From paul.austin at wachovia.com Tue Jul 1 04:37:42 2008 From: paul.austin at wachovia.com (Paul Austin) Date: Tue, 01 Jul 2008 07:37:42 -0400 Subject: [Casper] Add printers without admin rights Message-ID: We are currently rolling out Macbook Pros to mobile users that need the ability to add printers on their own when in not company locations. We are not wanting to give these users admin rights. Has anyone been able to produce a script or a package that will open up the ability to add printers sans Admin? Thanks Paul Austin Wachovia Information Technology Enterprise Strategy and Design 704-427-0903 paul.austin at wachovia.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080701/6e9b6444/attachment.html From Miles.Leacy at PoloRalphLauren.com Tue Jul 1 05:41:41 2008 From: Miles.Leacy at PoloRalphLauren.com (Leacy, Miles (US)) Date: Tue, 1 Jul 2008 08:41:41 -0400 Subject: [Casper] Add printers without admin rights Message-ID: There is still a printer utility in Leopard.. Its in /System/Library/CoreServices, I believe. I have not done this myself, but I have read of people putting a symlink for the printer utility into /Applications to allow users to add printers. I believe modifying the /etc/authorization file, whether via package or script, ought to allow you to grant functions that belong to admins by default to any user, group or everyone. If I recall correctly, afp548 has a good article on /etc/authorization. ----- Miles Leacy ACTC|ACSA|ACT|CCA Senior Mac Technologist Polo Ralph Lauren 212.318.7603 miles.leacy at poloralphlauren.com ________________________________ From: casper-bounces at list.jamfsoftware.com To: casper at list.jamfsoftware.com Sent: Tue Jul 01 07:37:42 2008 Subject: [Casper] Add printers without admin rights We are currently rolling out Macbook Pros to mobile users that need the ability to add printers on their own when in not company locations. We are not wanting to give these users admin rights. Has anyone been able to produce a script or a package that will open up the ability to add printers sans Admin? Thanks Paul Austin Wachovia Information Technology Enterprise Strategy and Design 704-427-0903 paul.austin at wachovia.com This message and any attached documents contain information which may be confidential, subject to privilege or exempt from disclosure under applicable law. These materials are intended only for the use of the intended recipient. If you are not the intended recipient of this transmission you are hereby notified that any distribution, disclosure, printing, copying, storage, modification or the taking of any action in reliance upon this transmission is strictly prohibited. Delivery of this message to any person other than the intended recipient shall not compromise or waive such confidentiality, privilege or exemption from disclosure as to this communication. If you have received this communication in error, please immediately notify the sender and delete the message from your system. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080701/3cfe028b/attachment.html From tlarki at kckps.org Tue Jul 1 07:17:53 2008 From: tlarki at kckps.org (Thomas Larkin) Date: Tue, 01 Jul 2008 09:17:53 -0500 Subject: [Casper] Add printers without admin rights Message-ID: <4869F6420200003900000118@NGW-001.KCKPS.K12.KS.US> In version 6 of Casper you can set up self serve, which will allow your mobile users access to install apps/printers/whatever through a web browser. Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 >>> Paul Austin 07/01/08 6:38 AM >>> We are currently rolling out Macbook Pros to mobile users that need the ability to add printers on their own when in not company locations. We are not wanting to give these users admin rights. Has anyone been able to produce a script or a package that will open up the ability to add printers sans Admin? Thanks Paul Austin Wachovia Information Technology Enterprise Strategy and Design 704-427-0903 paul.austin at wachovia.com From eric.winkelhake at us-resources.com Tue Jul 1 07:31:48 2008 From: eric.winkelhake at us-resources.com (Eric Winkelhake) Date: Tue, 1 Jul 2008 09:31:48 -0500 Subject: [Casper] Add printers without admin rights In-Reply-To: Message-ID: Create a link to the core service and comment these lines in the cupsd.conf file(the first one is obviously already commented. # All administration operations require an administrator to authenticate... AuthType Default Require user @SYSTEM Order deny,allow -- Eric Winkelhake | Technology Services ? Mundocom | Re:Sources IT 35 West Wacker Drive, Suite 3000 | Chicago, IL 60601 Office: 312-220-1669 | Mobile: 312-519-5632 Email: Eric.Winkelhake at us-resources.com Open a Service Desk Ticket | Navigating IT | Training Now "Leacy, Miles (US)" Sent by: casper-bounces at list.jamfsoftware.com 07/01/08 07:41 AM To , cc Subject Re: [Casper] Add printers without admin rights There is still a printer utility in Leopard.. Its in /System/Library/CoreServices, I believe. I have not done this myself, but I have read of people putting a symlink for the printer utility into /Applications to allow users to add printers. I believe modifying the /etc/authorization file, whether via package or script, ought to allow you to grant functions that belong to admins by default to any user, group or everyone. If I recall correctly, afp548 has a good article on /etc/authorization. ----- Miles Leacy ACTC|ACSA|ACT|CCA Senior Mac Technologist Polo Ralph Lauren 212.318.7603 miles.leacy at poloralphlauren.com From: casper-bounces at list.jamfsoftware.com To: casper at list.jamfsoftware.com Sent: Tue Jul 01 07:37:42 2008 Subject: [Casper] Add printers without admin rights We are currently rolling out Macbook Pros to mobile users that need the ability to add printers on their own when in not company locations. We are not wanting to give these users admin rights. Has anyone been able to produce a script or a package that will open up the ability to add printers sans Admin? Thanks Paul Austin Wachovia Information Technology Enterprise Strategy and Design 704-427-0903 paul.austin at wachovia.com This message and any attached documents contain information which may be confidential, subject to privilege or exempt from disclosure under applicable law. These materials are intended only for the use of the intended recipient. If you are not the intended recipient of this transmission you are hereby notified that any distribution, disclosure, printing, copying, storage, modification or the taking of any action in reliance upon this transmission is strictly prohibited. Delivery of this message to any person other than the intended recipient shall not compromise or waive such confidentiality, privilege or exemption from disclosure as to this communication. If you have received this communication in error, please immediately notify the sender and delete the message from your system. _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080701/d43309b5/attachment.html -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/gif Size: 3903 bytes Desc: not available Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20080701/d43309b5/attachment.gif From rharter at uwsp.edu Wed Jul 2 07:21:30 2008 From: rharter at uwsp.edu (Ryan Harter) Date: Wed, 2 Jul 2008 09:21:30 -0500 Subject: [Casper] Keychains Message-ID: <869655CB-3DDA-4C2F-855D-805CC4C056FD@uwsp.edu> Hey All- When you are making your base OS images do you delete the keychains? I just noticed when testing a 10.5.4 one that when I open Safari it asked me to unlock a login keychain. I looked in Keychain Access and there is a "Safari Forms Auto-Fill" item in the login keychain. Should I just delete that and leave the login keychain, or remove the whole keychain? Thanks Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080702/0a93b75a/attachment.html From rharter at uwsp.edu Wed Jul 2 12:51:43 2008 From: rharter at uwsp.edu (Ryan Harter) Date: Wed, 2 Jul 2008 14:51:43 -0500 Subject: [Casper] Software Update Policy Message-ID: Has anyone set up a policy to run Software Updates when they are available? I was thinking of creating a smart group of all computers that have 1 or more updates available, but it just contains every computer in inventory. We user our own software update server, so none of the updates get activated until we are sure they are safe, so I'm comfortable with updating my machines automatically if there are updates available. Has anyone implemented this? Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080702/0b08f141/attachment.htm From ERNSTCS at uwec.edu Wed Jul 2 12:59:01 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Wed, 2 Jul 2008 14:59:01 -0500 Subject: [Casper] Software Update Policy In-Reply-To: Message-ID: Yup. Talks to our own ASUS so we control the updates, we don't include Firmware updates since it requires being physically there. But we also don't set our update server as the default for machines so you can still run Software Updates locally if you have admin to do the Firmware updates from Apples server. Craig Ernst Systems Management & Configuration ---------------------------------- University of Wisconsin-Eau Claire Learning & Technology Services 105 Garfield Ave Eau Claire, WI 54701 Phone: (715) 836-3639 Fax: (715) 836-6001 ---------------------------------- ernstcs at uwec.edu On 7/2/08 2:51 PM, "Ryan Harter" wrote: Has anyone set up a policy to run Software Updates when they are available? I was thinking of creating a smart group of all computers that have 1 or more updates available, but it just contains every computer in inventory. We user our own software update server, so none of the updates get activated until we are sure they are safe, so I'm comfortable with updating my machines automatically if there are updates available. Has anyone implemented this? Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080702/e938ea0f/attachment.html From kgatling at mph.net Wed Jul 2 13:06:46 2008 From: kgatling at mph.net (Keith E Gatling) Date: Wed, 2 Jul 2008 16:06:46 -0400 Subject: [Casper] Casper and Undercover Message-ID: I've seen a few posts about using Casper in combination with Computrace/LoJack, but does anyone here have any experience with Undercover by Orbicule? We're looking into using that in our installation, and I was wondering if anyone out there had any advice they could give us. Thanks. -- keg * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * Keith E Gatling - Computer Instructor Manlius Pebble Hill School 5300 Jamesville Rd DeWitt, NY 13214 315.446.2452 http://www.gatling.us/keith Some teachers teach subjects. Others teach people. * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080702/bd16fc59/attachment.htm From swood at integerdallas.com Wed Jul 2 13:08:03 2008 From: swood at integerdallas.com (Steve Wood) Date: Wed, 2 Jul 2008 15:08:03 -0500 Subject: [Casper] Software Update Policy In-Reply-To: References: Message-ID: <576D6C6D-6A1D-4777-A3E3-BBB36BD701FE@integerdallas.com> Our policy is set to run every Friday at 12:30 pm while people are at lunch, and to pull from our internal SUS server. We also have a policy that sets the SUS server every day in case a machine comes on net that has been off for awhile. As for doing updates locally, I just remove the plist file, run the update, then put the plist back. You just need to remove /Library/ Preferences/com.apple.SoftwareUpdate.plist to the desktop and then put it back. Beats leaving machines set to Apple for the default. Steve Wood Director, Information Technology swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6907 | C 940.312.2475 On Jul 2, 2008, at 2:59 PM, Ernst, Craig S. wrote: > Yup. Talks to our own ASUS so we control the updates, we don?t > include Firmware updates since it requires being physically there. > But we also don?t set our update server as the default for machines > so you can still run Software Updates locally if you have admin to > do the Firmware updates from Apples server. > > Craig Ernst > Systems Management & Configuration > ---------------------------------- > University of Wisconsin-Eau Claire > Learning & Technology Services > 105 Garfield Ave > Eau Claire, WI 54701 > Phone: (715) 836-3639 > Fax: (715) 836-6001 > ---------------------------------- > ernstcs at uwec.edu > > > > On 7/2/08 2:51 PM, "Ryan Harter" wrote: > > Has anyone set up a policy to run Software Updates when they are > available? I was thinking of creating a smart group of all > computers that have 1 or more updates available, but it just > contains every computer in inventory. > > We user our own software update server, so none of the updates get > activated until we are sure they are safe, so I'm comfortable with > updating my machines automatically if there are updates available. > > Has anyone implemented this? > > > Ryan Harter > UW - Stevens Point > Workstation Developer > 715.346.2716 > Ryan.Harter at uwsp.edu > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -- The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080702/d771ecbb/attachment.html From rharter at uwsp.edu Wed Jul 2 13:24:02 2008 From: rharter at uwsp.edu (Ryan Harter) Date: Wed, 2 Jul 2008 15:24:02 -0500 Subject: [Casper] Software Update Policy In-Reply-To: <576D6C6D-6A1D-4777-A3E3-BBB36BD701FE@integerdallas.com> References: <576D6C6D-6A1D-4777-A3E3-BBB36BD701FE@integerdallas.com> Message-ID: <57D4356C-D25A-4F93-8AF3-7C6984DE2C18@uwsp.edu> So it looks like the general method is to do a weekly update, not just when it's available. I think I can make that work. Thanks. Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu On Jul 2, 2008, at 3:08 PM, Steve Wood wrote: > Our policy is set to run every Friday at 12:30 pm while people are > at lunch, and to pull from our internal SUS server. We also have a > policy that sets the SUS server every day in case a machine comes on > net that has been off for awhile. > > As for doing updates locally, I just remove the plist file, run the > update, then put the plist back. You just need to remove /Library/ > Preferences/com.apple.SoftwareUpdate.plist to the desktop and then > put it back. Beats leaving machines set to Apple for the default. > > Steve Wood > Director, Information Technology > swood at integerdallas.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6907 | C 940.312.2475 > > > > > On Jul 2, 2008, at 2:59 PM, Ernst, Craig S. wrote: > >> Yup. Talks to our own ASUS so we control the updates, we don?t >> include Firmware updates since it requires being physically there. >> But we also don?t set our update server as the default for machines >> so you can still run Software Updates locally if you have admin to >> do the Firmware updates from Apples server. >> >> Craig Ernst >> Systems Management & Configuration >> ---------------------------------- >> University of Wisconsin-Eau Claire >> Learning & Technology Services >> 105 Garfield Ave >> Eau Claire, WI 54701 >> Phone: (715) 836-3639 >> Fax: (715) 836-6001 >> ---------------------------------- >> ernstcs at uwec.edu >> >> >> >> On 7/2/08 2:51 PM, "Ryan Harter" wrote: >> >> Has anyone set up a policy to run Software Updates when they are >> available? I was thinking of creating a smart group of all >> computers that have 1 or more updates available, but it just >> contains every computer in inventory. >> >> We user our own software update server, so none of the updates get >> activated until we are sure they are safe, so I'm comfortable with >> updating my machines automatically if there are updates available. >> >> Has anyone implemented this? >> >> >> Ryan Harter >> UW - Stevens Point >> Workstation Developer >> 715.346.2716 >> Ryan.Harter at uwsp.edu >> >> >> >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper > > > > -- > The information contained in this email transmission is solely for > the addressee(s) named above and is privileged and/or confidential. > If the reader of this message is not the intended recipient or the > person responsible to deliver it to the intended recipient; he or > she is prohibited from reading or disclosing the information > contained in this transmission. Any examination, use, > dissemination, distribution, or copying of this communication is > strictly prohibited. Please contact us immediately by telephone for > instructions if you have received this communication in error: (214) > 758-6800 > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080702/3e0d9061/attachment.html From swood at integerdallas.com Wed Jul 2 13:29:28 2008 From: swood at integerdallas.com (Steve Wood) Date: Wed, 2 Jul 2008 15:29:28 -0500 Subject: [Casper] Keychains In-Reply-To: <869655CB-3DDA-4C2F-855D-805CC4C056FD@uwsp.edu> References: <869655CB-3DDA-4C2F-855D-805CC4C056FD@uwsp.edu> Message-ID: I'll make my standard argument for using InstaDMG to create the base image. You don't have to run the image to do any configuration, so it doesn't get mucked up with anything like keychains. Plus, it is usable on both PPC and Intel machines. http://www.afp548.com/article.php?story=instadmg1.3b&query=instadmg The last version I can find up on AFP548. Steve Wood Director, Information Technology swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6907 | C 940.312.2475 On Jul 2, 2008, at 9:21 AM, Ryan Harter wrote: > Hey All- > > When you are making your base OS images do you delete the > keychains? I just noticed when testing a 10.5.4 one that when I > open Safari it asked me to unlock a login keychain. I looked in > Keychain Access and there is a "Safari Forms Auto-Fill" item in the > login keychain. Should I just delete that and leave the login > keychain, or remove the whole keychain? > > Thanks > > Ryan Harter > UW - Stevens Point > Workstation Developer > 715.346.2716 > Ryan.Harter at uwsp.edu > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -- The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080702/e87643fb/attachment.htm From william.smith at merrillcorp.com Wed Jul 2 14:26:40 2008 From: william.smith at merrillcorp.com (Smith, William) Date: Wed, 02 Jul 2008 16:26:40 -0500 Subject: [Casper] Keychains In-Reply-To: Message-ID: The latest version is currently 1.4b1 (released June 24, 2008) and can be found here . -- bill William M. Smith, Technical Analyst MCS IT Merrill Communications, LLC (651) 632-1492 On 7/2/08 3:29 PM, "Steve Wood" wrote: > I'll make my standard argument for using InstaDMG to create the base image. > You don't have to run the image to do any configuration, so it doesn't get > mucked up with anything like keychains. Plus, it is usable on both PPC and > Intel machines. > > http://www.afp548.com/article.php?story=instadmg1.3b&query=instadmg > > The last version I can find up on AFP548. > > > On Jul 2, 2008, at 9:21 AM, Ryan Harter wrote: > >> Hey All- >> >> When you are making your base OS images do you delete the keychains? I just >> noticed when testing a 10.5.4 one that when I open Safari it asked me to >> unlock a login keychain. I looked in Keychain Access and there is a "Safari >> Forms Auto-Fill" item in the login keychain. Should I just delete that and >> leave the login keychain, or remove the whole keychain? -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080702/31484236/attachment.html From swood at integerdallas.com Wed Jul 2 15:07:19 2008 From: swood at integerdallas.com (Steve Wood) Date: Wed, 2 Jul 2008 17:07:19 -0500 Subject: [Casper] Keychains In-Reply-To: References: Message-ID: That is actually a beta release, even though the entire thing is kind of beta. The latest "real" release is 1.3b. Josh explains it on the front page of AFP548. Steve Wood Director, Information Technology swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6907 | C 940.312.2475 On Jul 2, 2008, at 4:26 PM, Smith, William wrote: > The latest version is currently 1.4b1 (released June 24, 2008) and > can be found here . > > -- > > bill > > William M. Smith, Technical Analyst > MCS IT > Merrill Communications, LLC > (651) 632-1492 > > On 7/2/08 3:29 PM, "Steve Wood" wrote: > >> I'll make my standard argument for using InstaDMG to create the >> base image. You don't have to run the image to do any >> configuration, so it doesn't get mucked up with anything like >> keychains. Plus, it is usable on both PPC and Intel machines. >> >> http://www.afp548.com/article.php?story=instadmg1.3b&query=instadmg >> >> The last version I can find up on AFP548. >> >> >> On Jul 2, 2008, at 9:21 AM, Ryan Harter wrote: >> >>> Hey All- >>> >>> When you are making your base OS images do you delete the >>> keychains? I just noticed when testing a 10.5.4 one that when I >>> open Safari it asked me to unlock a login keychain. I looked in >>> Keychain Access and there is a "Safari Forms Auto-Fill" item in >>> the login keychain. Should I just delete that and leave the login >>> keychain, or remove the whole keychain? > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -- The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080702/0e9661bc/attachment.html From ERNSTCS at uwec.edu Wed Jul 2 15:26:51 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Wed, 2 Jul 2008 17:26:51 -0500 Subject: [Casper] Keychains In-Reply-To: <869655CB-3DDA-4C2F-855D-805CC4C056FD@uwsp.edu> Message-ID: I have never seen this issue making an OS image for Composer. I've only seen this for the root account for Restore and NetBoot images, but not for regular users using the Base OS. Craig On 7/2/08 9:21 AM, "Ryan Harter" wrote: Hey All- When you are making your base OS images do you delete the keychains? I just noticed when testing a 10.5.4 one that when I open Safari it asked me to unlock a login keychain. I looked in Keychain Access and there is a "Safari Forms Auto-Fill" item in the login keychain. Should I just delete that and leave the login keychain, or remove the whole keychain? Thanks Ryan Harter UW - Stevens Point Workstation Developer 715.346.2716 Ryan.Harter at uwsp.edu -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080702/b773418d/attachment.html From CMyers at uclan.ac.uk Thu Jul 3 06:44:28 2008 From: CMyers at uclan.ac.uk (Criss Myers) Date: Thu, 03 Jul 2008 14:44:28 +0100 Subject: [Casper] help - cant add computers to the jss Message-ID: <486CE5CC.BB96.0081.0@uclan.ac.uk> Ive recently installed casper and jss to a server I cannot add any computers to the jss, ive tried via quickadd package remote scan and local in recon It says added successfully but when i go to the web interface and search the inventory no computers show up, and in casper no computers show either, help pls Regards Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080703/3e9e7d83/attachment.html From Dustin.Dorey at district196.org Thu Jul 3 06:48:31 2008 From: Dustin.Dorey at district196.org (Dorey, Dustin) Date: Thu, 3 Jul 2008 08:48:31 -0500 Subject: [Casper] help - cant add computers to the jss In-Reply-To: <486CE5CC.BB96.0081.0@uclan.ac.uk> References: <486CE5CC.BB96.0081.0@uclan.ac.uk> Message-ID: We've recently had similar issues here, new machines were not going into their proper smart groups. What is your server running? Hardware, server software version etc... Also are you running the 5.13 version of casper suite? We are running OSX Server 10.5.3 with casper suite 5.13 Dustin Dorey Technology Support Cluster Specialist ISD 196 Apple Valley, Rosemount, Eagan 14445 Diamond Path West Rosemount, MN 55068 (952) 423-7971 dustin.dorey at district196.org From: casper-bounces at list.jamfsoftware.com [mailto:casper-bounces at list.jamfsoftware.com] On Behalf Of Criss Myers Sent: Thursday, July 03, 2008 8:44 AM To: casper at list.jamfsoftware.com Subject: [Casper] help - cant add computers to the jss Ive recently installed casper and jss to a server I cannot add any computers to the jss, ive tried via quickadd package remote scan and local in recon It says added successfully but when i go to the web interface and search the inventory no computers show up, and in casper no computers show either, help pls Regards Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080703/d72c40b3/attachment.htm From bazmail at bazmac.co.uk Thu Jul 3 06:56:34 2008 From: bazmail at bazmac.co.uk (Baz Curtis) Date: Thu, 3 Jul 2008 14:56:34 +0100 Subject: [Casper] 10.5.4 update hung Message-ID: <9887E886-49AF-4539-A345-844C6208F5DA@bazmac.co.uk> Hi, I just tried to roll out the 10.5.4 combo pkg, but the install hung on updating receipts. I rebooted the machine and it did say 10.5.4 was install ok, but I don't trust it. Has anyone else seen this? Best wishes Michael -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 2534 bytes Desc: not available Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20080703/c3b7a452/attachment.bin -------------- next part -------------- ***************************************************** This E-Mail has been scanned by Sophos Anti-Virus ***************************************************** From tlarki at kckps.org Thu Jul 3 07:49:41 2008 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 03 Jul 2008 09:49:41 -0500 Subject: [Casper] imaging behind NAT Message-ID: <486CAC2602000039000001DD@gwoes4.kckps.org> So For our summer imaging project I am running into a few snags. We have pulled a server out of our server room that was extra and are making a mobile imaging cart to take out to all of our laptops. Well, since every building is on different VLANs we thought it would be a good idea to toss the server behind a router and then not have to deal with all the managed switches and VLANs. Our infrastructure is not fully in place and eventually (since we are education and work off a budget) will have extra servers in each building for netbooting. However, since that is not the case we are going with mobile carts for this year. I can netboot just fine and it will autorun the data just fine behind a router. The snags I am running into is that I first noticed it will not resolve the JSS by domain name, only by IP address. Not a huge deal, but I am not sure why that is. Second it seems to want to not use the default server I set in the JSS, it wants to use the master file server. I did a mass edit of auto run data and pointed it all to the mobile image server which has a 192.168.x.x address. The router is controlling all DHCP so all clients will have a class C address. The router also gives the server the same IP every time, it is reserved for that server. Then the casper client will run but error out half way through. I can only assume this is because I am behind NAT? I have never tried this before. I have AFP forwarded from the router to the server and anything that comes over port 548 will hit that server instead. Anyone ever try this? I know this is most likely one small thing I am over looking on my end, but I think technically this should work no issues. Of course after my 6 new xserves come in sometime this fall I won't ever have this issue again, because I will have servers in the buildings that can do this. Thanks Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 From john.brenner at merrillcorp.com Thu Jul 3 08:15:28 2008 From: john.brenner at merrillcorp.com (Brenner, John) Date: Thu, 03 Jul 2008 10:15:28 -0500 Subject: [Casper] imaging behind NAT In-Reply-To: <486CAC2602000039000001DD@gwoes4.kckps.org> Message-ID: OK we have done the exact same thing. I won't go into a rant regarding this, simply put it was and is horrible. 1) DNS resolution: if you are nating behind a segment that has its own external DNS then it will never see your Casper server by name. The fix is to manually add a DNS entry to your IP config and it will see the server. You should be able to do this @ the fire wall (assuming you are using a DHCP server in the firewall). If not add the entry to your DHCP server for the DNS server in the nated segment. 2) Ports that need to be opened: 8443 & 9006 . You'll need to forward all traffic from the nated segment on 8443 and 9006 to the JSS server. 3) 548 is only needed if you will be updating the Casper share that resides behind the Nat or if you are pulling packages from the Master. In either case a many to one 548 mapping will work. On 7/3/08 9:49 AM, "Thomas Larkin" wrote: > So > > For our summer imaging project I am running into a few snags. We have pulled > a server out of our server room that was extra and are making a mobile imaging > cart to take out to all of our laptops. Well, since every building is on > different VLANs we thought it would be a good idea to toss the server behind a > router and then not have to deal with all the managed switches and VLANs. Our > infrastructure is not fully in place and eventually (since we are education > and work off a budget) will have extra servers in each building for > netbooting. However, since that is not the case we are going with mobile > carts for this year. > > I can netboot just fine and it will autorun the data just fine behind a > router. The snags I am running into is that I first noticed it will not > resolve the JSS by domain name, only by IP address. Not a huge deal, but I am > not sure why that is. Second it seems to want to not use the default server I > set in the JSS, it wants to use the master file server. I did a mass edit of > auto run data and pointed it all to the mobile image server which has a > 192.168.x.x address. The router is controlling all DHCP so all clients will > have a class C address. The router also gives the server the same IP every > time, it is reserved for that server. > > Then the casper client will run but error out half way through. I can only > assume this is because I am behind NAT? I have never tried this before. I > have AFP forwarded from the router to the server and anything that comes over > port 548 will hit that server instead. > > Anyone ever try this? I know this is most likely one small thing I am over > looking on my end, but I think technically this should work no issues. Of > course after my 6 new xserves come in sometime this fall I won't ever have > this issue again, because I will have servers in the buildings that can do > this. > > Thanks > > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > cell: 913-449-7589 > office: 913-627-0351 > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper John Brenner | Merrill Corporation | IOG IT | 651-632-4072 From tlarki at kckps.org Thu Jul 3 09:17:05 2008 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 03 Jul 2008 11:17:05 -0500 Subject: [Casper] imaging behind NAT Message-ID: <486CC0A002000039000001E9@gwoes4.kckps.org> I got it working and the client netboots to the netboot server on the LAN and goes across the WAN to the JSS for auto run data, but the minute it starts the block copy of the OS image to the client after about 30seconds to a minute it errors out with an NbiObjectException error message any ideas? Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 >>> "Brenner, John" 07/03/08 11:05 AM >>> OK we have done the exact same thing. I won't go into a rant regarding this, simply put it was and is horrible. 1) DNS resolution: if you are nating behind a segment that has its own external DNS then it will never see your Casper server by name. The fix is to manually add a DNS entry to your IP config and it will see the server. You should be able to do this @ the fire wall (assuming you are using a DHCP server in the firewall). If not add the entry to your DHCP server for the DNS server in the nated segment. 2) Ports that need to be opened: 8443 & 9006 . You'll need to forward all traffic from the nated segment on 8443 and 9006 to the JSS server. 3) 548 is only needed if you will be updating the Casper share that resides behind the Nat or if you are pulling packages from the Master. In either case a many to one 548 mapping will work. On 7/3/08 9:49 AM, "Thomas Larkin" wrote: > So > > For our summer imaging project I am running into a few snags. We have pulled > a server out of our server room that was extra and are making a mobile imaging > cart to take out to all of our laptops. Well, since every building is on > different VLANs we thought it would be a good idea to toss the server behind a > router and then not have to deal with all the managed switches and VLANs. Our > infrastructure is not fully in place and eventually (since we are education > and work off a budget) will have extra servers in each building for > netbooting. However, since that is not the case we are going with mobile > carts for this year. > > I can netboot just fine and it will autorun the data just fine behind a > router. The snags I am running into is that I first noticed it will not > resolve the JSS by domain name, only by IP address. Not a huge deal, but I am > not sure why that is. Second it seems to want to not use the default server I > set in the JSS, it wants to use the master file server. I did a mass edit of > auto run data and pointed it all to the mobile image server which has a > 192.168.x.x address. The router is controlling all DHCP so all clients will > have a class C address. The router also gives the server the same IP every > time, it is reserved for that server. > > Then the casper client will run but error out half way through. I can only > assume this is because I am behind NAT? I have never tried this before. I > have AFP forwarded from the router to the server and anything that comes over > port 548 will hit that server instead. > > Anyone ever try this? I know this is most likely one small thing I am over > looking on my end, but I think technically this should work no issues. Of > course after my 6 new xserves come in sometime this fall I won't ever have > this issue again, because I will have servers in the buildings that can do > this. > > Thanks > > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > cell: 913-449-7589 > office: 913-627-0351 > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper John Brenner | Merrill Corporation | IOG IT | 651-632-4072 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper From rcorbin at mac.com Mon Jul 7 10:14:26 2008 From: rcorbin at mac.com (Roger Corbin) Date: Mon, 07 Jul 2008 10:14:26 -0700 Subject: [Casper] Adobe Reader 9.0 pkg In-Reply-To: References: Message-ID: <6B333DFF-AA2C-4D31-A03C-A6D53CC3AA1A@mac.com> So I see that the new Adobe Reader 9 installers are in Apple Package format. (But why not Universal I have no idea.) Has anyone tried rolling one of these packages out with Casper ? Does it work ? Although they are in Apple .pkg format something does seem to be slightly different about them. I am about to give it a try, but I thought I would ask around about Roger From eanderson at mitty.com Mon Jul 7 11:39:26 2008 From: eanderson at mitty.com (Eric Anderson) Date: Mon, 7 Jul 2008 11:39:26 -0700 Subject: [Casper] Add Dashboard to Dock? Message-ID: <11F451B6-A14E-439F-B342-D45ED3F6606D@mitty.com> Sorry if this is a basic question. When I attempt to add Dashboard to the Dock items, it shows up in Casper Admin as an app, but has nothing for the name and nothing for the path to the app. Does someone have a workaround for this? Thanks, Eric Anderson Director of Information Technology Archbishop Mitty High School From rcorbin at mac.com Mon Jul 7 14:25:05 2008 From: rcorbin at mac.com (Roger Corbin) Date: Mon, 07 Jul 2008 14:25:05 -0700 Subject: [Casper] More : CS3 Strategies Message-ID: <0D4C5C95-7CA7-4E13-92C7-5093E4173A54@mac.com> We are looking at doing a lot of deployment of Adobe CS3 this summer. I've read some of the various strategies that people are using here on the mailing list as well as the manual and knowledge base article. There seems to be lots of different opinions on how well this works. Does anyone out there just use a standard package for this created via Composer ? All in all is the Casper admin method working the best ? Roger Corbin From swood at integerdallas.com Mon Jul 7 14:31:59 2008 From: swood at integerdallas.com (Steve Wood) Date: Mon, 7 Jul 2008 16:31:59 -0500 Subject: [Casper] More : CS3 Strategies In-Reply-To: <0D4C5C95-7CA7-4E13-92C7-5093E4173A54@mac.com> References: <0D4C5C95-7CA7-4E13-92C7-5093E4173A54@mac.com> Message-ID: <49D8A6D6-12D4-41E9-A08D-67ADCCEEE00A@integerdallas.com> At my previous employer we didn't have Casper, so I had to do the deployments with a Composer built package, and I had no problems with it. Well, the only issue we had dealt with running CS2 and CS3 on the same machine. We had to make sure CS2 was installed first, and then CS3 if we needed both applications. Otherwise, it was smooth as silk. I did the installation, ran thru registration, ran all Adobe updates at the time, then created the package. Steve Wood Director, Information Technology swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6907 | C 940.312.2475 On Jul 7, 2008, at 4:25 PM, Roger Corbin wrote: > We are looking at doing a lot of deployment of Adobe CS3 this summer. > > I've read some of the various strategies that people are using here on > the mailing list as well as the manual and knowledge base article. > > There seems to be lots of different opinions on how well this works. > Does anyone out there just use a standard package for this created via > Composer ? > > All in all is the Casper admin method working the best ? > > Roger Corbin > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -- The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080707/98d0ef1d/attachment.htm From Jesse.Almanrode at cabelas.com Mon Jul 7 14:34:49 2008 From: Jesse.Almanrode at cabelas.com (Jesse Almanrode) Date: Mon, 07 Jul 2008 15:34:49 -0600 Subject: [Casper] Issues with scripts and Adobe installers... Message-ID: I have been having some interesting issues lately with scripts in Casper and the adobe installers (not sure if these are related or not). When a policy tries to run the script I get an error that ?Error: The script could not be found.? I have had this error before and was able to clear it up by using Workgroup Manager to re-propagate the permissions for the Casper share but this time it is not working. I have tried restarting the server as well as restarting AFP services but not dice. The other error is the dreaded ?error 6? when using the Adobe installers on workstations. I have done everything I can think of to fix this (including deleting all packages and the Adobe Design Premium DMG file and rebuilding all of them) but continue to be plagued with errors. Now, I am in the process of migrating our Casper instance from 10.4.11 Server to 10.5.4 Server and that may help but until that time I would still like to figure out what is causing these errors. Any takers? ------ Jesse Almanrode ?Sr. Systems Specialist? MIS Technical Services Cabela?s Inc. 308-255-2625 jhalmanr at cabelas.com -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080707/31b4e619/attachment.html From TLARKI at kckps.org Tue Jul 8 11:04:32 2008 From: TLARKI at kckps.org (Thomas Larkin) Date: Tue, 08 Jul 2008 13:04:32 -0500 Subject: [Casper] boot camp commands on windows Message-ID: <487365E002000039000002F6@gwoes4.kckps.org> Is anyone running any kind of scripts or hooks with in the windows side that use boot camp? Like, how would you force someone in windows to change the default boot volume back to OS X and reboot the system? Thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 From swood at integerdallas.com Tue Jul 8 09:22:31 2008 From: swood at integerdallas.com (Steve Wood) Date: Tue, 8 Jul 2008 11:22:31 -0500 Subject: [Casper] Adding to First Run script Message-ID: Is there a way to add to the First Run script permanently? I want to add some shell commands to the script that run every time I re-image a machine. Right now I am just setting Casper to not restart and then manually editing the script, but I'd rather do this automagically. Thanks Steve Wood Director, Information Technology swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6907 | C 940.312.2475 -- The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080708/4edf1948/attachment.htm From eric.winkelhake at us-resources.com Tue Jul 8 09:32:35 2008 From: eric.winkelhake at us-resources.com (Eric Winkelhake) Date: Tue, 8 Jul 2008 11:32:35 -0500 Subject: [Casper] Adding to First Run script In-Reply-To: Message-ID: Just write a script with all the commands you need, set it's priority to AFTER and add it to the image configurations desired. If i'm not mistaken it will be called by the casper first run script. -- Eric Winkelhake | Technology Services ? Mundocom | Re:Sources IT 35 West Wacker Drive, Suite 3000 | Chicago, IL 60601 Office: 312-220-1669 | Mobile: 312-519-5632 Email: Eric.Winkelhake at us-resources.com Open a Service Desk Ticket | Navigating IT | Training Now Steve Wood Sent by: casper-bounces at list.jamfsoftware.com 07/08/08 11:26 AM To Casper List cc Subject [Casper] Adding to First Run script Is there a way to add to the First Run script permanently? I want to add some shell commands to the script that run every time I re-image a machine. Right now I am just setting Casper to not restart and then manually editing the script, but I'd rather do this automagically. Thanks Steve Wood Director, Information Technology swood at integerdallas.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6907 | C 940.312.2475 -- The information contained in this email transmission is solely for the addressee(s) named above and is privileged and/or confidential. If the reader of this message is not the intended recipient or the person responsible to deliver it to the intended recipient; he or she is prohibited from reading or disclosing the information contained in this transmission. Any examination, use, dissemination, distribution, or copying of this communication is strictly prohibited. Please contact us immediately by telephone for instructions if you have received this communication in error: (214) 758-6800 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080708/42140617/attachment-0001.htm -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/gif Size: 3903 bytes Desc: not available Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20080708/42140617/attachment-0001.gif -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/jpeg Size: 3707 bytes Desc: not available Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20080708/42140617/attachment-0001.jpe From ERNSTCS at uwec.edu Tue Jul 8 09:57:42 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Tue, 8 Jul 2008 11:57:42 -0500 Subject: [Casper] boot camp commands on windows In-Reply-To: <487365E002000039000002F6@gwoes4.kckps.org> Message-ID: I've been asking for this same thing. I haven't checked out the updated version of bootcamp yet, but my guess there is nothing in there for "Enterprise" support. If someone has something that does this I would owe them big time! Craig On 7/8/08 1:04 PM, "Thomas Larkin" wrote: Is anyone running any kind of scripts or hooks with in the windows side that use boot camp? Like, how would you force someone in windows to change the default boot volume back to OS X and reboot the system? Thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080708/45f044be/attachment.htm From eric.winkelhake at us-resources.com Tue Jul 8 10:10:25 2008 From: eric.winkelhake at us-resources.com (Eric Winkelhake) Date: Tue, 8 Jul 2008 12:10:25 -0500 Subject: [Casper] boot camp commands on windows In-Reply-To: Message-ID: Not sure about forcing them....but have you seen BootPicker from bombich?? Or maybe rEFIt?? Their open source so maybe you could manipulate one to get the desired effect. -- Eric Winkelhake | Technology Services ? Mundocom | Re:Sources IT 35 West Wacker Drive, Suite 3000 | Chicago, IL 60601 Office: 312-220-1669 | Mobile: 312-519-5632 Email: Eric.Winkelhake at us-resources.com Open a Service Desk Ticket | Navigating IT | Training Now "Ernst, Craig S." Sent by: casper-bounces at list.jamfsoftware.com 07/08/08 11:57 AM To Casper List cc Subject Re: [Casper] boot camp commands on windows I?ve been asking for this same thing. I haven?t checked out the updated version of bootcamp yet, but my guess there is nothing in there for ?Enterprise? support. If someone has something that does this I would owe them big time! Craig On 7/8/08 1:04 PM, "Thomas Larkin" wrote: Is anyone running any kind of scripts or hooks with in the windows side that use boot camp? Like, how would you force someone in windows to change the default boot volume back to OS X and reboot the system? Thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080708/f5366977/attachment.htm -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/gif Size: 3903 bytes Desc: not available Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20080708/f5366977/attachment.gif From TLARKI at kckps.org Tue Jul 8 12:38:13 2008 From: TLARKI at kckps.org (Thomas Larkin) Date: Tue, 08 Jul 2008 14:38:13 -0500 Subject: [Casper] boot camp commands on windows In-Reply-To: References: Message-ID: <48737BD5020000390000030E@gwoes4.kckps.org> Yeah, boot picker is nice and I have used that in the past. The only huge downside for me is that I have to open up firmware access for boot picker to run, and it doesn't like the fact that I make the windows partition not mount at start up via /etc/fstab. In my environment if we unlock firmware I know that some students will use target mode booting or an installer DVD to root a machine, and that is something my boss doesn't want to happen, nor do I. I know that physical access tosses all security out the window, but a firmware password is a huge deterrent, and 99% of the students won't want to physically open up their macbooks to bypass the firmware password. Mainly because we can tell, and we charge them for the laptop if that is the case. Trust me, I would rather not put windows on any of these machines but due to time and a certain application I have absolutely no choice. Next school year if the developer doesn't get off their butts and fix their product to make it web based (like they are promising us) I am going to have to lobby to change products. thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 >>> Eric Winkelhake 7/8/2008 12:10 PM >>> Not sure about forcing them....but have you seen BootPicker from bombich?? Or maybe rEFIt?? Their open source so maybe you could manipulate one to get the desired effect. -- Eric Winkelhake | Technology Services ? Mundocom | Re:Sources IT 35 West Wacker Drive, Suite 3000 | Chicago, IL 60601 Office: 312-220-1669 | Mobile: 312-519-5632 Email: Eric.Winkelhake at us-resources.com Open a Service Desk Ticket | Navigating IT | Training Now "Ernst, Craig S." Sent by: casper-bounces at list.jamfsoftware.com 07/08/08 11:57 AM To Casper List cc Subject Re: [Casper] boot camp commands on windows I?ve been asking for this same thing. I haven?t checked out the updated version of bootcamp yet, but my guess there is nothing in there for ?Enterprise? support. If someone has something that does this I would owe them big time! Craig On 7/8/08 1:04 PM, "Thomas Larkin" wrote: Is anyone running any kind of scripts or hooks with in the windows side that use boot camp? Like, how would you force someone in windows to change the default boot volume back to OS X and reboot the system? Thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. From eric.winkelhake at us-resources.com Tue Jul 8 11:29:20 2008 From: eric.winkelhake at us-resources.com (Eric Winkelhake) Date: Tue, 8 Jul 2008 13:29:20 -0500 Subject: [Casper] boot camp commands on windows In-Reply-To: <48737BD5020000390000030E@gwoes4.kckps.org> Message-ID: I know this doesn't help but if BootPicker has a problem with not mounting the volume why not just make it hidden with a .hidden file or using the setfile command found in the dev tools to set the invisible attribute?? Anyway, take a look at refit. I'm pretty sure you can lock down boot choices which means preventing target disk mode and optical/external booting. Here's info from the latest version: ersion 0.11 (February 20, 2008): Support for the MacBook Air. Apple Hardware Test is no longer shown as a separate choice in the main menu. If present, it is now an option in the Mac OS X submenu. Additional configuration options to lock down rEFIt for a lab environment. -- Eric Winkelhake | Technology Services ? Mundocom | Re:Sources IT 35 West Wacker Drive, Suite 3000 | Chicago, IL 60601 Office: 312-220-1669 | Mobile: 312-519-5632 Email: Eric.Winkelhake at us-resources.com Open a Service Desk Ticket | Navigating IT | Training Now "Thomas Larkin" 07/08/08 12:17 PM To , "Eric Winkelhake" , "Craig S. Ernst" cc "Casper List" Subject Re: [Casper] boot camp commands on windows Yeah, boot picker is nice and I have used that in the past. The only huge downside for me is that I have to open up firmware access for boot picker to run, and it doesn't like the fact that I make the windows partition not mount at start up via /etc/fstab. In my environment if we unlock firmware I know that some students will use target mode booting or an installer DVD to root a machine, and that is something my boss doesn't want to happen, nor do I. I know that physical access tosses all security out the window, but a firmware password is a huge deterrent, and 99% of the students won't want to physically open up their macbooks to bypass the firmware password. Mainly because we can tell, and we charge them for the laptop if that is the case. Trust me, I would rather not put windows on any of these machines but due to time and a certain application I have absolutely no choice. Next school year if the developer doesn't get off their butts and fix their product to make it web based (like they are promising us) I am going to have to lobby to change products. thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 >>> Eric Winkelhake 7/8/2008 12:10 PM >>> Not sure about forcing them....but have you seen BootPicker from bombich?? Or maybe rEFIt?? Their open source so maybe you could manipulate one to get the desired effect. -- Eric Winkelhake | Technology Services ? Mundocom | Re:Sources IT 35 West Wacker Drive, Suite 3000 | Chicago, IL 60601 Office: 312-220-1669 | Mobile: 312-519-5632 Email: Eric.Winkelhake at us-resources.com Open a Service Desk Ticket | Navigating IT | Training Now "Ernst, Craig S." Sent by: casper-bounces at list.jamfsoftware.com 07/08/08 11:57 AM To Casper List cc Subject Re: [Casper] boot camp commands on windows I?ve been asking for this same thing. I haven?t checked out the updated version of bootcamp yet, but my guess there is nothing in there for ?Enterprise? support. If someone has something that does this I would owe them big time! Craig On 7/8/08 1:04 PM, "Thomas Larkin" wrote: Is anyone running any kind of scripts or hooks with in the windows side that use boot camp? Like, how would you force someone in windows to change the default boot volume back to OS X and reboot the system? Thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080708/505acaf9/attachment.htm -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/gif Size: 3903 bytes Desc: not available Url : http://list.jamfsoftware.com/pipermail/casper/attachments/20080708/505acaf9/attachment-0001.gif From TLARKI at kckps.org Tue Jul 8 11:47:37 2008 From: TLARKI at kckps.org (Thomas Larkin) Date: Tue, 08 Jul 2008 13:47:37 -0500 Subject: [Casper] boot camp commands on windows In-Reply-To: References: <48737BD5020000390000030E@gwoes4.kckps.org> Message-ID: <48736FF90200003900000320@gwoes4.kckps.org> Eric Thanks I have not looked at the newest version of boot picker or refit so they may have very well added command mode to it. I will have to check that out thanks Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 >>> Eric Winkelhake 7/8/2008 1:29 PM >>> I know this doesn't help but if BootPicker has a problem with not mounting the volume why not just make it hidden with a .hidden file or using the setfile command found in the dev tools to set the invisible attribute?? Anyway, take a look at refit. I'm pretty sure you can lock down boot choices which means preventing target disk mode and optical/external booting. Here's info from the latest version: ersion 0.11 (February 20, 2008): Support for the MacBook Air. Apple Hardware Test is no longer shown as a separate choice in the main menu. If present, it is now an option in the Mac OS X submenu. Additional configuration options to lock down rEFIt for a lab environment. -- Eric Winkelhake | Technology Services ? Mundocom | Re:Sources IT 35 West Wacker Drive, Suite 3000 | Chicago, IL 60601 Office: 312-220-1669 | Mobile: 312-519-5632 Email: Eric.Winkelhake at us-resources.com Open a Service Desk Ticket | Navigating IT | Training Now "Thomas Larkin" 07/08/08 12:17 PM To , "Eric Winkelhake" , "Craig S. Ernst" cc "Casper List" Subject Re: [Casper] boot camp commands on windows Yeah, boot picker is nice and I have used that in the past. The only huge downside for me is that I have to open up firmware access for boot picker to run, and it doesn't like the fact that I make the windows partition not mount at start up via /etc/fstab. In my environment if we unlock firmware I know that some students will use target mode booting or an installer DVD to root a machine, and that is something my boss doesn't want to happen, nor do I. I know that physical access tosses all security out the window, but a firmware password is a huge deterrent, and 99% of the students won't want to physically open up their macbooks to bypass the firmware password. Mainly because we can tell, and we charge them for the laptop if that is the case. Trust me, I would rather not put windows on any of these machines but due to time and a certain application I have absolutely no choice. Next school year if the developer doesn't get off their butts and fix their product to make it web based (like they are promising us) I am going to have to lobby to change products. thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 >>> Eric Winkelhake 7/8/2008 12:10 PM >>> Not sure about forcing them....but have you seen BootPicker from bombich?? Or maybe rEFIt?? Their open source so maybe you could manipulate one to get the desired effect. -- Eric Winkelhake | Technology Services ? Mundocom | Re:Sources IT 35 West Wacker Drive, Suite 3000 | Chicago, IL 60601 Office: 312-220-1669 | Mobile: 312-519-5632 Email: Eric.Winkelhake at us-resources.com Open a Service Desk Ticket | Navigating IT | Training Now "Ernst, Craig S." Sent by: casper-bounces at list.jamfsoftware.com 07/08/08 11:57 AM To Casper List cc Subject Re: [Casper] boot camp commands on windows I?ve been asking for this same thing. I haven?t checked out the updated version of bootcamp yet, but my guess there is nothing in there for ?Enterprise? support. If someone has something that does this I would owe them big time! Craig On 7/8/08 1:04 PM, "Thomas Larkin" wrote: Is anyone running any kind of scripts or hooks with in the windows side that use boot camp? Like, how would you force someone in windows to change the default boot volume back to OS X and reboot the system? Thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. From CMyers at uclan.ac.uk Wed Jul 9 04:40:41 2008 From: CMyers at uclan.ac.uk (Criss Myers) Date: Wed, 09 Jul 2008 12:40:41 +0100 Subject: [Casper] boot camp commands on windows In-Reply-To: <48736FF90200003900000320@gwoes4.kckps.org> References: <48737BD5020000390000030E@gwoes4.kckps.org> <48736FF90200003900000320@gwoes4.kckps.org> Message-ID: <4874B1C9.BB96.0081.0@uclan.ac.uk> Hi, I just use a login hook to unmount the windows partition at login Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> On Tue, Jul 8, 2008 at 7:47 PM, in message <48736FF90200003900000320 at gwoes4.kckps.org>, "Thomas Larkin" wrote: Eric Thanks I have not looked at the newest version of boot picker or refit so they may have very well added command mode to it. I will have to check that out thanks Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 >>> Eric Winkelhake 7/8/2008 1:29 PM >>> I know this doesn't help but if BootPicker has a problem with not mounting the volume why not just make it hidden with a .hidden file or using the setfile command found in the dev tools to set the invisible attribute?? Anyway, take a look at refit. I'm pretty sure you can lock down boot choices which means preventing target disk mode and optical/external booting. Here's info from the latest version: ersion 0.11 (February 20, 2008): Support for the MacBook Air. Apple Hardware Test is no longer shown as a separate choice in the main menu. If present, it is now an option in the Mac OS X submenu. Additional configuration options to lock down rEFIt for a lab environment. -- Eric Winkelhake | Technology Services ? Mundocom | Re:Sources IT 35 West Wacker Drive, Suite 3000 | Chicago, IL 60601 Office: 312-220-1669 | Mobile: 312-519-5632 Email: Eric.Winkelhake at us-resources.com Open a Service Desk Ticket | Navigating IT | Training Now "Thomas Larkin" 07/08/08 12:17 PM To , "Eric Winkelhake" , "Craig S. Ernst" cc "Casper List" Subject Re: [Casper] boot camp commands on windows Yeah, boot picker is nice and I have used that in the past. The only huge downside for me is that I have to open up firmware access for boot picker to run, and it doesn't like the fact that I make the windows partition not mount at start up via /etc/fstab. In my environment if we unlock firmware I know that some students will use target mode booting or an installer DVD to root a machine, and that is something my boss doesn't want to happen, nor do I. I know that physical access tosses all security out the window, but a firmware password is a huge deterrent, and 99% of the students won't want to physically open up their macbooks to bypass the firmware password. Mainly because we can tell, and we charge them for the laptop if that is the case. Trust me, I would rather not put windows on any of these machines but due to time and a certain application I have absolutely no choice. Next school year if the developer doesn't get off their butts and fix their product to make it web based (like they are promising us) I am going to have to lobby to change products. thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 >>> Eric Winkelhake 7/8/2008 12:10 PM >>> Not sure about forcing them....but have you seen BootPicker from bombich?? Or maybe rEFIt?? Their open source so maybe you could manipulate one to get the desired effect. -- Eric Winkelhake | Technology Services ? Mundocom | Re:Sources IT 35 West Wacker Drive, Suite 3000 | Chicago, IL 60601 Office: 312-220-1669 | Mobile: 312-519-5632 Email: Eric.Winkelhake at us-resources.com Open a Service Desk Ticket | Navigating IT | Training Now "Ernst, Craig S." Sent by: casper-bounces at list.jamfsoftware.com 07/08/08 11:57 AM To Casper List cc Subject Re: [Casper] boot camp commands on windows I?ve been asking for this same thing. I haven?t checked out the updated version of bootcamp yet, but my guess there is nothing in there for ?Enterprise? support. If someone has something that does this I would owe them big time! Craig On 7/8/08 1:04 PM, "Thomas Larkin" wrote: Is anyone running any kind of scripts or hooks with in the windows side that use boot camp? Like, how would you force someone in windows to change the default boot volume back to OS X and reboot the system? Thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080709/04fc0e76/attachment.htm From TLARKI at kckps.org Wed Jul 9 10:19:08 2008 From: TLARKI at kckps.org (Thomas Larkin) Date: Wed, 09 Jul 2008 12:19:08 -0500 Subject: [Casper] boot camp commands on windows In-Reply-To: <4874B1C9.BB96.0081.0@uclan.ac.uk> References: <48737BD5020000390000030E@gwoes4.kckps.org> <48736FF90200003900000320@gwoes4.kckps.org> <4874B1C9.BB96.0081.0@uclan.ac.uk> Message-ID: <4874ACBC02000039000003B2@gwoes4.kckps.org> Sorry if this is beating a dead horse, but I even have some peopel at Apple helping me on this one. I am also, on a side note, missing the corporate world now where you don't need to micromanage your users as much. So, I know that the exe file for boot camp in Windows lives here C:\Program Files\Boot Camp\KbMgr.exe I was thinking I could do a simple script like this (and my Windows scripting skills suck) @echo off rem run your program and wait until its done start /wait \\path\to\maptest ...... rem bootcampfix .... C:\Program Files\Boot Camp\KbdMgr.exe".... Restart in Mac OS X.... rem schedule reboot NOW. during testing change 0 to 60 rem reboot can be stopped by shutdown -a from a cmd prompt (start menu/run cmd) shutdown -r -t 0 However I don't think it works, well I know it doesn't work. Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 From sjhinding at isd194.k12.mn.us Wed Jul 9 14:40:24 2008 From: sjhinding at isd194.k12.mn.us (Sandy J. Hinding) Date: Wed, 09 Jul 2008 16:40:24 -0500 Subject: [Casper] Default PDF Viewer Message-ID: Hi All! I need to force all user profiles to open PDFs by default in Adobe Reader (8.12). I cannot seem to make this stick. I have tried adding the launchservices.plist as a package, and also editing the file on my OS package (10.4.11 PPC) both in the local profile preferences and in the User Template. After imaging, the plist is there, and looks correct, but I have to reset with the (which doesn't seem to change the plist text) before it will work. Anybody have any tips? Sandy Hinding Lead Macintosh Technician HelpDesk Manager Lakeville Area Public Schools 952-232-2053 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080709/d592e87b/attachment-0001.htm From TLARKI at kckps.org Wed Jul 9 15:37:34 2008 From: TLARKI at kckps.org (Thomas Larkin) Date: Wed, 09 Jul 2008 17:37:34 -0500 Subject: [Casper] boot camp commands on windows In-Reply-To: <4874ACBC02000039000003B2@gwoes4.kckps.org> References: <48737BD5020000390000030E@gwoes4.kckps.org> <48736FF90200003900000320@gwoes4.kckps.org> <4874B1C9.BB96.0081.0@uclan.ac.uk> <4874ACBC02000039000003B2@gwoes4.kckps.org> Message-ID: <4874F75E0200003900000400@gwoes4.kckps.org> Well, After a long and hard day of surfing the web and google searching every possibility my Novell/software developer guy I work with actually figured it out. Now, when a user logs into windows there is an object policy in Novell that if they have the bootcamp.exe installed on their machine it will automatically launch the MAP testing software. Now, once they exit the machine it runs a script which invokes a freeware program called autoIT. AutoIT will detect the current open window and can open and execute programs. So we told it to open up the boot camp manager in windows, select OS X start up disk and you can map mouse coordinates for current open windows. He basically mapped out where the OK button is located to reboot and then told it to reboot the system. Then it reboots back into OS X. I found this all on a thread from Bombich's site. This would also be great for anyone who was deploying dual booting OS X/Windows boxes and wanted the machine to after it was done imaging reboot windows to run sysprep just once, and then reboot back into OS X permanently. here is the script: ;; boot_to_osx.au3 ;; ;; there's no way to do this with the command line or anything, ;; so here's a little autoit script to use apple's provided ;; utility to bless the OSX drive. #requireadmin Local $dom = envget("USERDOMAIN") ;;runas("maptestadmin",$dom,"m4pt3st",0,"C:\Windows\system32\AppleControlPanel.exe") Run("C:\Windows\system32\AppleControlPanel.exe") WinWait("Boot Camp Control Panel") WinActivate("Boot Camp Control Panel") WinWaitActive ("Boot Camp Control Panel") ControlClick ("Boot Camp Control Panel", "", "[CLASSNN:SysListView321]", "left", 1, 40, 20) ControlClick("Boot Camp Control Panel", "OK", 1) Run("C:\Windows\system32\shutdown.exe -f -r -t 0") here is the app autoIT http://www.autoitscript.com/autoit3/downloads.shtml Here is the bombich link http://forums.bombich.com/viewtopic.php?p=45711 Of course Steve Rose, the guy I work with is the genius that put it all together. Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 >>> "Thomas Larkin" 7/9/2008 12:19 PM >>> Sorry if this is beating a dead horse, but I even have some peopel at Apple helping me on this one. I am also, on a side note, missing the corporate world now where you don't need to micromanage your users as much. So, I know that the exe file for boot camp in Windows lives here C:\Program Files\Boot Camp\KbMgr.exe I was thinking I could do a simple script like this (and my Windows scripting skills suck) @echo off rem run your program and wait until its done start /wait \\path\to\maptest ...... rem bootcampfix .... C:\Program Files\Boot Camp\KbdMgr.exe".... Restart in Mac OS X.... rem schedule reboot NOW. during testing change 0 to 60 rem reboot can be stopped by shutdown -a from a cmd prompt (start menu/run cmd) shutdown -r -t 0 However I don't think it works, well I know it doesn't work. Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper From ERNSTCS at uwec.edu Wed Jul 9 15:12:48 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Wed, 9 Jul 2008 17:12:48 -0500 Subject: [Casper] boot camp commands on windows In-Reply-To: <4874F75E0200003900000400@gwoes4.kckps.org> Message-ID: Hi Tom, I'm glad that you've got a working solution, but you and JAMF will have to pardon my soapbox about Apple since I see an Apple email address copied on this message. I know that one of the folks in our area worked out a similar solution a long while back with screen control, but to me this is a hack and not a real solution. All Apple needs to do is add some simple command line interaction with their application and MANY people would not be going through what you've been going through. I just don't get what the hang up is on Apple's part, like this request is somehow foreign in an Enterprise environment they seemingly want to be a part of, particularly in education where I think they are pushing dual-platform systems and hardware. I've gone through my Apple channels with no response regarding this and talk about frustration... Tom, let us know how reliable this turns out to be for you. Thanks...and good night. Craig On 7/9/08 5:37 PM, "Thomas Larkin" wrote: Well, After a long and hard day of surfing the web and google searching every possibility my Novell/software developer guy I work with actually figured it out. Now, when a user logs into windows there is an object policy in Novell that if they have the bootcamp.exe installed on their machine it will automatically launch the MAP testing software. Now, once they exit the machine it runs a script which invokes a freeware program called autoIT. AutoIT will detect the current open window and can open and execute programs. So we told it to open up the boot camp manager in windows, select OS X start up disk and you can map mouse coordinates for current open windows. He basically mapped out where the OK button is located to reboot and then told it to reboot the system. Then it reboots back into OS X. I found this all on a thread from Bombich's site. This would also be great for anyone who was deploying dual booting OS X/Windows boxes and wanted the machine to after it was done imaging reboot windows to run sysprep just once, and then reboot back into OS X permanently. here is the script: ;; boot_to_osx.au3 ;; ;; there's no way to do this with the command line or anything, ;; so here's a little autoit script to use apple's provided ;; utility to bless the OSX drive. #requireadmin Local $dom = envget("USERDOMAIN") ;;runas("maptestadmin",$dom,"m4pt3st",0,"C:\Windows\system32\AppleControlPanel.exe") Run("C:\Windows\system32\AppleControlPanel.exe") WinWait("Boot Camp Control Panel") WinActivate("Boot Camp Control Panel") WinWaitActive ("Boot Camp Control Panel") ControlClick ("Boot Camp Control Panel", "", "[CLASSNN:SysListView321]", "left", 1, 40, 20) ControlClick("Boot Camp Control Panel", "OK", 1) Run("C:\Windows\system32\shutdown.exe -f -r -t 0") here is the app autoIT http://www.autoitscript.com/autoit3/downloads.shtml Here is the bombich link http://forums.bombich.com/viewtopic.php?p=45711 Of course Steve Rose, the guy I work with is the genius that put it all together. Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 >>> "Thomas Larkin" 7/9/2008 12:19 PM >>> Sorry if this is beating a dead horse, but I even have some peopel at Apple helping me on this one. I am also, on a side note, missing the corporate world now where you don't need to micromanage your users as much. So, I know that the exe file for boot camp in Windows lives here C:\Program Files\Boot Camp\KbMgr.exe I was thinking I could do a simple script like this (and my Windows scripting skills suck) @echo off rem run your program and wait until its done start /wait \\path\to\maptest ...... rem bootcampfix .... C:\Program Files\Boot Camp\KbdMgr.exe".... Restart in Mac OS X.... rem schedule reboot NOW. during testing change 0 to 60 rem reboot can be stopped by shutdown -a from a cmd prompt (start menu/run cmd) shutdown -r -t 0 However I don't think it works, well I know it doesn't work. Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080709/b6e770aa/attachment.htm From TLARKI at kckps.org Wed Jul 9 15:52:59 2008 From: TLARKI at kckps.org (Thomas Larkin) Date: Wed, 09 Jul 2008 17:52:59 -0500 Subject: [Casper] boot camp commands on windows In-Reply-To: References: <4874F75E0200003900000400@gwoes4.kckps.org> Message-ID: <4874FAFB020000390000040B@gwoes4.kckps.org> He is my AppleSE and was working with me to get the problem fixed. I CC'd him out of sheer laziness of making two separate emails. I think everyone agrees, and reading through the bombich forums I found at least 15 threads on the subject I was looking for. There is indeed a demand for it, but just like anything else change takes time and it never comes over night. Sorry I probably should have sent a separate email but I have been working on this all day and am now cutting corners to get more stuff done. I probably won't even get home until around 9pm tonight to finish the rest of this crap up. So far, in our limited two laptop test, it worked. I really need version 6 and self service policy to make it work exactly how I want to. Also, I did find that the bless command has a reboot once argument that can be used in syntax with the command. I haven't had time to poke through it all yet but it seems like there may be a way to do it natively in OS X as we speak, it just may not be very intuitive. Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 >>> "Ernst, Craig S." 7/9/2008 5:12 PM >>> Hi Tom, I'm glad that you've got a working solution, but you and JAMF will have to pardon my soapbox about Apple since I see an Apple email address copied on this message. I know that one of the folks in our area worked out a similar solution a long while back with screen control, but to me this is a hack and not a real solution. All Apple needs to do is add some simple command line interaction with their application and MANY people would not be going through what you've been going through. I just don't get what the hang up is on Apple's part, like this request is somehow foreign in an Enterprise environment they seemingly want to be a part of, particularly in education where I think they are pushing dual-platform systems and hardware. I've gone through my Apple channels with no response regarding this and talk about frustration... Tom, let us know how reliable this turns out to be for you. Thanks...and good night. Craig On 7/9/08 5:37 PM, "Thomas Larkin" wrote: Well, After a long and hard day of surfing the web and google searching every possibility my Novell/software developer guy I work with actually figured it out. Now, when a user logs into windows there is an object policy in Novell that if they have the bootcamp.exe installed on their machine it will automatically launch the MAP testing software. Now, once they exit the machine it runs a script which invokes a freeware program called autoIT. AutoIT will detect the current open window and can open and execute programs. So we told it to open up the boot camp manager in windows, select OS X start up disk and you can map mouse coordinates for current open windows. He basically mapped out where the OK button is located to reboot and then told it to reboot the system. Then it reboots back into OS X. I found this all on a thread from Bombich's site. This would also be great for anyone who was deploying dual booting OS X/Windows boxes and wanted the machine to after it was done imaging reboot windows to run sysprep just once, and then reboot back into OS X permanently. here is the script: ;; boot_to_osx.au3 ;; ;; there's no way to do this with the command line or anything, ;; so here's a little autoit script to use apple's provided ;; utility to bless the OSX drive. #requireadmin Local $dom = envget("USERDOMAIN") ;;runas("maptestadmin",$dom,"m4pt3st",0,"C:\Windows\system32\AppleControlPanel.exe") Run("C:\Windows\system32\AppleControlPanel.exe") WinWait("Boot Camp Control Panel") WinActivate("Boot Camp Control Panel") WinWaitActive ("Boot Camp Control Panel") ControlClick ("Boot Camp Control Panel", "", "[CLASSNN:SysListView321]", "left", 1, 40, 20) ControlClick("Boot Camp Control Panel", "OK", 1) Run("C:\Windows\system32\shutdown.exe -f -r -t 0") here is the app autoIT http://www.autoitscript.com/autoit3/downloads.shtml Here is the bombich link http://forums.bombich.com/viewtopic.php?p=45711 Of course Steve Rose, the guy I work with is the genius that put it all together. Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 >>> "Thomas Larkin" 7/9/2008 12:19 PM >>> Sorry if this is beating a dead horse, but I even have some peopel at Apple helping me on this one. I am also, on a side note, missing the corporate world now where you don't need to micromanage your users as much. So, I know that the exe file for boot camp in Windows lives here C:\Program Files\Boot Camp\KbMgr.exe I was thinking I could do a simple script like this (and my Windows scripting skills suck) @echo off rem run your program and wait until its done start /wait \\path\to\maptest ...... rem bootcampfix .... C:\Program Files\Boot Camp\KbdMgr.exe".... Restart in Mac OS X.... rem schedule reboot NOW. during testing change 0 to 60 rem reboot can be stopped by shutdown -a from a cmd prompt (start menu/run cmd) shutdown -r -t 0 However I don't think it works, well I know it doesn't work. Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper From CMyers at uclan.ac.uk Thu Jul 10 01:38:05 2008 From: CMyers at uclan.ac.uk (Criss Myers) Date: Thu, 10 Jul 2008 09:38:05 +0100 Subject: [Casper] Not a valid JSS Message-ID: <4875D87D.BB96.0081.0@uclan.ac.uk> Hi All, Ive used autorun on a number of mac this week and last, and now when i try to autorun to image a mac i get "The server that Casper received data from does not appear to be a valid JSS....." It gets to this after the check for autorun and "Gather information from JSS" Any ideas how this has happened? Its the same on all machines, ive deleted one mac from the JSS and re-reconed it but it made no difference, have rebooted the server. Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080710/e5194af3/attachment.html From ERNSTCS at uwec.edu Thu Jul 10 05:35:10 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Thu, 10 Jul 2008 07:35:10 -0500 Subject: [Casper] Not a valid JSS In-Reply-To: <4875D87D.BB96.0081.0@uclan.ac.uk> Message-ID: I use to see this often, particularly on my old G5 Xserve server. I don't recall that I've ever found out the exact cause, even though you can go to the web interface of the JSS just fine. What are your server specs? How many clients do you have? And how often is the shortest interval between them checking in? Craig On 7/10/08 3:38 AM, "Criss Myers" wrote: Hi All, Ive used autorun on a number of mac this week and last, and now when i try to autorun to image a mac i get "The server that Casper received data from does not appear to be a valid JSS....." It gets to this after the check for autorun and "Gather information from JSS" Any ideas how this has happened? Its the same on all machines, ive deleted one mac from the JSS and re-reconed it but it made no difference, have rebooted the server. Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080710/a94ef24b/attachment-0001.html From mcorippo at lblp.com Thu Jul 10 11:59:40 2008 From: mcorippo at lblp.com (mcorippo) Date: Thu, 10 Jul 2008 11:59:40 -0700 Subject: [Casper] Byhost issue? Message-ID: Howdy all, OK, hopefully this is an easy one. Working on our new 10.5 image, and when we push out a fresh image to a test box (while netbooted), I can't get Software Update to stick (in the Off position) for any user (1 admin, 2 managed). Don't think it is a Byhost issue, because everything else Byhost related retains proper settings. Only the Software Update setting doesn't play nice. Tried making a UE package from the admin user with Software Update set to off, and set it to Fill Existing Users. Pushed it out with a Byhost update and rebooted. Software update is On for all three users.....opposite of what I was trying to do. Any ideas? Never saw this issue on 10.4. Could it be permissions related? Been monkeying with User permissions on 10.5, including removing ACLs. I don't think so, because in the above test, I have tried with User, Group, and Everyone set to RWX for all three existing users. Bonus Question: Anybody been tweaking users permissions for 10.5? With 10.4 we were able to chmod all users Everyone perms to "No Access" with no issues. With 10.5 it looks like Everyone needs to be set to Execute for Byhost and Menu Bar prefs to take effect correctly. What works best for you........leave 'em as Apple set 'em, or something different? Thanks, Matt Corippo Lindamood-Bell Learning Processes From ERNSTCS at uwec.edu Thu Jul 10 12:07:34 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Thu, 10 Jul 2008 14:07:34 -0500 Subject: [Casper] Byhost issue? In-Reply-To: Message-ID: Hi matt, Need to make a script that will run after running the following command to update byhosts properly. /usr/sbin/jamf fixByHostFiles -target '/Volumes/Macintosh HD' Should be good to go after that. Craig On 7/10/08 1:59 PM, "mcorippo" wrote: Howdy all, OK, hopefully this is an easy one. Working on our new 10.5 image, and when we push out a fresh image to a test box (while netbooted), I can't get Software Update to stick (in the Off position) for any user (1 admin, 2 managed). Don't think it is a Byhost issue, because everything else Byhost related retains proper settings. Only the Software Update setting doesn't play nice. Tried making a UE package from the admin user with Software Update set to off, and set it to Fill Existing Users. Pushed it out with a Byhost update and rebooted. Software update is On for all three users.....opposite of what I was trying to do. Any ideas? Never saw this issue on 10.4. Could it be permissions related? Been monkeying with User permissions on 10.5, including removing ACLs. I don't think so, because in the above test, I have tried with User, Group, and Everyone set to RWX for all three existing users. Bonus Question: Anybody been tweaking users permissions for 10.5? With 10.4 we were able to chmod all users Everyone perms to "No Access" with no issues. With 10.5 it looks like Everyone needs to be set to Execute for Byhost and Menu Bar prefs to take effect correctly. What works best for you........leave 'em as Apple set 'em, or something different? Thanks, Matt Corippo Lindamood-Bell Learning Processes _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080710/14f3e205/attachment.htm From mcorippo at lblp.com Thu Jul 10 13:41:29 2008 From: mcorippo at lblp.com (mcorippo) Date: Thu, 10 Jul 2008 13:41:29 -0700 Subject: [Casper] Byhost issue? In-Reply-To: References: Message-ID: Thanks Craig. Will give it a go. Gotta ask......is this something different/broken since 10.5, or something else in your experience? I take it that clicking the Fix Byhost box in a local or remote session does not work (I had assumed it was running jamf fixByHostFiles).....for everybody? Thanks again, Mattt P.S. Any takers on ACLs in the Users space and 10.5? Love 'em......hate 'em......don't care? "Ernst, Craig S." writes: >Hi matt, > >Need to make a script that will run after running the following command to update byhosts properly. > >/usr/sbin/jamf fixByHostFiles -target '/Volumes/Macintosh HD' > >Should be good to go after that. > >Craig > > >On 7/10/08 1:59 PM, "mcorippo" <[ fcp://@mail.lblp.com,%237000617/A%20MailBox/mcorippo at lblp.com ]mcorippo at lblp.com> wrote: > > > >Howdy all, > >OK, hopefully this is an easy one. Working on our new 10.5 image, and when we push out a fresh image to a test box (while netbooted), I can't get Software Update to stick (in the Off position) for any user (1 >admin, 2 managed). Don't think it is a Byhost issue, because everything else Byhost related retains proper settings. Only the Software Update setting doesn't play nice. > >Tried making a UE package from the admin user with Software Update set to off, and set it to Fill Existing Users. Pushed it out with a Byhost update and rebooted. Software update is On for all three >users.....opposite of what I was trying to do. Any ideas? Never saw this issue on 10.4. > >Could it be permissions related? Been monkeying with User permissions on 10.5, including removing ACLs. I don't think so, because in the above test, I have tried with User, Group, and Everyone set to RWX for >all three existing users. > > > >Bonus Question: > >Anybody been tweaking users permissions for 10.5? With 10.4 we were able to chmod all users Everyone perms to "No Access" with no issues. With 10.5 it looks like Everyone needs to be set to Execute for >Byhost and Menu Bar prefs to take effect correctly. What works best for you........leave 'em as Apple set 'em, or something different? > >Thanks, >Matt Corippo >Lindamood-Bell Learning Processes > > >_______________________________________________ >Casper mailing list >[ fcp://@mail.lblp.com,%237000617/A%20MailBox/Casper at list.jamfsoftware.com ]Casper at list.jamfsoftware.com >[ http://list.jamfsoftware.com/mailman/listinfo/casper ]http://list.jamfsoftware.com/mailman/listinfo/casper > > >_______________________________________________ >Casper mailing list >Casper at list.jamfsoftware.com >http://list.jamfsoftware.com/mailman/listinfo/casper From ERNSTCS at uwec.edu Thu Jul 10 13:51:29 2008 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Thu, 10 Jul 2008 15:51:29 -0500 Subject: [Casper] Byhost issue? In-Reply-To: Message-ID: Some of the newer hardware started to use a UUID instead of the Mac address to generate ByHost files. http://www.afp548.com/article.php?story=leopard_byhost_changes JAMF, added this little work around into the binary, not sure which exact version of 5.x, but you have to do it with the binary for this particular issue, hence the after scrtip. I'm not really sure if the box in the remote session works or not in the same way, but I assume it calls the same command on that machine so it should? Locally I don't think does work. It should fix it for every user account on the machine I believe. Perhaps someone else can clarify that. Craig On 7/10/08 3:41 PM, "mcorippo" wrote: Thanks Craig. Will give it a go. Gotta ask......is this something different/broken since 10.5, or something else in your experience? I take it that clicking the Fix Byhost box in a local or remote session does not work (I had assumed it was running jamf fixByHostFiles).....for everybody? Thanks again, Mattt P.S. Any takers on ACLs in the Users space and 10.5? Love 'em......hate 'em......don't care? "Ernst, Craig S." writes: >Hi matt, > >Need to make a script that will run after running the following command to update byhosts properly. > >/usr/sbin/jamf fixByHostFiles -target '/Volumes/Macintosh HD' > >Should be good to go after that. > >Craig > > >On 7/10/08 1:59 PM, "mcorippo" <[ fcp://@mail.lblp.com,%237000617/A%20MailBox/mcorippo at lblp.com ]mcorippo at lblp.com> wrote: > > > >Howdy all, > >OK, hopefully this is an easy one. Working on our new 10.5 image, and when we push out a fresh image to a test box (while netbooted), I can't get Software Update to stick (in the Off position) for any user (1 >admin, 2 managed). Don't think it is a Byhost issue, because everything else Byhost related retains proper settings. Only the Software Update setting doesn't play nice. > >Tried making a UE package from the admin user with Software Update set to off, and set it to Fill Existing Users. Pushed it out with a Byhost update and rebooted. Software update is On for all three >users.....opposite of what I was trying to do. Any ideas? Never saw this issue on 10.4. > >Could it be permissions related? Been monkeying with User permissions on 10.5, including removing ACLs. I don't think so, because in the above test, I have tried with User, Group, and Everyone set to RWX for >all three existing users. > > > >Bonus Question: > >Anybody been tweaking users permissions for 10.5? With 10.4 we were able to chmod all users Everyone perms to "No Access" with no issues. With 10.5 it looks like Everyone needs to be set to Execute for >Byhost and Menu Bar prefs to take effect correctly. What works best for you........leave 'em as Apple set 'em, or something different? > >Thanks, >Matt Corippo >Lindamood-Bell Learning Processes > > >_______________________________________________ >Casper mailing list >[ fcp://@mail.lblp.com,%237000617/A%20MailBox/Casper at list.jamfsoftware.com ]Casper at list.jamfsoftware.com >[ http://list.jamfsoftware.com/mailman/listinfo/casper ]http://list.jamfsoftware.com/mailman/listinfo/casper > > >_______________________________________________ >Casper mailing list >Casper at list.jamfsoftware.com >http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080710/9d2caded/attachment.htm From bslutzky at mph.net Thu Jul 10 14:02:09 2008 From: bslutzky at mph.net (Slutzky, Benjamin) Date: Thu, 10 Jul 2008 17:02:09 -0400 Subject: [Casper] Wireless authentication & Active Directory logins In-Reply-To: Message-ID: Hi, We have several mobile shared iBook and MacBook carts in our campus?s wireless network, and all students and faculty use Active Directory accounts. We?re implementing the ?Golden Triangle? setup of having Mac clients authenticate users with the Active Directory and pull preferences from the Open Directory server (our Xserve which also hosts Casper). In the past, our wireless network had been unencrypted. In a couple of weeks, we?ll be encrypting the 802.1x wireless network, and wireless clients will be required to authenticate with a Active Directory username/password (via LDAP using Microsoft IAS as a RADIUS server) to gain network access. In theory, after starting up a school laptop, a user would first somehow have to authenticate to the wireless network with AD credentials, and then they would be able to login to the computer with AD credentials. (They?d need a network connection to login to the Mac with their AD credentials so it could contact the RADIUS server, so they?d need to authenticate for wireless first.) Does anyone have a similar setup or have knowledge in the subject? If so, what kinds of issues have you experiences with such a setup? We?d appreciate any thoughts. Ben Slutzky Manlius-Pebble Hill School From TLARKI at kckps.org Thu Jul 10 16:16:12 2008 From: TLARKI at kckps.org (Thomas Larkin) Date: Thu, 10 Jul 2008 18:16:12 -0500 Subject: [Casper] load balancing servers Message-ID: <487651EC020000390000048B@gwoes4.kckps.org> Anyone done this with casper yet through the JSS? I want to have multiple netboot and image servers in one subnet and use mass edit for the auto run data. So I have two servers set up, both on the same subnet but with different IP ranges on different DHCP ranges both behind NAT routers. As far as I can tell, the JSS will point new netbooting clients to the other server, but how will it know to do so, and at what point does it start to auto balance? thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 From CMyers at uclan.ac.uk Fri Jul 11 01:27:00 2008 From: CMyers at uclan.ac.uk (Criss Myers) Date: Fri, 11 Jul 2008 09:27:00 +0100 Subject: [Casper] load balancing servers In-Reply-To: <487651EC020000390000048B@gwoes4.kckps.org> References: <487651EC020000390000048B@gwoes4.kckps.org> Message-ID: <48772764.BB96.0081.0@uclan.ac.uk> Hi, If you make the netboot id above above 4096 and put the image on both netboot servers as their default image, then the netboot servers will auto load balance between the two, the client will pic the quickest image to boot from. Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> On Fri, Jul 11, 2008 at 12:16 AM, in message <487651EC020000390000048B at gwoes4.kckps.org>, "Thomas Larkin" wrote: Anyone done this with casper yet through the JSS? I want to have multiple netboot and image servers in one subnet and use mass edit for the auto run data. So I have two servers set up, both on the same subnet but with different IP ranges on different DHCP ranges both behind NAT routers. As far as I can tell, the JSS will point new netbooting clients to the other server, but how will it know to do so, and at what point does it start to auto balance? thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080711/e6f66c23/attachment.htm From Dustin.Dorey at district196.org Fri Jul 11 05:52:53 2008 From: Dustin.Dorey at district196.org (Dorey, Dustin) Date: Fri, 11 Jul 2008 07:52:53 -0500 Subject: [Casper] load balancing servers In-Reply-To: <48772764.BB96.0081.0@uclan.ac.uk> References: <487651EC020000390000048B@gwoes4.kckps.org> <48772764.BB96.0081.0@uclan.ac.uk> Message-ID: Hey quick question on that, we have two different netboot images up on our netboot servers, a 10.4 image that the PPC machines netboot to and a 10.5 that the intels netboot to. That was the easiest division I could think of to make sure that all machines netboot w/o and issue as about half of our PPC machines would not be able to run leopard. In any case I'm wondering if load balancing in the manner you were talking about would still work if I have multiple servers that are all identical with the ID's all above 4096 for all netboot images? Or will it only work if there is one image? Also will this work across subnets the same? We currently are netbooting across subnets but only to one server. Sorry for all the questions and thanks in advance! Dustin Dorey Technology Support Cluster Specialist ISD 196 Apple Valley, Rosemount, Eagan 14445 Diamond Path West Rosemount, MN 55068 (952) 423-7971 dustin.dorey at district196.org From: casper-bounces at list.jamfsoftware.com [mailto:casper-bounces at list.jamfsoftware.com] On Behalf Of Criss Myers Sent: Friday, July 11, 2008 3:27 AM To: Thomas Larkin; casper at list.jamfsoftware.com Subject: Re: [Casper] load balancing servers Hi, If you make the netboot id above above 4096 and put the image on both netboot servers as their default image, then the netboot servers will auto load balance between the two, the client will pic the quickest image to boot from. Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> On Fri, Jul 11, 2008 at 12:16 AM, in message <487651EC020000390000048B at gwoes4.kckps.org>, "Thomas Larkin" wrote: Anyone done this with casper yet through the JSS? I want to have multiple netboot and image servers in one subnet and use mass edit for the auto run data. So I have two servers set up, both on the same subnet but with different IP ranges on different DHCP ranges both behind NAT routers. As far as I can tell, the JSS will point new netbooting clients to the other server, but how will it know to do so, and at what point does it start to auto balance? thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080711/640fda2e/attachment.htm From CMyers at uclan.ac.uk Fri Jul 11 06:02:58 2008 From: CMyers at uclan.ac.uk (Criss Myers) Date: Fri, 11 Jul 2008 14:02:58 +0100 Subject: [Casper] load balancing servers In-Reply-To: References: <487651EC020000390000048B@gwoes4.kckps.org> <48772764.BB96.0081.0@uclan.ac.uk> Message-ID: <48776812.BB96.0081.0@uclan.ac.uk> HI Dustin Why dont you have 1 image that boots PPC and Intel, 10.5 can boot both, As far as the netboot servers are concerned, ID numbers above 4096 can be servered from mulitple servers, doesnt have to be the default image, as long as the same image is on more than 1 server, the client will only detect the image once and when it requests it it will get it from the server that responds first, it should work across subnets as well no problem. Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> On Fri, Jul 11, 2008 at 1:52 PM, in message , "Dorey, Dustin" wrote: Hey quick question on that, we have two different netboot images up on our netboot servers, a 10.4 image that the PPC machines netboot to and a 10.5 that the intels netboot to. That was the easiest division I could think of to make sure that all machines netboot w/o and issue as about half of our PPC machines would not be able to run leopard. In any case I?m wondering if load balancing in the manner you were talking about would still work if I have multiple servers that are all identical with the ID?s all above 4096 for all netboot images? Or will it only work if there is one image? Also will this work across subnets the same? We currently are netbooting across subnets but only to one server. Sorry for all the questions and thanks in advance! Dustin Dorey Technology Support Cluster Specialist ISD 196 Apple Valley, Rosemount, Eagan 14445 Diamond Path West Rosemount, MN 55068 (952) 423-7971 dustin.dorey at district196.org From: casper-bounces at list.jamfsoftware.com [mailto:casper-bounces at list.jamfsoftware.com] On Behalf Of Criss Myers Sent: Friday, July 11, 2008 3:27 AM To: Thomas Larkin; casper at list.jamfsoftware.com Subject: Re: [Casper] load balancing servers Hi, If you make the netboot id above above 4096 and put the image on both netboot servers as their default image, then the netboot servers will auto load balance between the two, the client will pic the quickest image to boot from. Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> On Fri, Jul 11, 2008 at 12:16 AM, in message <487651EC020000390000048B at gwoes4.kckps.org>, "Thomas Larkin" wrote: Anyone done this with casper yet through the JSS? I want to have multiple netboot and image servers in one subnet and use mass edit for the auto run data. So I have two servers set up, both on the same subnet but with different IP ranges on different DHCP ranges both behind NAT routers. As far as I can tell, the JSS will point new netbooting clients to the other server, but how will it know to do so, and at what point does it start to auto balance? thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080711/7ba62ffd/attachment.htm From Dustin.Dorey at district196.org Fri Jul 11 06:06:52 2008 From: Dustin.Dorey at district196.org (Dorey, Dustin) Date: Fri, 11 Jul 2008 08:06:52 -0500 Subject: [Casper] load balancing servers In-Reply-To: <48776812.BB96.0081.0@uclan.ac.uk> References: <487651EC020000390000048B@gwoes4.kckps.org> <48772764.BB96.0081.0@uclan.ac.uk> <48776812.BB96.0081.0@uclan.ac.uk> Message-ID: We have some pretty old machines that we still have to service here and I guess I was under the impression that they wouldn't boot 10.5 if I couldn't install 10.5 on them to begin with such as some of the early eMac incarnations and such. But I never tried either. Dustin Dorey Technology Support Cluster Specialist ISD 196 Apple Valley, Rosemount, Eagan 14445 Diamond Path West Rosemount, MN 55068 (952) 423-7971 dustin.dorey at district196.org From: Criss Myers [mailto:CMyers at uclan.ac.uk] Sent: Friday, July 11, 2008 8:03 AM To: Dorey, Dustin; Thomas Larkin; casper at list.jamfsoftware.com Subject: RE: [Casper] load balancing servers HI Dustin Why dont you have 1 image that boots PPC and Intel, 10.5 can boot both, As far as the netboot servers are concerned, ID numbers above 4096 can be servered from mulitple servers, doesnt have to be the default image, as long as the same image is on more than 1 server, the client will only detect the image once and when it requests it it will get it from the server that responds first, it should work across subnets as well no problem. Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> On Fri, Jul 11, 2008 at 1:52 PM, in message , "Dorey, Dustin" wrote: Hey quick question on that, we have two different netboot images up on our netboot servers, a 10.4 image that the PPC machines netboot to and a 10.5 that the intels netboot to. That was the easiest division I could think of to make sure that all machines netboot w/o and issue as about half of our PPC machines would not be able to run leopard. In any case I'm wondering if load balancing in the manner you were talking about would still work if I have multiple servers that are all identical with the ID's all above 4096 for all netboot images? Or will it only work if there is one image? Also will this work across subnets the same? We currently are netbooting across subnets but only to one server. Sorry for all the questions and thanks in advance! Dustin Dorey Technology Support Cluster Specialist ISD 196 Apple Valley, Rosemount, Eagan 14445 Diamond Path West Rosemount, MN 55068 (952) 423-7971 dustin.dorey at district196.org From: casper-bounces at list.jamfsoftware.com [mailto:casper-bounces at list.jamfsoftware.com] On Behalf Of Criss Myers Sent: Friday, July 11, 2008 3:27 AM To: Thomas Larkin; casper at list.jamfsoftware.com Subject: Re: [Casper] load balancing servers Hi, If you make the netboot id above above 4096 and put the image on both netboot servers as their default image, then the netboot servers will auto load balance between the two, the client will pic the quickest image to boot from. Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> On Fri, Jul 11, 2008 at 12:16 AM, in message <487651EC020000390000048B at gwoes4.kckps.org>, "Thomas Larkin" wrote: Anyone done this with casper yet through the JSS? I want to have multiple netboot and image servers in one subnet and use mass edit for the auto run data. So I have two servers set up, both on the same subnet but with different IP ranges on different DHCP ranges both behind NAT routers. As far as I can tell, the JSS will point new netbooting clients to the other server, but how will it know to do so, and at what point does it start to auto balance? thanks, Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org cell: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: http://list.jamfsoftware.com/pipermail/casper/attachments/20080711/e106450d/attachment-0001.htm From john_wetter at hopkins.k12.mn.us Fri Jul 11 09:22:15 2008 From: john_wetter at hopkins.k12.mn.us (John Wetter) Date: Fri, 11 Jul 2008 11:22:15 -0500 Subject: [Casper] load balancing servers In-Reply-To: Message-ID: We've had a lot of issues trying to netboot older G4's and any G3's we still have around. Seems anything ppc older than the last generation has issues. We set our 10.5 netboot to 'intel' instead of 'universal' just for this reason and kept a 10.4 netboot. -John On 7/11/08 8:06 AM, "Dorey, Dustin" wrote: We have some pretty old machines that we still have to service here and I guess I was under the impression that they wouldn't boot 10.5 if I couldn't install 10.5 on them to begin with such as some of the early eMac incarnations and such. But I never tried either. Dustin Dorey Technology Support Cluster Specialist ISD 196 Apple Valley, Rosemount, Eagan 14445 Diamond Path West Rosemount, MN 55068 (952) 423-7971 dustin.dorey at district196.org From: Criss Myers [mailto:CMyers at uclan.ac.uk] Sent: Friday, July 11, 2008 8:03 AM To: Dorey, Dustin; Thomas Larkin; casper at list.jamfsoftware.com Subject: RE: [Casper] load balancing servers HI Dustin Why dont you have 1 image that boots PPC and Intel, 10.5 can boot both, As far as the netboot servers are concerned, ID numbers above 4096 can be servered from mulitple servers, doesnt have to be the default image, as long as the same image is on more