Is the Jamf NetSus (3.0.2) solution able to distribute Yosemite updates out of the (virtual) box, or do I need to update come configs I cannot see anything in the documentation about supported OS versions? Thanks in advance! Mike

Has anyone seen this issue with:/usr/local/sbin/jamfds enroll --prompt cat /usr/local/jds/logs/jamf.log...reveals the following:xxxx-xx-xx xx:xx:xx,527 ERROR (77, 'Problem with the SSL CA cert (path? access rights?)')Traceback (most recent call last): File "/home/dev/jenkins/workspace/jamfds-build-release/label/build-rhel-jds.jamfsw.corp/build/pyi.linux2/jamfds/out00-PYZ.pyz/jss_comm", line 81, in _performerror: (77, 'Problem with the SSL CA cert (path? access rights?)’)...

Hi all, I am very new to JAMF and need some help. In our environment we are not able to set up a LDAP. And currently when computers are added to the inventory the location field is left blank. Is there a way to bind Location information with the subnet the computer is on. I have set up the multiple locations/building/subnets we have and would like a way for the location to be auto-populated based on the IP it receives. Thanks for any and all help.Amit

Anyone have a command to change the default paper size for all users in Yosemite?

Hey all, Does anyone have experience with migrating iPhones/iPads from Meraki over to JSS? The issue I'm running into is that I cannot enroll these devices into JSS b/c the Meraki profile is already on the device. Of course, once I remove the Meraki profile from the device, then I can enroll to JSS via SMS text. Is there any way around having to manually remove the Meraki profile for >400 users? Thanks in advance guys.

Is there any way to promptly upgrade the Macbooks inventory in JSS.I have noticed that after upgrade to 10.10.1 the JSS is still showing 10.9.4 also after domain joined the Mac kept showing N/A till I reinstalled the QuickAdd package.

Hello Everyone, I have an issue where my OSX configuration profiles aren't showing up in their assigned category. The configuration profiles were previously assigned to categories and were displaying properly. This seemed to happen after we upgraded to 9.62. When I go into a profile it shows that it is currently assigned a category, but when I save it shows up under "No Category Assigned". I tried unassigning it from a category, saving the profile, and then re-assigning it. Still it won't show up in a category. I've tried multiple browsers on two different computers just to make sure it wasn't a browser display issue. This isn't affecting the iOS configuration profiles though, just OSX. I tried searching the forums to see if anybody else found this, but I didn't find any topics. So if this has been brought up before or I missed something I'm sorry. So, has anybody else seen this? Thanks, Scott

I know I can uninstall a JDS instance from this article here: https://jamfnation.jamfsoftware.com/article.html?id=340 , but I was wondering if anyone knows an easy way to simply update just the JDS URL without having to uninstall and reinstall? Is there an XML file maybe?

I'm seeing an issue crop up randomly throughout my company where encrypted Time Machine drives will no longer mount. Some of these will mount on other computers but not the machine they are set as a backup destination for. Even after wiping keychain entries nothing happens. I tried changing the password on the drives too to no avail. Has anyone else experienced this problem? I'm going to start destroying the CS volumes and creating new encrypted backups but I would like to avoid that if at all possible.

All, I've been tasked to come up with a quick way to get the same functionality of KnockKnock.py https://github.com/synack/knockknock into an extension attribute. Knockknock.py is a script that has a "Who's There" output that contains a list of cron jobs, login items, startup items, KeXT files, launchD items, Launch Agents. login/out hooks, and browser extensions. I need a way to get these items into Casper for quick reporting. In the past, Casper collected the unix binaries but it doesn't seem to gather that in 9. i'm sure with some work, i could use system_profiler to pull this info an EA, but was wondering if anyone had a suggestion on making this work? I'd rather not push this script out to each device and have it create a local file. Thoughts?

Hi all, This isn't really JSS related but I'm wondering if anybody knows where to get info about the updates I have pending in my update server for OSX. I have found nothing to read about any of them. A lot are self explanatory but some I would like some more information on before testing them out. Thanks!

I do have an Extension Attribute that is collecting an AD users login (on a Mac record) and then I am basically going to User and Location and pasting that info and doing an AD lookup (click blue mag glass icon) and all the info imports. One by one, is there a global or automated way to do this, with a script or EA. thanks in advance. john k

We are in the process of updating all our Macs to OS X 10.10 which involves moving them over to a new JSS server. I have everything working however noticed on a few devices that have moved to the new JSS (v9.6) inventory is failing. I have narrowed it down to trying to search the /Users/ folder for Applications. I have checked folder permissions and everything is fine. The weird thing is this only has happened on 3 devices so far out of 20... Has anyone else experienced this???

While experimenting with creating a new computer record via an API POST, I've found that when creating a minimal computer record (for example, just 'udid' and 'name'), the record becomes available in the JSS web interface, but no 'AutoRun Data' button is offered. If, however, I add a second computer record using the XML that I've taken from a 'complete' computer record (with identifying parameters like MACs, serial, udid, etc modified of course), this newly created record does offer the button to set AutoRun data. It appears that there is some minimum information (beyond Name and UDID) is needed in the computer record before the JSS will allow setting AutoRun data. Does anyone know what these items are? Thanks,Robin

So I just had a policy give me the "Complete Message" even though it failed. I wasn't expecting this but honestly, the term "Complete Message" doesn't give any notion of success or failure. I just assumed it meant success. Has anyone else seen this behavior? If so, perhaps we should put in a feature request for two messages, one on successful completion and one on failure. What do you guys and gals think?

HI,I am at JSS 9.6.1We have HP Printers and Canon Copiers. All are available in Self Service, scoped by subnet.The newest driver packages are installed separately on all mac computers. I started pushing out HP 3.0 in Sept.I noticed that some models of HPs in a computer Inventory record now show NO PPD for some installed printers.MY first thought was that HP changed PPD drivers (ala Canon last year) but I have removed and reinstalled and verified against HP that the driver being used is the latest. When I recon the machine, it still shows "No PPD" in the JSS. So far the printers appear to print fine.Not looking for a fix but before I spend time digging deeper, wondering if someone else could take a look at their printers in computer inventory records (if you have HP) and see if you're seeing similar lack of info. Color Laser Jets in particular seem to be most common offender.Thanks!Sandy

I've enabled an EFI firmware password on a test system (never used it before). My initial thought was that all Startup key combinations would still work, I'd just be prompted for the firmware password but that doesn't seem to be true. So far only Command-R and Option keystrokes work. Is this expected behavior? Apples documentation doesn't differentiate between key combinations that work with or without a firmware password set. http://support.apple.com/en-us/HT201255 Just trying to understand which options should work before deciding to enable it or not.

Hey JAMFers, I have been creating reports the last week based on last-check in, and am wondering if anyone has a way, or extension attribute that reports the exact date/time(MM/DD/YYYY at XX:XX am/pm) v.s. showing variables like "About a minute ago" or "Yesterday at X:XX". I know it probably sounds kind of funny, but our asset management team asked about. Does anyone have any quick ideas? It seems like I could probably leverage an extension attribute of some sort, but I'm not sure. Thanks for any advice in advance!

I'm playing with JDS with the intent of swapping our storage at some point soon. So I setup a new JSS server in a VM. It is working well, I thought. When I try to add the JDS to it, I get the following error. Any ideas? I guess i need to rebuild my self signed certificate on my server, but I'm not quite sure how to do that... ##### Enter JDS and JSS information ##### JDS Hostname: jds1mydomain.edu JSS URL: https://tuna.mydomain.edu:8443/ JSS Username: maint JSS Password: Allow untrusted SSL certificate? (y/n): y error: (51) - SSL: certificate subject name (tuna Self Signed) does not match target host name 'tuna.mydomain.edu'

I am trying to use a configuration profile to restrict access to 3 system preferences. I am successfully able to restrict iCloud, Mail and Notifications, however, it also restricts my 3rd Party preferences for Java, Flash and Y-Soft. Any ideas on how to correct this ? Or an alternate way, my old script isn't working any more. defaults write /Users/$3/Library/Preferences/com.apple.systempreferences.plist HiddenPreferencePanes -array "com.apple.preferences.icloud" "com.apple.preferences.internetaccounts" "com.apple.preference.notifications" chown $3:staff /Users/$3/Library/Preferences/com.apple.systempreferences.plist ThanksJeff

All Macs are bound to our AD (Windows2012R2) by Casper (9.61)I see some Mavericks clients loosing the ability to contact the AD. Error Message is like "Cannot contact the Domain Controller". Rebinding helps. But what's the cause? I am suspecting the default 30 days windows policy setting for the maximum allowable age for a computer account password: http://technet.microsoft.com/en-us/library/jj852252(v=ws.10).aspxDid anyone investigate that further? Or is it irrelevant for OSX ?Thanx a lot!

I get this pop-up each time running 'casper admin' so I click 'Mount Share' and 'casper admin' opens up. Am I getting this because I am trying to run 'casper admin' from the same computer the share is on? First time I have setup Casper Suite/JSS, this is a test environment running on OS X.9, but i want to get it setup just like an actual production environment. I created a share at the root of 'macintosh hd' called JSSDIST, created two new users (one has RW and other R). Is this the correct way of creating this share? the rest of the pop-up message says: OS X can lock up if a file share is mounted from the same computer it is being shared from. If you would like to continue, click the 'Mount Share' button. If you would like to work without having the share mounted, click the 'work without share' button. To quit and launch casper admin on another computer, click the 'quit' button.

bit of a strange one, we have a JSS (v9.4), with a single site. There is a computer that I can locate using the API by name, serial number etc, but searching the inventory using the web interface its not there. Have searched with various bits of known info from the machines inventory record, it just doesn't show up. So far I've tried: A MySQL DB check and repair Restarting tomcat Restarting the server The JSS is running on Windows Server 2008 R2 incase that has a bearing (I don't think it would). Any suggestions?

How exactly is FV2 disk encryption configuration supposed to work? i want each user that logs in to be prompted to enter their password to be FV enabledis this possible? I only seen this happen once for the first user, afterwards I had to go ENABLE each additional user manually. I have Require FileVault 2 Require users to enable FileVault 2 based on one of the following eventsAT NEXT LOGOUT what should the policies trigger and execution frequency be ? (i have it on logout and ongoing)

So we recently had someone printout some documents that seemed slightly questionable and I am looking for a way to see what computer may have been on a specific website by searching web history. Anyone know of a way to search web history for Safari/Firefox/Chrome? I have it narrowed down to a small group of computers but would rather know if they went to this specific website for sure. I could go through the content filter/firewall but thought this would be easier. Gabe ShackneyPrinceton Public Schools