Post Image - Where is System Events?

[#1]

Anyone getting a post image window to "choose application" asking where is system events? I know where it's at (i.e., Macintosh HD/System/Library/CoreServices/SystemEvents) ...
Resolving the window prompt forcing me to manually point to System Events. This is the last of the "honey do" chores.

Mark Sample
Technology Resources
CSG/Apple Server Administrator
Texas Christian University
m.sample at tcu.edu

[#2]

Interesting Observation... After deployment of the image, the system boots into the administrator acct, no choose application window occurs. Logging out and authenticating into the system again tied to AD, the following window appears. So Paul's earlier comment concerning this may very well point to Sophos. Still investigating the scripts associated...

On 6/23/10 1:48 PM, "Thomas Larkin" <tlarki at kckps.org> wrote:

Post image window as in the Casper Imaging.app window? Can someone show a screen shot?

[pbenham]

The other thing that kind of gives it away is that whilst the System Events window is open the Sophos icon in the menu bar is light gray (in it's initializing phase). As soon as you either cancel the System Events window, or point it to where System Ebvents actually is and the window closes, the Sophos icon becomes active (black).

[#4]

We only started seeing it on occasion after we added Sophos to the image.
It never recurs after that first appearance though.

-- Emilia Treglia
Technology Support Specialist
Scotch Plains Fanwood Schools
667 Westfield Road
Scotch Plains, NJ 07076

908-889-8600 x433

[#5]

I also just confirmed this..

Installed a base image, bound to AD.. Logged in with no errors.

Then deleted the AD account I created, rebooted, and then sent out the
Sophos installer.

Upon logging into an AD account for the first time, there it was! We are
running Sophos v7.1.7 here..

-- Jason Weber
Technology Support Cluster Specialist
Casper Certified Administrator
Independent School District 196
jason.weber at district196.org

[#6]

Makes me wonder about the sophos installer script... I'll take a look.

[jmclaughlin]

I get the message on occassion. I'm actually trying to figure out why
this happens as we speak.

John McLaughlin
Technical Support Specialist
Newton Public Schools

[ernstcs]

Related to Sophos or Adobe? This sounds familiar...

Craig E

[jmclaughlin]

That's what I thought too but it doesn't happen upon re-imaging my test
machines and it's not happening on new machines I just took out of the
box. Where's the connection there?

John McLaughlin
Technical Support Specialist
Newton Public Schools

[#10]

That sounds like a probable suspect...adobe. I'm wondering if at packaging this might not have been caught, pointed to system events and re-packaged?

[pbenham]

On a 10.6 image I get the System Events pop up too. It is due to Sophos in our environment but only shows up when a network user (our machines are bound to Active Directory) logs in for the first time. It looks like it has something to do with the Sophos installer running when there is no user logged in to the machines (as is the case with the Casper imaging process). I am going to call Sophos and file a bug, just haven't had tome to do it yet. The issue does not occur with 10.5 in my experience.

paul

[talkingmoose]

Are you running an AppleScript that's calling System Events? Have you
On 6/23/10 12:33 PM, "Sample, Mark" <m.sample at tcu.edu> wrote:
re-saved the script recently under a newer Mac OS?

-- 

William Smith
Technical Analyst
MCS IT, Saint Paul
(651) 632-1492

[#13]

No apple scripts calling system events... Investigating.

[tlarkin]

Post image window as in the Casper Imaging.app window? Can someone
show a screen shot?

[#15]

Will do, I'll replicate... May take a few minutes.

On 6/23/10 1:48 PM, "Thomas Larkin" <tlarki at kckps.org> wrote:

Post image window as in the Casper Imaging.app window? Can someone show a screen shot?

[#16]

I'll check sophos scripts also. I'll begin isolating apps, I'd like to see if this will narrow the gap to pinpoint when it's occurring.

[tlarkin]

Well, Apple Scripts call a lot for System Events, so it is a good guess
an Apple Script may be the culprit.

[#18]

In another thread, I've mentioned I'm in contact with Sophos about this issue. Here is the latest from them. I agruged back saying that they need to fix it because it only happens with their software and even after the "fix" that they proposed. Their response is very slow in return.

Hello Travis,

I have received feedback from the GES team regarding your escalation. We have identified further and were able to replicate the issue in house. The following details were sent to me from our Global escalations, please disregard the context.

Testing on my test system (OS X 10.6.3 Build 10D573), i can replicate the issue with the sample sent in, and SAV installed.
In this test case i receive this entry in the system log:

Jun 3 12:12:00 iMac32-2 SophosUIServer[243] : Initializer-based scripting additions have been deprecated. Please update this addition: "/Library/ScriptingAdditions/Adobe Unit Types.osax"

I then renamed the sample file (i added .old extention to it, this meant it no longer loaded).
And i then downloaded the latest version of 'Adobe Unit Types.osax' from Adobe (http://kb2.adobe.com/cps/516/cpsid_51615.html) and put this in /Library/ScriptingAdditions/.

I then rebooted the test machine.
Once the machine came back up i checked the system log.
There are no entries referring to 'Adobe Unit Types.osax' at all.

--missing content--

os problem in your environment, this is in fact an Adobe error. Adobe has p
osted a fix for this (see adobe knowledgebase link above) and the fix shoul
d resolve the issue seen in this case. If the fix is not working for you I would strongly suggest that you contact Adobe regarding the issue.

Please let me know if you have any concerns, questions, or need further ass
istance.
Feel free to contact me direct, my contact details contained in my signatur
e.

Best Regards,

--
Steve Hallock
Customer Advocate / Escalation Engineer

email: Steve.Hallock at sophos.com<mailto:Steve.Hallock at sophos.com>
tel: 1-781-494-5827
mob: 1-339-234-1262
SOPHOS - simply secure

with Sophos ab

[bentoms]

So it's a Sophos error due to adobes scripting additions.. huh... nice find.

Ben Toms
IT Support Analyst GREY Group
The Johnson Building, 77 Hatton Garden, London, EC1N 8JS
T: +44 (0) 20-3037-3819 |
Main: +44 (0) 20 3037 3000 | IT Helpdesk: +44 (0) 20 3037 3883

--missing content--

os problem in your environment, this is in fact an Adobe error. Adobe has p
osted a fix for this (see adobe knowledgebase link above) and the fix shoul
d resolve the issue seen in this case. If the fix is not working for you I would strongly suggest that you contact Adobe regarding the issue.

Please let me know if you have any concerns, questions, or need further ass
istance.
Feel free to contact me direct, my contact details contained in my signatur
e.

Best Regards,

--
Steve Hallock
Customer Advocate / Escalation Engineer

email: Steve.Hallock at sophos.com<mailto:Steve.Hallock at sophos.com>
tel: 1-781-494-5827
mob: 1-339-234-1262
SOPHOS - simply secure

with Sophos ab

[pbenham]

Hi Travis (and Casper list),

Just to clarify, this error occurs when there is no /Library/ScriptingAdditions/Adobe Unit Types.osax file on the system. The error is reproducible from a clean install of OS X, then binding the machine to Active Directory, installing Sophos with no user logged in, then logging in as an AD user for the first time.
Is there a Sophos trouble ticket number that I can quote when I get in touch with them. I'd rather not have to start from scratch with them!
Also I have tried looking at the scripts that the Sophos package installer runs (there are quite a few - InstallationCheck, VolumeCheck, postflight, postinstall, postupgrade, preflight, preinstall, preupgrade) but they are all indecipherable (binary?). If anyone knows how to read them I'd gladly do some more investigating.

thanks

Paul

[#21]

As for the reference number of the support case I have open with them, it is #2231839. I've mentioned to them that several other organizations are experiencing the same issue with and without the Adobe scripting additions. I guess it won't hurt if you contact them, you could reference the support case we have open with them. Like I mentioned before, they do seem slow at responding.

Travis

[#22]

Does the random appearance result after you've authenticated into AD? Seems that's the kicker. Without the AD bind, no system events window.

Mark Sample
Technology Resources
CSG/Apple Server Administrator
Texas Christian University
m.sample at tcu.edu

--missing content--

os problem in your environment, this is in fact an Adobe error. Adobe has p
osted a fix for this (see adobe knowledgebase link above) and the fix shoul
d resolve the issue seen in this case. If the fix is not working for you I would strongly suggest that you contact Adobe regarding the issue.

Please let me know if you have any concerns, questions, or need further ass
istance.
Feel free to contact me direct, my contact details contained in my signatur
e.

Best Regards,

--000_C848E7759A7Dmsampletcuedu
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

[jmclaughlin]

I've re-imaged a few of my test machines. In every instance, there is no
trace of the osax file. However, I randomly receive the System Events
message. The path /System/Library/ScriptingAdditions has the same
contents with every install. Shouldn't I receive the System Events
message every time?

John McLaughlin
Technical Support Specialist
Newton Public Schools

"Ben.Toms at grey.com" <Ben.Toms at grey.com> on June 24, 2010 at 4:20 AM -0400 wrote: So it’s a Sophos error due to adobes scripting additions.. huh

nice find.

Ben Toms IT Support Analyst GREY Group The Johnson Building, 77 Hatton Garden, London, EC1N 8JS T: +44 (0) 20-3037-3819 | Main: +44 (0) 20 3037 3000 | IT Helpdesk: +44 (0) 20 3037 3883 From: casper-bounces at list.jamfsoftware.com [mailto:casper-bounces at list.jamfsoftware.com] On Behalf Of Ah King, Travis Sent: 23 June 2010 21:33 To: Weber, Jason; Casper List Subject: Re: [Casper] Post Image - Where is System Events? In another thread, I've mentioned I'm in contact with Sophos about this issue. Here is the latest from them. I agruged back saying that they need to fix it because it only happens with their software and even after the "fix" that they proposed. Their response is very slow in return. Hello Travis, I have received feedback from the GES team regarding your escalation. We have identified further and were able to replicate the issue in house. The following details were sent to me from our Global escalations, please disregard the context. Testing on my test system (OS X 10.6.3 Build 10D573), i can replicate the issue with the sample sent in, and SAV installed. In this test case i receive this entry in the system log: Jun 3 12:12:00 iMac32-2 SophosUIServer[243] : Initializer-based scripting additions have been deprecated. Please update this addition: "/Library/ScriptingAdditions/Adobe Unit Types.osax" I then renamed the sample file (i added .old extention to it, this meant it no longer loaded). And i then downloaded the latest version of 'Adobe Unit Types.osax' from Adobe ([ http://kb2.adobe.com/cps/516/cpsid_51615.html ]http://kb2.adobe.com/cps/516/cpsid_51615.html) and put this in /Library/ScriptingAdditions/. I then rebooted the test machine. Once the machine came back up i checked the system log. There are no entries referring to 'Adobe Unit Types.osax' at all. From testing, the Adobe fix does work. I do not believe that this is a Sophos problem in your environment, this is in fact an Adobe error. Adobe has posted a fix for this (see adobe knowledgebase link above) and the fix should resolve the issue seen in this case. If the fix is not working for you I would strongly suggest that you contact Adobe regarding the issue. Please let me know if you have any concerns, questions, or need further assistance. Feel free to contact me direct, my contact details contained in my signature. Best Regards, -- Steve Hallock Customer Advocate / Escalation Engineer email: [ mailto:Steve.Hallock at sophos.com ]Steve.Hallock at sophos.com tel: 1-781-494-5827 mob: 1-339-234-1262 SOPHOS - simply secure with Sophos ab From: "Weber, Jason" <[ mailto:jason.weber at district196.org ]jason.weber at district196.org> Date: Wed, 23 Jun 2010 15:44:26 -0400 To: Casper List <[ mailto:casper at list.jamfsoftware.com ]casper at list.jamfsoftware.com> Subject: Re: [Casper] Post Image - Where is System Events? I also just confirmed this.. Installed a base image, bound to AD.. Logged in with no errors. Then deleted the AD account I created, rebooted, and then sent out the Sophos installer. Upon logging into an AD account for the first time, there it was! We are running Sophos v7.1.7 here.. -- Jason Weber Technology Support Cluster Specialist Casper Certified Administrator Independent School District 196 [ fcp://@newton.k12.ma.us,%231001922/Mailbox/jason.weber@district196.org ]jason.weber at district196.org On 6/23/10 2:40 PM, "Emilia Treglia" <[ fcp://@newton.k12.ma.us,%231001922/Mailbox/etreglia@spfk12.org ]etreglia at spfk12.org> wrote: We only started seeing it on occasion after we added Sophos to the image. It never recurs after that first appearance though.

---

Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper

[#24]

I confirmed this as well. I even took Sophos off of the image and manually did the install. Sure enough, the first time a network user logged in, there popped up the System Events window. Sophos 7.1.7 as well.

Has anyone contacted Sophos? I might give them a call on Monday if you guys haven't figured a fix.

Thanks!
-
lauren

[#25]

Was there ever a fix for this? It's still happening here in my environment. It only does it on a machine bound to AD (we do it with ADmitMac) but this particular machines does NOT have Adobe on it (except adobe x reader…which might be all it needs for the bug…)

Anyway, I haven't found any other threads about this in the Casper listserv since this one. If anyone has a solution, let me know!

Thanks,
-lauren

lauren nicholas
User Support & Technology Analyst – Hurd Campus
Center for Information Technology
Moravian College
610 861 1633

[bentoms]

Maybe updating the adobe unit types plugin fixes?

Regards,

Ben.

[bentoms]

Link might help: http://macmule.com/2011/03/09/installing-adobe-unit-types-2-1-0/

Just incase the adobe reader installs the outdated version too.

Regards,

Ben.

[rmanly]

Taking Sophos off the image worked for me ;)

Ryan M. Manly
Glenbrook High Schools