We originally had a software update server running inside our school but no longer want to use it. In JSS how do I set everything to use apples SUS again? Thanks

This will sound very elementary and hoping it is for someone, but for the life of me, I cannot figure out how to display the Computer Name (or hostname) at the Mac OS X 10.8 login window. You would think this would be a simple matter of going to the Management tab under Computer Management, going to Configuration Profiles, creating a profile with a Login Window payload, setting the profile to "Computer Level", and under Heading, choosing Name. Unfortunately, this does NOT work. I need this info displayed as our users are trained to report trouble tickets using the Computer Name that shows at the login window. Under 10.6, this worked well, but 10.8, not so much. Anyway, if someone knows how to do this simply (preferably with a Configuration Profile), that would be awesome. Thanks,blackholemac

When a user picks a self service policy they see an 'install' button ( or whatever it's named'), and at the top right a small X to exit the policy if they decide to 'cancel' installing that self service policy. On some computers (laptops) that X is clearly visible while on other computers (iMacs) it is cutoff and barely visible, ( I see it because I know it's there) and am able to click the little remaining visible X to cancel the policy. Is it possible to also have a second button that is next to the 'install' button called 'cancel'?

we have been having some issues where the configuration profile for the wifi settings are getting corrupted and iOS devices have to have the profile removed and re-applied. its a simple enough thing to work around. I've set the wifi profile to exclude a certain group. all one has to do is connect to an open wifi network, (i use our guest network) add the problem device to the group to remove the profile, wait a couple seconds, and then remove it from the group to have the profile re-apply. simple enough, but something a non-jss-admin user is capable of. my goal is to put a script into self service that simply prompts for a serial number, then automatically adds and then removes it from the group. i haven't used the api before and am not sure where to start thanks Joe

I have a DEP iPad that we are moving from one school to another. In the Pre-Stage Enrollment tab, I've removed the iPad (in the first screenshot), but in the Global Management > DEP > Token menu, it's still showing up at Pre-Staged to the school (the second screenshot). Is there a way to force-remove the device so that we can set it up? It is now stuck in the configuration process with the message "Could not connect to the server." Any thoughts?Thanks!

We can use this to get local accounts: $ dscl /Local/Default -list /Users UniqueID | awk '$2 >= 100 { print $1 }' But it returns some system accounts. How do we exclude these (they begin with underscore)? Thanks,Don

We are mostly an OS X laptop site. We are starting to acquire enough iOS devices to think about managing them with Casper. Do I need Configurator for anything? Can I get away with using Casper for all our management needs? Does anyone have enough time with Config 2 to be able to say if that would be the better place to be even if Casper could do it all. Thanks.

How do i go about changing it from /users/admin/.cups is there a variable I can put in that would change "admin" to current user?

I am a newbie to both Casper and Macs in general and am trying to create my Casper image workflows but I have hit an issue with AD binding (I require joining all Macs to a Windows network). In Casper Admin there is an item called 'AD' of the type 'Built-In AD' that is un-configurable and I can't find it in the JSS at all. Either way whatever it is (it may have been created by or Jumpstart trainer) it is not binding AD during the imaging process. I have also looked through policies to see where I might bind AD and it doesn't seem obvious to me what I might set. I have done quite a bit of research and am at the point of needing some technical direction. Please assume I'm a rank beginner with this stuff...because I am! Thanks :)

So this morning I had a request to update Firefox from v39 to the latest v42, fairly simple process historically. Copy in two files into the relevant directories of the firefox.app bundle, drop into composer and hey presto we have updates disabled, import bookmarks prompt disabled etc etc. Except when I now copy the same files into the same directories I used for v39 the application now fails to launch, OS X says its damaged and should be moved to the trash. Anyone else seeing this issue?

I have an iMac I use as my main admin computer and a laptop that I use with Composer to create pkgs for installation. I use the iMac with Casper Admin to organize all our pkgs and to create configurations. When I am on the laptop I can connect to the Casper Share without problems and I can download a new .dmg to Casper Admin just fine. When I am on the iMac I get this when I try to connect to the Casper Share./Users/jostobs/Desktop/2e108f5fec354697b8d10afc6afe8763 Anyone got any ideas on what is wrong on the admin machine? Thanks loads.

Hi, I've logged a support ticket about this but thought it worth mentioning here in case anyone else has had a similar issue or was checking for potential issues before proceeding with their upgrade. I upgraded my JSS to v9.81 this morning and all seemed okay until the final step of the install process when the Tomcat service starts, the installer seemed to crash at this point. I checked the install.log and it showed that the update to 9.81 had been successful so I manually started the Tomcat service and went through my post upgrade checks, all seemed well at this point. Just over an hour later I noticed that the Tomcat service had crashed and failed to restart automatically. I restarted the host server but the service once again failed to start automatically or manually and was crashing with the event logs showing "service specific error code 4". I've rolled back to 9.8 and am waiting to hear from JAMF Support before attempting the upgrade again.

I just noticed when going into Disk Utility that the Hard Drive Disk is being named Macintosh HD and so is the Volume. These are on computers that have been imaged via Casper Imaging. Why is this happening?I would rather have the 'disk' labeled; 251 GB APPLE SSD TS25...... why is the disk name changing to 'Macintosh HD' ?how do i get it back to be labeled as the HD size/type like how it normally is from factory? Macintosh HD (disk) Macintosh HD (volume)

I have some self service printer MAP policies, and matching 'UNMAP' policies all in Self Service. The MAP policies are setup for smart group of 10.9/10.10 computers The UNMAP policies are setup for smart group, computers with mapped printers associated with whatever printer is mapped. so if Computer1 has printer1 installed, the smart group 'printer1 installed' will have Computer1 in it, thus self service for Computer1 will have the 'UNMAP' 'printer1' available. Once 'printer1' gets installed it disappears from Self Service (execution once per computer), same thing for 'unmap policy'. these are setup as 'Once Per Computer', so if a user 'unmaps' a printer and later on wants to re-add that printer, is there a way for that printer policy to be available in Self Service without me having to Flush the policy on that computer, same thing for the unmaps policy ? I don't want to set the policies

Following an upgrade to our JSS, a Filevault policy was pushed down to a bunch of machines that shouldn't have it. Now, after every log out or restart they are asking for a password to enable filevault. I have removed them from the policy but they are still trying to enable filevault. Is there any way to remove the policy from the machines and stop this from happening?

Is anyone else having trouble connecting to free wifi at the Guthrie? My colleague and I each have 3 devices and none of them will connect. Is the wifi infrastructure here really so insufficient, or are we both doing something wrong?

I have my Casper Test server OFF. I turn on on enrolled client computer and then turn on the Casper Test server, the client server does not check-in, i do a jamf checkjssconnection and get no connection, but client is able to ping server. . I then restart the client computer and now the client sees the Casper test server and checks-in as intended. Should the enrolled client be able to see the casper server regardless of the server being turned on after the client ?

I have a script that I'm running that installs new certificates into keychain. The only issue I'm running into is that it prompts the user for local admin credentials when we remove the old configuration profile and when it adds the new configuration profile to save the certificate into the keychain. The script has to run as the local user so that it downloads the certificates as the user. Anyone know of a way to do this? Thanks! find current user logged in currentuser=stat -f "%Su" /dev/console profile1=su "$currentuser" -c "/usr/bin/profiles -Lv | grep LC-802-1x-User"profile2=echo $profile1 | awk '{print $4}'echo $profilename if [[ $profile2 == "LC-802-1x-User" ]]; then su "$currentuser" -c "/usr/bin/profiles -R -p 04D1878B-BD77-4593-BAA4-4EB5AAE99304" else echo profile not found fi run profiles command as current logged in user su "$currentuser" -c "/usr/bin/profiles -I

Hello, Firstly- please excuse my noobishness. I recently got CCT'd, and I'm mostly a lurker so not used to posting on forums in general. That in mind: Our institution has decided that, as a fallback, all administrative staff should be able to connect to our network via Ethernet. With that in mind we just bought a whole bunch of USB3 -> Ethernet adapters (we mostly run MacBook Airs). What I'm wondering: is it possible to get the properly configured adapter settings from one laptop and add it to all administrator laptops via a script? Or something of similar effect? I want to do a touchless install/configuration. Any suggestions are appreciated. Thanks in advance! The adapter:- Linksys USB3GIGv1- Requires a *.pkg install................................................................done- Requires usual 'Network Preferences' configuration....................TBD (what I'm asking about)

Hello, Once we upgraded to Yosemite for the school year, our Energy Savings Profile stopped working. I confirmed with the logs that it wakes up in the morning, but does not shut down. When I go to System Preferences to confirm that the profile being pushed was received on the client end, I see the profile. I tried changing the settings around, and see that the Mac gets the change, but it still does not shut down. Our Macs are on 10.10.3 and up, and we are on JSS 9.63.

Hi all, I'm looking into enrolling our company into the DEP program, but current availability being what it is we've got some things to figure out. At current we leverage a layering approach enrolling the Mac and kicking off a configuration workflow by way of our "compliance package" that installs on top of the native OS. I'd like to move us away from the compliance package option and towards a touchless DEP-type of enrollment experience. The biggest hurdle so far is lack of DEP in countries like South Africa or India. Has anyone here adopted DEP, but had similar hurdles with lack of availability in some countries where you have offices? If so, how did you solve this, if at all? My current thought is that we'll have to adopt a hybrid approach of DEP where available and the compliance package where DEP is unavailable, but I'm eager to hear other ideas.

Hi JAMFNation! I've recently created an Adobe Package using the Adobe Packager tools, pretty standard. Using a post install script by rmaldon, link is here if necessary. [https://jamfnation.jamfsoftware.com/discussion.html?id=13232](script listed here by the user rmaldon.) Works perfectly, except for the build still has our Adobe Admin account signed in (as pictured). Anyone have a suggestion on how I can remove this sign in? Thank you greatly!R

We have the Yosemite installer blocked but are now looking for a way to block the entire notification all together, as users are still clicking on it and downloading it only to find out it's blocked. Anyone know how to suppress the upgrade notification????

User has a personal device and needs access to a district purchased app. We do not allow BYOD enrollments into JSS. Can I just make a manual user object with his email address in JSS and send out the invite and assign the app? Or is enrollment of a device a requirement?

So, in iOS9 it is possible to install apps on iOS devices without Apple IDs. I was wondering how the Self Service app would work that? Currently we use DEP, and then once the setup screen is completed, it prompts to have an AppleID entered before installing the self service app. But if I were to assign apps to devices in the JSS, rather than an Apple ID, how would I get Self Service installed? Anyone tried to do this?Thanks