Natick school district scapegoating Casper Suite

That's usually about the time you've just received 50+ odd emails with the same fault for all ;)

This is always good to know. However, it's still ont heir hands for not testing first. Glad we found a bug and it's being worked on. Bad publicity stinks, but hey.

This is always good to know. However, it's still ont heir hands for not testing first. Glad we found a bug and it's being worked on. Bad publicity stinks, but hey.

@donmontalvo - lol, pretty much!

Also guilty here, when I first started implementing Policies I created one (via JSS Mobile, no less...WWIT??) that was supposed to be scoped to a single computer, but accidentally I set it to global and installed an update to every machine in the system in the middle of the afternoon! I got lucky, no one had any issues and the users just shrugged it off and rebooted when the message came up, but I thought I was going to have heart failure when I checked the Policy logs expecting to see one entry... :D

Although unfortunate the issues experienced at Natick, the following feature request may assist junior administrators with a need to block subsets of applications, and could be considered as templates for restricted software.

eg. Torrenting application tomato - should the string "tomato" be entered as the process to match, automator.app is also matched in the regular expression, a string of tor would have the same result.

https://jamfnation.jamfsoftware.com/featureRequest.html?id=21

(oops, this one was a little harsh - my apologies to the Natick administrator. Don)

Ouch... two in one Don. In any event, I find it a bit hard handed to simply use the "Delete" command when you can kill the process and have notifications sent. OK, I can certainly see the draw, especially if you've got thousands upon thousands of users. However, just nuking an app usually end up making the user think they did something wrong. Because of this they end up re-downloading the app and then "tinkering" with it, if even possible. Working in education I can certainly say that a little knowledge on the users side goes a long way. If you don't take the time to educate them, they will keep you busy!

P.S. OK, so the admin at Natick made a huge mistake, but comparing him/her/them to the adobe update team is a bit below the belt!

@Chris_Hafner Point taken, I removed the comment. I'm guessing the Natick admin learned a lesson and this probably won't happen again (test, test, test). Can't say the same for Adobe's installer develpment team (excuse, excuse, excuse). :(

@jarednichols "Yep. We've all had an "oh fuck" moment when we feel our bodies chill and then we scramble to set a policy to 'disabled.'"

Where's my "like" button when I need it?

Sandy

@Don Nope, Adobe's install team is fair game ;-)

Any good web filter should of blocked Tor iBoss blocks Tor just fine.

Darn... they should of tested the script before pushing it to all the computers.

Any good web filter should of blocked Tor iBoss blocks Tor just fine.

Yeah, I'm a big proponent of blocking a lot of this stuff at the firewall. I know in a lot of cases it's not going to happen, but I do think it's a best practice. If you're blocking stuff upstream from your endpoints, you're not going to go playing whack-a-mole trying to stop it. Kids will try it, see it doesn't work, give up for a bit, maybe try it again, see it still doesn't work, then give up.

@jarednichols "Yep. We've all had an "oh fuck" moment when we feel our bodies chill and then we scramble to set a policy to 'disabled.'" Where's my "like" button when I need it? Sandy

"Like"