Hi Everyone, I might be missing something simple so please excuse an oversight I be having. Every so often, I have a need to wipe a Mac. When I do this, the previous policies and scripts that have been run once per computer will not run again on this Mac. The question is, do we have the ability to open a single computer and flush all policies for this one computer? Rather than searching all possible combinations of policies and flushing the individual log from each policy, it would be great to find the computer, open it, flush all policies. Maybe this is a feature request and I can create one. I just didn't know if someone else has found a way to do this in some other mechanism. Thanks as always!! Mick

In our schools, we have an iOS configuration profile that, among other things, blocks in-app purchases. This is primarily to protect our teachers' credit/iTunes cards. We've had some teachers ask to allow in-app purchases on the student devices, and I want to be able to do this on a limited basis. Right now the initial configuration profile is scoped to all mobile devices in this JSS. My question is this - when I go to the initial config profile to create an exclusion, I get the following message (see attached). As I read it, this will keep the initial profile (NCSD iPad) on all of the devices except the one for which I created the exception. Can anyone confirm this? I don't want to remove the config profile from all the rest of the iPads by mistake. Thanks!

When the postinstall.sh runs it fails every time and loops. Below are the error messages we receive: Script result: /Library/Application Support/JAMF/tmp/postImaging.sh: line 8: /usr/sbin/jamf: No such file or directory/Library/Application Support/JAMF/tmp/postImaging.sh: line 19: /usr/sbin/jamf: No such file or directoryStarting...Stopped ARD Agent.Done.Starting...Activated Remote Management.Stopped ARD Agent.admin: Set user remote control privileges.admin: Set user remote access.Done.Starting...Setting allow all users to NO.Done.ln: /Applications/Utilities//Directory Utility.app: File existsln: /Applications/Utilities//Network Utility.app: File existsSoftware Update ToolCopyright 2002-2012 Apple Inc. Finding available softwareSoftware Update found the following new or updated software: 031-07832-3.1HP Printer Software Update (3.1), 144634K [recommended] OSXUpd10.10.5-10.10.5OS X Update (10.10.5), 795798K [recommended] [restart]* iTunesX-12.3.2iTunes (12.3.2), 241328K [recommended]

Strange one, but - is it possible to do a filter or search on Casper to show us all the machines with an SSD and all the ones without? Just as weve been doing a swap and trying to keep track of ones weve done and the ones that need upgrading? ThanksSimon

I have 20 macs that I need to turn on remote management and remote login, When we gave it to the teachers I think they were turned off. Thanks

Hello, I'm working with a client that would like to be notified when a user removes the JAMF framework with ```sudo jamf removeFramework```. I recall one of the Facebook CPE guys talking about how they automatically remediate this, but it's a bit overkill for what my client needs, (they just want a notification that files a ticket, perhaps). What are other folks in the community doing for this, if anything? Thanks!

How much scripting experience is required for this course?

Please tell me how can I pull a report that lists all the managed Macs and their OS X version.

Apologies in advance if this has previously been covered (although I did search the discussions before posting): We are new to iPads and JAMF here in our Windows shop and have been seeing an oddity in the last few days where the Mail.app suddenly loses the Exchange account password. This has happened 2 or 3 days in a row now on all of our test devices (running 9.2.1, hosted JSS running 9.82). I'll be opening an Office 365 support ticket as well in case this is an O365 problem. Anyway just thought I would ask if anyone else is seeing this behavior? Thanks. Edit: Oddly enough, iPhones in the company that are not managed by JAMF are not experiencing this issue, nor are Outlook.app clients having any trouble so it kind of makes me think it might not be a Microsoft issue)

Hi, Need a little help with some smart groups; I have Labs setup within Smart Groups - "Lab-C119-Mac" This brings back 20 machines - like it should When I want to build a policy around this smart group - it always seems to gather machines from other Labs containing similar names, For Example: "Lab-Mac-M329-10" I have even contained Lab C119 into its own building and again, the smart group looks correct, However I still have the same issue in Policies. Screenshots attached Thanks, Jeremy

Hey Everyone, A number of our critical engineers have asked if its possible to introduce network Time Machine backups; so that if anything happens to their MacBooks (breakage, theft, etc) they are able to borrow a loan machine and get running again quickly. I've done some initial proof of concept testing; using a 2010 Mac Pro running OS X 10.10.5 Server; loaded with hard drives and then I shared its local storage via the Time Machine service - this worked a treat from an AD security/permissions and speed point of view. However, our core Mac servers are Mac Minis in our server room. I thought, could we use a network volume mounted to the Mac Mini and shared via Server.app's Time Machine feature? Alternatively, would it be better if each Mac client mounted the Time Machine volume from the network and ran their own backups via their Time Machine clients. I had a quick look if this was doable but didn't get very far as I couldn't see the Time Machine share in my MacBook's Time Machine c

Hello hello! I'm curious where to buy laptops for international employees that can be enrolled in DEP and also be localized properly for the employee's country. In the past, we'd usually have one sourced at a nearby Apple store, but would prefer getting from a trusted vendor that will enroll the laptop in DEP. What do you use?

is the a way to update the host file using composer then package it as .pkg and add it to Casper Imaging. Thank you.

We have an iPad that has a 4-digit passcode that an unknown student has generously decided to test us with - and after attempting a DFU and clicking Restore iPad > Restore and Update > agreeing to iOS 9.2.1 update > and agreeing to terms > it errs out with: "There was a problem downloading the software for the iPad "iPad". You do not have permission to access the requested resource. Make sure your network settings are correct and your network connection is active, or try again later." What are our options for this iPad? If we call Apple support will they be able to clear the code or wipe the device? The iPad is not yet in our DEP/JSS program, so we are of course going to use this as incentive to convert this teacher's cart. Thanks!

Hi, Beware, potential stupid question ahead. We are in the final stages of selecting Casper as the Mac management tool for our environment. Currently we are a Windows and SCCM shop for our PCs. We would like to utilize the Casper NetBoot Imaging functionality. Right now we have DHCP set up to PXE boot to SCCM for Windows builds and a ton of IP-helpers on different subnets to forward DHCP requests.. am I going to have a conflict here? If I simply create a new vendor class on my MS DHCP server for Macs will that suffice? Would love to hear from those who are doing both Windows and Mac network builds on the best way to design/configure this.. any tips are appreciated!

Hi When I enroll a computer with DEP I need to go trough this steps: Run setup assistant (accept configuration, create account etc.) Reboot Wait until enrollment starts Why do I have to restart the computer? PreStage Enrollment looks like this: Use existing location information, if applicable --> checkedRequire Authentication --> uncheckedMake MDM Profile Mandatory --> checkedAllow MDM Profile Removal --> checkedAllow the user to remove the MDM profile --> checkedRestore --> checkedApple ID --> checkedTerms of Service --> checkedDiagnostics --> checkedRegistration --> checkedFilevault --> checked Anybody knows how to prevent this behaviour? Would like to have a workflow like this: Run setup assistant (accept configuration, create account etc.) Wait until enrollment starts Run all policies triggered with "Enrollment Complete" BestAnver

While distributing the latest version of VLC.app 2.2.1, the app is getting installed/ copied to "Macintosh HD" rather going to Applications.

Would you like to enroll in JAMF’s revamped Casper Suite beta program? JAMF Software beta programs give you a first look at new features and functionality in upcoming products. This also allows you to help provide feedback, be involved in beta discussions and help us improve the quality of the Casper Suite. During this beta program, you will have an opportunity to view and test the new management workflows to help support Apple and JAMF Software initiatives – including the ability to test new Apple Operating Systems in a development environment. We are going to start with a full scope of our next maintenance release of 9.73. This is a compiled list with a few known issues that is going through regression testing and anticipated to be available for general availability in the near future. After the public release, you will begin to see new features, such as El Capitan and iOS 9 support, layered into the next beta releases. If your organization is interested in enrolling into the b

Just checking this is expected: Any policy I create that ONLY has a custom trigger DOES NOT display the "LDAP GROUP" on the Scope Limitations section. In theory this means that anyone that knows a trigger name can invoke it and we can't limit it to, say, technicians. I assume this has something to do with SU required to invoke triggers (IIRC). -edit-However, if you set the LDAP GROUP limitation BEFORE you set it as customer trigger only, it appears to remain (although may not work).

Hi all,I have been trying to restore a master image from a supervised iOS 9 iPad onto the other iPads in that trolley (cart) using Configurator 2. I have followed https://discussions.apple.com/thread/7302890 and https://discussions.apple.com/thread/7282845 and can now get them set up as supervised iPads in configurator 2 but cannot enrol them into Casper. Using ether manual enroll from https://jss.myschool.edu:8443/enroll or by pushing out the enrollment profile in configurator 2 it get an error saying the iPad is not activated. I have tried a hard restart of the iPad (Holding down home and power buttons), restoring through configurator 1 & 2 and iTunes Mac & Windows but all produce the same result. Has anyone had success in doing this? and are there other suggestions that anyone thinks I should try? Many thanksRegardsGraeme

I'm trying to get kerberos printing working from OS X Lion (10.7.3). I followed the steps describe in this Apple article and it works fine as long as I manually do it on the client machine.http://support.apple.com/kb/HT4879 For each printer you wish to share using Kerberos: Click the printer name in the list. Choose "Set Default Options" from the "Administration" pop-up menu. Click "Policies". Choose "kerberos" from the "Operation Policy:" pop-up menu. Click "Set Default Options". But; These setting will not be captured when importing the printers to Casper Admin. Just wondering anyone successfully got Kerberos working automatically for their SMB print queues either via a script or policy?

Curious what others think - we're about to move to "Production" with our JSS implementation, and would appreciate input on the approach we're taking. We're fairly "patch-happy" in the sense of regular patching and tight requirements/deadlines for addressing vulnerabilities. We have separate "Test" and "Production" cycles.The "Test" cycle is fairly automated on the back-end. AutoPKGr checks for updates, packages them, updates the policies as needed, and then feeds them via Self Service. So far, working fairly smoothly. The test machines are scoped via a static group which I manage. Test users (and IT staff) know to check SS and install/test, and I have dashboards to monitor and make sure that the packages are actually installed. Once tested, a change control board votes to move to production. Production workflow:First, a smart group for production workstations which is basically "Computer group not a member of

The title says it all. I am running AutoDMG Version 1.5.4 (Build 412) and attempting to capture a 10.11.3 DMG file. Getting the below screen and this message. "Installer deprecated by 10.11.3 14D21" The installer being used is 10.11.2 (15C50) as the image above suggests. What's the best approach to get a 10.11.3 DMG? I've checked this thread and the combo update provided by Apple will not work for this application.

Hi JSS 9.81, using for Mac OSX only. I have a generic script that accepts parameters, so it can be reused.I have a policy that calls this script, and passes the parameters accordingly. This works fine... The problem is when I want to call the script 3 times, with different parameters, from the same policy. > Create New Policy> Add Script > Select Script "myscript" > add a string to a parameter> Add Script > Select Script "myscript" > add a [different] string to a parameter> Save It does not save all the parameters. Instead, the topmost script in the list has it's parameters copied to all other scripts in the list. Is this expected?

Hi All, I am working to make Apps Made by Apple available to my students without paying for them. In particular Pages, Numbers, Keynote, iMovie and Garage Band. Based on the criteria presented here: https://support.apple.com/en-us/HT202794 these apps should be free to us. However we currently have the App Store disabled, making the access & installation of these apps difficult. When I try to acquire them from JSS or our VPP iTunes account - there is a cost associated with them. If I move ahead and add them like a free app (Mobile Devices>Apps) and mark them as "Free" and assign them to a device, they do show up in Self Service however when I attempt to install, I get a notice to apply the redemption code in the Management tab for that device. I'm wondering if anyone else has run into this. At this point our school wants to keep the App Store disabled (for a variety of reasons). Mark MurrayTech DirectorPA Leadership Charter School