Hello everyoneI'd like to get some advice on how to improve my imaging workflow with Casper Suite and any other scripts. So here goes: I have a base OS image captured from a fresh MacBook Air, iWork is included, I have a user creatively named "user" on the image as a placeholder, cause I need to make a user to get through Setup Assistant. This is the base OS image I use in Casper Imaging for all computers. Employees get either a MacBook Air or a MacBook Pro Retina. Each laptop is used by only one person so they are the only user on their machine, except for the management account. Casper Imaging writes the operating system, the apps and printer they need (via a smart config per department), it sets the computer name which it asks me for and using the Custom option in Casper Imaging, it creates a user account in their name, which I set manually as I image each computer. I found this a little easier than making a user after the fact. Once imaging is done, I login as em

Hi all, So I've got NetSUS set up on Linux, and created a NetBoot Image using NetInstall Creator (https://jamfnation.jamfsoftware.com/viewProduct.html?id=13&view=info), using Casper Imaging 9.4 When I go to image a machine, it erases the disk, tries a block copy of our OS base image. It seems like the block copy doesn't do anything because it "completes" in a few seconds, and then it goes back to erasing the disk again, and then proceeds to install all the packages but fail on every one. It also fails to reboot, and there is nothing installed, no OS, nothing else. Any ideas what I might be doing wrong here? Actions from Casper Imaging log: Initializing Imaging Process... Mounting https://jds-01.ourdomain.com/CasperShareDAV/... Preparing disk for block copy... Performing Block Copy of 10_9_4_base.dmg... Cleaning up after block copy... Erasing Macintosh HD... Installing 10_9_4_base.dmg... Installing 1Password 3.8.22.

Hi,Just wondering how did you guys manage to fix it. I am upgrading from 10.8.5 to 10.9.4 and after upgrade, I get prompt inside Network Preferences. As soon as I click on it, it says - external image linkThis happens when I upgrade from older versions. When I deploy new image it works fine. Seems I am leaving something from the old configuration that is causing this to happen, but I can't manage to find what is the root of this problem.And yes, I don't want interface to be enabled, so I am using: security authorizationdb write system.preferences allow security authorizationdb write system.preferences.network allow security authorizationdb write system.services.systemconfiguration.network allow and then networksetup -setnetworkserviceenabled "Thunderbolt Bridge" "off" Still nothing works...Has someone encountered this before?

While syncing the home directories we are getting the following error message.{There is a problem syncing the file "file.txt"You do not have permission to sync this file. You can check your permissions in the Info panel in the Finder.}However, at the end of sync the file is successfully synced to the file server. The file is on Desktop and syncing to Windows server. On mac the user has Read & Write permission by default.

anyone know a way to disable the Chrome SharePoint plugin (that Office 2011 installs) through MCX or policy? It doesn't seem to load correctly so the user always sees "Could not load SharePoint Browser Plug-in". thanks!

I tried to push out an application with Casper without problem, but when a user first launch the application, the application will prompt the user to enter the configuration / preferences (which should be common to all uses) and eventually saved to each individual users' ~/Library/preferences as plist. Assuming that I can duplicate this plist for all users, but how can I push this plist with casper allowing it to be copy to the individual user's preferences, when the user first launch this application.All helps will be appreciated.

Hi Guys, This issue has been fixed by jamf but this recently happened on our college's Principal's ipad. We usually have 7 profiles on staff ipads 1x MDM profile, 1x certificate paylod, 1x Self Service and 4x Configuration Profiles. The Principal while outside the school premises over weekend lost the configuration profiles and the rest of the aforementioned profiles stayed on his iPad. It was later on fixed at school by just connecting the iPad to the Internet and then passing a command from jss. I am just wondering that if the profiles can still slip from the iPads just like that. is there anyone else who is facing the same issue.

Just finished installed 9.4 on a test machine, but I can't enroll my machines as I usually do. The user initiated enrollment option seems to be missing (at least from mine). The documentation shows that it has moved from 'Computer Management' to 'Global Management', but not for me (in either location). Anyone else seeing this?

Hello - Is there a quick and easy way to prompt the user to accept/decline a remote control request via Casper Remote? Thanks for any help.

I'm hitting a brick wall with the configurator URL. I have "Allow Apple Configurator enrollment" enabled. I'm configuring the correct URL (i.e. using my server URL, rather than the one given in the example on the page). The process seems to go fine during the setup on the iOS device (although it doesn't prompt me for a user name and password, which I think it should). The device gets the MDM configuration profile, but it never seems to check in to JSS. I can't find it anywhere on the JSS, and the only profile downloaded is the initial configuration profile.

Hey everyone! Since installing a new Cisco Ironport filter and ASA firewall, I have been having some issues with the App store in general. I can load the app store fine (as I am exempting the 17. range from Apple), but its almost as if the CSS for the page does not load. The store loads almost text only, with only a few icons. Additionally, the tables that hold the icons and make everything look "Pretty" and usable are not present. The text simply loads down the page like an old Blackberry mobile browser would. Any ideas on how to repair this issue? Through watching the logs I do not see it trying to access anything I have blocked, so I am try to isolate what exact ports and or other IP's need to be open. Thanks in advance! external image link

HI,Has anyone by chance been able to configure the Atomic Learning iOS App so that it points to their https site (which allows users login with AD and so track their time) I tried using the Casper Focus URL configuration and dropping in our URL, but no worky: <dict><key>JSS_URL</key><string>https://www.atomiclearning.com/login/ourusername</string></dict>

Please advise if QuickAdd package must be signed. When we install the package on our clients they turn up as "Verified" under Profiles. Is it necessary to Sign the QuickAdd packages ?

The subject contains most of my keywords. I need to take these dscl mcx commands: sudo dscl . -mcxset /Users/admin com.google.Chrome AuthServerWhitelist always "*.domain.com" sudo dscl . -mcxset /Users/admin com.google.Chrome AuthNegotiateDelegateWhitelist always "*.domain.com" and apply them via Casper, rather than a script, if possible. I'm not great with MCX anymore (been too many years of mobileconfig for me), anyone have pointers on converting those commands to a Casper Managed Preference?

Anyone ever seen this? server is 9.32Client is 10.7.5 I try to enroll via command line and look what happens... comptuername:~ macadmin$ sudo jamf enroll -promptJSS Username:jssaccountJSS Password:SSH Username:sshusernameSSH Password:Downloading the JSS CA Certificate...This computer was successfully enrolled to the JSS with the following device certificate: "blah blah blah"Retrieving inventory preferences from https://myjsss.server.com:8443/...Locating hard drive information...Locating accounts...Locating applications...Locating package receipts...Locating fonts...Locating plugins...Locating software updates...Searching path: /Library/Internet Plug-InsLocating printers...Searching path: /Users/admin/ApplicationsSearching path: /Users/randomuser/ApplicationsSearching path: /System/Library/FontsSearching path: /Library/FontsSearching path: /Applications/UtilitiesLocating hardware information (Mac OS X 10.7.5)...Searching path: /Library/Application Support/Adobe/FontsSearchi

Hey all, I'm curious if the defaults that can be set within a network segment should be working as i would expect them to... We have 7 remote sites, and each site has their own file share distribution point as well as apple software update server. I was hoping to be able to simply set the default SUS and distribution point within each network segment, and then have machines automatically use the local SUS and DP once they update their inventory @ that location. That doesn't seem to be happening, at least not with the SUS setting. I believe in the past I had a script update the SUS catalogue URL that was in a policy triggered by a network change. Is that still the method i'm going to need to go through to manage each sites specific SUS? If this is the case, then what should be the expected behavior of setting those two default settings for a network segment? Thanks Everyone!

I'm just setting up a new JSS installation for our (sometimes rather globally distributed) employees that doesn't require that they're on a VPN, and would like to make sure their macs can check in without exposing the JSS itself to all the horrible things out there. Sadly, there is very little documentation about this that I could find. While chatting with our security folks, they said they'd be pretty comfortable with this if the web interface wasn't accessible on the wide internet (there should be inside-the-VPN web service to access the JSS's web interface). One of my guesses is that since the web interface's URL routes all seem to go to .html pages, we can have our load balancer setup just 403 requests to those pages if they come from outside the VPN. That works pretty well so far - nobody can log into the web interface like this, and I feel that this can already eliminate a bunch of terrible security problems (fewer XSS vectors, for one!). How

Hi, I was wondering if it is possible to auto populate the user account name into a VPN payload created in Configuration Profiles. I would like the users to be able to just click on the VPN Status on the menu bar to connect & when prompted enter their password - no having to go into System preferences to add any details.(Using os10.9 machines) Thanks

Hi guys, I'm trying to create an enrollment profile to use with Apple Configurator. Target iOS Version doesn't show iOS7 (shows only iOS 4 to 6). We are on v9.3, what am I missing ? Thanks.

Hey all,I have a script: #!/bin/sh sudo dsconfigad -passInterval 0 exit 0 However its been randomly returning this "dsconfigad: No operation specified nor update requested" in the policy logs.I'm not sure what this means, however it does say successful.Any ideas? Is it still working or do I have to push a new command out do you think? Gabe ShackneyPrinceton Public Schools

ran the following script on a macbook air... after doing so... SSH does not work.. and when you try to reboot, it stays at the Apple logo screen... /usr/sbin/jamf createAccount -username CasperAdminAccount -realname CasperAdminAccount -password whatever -home /private/var -admin -hidden -secureSSH

In Casper JSSHow come when I go to Mobile Devices -> Apps -> NEWApp Store App -> Nextand do a search for Money - Learn to Count Money, the app I'm looking for does not show up. Here's the link to the app. https://itunes.apple.com/us/app/money-learn-to-count-money/id342123042?mt=8 Thanks!

Hi, Thanks for reading. We deployed a JSS server, in addition with network homefolders in a company. We setup several configuration profiles for homefolder sync, network mounts, etc. Clients use Microsoft Office (2011) Outlook for Mac to read their email which is hosted on the company exchange server. Email works well, but when one client gets a message one of their emails is being put in quarantine and needs to be released, they have to click on a provided link to release it. By default the Mac's open Safari, and then is being asked for a administrator username/password to unlock a certain keychain for the system to use with the website. It says for the website **.outlook.com a certificate is needed. It displays a JSS certificate in the window but when I fill in the admin user&pass, it comes back with the same window to fill in the username and password again. We tried opening the same link in firefox, then all works well and the email is released from quarantine. The c

I'm re-architecting our Casper infrastructure to eliminate a dozen Xserve DP's. I've not gotten experience with the JDS yet. If my root JDS is in the US, and I have a child JDS in London, can the London JDS cascade DP sync to an SMB share? Or can JDS only sync to other JDS's.

I know I can go from Mac to PC using smb://(computer name)/C$ Is there a reverse to this? Is there anyway way to connect to a Mac's hard drive from a PC?