I recall there being a specific requirement to allow App Lock to work. I want to say the device had to be supervised, is this correct?

Has anyone successfully completed an advanced search that will display the computer OS and the Local User Accounts? I am able to search for a single Local User Account by looking for specific users via the "Receipts" options, but would like to do a mass search for all 10.8 machines and have the local user accounts displayed (or exported) as well.

We seem to have started having a problem with Remote Login on our Mac OSX systems. We have (had) them set to allow access for "All users". Recently, many of them have changed to Allow access for "Only these users" and, because no users are selected, we lose the ability to ssh to the systems, meaning no Casper remote, etc… What could be causing this setting to keep changing and how can I stop it? I have a policy that runs this command daily, but it doesn't seem to impact it./System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -allowAccessFor -allUsers -privs -all

The PDF mentioned in the title is here: http://www.jamfsoftware.com/libraries/pdf/white_papers/Deploying-CrashPlan-PRO-with-the-Casper-Suite.pdf I'm not able to do step 3 in the "Configuring the CrashPlan PRO Client Installer" because the installer is no longer an .mpkg - It's a .pkg so I am not able to "View Contents" of the package or cd into the .../Contents/Resources/ directory within the package. I noticed this white paper was written in July 2010 and I'm very new with Crashplan Pro. Did something change between the time the paper was written or with CrashPlan Pro? By the way, I downloaded the client installer directly from our Crash Plan Pro server and directly off Crashplan's site. So far, all the installers are .pkg and not .mpkg files. I have Pacifist and can see the contents of the installer package but the structure is not what I expected and I am not sure how to create a custom installer because I am not sure what to pull out and

We've run into a snag when testing CrashPlan PROe deployment via Casper using JAMF's instructional PDF. While running the policy at login, the custom files will be planted into /Library/Application Support/CrashPlan/ and the application will install. The user name successfully connects to their LDAP account but the home folder path is empty, so nothing is selected to backup. So far we've tried using the recommended setting in our userinfo.sh file: CP_USER_HOME="$HOME" When that left the result blank when we examined the install.log we tried this one: CP_USER_HOME="/Users/$user" And that resulted in the entire /Users folder being selected for backup... Ugh!We're running 10.8.3 with Mobile Accounts from Active Directory, so the user's short name matches their LDAP account and home folder title. Any suggestions?

Hey all,So I have been trying to remove the default setting in 10.8.3 to require a password during wake from sleep. I can acheive it through an osascript which also seems to work when I use it in either Casper Remote(advanced tab)or in ARD unix code, but I cannot get a policy to run it in the same advanced tab and I can't seem to get my scripting correct to make it run in a shell script. Any help would be lovely! This command also of course works in the local terminal window. I assume its because I need to translate the apple script to a shell command. Ideas? sudo osascript -e 'tell application "System Events" to set require password to wake of security preferences to false' Gabe ShackneyPrinceton Public Schools

Hi All, I've searched around online and haven't found a solution yet so I thought I'd post here. Does anyone know if there is a way to change the file association for Firefox so that PDFs download and open (with Preview or Adobe Reader) rather than use the "Adobe Acrobat NPAPI Plug-in"? Currently on our computers, PDFs are trying to use the NPAPI plug-in and are opening to a blank tab within Firefox. We'd rather have PDFs download and open with an app. Wondering if there is a way to do this with a terminal command or script to update a large number of computers with this issue. Thanks!~Joe

We're starting to have some issues with our district apple id's getting used to authorize computers. So when 5 have been authorized, we can't get our provisional nodes authorized therefore no apps can get installed from Configurator onto the iPads. Just curious if anyone else is running into this and if you have a fix? In the past we used to be able to de authorize all computers and re authorize the provisional node, but Apple has done away with this feature in iTunes. Thanks,Chuck

Does an API end-point exist to provide a list of computers in a building? I'm currently iterating through each computer item and sorting them into arrays that correspond with each building. However, pulling down information on each computer just to update the contents of a single building seems like too much work.

Hi all, I am having difficulties adding an App Store App in 8.63. When I go to (Management -> Mobile Device App Catalog -> Add App -> App store App) when I do a search for the App I get no results. I have looked for Pages, Keynote, etc. and nothing pops up. I'm not behind a proxy and this used to work. I'm not opposed to adding it manually but wanted to see if there was something I was missing since the last update. The last time I had to add an App Store app was back in September 2012... Thanks!

If a drive was encrypted without the use of Casper. Is there an easy way to rotate and then capture a new recovery key?

Hello, Is there a way to not force the local iOS backup to be encrypted? We only have two policies deployed: one for WiFi, and the other with a web clip. However, every time people try to do the local backup, iTunes states that the iPad requires the backup to be encrypted. However, when I unenroll the device, it can backup fine without encryption. At this point, we are not planning on forcing backup encryption. Thanks, Tim

This is a new installation for me, I am relatively new to the product. I built a bunch of self-service packages, and tested a few deployments with no issues, this has been working fine for about a week. Today it seems out of nowhere the apps installed by self-service will not open, they show "no access". It looks like the owner (original creator of the initial package) is the only one who has access. These packages were made with a local admin account (captainla), but I am not sure why apps being deployed with Self Service are taking the captainla account as the owner, when System should own the apps, right? Thoughts?

I have a specific need to disable the Check for Updates Automatically in the Java Control Panel across multiple computers. I can successfully build the plist/dmg and distribute it via Casper. However, when the Java control panel is opened, the control panel resets the setting and enables Check for Updates Automatically. Any thoughts?

I have tested/tested and tested some more. Here's all I'm trying to do; --Use JAMFHelper to put a message on the screen telling the users some magical/awesome stuff is happening (I've tried both with and without the -startlaunchd option) --Have my shell script do the magical/awesome stuff, aka trigger a policy to run. --Then kill JAMFhelper and move on. (with the -kill command) The issue I'm having is, my script waits for jamfelper to close before ever moving on to the command to trigger the policy. I'm WAYYY okay with looking silly, and someone telling me that I'm missing something very obvious, and I really hope that's all it is. Thanks Everyone!

Is it possible to restrict printing to a particular printer using AD security groups without adding them to a Windows printer server? I've been experimenting with CUPS allow groups, but have thus far been unsuccessful in restricting print access. In other instances we have configured default settings for printers in the local CUPS interface, captured it with Casper Admin, and deployed it seamlessly. This request has got me stumped. Any assistance would be greatly appreciated. Thanks!

Every time we pull a report and select csv, we end up with an html file. So we have to navigate to ~/Downloads to select report.csv.html and remove the .html suffix. It's a drag...is it a bug...or should I file a feature report? Not complaining, just inquiring (yea, that's the ticket!). :) TIADon

Has anyone got a copy of Java for OS X 2013-001 installer?Please pass me the link if anyone has the original Apple installer (JavaForOSX2013-001.dmg) as the Apple Support site replaced it with the latest version. Thank you.

I have successfully captured the "Dock" .plist using Composer "User Environment" (as a DMG). Uploaded it to Casper Admin and selected "Fill User Template" I am pushing this out via Self Service, and for some reason, when I login as the user (AD Centrify), nothing. Might someone have the exact steps (I seem to be missing something, etc.). thx again in advance, John

I have come up against this error "Lookup logs:java.sql.SQLException: com.jamfsoftware.HTTPRequestActions.Controller.processRequest: SQLException from executeQuery: java.sql.SQLException: Table './jamfsoftware/log_actions' is marked as crashed and should be repairedorg.apache.jasper.JasperException: org.apache.jasper.JasperException: java.lang.NullPointerException" when i go to Policy -> chose on any policy -> click on view status -> then the error above show up. I checked the size of the log_actions.MYD and its 121GB!!! Yikes I have tried a repair tables through Casper and a Repair whilst trying to backup but both state that the MYD is marked as crashed. Anyone have any pointers of which way to go with this one, I do have a good backup from 2 days ago - but restoring that will most likely only postpone the issue not fix what us causing the inflated MYD Look forward to any replays Karl

I just finished the 4-hr training and had one iPad enroll the JSS suite. This iPad already had some apps install before enrollment and they are now showed as Unmanaged apps. I wondered if it's possible to turn these Unmanaged apps into JSS Managed apps. Thanks.

Hi all, We're starting to Partition our Macs with 2 partitions. 1 is for the OS, the other for User home folders. All accounts will be AD mobile home accounts, or our default admin account. Rebuilding will wipe the OS data partition only. Do we then need to correct the permissions on the Users home folders post rebuild? The accounts UniqueID & primary groups ID will be the same pre & post rebuild.

Hey everyone! I have been working with configuration profiles lately, and I know that you have to open up ports 2195/TCP, 2196/TCP, and 5223/TCP for the APNS to work and send the config profile to the computers. Understandably so, my networking guys are concerned about opening up our LAN to an external source - could potentially be bad. Are there any best practices out there that anyone is using? Or any ideas on how to get configuration profiles to work without opening up these ports? Thanks!

I'm running into an issue with some configurations not being able to lock the boot screen for my techs to know that they should not touch the computer things are still happening for imaging. I have a localization DMG package for other languages that seems to be interfering with it showing up. Any ideas on how to fix?

How to scan for a program on computers using Casper?