I just fresh install Casper Suite 8.52 and testing enroll iOS device to inventory.On my iPad first enroll step "Install Root Certificate" is ok but it will show error whengo to next step install "MDM Profile"Our iPad wil show "https://mac.server.com:8443//enroll/SCEPProfile?invitation=26434324345454543" is invalid. Is any people have same issue too?

I'm testing creating images with instadmg. I placed the image in Casper Admin - without having created an admin account in instadmg. I set my configuration with Ensure computers are managed, username and password set for the admin account. After imaging the machine, I can't log in as the admin. I can log in with my ad credentials, and my managed, mobile account is created. Looking at Users and Groups, I see the admin account and my managed, mobile account. The issue is that the password doesn't work. Anyone else seeing this problem? Do I need to create the admin account in instadmg? (I also saw this issue with taking installing the esd.dmg and not setting it up. Setting up a system and then using composer works... I just wanted to move the the 'clean' image. (for systems that are reimaged - will be using the thin image concept for new hardware) Oh- running JSS 8.43

Is it possible to use a profile to add a wireless network to a system at time of imaging? Double clicking it works fine, but I require no user interaction. thanks.

Has anyone sucessfully migrated using Open Directory on 10.5 to active directory? Any help would be very much appreciated.

Is it possible to delete a compiled configuration? I have one left over form last year (I've not re-compiled yet) and when I replicate its slowing the process down. I feel it must be in the manual someplace dammed if I can find it....

Is there a command or tool we can use to create a password hash so it can be used in a script for JSS? In the "old days" (pre 8.4) when Recon used to spit out QuickAdd installers with postflight scripts that included hashed passwords, we were a couple'a clicks away from hashing passwords. But now that QuickAdd "enrolls" computers, we lost that nugget. So what's the best way to turn a password into a hash? Is there a command line trick? Or is there a GUI doohicky that can do the trick? I guess I'm not a hash guru (never touched the stuff myself although my buddies did when I was stationed in Turkey...but I digress...), figured I'd check in with the group. Thanks,Don

It seems that i can use Casper Imaging to deploy an image if i create one. Has anyone done this yet? Any problems etc. Also does the recon.exe go on the Bootcamp image somewhere and will I still be able to get an audit on the Mac when its booted into bootcamp all the time?

Hi all, I am looking for some assistance in setting up a local password policy for my Macs that are not bound to AD. Right now, they all have a generic password set, but due to increased security standards, we need them all to require a password to unlock the screensaver (which is now set to kick on after 15 minutes). Is there a way to force a user to change that generic local password? And if there is, can we force it to match our AD password policy (8 char, 1 upper, 1 #, etc)? I see the OS - Local Password Policy in the extension attributes, but can't decipher how to make that work on my machines. Any help would be greatly appreciated. Thanks.Lindsay

How can I get Lion to set the Airport SSID and password in the imaging workflow? I have used the command.../usr/sbin/networksetup -addpreferredwirelessnetworkatindex en0 "SSID" 0 wpa2 "password" This works great on the Macbook Air I am imaging, but I can't seem to get it in the imaging workflow. I always have to manually run this script after it reboots from being imaged.

I'm in what appears to be a reboot loop. Imaged with the 10.7.4 ESD, and the Apple Software update add-ons, then a 3rd party disk encryption app and an 3rd party AD plugin (which should and does bind on first boot). The machine has a post boot install and it seems like the postboot.sh scripts in /Library/Application Support/JAMF/PostBoot/ aren't getting removed. As a result I see the same things over and over and over. On the next login, I see the JAMF banner 'The imaging process is finishing installing software' I can see the line to remove the postboot.sh, launchdeamon and script itself in the script yet the files remain after the restart, triggering a loop. Am I mis-using the 'this app must be installed to the boot volume at imaging time'? I'd assumed that this was to be used for Apps that weren't 'imaging friendly'.

I noticed a few of my custom trigger policies during firstboot are executing, but the log is not being sent to my JSS. When adding the -verbose flag I will get "Log was not written in the JSS. Will store locally." Any ideas why this is happening? I'm running 8.43. ThanksAllen

If you create a new OS config, and use the Install OS X 10.7 ESD as your base, when installed onto reformatted 10.6.8 machine---would it create the recovery partition if it didn't already exist?

All: I am trying to come up with a way to pull an image using Casper Imaging while netbooted. Obviously there is no prebuilt script/task for this, but I didn't want to spend a bunch of time reinventing the wheel if someone else has already figured this out. So, has anyone managed to script an image pull job in Casper Imaging? Thx! -Andy

Greetings! I'm attempting to query AD for specific attributes of a user, then assign those values to a computer's inventory record. Under 'location' there are 5 different fields available, (I'm omitting Building and Department, since they have to be setup manually in the JSS), and I have mapped them to the appropriate attributes w/in AD. Does anyone know of a way to pull back even more info? Could you possibly leverage an Extension Attribute (maybe through a script that would query AD) to return values? For instance I have an attribute in AD that would allow me to easily assign the user's Manager to their inventory record. Or another that would allow me to know when their password is going to expire. These are just a few examples off the top of my head. Thanks!Bill

Hi All,I have been testing out the Configuration Profiles for 10.7 (JSS 8.4) I swear at one point a new profile category magically appeared in the left column called "Mobility" but then it vanished.I'm not sure what I did that triggered it's arrival or subsequent disappearance, but I need it to come back!I am taking a look at the 8.4.3 update, nothing in the notes specific to this but may install it tomorrow, doing a backup now. Anybody who could look here: Management>Configuration Profiles> Add Profile>Create a Configuration Profile> Do you see "Mobility" in the left Column? Not yet able to get AD/Mobile Account Creation to work in 10.7.2 or 10.7.3 using a manual or Casper bind on an AIR... Sandy

http://blogs.adobe.com/oobe/2012/05/jamf-composer-2007-2012-r-i-p.html Remind me to spike Jody's beverage at the next JAMF meeting...LOL

Hi everyone. I have Terminal set up as restricted software and JSS is doing a great job killing the process like I want; however, I've added both the short name and long name of a local account to the Exempt Users for this software, and it continues to kill the process when that user is running Terminal. I've rebooted the client machine a few times after making the change and still no dice. Help! :)

I'm trying to set up a test server to validate migration from our out-of-warranty XServes to Linux. I get everything set up & running on Centos just fine (a Red Hat variant that we use internally), except that when I import my database backup then Inventory searches are broken, much the same as they were apparently in 8.51... On the Inventory tab, plain text and blank searches return no results. However, Advanced Searches work normally - a search for OS is like 10.6 returns virtually all our machines, so I know the data is in there. Searches on other tabs appear to work normally - applications, fonts, peripherals all return valid results. Warning - tl;dr ahead... First pass all went well, aside from the few little hoops to jump through to get Linux set up properly. Got everything up fine, running 8.52. Used Database Utility jar file to import a current backup to have some data to work with. This is when I found the search issue, and contacted JAMF Support. JAMF Support su

I'm attempting to do some tests on our development network. After building systems, I can't bind them to the development domain. The error received is "Unable to add server. The plug-in encountered an error processing the request (10001)" I'm stumped - feel I'm missing something small as I've bound other systems in the past to the dev domain. Process:Install a clean version of 10.7.3 and 10.7.4 Add the dev domain information to System Preferences/Network/Advanced/DNSAdd the dev DNS servers: Add the dev Search Domains: Date and Time Synch time to our time serverTurn off IP V6 by open terminal and sudo then run: networksetup -setv6off EthernetRestart the system Should be able to bind to the dev domain... but nooooo! Still get the same error as before: "Unable to add server. The plug-in encountered an error processing the request (10001)"

Why not 1? Just curious.

Hi guys I know I'm late with this and we are currently on cs5 and cs6 is out, but I tried this the first time just to get an idea of the current imaging and deployment issues with cs5.5 so that I could get an idea if Adobe are making improvements in future compatible AAMEE releases. I followed the JAMF white paper for deploying CS5.5 to copy it at imaging time selected. Unfortunately it fails and in the logs it just says encountered an error contact the manufacturer...lol tried that before with Adobe and didn't get far... I then tried pushing out the Adobe CS5.5.pkg out to my test machine via ARD and it failed if I was logged in to that machine. But then I tried with no one logged in and it worked. I don't think there is anything wrong with my method I am very particular and funny about RTFM. I have thought about Composer snapshot but I don't really want to go down that road again especially with something so complex as this and is prone to errors. I have also

All: I am running a script via a policy that creates a file on the filesystem and then reboots the computer into netboot. This works fine. The problem is that the policy is not marked as complete in the policy logs, so the job runs again when the computer is booted. Is there an easy way to tell the JSS that the script has run, so that it doesn't run again? Maybe via the jamf binary? I know about the <result> stuff for extension attributes, but I am not clear on the mechanism that the JSS uses to determine whether a policy has run. Any advice appreciated! --Andy

If you're behind a proxy, you will likely need to configure it in order for the SUS portion of the appliance to work properly. The NetBoot/SUS appliance uses Reposado for the SUS service, which can be configured for proxy support. Log into your NetBoot/SUS appliance with the "shelluser" account. cd to /var/lib/reposado use an editor like vi or nano to edit preferences.plist with sudo rights Refer to https://github.com/wdas/reposado/blob/master/docs/reposado_preferences.txt and look in the Optional Keys section and find that there is a key called AdditionalCurlOptions where proxy information can be added. For example, you would add <key>AdditionalCurlOptions</key> <array> <string>proxy = "web-proxy.yourcompany.com:8080"</string> </array> to the preferences.plist file. This example adds proxy information when the proxy does not need authentication. If you have an authenticated proxy, refer to curl documentation to find th

Hi guys I like to carry out version control in Composers source pane. For example if i drag Composer in the Source i will rename it immediately to some thing like Composer_8.52_v1.0 Unfortunately if you do this and build the pkg, it will fail silently. I have a preinstall bashcript to simply delete the previous version eg rm -rf /Applications/Composer.app What actually happens is that preinstall (or preflight) script runs, but the new item doesn't get installed at all. The current work around is to not rename the source item within Composer and instead rename it after you have built the pkg like Get Info and changing the name there. Hope this helps people out. This has been driving me nuts for about 4 hours!

I have successfully restored the Lion Recovery HD to an additional partition with Casper Imaging, and I can boot from it, but it's no longer hidden like an out-of-the-box OS X Lion instance. Is there an obvious way to hide it?