We have a script that enables a policy for FileVault2 'At next login' and triggers a reboot so the user has to login.No problems with OS X 10.10.x, System restarts per script you login and there is the panel for FileVault you have to log in otherwise you are stuck at the login window. But with OS X 10.9.x. when you login nothing happens but if you log out the panel appears wich asks for your password.Problem is we want to enforce the encryption, but with the log out the user can cancel the start of FileVault and most users do not 'log out' this much... Anyone an idea?

At this moment, java 8 update 45 is the latest version. However, I have never been able to suppress the "your java version is out of date" prompt when the plugin loads. I've currently implemented the following to no avail: /library/preferences/com.oracle.java.java-updater.plist javaautoupdateenabled is set to falseI use the deployment.properties (located in /library/application support/oracle/java/deployment/) with these settings:deployment.security.level=HIGHdeployment.expiration.check.enabled=FALSEdeployment.javaws.shortcut=NEVERdeployment.security.mixcode=DISABLEdeployment.webjava.enabled=TRUEdeployment.macosx.check.update=falsedeployment.macosx.check.update.lockeddeployment.expiration.check.enabled=falsedeployment.expiration.check.enabled.lockeddeployment.security.validation.ocsp=falsedeployment.security.validation.ocsp.lockeddeployment.expiration.decision=NEVERdeployment.expiration.decision.suppression=truedeployment.user.security.exception.sites=/Library/Applica

I've started deploying the Mid 2012 Mac Pros in our agency, and every one of them so far still show up as a Mac Pro (mid 2010) model, even though the serial number lookup on Apple's Site verifies a Mid 2012 model. Is anyone else experiencing this? My first guess is a GSX issue...

Hey guys, anyone else seeing this error? I tried to create a 10.10.3 NetBoot image with SIU, but it constantly fails with "Error 2". I have tried the automated and the custom mode on different machines, all of them 10.10.3. No success so far...

I searched Apple's website for a download but came up empty handed. Does anyone know if there is one available? If there is not, is there a way capture the download from the app store?

I successfully uploaded my plist file in the custom field on my config profile but it seems to have no effect on my mac. I tried both computer and user level too. Any suggestions on what I can do to make this work? <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>ActuateDetents</key> <integer>1</integer> <key>Clicking</key> <true/> <key>DragLock</key> <false/> <key>Dragging</key> <false/> <key>FirstClickThreshold</key> <integer>1</integer> <key>ForceSuppressed</key> <false/> <key>SecondClickThreshold</key> <integer>1</integer> <key>TrackpadCornerSecondaryClick</key> <integer>0</integer> <key>Trackpa

Hi all, We have a number of communal use Macbook Pros that are managed by Casper. We are trying to set Safari's default homepage to our intranet server, and despite best efforts, Safari continues to set default to http://www.apple.com. Once its changed manually, it holds per user. This is what we have done so far as a custom settings: {Homepage=http://intranet.curriculum.local/, AutoFillMiscellaneousForms=false, com.apple.Safari.ContentPageGroupIdentifier.WebKit2StorageBlockingPolicy=0, NewWindowBehavior=0, WebKitJavaScriptCanOpenWindowsAutomatically=true, AutoFillFromAddressBook=false, NewTabBehavior=1, AutoFillPasswords=false, LastDisplayedWelcomePageVersionString=4.0, com.apple.Safari.ContentPageGroupIdentifier.WebKit2DefaultTextEncodingName=iso-8859-1, com.apple.Safari.ContentPageGroupIdentifier.WebKit2JavaScriptCanOpenWindowsAutomatically=true, AutoFillCreditCardData=false, WebKitStorageBlockingPolicy=0, com.apple.Safari.ContentPageGroupIdentifier.WebKit2PlugInSnapshotting

User has lost device then found it but we sent remot wipe, it hasn't kicked in yet. how to be sure it will not take effect. thanks

We have had the GSX integration set up in our JSS for a while but starting using it a little more recently. Easy to get warranty info on mass computers using a group but doesn't seem so easy when you want to quickly find the warranty info on a single unit. Is it hidden somewhere and I'm missing it?

I'm trying to figure out a way to disable iTunes from launching when pressing the F8 play/pause button. We have hundreds of computers in our school district doing Smarter Balanced testing. The students are figuring out that pressing F8 will launch iTunes and crash the test. I'm looking for a way to get a working script to use with Casper Remote and to set up policies with. This command works one-to-one: launchctl unload -w /System/Library/LaunchAgents/com.apple.rcd.plist So I tried to make it into: #!/bin/bash launchctl unload -w /System/Library/LaunchAgents/com.apple.rcd.plist But this does not prevent iTunes from launching with F8 when pushing out as a script through Casper Remote. I have also tried to just execute as a command (without #!/bin/bash) with Casper Remote with no luck. For a temporary solution I have removed iTunes from the machines before we reimage this summer with this script: #!/bin/bash rm -rf /Applications/iTunes.app/ We would prefer to not

Sorry if this is a duplicate question, but I did try searching first. I am trying to add an extension attribute to determine if a set of Xerox Printer drivers are installed so I can use it as a scope for a policy. I wrote a script based off of the one in the knowledge base article (See attached image). When I run this script via ssh on a machine it returns the correct result (In this case "Yes" because there are printer drivers installed). The same script run on the same computer as part of Casper's inventory update returns a result of "No". Not sure what is going on that would cause this.

Has anyone tried capturing a base image of OS X from a parallels vm? I get the impression that it is not possible, and potentially problematic since it's not pulled from physical hardware (which is especially important when new hardware with forked OS builds come out). If anyone has had any success I'm curious to know what approach you took. At least in the case where there is a current un-forked build in circulation this could be an alternative way to make a new base image on the fly when a spare machine is not on hand to capture from.

I've been having some issues getting Java to install on our image. The upgrade to Caper 9.71 did help, but it is still not fully installing Java. It places the Java JSS file on the macbook and installs manually just fine, but it is not fully installing during the imaging process. Has anyone had a similar issue or a way to correct it?

We have a couple of different default user accounts, created with CreateUserPKG, that we might deploy on a machine at imaging time as generic local user accounts (not all users might be employees so we need some local machine accounts). So, one user we deploy might have UID 503. When we image the machine some preference files are copied to all users home (per the option for that deployment dmg file), but the preference files don't inherit the UID of the folder's user (503), instead sticking to the UID of the account on the machine the preferences were made on (501 for example). Since the local user doesn't share that UID it can't read the file and ignores it for a new default preference file. Am I missing something? Or should I just look at a script to chown files at the end of imaging?

ok, i have a projecto for the nation. unless someone has already figured it out. my goal is to have Apple Remote Desktop sync with all of my machines via some syncing service like iCloud, google drive, or dropbox. script, app, snake oil and voodoo powder, I'm open to suggestions. thanks Joe

So in trying to troubleshoot a computer I found that one of our teacher laptops had Journaling disabled which caused 2 hard drive failures. I'm now trying to figure out what caused journaling to be disabled. Looking at making an extension attribute to find any other machines in our district that may have journaling disabled so I can see if this issue is wide spread (hopefully not being caused by Casper Imaging). Anyone else with this issue? Or any help scripting the extension attribute? I'm sure I can do a diskutil -list and pull info from there. Thanks for any help provided!Gabe ShackneyPrinceton Public Schools

Hi all, I thought I would have found the answer by myself… but no! I need your insights. Let's say I have a AD + FV2 setup. Computer is shut down and user has forgotten his password. He logs to an internal webpage and resets password. Now he starts computer. I guess the only way to get past pre-boot FV2 is by using a recovery key or admin password ?

Hi JAMF Nation! Is there a Safari equivalent to Chromium's policy list for Chrome? I'm trying to expand my knowledge/add more options to my Safari Configuation Profile. I can't seem to find anything on Google or Apple's Mac OS X developer's page. I'm currently using what I can find from my JSS on Computers>Managed Preferences> Safari. Can anyone link me to a good list? https://www.chromium.org/administrators/policy-list-3

Anyone else having trouble with HTTP downloads after the 9.7 release? AFP and SMB both still work and I'm able to download packages by typing in the package URL into the browser.

Does any god have good IdeaI gonna set timemachine in our company by casper manager profile (around 100 users)And the data store in afp://server-mp/backups and the server-mp installed server.app now my question.DOES ANY PEOPLE have good idea how to apply the timemachine setting to the managed clientI tried via manager profile but which not very stable, Sometime when i try to update the setting which can't effect And how to apply the time machine setting to Macbook air. As the macbook air didn't have connection at start up so that the timemachine profile setting can't effect There mush someone run the same enviroment as mePlease help!!!!!

What's the best method to push a pkg'd app out to an individual user? And is a policy needed to do so? Thanks in advance.

I’m tightening a few things down and was searching across JAMF Nation for a resolve in 10.10.2, specifically with finding a script on enabling the firewall. I ran across this script which seemed to bit quite a bit older and created by a couple of techs, obviously this was written while functioning under an older OS: !/bin/bash Written by Nate Walck and Clint Armstrong Liberty University 2009 This Script will automatically enable or disable the firewall depending upon which network it is on. This function turns the firewall on or off, depending upon which state is desired. If the firwall is already in the state desired, the script will leave it in that state. function firewall { #Reads the current state of the firewall and stores it in variable fw fw=$(defaults read /Library/Preferences/com.apple.alf globalstate) #This compares the option passed to function firewall to its current state. if [ "$1" != "$fw" ] then #If the option pased is dif

Hello, I'd like to create a script to change the service order in network preferences to make Built In Ethernet and Thunderbolt Ethernet preferred over Wifi. We have had trouble with our wifi network getting overloaded and would like all 500 machines to prefer Ethernet, without requiring the user to do anything except plug their machine in using ethernet. I have been Googling/searching JAMF Nation for about an hour and have not come up with any successful solutions other than manually changing the service order in Network Preferences. Does anyone have any experience with networksetup -ordernetworkservices terminal commands or any other methods of completing this who could point me in the right direction?

I have read many of the Discussions on Pre - Enrollment. We have a vendor who images the Macbook airs for our students. I provide them with a like mac with our image( monolithic never touched by Casper). We use Casper Suite, they use Deploy studio.What is the best way to enroll students with very little interaction? I could configure the hidden management account and our local admin. Then is it best to run recon once the students return to school in the Fall or to place the quick add package on the Desktop? Will this capture their email addresses. We have our JSS instance hosted by JAMF and our software distribution server is only accessible on campus.

Hi there, We recently upgraded our JSS server to Yosemite and for some reason the Casper Admin keep prompting the below error message: Casper Admin requires Mac OS X 10.4 or later. Please help! Warm regards,michael