Looking at this -- http://arstechnica.com/security/2012/08/critical-java-exploit-spreads/ -- and wondering if anyone out there is crafting policies to disable Java in the various browsers of choice. We're thinking about it. Thought I'd see if anyone else is doing anything before we start getting serious about it.

Hi everyone, I'm new to the world of Casper and have setup a trial of 8.6 while I wait for the product to be purchased at work. I've setup policies and smart-groups and have linked the LDAP Server Connections to our internal AD server which works fine for delegating permissions to who has access to the web portal of Casper. Question is how do I go about setting up a package to deploy to a end user based on the computer object being part of a AD group? All Mac's are bound to AD and i'd like to replicate the way we deploy packages on windows with Casper for Mac users. The idea behind this is that our service desk reps only need to add computer objects to defined security groups in AD for the application to be deployed. This is how it's currently setup for our windows users and it works well. The Self Service portal will be expanded in future but for now we are only going to host printers and possibly some freeware apps while we manage package deployment for l

Hi Everyone how do i use JSS to put the app file on all user desktop. Need instruction in detail cause i am a beginner.thanks in advance

Hi all, I am looking to set up an Inventory Search to identify system running our Windows Image for I can set up a smart group of those particular systems, I am thinking I will need an Extension Attribute - has anyone done something similar to this before? Thanks Matt

Hi, I'm from Portland State University. When I re-image computer, their names are not set. ComputerNames are blank and HostNames become localhost. Can you tell me what did I do wrong?

Hi everyone When trying to make a shockwave package using composer v8.6 it's not overwriting the version thats already there. When I delete the file from Internet Plugins folder it installs fine. To make the package I have tried dragging the pkg into composer and also creating a normal snapshot. I'm fairly new to this and Mac admin in general is there something I’m overlooking? Thanks in advance.

We use AD to authenticate our users for login. The users should be made local admins during the account creation (when they 1st login to the Mac). In the district this works fine. When the user gets a admin prompt they can user their username. However, I'm hearing that when they go home, this isn't working. Does the Mac authenticate to AD each time?

I'm sifting through the NetBoot logs for clues, in the mean time one of our NetBoot servers is being moved to the server room so it's connecting directly to the switch (proper segment of course). Has anyone seen this strange "throbbing" (as it was described to me over the phone) icon, when holding OPTION key at reboot (since holding N does not work)? Once the NetBoot server is moved and I have access to the NetBoot logs, I'll have more info, sorry for posting early without the expected details... :) external image link

After distributing an iBook with VPP codes through Casper JSS to a set of iPads, how do you release a code for use on a different iPad? For a school, how do you release the codes at the end of the year for reuse the following year? Thanks for the help.

Hello Everyone! I am having a major issue when running my enrollment profile (from the JSS) inside configurator. The issue is that the devices (30 in a cart for this example) do not all have a WiFi IP address when it tries to apply the JSS enrollment profile. The issue is that when you reapply a supervision (IE changing apps or anything) in Congfigurator, it RE-installs all the profiles I have checked. When it reinstalls the WiFi profile, all the WiFi radio's drop the SSID, and then all at once they move to re-obtain an ip address, then because of having no inet connection the enroll profile fails. If a valid WiFi signal is NOT required for this to work correctly, please let me know. Currently my JSS Enroll profile contains a SCEP payload. Again if this is not required, any help would be great!

Anyone having a problem with Casper Admin 8.6 whereby after opening Casper Admin 8.6 and simply quitting it without any other action taken results in an extra "https://" being inserted into the url string in com.jamfsoftware.jss.plist?? I've submitted to support, but thought I'd chuck it out there.

I'm hoping this is an easy question and perhaps something I missed in the JAMF documentation. Is there a way to target extension attribute collections to specific workstations for testing purposes? Thanks!JS

Hi Folks, we have a problem with Casper Imaging NetBoot on a Lion-Machine. We configure a basic OS X Lion, using System Image Utility, choose this configured Lion as the Image-Source and adding the CasperImaging Workflow to the end. We can start from this Netboot-Image, but no Launchpad, no autostart of Casper Imaging. How do you solved it? Thanks,Holger

We have several Distribution Points. For some reason Casper Imaging is defaulting to the Master Distribution Point. In other words the Use Distribution Point popup menu shows the Master even though the Mac is on the same subnet as a different Distribution Point. I seem to remember Casper Imaging being intelligent enough to auto select the closest Distribution Point? We are still on Casper Suite 8.43 (let's not go there)...I checked JSS settings and I don't see an option to "Always point Casper Imaging to the wrong Distribution Point". [color=blue]<tongue-in-cheek>[/color] Is there a setting I'm missing? Do I need to feed Casper Imaing a café latté for it to wake up? TIA Don

Since it was brought up in another thread, and someone else mentioned they are seeing this on occasion, I though it best to start a thread for it. Since moving to a Windows based SMB distribution point, I am seeing the following error, specifically with a logout triggered policy: Error: Could not mount a distribution point The shares are fine in terms of permissions because they can image fine. These are AD bound Macs running 10.6.8. At login their AD SMB network share mounts, and we mount two additional SMB shares with policies. None of those shares point the same box as the distribution point. This one will drive me nuts if I don't get it sorted out.

I have a room full of Lion 10.7.4 machines. They were imaged and joined to 2008r2 AD a few months ago. I'm in the process of reimaging them, but they won't join the domain. All I get is the "Node name wasn't found. (2000)" error. This happens if I do it from terminal with jamf bind or if I do it through the the Login pane. I went back to a machine that was on the domain, and I unjoined it and tried to rejoin, and I got the same error. I've checked the date/time on everything. I've tried deleted the AD computer accounts, and I've tried prepopulating the AD computer accounts. It has randomly worked a few times, but I can't figure out the pattern. What else can I do?? School starts on Monday... --Daniel

When I image it seems as though only the computer name is getting set when I name a machine using the prompt in Casper Imaging. I'm not sure if this is the expected behavior - but -my- expected behavior (maybe a bit misguided) is that it would not only set the Computer Name, but the hostname and the local hostname to match. Am I way off here?

I've searched extensively but I can't find an answer. iLife was updated on our computers before I made the image and distributed it. When teachers attempt to update the iLife suite they can't because they don't own iLife. They can't take ownership of it because they don't in fact own it, the school district does. I tried updating it using the most recent package downloaded from Apple's site, but they won't permit it to install because it can "only update through the mac app store". Is there any way to update iLife without essentially giving the program to teachers? It would also be great to update it on student computers, which don't have app store access. Is there any way to create or get a package that will update it outside the app store?

Hello! Currently, we have a policy that is set to turn on Filevault with both individual & institutional keys. Unfortunately, Filevault will only work when used on a retina display Mac. When tested on a MBAir & a 13in Mac, it asked for password confirmation on restart, but did not turn on Filevault. Has anyone else run into this issue? The policy was created via the JSS. It is set to enable current or next user.

Is this possible using casper encryption configurations or do I have to script it using fdesetup? Cheers Matt

Hi everyone, I was wondering how Casper Administrators are packaging and deploying XCode 4.4.1 in a lab environment? I have some faculty who are interested in doing some app development with students this year, so the request has come down for XCode to be installed in one of our labs, so this is something new to deploy, and judging by posts regarding previous versions of XCode, it's not the most straightforward install. I've downloaded all of the Developer Tools from developer.apple.com, including the command line tools and the optional tool DMG's that used to be part of the install. Thanks in advance for any tips/tricks/gotchas I should be on the lookout for. ~Ted

Hi All, Does Casper have Altiris plugin for Inventory purpose?I have started to use JSS Report Downloader from Resources Kit. Thisenables me to do Scheduled Reports. Plan is send these reports to Altirisadmin to import in to Altiris, so Asset guys can pull down report fromsingle source (we heavily WinPC environment with 5% Mac..if you ask whyAltiris...). But I would like to know anyone out there mary 2 inventorytool's info? All the best Cem

MacBookPro9,1 has a different built. It comes with 10.7.3. AppStore 10.7.4 comes up with an error "This version of Mac OS X 10.7 cannot be installed on this computer." So I can 't create an instadmg image. So back to square one. I now have to recreate NetBoot (yes I have tried adding MacBookPro9,1 string on the Netboot plist - still no go) and create an another build... I have booted the laptop in target mode and captured the pristine (never booted) preinstalled OS with Composer and uploaded to Casper Admin. I now created another set just for these types. Its a pain! Anyone agree :)

Hi all, I got a new Lion 10.7.4 netboot image made and it books new MacBook Pro (not the retina type). Even boots an older MacBook Pro 15" (the removable battery with thumb releases ones). Casper Imaging 8.52 autolaunches and dials in to the jss as it should. Once I hit Image button, it runs down the list super fast and give me the error: "An exception of class NilObject Exception was not handled. The application must shut down."Casper Imaging quits then I see that all the folders at the root level of the netboot's disk seem to be deleted except for /Applications. At this point, nothing else works. TextEdit, Terminal, not even a Finder window will open. It is as if you ran sudo rm -Rf /If I try to shutdown or restart, it will hang forever (I guess looking for shutdown files?) However I can reboot into this netboot image and everything is still there. So it doesn't seem to affect the actual netboot .dmg but rather what it hashes into memory of the client? (

I had an experience today that didn't make a lot of logical sense to me, so I'm wondering if anyone here can explain why i'm getting these results. . . . I have a MBP retina that shipped with 10.7.4. I also have a bootable OS X installation on a USB stick with 10.7.3 installed on it. Today, i downloaded the latest 10.7.5 combo update from apple's dev site and installed that on my USB stick while booted on a 2011 MBP. After installing 10.7.5, that USB stick boots my MBP retina just fine, no issues. Based on that experience, I figured I could take my 10.7.3 installESD.dmg, compile it with the 10.7.5 combo update in Casper Admin, and be able to image the Retina with the resulting configuration. That was not the case. The machine does not boot- I just get the circle-with-slash after the image is applied. The recovery partition that was laid down on the SSD doesn't boot it either.Why does the USB stick boot the machine while the compiled image does not? Als