Created the Chrome Remote Desktop Host DMG and pushed that out, but now I'd like to force the app into Chrome app list as well. Anyone been able to push out Chrome apps with Casper?

We are starting a Self Service based upgrade from OSX 10.8 to 10.9 on our fleet of macs. Using the latest 10.9.4 installer I have created a policy to cache it to the mac then the user can initiate the upgrade to Mavericks from the cached package.The upgrade works well except the macs are no longer connected to our WPA2 Wi-Fi network.If they select the company network the mac will prompt for the Wi-Fi password that the mac remembered pre-upgrade. This seems to be an issue with the Wi-Fi details not being moved correctly to the new Local Items Keychain. Does anyone have a work around to this issue?Thanks in advance!

Hello, Is there any way to change the privileges of the start button on the login screen so anyone can press it? EG: I have some laptops used in a classroom environment that unfortunately have to have fast user switching turned on.The reason for this is incase someone doesn't log out and just closes the lid and puts it away, the next person can login without any bother, however this then leads to one of our managed printer popups getting super confused and spewing errors out everywhere. What I would like to achieve is making it so that anyone can press the restart button on the login screen or when in their account and it not pop up asking for the admin credentials due to someone else already being logged in.Based on the fact os x is unix I was hoping there is some group I can add all users to, to allow restart by anyone under any condition

In our PC environment we have something they like to call 'Password of the Day' which allows the help desk tech grand a limited time admin password to a user who is at home or otherwise not able to be helped directly.Is there any way this could be implemented with Casper?

Just discovered since upgrading to 9.01 that my mobile OTA URL enrollment does not work. Error is:Access DeniedThis invitation is not valid Invitation? I didn't think OTA URL enrollment used an invitation? I checked the settings for my User-Initiated Enrollment for Mobile Devices and my option is still checkmarked to allow enrollment without an invitation...soooo what gives?

Uh oh. We're about to upgrade from 8.73 to 9.32. We've been testing this process on our test environment and so far we've only hit one major snag. The admin accounts on the JSS lose their administrator permissions, and sadly that includes the local admin account too. So we can upgrade but then can't administer the JSS. Does anyone know of any way via MySQL to grant full admin rights to an account? If the worst happens, it'd be a good way to recover things nicely. Help!

I have a dmg that installs an application. The application is just the .app that gets placed into Applications. I know that if I index the dog in Casper Admin I can then remove the application from the client stations. Here is my question. If a user updates the software on their station but it is named the same thing, will the indexing of my dmg still allow me to remove the application from the client's station? Does the removal just go my file name or my some other indicator?

We've setup a Disk Encryption configuration and policy for FileVault2 (institutional key). We're intermittently getting the following error after imaging a system:"Error encrypting disk: Unknown error code 188" The policy trigger is set to "Recurring check-in" (every 5 mins) and the execution frequency is set to "Once per computer". I've tried manually pushing the policy using the <sudo jamf policy -event "" -verbose> and <sudo jamf policy -none -verbose> commands but the policy isn't found. When I tried to enable FileVault via System Preferences manually, an error came up stating that the boot drive config was corrupted.Any ideas on what to do besides re-image and hoping for the best?...

I'll try to keep it concise. we set up our master casper server in the MS building in our network. we would like to set up two more in the HS and K6 buildings that would mirror the master. the point being that the enrolled macs in their respected buildings would be served by the server in their building. (software updates and self-service) is their a guide on how to do this?

Hi all, I am in the process of setting up a test Casper Imaging environment and I am running into a little difficulty. I have imported our current production JSS into our test environment and it imported successfully. However, when I try to connect to the test JSS with the Casper Admin application, it reverts back to the production JSS address every time you try to enter a new JSS address in the preferences. However, the correct CasperShare folder on the test server is mounted, even though in the preferences, the JSS address entry is pointing to the current production server. I have made sure to update all of the server information to reflect the change in distribution point, but there must be something else I am missing. I can also image a computer in our test environment, as the correct CasperShare is mounted, but I notice the newly imaged machine has Software Center pointing to our production server as well, so the computer never gets enrolled into the test JSS. Any help would

Apple just pushed out a bunch of new channels to the AppleTVs. http://9to5mac.com/2014/06/24/apple-tv-adds-abc-news-aol-on-pbs-kids-willow-tv-and-redesigned-flickr-app/ Is there anyway to configure an AppleTV profile that automatically hides all new channels? It is a pain to have to go around to each AppleTV and manually hide new channels. Thanks! Corbin

Hey all, I'm having trouble with getting my search base working on my new server. However, it only seems to be with User Group Mappings. My (current) JSS server is on 8.73 and it works fine but with the new 9.3 it seems to not be working with the identical settings. I don't know much about AD or LDAP. However, I decided to run a few dscl commands to see if I could see a difference. So, my primary example is with a group named "gEUE." When I do a read of it in dscl it comes up with this as it's base path: dsAttrTypeNative:distinguishedName: CN=gEUE,OU=Groups,OU=World Headquarters,OU=Office Locations,DC=northamerica,DC=cerner,DC=net My search base on both servers is: OU=Office Locations,DC=northamerica,DC=cerner,DC=net but for some reason it doesn't find anything. EDIT: I suppose I should also say that it searches fine for users, just not for groups. Anyone have any thoughts?

I have a script that i'm putting into Casper for techs to modify a plist on a users computer.It is using up to $10. Whenever I run the script field 10 (and 11) return odd results. example: #! /bin/sh echo $1echo $2echo $3echo $4echo $5echo $6echo $7echo $8echo $9echo $10echo $11 In Remote, add data to fields. in this example the number of the variable.external image link when it is run, i get a "/0" and a "/1" no matter what I enter for data. external image link ... anyone have this problem, or am just doing something stoopid? Peter

Hi folks, I see a lot of useful options in the "managed preferences" section but I really don't know if we can use them as I couldn't find a way to actually see if the policy will run. Apart from that I'm not able to add the policy to my dashboard. Would be great to know there is a way to use managed preferences. Perhaps I am overlooking a setting here? By the way, I was looking for a way to set a default wallpaper on clients.

I'm having trouble with my 10.9.3 Netboot image with Casper Imaging. I built my Netboot image based on the following articles:https://jamfnation.jamfsoftware.com/article.html?id=307https://jamfnation.jamfsoftware.com/article.html?id=313 When I run my imaging workflow everything is skipped and it hangs on "Ensuring system files are hidden" forever. I have to force shutdown. It doesn't matter what my workflow contains, 2 packages or 25 it does the same thing with this Netboot image.

Hi,I would like to remove a firmware password on machines have OS X 10.7 and others have OSX 10.8.I created a policy which will copy the setregproptool depending on the OSX version to the /Library/Application support/JAMF/bin folder, Then added to the policy to run the following command:/Library/Application Support/JAMF/bin/setregproptool -d -o 'current firmware password'It says it was completed and run the policy but the machine still have the firmware password if I try to run the command manually into terminal it works and the firmware password removed.I tried to run the EFI Password feature on the JSS as well with NONE value to remove it. it was asking for the current firmware password and timing out.I would appreciate someone to tell me what am I missing here. 1- Is there any known issue with the JSS to run a command as it worked before for me when I setup firmware password.2- Do I need to include the current firmware password somewhere in my policy for EFI Password feat

Hey guys, I was updating my image recently and I decided to move to Java Runtime 7. I noticed that after I started using this, the Extension Attribute stops working, or rather it reports as not installed even though it is. This is the EA that I'm using: #!/bin/sh #Check if java_home is defined javaHome=`/usr/libexec/java_home 2> /dev/null`; if [ ! -z $javaHome ] then vers=`java -version 2>&1 | grep "java version" | awk '{print substr($3,2,length($3)-2);}'` echo "<result>$vers</result>" else echo "<result>Not Installed</result>" fi I think I know what the problem is, I just don't know how to fix it.It seems that when it tries to run "java -version" from terminal it fails because we don't install the JDK. (If I go to terminal and type "java -version" it attempts to give the site to install the JDK). We would rather not install the JDK as well, unless necessary. Anyone have

Hi All, Does anyone already have a script for a user to initiate their own local to mobile account migration via Self Service? The machine will already be bound to AD. The scenario will be:1. User runs Local to Mobile Account Migration script via Self Service.2. Rename computer to serial number3. Log out the current user4. Delete the current user's account keeping their local home directory.5. User then logs in with their AD credentials picking up the local home directory. (all local usernames match AD usernames.) Thanks! ;)

When we migrated from 8.73 > 9.31, we found the "Migrate" button in Casper Admin 9.31. We alerted JAMF, since docs only say migration is needed if you're going to JDS/Cloud. I'll post separate observations under "JSS 9.31" header. HTHDon

I have a policy to trigger at 'check-in' with the execution frequency to run 'once per computer', I am curious to know if this policy fails to run appropriately (registers in the JSS as failed) will it know to run again or has it already registered the execution frequency of running just the once?

Hi Folks, I'm making progress working up to replacing our monolithic DeployStudio imaging with Casper. I'm having trouble with our custom User Template. In 10.9.3 the user template (for English speakers) is located at: /System/Library/User Template/English.lproj/ Once I do all the customizations I drag the template from the Finder (while logged into the GUI as root) to the left side of Composer and build as PKG and deploy. The problem is, the User Template does not get deployed to the path above, it seems to get deployed to the top of the target hard drive, which is useless and leaves locked folders there that should not be there such as Desktop, Movies, Music and Pictures. I suppose the stuff in Library/Application Support and Library/Preferences ends up in the main Library folder which is also incorrect. I'm probably creating this the package the wrong way because I'm new here. If you are not falling over laughing please set me straight. ;) Thanks. Jim

I know I am missing something simple here, but what is it? I have a 1GB mpkg that I need to deploy through policy. I have user interaction enabled, with option to defer (I know that if I disable the option to defer, that would be one solution to my question, so let's assume its a requirement). I created the package in Packages. The policy has the mpkg as its package. The mpkg will copy a few pkgs to the client computer and the mpkg's post-installation script will 1) throw up a cocoaDialog splash screen with progress bar, 2) install the software from the pkgs, 3) and configure the software. My question: How can I get a splash screen showing on the client computer while the policy's 1GB mpkg is being copied to the computer?

Just wondering if there is a way to disable 'Find My iPhone' feature on ios devices using profiles or plist? I have seen a lot issues about cannot reactivate ios device after redeployment because find my iphone was not turned off by previous user - we wanted to avoid this.

We've run into a couple of issues and we're not sure if they're related. Our JSS is version 8.73 and it's running on OS X 10.6.8. First, our Tomcat Website Certificate has gone blank and says Self Signed. If we try to click the link "Replace with certificate from the JSS's built-in CA", we get an error that says "Could not write to /Library/JSS/Tomcat/conf/server.xml". This comes after spending a week or so at the beginning of the month re-issuing new certificates after the OpenSSL fun-times. As far as I can tell, the permissions on /Library/JSS/Tomcat/conf/server.xml are as they should be, although if someone can confirm for me that would be great. The second issue may or may not be related. We're not sure when the certificate issue began, but this issue started last night. All of our policies that download a script or package from the server are failing with the following errors: Downloading https://our.server.com:443//Package

Hello - I am looking to force a logout as part of my Filevault self-service policy configuration. I have done some research and have not found a straightforward way to do this. Any help would be appreciated. Thanks.