Hi guys, I'll shortly be rolling out Lion. I'd like to be able to start Enrolling into Profile Manager as part of imaging workflow. This is so our 802.1x settings get pushed via profile & so we can remote wipe (added bonus). It's not an end user option, so I was thinking of having all enroll under one account... Anyone done the same?

We're using JSS to manage our iPads and have installed multiple apps (free and paid/vpp) without issue. Today, we've added a new paid app called 270toWin (using VPP) and are trying to have users install it. When they go to the Self Service app and select the app to install/redeem, the screen indicates loading then prompts an undocumented error: Cannot Open Self ServiceThe error was: "The URL can't be shown".[Close][Retry] Closing exits self-service and retry just reprompts the error. Has anyone troubleshooted through this issue or know what is going on? Thanks in advance.

Hi guys, I'm trying to use the Unlock Region Code Resource Kit Script on a 10.6 mac, & it doesn't seem to unlock the region code setting. The Mac is running 10.6.8. Can someone confirm please that this script still works or not. Thanks!

In Composers 8.3 and earlier, you could make a package simply by dragging files from finder into Composer. In version 8.4, I haven't figured out how to do this. Can anyone enlighten me?

All- Sometimes an opportunity stares you in the face and you've got no choice but to snatch it and run. I'll be doing just that shortly. My last day at MIT will be 15 February, just over a week from now. On the upside, there's a very good chance that I'll be returning to the Casper fold. I'm moving on to Fidelity Investments where they have folks who are eager to use MacBook Airs, iPhones and iPads to get their jobs done. I'll be responsible for crafting their entire Apple strategy from genesis as their Principal Mac OS & iOS Engineer. I just wanted to say what a pleasure it's been to work with you fellow Casper admins. This is a bunch of folks that want nothing more than success for our chosen platform and as such help everyone out selflessly. It's something I'm proud to have been a part of. It's an exciting opportunity and hopefully I'll see you on the other side. j

I'm having an issue when adding new laptops to the JSS. After imaging, Recon updates the inventory, but the entries keep overwriting others. I started with a 15" MBP that I initially added to the JSS. I imaged a 13" MBP and it took the place of the 15's entry. I imaged another 13" and it took the place of the previous 13". To make matters worse, I imaged 4 Mac Pro workstations and they all created their own entry and worked normally. Any ideas? EDIT: Currently running 8.4, laptops are on 10.6.8. -Randall

Hello, We're close to rolling out our first 10.7 machines and I'm curious to knowhow people are handling users adding printers in 10.7 We don't use printservers and only have some printers deployed through Casper. Our usersare not admins on their machines so when they try to add their HP printer,it will prompt for an admin to run software updates and install thedriver. This will generally result in a call to our help desk, and with15,000 machines and 2 help desk people... it would be nice to avoid this. This hadn't been a big problem for us in earlier OS's because they camewith pre-installed drivers for most models of printers that we have. Anybody now of bulk driver packages that we can build into the image totry and avoid calls? Thanks, Andrew StenehjemSystems Administrator | Mac Client ArchitectInformation and Technology DepartmentBeaverton School District

Hi all, Anyone experience or know why when I try to push something with Casper Remote 8.4 it just takes forever? If I do as a policy from the JSS, whatever I install is done in record time. My JSS is 8.4 on server 10.6.8. Clients some 10.6.8, some 10.7.3. All client jamf binaries are at 8.4

Greetings fellow JAMFers, I am a fairly new Mac/JAMF admin, coming from the Windows world. I am trying to get a handle on doing scripting for these systems. I have tried to upload a simple script from our JSS Casper Admin, but it is coming up as a red script with the type "missing." Question is- What is the simplest way of creating .sh scripts so I can upload them and deploy them to my users. Sorry for such a simple question, but as they say, the only dumb question is the one not asked. Thank youRobert Bingham.

Hi I want to create a smart group for Laptops and Desktops These are the options listed 13-inch MacBook Pro (Early 2011) 13-inch MacBook Pro (Mid 2009) 13-inch MacBook Pro (Mid 2010) 15-inch MacBook Pro (Early 2011) 15-inch MacBook Pro (Mid 2009) 15-inch MacBook Pro (Mid 2010) 17-inch MacBook Pro (Early 2011) iMac Intel (Early 2008) iMac Intel (Late 2006) iMac Intel (Mid 2011) MacBook Pro (15-inch Core 2 Duo) MacBook Pro (Early 2008) MacBook Pro (Mid 2009) MacBook Pro (Mid/Late 2007) MacBookAir4,2 MacPro MacPro (Early 2008) MacPro (Early 2009) MacPro (Mid 2010) Power Macintosh G5 (Late 2005) How do I assign all the MacPros to one smart group and all the MacBook Airs/Pros to another smart group can I use the following condition? MacBook Pro (15-inch Core 2 Duo),MacBook Pro (Early 2008) etc Thanks

So I noticed today that if a user switches his/her Ethernet cable from Port1 to Port2 on their Mac Pro, the computer shows up in JSS. Is the MAC Address the only criteria used by JSS to vet out duplicates? Is there a way for JSS to know, perhaps based on serial number, that a computer is already in JSS? What about laptops that switch between Ethernet and Wifi...(we don't have many)...do they run the risk of showing up twice in JSS too? Don

We are experiencing a plague of the dreaded Spinning Beach Ball of Death in Outlook 2011.We have about 600 10.6.8 Macs running Outlook 2011. They all use AD logins. The Outlook SBBoD started for us back in October with the Apple Security Update 2011-006 (Snow Leopard).One thing that does seem to help is to reinstall the Apple 10.6.8 combo updater. This effectively backs you out of the Security Update 2011-006. But of course you are missing the added security at that point. 10.7.2 does not have this issue. Is anyone else experiencing problems with Outlook since 2011-006? Our servers are running Exchange 2007 SP3 RU5.Outlook 2011 is 14.1.3 and 14.1.4 -- Eric BenferITSD – Macintosh Services ManagerJohns Hopkins University Applied Physics Laboratory11100 Johns Hopkins RdLaurel, MD 20723eric.benfer@jhuapl.edu443-778-4248 MD • 240-228-4248 DC443-463-1664 Mobile

Hi folks, I've emailed support, but always good to ask here too. Casper Admin has been working without issue, today it chucked up the error that the share was read only. Nothing has changed on the share. I did the option click on the Casper Admin, re-entered the URL. This now returns a connection error to the URL and error code 7. I have a working connection via my browser to the JSS

I have a computer that i just imaged, and i cannot find it in casper remote, need to add a printer to it, when i search in remote i get 0 of 262 computers found, when i search the jss in web browser i see 263 computers, and find the computer there.i have deleted the computer from jss, recon'd the machine again it shows up in jss but not in remote, restarted the mysql and tomcat processes nothing seems to help any ideas?

Woah, just noticed, and validated on 10.5 and 10.6 Macs. When a policy uses AFP to push a PKG, the share gets visbly mounted. Is this a bug in 8.4? Do I get a t-shirt? Thanks,Don external image link

EDIT: Extension Attributes are working (sorry can't edit title) just the following script is not giving me a result. Running this script via jss #!/bin/sh userList=$(/usr/bin/dscl . list /Users UniqueID | /usr/bin/awk '$2 > 500 { print $1 }') # now loop through results and test for membership of the admin group for u in ${userList} ; do if [[ `/usr/bin/dscl . read /Groups/admin GroupMembership | /usr/bin/grep -c ${u}` == 1 ]] then /bin/echo "<results>${u}</results>" #else /bin/echo "${u} is not an admin.." fi done but I am not getting the result that I want... Nothing is showing up... Looks like this Comic Life Version: 1.5.5 (v19107)File Sharing: OffFirefox Version: 9.0.1Flash Version: 11.1.102.55Last User: robList of Admins: As you can see List of Admins: is blank.. I take that same script and run it in terminal and I get the following result. <results>rob</results> Can anyon

I can't seem to find a way to include our Wi-Fi details in our image. I've tried creating a script that adds the SSID and WPA2 password during the imaging process and running that during imaging but it fails. The same script works from the command line, but not during the imaging. It's the script from the JAMF resource kit. Any light someone could shed on the matter would be great. The command the script executes is /usr/sbin/networksetup -addpreferredwirelessnetworkatindex en0 "ourSSID" 0 wpa2 "wifipassword" The error message that is returned is "en0 is not a Wi-Fi interface." Am I going about the wrong way to include the WiFi information at imaging time? Thanks

We had a valid certificate in place when JSS was at 7.1, and when we moved to 7.31 we made sure the certificate continued to work. Today we noticed that roughly 200 of the 1800 Macs in JSS are checking in...and the remaining 1600 Macs show Last Time of over 30 days. Is there a way to validate the certificate is working properly? What could have hosed it? Thanks,Don

I am running the following command on the mac and I want to create a policy that would only run if the computer is plugged in pmset -g ps | awk 'NR>1{exit};1' This gives me the current power status and only the 1st line (don't want the battery info and percent) Example I get this Currently drawing from 'AC Power' or Currently drawing from 'Battery Power' What I want is just the words AC Power or Battery Power and then do an if statement if Battery Power exit if AC Power run update! Can you guys give me a hand, my grep and awk skills suck, Thanks guys

We are using Casper 8.4. Using the built-in certificates and following the 8.4 Documentation, we have installed Apple Push Notifications on Casper. We have successfully enrolled a couple IOS devices (ipod touch and ipad) using the enrollment URL.However, we have noticed the Self Service Web clip does not seem to download to the device once it is enrolled. I think although Casper shows these devices enrolled, the key problem could be that communication of the device does not seem to be communicating with our Casper server. We have tried to request an updated inventory of our IOS devices, but nothing happens. Does anyone have any idea what the problem could be? Or could someone point us in the right direction please? Thanks,Peter

Hello JAMF Nation, I'm working on a new system image deployed by Casper . . . End user's will all be logging in using their Active Directory accounts.One of the last tasks I have is to set a customized dock for all users when they log in. I've explored using dockutil (https://github.com/kcrawford/dockutil) for doing the actual modifications, which works great. the problem I'm having is how to trigger the dockutil policy so that each user gets the custom dock the first time the log into a given machine- i.e. if I've logged into mac123 before, the policy does not run, but if i've never logged into mac123 before, it does.I'm trying to solve it this way since modifying the user template doesn't seem to work for AD account docks.Any tips?

:| thanks

So in the interest of buttoning a few things up over here I got the LDAP lookups setup with our CA cert so that it is done over SSL. I also got a public wildcard cert installed and setup in Tomcat so I can now goto: https://host.glenbrook225.org:8443 and get no cert errors and passwords are no longer sent in the clear. :) Now I want to redirect everything so you have to login over SSL. Basically I want an Apache/Server Admin "RedirectMatch / https://host.glenbrook225.org" to the site running on the secure port so that you are always forced to login over SSL etc. At present visiting https://i.p.ad.dy:8443 results in a cert error as does https://host:8443. And despite the fact that this entry <Connector executor="tomcatThreadPool" port="9006" protocol="HTTP/1.1" connectionTimeout="20000" maxPostSize="8388608" redirectPort="8443" /> Already exists in /Library/JSS/Tomcat/conf/server.xml it d

I've created a *.mv4 file by combining to LOTR DVDs into one movie for iTunes/Apple TV2 and the resulting file is 4.3GB. I used HandBrake to encode the file (and had 'Large File Size' option checked). The resulting file plays fine with VLC and/or QuickTime, but when I try to add it to my iTunes library on MacBook Pro, I drag (or File Add) it to iTunes and 'nothing' happens. No failure dialog, no prompt...nothing. iTunes just ignores it. If I try to add the same file to iTunes installed on a test Windows 7 machine, it adds and plays fine in iTunes there. Any idea on how to make iTunes on my MacBook Pro (my proper iTunes library) accept this file?

Hi I wondered if there was an easy way of adding existing computers to departments or groups easily? For Example We have 30-40 machines in our Sydney Office 250 in our London Office 40 in Hong Kong office Is there a way that (perhaps using the quickadd package) will allow me to assign all machines in specific offices to the relevant group in the JSS?