Rolling out FV, and have decided to NOT enable the local admin user as a FV authorized user. Of course I'll want to search and report on any instance of our local admin being FV enabled. (RANT: that info is easily viewed in the Local User Accounts section, but alas, we cannot report on that info It seemed as though I should be able to get what I want with a search for our config and "FileVault 2 User", but the results are not accurate. Seriously, do I have to script this to an EA also?

We are having trouble this year with our Self Service. We upgrade to JSS 9.92. When we log in as local admin user, we can install packages using self service. ut when we log in as a network user, Self Service opens, but is failing to install package. I receive Cannot Install Item, please contact your Administrator. Logs are not helpful, it just logs the exact error but no explanation. But I think it is failing to the point of Mounting the DP. I can access the DP using Command K and get to the Packages, copy it to the Desktop and install it no problem. But it wouldnt install on SS. Removed JamfFramework, no go, re image, still no good. We do not use JDS, just AFP DP. Please help. Thanks,Eigger

I've been caching the Office 2016 package on machines and then installing through policy but on about 25% I am seeing failure with the below in the policy. installer: Installing at base path /installer: The install failed (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.) Anyone else been seeing this? I can't seem to figure out whats causing it...

It seems every time autopkgr updates the packages it's creating a Testing category in the JSS which also appears in self-service. Is there a way to prevent it from adding that? I've been manually deleting that category but I'm sure there's a better workaround.

I am receiving the following error when deploying the following package: Installation failed. The installer reported: installer: Package name is Adobe Setup installer: Installing at base path / installer: The install failed (The Installer encountered an error that caused the installation to fail. Contact the software manufacturer for assistance.) The above error is received regardless of how this is deployed. I have tried caching the installer and then running the installation using the "install cached" in a policy and also direct deployment using Casper Remote. I have also toggled the "Install on boot drive after imaging" option on and off as it's default setting is set to have this enabled--to no avail. I am hesitant to re-package this installer as it DOES work on a handful of deployments. There does not seem to be any rhyme or reason to this. I am able to locally deploy this but that is a. embarrassing, b. not really resolving the issue at hand and lastly c. this installer has wo

Is there a way to do this in the JSS? I'm aware there is an option to ignore these completely using the MAC address. However in our shop, users have a requirement to use either USB or Thunderbolt Ethernet adapters on their MacBooks but we don't want a situation where people can share them around and use them on other MacBooks. This has happened in the past before we started using Casper for our Mac Management, i.e. when Macs were self-managed.

does anyone use the adunbind.sh Script that is provided in the Scripts section of JAMF nation? after the script runs i check the log, the echo after (usr/bin/killall DirectoryService) returns 'no matching processes were found' Script result: Unbinding the computer from Active Directory...Restarting Directory Services...No matching processes were found (but the computer gets unbound to AD, so that is fine, but just curious on the DirectoryService process) anyone understand/know what is happening? I kinda have a feeling but not sure. sometimes the policy results in 'FAILED' while other times 'COMPLETED', even though both logs show the same echo information. I added exit $? to the end of the script, so the log shows 'script exit code: 1' on both 'FAILED' & 'COMPLETED' logs.

When I try to Add Content to Dock (Safari, for example), clicking Save erases the app that I've selected and it reverts back to No Dock Layout. Also, if I try to save a blank layout, which I've read will alphabetize the existing apps, I can't click through the message box that says "You have not added any content to the Dock, which will result in an empty Dock on each device." Is anyone else having this issue?

Hello Community, since a few hours I try to create a little script to mount a smb share. Before the script mount the share he check it. If it is not mounted he mount it. It works ok... Now I have a few permissions problem... The Script create a folder called "Intranet", then he mount it. It works but I can't see the Intranet because the folder get the wrong permissions. The folder get the permissions root:wheel but I need "User":admin or "User":"Domain Group Via Terminal I can see all files as root... My question, how I can change the permissions to the corretcly? Here is the actuelly script: #!/bin/bash # Already mounted check user=`ls -la /dev/console | cut -d " " -f 4` isMounted=`mount | grep -c "/Volumes/Intranet"` if [ $isMounted -ne 0 ] ; then exit 0 fi # Mount the network home mkdir /Volumes/Intranet sudo mount_smbfs //xxxx.xxxx/xxx/Intranet/Intranet/ /Volumes/Intranet # end tell # Script End exit 0

We noticed that In-House eBooks (PDF) can be forwarded from iBooks as an email attachment. Is there any way to restrict this behavior when an In-House eBook (PDF) contains sensitive information?

I feel I may have missed this while searching around, but have not found an answer. Most search results include "Self Service" "JSS Service" ect. On my current JSS version 9.92.1466020067, I am not able to create a search for computer Services.See screenshot, I would like to search for computers for "Services" I want to search for computers with the "Avast" Service.The closest search attribute I see is "Running Services" but this does not catch any computers.

It's taking forever to repair the Database Tables, and I'm not certain the process continues after I'm timed out of the web interface. Is it possible to repair the database tables from the command line?

Hi, I'm trying to learn how to create packages and install them using Self Service. Normally here we have someone who knows Casper Suite much better than me but I'm a bit of a novice. I'm a bit lost as to what I'm missing being a novice? I've used Composer to do two installation packages out of currently installed software,namely Mozilla Firefox and Skype. I can package them fine, set editor rights for root and staff (being the default gidNumber our Mac users have) and then install the .pkg locally on my Mac.However, if I add the package in Casper Admin and configure a Self Service Policy to be able to install the package from there, the installation will fail saying "Cannot Install Item - There was a problem installing Mozilla Firefox. Contact your administrator." Update:I tried logging in to Self Service (we normally don't require a user to log in to be able to install from Self Service), but then the installation ran but still provided me with the same error message. However, w

Has anyone been successful creating packages for Adobe Shockwave without performing a snapshot? If possible, I'd like to not lose the installer logic, so I'd prefer not to have to snapshot the install. I don't know if it's because they've baked things into the installer or if it's the same SMB problems, but it fails when I just drop the PKG into Casper Admin. I've tried converting it to source in Composer, but that just throws installer errors (this makes me think they baked things into the PKG rather than a SMB problem). I also tried using The Unarchiver on the PKG and found another PKG inside, but that just causes OS X to report that it is broken and offers to throw it in the trash. I haven't tried any other packaging applications, but I'm certainly willing if that's what it takes.

Our current thin imaging workflow involves our technicians logging into a new Mac, setting up a local Administrator account and then running the Quickadd.pkg from a USB stick. We then have a number of policies set to run at enrolment time. Is there a way I can set some kind of 'Enrolment in progress, do not power off' type screensaver/desktop background to run whilst the enrolment policies are applying? I'd like our technicians to know exactly where they are in the on-boarding process.

We have around 350 seniors that just graduated and their iPads are being "recycled" down to the incoming 7th grade class. I wiped each device using iTunes (iOS 9.3.3) and have tried setting it backup using the credentials of a 7th grader, we have LDAP authentication. The problem is the "User and Location" fields are left blank but the correct profiles are still being installed because the pre-stage enrollment forces the iPad into a specific building "Middle School" which carries with it all the proper restrictions. To make matters worse the entire iWorks suite, PDF expert, and 3 more apps are auto installing even though they are set to "Make available in Self-Service." Anyone have any ideas whats wrong? I have attached screenshots of the commands I've run on the JSS server as well as images of the prestage enrollment and of the device itself.

Hello - I am attempting to create an extension attribute for the Cisco WebEx plugin. The Info.plist file is located @ ~/Library/Internet Plug-Ins/WebEx64.plugin/Contents/info.plist I am using the following script, but it seems to be referencing the system profile instead of the logged on user:#!/bin/bash if [ -e ~/Library/Internet Plug-Ins/WebEx64.plugin/Contents/info.plist ]; then echo "<result>$(defaults read ~/Library/Internet Plug-Ins/WebEx64.plugin/Contents/Info CFBundleVersion)</result>" elseecho "<result>N/A</result>"fi Any help to reference the logged on users internet plug-ins folder would be appreciated!Thanks!

I am trying to search all my machines for the presence of a local Google Drive folder. Borrowing from a script I have found in another thread I have set up an extension attribute with a script, but it is not recognizing the folder. Assuming the issue lies with the variable in the path to folder, but unsure how to rectify. (I am open to other options if extension attribute is not the way to go. New to the Casper Suite and still learning my way through) Thanks! !/bin/bash if [ -d "/Users/${loggedInUser}/Google Drive" ]; thenecho "<result>Has Work Folder</result>"elseecho "<result>Does Not Have Work Folder</result>"fi exit

Hello Everyone! i am currently working on a project to place a JSS out on the DMZ. The current setup are as follows: JSS-DMZ is running on Windows 2012 R2JSS-DMZ is fully configured with Clustering and Limited Access to external connectionsJSS-DMZ DNS is configured by split-dns so we have an internal name that mirrors the external nameThe JSS-DMZ is using 3306 to contact the Internal-JSS which is the only port that is open to the internal networkInternal JSS is connected to AD but the JSS-DMZ is not I can contact the JSS-DMZ just fine and was able to login to the web console before I closed it up but I am not able to enroll any external devices. I tried making a package from Recon internally with the external server's address but installing it fails. Using the old QuickAdd package fails as well. While trying to connect externally with Recon, it would say "Connecting to the JSS" but hangs. Lastly, enrolling with the jss.companyname.com:8443/enroll would hang at the "Assign User" scre

We are currently auditing our password security and need to update the Firmware password on everyone's machine. Is there a way to do this via a script? The JSS EFI Password Policy to set a password comes back with an error that the EFI password is already set.

The asset gets added to casper but I do not have a self service application on my computer.

When I first started imaging the computers they were working fine. Now when i go to image laptops over the network it installs all the pkgs but never enrolls the computer into JSS. No placeholders show up in JSS but in the computer the /Library/Application Support/JAMF folder is there but the file /var/db/ConfigurationProfiles/MDM_ComputerPrefs.plist isn't there. From my understanding that file is created when it communicates with Apple's Push servers. In the System.log file there is a part that is saying May 27 09:40:50 Testing-10-blank apsd[56]: Got connection error Error Domain=NSURLErrorDomain Code=-1009 "The Internet connection appears to be offline." UserInfo={NSUnderlyingError=0x7fb0c2430fa0 {Error Domain=kCFErrorDomainCFNetwork Code=-1009 "The Internet connection appears to be offline." UserInfo={NSErrorFailingURLStringKey=https://albert.apple.com/deviceservices/deviceActivation?device=MacOS, I added the URL to our bypass to see if that would so

Hi, I want to to create a user-level Configuration profile. Within Scope, I have selected all users, but I want to exclude a certain local administrator's account. When I edit the scope, I can see user list within Target. But in exclusions, I cannot see the user list. I can only see Computers, Buildings, Departments, etc. Is there a particular place I have to create a list of users for it to show up and I can select it?

Hi, I want to start using user initiated enrollment within Casper. I have enabled it within JSS. However from a Macbook, when I go to https://<url>/enroll, I type in the enrollment username and password, and then I am faced with "Assigned to user" page. Within this Assign to user page, I can't type in anything and there is no LDAP user available (because we're using local user accounts, not Windows LDAP). Is user-initiated enrollment only for LDAP account? Is there anyway to allow it for local user accounts? I guess the local user can be anyone.

Is there any way to disable cloud services in Office 2016 for Mac, specifically the OneDrive, OneDrive for Business, and Sharepoint? Specifically, management wants the Save As panel to disable the button for "Online Locations": If disabling that button in the Save As panel isn't possible, is it possible to disable the ability to "Add a Place": And if that isn't possible, can we at least disable the builtin cloud storage locations: Any ideas? We're still using Managed Preferences, but Configuration Profiles could work too. Thanks!