I want to create a Self Serve item that will then list the available software updates with the friendly name like you'd get from the GUI, not the ugly output you get from the command line; even though I'll have to call the command line version to grep whats available. I haven't thought out the delivery logic yet; jamfHelper, shell, Applescript, custom triggers etc. Whatever the case, is there a way to pull the nice names from the command line? thanks,Darrin

Hi All. We've recently rebuilt our Master Casper server to 10.8.2.. the Replica's are on 10.7.5. I've tried the below to recreate the SSH public keys on the clients so we can re-do the RSYNC connections unprompted when running a shell script via a launch daemon. However I keep getting the error "Permission denied (publickey,gssapi-keyex,gssapi-with-mic,keyboard-interactive)." when running as root. If I run as any other user, I am prompted for a password.. so i'm guessing it's not working.. Maybe something has been left on the replica's referencing the old master? Any ideas? 1. Login to ReplicaServer as Administrator. 2. Click “Go” in the menu bar & select “Utilities.” 3. Once in the Utilities, open Terminal. 4. Enter the following commands in order on (each is on a single line). Press Enter after each command: a. sudo su b. Type Administrator password when prompted, press

I just saw the posted schedule and noticed that the sessions "Mass iOS Deployments" and "Don't Get Schooled by Your One-to-One iPad Deployment" are scheduled at the same time (Thurs 1-2pm). These sessions are both on iPad deployment and I was wondering if they could be scheduled for different time slots so that people could attend both. I'm sure there are other folks like me who want to attend both of these sessions given that they are both regarding iPad/iOS deployments. Thanks for considering!~Joe

After running Optimize Database Tables, and I was the only one using the web interface, I received all kinds of errors and then the database was completely deleted after restarting Tomcat. I restored from a backup and all is well, but heads up in case you're ever tempted to click on that link. There should probably be some sort of warning before it lets you use that feature.

We will have a policy set up to run between 0000-0600 (using the every30 trigger), and we want it to run only if loginwindow is the active process. So my thought is the policy will run a script, check running processes, if loginwindow is the process, run the rest of the script, else exit... Any advice from the scripting gurus? Jared? Thomas? Sean? :) Thanks,Don

Hey all, I'm working on a script to rename permissions on accounts moved from Open Directory to Active Directory. As part of the checks (while loop logic) to see if the account exists I am querying AD for the GUID of the account: /usr/bin/dscl /Active Directory/$domain/All Domains/ -read /Users/$user GeneratedUID | /usr/bin/awk '{print $NF;}')" This works great for accounts that do exist in that domain, but if they don't the command fails. (I might have mistyped this from my script, but the logic works ;) ) How can I capture this information into a variable, and have sterr ignore the cases where the command populating the variable fails?

I'm looking at how to help track down ipads and thought if we had 843 open from the outside and casper logs the IP from a users home or another business (which will be obviously different from our own), is this standard practice, advisable and/or a security concern?

I'd like to block out most system preferences from pretty much everyone, but I'd like to keep stuff like Wacom and Symantec pref panes accessible. I do not see a way to do this with Casper config profiles. I was under the impression that if the pref pane is installed on the management server you could select it as a restricted pane or not. Anyone know a way around this? I want to block the iCloud, mail/contacts/calendars, sharing, and language panes. Everything else can stay because they either require admin rights or I don't care what they get set to.

I am trying to change settings in the managed preference com.google.Keystone.Agent.plist. I have it set up under managed preferences, but I think the software is looking for this preference file in ~/Library/LaunchAgents I changed that file manually and got the result I wanted on the client. What is the best way to change the parameters in this file under ~/Library/LaunchAgents? Is there a way to do that with Managed Preferences or do I need a shell script to run? Thanks, John

Hi, Our JSS is linked to GSX and thus items show when their warrantee ends but as a data like xx/xx/xxxx. Has anybody devised a way to build an inventory search that show what items are out of warrantee, aka the date listed has already passed? This would help us find items that need replacing. Thanks!

When we assigned our computers, we used the Real name and Username fields in the computer record to do so. However, we ended up with a few students getting the wrong computer. Long story short, I need a way to compare the username field to an extension attribute I created to see what user was logged in at last inventory and see if they are the same. I would be open to doing this with an inventory search or by creating an additional extension attribute. The problem is that I don't know of any way to query the JSS database from within a script. Is this possible at all?

Hi all, Are profiles made with Profile Manager on 10.7 server supposed to work on 10.8 clients? I assumed so, but my VPN profile doesn't seem to. The keychain entry is not created properly, leaving out the account name and not using the correct password. Do I need to use Profile Manager on 10.8 to make this work? Or is there something else I can do? Any ideas? Thanks, Jason

Hi All, Just wondering is anyone else experiencing the following error Profile Installation Failed.The Server Certificate for "https://blah.blah.blah:8443/Blah/enroll/SCEPProfile?invitation=Blahblahblah" is invalid. installing the MDM Profile...This works on ios 5 clients not on ios 6?? both Versions of JSS 8.52 and 8.61 ???? Any Ideas???

I want to search for computers which have no entry for a given attribute. Is it possible to search for a null value? Is it possible to search with a regular expression?

I need to create a 10.8 net boot image. I have 10.8 clients but I do not have 10.8 server to get the server tools. I saw where someone created it with Composer, but I do not see the option for NBI. Can someone give me some direction? Thanks! Sharla

Hello Everyone, I've updated our school district's software update servers (SUS)in the JSS in the Settings/network segments module of the web interface and have yet to see a client's /Library/Preferences/com.apple.SoftwareUpdate.plist file reflect the sus servername change. Should I be pushing the clients sus out via a policy? Or is specifying it in the network segment all that needs to be done? How can I verify that a client's SUS has updated correctly? Many thanks for your time,Paul

We have a mixed environment of both tethered enrolled devices as well as OTA. Is it still true that we will need to re-enroll only the tethered devices post iOS 6 upgrade? Or will all iPads and iPhones need to be re-enrolled?

I created a Managed Preference profile to be pushed out to our test macbook pro before we roll them out. I imaged the computer with casper and started up and entered a username into mac setup that created a standard user. Now I would like to push a a managed profile out to the machine and would like to have Managed Preference's. The problem is when I am reading the documentation I see Managing Mac OS X Configuration Profiles. I scoped the user but how to I make it push it out to the user please help!!! Thanks

The last couple days our JSS Server has had problems with Tomcat becoming unresponsive overnight after a VQ_LOWDISK warning on the OS volume. Restarting Tomcat brings the JSS back online and with a cursory look at the server I can tell that there's a lot of hidden files on the volume, but there's still about 10GBs of free space. I haven't had a chance yet to do any investigating, but wondered if anyone else had seen this behavior before. Server has been up and running for almost a year without issue. Thanks! Xserve - OS X 10.6.8 Server, JSS 8.4

How do I go about having self service check the macine for software, and if its installed (prior to self service installed) to hide the option to install it again?

Hi guys I am having a problem with mcx sidebars in 10.8.1 and was wondering if anyone else found the same problem Scenario Step 1 So I did the normal thing with an os of setting the finder and sidebars and finder preferences and dragging mounted server volumes to the favourites section of the sidebar of the finder. I then logged in as root and copied those prefs to the User Template, captured with Composer, corrected permissions, created pkg and added to the build. Step 2 I am using WGM for MCX and noticed that after the build and the user loggs in mcx works because I can see some managed settings taking effect. The problem is in the sidebar I do not have showing the mounted server volumes. Please note to rule anything out I am only using mcx to manage the login window, login items and to disable the home sync for mobile accounts and that is it I am not even touching Finder mcx or importing sidebard prefs. Step 3 If I unmount the mounted volumes and then mount them again

Hi, I'm from Portland State University. When I re-image computer, their names are not set. ComputerNames are blank and HostNames become localhost. Can you tell me what did I do wrong?

Hello Everyone! I am having a major issue when running my enrollment profile (from the JSS) inside configurator. The issue is that the devices (30 in a cart for this example) do not all have a WiFi IP address when it tries to apply the JSS enrollment profile. The issue is that when you reapply a supervision (IE changing apps or anything) in Congfigurator, it RE-installs all the profiles I have checked. When it reinstalls the WiFi profile, all the WiFi radio's drop the SSID, and then all at once they move to re-obtain an ip address, then because of having no inet connection the enroll profile fails. If a valid WiFi signal is NOT required for this to work correctly, please let me know. Currently my JSS Enroll profile contains a SCEP payload. Again if this is not required, any help would be great!

Anyone having a problem with Casper Admin 8.6 whereby after opening Casper Admin 8.6 and simply quitting it without any other action taken results in an extra "https://" being inserted into the url string in com.jamfsoftware.jss.plist?? I've submitted to support, but thought I'd chuck it out there.

Hi Folks, we have a problem with Casper Imaging NetBoot on a Lion-Machine. We configure a basic OS X Lion, using System Image Utility, choose this configured Lion as the Image-Source and adding the CasperImaging Workflow to the end. We can start from this Netboot-Image, but no Launchpad, no autostart of Casper Imaging. How do you solved it? Thanks,Holger