I am just testing out Target-Disk Mode and I'm running into an issue that I'm sure is just my inexperience with the OS X side of Casper.. When I image a Mac in Target-Disk Mode, the images and packages all come down fine, but the local account and WiFi enable script are not being run. At least I can't login with any local account in the configuration and WiFi is not enabled. Netbooting works fine. Caper 9.72. SMB mount point. Thanks for any help!

Hey Guys,We are implementing Wifi auth (Device) with TLS through Aerohive.Has anyone out there configured auto enrolment of your OSX devices to your Enterprise PKI (Windows Server 2008 R2), eg so they all get their own unique device certificate installed in the local keychain?All our machines are domain bound currently.Cheers,

Hello All, I am attempting to begin the process of testing deployments of Mac OS-X 10.8 client version within our environment. Currently we are running 10.6 server with OD and we were running our SUS on our 10.6 server. I need to find a solution to patch and maintain 10.8 in our environment and want to use the SUS Appliance from Jamf. I have the 1.02 NetSUS server up and running in VMware, as well as 2 branches created and all items synced (99gig worth) from Apple. In Workgroup Manager, I went in and created a new group. I then went in and created a preference for Software Update and pasted in the URL of one of my branches and saved changes. I am not getting an error message on one of my clients when I attempt to check for updates. "the certificate for this server is invalid etc. etc." My question is will this work when pasting the URL and deploying the setting via OD? Should I be deploying this through casper instead? Joe

We're starting to encrypt all Macs with FileVault 2, and I'm curious how other people approach the project, specifically in regards to shared workstations. For single-user computers, FileVault is no problem, since you can just enable the one user. However, working at a University, we have many computers that are shared - an iMac that multiple student workers can login to, for example. Typically, we control authentication to the shared workstation via Active Directory Group - if the user is part of the correct group that's been given access to the computer, they can login. However, for FileVault, I can't enable a group, only individual users, and FileVault can't communicate with my domain server. This means that an IT admin would have to go and enable each user for FileVault, and get them to enter their password, and do that all over again each semester as student workers change. So, do you encrypt every computer no matter what? Or do you only target single-user computers? Or on

Is it possible to unmanage a device from the server end without deleting it from JSS and without doing the task on the computer itself?We have a situation where a computer has been pulled aside by our legal department pending some investigations. It is currently turned off and locked away in a safe. The legal team would like to turn the computer on at some point soon to begin their investigation and they don't want files on the computer to change from their current state. Since this computer has been turned off for quite some time, there are a LOT of updates that the computer needs and when they turn it on, it's going to download lots of updates and apply lots of policies. I'd rather not have to change the scopes on all the policies from "All Computers" to "All Computers except this one". I just want to be able to click a button that tells the server to stop managing it so the legal team can do their thing without files being changed. When they are

We've been running casper for 6 months or so and we're moving past basic MDM and machine imaging to more advanced use of scripts and packages to upgrade and reconfigure machines. These forums have been great for most of my questions but there's one I really haven't found a good answer to. We're a game developer with Web and C++ devs working on macs and one of our major software deployments is GIT clients and development environments. All of these tools require basic configuration and I'm trying to move from having users do this to dropping config files in with the packages from self service but I haven't found a method I really like. 2 Situations as I see itA config file needed by a PKG when it runs. Such as kaspersky antivirus which has a dmg, a config file and a.sh script to chain it all together properly. For this I end up making 2 packages 1 to put the config file and script in /user/shared then the preflight script in the cached casper instal

an uninstall policy uninstalls an application, it is no longer advertised in /Applications. Afterwards on some computers the application icon is gone from launchpad while on some other computers the application icon is still present (question ? over it). Is there a script or something that can check afterwards to somehow trash the icon?

Hi I've assigned VPP apps to a user. However, these aren't showing up in the 'downloads' tab on the App Store, so I therefore can't install them. Is there anything I can do?? It was working fine last week! Any help would be much appreciated.

Hello All, I haven't found a definitive post on this, so can someone point a noob in the right direction? I need to set my smartboards to have a 60 min idle time before the screensaver kicks in. Preferably during imaging, but as a policy is ok too... It seems "defaults -currentHost write com.apple.screensaver idleTime 3600" does not work in 10.10.3, nor does the managed preference in JSS. Am I missing something? Much appreciated.

I'm looking to easily install some programs that are .app. We use LogMeIn and Cisco Jabber in our company and haven't been successful with Composer to create either DMGs or .PKGs. When downloaded they are of the .app extension which isn't supported in Casper Admin. Has anyone been successful with these or other .app programs? Let me know if you need any more information. Thanks in advance! Jason

We just upgraded to JSS 9.72 yesterday and ran into an issue with Self Service. We previously were on 9.63 and didn't experience this issue. We have Self Service policies setup that use the lpadmin command in the execute command box in Files and Processes to install printers. Since upgrading to 9.72 these policies don't work anymore. If I execute the lpadmin command lpadmin -p "Johnston_Printer_51708" -v "lpd://xxx.xx.xxx.xxx/" -D "Johnston Printer 51708" -L "Johnston Office" -P "/Library/Printers/PPDs/Contents/Resources/HP LaserJet P4010_P4510 Series.gz" -E -o printer-is-shared=false -o HPOption_Tray3=Tray3_500 -o HPOption_Duplexer=True from a terminal shell though it works just fine. Has anyone else experienced this issue with Self Service in 9.72?

Has anyone tested invoking this tool via command line? http://www.adobe.com/support/contact/cscleanertool.html From page 9, if we want to do a complete removal we should be able to do this: sudo /Volumes/Adobe Creative Suite Cleaner Tool/Adobe Creative Suite Cleaner Tool.app/Contents/MacOS/Adobe Creative Suite Cleaner Tool --removeAll=CS4 Apologies in advance, we will eventually test this, but we wondered if this actually works (in your experience) or if it's more Adobe-smoke? TIADon

I've enrolled a Mac Mini using DEP. I get the profile and agent installed. However, it looks like this computer doesn't belong to any group, even "All Computers". Thus, no policy will apply. Do you have an idea why ? Did I misconfigure something ?

hi does any one know how to force safe search in google for ios. ie automate the ticking of the safe search box in google settings on the ipads? or is a one by one process, i have a fleet of 500 and need to do it by the end of the day..yay

Hi All, Just thought I would put this up for anyone running into this issue. JAMF have told us how the JSS is to be more secure by changing the ciphers option within the server.xml file. The details of the change are here.https://jamfnation.jamfsoftware.com/article.html?id=382 This is only applied to new JSS's but not updated JSS's. If you install a clean 9.61 devices will enroll, connect to and can even log in via Safari. But when using Casper Focus from an iPad, it will throw back a "Connection Failed SSL Error, the server could not establish a secure connection to the JSS". Until we see an update to Casper Focus we will have to manually drop our security back down to the Pre-POODLE fix. Open your JSS installation DirectoryUnix - /usr/local/jss/Mac - /Library/JSS/Windows - C:Program FilesJSS Navigate from your JSS Directory to the file Tomcat > conf > server.xml Note: If you are on an OS X box please edit using a terminal text editor.Second Note: If y

My configuration consists of a OS X. Yosemite.dmg Is anyone getting the OS X.dmg installing as a package instead of Block Copy ?? when i run casper imaging on a mac using 10.9.5 i get Block Copy installation on the targeted computer, so this is working fine. whats up with 10.10.3 all of a sudden ? JSS 9.51

I remember in the past that we were able to plug in a usb drive while Admin was open and replicate to the drive to make imaging a little quicker locally. Recently I noticed when I plug in a USB drive when Admin is open, I don't see that option. Has it moved?

I have an Excel spreadsheet (that can be easily put into CSV or tab-delimited text form), that contains the device serial numbers and asset tag information of 1,100 iPads that are present in the JSS. This spreadsheet unfortunately was NOT exported from Casper. It came from a building tech contact who was responsible for assigning iPads to each child. I wish to have the asset tag information in Casper properly. I want to somehow import the asset tag information "as is" from the spreadsheet into each iPad. What types of calls to the REST API or SQL commands if necessary would I use? I'll be honest, while I am fairly well knowledged in working with Casper itself, I'm really lousy as a programmer or scripter. Right now what I do when I need scripts is look at other people's original work and tweak as needed with my knowledge. Exact syntax and mechanisms used would be very helpful. I want to thank anyone who responds in advance and hope the share knowledge here.

I upgraded the image from 10.10.2 to 10.10.3 on the casper admin. I am using casper suite 9.65 but every since the update the imaging process freezes. Last time this happened I was on casper suite 9.62 and had to update it to 9.65 and re-create the netboot. Do I have to have the next version of Casper to use 10.10.3?

Sorry if this has been answered before but I couldn't find anything specific on this. When dealing with the iPads you can set the wireless settings in Configuration Profiles, but I cannot find how to do the same thing with our Laptops. Thanks!Andrew

Does anyone know the exact number of days that a policy that is configured to execute once a month will run? 28 days ?? I have a policy that will run a script, execution is once a month during recurring check-in. If the first time the policy was run on 5/8/2015 when would the second execution happen? the policy is also set to run for newly enrolled macs, so trigger is 'enrollment' & 'recurring check in'

Hi, As for now we are restricting access to USB drives via a configuration profile.This allows us to prompt for a username and password when a USB device is connected.Unfortunately the only credentials that are accepted to mount the drive, are admin credentials. Does anyone have experience with these settings and know how to allow standard users to still mount the USB drive with their own credentials? In short;A standard user must be able to mount a USB drive with their own credentials. I've already tried editing the authorizationdb using the following commands: security authorizationdb write system.volume.removable allow security authorizationdb write system.volume.removable.adopt allow And for the sake of being sure. security authorizationdb write system.volume.external allow security authorizationdb write system.volume.external.adopt allow

So with some help I've got a script that checks the date and if the date is before 2015 it then sets the date to 2015 then turns off wireless then turns on wireless and then sets the time back to network time. I'm now trying to get this check to happen at startup via a launch daemon and I cannot seem to get it working Getting an Error 13. Im storing the script in the /Library/Application Support/JAMF folder. Would also be great to have this be triggered by a wake from sleep as well. Is it possible that I have the permissions wrong? root is the owner of both files and both are set to 644. The reason for this is our wireless controller issues a certificate that was created in 2012 and when a mac runs totally out of power it resets to a date before 2012 and then cannot rejoin the network until the date gets back within the certificate period (2012-2025). This script fixes this issue but I just can't seem to get the script called correctly. Any help will be greatly

Each passing year that goes by since the sunsetting of Java 6 I become more and more reluctant to install it on machines, to the point that I don't include it on the systems. However, there seems to be 1 last holdout for it, and that's CS6... Is there any way to avoid it or do I need to have it installed still for CS6 users?

Is there a method or an extension to determine which eBooks have been installed on a Mac client? It'd be nice to see what eBooks a user has downloaded, or have been installed on a Machine. Even better if I can do a search for eBooks based on the version so we can scope those for updating.