Somehow I got locked out of my NetSUS server admin console (I can ssh in though) and I'm unable to log in. I tried following the recommendation at the article here, but I still can sign in.Whats odd too is that the file mentioned, appliance.conf.xml, does not contain anything in it. Its an empty file. When I try to populate it with some XML elements and restart the web service, it clears out the file again (edited with sudo privileges). Any ideas on how I can get back into my NetSUS server?

Is there a way to push a lock screen message through Casper? (System Preferences - General - Show a message when screen is locked). As per support there is no configuration profile payload that can be used. Also found this command doing a google search: sudo write /Library/Preferences/com.apple.loginwindow LoginwindowText "Your Message Here", but that does not seem to do the trick either. Machines are running a mix of 10.11 and 10.12 Thanks!

Greetings, all! I am fairly new to iOS MDM with Jamf Now so apologies in advance. I am testing iOS deployment using Apple Configurator 2 for all non-DEP enrolled iOS devices for a future MDM rollout. I have created a blueprint for this iPad and have enabled the Apple Configurator 2 setting in my JSS (running v9.92) as well. The details of the blueprint being used are fairly simple. I have it installing a profile with the wireless network settings and being enrolled to the specified JSS as a supervised device with some modified Setup Assistant settings. Please find these details below, for reference. The iOS device is quickly provisioned and enrolled into my JSS as expected. Where I am having an issue is with app deployment. I have tried to deploy Self Service as an application directly from the blueprint and also tried doing this from the JSS as an automatic installation. These applications have been properly purchased (though they are both free) with our VPP account and have been

Hi All! In my quest to automate everything I decided to roll out a script that checks if the user is enrolled with out MDM and if they are not, go to our backup profile that is saved in the library and install it. I was testing it by running it, and it seems that it doesn't see our MDM Profile and still wants to install the new one. I think it has something to do with how I have it exit, but I cannot figure it out. #!/bin/bash if sudo profiles -P | egrep -q ': com.YOUR IDENTIFIER$'; then exit 0 else profiles -I -F /Library/Sandbox/MDM Profile.mobileconfig fi Thanks for any help,Jared

Hello,I'm trying to collect inventory data from the JSS via API calls using Python. When I make a request import requests jss_application_usage = requests.get('https://domain.jamfcloud.com/JSSResource/computerapplicationusage/id/%s/%s_%s' % (computer_id, yesterday, today), auth=HTTPBasicAuth(api_user, api_password)) and try to see what type of content gets sent to me, print jss_application_usage.headers['content-type'] I only get text/xml;charset=UTF-8 as my response. So my question is, is there a way to get back json data instead of XML? Is this something that needs to be configured on the JSS? Thanks!

Specifically, I would like a machine to restart (regardless of who is connected) every Friday at 6:00 PM. Can anyone help me with this?

Hi all I'd like to find a way to unbind a machine from Active Directory and have the computer object removed, i know that i can use dsconfigad -force -remove -u username -p password but i don't want to store the password in the script or a policy's parameter. Is there any way to use the JSS Directory Bindings that we use to bind a machine to also unbind the machine and remove the computer object ? or is anyone using a different approach to automatically remove machines from AD ?

In the process of moving computers from current Production JSS to new JSS. We're not migrating, we're re-enrolling to start clean. The move is easy, but I'm trying to clean up my old JSS as they migrate. I figured an easy way to do this would be through the API, but I've not used API for anything yet, and am scratching my head as to what is failing. My script is below. #!/bin/bash name=`scutil --get HostName` curl -X DELETE -u jamfadmin:password https://jsstest.org.com:8443/JSSResource/computers/id/$name exit 0 My output seams to show that it's not grabbing the host name as expected but I'm not sure why. I'm sure it's blatantly obvious, but for the life of me, I'm not seeing it. sh --verbose API Delete.sh #!/bin/bash name=`scutil --get HostName` scutil --get HostName curl -X DELETE -u jamfadmin:password https://jsstest.org.com:8443/JSSResource/computers/id/$name <html> <head> <title>Status page</title> </head> <body style="font-family

Is there any way to put and use Self-Service on a Windows machine?

Hi all, I'm trying to script this but can't get it to work for all users. What I'm trying is: rm -rf /Users/*/Library/Application Support/Google/Chrome But this isn't working even when run as root. If I run it as any logged in user it'll delete it from their own home directory, but I can't get it to run globally. I'm working with AD users if that makes a difference at all. Am I missing something?

Hello, I find myself ahead of the curve-a rarity! My existing AD Bindings in JSS that work on El Cap and older configs do not seem to function on Sierra. I am using the macOS Sierra GM seed. Anyone else try this or have issues? Oh, and running JSS 9.96 TIA, /randy

Apple Remote Desktop is able to authenticate with a client computer, but it is unable to connect to it for some reason. I have tried completely uninstalling as per the following article: https://support.apple.com/en-us/HT201766 No good. I am able to connect to the client from a different computer running the same OS (Mac OS X 10.11.1) It just hangs on "Connecting…"

I'm trying to run a script to check first if a file is already on the mac I want it to quit, and if the file is not on the mac to go ahead and install it. At the moment I have a policy that copy the file to /tmp/CB/file.pkg than it gets installed.( file.pkg gets installed into "/Applications/file.pkg")But I want it to skip install if the file.pkg is already installed on the "/Applications/file.pkg" I told you it was basic =) this is what I have so far: #!/bin/sh installer -pkg /tmp/CB/file.pkg -target /

I uploaded the S4b installer to the JSS, created a self service policy. Self Service says it installed correctly, but the logs show: Installation failed. The installer reported: installer: Error - I tried then pushing via C. Remote and it failed with the same error. I tried on one of my freshly imaged machines through self service and it did complete. So I went back through the logs and apparently it's failing consistently through SS. Is it one of those apps I need to re-bundle with postimage script?

I'm writing an EA that has the following line... migrationStatus=`defaults read /Library/path/to/com.****.****.plist "Migration"` If the plist or key isn't there, I get the following error message and $migrationStatus is set to nothing. The domain/default pair of (/Library/path/to/com.****.****.plist, Migration) does not exist I'm not a super scripter by any means. How can I handle this so that I can check against the file not existing or if the key is missing from the plist file?

Hello everyone, Yesterday I tested a push of the 9.2.1 update to 40 iPads with 9.1 installed to see if it would work overnight. It succeeded, but only for half of the devices (I made a smart group with 9.1 devices across 2 of our carts). The real issue now is that the iPads that updated to 9.2.1 all had their mobile device names revert to "iPad". I cannot change them back. Device history shows every attempt to change device name as successful. I have tried removing the "enforce device name" checkbox and reapplying it. I can also confirm any iPads updated from 9.2 have not had this happen. Has anyone else seen this?

I keep getting Mac users that are getting the Start up disk is almost full message. When I look at the Storage tab in About this mac I am seeing around 50 to 80 gb if space being used by "Other". I tried using a program called daisy disc to help find what the "other" is. So far I have not been able to find what is taking up so much space. Has anyone else had this issue or have recommendations on places to look? Thanks

Hi everyone, I'm being forced to deploy SilverFast scanning software in our Graphics and Photography labs. Due to Epson not providing 64bit drivers for most of their scanner models, Silverfast needs to be opened in 32-bit mode when connected to the Epson scanners we have. Is there a way I can script this or configure this system-wide using Casper. The right-click, get-info, checkbox "Open in 32-bit mode" method is not going to cut it in our academic labs. Thanks! ~Ted

Hi All, We are having problems with reconning systems with casper at the moment. When we attempt to recon from a system using the "sudo jamf recon" command in terminal we get a result saying "There was an error. Message has no content" Casper shows that the system checked in, but did not update inventory. When we use the Recon App we are also seeing an error - I have attached a screen shot of the message. We are using Casper 9.61 and our system displaying the fault are a split between Mac OS X 10.9.5 and Mac OS X 10.10.0 Any help would be greatly appreciated.

Hey everybody, I'm attempting to remotely deploy Adobe CC via the JSS. I've followed instructions I was able to find here and using the script it had also linked found here. I checked the jamf.log file, and verified the policy started to run, so I left work yesterday to let it finish as the package is around 19-20GB. This morning, when I checked back in, I noticed it did not install. The log file the script creates showed the following. 2016-11-30 15:09:48: Mounting the DMG Adobe_Install.dmg...2016-11-30 15:09:50: DMG mounted successfully as volume /Volumes/Build on device /dev/disk2.2016-11-30 15:09:50: Installing Package Adobe CC 2016-2017_Install.pkg Adobe CC 2016-2017_Uninstall.pkg from mount path /Volumes/Build...2016-11-30 15:09:50: There was an error installing the package. Exit Code: 1 I tried running the policy again and it returned 2016-12-01 08:46:20: Mounting the DMG Adobe_Install.dmg...2016-12-01 08:46:21: DMG mounted successfully as volume on device .2016-12-01 08:4

If I switch a machine over to wireless (to simulate a laptop),pinging our JSS server by name still works but "jamf recon"and the "Self Service" application both give"Could not connect to the server."Is there some setting that I've missed?

Hi all, I am a newbie to Casper and I am having a real problem with Casper Admin. For some reason it won't mount the distribution point when loading and I have no idea why. The distribution point is on a Windows file server, in the root and shared via SMB.I can mount the DP with both the r/w and r/o accounts that have permissions on the share and they both work fine as does my own LDAP account which I also use to log into JSS. I have also checked the details for the DP in JSS and they are all correct and I have even tried some of the suggestions on this board such as removing the workgroup on the File Sharing tab, changing the SMB port from 139 to 445, and also using the IP address of the server the share instead of the FQDN. There are no spaces or special characters in the user accounts or passwords for the share. I have also re-created the distribution point and still have the same issues. I can't find anything in the logs about this either. I am now utterly stumped as I can't impo

Does anyone have a script they use with success to add local non-admin accounts to the lpadmin group? I am having an issue where students are clogging up the printer queues and the printers are pausing. They then can't unpause the printer since they aren't admins. I could manually reconfigure the CUPS conf file but I don't want to have to do that for every lab machine.

Hi, we are trying to add a status bar to one of our dialogs that pops up at login. We use this for the status bar: set n to 10 set progress total steps to n repeat with i from 1 to n delay 1 set progress completed steps to i end repeat We use this for the text: display dialog "..." Unfortunately, we cannot seem to merge these two without breaking the status bar. Has anybody ever had success with this? Thanks in advance,Jared

I know this is a somewhat touchy subject, just looking for some pointers. Institutional policy prohibits connecting to the internal network via wifi. I suspect a few of our remote field offices are ignoring this, and connecting their Macs to a WAP in the office. Partly to audit for compliance, but honestly, more for my own sake to help troubleshoot issues with specific machines that seem to always fail mounting our DP's, is there a reliable method to query for which network connection is being used? Once upon a time, we could just test for en1 or en0, but now, with laptops lacking built-in ethernet and relying on Thunderbolt, etc,. I'm not sure if there's a single approach that will cover all systems. FWIW, our hardware runs the gamut from old(er) 1st gen Intel Mac systems up to brand-new systems. I'm picturing some sort of EA to gather the info, but again, don't know how to approach the issue of which network may be named what anymore.