I am seeing the 30 day notification indicator "VPP Account...expiring in 30 days" in our JSS. When I go to our Apple VPP portal and click "Download Token" I get a '.vpptoken' file. So far so good. But when I upload that token to the JSS our VPP expiration date is unchanged, still 30 days away. I assumed it would be similar to renewing a Push Notification Certificate, and create a new expiration date one year from today, but it doesn't seem to work that way. Maybe I need to wait until the token has actually expired, and then download a new one from Apple? That seems kind of lame. Does anyone have any experience renewing their VPP token? This is on Casper 9.82. Thanks,-Dan

I wanted to make a plugin where our users can see what type of things Casper is doing (our culture makes it difficult for people to accept Casper) . I made this script here: !/bin/bash mkdir /Library/Scripts/Shopify more /var/log/jamf.log | grep "Executing|Installing|Updating|Adding|Existing|Removing|Deleting" | sed s/jamf[[0-9]*]://g 2>&1 > /Library/Scripts/Shopify/Whatran.txt Made the plugin: And then made a policy to run the script ongoing to update the file. Unfortunately the next time it runs the policy the txt is up to date but my self service plugin shows a blank page. Oddly though, when I run a sudo jamf policy in terminal the log show up fine in my self service plugin. All this command is doing is running that ongoing policy... so I don't understand why it wouldn't just work without this. Thoughts?

I am trying to build a policy that installs Microsoft Office 2016, then have it install the latest Microsoft Office 2016 update immediately following. I have tried adding "sudo jamf policy -id 123" as a script with the "after" trigger and that didn't work. I also tried adding that same line into the "Execute Command" portion of the Files and Processes configuration. That also did not work. Which leads me to my question. Is there a way to accomplish what I am trying to do without having to make use of a smart group? Thanks.

The subject line says it all, unfortunately. I just received a new iMac with a Fusion drive split by a 1.0TB SATA drive and 24.0GB SSD. I followed the instructions on this post as I've done in the past but couldn't seem to get it to work. I believe the issue here is with the size of the SSD being only 24GB. 3. Recreate the Fusion drive volume To do so, execute the following command diskutil cs createVolume <Logical Volume Group ID> JHFS+ "Macintosh HD" <Capacity of the Fusion drive>. Capacity must be in XXX.Xg for volumes less than 999.99GB in size, or X.Xt for volumes 1.0TB or greater The combined volume size for my iMac is 1.024TB but as the above section details, I must follow the X.Xt format which would force me to specify 1.0t. I've not only tried formatting the drive as 1.0t and 1.1t but regardless of which size is specified, a NetBoot to my AutoCasperNBI does not successfully launch. No other clients in the network are having this issue and the network connection

ok. so here's me situation. i need for a teacher to be able to go into self service on their laptop and run a policy that asks for a student iPad serial number and then does an update inventory on that device. it looks like i can use the api to do the update inventory, but only by device id. i need the line/lines of code to put in a serial number and get a device id thanks Joe

I've reached out to support, but in the meantime I'll present the issue to the Nation. I'm experiencing an issue where none of my Casper applications can communicate properly with the JSS, even when logging in with the local account vs AD account. Casper Remote reports "Could not parse data from JSS" and Casper Admin reports "The server located at https://JSS:8443/ did not respond with valid information. Please check the server information and try again." This is after an upgrade from 8.71 to 9.1 and I am running the 9.1 applications locally on my computer.

Anyone with a hosted JSS seeing issues where they cannot edit certain types of objects such as polices or configuration profiles. ? I can open a policy and see it's current configuration but when i click the edit button I get the spinning wheel and then the page goes blank where the configuration should be. I've checked and it's not my permissions in the JSS as I have all the correct rights, I've also had a colleague check and he also has the same rights, is experiencing the same issue. I can't see anything on the JAMF site about service status etc. Thanks in advance.

Maybe I am crazy, however, it seems that when I upload anything to my JDS using Casper Admin (version 9.81) the package shows up in the JSS but the corresponding policies fail. Once Casper Admin is closed then reopened it shows the pkg as missing. This issue only recently popped up, has anyone else seen similar issues or have a fix? Error: the package (blahblah.pkg) could not be found. Thanks!

Is it my imagination or can we no longer get the SMART status of internal drives that are partitioned via CoreStorage (FileVault2 & 10.10.5)? My boss wants to be a little proactive for finding dying drives and I knew diskutil could return the SMART status but it doesn't appear to be an option even in Disk Utility.app. It looks like it is reported for non CoreStorage drives though. If this is the case, does anyone have suggestions for determining the SMART status on drives now?

I have a couple of scripts that I'm looking to tidy up a bit and I've noticed that with El Capitan's release Apple isn't super fond of folks adding folders where the user doesn't normally have access to. Currently, I'll drop files into /private/var/tmp/[FolderName] for a script to use. This is mostly when a piece of software doesn't play nice with Composer so I'll drop the pkg installer into a folder in tmp and run command line against the installer. It works great but are there any better locations or suggestions that you guys might have? Not so much on the process flow but rather where I could/should drop my temp files.

Is anyone using a script to unlock the DVD region so that a non-admin that opens the DVD player app for the first time can set the region? This script is no longer supported with Mavericks.

Hello All, Since attending the JUNC, I was wondering if anyone knew how IBM was able to have user's log-in with network account credentials and create the first account after the DEP notification?

I realize El Capitan is a game changer, but how does this affect creating new images? I just got a brand new MBP with 10.11 pre-installed on it. First I tried to capture a virgin image of it by booting up from an external drive running 10.10.5 and Casper tool 9.81 before I did anything else to it. When I launched Composer and chose OS Package, I picked the Macintosh HD and Recovery HD, I picked a location on the external drive to save the image (which I've done many times before with 10.9 and 10.10) and then it gave an error saying I don't have permission. I tried many times and even chose to only do Macintosh HD, but it kept telling me I don't have permission. Permission to do WHAT? I gave up on that so I rebooted it from its internal drive. I created a local admin account and setup ssh and ARD permissions and made sure I updated it to 10.11.1. After that I booted up from the external drive again and Composer STILL wouldn't let me make an image of the drive. Wh

Hi all, Help. I'm trying to convert output from "date" command to epoch time. So far I got this: date –j –f "%a %d %b %Y %H:%M:%S %Z" “Fri 3 Jan 2014 17:13:46 GMT” +"%s" date: illegal time format usage: date [-jnu] [-d dst] [-r seconds] [-t west] [-v[+|-]val[ymwdHMS]] ... [-f fmt date | [[[mm]dd]HH]MM[[cc]yy][.ss]] [+format] Can someone point me in the right direction?

Where is the Toast 12 Titanium license file stored? The Rox.dat file doesn't seem to exist. I searched across the entire Mac, after the volume license key was entered, including invisibles, including bundle contents, etc., and came up dry. https://jamfnation.jamfsoftware.com/viewProductFile.html?fid=590 Is Toast 12 licensed some other way? PS, Toast stinks...not just because it's useless bloatware (hello Burn.app!), but also because we have to go through this fiasco to deploy it. Roxio should just sell it to Microsoft so they can stick a dagger in it. TIA,Don

A user came to me with a new MacBook Air running El Capitan. My quickadd package created in recon 9.65 fails with the error below."The Installation failed. The installer could not install the software. The installer could not install the software because there was no software found to install." What does this even mean!?I've tried re-creating the quickadd package, but i still get the same error. Anyone else experienced this?

Trying to test out a new approach to software pushes and cache packages. Ideally, I'd like to then have a policy that runs weekly and simply installs all cached, but since I'm putting up warnings to users, I obviously don't want to bother the user if the machine does not have any pending cached packages. I can use the criteria "Cached Packages" and list a specific value, but is there any way to simply check to see if the Waiting Room directory is empty? Am I going to need to create another extension attribute, or is there a better approach? I tried "Cached packages <does not have> <blank> " but that doesn't seem to work. Taking this approach would let me cache packages without having to change deadlines on each and every one of them (we tend to be a little "patch-happy" around here), and just change the deadline on the one "install cached" policy on a regular basis.

Does anyone know how I can get more info on the JAMF APIs that are listed on the JAMF site here: http://www.jamfsoftware.com/developer-resources/ Calling JAMF has some folks claiming they don't know anything about the APIs, and others claiming I need to contact my JSS provider (a third-party cloud-hosted solution). I'd just like some documentation at the very least, though access to the code would also be nice to see.

I am trying out some things and I want to start from a totally clean state. What is the best way to remove an asset from the JSS and remove all traces of Casper from that asset. Thanks loads.

Hi guys, I'm tying to install the JDS-Linux-Installer-9.82.run on a fresh Ubuntu 14.04 LTS server in our vCenter, but I'm getting an error after providing the installer with the details it requests. The error displayed in the terminal is:error: (35) - gnutls_handshake() failed: A TLS fatal alert has been received. The contents of /usr/local/jds/logs/jamf.log is: 2016-01-13 13:59:14,313 INFO Creating configuration file for https://ourjss.com:8443/2016-01-13 13:59:14,809 INFO Starting Enrollment2016-01-13 13:59:15,053 ERROR Communication error with the JSS 2016-01-13 13:59:15,054 ERROR (35, 'gnutls_handshake() failed: A TLS fatal alert has been received.')Traceback (most recent call last): File "/root/bamboo-agent-home/xml-data/build-dir/REL-ACC-RELCASJDSUBUNTU/build/pyi.linux2/jamfds/out00-PYZ.pyz/jss_comm", line 84, in _performerror: (35, 'gnutls_handshake() failed: A TLS fatal alert has been received.') Does anyone have any insight into

I am planning to Install Self Service Using a Policy, so I am following the steps shown here for version 9.0 or later: https://jamfnation.jamfsoftware.com/article.html?id=316 -- I download and decompress the self server.tar-- take a snapshot with Composer-- drag the 'self server.app' to the applications folder-- I double click self service in the app folder to test it out (before creating package source) and get 'SELF SERVICE HAS ENCOUNTERED A PROBLEM self service was unable to locate the necessary preferences' Am I doing this correctly ?-- I click create package source' and then delete the 'user' folder it created but keep the 'Applications' folder-- I 'Build as .pkg' and save it to desktop as 'selfservice.pkg' now I have the selfservice.pkg to use, have not deployed it to any computers because I am confused with the 'self service has encountered a problem' message anybody have an explanation? thanks

I already have Self Service policies setup for Yosemite/El Capitan. now that these are up to 10.10.5 & 10.11.1 if I download the current installer.app for each will each .app be up to date with each OS's updates ? or will they be the base install with no updates applied ? 10.10 & 10.11 after a person runs the self service policy, afterwards the OS gets prompted to be updated. So If this can be avoided by downloading the current installer.app it will be alread at 10.10.5 or 10.11.1 ???

Hello everyone, Currently testing moving my JSS to a new box, with a new DNS and I would like to update the built in CA. Old JSS: jss.domain.extra.com:8443New JSS: casper.domain.com:8443 TomCat has been updated to reflect casper.domain.com I currently have the new JSS running (testing it) and when I go to Global Management > PKI > Built in CA > Download CA Certificate I get the old CA (jss.domain.extra.com). How can I update that? I searched around on jamf nation and found no solutions. Thanks!

I have a group of computers in a remote office that I need to pull the DNS info from. However, the admin at that location renamed the default interface from "Ethernet" to "LAN." This is due to having also a Metadata interface as well so each is distinguishable. I wrote the following based off another default DNS Extension Attribute that was pre installed on our JSS. #!/bin/sh echo "<result>`/usr/sbin/networksetup -getdnsservers LAN 2>&1`</result>" This works when testing on one of the machines remotely. However when I make a smart group and apply "DNS resolved IS NOT <new DNS IP>" at Location I still retrieve all the machines including a few I manually changed for testing purposes. When viewing Extension Attributes in a machines inventory I see no data output. Curious what I'm missing.. any insight or help is greatly appreciated!

Just curious if it is possible and if anyone has a script that queries JSS for the assigned users name and names the computer to match? I'm trying to set my workflow hands off. The users will go through the setup process and create their own accounts. While i'll try to steer them in the right direction. There is no guarantee they won't get crafty and put something different for the full name or username. Since my content filter reports based on username and computer name, I wanted at least one of those to be something I control. Thanks!