I am now seeing this in a policies log after it runs, what is going on ? policy that adds a driver/printer in the same single policy. Custom event calls policy that installs driver and then a couple commands that modifies permissions. Driver installs successfully (as seen in driver install policy log), in the add printer log, I see the 'Inventory will be updated when all queued actions in Self Service are complete' I have other printer policies setup the same way and do not get this 'Inventory will be updated when all queued actions in Self Service are complete'. anybody else get this? not sure if it is a concern or not

in order to get a xerox stapling feature to work so users can print and have the xerox staple pages together (via xerox features), I have to install a 10.6 xerox driver. (i am running no computer lower than 10.10) When I manually ran the driver (to setup the printer for casper admin upload), i get an initial prompt from 'gatekeeper' for unidentified developer, so I just right click open and accept it to install. It went through its installation process and finishes. When i print for the first time i receive; The software for the printer was installed incorrectly. Would you like it to be repaired? I accept it to be 'repaired', enter admin privileges, repair takes place, and now i can print. now the printer has been uploaded, driver uploaded also. I created a self service policy and run it, the printer gets added. The policy log shows that the driver installed successfully on the client computer. I then print a document and get the same; "The software f

Hi all, I've got a bean counter wanting to add firewalls, switches etc. as Peripheral Types. And she wants the device admin credentials added to the Peripheral Types. My question is whether this is secure. Ugn I wish I hadn't opened my mouth about Peripheral Types!

I'm trying to setup 802.1X Wireless using Configuration Profiles and machine-based auth using root CA certificates. I decided to create a new Certificate Template in AD-CS based on the one we use for our Windows laptops, but this time with the ‘Service Principal Name’ option checked rather than ‘DNS Name’. I followed the advice here (see last post) Clients receive a certificate just fine using the profile I created and I see an X509 cert in the Keychain. However, the system still doesn’t connect to our 802.1X network - when looking at the RADIUS server logs, I see connection rejections and suspect this might be because the user name presented is still in the form DOMAINhostname$, whereas I believe it should be host/fqdn, as that’s what I see on successful connections from Windows laptops. I was hoping the new template would ensure the username is presented in the correct form, does anybody know what I'm missing?

Looking for a new script that I can run on log in to update username status in Casper. Thanks

We were running JSS 9.65 on a Windows server until I decided to upgrade to 9.81 in preparation for El Capitan. I upgraded. It seemed to go ok. When it finished I logged in to make sure everything looked OK and then ran jamf policy on my Mac to get the new binary. I ran Self Service to make sure that worked because of some of the reports I saw here. Self Service works fine. I then tried to test Casper Admin and it fails to replicate to any of our distribution points. I get the dreaded "Server could not be mounted" error. However, /Volumes does list the share point as mounted: CasperShare, CasperShare 1, CasperShare 2... I originally had this problem when I upgraded from 9.62 to 9.65 but I worked around it by substituting the server FQDNs with IP addresses to get around the *@#&$ kerberos problem that caused it. I would also sometimes use Casper Admin 9.62 since it never had a problem connecting. I figured I'd try using the IP address entries for the servers again no

Hey all, I was wondering if there was a way to update the NetSUS appliances that are currently in place? I am currently running 7 NetSUS appliances and would rather not have to take them all down and rebuild them just to update them. Anyone know of a way? Regards,TJ

I have noticed a couple of apps will not get the check box under the VPP tab for device assignment. This morning I purchased 6 apps from the VPP site, and 5 of them worked perfectly but 1 of them still will not show the device assignment check box. Is this something that maybe the developer hasn't enabled?

I'm having limited success using the Uninstaller.pkg created with AAMEE and the Adobe Cleaner Tool does not eliminate all of the necessary folders/files associated with the programs. With CS4, I used the RemoveCS4 script available in the JAMF Resource Kit written by Nick Amundsen. Nick, you still out there??? Has anyone modified this script to work with CS5 or 5.5 or have something similar? Can you please share if so?

Hi All, New user to the Casper Suite here and have a little issue with AD & Inventory... As it stands, if we thin image using Netboot, our inventory doesn't update based on who's logged into the machine (we don't swap machines, a single machine is assigned to one person) I have to manually go into inventory and type in the username and click the blue magnify glass... We are looking at reimaging 200 Macs and can't really do this for every machine. If I enrol a machine via the webpage then I can assign a user to the machine and the inventory is correct, though this defeats the object of the NetBoot image which automates enrolment. Any help would be great. Thanks Bill

I have used configuration profile to setup restrictions as to which system preferences items students can access. Works perfectly fine however if I login as the admin those restrictions are restricted as well. There's no Ldap/local users exclusion option in configuration profile to add my local user admin account to bypass the restrictions. There's an option in Managed preferences to exclude Ldap/local users. Does anyone know why no option in configuration profiles or should I just use Managed preferences? Is there's a way to make it work with configuration profiles? I'm using jss 9.81 and osx 10.11 on the computers Cheers

We use Casper Suite to manage devices at our school district. Today, we discovered that students are finding other student devices using the Network list and enabling a Screen Sharing session, connecting with the student victim's username and password (attained previously), and causing issues with taking over their computer, etc. We are now tasked to disable the Network visibility all-together for the student MacBook Airs so they can't even see other devices on the network. I do not see the option in the Finder configuration profile definition. Is this something that can be done with built-in JSS functionality, or will I have to upload some type of MCX to config profile file into a Config Profile? We do have Apple Remote Desktop client and VNC client running on each of these computers. See screenshot for the sidebar item we want to hide and disable:

I'm trying to execute a profile where all of the Macs (15) in our lab, shutdown at 3pm everyday. I have created the profile under Energy Saver to do this, but it isn't working. Before 3pm everyday, all of the Macs go into sleep mode. I need this because we have dirty power coming into the school at night, and random rooms experience brown outs - I'm not too sure when the power issue will be fixed. Plus we have (hopefully) El Nino showing up soon, and if we get even the smallest of rain showers, everything starts to trip. Thanks

Hi All, Completely new to Casper and currently testing a trial supplied by Jamf. When I try and use remote enrolment i get an every message every time ------------------------------------------------------------------------------------------------------Recon failed to submit to the JSS. Downloading the JSS CA Certificate There was an error. Error enrolling computer, unable to establish trust with JSS - could not connect to the JSS------------------------------------------------------------------------------------------------------ I have looked through the internet and followed some advice on recreating the CA certificate and restarting Tomcat, but no luck. I am using the built in cert. Any help on this would be great Thanks

10.10.4 Macbook Air goes through its thin image configuration. Applications get installed, Self Service gets installed, but the computer does not get enrolled into my site. I have to afterwards run the quickadd.pkg to get it enrolled. anybody have an idea what might be causing this?from what i understand is that via the configuration should also do the enrollment. 9.51

Hi Guys, New CCT here, forgive my noobiness. Just trying to package iTunes 12.3.1 On blank 10.11 OS. Tried dragging the package from the iTunes12.3.1.dmg into Composer and building a package. The installer worked but then was hit with an error on test machines (screen shot attached). Test machines were both 10.10 and 10.11. Then under normal snap shot. I captured the installation and my only edit to the files was deleting users. The result was very similar, I'll get a screen shot after I re-image and test. Can anyone tell me how they've done it? Thanks a lot! EDIT - Attached error of normal snapshot. "This copy of

I have read overhttps://jamfnation.jamfsoftware.com/article.html?id=121 But this article does not apply for a Windows Server 2008R2 deployment. Firstly I have tested LDAP using ports 389 and 3268 which works fine. After enable SSL and changing the ports to 636 and 3269 the test fails saying Error: javax.naming.CommunicationException: x.x.x.x:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target] Suggestion: Ensure you can connect to x.x.x.x on port 636 Originally I assumed that the Microsoft certificate authority should handle any of the SSL certs for LDAPS, but after reading some Java related posts that does not seem like the case.http://social.technet.microsoft.com/Forums/windowsserver/en-US/fa6db195-699a-4e32-b442-8ff6ef716fad/certificates-in-windows-need-help which someone replies

Looking for a little help for a scripted removal of the Office 2016 login keychain item (credentials). The 'kind' begins with "MicrosoftOffice15_2_Data:ADAL:.....ends in long alphanumeric string". When doing a clean uninstall of the Office suite it would be nice to be able to automate the removal of this item as well. thanks in advance for any help!

I've been having trouble getting SPSS23 to install silently through Casper. I've customized the installer.properties file and created a package that will place the SPSS23 dmg, the installer.properties file, and the SPSS_Statistics_Installer.bin file into /Library/Application Support/SPSS23-Temp. I've also tweaked the silent install script I had for SPSS22 to look like this: #! /bin/sh #Silent Install using information in the installer.properties file sudo /Library/Application Support/SPSS23-Temp/SPSS_Statistics_Installer.bin -f /Library/Application Support/SPSS23-Temp/installer.properties #Firewall exceptions sudo /usr/libexec/ApplicationFirewall/socketfilterfw --unblockapp /Applications/IBM/SPSS/Statistics/23/SPSSStatistics.app sudo /usr/libexec/ApplicationFirewall/socketfilterfw --add /Applications/IBM/SPSS/Statistics/23/SPSSStatistics.app #Cleanup sudo rm -r /Library/Application Support/SPSS23-Temp While SPSS23 no longer needs Java 6, the silent installer for it

Manage a high school iPad program. We use Focus and it is working amazing for us. Ran into to the following problem: Student is focused into an app, lost internet connection, unable to un-focus, because the iPad Air is focused cannot turn the Wifi back on. I have tried everything I can think of, any suggestions?

Hey JAMFers!! Does anyone know of a way to upload attachments to computer objects in JSS. Preferably via a script. Im thinking of uploading auth logs to the JSS for PCI reporting. Thanks!! Shawn

I am trying to create an extension attribute that will report weather the proxy plugin "hola" has been installed on google chrome. The hola plugin installs files into the current logged in user's profile so I thought maybe some scripting that looked for one of the files existing or not would be a way to detect which students installed this plugin. I found another post here on JAMF nation that had some "if file exhist" work in it but I can't seem to adapt it for my needs. Here is my current script. Any thought on where I went wrong or a better approach? Thanks in advance and keep in mind I have VERY simple scripting skills. Data type = stringInput type = script Script: #!/usr/bin/env ruby result = File.exist?("result = File.exist?("/Users/'3$'/Library/ApplicationSupport/Google/Chrome/Default/Extensions/gkojfkhlekighikafcpjkiklfbnlmeio/1.2.449_0/js/cs_hola.js ") ? "yes" : "no" puts "<result>#{

Hey All, Just wanted to know if there is an easy way to find machines that reboot at a certain time period without pouring thru logs on each machine I have in a Static Group. Thanks everyone !

Will an existing restricted policy which is blocking El Capitan block this? If not, can it be restricted?(without a corporate update server) Thanks all in advance !!

Which means Casper will see it as an uninstalled Update. Which makes me sad. Is anyone else seeing this? Expansion: I already have OS X 10.11.1 installed. The App Store shows a download available in the Update section for OS X 10.11.1. But it is NOT the Combo Update that we all expect. It's actually the "Install OS X El Capitan.app", rev'd up to 10.11.1 (which they have always done) but now it's advertised in the Update section of the App Store. Solved. I'm an idiot. See below: But holy (&@#$*(&#$@% @bpavlov ! I think you're right. It just so happens that every VM, Desktop, & Laptop I checked all have the El Cap installer on them. And that is advertised as an Update for them. Once I actually found a device that didn't have the "Install OS X El Capitan.app" downloaded... not advertised. Well color me embarrassed. The sky ISN'T falling!