Posted on 04-05-2012 12:11 PM
I've assigned the permissions on my test JSS to remote wipe (https://jamfnation.jamfsoftware.com/article.html?id=208)
, but I'm not seeing how you actually wipe a machine. Can someone point me in the right direction?
Posted on 04-05-2012 12:22 PM
Remote Wipe...hmmm...isn't that iOS only?
Posted on 04-05-2012 12:23 PM
Do you have an APN certificate for your JSS? Its required to use some of the management features in Lion such as these.
@Don- its a new feature in the 8.51 release for OS X machines (see pg 318 in the 8.51 Admin guide), but they need to be enrolled for management, just as you would when using Lion Configuration Profiles..
Posted on 04-05-2012 12:24 PM
Remote wipe is iOS only though I guess with some brilliant scripting you could hack the Recovery Partition.
Posted on 04-05-2012 12:25 PM
According to the Casper 8.51 release notes, 8.51 also supports remote locking/wiping Macs running 10.7.
I don't have an APN for my test JSS, so I'll get one.
Posted on 04-05-2012 12:46 PM
Now with an APN certificate, I'm getting some new options showing up in Inventory on my Lion test box.
Posted on 04-05-2012 01:44 PM
Ahh I see what you mean now. We don't have recovery partitions thats why.
Posted on 04-05-2012 01:53 PM
yep i tested this in the 8.5 beta.. works well :)
Posted on 04-05-2012 02:00 PM
One nice thing is that I don't have any profiles running. This capability looks like it's available automatically as long as your 10.7 Macs have Recovery HD and your JSS is set up with an APN.
Posted on 04-05-2012 02:21 PM
Feature request...change garbage can icon to pencil eraser...LOL
Posted on 04-05-2012 02:33 PM
Interesting, I have all of the requirements met that are in the Admin Guide (page 318), but I don't get the icons. I get "MDM Managed" is yes, but no icons. Hmph.
Anyone have any ideas?
Posted on 04-05-2012 02:34 PM
Nevermind....I'm a bone head....I didn't read the requirements in the article that Rich posted and the user I was using didn't have the Remote commands privileges.
Posted on 04-06-2012 07:32 AM
How can I tell if my system has the APNs installed?
Do I need to be using config profiles to see these options on Lion systems?
Posted on 04-06-2012 07:57 AM
"Settings > Global Management Framework Settings > Push Notification Certificate"
If you don't see a certificate listed there, you don't have it uploaded.
(Unless by "system" you were referring to one of the Mac clients?)
Also, according to the notes in the admin guide, it doesn't look like you need to use Configuration profiles to get these features. Just the APN and the other settings enabled that are listed in the documentation.
Posted on 04-06-2012 09:25 AM
For those interested, I've written a post about this:
http://derflounder.wordpress.com/2012/04/06/using-casper-8-51-to-remotely-lock-or-wipe-10-7-macs/