Hey guys, I'm wondering if anyone found a solution for this yet.We have environments where Xcode needs to be run without granting admin privileges. We used to manage this with creating a custom Xcode installer. The contents are the following: Xcode downloaded from the developer portal CLI tools downloaded from the developer portal enable devtoolsecurity to make Xcode work without being an admin a postinstall script which runs the following actions: Agree license agreement, install the "additional required components" that Xcode wants to install when first launched #!/bin/sh defaults write /Library/Preferences/com.apple.dt.Xcode.plist IDELastGMLicenseAgreedTo -string "EA1327" defaults write /Library/Preferences/com.apple.dt.Xcode.plist IDEXcodeVersionForAgreedToGMLicense -string "7.2" installer -pkg /Applications/Xcode.app/Contents/Resources/Packages/MobileDevice.pkg -target / installer -pkg /Applications/Xcode.app/Contents/Resources/Packages/Mob

Is there a way to search for a VPN Configuration profile, if I know the name? Basically, I need to find the iPads with this VPN configuration installed, and delete it manually. Thanks.

This feels like i'm missing something simple but I can't put my finger on it. I'm trying to create a local hidden admin account via a policy. The directory we will say is /private/var/USERNAME. With that said, it's not creating the account it's returning a policy error. No issue creating non /private accounts. Any thoughts? I currently have to deploy a hidden user with a directory and some key files. Yes I could probably do it with a script BUT I can't due to security reasons with the password. So the end results was to push the admin account then push the directory folders to it later.

I'm looking for a little guidance on the new firmware password binary. Even Google can't provide much more than the man page: Usage: firmwarepasswd [OPTION] ? Show usage -h Show usage -setpasswd Set a firmware password. You will be promted for passwords as needed. NOTE: if this is the first password set, and no mode is in place, the mode will automatically be set to "command" -setmode [mode] Set mode to: "command" - password required to change boot disk "full" - password required on all startups NOTE: cannot set a mode without having set a password -mode Prints out the current mode setting -check Prints out whether there is / i

Hello I'm just wondering if there is an possibility to modify some XML or .conf file to replace wrong LDAP servers. Once my corporate colleagues turned off old domain controllers I lost ability to access JSS website due to LDAP connection error. According to this I'm not able to make a change via JSS website. Therefore, I am curious if there is an option to change configurations via XML, .conf or JAVA settings directly on JSS server. My JSS is working on CentOS 6.6, JSS is in ver 9.65 I would be grateful for any suggestions!

We installed a new SSL Wildcard certificate to our JSS on Monday. We've just realized that the iPads are no longer checking in. Any ideas what might be causing this? We used this method to import the certificate: https://jamfnation.jamfsoftware.com/article.html?id=138 Don't know too much about certificates but I guess the certificate needs to be installed on the iPad?

HI All, I know this has been mentioned several times but after trying all the suggestions it still isn't working 10.10.4 clientsCurrently I can get machine based certs from AD fine using profile managerWhen I add a network payload configured :Network Interface : EthernetPROTOCOLSEAP type: TTLS - PEAP, this is taken from when I manually connect as a userUsername and PW blank, although I have tried many things including: %AD_ComputerID%, host/ Machine MacComputer(AD Template) all in the UN field and leaving PW blankIdentity Certificate : AD Certificate pre configured and verified workingInner Auth : MSCHAPv2Outer Identity BlankTRUSTInstalled every possible certificate I can get my hands on including, Domain, Root, 3 radius serverstrusted Server Certificate names: I added each of the certificate names here separately, then added all of them together, left it blank. Hopefully someone has some ideas on how I can get this working. I have confirmed with our network team that I should

Hi Guys, Anyone tried putting the dmg downloaded from Evernote website into self service. I tried this but its at the end of the installation it just gets stuck and does not complete the installation. Is there a better to do this? Thanks in advance.

Hello, I am working on an integration between casper and our IT Asset management system (servicenow).I was able to query the computer reports resource url to pull in data, this is working great! We were planning on using the Serial Number as the unique identifier for the system to recognize whether to create a new record or update a record. However, I noticed that the Serial Number is blank for a subset of computers. Question: Will the JSS Computer ID be sufficient as a truly unique identifier across the casper system? Also, does the Computer ID get re-generated when a computer is re-imaged? That is the current issue we are having with the SCCM integration, basically the “unique” ID in SCCM is re-generated any time the computer is imaged, so this means duplicates are created after a computer is re-imaged. Would anyone have any ideas on how to solve the unique ID issue? Thanks!

Hello, What account role and permissions are required for an account to access the "Computer Inventory Collection" API resource url? I was provided with an account that has access to many other resource urls already, but not that one. As an example, I was able to retrieve a response for the GET /computers resource (and many other resource urls worked well). Status code 200 success. ../JSSResource/computers However, when attempting to retrieve a GET response to /computerinventorycollection the response code is 401 Unauthorized. ../JSSResource/computerinventorycollection I will need API access to the computer inventory collection resource to pull in asset data into ServiceNow. As I was able to retrieve a response with the /computers URL using the same credentials so perhaps the issue must be with that account permissions. (I'm not a casper admin so I don't know anything else about the account that was provided to me and will need to contact them directly for

Hi all, I have several mac in my environment with a bit broken self service application (pics below). As you see it looks a bit off. Also you can't run anything from it, you click on items but nothing happens and in JSS policy logs for that machine there isn't any trace that it tried to run. Maybe someone had such issue and know a quick fix for it. I'm running JSS 9.72 and machines are on OS X 10.10.5

All, Trying to create a package for the new Citrix Receiver. Ran it through the normal snapshot Composer setup and get the attached. Citrix Receiver App in Applications folder has a line thru it. Any ideas why? App shows fine in the Applications folder on my build machine. Will this affect my Receiver package?

Hello all, I am having an issue similar to this: https://jamfnation.jamfsoftware.com/discussion.html?id=17622 I am using autodmg 1.54 to build a never booted dmg of 10.11.1 for re-imaging with El Capitan.I have a number of pkgs in my Casper imaging config that are installing on reboot. However, when it reboots it is going to the iCloud login prompt instead of the jamfhelper ‘busy imaging’ curtain while it installs everything. With the Adobe suite, that means it can sit there for a long time like that, which is potentially confusing to our other techs. I think I had issues similar to this in Yosemite but used a payload-free-pig to kick off jamfhelper on reboot which superseded any other nonsense beneath the curtain. In El Capitan when I do that, my jamfhelper curtain hangs the reboot post first-run. I have a 1st run script that runs on reboot via Casper as well. In it I have embedded items from @rtrouton 's script to suppress the iCloud prompt, which works great subsequent

Hello All, I am working on a script to curl something but we are using a .pac file,is this possible? If so anyone know how to?

We have a Mac computer that we use as an image master that has not been registered in the JSS console. We would like to keep it free of any configuration and installation of Casper services. The issue with this is that once we use the current image master for something else, we will need to deploy the image master to a different machine to work on it, effectively making that machine register in JSS. My Question is 3 fold:1. Do we need to be concerned about keeping this image master absolutely quarantined from JSS/Casper.2. If we should, is there acceptable ways of 'cleaning' it like 'sudo jamf removemdmprofile'?3. Or is there some trickery that casper imaging has that I am not aware of that can achieve this (I'm mostly a newbie, can you tell?) Thanks

This is the strangest thing. I've done no real changes to my profiles. And the "Log out after .." isn't even a profile I can set. This has been seen on 10.9.x and 10.10.x machines (there are too few 10.11.x machines in our environment at this moment to comment). We have a small (thankfully at this moment) set of users that suddenly acquired having "Log out after [ ] .." checked in the Security & Privacy -> Advanced. And of course if they uncheck it. It checks it again. As if it is being managed. I can make it go away by having the user delete the MDM profile, and having them log out and log back in, but this is only a temporary and rather inelegant solution. Has anyone seen this?

Situation: we are right in the middle of rolling out JAMF enrollment to existing mac users in our environment. We rant into something yesterday. A local user has a account name that is the same as his network account name. When domain joined, he cannot log on to the network account because it’s seeing his local account with the same name. I looked around on the web and can’t find anything that’s not super intensive with perms and the home directory…. Does anyone have any thoughts on this? Thanks in advance!

So set the test machine in the scope, we have no other managed preference setting the wallpaper, I selected the Desktop Picture tab and then changed to the following - BackgroundBackground picture information.LevelLevel at which to apply the preference Image Pathcom.apple.desktop ImageFilePathPath of image file. For example , "/Library/Desktop Pictures/Aqua Blue.jpg." Save and then log into the machine but it doesn't actually change? Tried it on a few machines and nothing? Any Ideas? Thanks

I am using the following settings:Mobile Device Management -> App Updates -> update all apps automaticaly on 4:30 a.m. In each app i used the force update hook. Now i reached a interesting behavior: This installation is used in a school enviroment so games are not allowed on the iPads. The students using theyre own Apple IDs and also can buy apps beside the self service apps. Mostly games as you can mention. Now, the administrative teacher deletes the bought games (which will not provided by Casper Suite) and held the iPads locked over night. At the next morning all apps, also the deleted games are installed back again. Could it be that the settings above force the Apple ID/iPad/AppStore to update all content bought on this Apple ID and reinstall even deleted content?

Hi All As above, does anybody know of a way I can remotely uncheck the above option on our macs? Its in the AD bind section, they are all bound to our AD but i would like to uncheck this without going to every machine to do so. Thank you Bill

So I just made a new netboot image for casper imaging and each time I've tried to image a machine it seems to time out. Almost like its losing connection with the netboot server in the middle of the imaging process. Anyone else seen this? Gabe ShackneyPrinceton Public Schools

I created a Configuration Profiles > Password Policy But this doesn't apply on El Capitan (can't regress), I get this error: The profile “FTIFF - Password Policy (7A3CE275-B25B-4C13-81F9-F2680A0FC930:7A3CE275-B25B-4C13-81F9-F2680A0FC930)” could not be installed due to an unexpected error. <ProfileDomainPluginController:101> Here's my XML: <key>PayloadType</key> <string>com.apple.mobiledevice.passwordpolicy</string> <key>PayloadOrganization</key> <string>FTIFF</string> <key>PayloadIÇQdentifier</key> <string>3776AE79-8054-449D-94AA-6E94F9343D2E</string> <key>PayloadDisplayName</key> <string>Passcode</string> <key>PayloadDescription</key> <string/> <key>PayloadVersion</key> <integer>1</integer> <key>PayloadEnabled</key> <true/> <key>allowSimple</key> <false/> <key>forcePIN</key> <tr

I have been using the same password for my management accounts for a couple of years. The windows desktops will soon be getting randomly assigned passwords that are accessible via Active Directory with a schema mod. What are the implications of setting the policy to generate the management password? Can I see the management password somewhere after it has been set? I'd assume this is generated on a per client basis? I'm also looking at using filevault2 full disk encryption, does this password change policy mess with that at all? Thank you,Ken Edgar

Hello, we are taking down WGM at one of our sites that is utilizing OD (normally we use AD which helps us out by mounting the network home on the dock). I am looking for the simplest way to have an alias on the desktop or dock to their OD Server Home. I have been trying to script the desktop shortcut by using *-ln -s afp://sharename.site.org/$USERS ~/Desktop This is generating a plain white alias file that tells me the original item cannot be found and the share is mounted when I am running it. I'm just looking for the easiest way to have users manually save their work as opposed to WGM running Home Syncing. If what I am trying to attempt is not the best route, I'm open to any and all options. Thanks Everyone.

Currently I use SMB but want to switch to http/https. I am using a Mac running 10.10 Do I have to switch off the SMB shares on the 10.10? What settings do need setup on the 10.10 to be ready for this?