I'm trying to install the print driver for the Xerox 550-560 with Integrated Fiery onto Sierra boxes via Self Service. Logs for the failed policy: [STEP 1 of 5] Executing Policy Xerox 550-560 - Install [STEP 2 of 5] Mounting Distribution Point Verifying package integrity... Copying Fiery Printer Driver.pkg... Installing Fiery Printer Driver.pkg... Installation failed. The installer reported: installer: Package name is Fiery Printer Driver<br/>installer: Certificate used to sign package is not trusted. Use -allowUntrusted to override. [STEP 3 of 5] Mapping Printer Xerox 550-560 Integrated Fiery... [STEP 4 of 5] [STEP 5 of 5] Unmounting file server... I went to the download page to see if there is an updated driver for Sierra. There is not an updated one available for Sierra. So I downloaded the El Capitan driver and tried to install it, only to be presented with a certificate error stating that the certificate was expired. I trusted the cert and the driver installed properl

Hi all, at my client we have a zoo of MacPro's Ethernet , MacBooks with Thunderbolt-Ethernet and Thunderbolt-Displays. While we're upgrading the Macs to latest Yosemite (ElCapitan is not an option because of the productive environment), clients often "forget" the Network-Settings (DNS-Servers and Proxy). Normally, we have three locations: Client_Net:Only Ethernet, Thunderbolt-Ethernet or Display-Ethernet enabledSpecial DNS and Proxy Client_WIFI:Only WIFI enabledSpecial DNS and Proxy WIFI-FreeAny Adapter can be active and can be used (WIFI, Thunderbolt-Ethernet,...)No special settings. My question: How to put it with "networksetup" into a script that these networksettings/locations are with a firstboot-script are enabled again? Thank you!Holger

Dear all, After installing 9.99 jss update, the web home page of jss show up for few seconds and then it comes back to the login window. I reinstalled the JCE file but nothing changed. Have you encountered that before?

When it comes to scripting I'd say I'm mediocre compared to most folks so I need some help really nailing down a DO loop which I don't really use very often. Purpose of the script: We use ARD to remote into machines so we populate ARD Field #1 on our machines to with the asset tag number that applies to the machine; found on a sticker on the bottom of the laptop. We're looking at moving over to DEP and I'll need a way for the user to enter the asset tag number for us since we, as techs, are no longer doing since we're not building the machine any longer. I'd like for the script to basically not exit until the user has entered an integer into Cocoa Dialog field that is appearing on screen. It's mostly working but it's definitely not pretty and the pop-ups are not appearing in the order I'd like every single time. #!/bin/bash ## Global Variables CD="/Applications/Utilities/CocoaDialog.app/Contents/MacOS/CocoaDialog" jamfHelper='/Library/Application Support/JAMF/bin/jamfHelper.app

Let me preface this as I realize that these are separate services and the pro's and con's of each. We have been looking at setting up one of the services but are more leaning towards a SUS as we need to control distribution of software OS software updates per our security group. That being said a caching server would be beneficial for us regarding non OS updates from the App Store as well as eBooks. I am planning on testing to see if I set the software update distribution server on our clients if it will overwrite just the software updates that the SUS delivers or just all of the caching sever in general. I figure I would ask here to see if anyone had tried and what your results were. I have looked at these 2 Apple articles but they are not 100% clear on this either. About Caching Service, Content types support by caching service in OS X server We also queried with Jamf and they also are not 100% sure either. I may be crazy for even wanting to do this but it is a thought and figured

I'm failing in my attempt to create a .webloc file on all users desktop that the students cannot delete. I've create a DMG in composer with the .webloc file and the permissions set to 444. I deploy the DMG through Casper with FUT and FEU (either as a policy or with Casper Remote) and the file is placed correctly in the existing users Desktops and in the User Template folder. I check the permissions of the file on a non-Admin users desktop and it shows "-r--r--r--@ 1 john.doe wheel". I login as the non-Admin user and I am able to delete the file from my desktop. What am I missing? I'm thinking it has to do with the extended attributes denoted by the @ at the end of the permissions, but I'm not exactly sure where to go from there.

Hi Guys, Has any one seen this? We don't enroll many macs using the recon app so have not noticed this until now. When trying to do a remote enrollment with recon we get the following error. However i can scp over a quick add package and install it via ssh just fine.

Hey all, I'm researching this, but in the interest of not reinventing the wheel, I thought I'd ask the nation... The Xprotect Status extension attribute posted here returns the following on 10.11.3: The domain/default pair of (/System/Library/CoreServices/CoreTypes.bundle/Contents/Resources/XProtect.meta, LastModification) does not exist I've looked through the file referenced and there's no instance of a date or the words "modified," "modification," change," or "update" in the XML. Does anyone know where to look for the last Xprotect update?

Hey everyone, I am pretty new to Casper and the community and thought why not break the ice by asking a general question. What is the advantage of using Casper Suite over SCCM? Our company currently uses SCCM to manage our Windows users and they are stating that it can do everything Casper can do for Mac as well. I did some research and came across http://blogs.technet.com/b/pauljones/archive/2013/06/02/managing-mac-os-x-with-system-center-2012-configuration-manager.aspx . I know there are differences I am just wondering if someone could point out some of the major advantages to Casper over SCCM.

Hi, We are using JAMF Casper Suite version 9.81 (without test environment) and we have questions about file sharing (distribution point) if we want to use HTTPS.At this time, we only use SMB file sharing for one distribution point. If we want to activate HTTPS on this distribution point :- Is priority givent to HTTPS then SMB if failed when it is activated ?- Is it possible to know for post-scripting if Self Service have been using SMB or HTTPS ? Thanks in advance for your exprerience return. --mdpt

I'm looking for documentation on how to configure LDAP settings via the command line because I'd like to create a script. The guides I've found so far have been too dense to be useful.

Our environment wants us to upgrade all Macs to 10.12.5 (~300 machines) We've previously cached the package on user's machines, then allow them to upgrade through Self Service. How are some of you forcing 10.12.5 updates for the user's that do not want to do it self service?

Hi all, Wonder if anyone else ran into the same issue I did. I was just given a Macbook Pro 15" with touch bar. It is a 2017 model (The hardware is registered as MacBookPro14,3 within Casper) What I normally do is go to Macbook's recovery partition (Command R at startup), and then run asr -source /SourceDirectory -target /TargetDirectory to wipe out the entire internal SSD and replace it with our macOS image. I must have done asr a thousand times on Macbooks from 2013-2016. But on this particular Macbook Pro 2017, it completely bricked it :(- I tried just restarting, it gives me a stop sign- I tried Command + R again, it gives me stop sign.- I tried option, it can see the internal drive, I select it, it gives me stop sign.- I tried option, then select an external drive that I know it work. It gives me stop sign. I had no choice but to go to the Apple store, ask one of the genius to help me recovery it.(I saw what he did, he went to options, then selected Apple Stor

I built a Netboot image using AutoCasperNBI and 10.12.5 and it doesn't seem to netboot the new 2017 MacBooks, anyone else seeing this or figure out a good workaround?

I am trying to script removing our old MDM enrollment through DEP from Macs so I can have them prompt for DEP enrollment into Jamf. I am OK with the end user being prompted for their admin password but would rather not have them manually type in the commands into the terminal. !/bin/bash sudo rm -rf /var/db/ConfigurationProfiles/sudo rm /Library/Keychains/apsd.keychainsudo /usr/libexec/mdmclient dep nag The commands work great when manually typed into terminal. Unfortunately none of them seem to work in a script. : command not found2: Password:rm: /Library/Keychains/apsd.keychain : No such file or directory[ERROR] Unknown command: nag: command not found12:

Hi all i need to create a hidden account with its home folder in /var/if i place the account password in a script or add the full command including the password into Policy > Files and Processes isn't this a huge security flaw ? /usr/local/bin/jamf createAccount -username <netadmin> -realname <"Network Administrator"> -password <p@55w0rd> -home </var/netadmin> -hiddenUser -admin can anyone suggest a way to deal with this ? or if i use CreateUSerPkg is the password any more secure in pkg on our JDS ? and... does using -secureSSH to the end of the command make it so no other users can ssh on ?

We just wiped/setup an iPad that had never been enrolled before (purchased from Apple). It was added to our normal prestage, says "being configured by organization" during setup but as soon as it's done it immediately asks for an Apple ID on the lock screen. I can't login with any because there is no internet connection. I have never seen this before. I have completely removed it from jamf twice and this keeps happening.

I'm sure this has probably been answered, but I cannot find anything on it. We are working on upgrading our JSS system to 9.32 over the next couple of days and I'm having an issue with the location of the database.I currently have a Windows 2012 Server box running the JSS installation. Our MySQL database is on a separate local drive. For some reason, when I installed JSS it didn't give me the option to connect to it at a specified location. I'm somewhat new at this and was wondering if I could get some assistance? Sincerely,TJ

If I set a server to 'Limited Access' - 'Computer Access Only', does the /enroll URL still work? I'm assuming not, but it sure would be helpful. I'm trying to increase security by setting up a full access server in a restricted network, and changing our primary server to computers only, but all our documentation tells users to visit /enroll.... Todd

I have to Macbook Airs that I am deprovisioning. When i run the command below. It gives a list of items being removed like normal. Except when i go to System Preferences I still have a Profiles icon and things are grayed out like it is still enrolled. I have tried re-enrolling it and running the command again with no luck. If I try to run any Jamf script in terminal after running the one below I get the message "sudo jamf: command not found" sudo jamf removeFramework Has anyone else encountered this issue?

This could be opening a can of worms and an endless debate so im hoping this can be kept civilized as possible :) I currently have my main macbook pro and an iMac next to me for doing composer, autodmg etc work. I am thinking i might be better of using Fusion or parallels for snapshotting reasons and off domain testing, etc. I have to use other windows applications so having a VM of windows and of a blank OSX would work well.We already have Vcenter and vsphere running all our VM's in the office so i'm thinking Fusion mix in their quite nicely. I can see there are different version of Fusion which makes the choice a bit more confusing What do people recommend or use them selves?Why should i go one over the other?is there one that works better with Jamf Pro? Look forward to reading the feedback.RegardsPete

Hello! Maybe someone has any idea? I try to get numbers from the JSS by using the API. I try to run this command: var=$(curl -L -skfu jssuser:jsspassword ‘https://JSS_URL/JSSResource/computergroups/id/1' | /usr/bin/awk -F ‘<size>|</size>’ ‘{print $4}‘) When I run this command with the URL of my test-jss it works like expected. But when I run it with the URL of my productive JSS it gets no value at all. I have no idea why.. the user and password are correct, if I try them on https://JSS_URL/api at “computergroups” it works, so should be no problem… any idea? Would be glad about any help…

La discussion se trouve ici

I am working on cleaning up our JSS and was wondering how often people use the "All Mobile Devices" scope? The more I work with the JSS the more I feel like I should create static groups whenever possible and avoid using "All Mobile Devices" and Smart Groups altogether. Thoughts?

Hi, Have searched the forums for this but couldnt find an answer so assume its something wrong with my process. Was testing Self Service uninstalls yesterday and noticed that when trying to uninstall self created pkg files that they are leaving behind some .framework files. Namely: Growl.frameworkSparkle.frameworkNMSSH.framework I have confirmed that these files are in the pkg when it is bundled and installed, so they should be removed on installation too aiui Has anyone come across this and if so do they know where I have gone wrong? Thanks