We had our Casper server (Mac mini) crash a few weeks back, so we decided to upgrade to newer hardware. The server (9.81) is online and running with clients communicating. Nothing seems out of the ordinary from that standpoint. The problem seems to be with the MySQL server possibly. Since this was a new machine I decided to keep everything current. So it's running OS X 10.11.2 and MySQL 5.7.9. I cannot get the JSS database utility to connect reliably. It will report: Unable to connect to the database: mysql: [Warning] Using a password on the command line interface can be insecure. ERROR 2013 (HY000): Lost connection to MySQL server at 'reading initial communication packet', system error: 0 If I restart the MySQL service, I can get the JSS database utility to work and make a backup, but eventually it fails again. Oddly, the MySQL status from the command line says running, but the preference pane in System Preferences keeps jumping between Stopped and Running. I'm

I am looking for a way to pull a report via the JSS API to show all the Policies that are associated with a specific script. Looking through the API, I don't see any simple way of finding this information. I have been able to accomplish this via a MySQL query similar to this: SELECT scripts.file_name, scripts.script_id, policies.name, policies.policy_id FROM policy_scripts INNER JOIN scripts ON scripts.script_id = policy_scripts.script_id INNER JOIN policies ON policies.policy_id = policy_scripts.policy_id WHERE scripts.file_name = "Super Awesome Script"; This query would return the the data in the following format: file_name script_id name policy_id Super Awesome Script 165 Super Awesome Policy 1 1645 Super Awesome Script 165 Super Awesome Policy 2 2314 Super Awesome Script 165 Super Awesome Policy 3 2356 Is there anyway to achieve the same thing via the API that I am missing?

I've tried a number of different criteria to get our institution Android devices (although configured as personal to get into the JSS) but I can't get them to go into any smart groups, if for instance their used storage is over 80% Anyone know why this is the case? I have no problem adding them to static groups.

My company only has use of Composer at this time. I use it to make software packages and it's great. We are about to start rolling out 10.7, but I want there to be a base image without printers because we have multiple locations we support. What I'd like is to create a package for each location, based on the printers they will need. I'd like to install the drivers and add the printers and have Composer make a package from that. I've tried the normal snapshot as well as the FSEvents method, but neither one adds the printer queues in System Prefs(the drivers get installed). I even took out /etc/cups/printers.conf from the exclusion list, but still no go. What am I missing? Thanks in advance

I caught Casper running du:0 23027 22579 0 7:41PM ?? 0:10.02 /usr/bin/du -sh /Applications/Xcode.app The parent ID for that process is 22579, which turned out to be:0 22579 1 0 7:37PM ?? 0:00.89 /usr/local/jamf/bin/jamf policy -randomDelaySeconds 300 And this is literally causing CPU spikes on several systems. How do I disable?

I've begun testing a number of things I've been working on this year for deployment on our image next year. This includes an OS X application which I created which simply runs a shell script to mount the logged in user's network home folder on the Desktop. I used Appify to create the app, however when I try and launch it via Spotlight it does not appear under Applications even though the app is in the Applications folder. I assume my method of creating the app is what's preventing it from being visible & indexed by Spotlight ... Does anyone know what the requirement(s) are for Spotlight to index an application so I can add this to piece to the app I've already built so Spotlight can see it and index it? OS X 10.11.4, almost a complete base OS not including my app/script, and the Spotlight Applications checkbox is checked. Thanks in advance!

Hello Folks, So we have had a branded self service running for over a year and people love it. Today, we updated to JSS 9.9 and right after we knew it was humming along happily, I went into the normal process of changing the one file, loginLogo in the following path: /Library/JSS/Tomcat/webapps/ROOT/images/selfservice2 so our branding would continue to show up. On my admin mac self service is still working fine. However, it has been discovered that the self service application is having this logo icon zoom out to a small logo over and over and over again. The visual is nauseating to see and I don't know how to stop it. Anyone else who has a branded self service seeing this or have a tip for me? Thanks! Mick

Hello Everyone! My manager has asked for a high level (3-5 year) Road Map for Casper. I wanted to check with everyone and get suggestions on things that should be added to it. We have only been using Casper for about 6 months and is still in our test environment. We use it only for OSX and none of the MDM. So I figured admins that have been using it longer might be able to add some of their working knowledge to it. Thanks in advanced for any advice.

Hello JAMF Nation, My ASUS is now throwing a hissy fit and refuses to load SUS data. Everything worked just fine last Friday and no updates occurred over the weekend. We have our clients pointed our SUS using either a config profile or command line. We've also tried the direct URL "http://serverDNS:8088/index.sucatalog". and sudo defaults write /Library/Preferences/com.apple.SoftwareUpdate CatalogURL http://serverDNS:8088/content/catalogs/others/index-10.11-10.10-10.9-mountainlion-lion-snowleopard-leopard.merged-1.sucatalog The computers have the correct SUS URL according to defaults read /Library/Preferences/com.apple.SoftwareUpdate CatalogURL The error: softwareupdate -l Software Update Tool Copyright 2002-2015 Apple Inc. Finding available software Can't load data from the Apple Software Update server. We've tried re-doing the Server setup using "sudo rm /var/db/.ServerSetupDone" and killing cfprefsd, "killall cfprefsd". We&#

Hey guys, Ive been wrestling with this one for awhile. We just moved from 9.63 to 9.72, and ever since then have been unable to replicate to our other share via Casper Admin. It just cant mount the share. Its been working(for the most part) since we stood up everything but now fails consistently. The error I get is this, and when I check the logs in the location specified, you can see there really isn't anything helpful to troubleshoot the problem. The strange part is that, it IS actually mounting the share! I verified this by running a "df" command from terminal I can see the share is indeed actually mounted. Ive tried unmounting, restarting, re-adding it, checking the read/write accounts, resetting passwords, and a host of other recommendations on different forums here on JAMF nation but none have been successful. The other odd thing is this will even happen with the master distribution point time to time for no reason I can plainly see. I usually will have to close and reopen

Hi All, We're looking at deploying our root ca cert & various other certs signed by this cert via Configuration Profile to our lion clients. Anyway to set the trust level.. or something like the below need post profile deployment? If so, how do you handle this? /usr/bin/security add-trusted-cert -d -r trustRoot -k

I am setting up VMWare Horizon Client for use in a lab, and we have more than one desktop pool available, and some users have access to more than one. Those users who have access to more than one get a screen with the different pools to choose from. Any suggestions how to set a lab pool to open by default in this scenario? I know I can manually set the default pool after initial install, just trying to figure out how I might include that info in the profile I create or the setting lives somewhere else...I have tried experimenting with setting URI values according to VMWare instructions, but I must be missing something

I've read through the (other post) about installing the VL version of Office 2016 multiple times, but I can't seem to come up with a working install. I've tried installing the VL version downloaded from the Microsoft VL site which is 15.18 and I've tried the 15.19.1 installer and the serializer. Either way I get an installation in which none of the applications will launch. All give a similar error to the one copied below. I've seen one other person post this exact error, but didn't see a response to the issue. The current test configuration is simple. It only includes OS X 10.11.4, scripts to set the time and join WiFi, and the Office installer and serializer. After being enrolled in Casper a policy runs that joins it to the domain and creates a local admin account. That's it. If I use Casper Remote to push the exact same installer to the computer that ran during imaging the applications work. If I push updates to the computer for the 15.20

Hey everyone. I want to start using the JAMF API. What types of languages should I be looking at in order to utilize the API?

Logout After 1 Min - Login Window Config - Not Working If i have this profile applied on top of another Login window configuration profile will it still work? As of now it will not log out with no programs running.

Hello everyone!So I got hired back to my old job after a 4 year hiatus and I found the state of the Casper infrastructure in shambles. After a short refresher on everything Casper/Mac I pretty much got everything working except for one glaring aspect: NetBoot. To cut it short I am building the netboot with AutoDMG and AutoCasperNBI. These are 10.10 and 10.11 images hosting off of a Mac Pro 2010 with 10GB and 10.10 server. When I NetBoot holding down option key and selecting the image, it works great. But when I send out the bless command using terminal with booter, kernelcache, and options configured, it kernel panics out. This is the same client machine and on the same network. Anyone else ran into something like this? NOTE: I already added the netboot server to the "allowed list" on El Cap through "csrutil" the bless command i used: bless --verbose --netboot --booter tftp://10.10.10.10/NetBoot/NetBootSP0/fromYoseInstaller.nbi/i386/booter --kernelcache tftp:

I apologize for what seems to be a simple question - Is the Casper receipt that gets reported back to the JSS (Packages Installed By Casper) based simply on the package file name? So the Casper receipt will basically match the name of the *.pkg?

Hello everyone, I am currently using JAMF for a K-12 school district and am wondering how the Software Update Server works within JAMF. Is my current assumption correct: Updates are cached to the local servers and that's where the Mac's pull updates from? Questions:1. Does the package need to be manually uploaded?2. Is there a special sign-in required for within the App Store3. We currently don't have any Mac App Store logins set up on laptops. Will we need to go to each computer manually and set them up to update?4. What is the set-up like for the JAMF Software Update Server? Thank you,Ricky

JSS 9.81 OSX 10.11.3 image Right after imaging with OSX 10.11.3, computers enroll and I let all the post-enrollment policies do their thing. When I login as the local admin account, I see a question mark icon for Self Service. When I click it, I get an error:This is how the Self Service icon is configured in JSS:This works just fine with Yosemite images.I've tried variations on the Path and none of them work in El Capitan. I've tried file://localhost... file:///Applications... file://Volumes/Macintosh HD/... /Volumes/Macintosh HD... I've also tried them all in quotes, but every single thing I try still creates this broken Self Service icon in El Capitan. What do I need to put here to make the Self Service icon in the dock do what it's supposed to in El Capitan? Otherwise it just forces me to manually delete the broken icon and drag the program into the Dock.

Hi, I've got an Interesting situation with some random machines that get imaged in Casper 9.82, OS X 10.11.3. There is a separate policy configured with the trigger enrollment complete, to deploy our FileVault configuration with an Institutional Recovery Key. I discovered that this policy fails sometimes according to the policy result. However after checking the affected machine I see that the encryption is enabled successfully so I'm not sure why this results in a failure. The log results for a successful run is normally like this: Executing Policy Configure FileVault 2Fixing Permissions...Fixing ByHost files...Flushing System Caches...Flushing User Caches...Verifying Disk mounted at '/'Result of disk verification:Started file system verification on disk0s2 Macintosh HDVerifying file systemUsing live modePerforming live verificationChecking Journaled HFS Plus volumeChecking extents overflow fileChecking multi-linked filesChecking catalog hierarchyChecking extended attributes fi

Where do you set the cloud DP as the failover? When I edit my various DPs, and view the list of Failover DPs, the cloud DP is not an option to select. I have my internal DP set as master but cannot select my cloud DP as a backup?

So, something I have noticed is VPP apps are assigned to users regardless of if they already have the app, so it is using up licenses This is a problem after having just moved from codes where some students already have the app from a redemption code and some students need the app via VPP. I am trying to think of ways of scoping to avoid this issue, or creating smart a smart group for each app to exclude those who already have the app, but VPP being dynamic the way it is would go ahead and remove the app from the user once the inventory updates and they are added to the smart group as having installed the app which is excluded in the scoping. Ideas?

Does anyone else have this issue on occasion? We use DEP for "imaging" our Macs. We will enroll the machine in DEP, it will show up in Casper as assigned, and everything looks good. However we semi regularly will have the machine skip the "Configured by" screen when going through the OOBE. It seems like the machines aren't talking to Apple properly (although they definitely have network). If we wait a day the machine might work just fine. My question is, does anyone know a good way of testing Apple status / servers? Their status page doesn't seem to be DEP related. I have also tried the "Push Diagnostics" app but this never fails. Also, assuming the machine skips the "configured by" screen, sometimes the machine will prompt to install the profile and then everything will work. Is there a way to tell the machine to go ahead and talk to Apple servers and see if there is a profile available? It seems to show up at random times. Thoughts? Similar issues?

I am trying to distribute Minecraftedu with a policy. I have successfully (?) created a .dmg using Composer. The file installs on the client computer, but will not launch for all users. The app relies on Java and the content is placed in the /users/library/Application Support. It may be that the settings to fill home directories and user templates are not configured correctly in the .dmg? The error in the Logs are not useful 'weird error: 13' Does anyone have some tips/experience with this app? I tested placing the Application Support in a shared location with a direct installation. Again, the application will not launch for another network user (mobile account created on the Mac - OSX 10.9.x)

Hello JAMF Nation, I would like to ask if anyone is pulling reports using API? I am also new here so i don't really have any idea what is API. thanks in advance! :)