean 10.7.4 Base image with Casper Imaging 8.52. However it is not doing a block copy. The DMG was created with Casper Composer and the priority is set to 1 in Casper Admin. It is doing a file install and taking forever!Repository is an AFP share. I have NOT compiled the base configuration. I have not had to in the past. Do I need to do this now?Thanks!

I am trying to create an extension attribute that detects the presence of an installer package cached in the Waiting Room. I can run the script manually in terminal and get a true or false result. When I place the script in the extension attribute, I get no result returned. The script: if [ -e /Library/Application Support/JAMF/Waiting Room/*.pkg.cache.xml ] then echo "true" else echo "false"fi What am I doing wrong?

Hello. We currently do not require login credentials to self service. I believe this is causing the third variable to be empty when scripts are run through self service. Can anyone confirm that (I'm running 8.61). I have a simple script to echo back the $1, $2, $3 and the $3 comes back empty. The KB article (https://jamfnation.jamfsoftware.com/article.html?id=146) says the the third variable will be filled with the user logged into self service. Does that mean that if you don't require logging in to self service you can't use $3? Thanks. Chris PS -> The point of the original script was to remove the cached MCX files from the computer and local user, via dscl . -mcxdelete /Users/$3.

Hey all,Theres a command I am trying to use as a script but for some reason, it doesn't run. JSS shows the policy as successful. #!/bin/sh defaults write /Library/Preferences/com.apple.NetworkAuthorization UseShortName -bool YES We have tried running this script at logon and startup to no avail. Thanks in advance!

How can I poll for changes in inventory?

Hi Nation... i recently bought an app for iPad from VPP program. Download the .xls file... Upload it from casper with the creation of the APPS from the JSS... My screen flashes and nothing appears on the screen... no codes nothing... total, redeem and available stays at 0.... is there a reason why ?

This is a really infuriating issue. At work we're running a Casper Suite 8.62 system for OS X deployment. What we're finding is that the Casper imaging process is correctly naming the computers from the JSS, the computer retains it's name on first boot but loses it completely on 2nd boot. Now I thought i'd traced this issue to our DNS (because we have Novell DNS and we're migrating to Microsoft DNS servers) and I was able to stop the issue on the MS DNS servers ... on WiFi. Today we changed over a couple floors of our building to the new servers ... and nada, the macs are losing their names on 2nd boot. It's a pretty serious issue as it compromises our inventory on the JSS. We've a string of computers that either have randomly assigned existing names or have been given blank names. Now if you program the computer name on the mac manually at this point (as well as fix the inventory item on the JSS), the mac then seems to keep its name in perpetuity.

Is there a way ( via a policy or MCX ) to force the date and time to sync to time.apple.com for managed computers? I looked through the MCX templates and didn't see anything. Anyone try to do this before?

When you define an SUS in the JSS, it defaults to a generic catalog URL that does not resolve (http://su.example.com:8088/index.sucatalog). The actual catalog URL is something more like http://su.example.com:8088/index.sucatalog/content/catalogs/others/index-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog. This makes it not usable when setting the default SUS in "Override Default Policy Settings" in the General Policy settings because the URL set on clients is not resolvable. Is there a reason for this discrepancy, or am I doing something wrong? Instead of using the Override Default Policy Settings I am now using a separate script to se the catalog URL, which seems less elegant. Am I missing something obvious? HOw is the URL even found or defined?

So here is my situation... I have all 10.7.x systems, and I want to auto-mount a network share on login. Systems are NOT bound to any OD/AD account, and based on my highly distributed environment, won't be. I have a Lion server with OD running with some file shares. I need to have shares auto-mounted on all systems, with their individual OD credentials so access to various folders/files is restricted where necessary. So what is the best way to do this? My thought was to somehow add keychain entries for each user with their credentials. Since I only have about 25 users I need to do this for, I don't mind setting a policy for each one if necessary. My goal is that the end-user has as seamless an experience as possible. Then once the keychain entries were existing, mapping the network share would be easy (I think). So that's my thought, though I don't know if that is even possible. Any guidance or suggestions would be very much appreciated!

Has anyone figured out how to stop Adobe Extension Manager from opening at the end of an install for Adobe CS6 created with AAMEE? I've seen this problem mentioned in a couple of places but no solutions have been offered. I tried skipping the 6.0.4 update to Extension Manager, leaving it at 6.0.0.412. That fixed a bunch of errors that were appearing in Extension Manager, but I can't figure out how to stop it from launching altogether. It still opens to a EULA that needs to be accepted and then displays an error that says "The extension 'Adobe Flash Professional Toolkit for CreateJS' does not contain a valid signature. The extension will not be installed." -- Jorge

Hi All, I have just received the first 13" Retina MBP and it's another painful case of new OS build and no worky with my 10.7.5 NB servers /Base 10.7.5 OS. Can anyone confirm whether these new models (10,2) will only work with Mountain Lion? I haven't been able to find out otherwise. I went through the whole painful process of making separate NB and Base OS images when the first round of Retina Display's came out but here I'm thinking without some firmware/driver hacking these new ones will only run 10.8. Was delaying the inevitable to 10.8 as my company has policies not to upgrade for at least 6 months after a major release but the way Apple are moving toward yearly releases this will have to change. CheersT

Hello all, I've run into an issue with the NetBoot/SUS Appliance has halted all progress in evaluating the Casper Suite. When logged into the web page for appliance administration, I am unable to upload any NetBoot images. I've tested this on multiple browsers and client OS versions. The button simply doesn't respond. No prompts, no errors, no upload file dialog, nothing (In Safari). When I tried in Google Chrome, I at least got an error: external image link I got around that by simply mounting the smb share by guessing smb://hostaddress/NetBoot. Once I uploaded my .nbi to that directory, it showed properly in the NetBoot Appliance Administration page. I entered in the server's IP address for the subnet (not sure if that is the accurate information to place there) and I entered our mask. When I press the "Enable NetBoot" button, nothing happens in all browsers I attempt to enable in. external image link I've got no ideas left as to what to try n

I have "borrowed" my first script, thanks Rob, and started to learn how to do things the easy way. This script counts the number of cycles on the battery. My issue is that the script runs on MBPs that are on network segments pointing to a secondary server after syncing to the master:Downloading http://macserverwc02.school.org:80/CasperShare/Scripts//battery.cs...Running Script battery.cs...Script Exit Code:0Script Result: <result>31</result> but for machines on the segments pointing to the master the script is failing with: Downloading http://macserverwc01.school.org:80/CasperShare/Scripts//battery.cs...Error: The script could not be found on the server. What am I missing?

Ok where do I get the self service application? The documentation says link here for the self service.tar.gz file and there is not active link. Please bear with me as this may be a dumb question but I have been using Casper for a while but just now exploring the use of self service. Thanks in advance.

I am new to self service and experimenting with it. I cannot seem to figure out how to scope the delivery of the self service app to just certain machines in the JSS. Is there a way to do this? I can see how to scope the policies but I don't want all my machines to get the actual self service application. Thoughts?