I've been playing around with some VM's, I can enroll them to the JSS just fine. I can even scope policies to include the VM, but if I go to create a Configuration Profile and go to target it to the specific VM, it does not show in the list (even though it shows up in the list when creating a policy) Is this a bug, or is this unsupported? I know in a VM it will take the same serial number as the host, so I am wondering if that is part of the issue. JSS v9.3 hosted on Windows Server 2008 r2 thanks!

This is my first post here on JAMF Nation Discussions so thank you in advance for looking at my post. Currently our self service is set up so you have to login to download anything. I wanted to create an image and put in place of the "No Self Service Items are Available" this way users do not get confused. I was wondering if this was possible. Thank you in advance.

We are considering disabling iCloud within our organization but we want to know how many of our users are actually using it. Does anyone have a command or know of a policy that we can create to return back which computers have iCloud enabled?

Good morning all,So my normal image creation process is pretty simple...I update a machine to how I want it, then boot to an external drive, open disk utility, click on the drive, then click on "New Image" and save a copy (upload to Casper, blah blah blah). I'm not sure on the appropriate terminology, but normally in Disk Utility when I click on the drive it says something like "500.11 GB Toshiba MK..." and then Disk Utility gives me the options of: First Aid, Erase, Partition, RAID, and Restore. Then if you click on the sub-disk area labeled "Macintosh HD" you get the options of: First Aid, Erase, RAID, and Restore. NOW all I get in Disk Utility is two items labeled "Macintosh HD" and no option to create a "New Image" and save a copy. Is there a way to fix this either in Disk Utility or via upgrade process? I've tried reverting to Mavs and upgrading to YoYo (1) via Self Service; (2) via copied YoYo.app; and (3) redownloading the entire YoYo.app from the App Store. They all result i

Is there a way to filter across multiple logs to check the status on a certain computer across multiple policies? For example, I have many policies running and I want to quickly see what policies have completed, failed or have not yet completed on one particular machine without going into each individual policy.

I just upgraded from 9.31 to 9.5 and apparently Self Service no longer parses HTML in the description field. Just wondering if anyone has a workaround or if support for HTML has just been removed altogether.

Hi, For a department I need to run the Wirelurker script i found in this topic: https://jamfnation.jamfsoftware.com/discussion.html?id=12494 This is a python script. I need to download the script via a curl -O command, and then run it with python. Locally on my Mac this is no problem but I want to automate this in JSS if possible. I want to make a smart computer group to see whether or not an infection has been found.I know I can run scripts in JSS, but I havent found the best way to do it for this particular script. I don't want the user to be able to do this via self service. Hope somebody can put me on the right track. Any help is greatly appreciated.

I am using the JSS ability to create configuration profiles a lot. I push them over the air and it simply works.Now I have some machines not connected to the internet - not reachable by APN.I tested using the "download" button from the JSS` configuration profiles GUI. The downloaded .mobileconfig I installed with "profiles -I -F /path". It looked good - the profiles show up as they should. They are also device profiles as they should, but strangely enough they do not work!e.g. I tested a simple .plist: com.microsoft.office 14/FirstRun/SetupComplete=1 It is the same payload generated with JSS but one time OTA - one time downloaded and manual installation.Thank you for your thoughts!

Maybe I'm just not seeing the forrest through the trees, but I can't find the options for restricting software for specific users as we used to. (All my old settings still show up based on user accounts). But all i see for scope/targets are computer/computer groups/buildings/departments. Am I losing my mind or have users been removed as an option? If it can still see my old rules for scoping to various user names then the feature must still exist. Gabe ShackneyPrinceton Public Schools

Has anyone made the changes to the Palo Alto Wirelurker detector script so it can be used as a Extension Attribute? Thanks.

I'm wondering if anyone has any experience creating a redirect for "~/Library/Application Support" and whether or not this redirect would negatively impact anything. My assumption is that I would create a configuration profile with custom settings: Preference Domain:com.apple.MCXRedirector Property List File:{LogoutRedirection=[{action=deleteandCreateSymLink, destPath=/tmp/%@/Library/Application Support, path=~/Library/Application Support}], LoginRedirection=[{action=deleteAndCreateSymLink, destPath=/tmp/%@/Library/Application Support, path=~/Library/Application Support}]} If anyone has a better suggestion (or a warning of why not to do this), I'd love to hear it. Also, if anyone can convert that to a plist file for me I'd be appreciative. Thanks!

I recently upgraded to 9.4. One of the more annoying problems is when you search computers and put in a partial name. For example, "A103" to show a list of computers that have "A103" in the name, like A103A1, and so on. Casper reports 'No results found'. I have to clear the search field and click Search which gives me all computers in the JSS, then sort them and scroll and scroll until I find the one I want. This is using the web interface to the JSS, under the Search inventory > section. Presumably this is an easily fixed bug. Just add % signs around the search term and use LIKE. ;)

Hi All, If you're using the open-source Ruby gem I presented at JNUC 2014, please note that once you upgrade to Casper 9.61, the current version of the gem (0.5.5) will error out when it tries to connect to the Casper API. The reason is that Casper 9.61 addresses the "Poodle" SSLv3 security exploit by disabling support for SSLv3. I'll be pushing out a new version to address this soon, but there's a caveat: The fix requires a newish version of the ruby rest-client gem, which itself is only compatible with Ruby v1.9.2 and higher This means that using the jss-api gem with Casper 9.61 and higher will not work if you're still using Ruby 1.8.7 (Apple provided only Ruby 1.8.7 until Mavericks, which has both 1.8.7 and 2.0.0. Yosemite has only 2.0.0) Please let me know if you have any questions. I'll update this thread when I push the fix to jss-api, along with notes about how to update it and how to install the older version if needed. Cheers,-Ch

Team, Im trying to run the following script but Im caught in a catch 22 lol. #!/bin/sh ####### MDM fix ####### This script will delete all Profiles from the computer #### Than re-enroll in MDM management #### Than remove Earth from preferred wireless network list ####################### ##### Variables #####loggedinuser=ls -l /dev/console | awk '{print $3}'hardwareport=networksetup -listallhardwareports | perl -p -e 's/ / /' | grep -Eo 'Wi-Fi Device: en[0-9]' | awk '{ print $3}' ##### Delete Profiles ### profiles -R -p Identifier ##### Re-enroll in MDM Management ### jamf managesleep 30 #### Re-assigns Identity for Earth to new user cert and removes PEAP Auth #### security delete-generic-password -l "Earth"security set-identity-preference -c $loggedinuser -s com.apple.network.eap.user.identity.wlan.ssid.Earth rm -f /private/var/tmp/profilefix.sh Here are the steps: Remove MDM profilesRe-enforce MDM management Re-associat

How much bandwidth and/or system resources does running the update inventory policy take up? Are there concerns about the frequency you set? Does Casper have the ability to schedule hardware inventory and software inventory separately?

Anyone having issues communicating with DEP in JSS recently? Getting errors in contacting https://mdmenrollment.apple.com when trying to make adjustments in PreStage. We had some trouble with our Computer PreStage, and its now gone to mobile devices.

We didn't have any issues with OS X 10.8.4 and Casper v. 8.x but now our Config Profiles are not acting as expected. While using Casper Suite 8.x when scoping out Config Profiles, notably the login access level, the groups that could be assigned access was determined by group GUID (as guided by the JSS to provide the groups GUID). Casper 9.11, it seems as it that doesn't make the distinction of GUID or group name. I've tested both and I can't get either to work for allowing certain groups admin access to workstation. From the Login Window Payload (access tab): Login Window WindowOptionsAccessScript Allow The users and groups that can login at this computer User 5EFED968-9B4E-48A0-87AD-83A875682774 D812524D-C03D-4A6A-9F95-B05E08E40A2A The payload has successfully pushed down to test workstations, but it doesn't appear to be applying any setting. We're also scoping admin access to disable restrictions on login, and that seems to be not working wit

Never mind. Is there not a way to delete posts? :-)

Hey guys - We just moved up to 9.32 for Yosemite and Im doing some testing. From what I can see, I have no issues with any of the Casper tools( Composer, Remote, etc.) except for Casper Admin. When I try to launch Casper Admin, I get the following: external image link Anyone else getting this or have any ideas? We are slated to move to 9.6 next week(don't ask me why we went in 2 progressions -_-) Just wondering if this is specific to us, or a possible bug with Yosemite and Casper Admin. Ive already tried re-downloading the applications, and tried using on another machine... Just kind of stumped now

Finally getting around to asking a question I've been meaning to ask for a long time. Is there a doc describing using keyword search terms here at jamfnation? Especially for terms requiring more than one word. For example today I'm trying to search for "Subscribed Calendars." No matter the combinations I try I get mostly irrelevant returns. i.e. Subscribed + Calendars Subscribed & Calendars "Subscribed Calendars"

Hey Guys, I am wondering what the main difference is between using McAfee EndPoint Encryption over using FileVault 2. Does McAfee just escrow FV2 keys or does it use its own native encryption? I have looked around the internet but can not seem to find any information on how McAfee encrypts the drives. Thanks in advance!

When using jamf enroll -invitation how do you create the invitation ID?Or if using the older version how do you create the SSH Password hash? Thanks!

I am trying to collect a string from the OEAO plist. The script I wrote works via ARD, but does not work as an EA in Casper. Any ideas as to what I am doing wrong? Is there a better way to collect the string for the destinationFolder Key? #!/bin/sh loggedInUser=/bin/ls -l /dev/console | /usr/bin/awk '{ print $3 }' /usr/libexec/PlistBuddy -c "print :destinationFolder" /Users/$loggedInUser/Library/Preferences/com.softhing.oeao3.plist Thanks!

I'm trying to lock the desktop using a config profile (restrictions) my default picture path is: /Library/Desktop Pictures/Galaxy.jpg and its not switching over automatically. Am I missing something?

At my institution we are using the Belkin Thunderbolt Express dock with many of the Macbook Pros we've deployed and have been mostly pleased with them. Recently, we have begun encrypting the laptops with FileVault 2 in order to comply with the results of a security audit. What we've begun experiencing is that any peripherals, in particular the keyboard and mouse, plugged into the dock are disabled until after login on encrypted machines. Once logged in, the dock is fine again.Has anyone seen this and/or have any idea of a solution to prevent this from happening?