My organization restricts certain software in Casper (torrenting programs for example) however when I added entries for new software to restrict, I am still able to open the programs on my test machine. I'm not sure why the older software restrictions are being enforced but not the ones I added last week. Any thoughts would be appreciated.

Hi, I wrote this simple script to mount out network drives. I got it to allow the user to mount to the finder but, then they have to drag their folder over to the desktop. Is there any way I can have the script check who is logged in and then mount their folder to their desktop? Thanks, Jared

Anyone know if there is a way for us to update iPads on 9.x.x and 8.x.x to iOS 9.3.5 even after 10 is released? Our 10,000 iPads aren't even in the hands of end users yet so we don't have a good way to lead a mass update campaign right now. I'm staunchly against jumping onto the newest version on day 1--I seem to recall last December when iOS 9.2 (I think) broke our MDM communication to thousands of iPads for nearly 2 months with no fix. Any help or advice is appreciated.

We do use DEP on our OS X machinesSince 9.96 there are new options in PreStage Enrolments:Selected items are not displayed in the Setup Assistant during enrollment...Touch ID... etc.And "FileVault" seems to be interlinked with the tab "Account Settings":When you choose "Additional administrator Accounts" the option "Filevault" is not available anymore. Could anyone share more insights to these dependencies?

Hi I upgraded to 9.96 yesterday.Today i want to create a new quickadd package but i can't use Recon anymore.Simply not opening. Konsole says: Recon: Unable to load nib file: MainMenu, exiting OSX 10.10.5 any Ideas?Also tested with another user, not working.

Hey JAMFnation, I'm beginning to explore using configuration profiles with my JSS, and I'm running into an issue with profiles I've created myself. Basically, I've been using a profile to configure VPN, and I install it either from a script, or by just double-clicking the mobileconfig file.Now that I'm enrolling my machines with the JSS MDM profile, I'm seeing these errors in Console every few seconds: 4/19/12 12:01:46.579 PM mdmclient: [Agent:2136138485] Removing profile: HDS VPN (com.apple.mdm.virtualion.hds.com.cbbd9ca0-e1ab-012e-8e62-001c4227f7c4.alacarte) for: <User: 2136138485> 4/19/12 12:01:46.580 PM mdmclient: *** ERROR *** [Agent:2136138485] <MDMClientError:90> Cannot remove profile 'com.apple.mdm.virtualion.hds.com.cbbd9ca0-e1ab-012e-8e62-001c4227f7c4.alacarte' because it was not installed by the MDM server <MDMClientError:90> It looks to me like the JSS is telling the MDM client to remove that profile, which I do n

I want to roll out a software update at midnight tonight in order to minimize downtime for the users. I'm not seeing an option anywhere within the policy to tell it to run at a specific time. Is there a trick to this? Thanks.

Hello,I seem to forget this this just about the time a new release comes out.... My memory tells me I'm to download a xxx.run file to upload to my jss and then run that file to upgrade it. However, I can't seem to find any .run file to do this except a JDS .run. Am I doing something wrong or is there not an upgrade from 9.82?

Apologies if this has been asked before....Im a little fried right now and seem to be going in circles... I have setup AutoPkgr successfully. I am attempting to test run a AdobeFlashPlayer.jss recipe and am getting an error of: 'Error Running recipes. Header value 0 must be of type str or bytes, not <type 'int'> In the JSSImporter configuration I have added my JDS as well as a samba share which sits on the JDS. I manually added the smb share. when I removed the smb share, I get the recipe to run, but it does not upload to my JDS, I see it in the JSS. When I open Casper Admin, I see it there as well, but it is red, indicating that its missing. Anyone got any pointers or can lend some other troubleshooting steps? The JDS, JSS, and SMB shares all run on RHEL 6.8. If I need to provide any other config files or anything else to help point me in the right direction I will add whatever I can.

Hello, This is probably a silly question but I've tried Googling/searching the forums but didn't find the results I wanted... We've just started adding URLs to Self Service through Self Service Plug-Ins. This is all good, however this also creates a "Self Service"-button at the top of the menu and where the description is for the URL, there's now the address for where our JSS is hosted. Is it possible to change this to something like "Self Service - Install applications" or similar instead of it displaying our URL?

Has anybody had any luck getting this to work? If I already have the certificate installed on my OS X server, can I just point Tomcat to it? I spent all day on the phone yesterday w/ JAMF and RapidSSL and couldn't get it working.

Hi Nation, So we decided to create a private and hidden network off our main network using an airport express so people cannot access the Apple TV airplay function. We distributed the credentials via a profile available via email when requested by user. We are still having issues because people on the main network can still see the Apple TV and can airplay to it. Any suggestions would be appreciated. Thanks,Jared

i was wondering if anyone has a way to administrator creative cloud updates as we push the licence out by user , and are looking for a way to get all the create cloud applications updated via self service . in addition does anyone have any applications that i could use to update all machine applications from one point

Anybody sussed this yet? I want to keep Gatekeeper on "Mac App Store and identified developers", but want some JNLP launched applications work without intervention. I know if I use "Open anyway" (and admin authorise it manually) that that JNLP - perhaps identified by the URL? - works ok any time after. I was hoping I could download approved JNLPs, package them up to install in /tmp and run spctl on them, but simply sudo-ing ```spctl --add /path/to/downloaded.jnlp``` doesn't look like its working. (To me.)

A colleague ran into this, so I tested and got the same thing. Respond to a thread, and try to autofill a username like: @donmontalvo and you'll see the autofill result will span the screen vertically. Happens on Chrome 53.x, didn't try other browsers. Since, you know, like, we all know Flash Player blows chunks, so we all use chrome. ¯_(ツ)_/¯ I thought it was cool...my colleague, not so much. :)

All, I have no idea why, but I can't get QuickAdd Package creation to work. I have it creating a management account, random password, create management account if it does not exist, and hide it. Sign with my developer cert, and add to my site, and "use existing site membership, if applicable". The problem is, when I go to create it, I get: "Enrollment Failed. Make sure you have the Create privilege for Computer Enrollment Invitations. Also, make sure you have access to at least one site". We've adjusted permissions as much as we think we need to, but it doesn't seem to work. We want to try using a local, not AD, account within JSS, but I can't figure out how to get Recon or Casper admin to "log out" and let me change my username/password. =/ I'm trying to create this package so I can auto-enroll some computers during deploystudio imaging... this is my first rollout of Casper, so I'm trying to start with my previous im

Greetings all, I'm attempting to kick off an upgrade of OS 10.11, and the way I'm going about seems to allow me to do it automatically, if I can just get a script to pass 2 keystrokes to kick off the installer. I'm wondering if any one has tried this/figured out if this is possible, I been trying, and I can't quite get over the hump. I've created a package in Composer that installs the "Install OS X El Capitan.app" into the tmp folder. I found that if I call this Unix Executable:/private/tmp/Install OS X El Capitan.app/Contents/Resources/startosinstalllike this:sudo /private/tmp/Install OS X El Capitan.app/Contents/Resources/startosinstall --applicationpath /private/tmp/Install OS X El Capitan.app --volume /it will kick off the installer, and upgrade a 10.10 system. My hang up is that after running my command the Terminal is prompted for the license agreement, where you have to type "a" and then the "return" key. I've tri

I'm trying to replicate my share point to my local drive to use for Casper Imaging target disk mode. In Casper Admin when I click on my File Share distribution point, the replicate button is greyed out and I can't seem to find any message as to why. I have enough free space, and I'm running the latest version of Casper Admin (which matches my JDS since it's cloud hosted). This is the first time I'm trying to use Casper Imaging since my jump start training, so it's possible I'm missing something obvious. Am I?

Hi all, I'm new to JAMF and I'm creating my first image from scratch. I'm wanting to use dockutil to customise the dock at login. I've placed dockutil in /usr/local/bin/ and I've compiled the following script from others I've seen online: #!/bin/sh LoggedInUser=$3 LoggedInUserHome="/Users/$3" configureDefaultDock() { echo "Logged in user is $LoggedInUser" echo "Logged in user's home $LoggedInUserHome" if [ -e /usr/local/bin/dockutil ] ; then dockutilVersion=/usr/local/bin/dockutil --version echo "dockutil version: $dockutilVersion" echo "Clearing Dock..." /usr/local/bin/dockutil --remove all --no-restart $LoggedInUserHome echo "Adding Launchpad..." /usr/local/bin/dockutil --add '/Applications/Launchpad.app' --no-restart $LoggedInUserHome echo "Adding Calendar..." /usr/local/bin/dockutil --add '/Applications/Calendar.app' --no-restart $LoggedInUserHome echo "Adding Notes..." /usr/local/bin/dockutil --add '/Applications/TextEdit.app' --no-restart $LoggedInUserHome echo "Add

We have upgraded everything to Casper 9.7, created new netboot sets, and are attempting to create a base 10.10.3 OS using Composer. I understand everyone is all about the AutoDMG and AutoCasperNBI, but for my purposes here I am trying to use the tools JAMF says they've provided and support. Neboot sets work great (except being a bit large, but even with AutoCasperNBI it was over 9GB) Casper 9.7 seems to be working, when I capture the image using composer with both the recovery partition and main drive selected. If I restore to any machine that I have in my office I get a phantom drive showing up as the name of the DMG I created as the base OS using Composer 9.7. I thought maybe it was the recovery drive, but when I select to boot to it, I get a prohibitory sign. I have tried creating the HD DMG and Recovery DMG separately, and get the same thing. If I hold Command + R, the machine boots into the Recovery partition with no problems. If I enable the Debug Menu in Disk Utility and selec

Okay, this has been frustrating us for the last few weeks and we're completely perplexed by this. Imaging hundreds of macs around campus (mainly iMacs, but some Mac Pros and now some MacBook Pros..all of various ages). We've been testing our 10.11.x configurations for months and didn't experience this in testing at all: Boot machines to netboot server (either manually or via policy, the issues has happened both times now) Machines typically have autorun info set to wipe drives and lay fresh data down (we have found this to happen without autorun set) Machines begin imaging and go to reboot to complete package installations Most machines reboot fine into the first-run dialog but a good deal of machines reboot to iCloud login prompt with the user '_mbsetup' logged in This happens randomly, it seems age and type of machine doesn't matter (it's happened on 2009 and 2013 iMacs and 2012 Macbooks) So far we've only seen it with 2 of our configs, the ones with the most packages installing

Hey guys, I don't know if anyone has run into this before but maybe someone knows something that can help. We recently went through a re-brand at the company, as a result all machines which are bound to AD have display names (locally on the Mac) for the users such as this first.last (LDN-DLK) The new names should look like this first.last (LDN-MLG) as they are in AD. This in most cases would not cause concern but as I am now mapping drives with Casper it is causing the login prompt for the servers to come up with the display name first.last (LDN-DLK) instead of first.last in the server connection login prompt box. If the login on the machine and the AD account match then it displays correctly as first.last and the user can type in their password and away they go. This does not affect anything else for login, email etc. It is just the login prompt box for the Casper map drive. I have used a Config profile to deploy the Shares and they are mapped via AFP. Does anyone know a way to up

Hello all, I'm seeing an odd thing in our inventory in JSS (v9.9.2) where some Macs will show root as the current User and a completely random name in the Full Name field. The name will show up for all the Macs that are showing with the User root. I can't seem to make heads or tails of why some Macs start reporting this. Today there are 22 Macs showing up this way (image attached). We do have a Last User extension attribute enabled: #!/bin/sh lastUser=`defaults read /Library/Preferences/com.apple.loginwindow lastUserName` if [ $lastUser == "" ]; then echo "<result>No logins</result>" else echo "<result>$lastUser</result>" fi As well (and I suspect this is where it's going a bit wrong), we are auto-populating the Full Name field by pulling the current user. Here's the script from JAMF Nation we are using: #!/bin/sh sleep 5 loggedInUser=$( ls -la /dev/console | cut -d " " -f 4 ) /usr/local/bin/jamf recon -endUsername $loggedInUser exit 0 I've se

JAMF Nation folks! I am looking to run a policy within my JAMF Helper script based on the end user's input. Note that most users will not have administrative privileges so this needs to run on standard accounts. Please have a look below and let me know if this is possible. #!/bin/bash /usr/bin/curl -s -o /tmp/elcapitan_icon.png http://assets.materialup.com/uploads/ec819071-7140-4c6d-89ac-81b712642fcb/512x512bb-85.png loggedInUser=$(stat -f%Su /dev/console) jamfHelper="/Library/Application Support/JAMF/bin/jamfHelper.app/Contents/MacOS/jamfHelper" windowType="hud" description="Your <CompanyName>-issued computer is not currently running the latest OS X version. To perform the update, select 'UPDATE' below and the security update will begin to run. Once complete, you will be prompted to restart immediately. If you are unable to perform this update at the moment, please select 'Cancel.' *Please save all working documents before selecting 'UPDATE.' If you require assistance, pleas

Hi All, We have just implemented Casper a few days ago but we are struggling with the following. A desktop background (bespoke one) has been set as part of an image and the "Desktop and Screen Saver" prefpane has been disabled so users cannot change it. However a new background can be set using right click "Set as Desktop Background" and we cannot find a way to stop this working. Ideally we would like to either disable the right click option OR create a policy to reset the background pic to our bespoke one every day/week/restart. Any ideas would be greatly appreciated