One of my managed clients (a 10.8.4 server DP), is submitting malformed inventory.. Basically inventory is failing & it has a Recon date of 11/30/0002 at 12:00 AM in the JSS! I have re-repaired permissions, verified the disk.. Removed the mac from the JSS.. Removed the framework.. Made sure that DNS is correct & flushed the cache on the client.. Removed all JAMF keychain items & yet we still keep getting errors like the below: Thu Aug 22 16:44:34 SK-MAC-JSS-01 jamf[821]: Upgrading jamf agent... Thu Aug 22 16:44:54 SK-MAC-JSS-01 jamf[821]: Checksum of the jamf agent did not match. (md5: /private/tmp/jamfAgent: No such file or directory != 209ae2ad3b15f99cd63ac5c0c1f9470d) Thu Aug 22 16:44:54 SK-MAC-JSS-01 jamf[821]: Upgrading jamfHelper.app... Thu Aug 22 16:45:15 SK-MAC-JSS-01 jamf[821]: Checksum of the jamfHelper did not match. (md5: /private/tmp/jamfHelper.app/Contents/MacOS/jamfHelper: No such file or directory!=d3d9721ff246acac29f7d3f37e28b08c) Thu Aug 22 16:45:15 S

Hey all my fellow JAMFers, Just curious if it is possible to set a local distribution point for a Pre-Stage on computers that will be imaged on network? or if you can somehow copy the autorun settings to my local DP and have machines use it i.e. If I wanted to image from my thunderbolt drive I set up with 2 partitions(bootable OS, and replicated DP w/ Casper Imaging at root), but still have it call down all the Pre-stage settings, and keep run count. I am able to image with the thunderbolt drive no problem, but it would be nice to keep a run count for my environment, and ease the learning curve for some of the technicians who would be using this mobile imaging solution. As it stands right now, everything images, but settings are blank when casper imaging launches, and none of the post run scrips are running(bind AD, JSS enrollment, hardening, etc.) which is just going to be a much larger learning curve for the technicians who will be assisting me. Ultimately, i

Hello all,I'm missing the possibility to create a Policy for a Specific User Group (Assign to Specific User Groups - Add User Groups - Lookup Groups) from the Active Directory Server like in Version 8.7. The binding to the AD Server is configured and working.Thank you in advance for your answers and best regards! Martin

I didn't want to hijack @johnklimeck's thread: https://jamfnation.jamfsoftware.com/discussion.html?id=6438 So here's a related issue...users who disable our hidden local admin account (not our hidden Casper management account). Aside from tracking/reporting these incidents, we need a way for Casper to recreate the account. Another twist is to remove the hiddenadmin user home directory if it happens to be in /Users. Three commands are needed: sudo dscl . delete /Users/hiddenadmin ; sudo rm -Rf /Users/hiddenadmin ; sudo jamf createAccount -username hiddenadmin -password xxxxxxxx -shell /bin/bash -admin -hiddenuser -home /private/var/hiddenadmin Admittedly this is a BFH, but it's the only sure fire way to ensure the account is always enabled. No issue with deleting the home directory, since nothing should be stored there anyways; no issue in blasting the account from dscl since it's a local account and we can't risk the account existing (with an unknow

I'm deploying 50 laptops with parallels for a customer. I built the deployment package and added our enterprise license. Tested the package and it works fine. However, when I deploy the same package via Target Mode Imaging (TMI) Parallels, and only Parallels, isn't loaded. If I move the package over to the just imaged system and run the Parallels installer it works great. Deploying the vm container works great via TMI as well. It's "only" the application that is the problem. My first thought was that the installer wasn't working because it's not a "flat" installer and our distribution point is a Windows server. But if I manually mount that distribution point and pull the package down by hand and install by double click it works fine. Any thoughts on why this .pkg won't work via TMI but will with a manual double click? Thanks in advance, pew

Hello All, I recently noticed that the warranty field for all my mac's displays as "N/A" and thought it was because Apple had deactivated my GSX service account. ARG! I got the account reinstated and have logged in successfully and tested successfully within the JSS GSX settings. Alas, my warrantly information still displays "N/A". I found one other thread on this that mentioned proxy settings as blocking the traffic but I've confirmed that there are no proxies in place on my JSS server. Any other thoughts? Is there another way I can test this traffic from my GSX server to see if it's being blocked? Thanks in advance! Tori Paulman

Hi All, I've been trying to add an app to the mobile device app catalog for over a day now. Originally I thought it might be the app store but 24 hours later the same problem is still there. I click on Management / Mobile Device App Catalog / Add App / App store app / enter Drive as the app name and pick the Australian App store (doesn't work if I use the US store either). Casper spins it's wheels for about 30seconds or so, then returns an empty list. Any ideas? Cheers,Chris.

So this doesn't have anything to do with Casper, but hopefully someone knows a good answer. There is a need to have an internal drive in a MacPro show up as external. This is for a piece of software that won't run properly on an internal drive, but will on an external. Ugh... So some basic searches on Goog wasn't any helpful. Looking to see if anyone here has a solution. Where is the flag that marks a drive as internal or external, and can you modify/trick the OS into thinking one is one way or another? Thanks in advance.

I have a situation where I am working on doing a DMZ install of the JSS. what I was under the impression is that with a DMZ JSS there is a Database there for fail over as well as the one it is pointing to internally. Is this correct or is the DMZ JSS only pointing to the internal database and if it loses contact with the master it then is dead also. Currently the main JSS is running on a mac mini and houses the database.

Recently received some new 13" MacBook Air (6,2) devices and am trying to apply a configuration profile that involves a SCEP payload. When the profile is attempting to be applied to the machine, it fails with <NSOSStatusErrorDomain:-67693> within a few seconds of the notification being sent. I have recreated a new configuration profile and isolated the problem to be just the SCEP payload as being the cause of the problem. We are running Casper 8.71. Does anyone have any idea as to what this error means and how it can be corrected? We are not having this problem on systems that were updated from 10.8.3 to 10.8.4 bu

Hi everyone! I cannot find any documentation regarding the Autorun checkbox found in the Packages tab while editing or creating a policy. I understand what FEU and FUT do, but I'm at odds with Autorun. Automatically launch an application it has just installed? Thanks!Sal

Until recently, we have been using Mac mini servers with Lion installed on them as our Casper Imaging stations. We could NetBoot over USB and image without issue, aside from occasionally long boot times on Thunderbolt machines. However, when we upgraded one of our minis to 10.8, we began to have issues with Casper Imaging. Our configuration was set up to run a shell script which would use command-line tools to perform a block copy of our selected image to our Macs. It worked without issue on all of our machines, be they MacBooks, MacBook Airs, or iMacs. However, after the upgrade, the shell script would occasionally be skipped by Casper Imaging and it would jump directly to the second item in the configuration. It would finish installing the other items in the configuration and reboot, as normal. However, due to the script being skipped the computer had not actually been imaged at all. As a test, I created a new configuration that simply used Casper Imaging to perform the block copy

I ran into this issue on a number of MacBook Airs where I work. Here's a fix:1. On a MacBook Air (mid 2012) install the update. You can use Software Update or download and install it manually (http://support.apple.com/kb/DL1655).2. When prompted, select the option to Restart during the installation process. The computer will restart but the Firmware Updater will not be run.3. After the computer restarts, enter a password to unlock the disk and continue starting up.4. When the computer finishes starting up use the following terminal command exactly as it appears below to prepare the update: sudo bless --mount / --firmware /System/Library/CoreServices/Firmware Updates/HardDriveUpdate3/hdfw.efi --payload /System/Library/CoreServices/Firmware Updates/HardDriveUpdate3/HDFW --nextonly --setBoot --shortform You may see a message similar to the one below after executing this command. If no other messages appear then you can ignore it and proceed to the next step. Could not get informat

I've used Removable Mac Addresses, but we were hoping to add some sort of label as our number of Ethernet to ThunderBolt adapters has grown dramatically this year. I assume we're still stuck with unlabeled connectors? Do some of your use both fields? Add it to the removable MAC addresses, and also create a peripheral type with a custom label?

Hi JAMF Nation, I've lost the ability to manage a 2011 Macbook Pro (OS 10.7.5) so I'm trying to run a sudo jamf enroll but the enrollment always gets stuck at Locating mobile device records. sea-xxxxxxxx:~ xxxxxxxxx$ sudo jamf enrollDownloading the JSS CA Certificate...There were (1) previous JAMF device identities found on this computer. Removing...This computer was successfully enrolled to the JSS with the following device certificate: "AD9DCCB5-DD5B-5AAB-8525-B7327FF15EA9"Retrieving inventory preferences from https://sfo303ut06.na.corp.yrbrands.com:8443/...Finding extension attributes...Locating hard drive information...Locating hardware information (Mac OS X 10.7.5)...Executing Unix applications...Locating accounts...Locating applications...2013-07-12 08:33:25.161 jamf[1214:a07] CFPropertyListCreateFromXMLData(): Old-style plist parser: missing semicolon in dictionary.Locating package receipts...Locating printers...Locating software updates...Locating fonts.

If you work in the Enterprise or in Education managing Macs and/or iOS devices please plan to join us for the first gathering of our San Francisco Bay Area macbrained.org Mac Admin Community. At this kick-off we want to help build the format and agenda for future meetings in and around San Francisco, Silicon Valley, and the South Bay. Let's build this local community together! RSVP NOW! http://macbrainedorgkickoff.splashthat.com/ WEBSITE: http://www.macbrained.orgEMAIL: info@macbrained.org

I'm considering deploying a pre-configured Firefox profile for new staff computers and I'm wondering if anyone has tried this and whether there were any problems doing it. On a fresh system, I installed the latest version of Firefox and used Composer to capture the Firefox and Mozilla folders located at ~/Library/Application Support as well as a couple plist files (com.apple.ATS.plist and org.mozilla.firefox.plist) from ~/Library/Preferences after I made some very basic setting changes in Firefox's preferences. I inspected all the various files located in those folders and only one (secmod.db) seems to have a path referencing files located in the current users folder. A little Googling reveals the secmod.db and cert8.db files are files that apparently can be deleted and new ones will get created at launch time. So I removed those files from the list of captured files. My limited testing reveals things seem to work as anticipated. I know when you launch Firefox for the fi

Is it possible to push out a supervisor profile to iPads via the JAMF system? We have a bunch of iPads that have been deployed and are looking to install the iBoss mdm profile on the device to provide web filtering off site. However it requires that the supervisory profile be on the devices first.

I'm looking at these 2 settings. Configure SSH (Remote Login) to only allow access for this user - Under Settings, Casper Admin, Configuration, Management. Ensure SSH is running - Under Settings, Computer Management Framework Settings, Startup Item. I believe number 1 is the option to setup Secure SSH so that Casper Remote can connect to the client machines and do its thing. Number 2 is Normal SSH and is the one that appears ticked under Sharing when enabled. What I don't understand is with number 1 ticked and number 2 unticked Casper Remote doesn't work. How can I ensure that Casper Remote can access clients without giving access to other users ie The more secure the better? I'm running Casper 8.71

Hi guys Does anyone know how to make VMware fusion recognise my vms on an external drive? I'm on a laptop and I keep running out of space. I'm kinda thinking of symbolic links. Has anyone else done something similar?

Hi All, Currently trying to use Scenario 2 (from https://jamfnation.jamfsoftware.com/article.html?id=173) from a 10.7.5 client machine. All seems to work fine, but on the reboot of the installer app the machine will boot to an Apple Logo and Kernel Panic. The installer app is cached locally first and the executable within launched from Self service using the settings above.If the installer app is launched manually (although requiring local admin authorisation) it will work fine - ruling out a bad installer. Any ideas / assistance please? Darren

What type of asset recovery/tracking software do you folks use? Basically we are a medium sized school district considering going from just a few hundred iPads to doing an iPad 1:1 pilot program, and I'm trying to cover all the bases. Sure there is Find my iPhone, but that was primarily designed for consumer use from what I know of it. I want to see what other folks in both the enterprise and the EDU sectors are using. If you are using Find my iPhone, feel free to tell me about how. Privacy policy and issues with tracking? Do you folks not track the devices and handle it through your legal department (i.e.. a signed contract to receive one)? Feel free to discuss this asset management aspect in any way you feel is relevant. Thank you in advance.

Is it just me, or do you have to quit and re-launch Admin for this option to reckognize a newly-added package?

Ok here it is; I have sent this to over 20 people on this list so far and still I have been asked for it. So I have decided to post it here. It works just fine for MacOS X 10.6.x built-in CiscoVPN. You can also use it with Casper Policy for quite deployment. You can get the logo from the link below for Self Service.http://rocketdock.com/addon/icons/14259 Please read the beginning of the script for instructions. Script can do with the tidying up I guess... Enjoy Cem #!/bin/sh # This script configures built-in VPN (Cisco IP Sec) for logged in user. Server, Shared Secret, DNS Search Domains and Web Proxy # Requires JAMF framework and "yourcompany VPN.networkConnect" package to be installed to the "/Applications/Utilities/" first. This file will be removed after. # To edit this script, do "command - F" from your keyboard and use "Replace & Find" function from your favourite text editor. # Simply replace "yourcompany" to your co

Does anyone have a successful script that imports a prebuilt VM into Fusion While keeping the list of vm's that are currently in vmware.? The deploy documents from vmware don't work and the jamf ones don't talk about this.