So, I have two links that point to our local scholastic server for Educator Access and Student Access. I would like to have the dock icons/links available as a self service item. From my workstation, I had the two weblinks in my dock, and added them to casper admin as new dock items. In casper admin they show the path as file://localhost/Users/myname/desktop/scholastic.webloc/ and on top of that its NOT showing up in self service, I have it scoped to all computers and triggered by none or self service. Should casper reflect the path as my local machine, vs not having a path and just collecting the address of the actual web link? Maybe I just need to apply it as a policy, and not self service....Anyone added simple web links to the dock via self service?

Hey everyone. I just downloaded Lion from the App Store and extracted InstallESD as I always do. When I loaded it into Casper Admin it tells me it is not a valid installer. Has anyone ran into this with the current version of Lion or a previous version? Thanks!

I have a xserver that is running the JSS right now. At some point it became enrolled in our inventory but I no longer want it there and I don't want it managed. I know i could enter in the terminal command to remove the JAMF framework, but I just wanted to check to see if that would break something with this Server actually running the JSS. Any thoughts?

Hi All, I need to disable Safari's pop-up blocker. The older way of doing this does not seem to work on Safari 5.1.5 http://macmule.com/2010/09/25/disabling-safaris-pop-up-blocker-from-terminal/ the below works: defaults write com.apple.Safari com.apple.Safari.ContentPageGroupIdentifier.WebKit2JavaScriptCanOpenWindowsAutomatically -bool YES But when attempted via MCX nothing seems to be set.. any ideas? (mcx below). Display Name: Safari Disable Pop-Up Blocker Application Domain: com.apple.safari Key Name: com.apple.Safari.ContentPageGroupIdentifier.WebKit2JavaScriptCanOpenWindowsAutomatically Key Type: boolean Key Value: true

I've successfully packaged previous versions of Adobe Camera Raw without issue but every method I've tried with ACR 6.7 has failed. This install works between composer snapshots but once it is packaged and pushed out it fails to install. Casper logs are showing a successful install but the version of ACR on the client machines remains at 6.6. Does anyone have any tips or workflow ideas for this?

Folks, I was thinking that it might be interesting to try to assign admin rights to directory users via Self Service if the SSI item availability was controlled via an LDAP group. It would let us apply an external process to control a local provisioning of admin access. Assuming that the LDAP group was visible and I scoped the policy, that just leaves me with the small matter of adding the user to the group. Would I just be best off using the scripts for dsgroupedit? http://managingosx.wordpress.com/2010/01/14/add-a-user-to-the-admin-group-via-command-line-3-0/ and then simply set the script as a login script using the $3 variable for the user name? I guess where I'm confused is that I just want to be sure that I only enable as an admin the user that installed the self service admin item. I'd appreciate any and all feedback on this!

Getting this error on first login to fresh machine that has 10.7.4 and latest Java (2012-003) from Apple. We'd like to turn it back on for the users through a policy or (better) during the imaging process. Any ideas? external image link

I just fresh install Casper Suite 8.52 and testing enroll iOS device to inventory.On my iPad first enroll step "Install Root Certificate" is ok but it will show error whengo to next step install "MDM Profile"Our iPad wil show "https://mac.server.com:8443//enroll/SCEPProfile?invitation=26434324345454543" is invalid. Is any people have same issue too?

I'm testing creating images with instadmg. I placed the image in Casper Admin - without having created an admin account in instadmg. I set my configuration with Ensure computers are managed, username and password set for the admin account. After imaging the machine, I can't log in as the admin. I can log in with my ad credentials, and my managed, mobile account is created. Looking at Users and Groups, I see the admin account and my managed, mobile account. The issue is that the password doesn't work. Anyone else seeing this problem? Do I need to create the admin account in instadmg? (I also saw this issue with taking installing the esd.dmg and not setting it up. Setting up a system and then using composer works... I just wanted to move the the 'clean' image. (for systems that are reimaged - will be using the thin image concept for new hardware) Oh- running JSS 8.43

Is it possible to use a profile to add a wireless network to a system at time of imaging? Double clicking it works fine, but I require no user interaction. thanks.

Has anyone sucessfully migrated using Open Directory on 10.5 to active directory? Any help would be very much appreciated.

Is it possible to delete a compiled configuration? I have one left over form last year (I've not re-compiled yet) and when I replicate its slowing the process down. I feel it must be in the manual someplace dammed if I can find it....

Is there a command or tool we can use to create a password hash so it can be used in a script for JSS? In the "old days" (pre 8.4) when Recon used to spit out QuickAdd installers with postflight scripts that included hashed passwords, we were a couple'a clicks away from hashing passwords. But now that QuickAdd "enrolls" computers, we lost that nugget. So what's the best way to turn a password into a hash? Is there a command line trick? Or is there a GUI doohicky that can do the trick? I guess I'm not a hash guru (never touched the stuff myself although my buddies did when I was stationed in Turkey...but I digress...), figured I'd check in with the group. Thanks,Don

It seems that i can use Casper Imaging to deploy an image if i create one. Has anyone done this yet? Any problems etc. Also does the recon.exe go on the Bootcamp image somewhere and will I still be able to get an audit on the Mac when its booted into bootcamp all the time?

Hi all, I am looking for some assistance in setting up a local password policy for my Macs that are not bound to AD. Right now, they all have a generic password set, but due to increased security standards, we need them all to require a password to unlock the screensaver (which is now set to kick on after 15 minutes). Is there a way to force a user to change that generic local password? And if there is, can we force it to match our AD password policy (8 char, 1 upper, 1 #, etc)? I see the OS - Local Password Policy in the extension attributes, but can't decipher how to make that work on my machines. Any help would be greatly appreciated. Thanks.Lindsay

How can I get Lion to set the Airport SSID and password in the imaging workflow? I have used the command.../usr/sbin/networksetup -addpreferredwirelessnetworkatindex en0 "SSID" 0 wpa2 "password" This works great on the Macbook Air I am imaging, but I can't seem to get it in the imaging workflow. I always have to manually run this script after it reboots from being imaged.

I'm in what appears to be a reboot loop. Imaged with the 10.7.4 ESD, and the Apple Software update add-ons, then a 3rd party disk encryption app and an 3rd party AD plugin (which should and does bind on first boot). The machine has a post boot install and it seems like the postboot.sh scripts in /Library/Application Support/JAMF/PostBoot/ aren't getting removed. As a result I see the same things over and over and over. On the next login, I see the JAMF banner 'The imaging process is finishing installing software' I can see the line to remove the postboot.sh, launchdeamon and script itself in the script yet the files remain after the restart, triggering a loop. Am I mis-using the 'this app must be installed to the boot volume at imaging time'? I'd assumed that this was to be used for Apps that weren't 'imaging friendly'.

I noticed a few of my custom trigger policies during firstboot are executing, but the log is not being sent to my JSS. When adding the -verbose flag I will get "Log was not written in the JSS. Will store locally." Any ideas why this is happening? I'm running 8.43. ThanksAllen

If you create a new OS config, and use the Install OS X 10.7 ESD as your base, when installed onto reformatted 10.6.8 machine---would it create the recovery partition if it didn't already exist?

All: I am trying to come up with a way to pull an image using Casper Imaging while netbooted. Obviously there is no prebuilt script/task for this, but I didn't want to spend a bunch of time reinventing the wheel if someone else has already figured this out. So, has anyone managed to script an image pull job in Casper Imaging? Thx! -Andy

Greetings! I'm attempting to query AD for specific attributes of a user, then assign those values to a computer's inventory record. Under 'location' there are 5 different fields available, (I'm omitting Building and Department, since they have to be setup manually in the JSS), and I have mapped them to the appropriate attributes w/in AD. Does anyone know of a way to pull back even more info? Could you possibly leverage an Extension Attribute (maybe through a script that would query AD) to return values? For instance I have an attribute in AD that would allow me to easily assign the user's Manager to their inventory record. Or another that would allow me to know when their password is going to expire. These are just a few examples off the top of my head. Thanks!Bill

Hi All,I have been testing out the Configuration Profiles for 10.7 (JSS 8.4) I swear at one point a new profile category magically appeared in the left column called "Mobility" but then it vanished.I'm not sure what I did that triggered it's arrival or subsequent disappearance, but I need it to come back!I am taking a look at the 8.4.3 update, nothing in the notes specific to this but may install it tomorrow, doing a backup now. Anybody who could look here: Management>Configuration Profiles> Add Profile>Create a Configuration Profile> Do you see "Mobility" in the left Column? Not yet able to get AD/Mobile Account Creation to work in 10.7.2 or 10.7.3 using a manual or Casper bind on an AIR... Sandy

http://blogs.adobe.com/oobe/2012/05/jamf-composer-2007-2012-r-i-p.html Remind me to spike Jody's beverage at the next JAMF meeting...LOL

Hi everyone. I have Terminal set up as restricted software and JSS is doing a great job killing the process like I want; however, I've added both the short name and long name of a local account to the Exempt Users for this software, and it continues to kill the process when that user is running Terminal. I've rebooted the client machine a few times after making the change and still no dice. Help! :)

I'm trying to set up a test server to validate migration from our out-of-warranty XServes to Linux. I get everything set up & running on Centos just fine (a Red Hat variant that we use internally), except that when I import my database backup then Inventory searches are broken, much the same as they were apparently in 8.51... On the Inventory tab, plain text and blank searches return no results. However, Advanced Searches work normally - a search for OS is like 10.6 returns virtually all our machines, so I know the data is in there. Searches on other tabs appear to work normally - applications, fonts, peripherals all return valid results. Warning - tl;dr ahead... First pass all went well, aside from the few little hoops to jump through to get Linux set up properly. Got everything up fine, running 8.52. Used Database Utility jar file to import a current backup to have some data to work with. This is when I found the search issue, and contacted JAMF Support. JAMF Support su