Is anyone using hash tags for package/file verification before they install the packages on client machines? We are looking for a way to ensure that none of our packages get corrupted either accidentally (through network issues) or intentionally (malicious intent). Short of writing a custom script for each installer to do a checksum, is anyone doing anything of the sorts for their JSS? Thanks. Chris

Is anybody having any success managing Launchpad? It looks like it's an sqlite database, so I'm a little outside my comfort zone trying to manipulate it directly. (The ask from management is that we try and prevent certain utilities from showing up here, such as those automatically installed by Centrify).

Running JSS 9.24I wanted to customize the enrollment icon so I downloaded the DefaultEnrollmentLogin.png edited it with our logo on the screen and then saved it as a .png.... The file size grew from 19KBs to 133KBs. There isn't a restriction on file size, it just says "It is recommended that you use a file with the GIF or PNG format" I also made a .gif that is 98KBs. When I press Upload Login Page Icon, it gets to 99% and then hangs and continues to try, but never fully uploads. I also notice that the file size when uploading is different from actual size on the Mac, but didn't know if that was due to how they calculate file size. When I click save it says the icon has been uploaded and I can upload another icon or reset the icon, but the new icon does not appear on the enrollment page. I've tried other .png and .gif images, but it still just seems to hang at 99% It's not mission critical, but would add a nice touch to the enrollment page. From Chro

*That word is supposed to be REVOKE. I'm hoping someone can help me out of a jam. I am the MDM for a school that collects iPads over vacations. Some students, perhaps desperate to keep their iPads, left them home or didn't come to school on the morning of the collection. I wrote to these students, informing them that they were not to turn of their iPads over break and not until they bring the devices to me April 20th. My plan (now maybe backfiring!) was to issue the Remote Wipe, expecting that it would sit in the command queue waiting for the device to connect to wifi for execution--the same way inventory commands sit. The key thing here was being able to CANCEL the command for those students who indeed kept their iPads off during their vacations. HELP? The command is not queued or PENDING. It's just in the history as executed, even on those iPads with other commands in their queue. Now I have a situation.

I'm trying to use M.P. to setup an app. In the plist of the app it's got the <key>info here</key> and then <true/> <key>enableKeychainLockCheck</key> <true/> <key>enableNotifications</key> <true/> How do I enter that into the M.P.?

I am in a trial of Casper right now, and looking for a little guidance, if anyone has some to offer. I want to create a management or service account on each workstation, hide it from the local user, enable it for SSH, and turn SSH on (to allow Capser Remote). Is there a best practice approach for this from within JSS? I have seen a few different articles on this here at JAMFNATION and am not sure yet which way to go. Thanks in advance. Matthew Ellis

I am running JSSv8.72. Focus v9.30. I can get kids enrolled so that they show up in the classes (devices are shown in Focus app). On the sidebar though, it doesn't say Websites and eBooks. Is there a piece I'm missing? Do I have to do something within a profile in order for it to work?

So I just wiped my SoftwareUpdate Server and redid it and now I can't seem to get 10.7 machines to connect to it properly. We use a profile to push the settings to all machines and it sets them all to http://myservername.interal:8088/index.sucatalog It looks like my 10.8 and 10.9 clients are seeing it based on this setting, but not my 10.7 or at least they are not showing errors like my 10.7 clients are. I followed the steps to get it to download the 10.9 updates as well and that seemed to work, but my 10.7 clients get software update server is not responding message. Any Ideas? Gabe ShackneyPrinceton Public Schools

So I have noticed this lately with student laptops when I go to check on the details of their laptops. When I select a student and click on details I will scroll down the left side and when I see the Local User Accounts it says there are 76 accounts when all it should be the student and my admin account. This doesn't seem to harm the laptops or the student profile but I am just wondering what is going on because I didn't have any of this in the start of the year.

Since we are able to kill a process that is restricted, can we, by extension, make a smart group from people who are running/not running a process? I want to pop up a dialog that tells the end user not to quit TeamViewer.

I'm looking for a way to display a message after the send button is pressed in Outlook 2011 when a message is sent to a specific recipient. Something like, "Are you sure you want to send this message?", in order to prevent messages from being sent to specific recipients. We have already limited who can send to these email addresses in our Exchange environment but would like to protect the people that have the ability to send to these sensitive addresses. Has anyone tried to do this? Any help would be very much appreciated.

I have been asked to script populating /computers/name/MyComputer/subset/location/username/ +with the last person who logged in as a run-once API script. I was thinking I would grab from the JSS the +History >Computer Usage Logs> Username at last login field and use that to put to username but I cannot seem to find that info in the API. I also thought about capturing echo $3 at login (excluding some admin-side accounts) for a run-once to populate that field or grabbing the results of "last" and then putting it up to the JSS. I don't know... Anyway, does any body have any idea on where History >Computer Usage Logs> Username at last login info is hanging out or an opinion on how I might go about scripting this?

I'm following the article for adding custom system preference panes to be able to run with the config profiles as outlines in this article - https://jamfnation.jamfsoftware.com/article.html?id=204. The only one I can't seem to get working is WinShortCutter's to work. I got Java's and the Wacom's working, just not this one... has anybody gotten it to work?this is the info in OSXRestrictions.xml, incl the Java/Wacom one I added before. <dict> <key>displayName</key> <string>JavaControlPanel</string> <key>preferenceID</key> <string>com.oracle.java.JavaControlPanel</string> </dict> <dict> <key>displayName</key> <string>WacomTablet</string> <key>preferenceID</key> <string>com.wacom.settingsPrefPane</string> </dict> <dict> <

I enrolled the iPad, everything finished ok, got message completed successfully, but this time selfservice icon didn't come up. Also checked the JSS server ipad is on the list, only error is "install profile is pending". Any suggestions are appreciated.

Sorry for a noob question but I have a hard time to extract a string from another string and I'm sure one of you geeks has a simple answer for this. I have a string like "domainnameusername" that I extract from a plist using defaults read. I got the domainname with cut -d '' -f1 but I can't get the username. I tried cut -d '' -f2 and cut -d '' -f3 and cut -d '' -f2 and I always end with an empty string. I'm sure it's all about escaping but I don't know enough yet to figure this out. Thanks,Dirk

Hi all, I just finished moving from a JSS 8.72 on an old Xserve to a new 9.25 Ubuntu JSS install. I followed the directions here:https://jamfnation.jamfsoftware.com/article.html?id=122 Everything went very smoothly up until I started testing. Any existing devices, enrolled in the old JSS, are not getting any of the push commands. Newly enrolled devices work fine. I put a CNAME record in our internal DNS for the old JSS server pointing to the new JSS A record. Same for our external DNS. Deleted the old JSS A record. I did regenerate a new, self-signed, SSL cert too. The Self-Service apps also works fine for devices; Self-Service is pointing to the new server. I feel I'm missing one piece?? Thanks,Patrick

1.

So it looked like a simple idea. Use /System/Library/CoreServices/System Image Utility.app to create a NetIntall.nbi that will run my Casper QuickAdd.pkg. So follow all the rules with a fresh Install Mavericks.app from AppStore (10.9.2) with customization to add the package (and automate the install). Install works but comes back and says that it can't install some packages on the target drive (/Volumes/Macintosh HD). I went on to try scripts, other install packages but nothing is working. I did even rebuild the QuickAdd.pkg and make it relocatable (the first one was not) and hard code the paths in the postflight script (also changed it to post install script and built flat). Anyone have this working or any ideas how this might be made to work?

We have imported our Casper 8.73 database onto a DEV JSS server in order to test upgrading to Casper 9.x. However, we want to first verify that we have a fully functioning 8.73 cloned environment. We've made most of the recommended changes for migrating to a different server, but we when attempt to enroll a device: https://dev-casper.mydomain:8443/enroll I get prompted for credentials (as expected), but then after hitting "Login," it redirects me to https://prod-casper.mydomain:8443 to download the PROD QuickAdd package. Where is this enrollment QuickAdd package download URL found in either the JSS or the jamfsoftware database? I did use Recon to create a QuickAdd.pkg specific to our DEV environment and it's sitting in our DEV CasperShare/packages/ folder, as I'm assuming the enrollment process downloads it from the CasperShare. Server: Mac OS X 10.8.5Casper Suite 8.73

Hello, I should preface by saying everything I know about Mac Administration I've learned in the past 5 days, and I should probably mention this is an Active Directory integration. Our users reside in a server 2008 R2 active directory domain with a single domain controller (it's a small office). Currently (it's Windows right now) they write roaming profiles and folder redirects to a synology diskstation in our wiring closet. I'd like to point the Mac 'profiles' to a share I've setup on that diskstation. I've been tasked with getting a fully functional Casper / JSS setup up and running. Part of this is getting 'mobility' running. I think I can discern which directories need to be synced, but I have no idea how to make this happen given the interface I'm presented with in the mobility configuration profile. How do I define a destination disk, and how do I define a separate directory for each user? I've looked all over but the

Before I submit a bug. Can anyone out there running 9.24 confirm that you can't clone a configuration profile?

Hi there, Has anyone had any success running GUI scripts through the Casper Suite as part of a recurring policy? I'm writing a script to automate the migration from a WPA2/PSK network to a WPA Enterprise network in an environment where the endpoints are not domain joined. The problem I'm running into is the part of the script that's responsible for clicking the AirPort menu bar icon and selecting the preferred SSID is not executing when run as part of a policy. I can make the exception by modifying the TCC.db SQLite database from the script if I run the policy with a manual trigger from ARD, (ARDAgent is given access to control the computer). It also works if I run the script manually from the command line. I've tried making exceptions to the TCC.db database for com.jamfsoftware.jamf.agent, com.jamfsoftware.task.Every 15 Minutes, com.jamfsoftware.jamf.daemon, and com.jamfsoftware.startupItem. I've also tried wrapping the script in a payload-free package and m

We have using that we want to be able to use Caper Remote but not have full access to everything in the JSS database. I am trying to figure out which privileges need to be given to the users, an LDAP group. They were given everything from Auditor and Enrollment as well as everything under Casper Remote. When users try to use Casper Remote to install a package or just tell stations to install updates they receive the following error: “There was an error creating resources on the jss”. What could I be missing? Is it having trouble creating the logs?

Anyone having issues uploading large file to Casper Admin? We use JDS as our distribution platform, when uploading the Mavericks installer it fails with an error 500, which I can't find any details of, also logs look ok. Any ideas? I did find about manually adding a file then running sudo jamfds inventory, but this seems like a walk around not a fix.

Hi everyone! I know its possible to create a smart group based on com.jamfsoftware.osxenrollment. However at the moment, all of our machines have currently been enrolled this way. What I plan to do is to separate the process for user initiated and recon enrolled machines however I'm having to do it by excluding the UI group from existing policies but at the moment thats excluding all my currently enrolled machines too. Is there an easy way to remove com.jamfsoftware.osxenrollment from the install history with a script? Any help would be greatly appreciated. Thanks Dave