What I am looking for is the ability to assign a VPP Managed App to a device without signing in with an Apple ID. From what I've read, it should be possible with iOS9. Our JSS is updated to the latest version. Because the device is managed, it keeps asking for an Apple ID to allow JAMFcloud to install apps. Any help is appreciated.

Hi I am successfully using the API to do various things we require. One of the items on my list is to automate the creation of Distribution Points in the Casper interface. I can do this successfully except for the fact that I am unable to set the SMB RO and RW User Passwords via the api for the distribution points (both on creation and by doing an update)? Has anyone managed to do this successfully? (I am able to set each of the other items required okay but without being able to set the passwords as well it really loses the benefit of an api call at all) Andrew

I'm trying to find out if it is possible to use Casper to force an Open Directory network account user to log in with a mobile account. We currently use Casper to bind the computers to Open Directory, but I can't find any settings having to do with mobile accounts. Thank you for any assistance you can provide.

My company is now an o365 customer, but we are still in the process of shifting to that model. The VL edition of Office 2016 appeared in VLSC and I would like to deploy this, especially after all of the great contributions here on jamf nation. But so far I haven't received a clear answer from Microsoft as to whether we are truly licensed for this or if we need to use the o365 version where every install counts against the five allotted to each user...my fear is that I deploy the VL version but then Microsoft asks for a true up based on what we've installed. Any other o365 customers received a good answer from Microsoft on this? thanks!

Hey JAMF People, Is anyone using CasperCheck? I have the script configured, I have the launchdaemon plist configured, I have the policy configured....perhaps I am just making this more complicated than it has to be....but for the life of me, now I can't figure out how to place the plist in /Library/LaunchDaemons of the client machines and how to place caspercheck.sh in /Library/Scripts of the client machines....can anyone assist? I am sure it's something simple that I am missing. If anyone isn't sure what caspercheck is: https://github.com/rtrouton/CasperCheck

I'm trying to set up a test JSS here, using Centos 7. Fresh OS install, up to date; latest MySQL 5.6 CS; downloaded the 9.8 installer & ran, no issues...but when I open the web browser to finish I get an error: JSS Startup Suspended The JSS can only **upgrade from version 8.0 or later.** Please install the latest release of Casper Suite 8 and then install the current version again. umm...what? Why would the installer think I'm upgrading a virgin database? I did a table repair in mysql - no issues. I re-ran the installer, and still the same. I do see that the install script mentions at the end: The time it takes to upgrade depends on the version you are upgrading to at the size of your database. Do not restart Tomcat during an upgrade. I assumed that this was a standard message...

We just moved to a 1-to-1 setup in our schools, and also have just recently deployed Casper. So far so good, but I'm having a problem getting Java to actually work as expected. I've tried several packages. I downloaded directly from Java.com, created a policy and pushed. However, this appears to work only for the browser plugin, not an actual java JVM to run apps or jars. I also created a similar package using autopkg and have found the same result. The plugin is installed, but no actual JVM. If I run java from the command line, I get a generic message saying: "No Java runtime present, requesting install." Which pops up the gui error saying "To view this web content, you need to install the Java Runtime Environment." The ONLY way I can get it working is to install the old Apple provided legacy Java 6, which then functions normally. Any suggestions that doesn't involve installing old cruft?

Printers that were working fine in 10.9 are now not always working after upgrading to 10.10. The print job stays paused. Printing to a Windows printer server via spools along with Papercut. The print job is not even getting to the server, get’s paused on the MacBook Air. Set up the printers new in 10.10 and added them into the JSS. Still no go when installed from Self Service. When I look at the printer in System Preferences the printer icon is generic and “Kind” is blank. Errors I noticed in Console12/10/14 8:34:45.944 AM com.apple.kextd[22]: com.apple.filesystems.smbfs failed sandbox check; omitting.12/10/14 8:34:45.954 AM SHARPAuctionRoom[703]: Loading com.apple.filesystems.smbfs status = -60394698912/10/14 8:34:45.967 AM sandboxd[147]: ([703]) smb(703) deny system-kext-load Thoughts? Ideas? Am I missing something obvious?

Hi Everyone! Does anyone have a script that will "uninstall" all versions of Shockwave 12 completely from my Macs?

All of our managed clients are pointing to an internal SUS (that works great) however clicking the 'Free Upgrade' button on the El Capitan banner downloads the installer. It is not enabled in the SUS. Does an OS upgrade go straight to the Apple SUS or something? Feel like I'm missing something basic here.

Server has a weak ephemeral Diffie-Hellman public key ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY Version 45.0.2454.85 (64-bit) Worked fine yesterday. Is this a Chrome issue or a JSS issue? JSS 9.73.

When installing a Adobe PS package via Self Service, I'm getting this error: Running JSS version 9.8. Executing Policy HS Adobe Photoshop CS6 Install 2015-16... [STEP 1 of 3] Mounting Main Distribution Point to /Volumes/CasperShare... [STEP 2 of 3] Caching package Adobe_HS_PS_2014-15_Install.dmg... [STEP 3 of 3] Running script installPKGfromDMG.sh... Script exit code: 0 Script result: Variable "dmgName" value is set to: Adobe_HS_PS_2014-15_Install.dmg Mounting the DMG Adobe_HS_PS_2014-15_Install.dmg... DMG mounted successfully as volume /Volumes/Adobe_HS_PhotoShop_2014-15_Install on device /dev/disk1. Installing Package Adobe_HS_PhotoShop_2014-15_Install.pkg from mount path /Volumes/Adobe_HS_PhotoShop_2014-15_Install... /Library/Application Support/JAMF/tmp/installPKGfromDMG.sh: line 169: /usr/sbin/jamf: No such file or directory There was an error installing the package. Exit Code: 1 Unmounting disk /dev/disk1... "disk1" unmounted. "disk1" ejected

Has anyone installed the JSS v 9.61 on RHEL 6.6? Are there any incompatibilities with using RHEL 6.6?

Hey all, I couldn't find anyone talking about this on the Nation, which surprised me. Apparently, GateKeeper rearms itself after 30 days unless this pair is written: sudo defaults write /Library/Preferences/com.apple.security GKAutoRearm -bool NO Even after disabling GK at imaging and again with a profile, I've got some machines that are rearming after 30 days. My next step will be to write the pair above, but I don't understand why the rearm is occurring if I have a config profile set. Anyone run into this? OS X 10.10.5, JSS 9.65

I read through this thread and I'm still having issues. All I want to get working is having a new iPad enrolled with iOS 9 through DEP and let self service automatically download with no apple id needed. These iPads I'm working on are already setup through DEP and are on iOS 9. They are not assigned to any user and are in scope to receive Self Service. I followed these instructions to deploy Self Service Manually instead of automatically. I also went to my VPP and purchased 2000 copies of self service, and they are showing under VPP in Casper. I lookup the device in Casper and see that Self Service is in scope, I press Update Inventory and see Self Service trying to install, on the iPad it prompts me to sign into iTunes, I don't want to be prompted so I press cancel. Then in Casper it says failed, please log in to your iTunes Store account. What am I doing wrong and how can I get this working?

I am trying to run recon (9.72) locally on a 10.11 mac mini. I launch the program, enter all of the requested information and click the enroll button and I am immediately hit with an error that is on the attached screen shot. Any thoughts on what I am doing wrong?

Good afternoon, We utilize both the Casper Suite and DeployStudio for imaging our computers. After JAMF moved the binary to provide compatibility with OS X 10.11, we are finding that our previous working setup is now broken. Allow me to elaborate on how our setup works... Our base image, computer naming, and OS-level patches are installed using DeployStudio. The last step of that workflow installs a in-house written script containing jamf command line statements. For those of you unfamiliar with DeployStudio there are two steps with the workflow. The first step is the actual copying of the image down to the client, which is completed while the machine is connected to our DeployStudio NetBoot server. Once this finishes, the client machine reboots into to the second step which is a first-boot script known as ds_finalize.sh. That script first installs the JSS QuickAdd.pkg, we created from Recon, then calls the in-house script we wrote that has command line statements for JSS policies

I have created an advanced search for finding all laptops that don't have GarageBand on them. I have a laptop beside me that has GarageBand on it that showed up in the search. I think it may be due to my not understanding how to correctly specify the name of the app of interest. Anybody have any guidance on this issue?

I've got a lab with 20 computers in it and configured login and logout script policies. They are ongoing policies triggered by login or logout respectively. They've been working great the last month. However, as of 2 days ago, a seemingly random half of the computers stopped getting the policy. the other half work fine. The ones that are having problems also havent checked-in in 2 days. -- I dont know why. Are there any troubleshooting tips I can use to try and fix this issue?

I received an email from a user today who told me his old computer is showing up under his Find My Mac account. The computer was reimaged and given to a new person. The original user sees the computer's current location and new name and (I assume) he has the ability to lock/wipe/etc. Are there best practices for making sure a computer is no longer associated with an iCloud account for FMM before redeploying? Would it require the old user to manually log out or is it something I can do through the JSS or my imaging tool (DeployStudio)? Obviously it would just take one disgruntled former employee to cause some problems for us under the current situation.

All, I am attempting to install Creative Suite 5.5 Design Standard on an iMac Intel (27-inch, Late 2012) running OS X 10.10.5. When installing the suit from Self Service, I receive the error below. It's worth noting that this package has been well-tested. Additionally, the CS5.5 package also failed to install when the contents were saved locally and the installer was run from the machine itself. This would rule out an issue with Self Service. I am guessing that CS 5.5 is not supported on OS X 10.10.5 but wanted to verify with others.

Maybe I'm having a brain fart here, or I just haven't figured out the logic, but we just purchased a few licenses of an App via VPP using the MDM method - we upgraded our JSS to v9.81 and forced the content into our JSS and are now trying to use VPP Assignments to distribute the app - via users? Why users? I was thinking it would be distributed to devices? What am I missing? How do I get the app to this specific iPad in my hands? Do I need to reset it and login with a specific user that the app will be distributed to? What if that user has logged into multiple iPads? Many thanks!

I have worked with Apple and have our DEP program setup. We have created the proper connection between Apple and our JSS and have also created the PreStage Enrollments. I have it setup also so that my devices are automatically supervised and registered through our MDM without the option of removing the MDM profile (all things we have been hoping for). However, when I go through the setup process with one of my iPads I am testing, I attempt to set the iPad up as a new iPad, am told that my school will automatically configure the iPad, I choose "Next" and I get the error: "The configuration for your iPad could not be downloaded from "my school" Invalid Profile.I have looked through every setting I could imagine and do not see the root of the issue. I am wondering if it has to do with the trust certificate and it not being installed, but would assume that is happening in the background as a part of the enrollment. Anyone else had this issue or have suggestio

I created a configuration profile for the Energy Saver, setting desktop/laptops computer sleep and display sleep at certain time intervals, along with put hard disk to sleep etc... now that the policy is set, I do not see a LOG tab to show me the computers that the profile has so far been applied to, why is this not visible like it is for Policies ? I have it showing on the JSS dashboard, but can not see it based on individual computer status.

We upgraded our JSS to v9.81 (from 9.61) and that appears to have gone according to plan. We have a question, though, on Step #3 about modifying the server.xml file on a windows server for "Ciphers for Tomcat HTTPS Connections". https://jamfnation.jamfsoftware.com/article.html?id=384 When I edited the server.xml file using notepad, I copied and pasted over the ciphers data and saved the file. However, after restarting Tomcat, the JSS fails to load. If I replace the server.xml file with the original the JSS loads just fine. Am I editing the file incorrectly? Is it necessary to do this update? Any hints or tricks? Thanks!