When a new system comes in, I would like to be able to simply deploy the software and configurations needed to each system using the OS already installed via the imaging app off of an ssd. I also want the system to be automatically enrolled so it can be managed. I believe the device enrollment program can take care of this for me but at the moment I have to work through layers to try making that work and then also sometimes computers are purchased from other than Apple. I thought I might be able to just include quickadd.pkg as one of the deployed packages but it doesn't seem to work on more than one system when I tried it. Just copying the quickadd manually to a different system and running it sees it fail. Running JSS 9.32 at the moment. Am I missing something obvious?

Hi Everyone, we are trying to to Clear Recent Folders in Finder on all of our students machines as a one time pass because we had to hide a folder and don't want student being able to access this folder as this was a vulnerable folder to adding applications outside the whitelist/blacklist feature in JSS (Mac OS 10.9). For those that want to know. If you install Silverlight, this adds a PlayReady folder at /Library/Application Support/Microsoft/PlayReady. Dropping applications or copying and pasting them in this folder allows any application to be opened no matter the list. This folder is required for netflix so we don't want to change permissions as it requires specific permissions for netflix to work correct. But I I have tried to delete the com.finder.plist from the user library preferences folder. killall SystemUIServer and Finder. This method didn't work. Applescript didn't work as this requires enabling applescript editor under privacy-accessibility. I wou

Under "/Library/Managed Preferences/<USERID>" I have a plist for com.apple.systemuiserver that is setting restrictions on removable media (making it read only). I did have a Configuration Profile scoped to all computers, but excluded for my user ID, so i figured that was it and i mis-scoped it. But after removing the jamf framework from my system, manually deleting that plist, and validating that the "Profiles" section under system preferences is now gone i'm still seeing that plist recreated after reboots. I thought it could be something with Centrify since I had that installed, but I uninstalled that as well and rebooted. Are there any recommendations for troubleshooting this so I can identify why that plist continues to get recreated? I did notice a "complete.plist" in that folder as well which had a "source" attribute listing "mcx_user_<USERID>_<long string>", but unsure how to use that

Hello All, Long time lurker...first time poster. Does anyone have a good EA script for finding/reporting a folder size? I'm dealing with a similar issues found here: https://jamfnation.jamfsoftware.com/discussion.html?id=10555 On our lab machines, the /private/var/folders is getting to be a problem for us. The thread had a great direction, but i'm looking for an EA that people have had success using.

There seems to a problem with Casper 9.4 (haven't checked 9.5) ... Script parameter slots 10 & 11 are passed junk when populated or not Test script as so: #!/bin/bash echo "$1" echo "$2" echo "$3" echo "$4" echo "$5" echo "$6" echo "$7" echo "$8" echo "$9" echo "$10" echo "$11" exit 0 When executing via a policy with slots 10 & 11 populated or not, these slots are always passed the string /0 /1 Example results: Running script zzz_test_parameters... Script exit code: 0 Script result: / SYDIPG-VMXTEST05 4 5 6 7 8 9 /0 /1 Anyone else seen this, or can someone test on 9.5?

I'm working with a customer who is deploying a large number of JDS systems—each in a different building—and would like to automate deployment as much as possible. Two questions: Is it possible to deploy a JDS system via script or some other mechanism? The installer requires entering information to define the local JDS as well as point it to the JSS. Certificates are also created during setup too. Now that Casper 9.5 is shipping as well as JDS 9.5, what options do I have to update these JDS systems? Can I deploy the JDS Installer package via Casper and will it update the existing JDS version? Or will I still need to manually double-click the JDS Installer on each system and go through the process of entering information again just to update?

I desire to change a WiFi setting on a batch of MacBooks, all running OS X 10.9.3. Specifically, I want to check/enable "Remember networks this computer has joined". Is this possible with CasperSuite, version 9.32? I have found many commands to reconfigure network settings, but I have not found this specific option.

Our Security Center system is reporting that our JSS is vulnerable because of out of date Java. Version running is Java 6 update 29 on Windows Server 2008 R2. To address this, I took a VMware snapshot of the server, installed Java Development kit 7, copied the policy files into the bin, uninstalled java 6 JRE and development kit and restarted the OS Apache Tomcat wouldn't start due to this error that I found in Windows event viewer in the system log: he Apache Tomcat 7 Tomcat7 service terminated with service-specific error Incorrect function First thing I did was go into the environmental variables and ensured that the JAVA variable was set to the new bin of files and restarted the OS, still no luck Reviewed logs but didn't find anything glaring I ended up reverting to my snapshot to get the JSS back up and running Is there a supported method of upgrading Java on a Windows Server based JSS without breaking Apache Tomcat?

Casper 9.5 is supposed to implement the ability to set mobile device names from individual mobile device records, but how? The name isn't editable in Inventory > General.

Hi all, I've been trying to get a JDS install going on an ESXi VM of Ubuntu 14.04 - it's basically a plain Ubuntu 14.04 server install in which I'm running the current JDS for linux installer. This seems to work (but requires the apache2-utils package, which the installer doesn't pull down), but when I attempt to connect to the WebDAV endpoint (e.g. when syncing with Casper Admin), it's not working. As far as initial diagnosis goes, the installer drops a file named "apache_aliases.conf" in /usr/local/jds/conf/, but the file isn't getting included in any apache config files. Adding the following directive to /etc/apache/sites-enabled/default-ssl.conf: Include /usr/local/jds/conf/apache_aliases.conf seems to at least activate WebDAV service, but the passwords that are registered in the JSS database don't appear to unlock DAV access. I'm basically at a loss and will try to make it work on 12.04 now, but I'd really prefer to run on the version of Ubuntu that doesn't get EOL'd soon (:

Hey all, Is it possible to 'call' (not sure if I'm using the right word here) a Configuration that has been setup in CasperAdmin from a Policy? So instead of adding packages/scripts/etc to a policy, add a Configuration from CasperAdmin that has all the packages I need to install/uninstall. Not sure if that makes sense. Thanks in advance.-p

Hi all, As titled, I am looking for a solution for deploying and managing Mac App Store Apps during initial roll out and beyond.iWork and iLife is sorted through Base Image, more for software such as Evernote etc. Looking for a solution for both paid and free.Running Casper 9.32 with VPP set up. Things I have tried: 1) Packaging as PKG without MAS_Receipt file - Was working, but some Apps error out as damaged, the rest need to be redownloaded before the user can take ownership. 2) Packaging as PKG with a PostInstall Script to create a blank MAS_Receipt - Same as above, except not visible in App Store and require updates to be deployed the same way (not a huge deal). 3) The method listed here (http://derflounder.wordpress.com/2013/10/19/downloading-microsofts-remote-desktop-installer-package-from-the-app-store/) to copy the App Store installer itself. Successfully created Evernote, but the App installed as Damaged and didn't function. Installed both manually and via Remote.

We have upgraded several of our iPads to iOS 8 GM and the Self Service app will not launch. Has anyone else encountered this? The app just crashes on launch. It was working fine in the previous beta, but does not seem to work with the GM released on Tuesday.

I spent a few hours today dealing with Hyper - V and NetSUS. Apparently you can't import the OVA into HyperV. I did a clean install of Ubuntu 14 and ran the NetSUS installer. Everything worked great except the AFP mounts for Shadow files were not being created correctly. Looking at the logs and verbose boot I could see an err 39. I also couldn't afp mount through Finder using the afpuser account. Apparently it a bug in Ubuntu 14. I found this on a message board that fixed it and everything worked!! It's a bug in libpam-smbpass. You can get rid of it, the only thing it does is that it forces sync between the samba and unix password on login: sudo apt-get remove libpam-smbpasssudo service netatalk restart

I am trying to mount a users network home directory using the "mountNetworkShare.sh" script located in the Scripts repository: https://jamfnation.jamfsoftware.com/viewProductFile.html?id=135&fid=476 The script returns the following result when looking up the SMBHome from Active Directory: \\dkhm0881xdrive3DKSXXXXXXXDocuments However when the script attempts to mount the network location, it truncates simply to: \\dkhm0881 I'm guessing that "x" is causing the script to prematurely escape, but I am not versed enough on scripting to find a solution to this one on my own. Has anyone else here experienced this issue or could propose a potential solution?

I have a few 10.9 Macs that do not want to have their Software Update server reset to the default Apple severs. I have deleted the com.apple.SoftwareUpdate.plist file multiple times and run Disk Utility. Every time I run the Update the plist file is recreated with a retired server we used to use. Any other things I can try other than wiping the Macs??

I have begun a 1-1 iPad deployment. Pre-stage enrollment works fine and configuration payloads are being applied. My problem is that when iTunes accounts are created using this procedure http://support.apple.com/kb/ht2534Almost all of the students receive timeout messages. I have restricted use of the iTunes App in a config profile. I know this seems like a dumb question but do I need the iTunes App to be fully enabled so that the Apple ID can be created?

Hi, I have a strange issue, If i open Casper Admin, enter creds to mount JSS, the share mounts on the desktop, but then when Casper Admin is about to open all i get is a thin 1 inch white line. I get a dock icon and menu but no Window, All other Casper tools work ok, i have re downloaded Casper suite, i'm running the same version as my JSS (9.31), i have updated Java. Any ideas?

Is there a way to have 2 separate divisions or companies in the Casper Suite? Basically, we are one company, but have 2 divisions that should not be able to see each other's inventory, devices, etc. On the same Casper Admin server, is there a way to have users from 2 different divisions log in but only get access to their division's devices?Forgive the generality of this question, we are still Casper noobs and have not worked much with the software.Appreciate any advise.Thanks,Brian

Where is databaseutil.jar located in 10.9? Wanting to force a manual backup of MySQL.

This is somewhat related to the discussion at https://jamfnation.jamfsoftware.com/discussion.html?id=4987, but there are enough distinct differences, I wanted to create a new thread to see if anyone else has seen this issue. We have a configuration profile to push out several certificates, including our root and intermediary certificates, as well as requesting a machine certificate from the PKI server itself. We were able to get it working with our pilot users and many users after that, but only recently, we tried to add more computers into the group and found that the profile was not being created. After investigating this a little more with assistance from our JAMF rep, we were able to determine that the profile failed to be created and the JSS reported the management error:The 'Active Directory Certificate' payload could not be installed. The certificate request failed. The curious part is that some requests were made and granted while others failed. We have since dete

Hey Guys, Not sure if anyone else is running the netsus appliance on CentOS 7, but I ran into a few issues with the installation script for NetSUS_3.0.1.run. Just figured I should share some work arounds: Install Apache, Samba, and Xinet prior to running the installation script. You'll need to install these two dependencies (compat-db-headers-4.7.25-27.el7.noarch.rpm and compat-db47-4.7.25-27.el7.x86_64.rpm) Once you kick off the install script, any other blanks should be filled. NOTE: CentOS 7 no longer keeps daemons for httpd, smbd, and xinetd in /etc/ so the script will freak out and claim it's unable to start these services. You'll have to use "systemctl" to restart these services after the installation is complete. I would advise creating a script you could execute in the future if you ever need to restart or possible upgrade NetSUS in the future. I'm still testing things out, but did notice "Could not save settingsCould not save settingsCo

Scope for a VPP assignment is set to one or more LDAP groups by setting Target Users to All Users, then clicking on Limitations and selecting one or more LDAP user groups (in our case, Active Directory). The users in this group have been assigned to their device (listing them in the JSS), and a VPP Invitation has been made and accepted for all users in each LDAP group. There are other VPP Assignments to distribute different App sets to different LDAP user groups. Question - when a user is removed is from one LDAP group in Active Directory (which is scoped to VPP_Assignment_1), and placed into a new LDAP group in Active Directory (which is scoped to VPP_Assignment_2), does the JSS automatically revoke the VPP_Assignment _1 apps and then re-license the user with the VPP_Assignment_2 apps? When/how does this take place given that neither VPP Assignment has been touched?

Anybody know of a script (or something else) which can bypass or auto-complete the admin credential box when prompted for in Self Service? Specifically the prompt when you attempt to download an App store app.

Hi, My school just updated casper suite to 9.4. I notice i dont have ebook tab in computer section. Do i need to active anything first before using the features? What i know is previously I'm using 9.2 version ( if not mistaken ) then straight update to 9.4. Will this skip update will cause any problem? if yes, what should i do next ? can i revert back and update accordingly.