We recently set up Box as an HTTPS only distribution point. The good news is this works flawlessly. The bad news is that since Casper Admin can't replicate to it, every file change currently has to be done by hand. I've been trying to work around that limitation. My goal is to create a simple script that mounts the webdav Box drive, runs rsync, and then unmounts it. I want to either schedule this to run every couple of hours or anytime the contents of the JSS folder changes. The machine it's running on is a Mac server running 10.10.5. So far, the only thing I've managed to get working fine is syncing(via rsync) to the Box distribution point if the share has been manually mounted. That's good, but it requires a user to be logged into the server at all times and manually running something. I'd like to automate it. From what I've been reading, the best thing to do would be to write up a small shell script and schedule it to run. This should ba

We have setup Block Adult Content on students ipad using configuration profiles. We need to know how does it work. Why the websites like below are blocked when we turn on this setting https://aifs.gov.au/cfca/publications/corporal-punishment-key-issues.

On Windows machines, I've always gone into the volume licensing center to download a copy of Office. For Mac, is it okay to download the installer from outlook.office365.com and use this .pkg to deploy to all the machines in my company?

Quick add.pkg adds administrator hidden account, but I also want to add a seperate administrator account through a policy, this account will not be hidden. On macs I am currently enrolling this unhidden admin account is already created and was manually created prior to Casper. If an add a user policy is run on a Mac that already has that user created, what will happen?New macs deployed via Casper imaging will get the hidden management account, along with the Unhidden admin account (probably add unhidden admin account via Casper imaging custom section).

I would like to deploy an in-house app via both the "Install Automatically/Prompt Users to Install" and Self Service methods. Some devices should get the app automatically. Some should have the option in Self Service. I have the app in the JSS and scoped appropriately for auto-install I then tried to create a second instance of the app for scoping to Self Service, but the JSS complained that "An app with the filename "APP-NAME.ipa" already exists." This would also be valuable for App-Store apps. Is there a way to do it? Thanks,-Dan

I've been seeing an issue with Casper Imaging. As part of a nuke and pave imaging workflow, I created a package from the app CreateUserPkg that creates my primary admin account. I was using ID=499. However, on first boot after Casper Imaging I kept getting a dialog box stating "OS X needs to repair your Library to run applications. Type your password to alow this." I would find the home directory was missing important folders such as Desktop, Pictures, Music, Movies and what there was of the home directory had incorrect permissions. I would end up booting in single-user mode, mounting the file system for writing and deleting the home directory to force a clean creation on next login after rebooting. After changing the account ID to 501, the first "normal" ID in OS X, all is well. The only thing I modified in the admin account creation package was the account ID. The app chose a new UUID, of course, and I didn't bother to make it the same as it doesn'

Hi.. We're using DEP in an AD environment.When setting up Mac for first time, the user is prompted to create a local account via the setup assistant. We have Casper run a policy that binds computer to AD and then restarts allowing user to login with their domain credentials. What we'd like to do is have Casper run a script that once user is logged into Mac with AD account that will search for and delete the local account that was created using the setup assistant upon first boot. Since people will no doubt create a local account with any name they want, I thought maybe we could run a DSCL command and find any local accounts with a Unique ID of "500-something" and then delete it. I thought maybe I'd build off of @donmontalvo instructions here, but I'm not a scripting whiz.https://jamfnation.jamfsoftware.com/discussion.html?id=5437 Whatchoo think? Maybe there's another way?

Hi, I've got my DEP working a treat with Casper but I can't see how I get the scope of the prestage enrollment to automatically include any new devices. At the moment I am having to go into the scope and edit it to tick the new devices. Sure I am missing something simple! Thanks

I have written a script to gather a bunch of fairly generic information from System Profiler and various log files, write it to a text file, and then zip up the text file in preparation for uploading to a drop box (write only) folder on an OS X file server. I need to figure out how to programatically authenticate to the file server and copy the zip file over. I can't seem to get scp to work, as it would require a public/private key pair, and wont simply let me pass username and password into the command. This command needs to be totally hands-off for the user, as we are running this in the background. There is nothing sensitive or of security concern in the zipped up text, so I don't mind it being passed unencrypted to the file server. The user to be used for the copy would be write-only. Ideas?

Does anybody know if there is a way to set firefox as the default user agent for safari. I know I could do a default write to the safari plist. I just don't know what to write to it. Any help would be appreciated.

Hi Folks, I know a number of people here have done interesting things creating small NBI files. I would like to create something that will boot the target Mac (from USB) and issue this NetBoot command and force an immediate reboot from the NetBoot server: bless --netboot --booter tftp://10.101.118.10/NetBoot/NetBootSP0/CasperYosemite.nbi/i386/booter --kernel tftp://10.101.118.10/NetBoot/NetBootSP0/CasperYosemite.nbi/i386/mach.macosx --kernelcache tftp://10.101.118.10/NetBoot/NetBootSP0/CasperYosemite.nbi/i386/x86_64/kernelcache --options "rp=nfs:10.101.118.10:/private/tftpboot/NetBoot/NetBootSP0:CasperYosemite.nbi/NetBoot.dmg" Due to imaging problems yesterday I have a number of iMac units that have no operating system on them. Rather than trying to boot from Internet Recovery Mode and type all this into Terminal, I was thinking it should be easy to create a minimal recovery style OS X on a USB stick whose only job is to issue the above command and reboot. I've been p

Not sure if anyone else is doing this.. but on occasion it would be handy for me to image MacBook Airs over WiFi (no not often) at remote sites where Thunderbolt ethernet adapters seem to disappear. I have no problem getting an OS vanilla autoDMG loaded down... but getting a temp wifi config profile is proving strange. I've made a unsigned profile that expires in an hour, as the proper network settings will come down via MDM once the Mac is enrolled. It's rolled into a pkg that deploys to /var/db/ConfigarationProfiles/Setup It's installed during the imaging process on the target volume (I have verified it's there before Casper 1st boot) .. but YoYo ain't loading it automatically, so the Mac then doesn't enrol and the provisioning process then falls over. Same pkg when installed on to test Mac (working, not vanilla AutoDMGed) works perfectly. Imports, joins WiFi then expires in an hour. Is anyone else doing this? Am I missing some thing... or am I nuts?

Running OS 10.10.4 with JSS 9.73. I have a few managed preferences that seemed to be working fine. I installed PaperCut and ran the "install-login-hook.command" so as to make PaperCut to start up and have the user not be able to quit it. Would that have caused my managed preferences to stop working? I also have a policy run a script for a message to the user once they log in. That stopped working as well. I used to get the "Applying Managed Preferences" window but that is not coming up anymore either. I tried removing the PaperCut login hook and still no luck. Any ideas? Thanks,Pete

Does anyone know if there is a version of Auto Update Magic/AutoPkgr for those of us that use JSS in the cloud? I was digging around yesterday and couldn't find much info on it. Thanks!!!

I have a policy in my console, that when I click on it, it just spins trying to load. If I change the "o" option to U in the URL, it still spins. If I change it to L I get the logs fine. How can I delete this policy from the console since it's bad? I know the delete button requires confirmation and I haven't found a way to get to the confirmation form the URL. Using option V, I get the buttons on the bottom and can click edit, clone, logs etc, except Delete still doesn't work. Spinning around: Option V:

We're changing our wireless key and to prepare, I'm using Tim Sutton's excellent script (https://github.com/timsutton/make-profile-pkg) to package and deploy the new config before the cutover. Using this same method, the package installs the profile and reports success using our current wireless key. When I test with the new key (which isn't active yet), the install fails. I was expecting to at least see the profile installed in Sys Prefs > Profiles. Anyone know if this is expected behavior? (A config doesn't take if the SSID/authentication fails?)

I'm trying to get auto login to work using an AD account. So far it has been hit and miss. Some work fine, some don't. Here is what I have been doing. cp -R /System/Library/User Template/English.lproj /Users/studentchown -R student:"Domain Users" /Users/student/System/Library/CoreServices/ManagedClient.app/Contents/Resources/createmobileaccount -n student -h /Users/studentPush kcpassword to /private/etc/defaults write /Library/Preferences/com.apple.loginwindow autoLoginUser studentdefaults write /Users/student/Library/Preferences/com.apple.screensaver.plist askForPassword -int 0 Mac are 10.9 and above Anyone see issues?

We will receive the following error: Recon failed during the submit process Recon failed to submit to the JSS. Downloading the JSS CA Certificate...There were (1) previous JAMF device identities found on this computer. Removing...This computer was successfully enrolled to the JSS with the following device certificate: "........"Failed to submit inventoryGetting management framework from the JSS... There was an error. Error enrolling computer: Could not recognize the JSS response. I need help. Thanks André

I got a few policies, the majority of them using configuration profile and a few using managed preferences. From time to time when students are using their Macbooks, a message windows keeps popping up asking for administrator username and password. Since I'm not sure which program(s) are asking to enter this information, I just tell students to press cancel and the message goes away but comes back again at some stage. (see screenshot attached) I was wondering if anyone can point me in the right direction or tell me how to troubleshoot the problem and which application could be asking for this information. Or is there anyway I can stop this pop up message(s) Regards, Henry

Here are the manual install instructions:Make a new folder in ApplicationsCopy the file into the new folderlaunch terminalchange directory to the new foldersudo ./csia -ienter the local admin password when prompted Is there a way to automate all of that through Casper?

If I limit a policy by setting "Network Connection" to "Ethernet", like this:then the policy isn't visible in Self Service, neither for a MacPro (built-in Ethernet) nor for a MacBook Pro (Thunderbolt Ethernet). If I set "Network Connection" to "Any", then the policy becomes visible in Self Service. The policy was created by "cloning" another policy, in case that makes a difference. This is on OS X v10.10.4 and JSS 9.72. Has anyone else gotten the "Network Connection" setting to work correctly through Self Service?

Anyone able to manage Lync 2011's setting via JAMF MCX? Or via /Library/Preferences/MicrosoftLyncRegistrationDB.plist? Or /User/currentuser/Library/Preferences/ByHost/MicrosoftLyncRegistrationDB.<GUID>.plist? The below link give the managed prefs, & me a headache! http://mac2.microsoft.com/help/office/14/en-us/lyncdeploy/item/81755f45-3c1b-4d09-bef1-2cf48b9fc29a

All -Looking for some help here as far as a script to add multiple AD groups to the OS X AD Plugin. In our environment, historically, rights to numerous items are granted by adding all users to a specific AD group, this is for easier support as well as keeping track of rights and access. Currently, in the Casper environment that I have become responsible for there is a script that runs at build time after AD binding. This does numerous things, one of which is adding our desktop techs AD group to the local admin group so that they have the rights to administer the machine. Here is the current script: #!/bin/sh # Purpose: Set AD plugin options after binding # Enable mobile accounts dsconfigad -mobile enable >> /var/log/jamf.log # Disable mobile account creation confirmation dsconfigad -mobileconfirm disable >> /var/log/jamf.log # Force local home folder dsconfigad -localhome enable >> /var/log/jamf.log # Disable UNC network home paths dsconfigad -useuncpath dis

How are people installing the Adobe Creative Cloud utility, i.e the menubar utility that handles AdobeID logins and app updates? A new 1.9 version https://creative.adobe.com/products/download/creative-cloud?version=2.8 was just released.

I want to bring up a list of all machines that don't show email addresses. If I run a blank query, it deletes that option since you haven't specified anything. If I enter "email address is not like *" then it still returns everything (machines with AND without email addresses. I'm trying to clean up our inventory and have gotten IDs for all the machines, but not all IDs have emails in active directory.