From chad.brewer at bend.k12.or.us Thu Oct 1 10:02:26 2009 From: chad.brewer at bend.k12.or.us (Chad Brewer) Date: Thu, 01 Oct 2009 10:02:26 -0700 Subject: [Casper] Windows Recon Rollout In-Reply-To: <83CEBE9E35F112448328416BD5E22F3301F3085F@sfo303ex01.na.corp.yr.com> References: <83CEBE9E35F112448328416BD5E22F3301F3085F@sfo303ex01.na.corp.yr.com> Message-ID: What I did is extract jamf.exe from recon.exe. You can do that by running recon.exe /x. Then I run jamf.exe in a .bat file as a startup script via group policy. My .bat files looks like this: copy /v /y "\\server.domain.com\distribution$\Recon\jamf.exe" c:\windows\temp c:\windows\temp\jamf.exe recon -overrideJSS https://casper.domain.com:8443 -username imaging -password ****** "Bradford, Chad" on September 30, 2009 at 4:02 PM -0700 wrote: >After digging around, I think what you are supposed to do now is use >Recon.exe on one of your workstations to create a QuickAdd.msi file. You >can then host the MSI file in a shared folder some place and use Group >Policy to install the MSI file (under Computer Configuration > Policies > >Software Settings > Sosftware Installation ? doing this will install it >when the computer turns on, before login.) Just make sure the Source path >is a network path that Everyone has read access to. > > > >Chad > > > >Chad Bradford | Systems Administrator | Y&R >303 2nd Street, South Tower, 8th floor >San Francisco, CA 94107 USA >T: +1 415 882 0606 >F: +1 415 882 0601 > > > > > > > > > > >-----Original Message----- >From: casper-bounces at list.jamfsoftware.com >[mailto:casper-bounces at list.jamfsoftware.com] On Behalf Of Tony S. Wu >Sent: Monday, September 28, 2009 2:49 PM >To: casper at list.jamfsoftware.com >Subject: [Casper] Windows Recon Rollout > > > >We are looking to roll out Recon on Windows using group policy. > >I found this command through some googling: > > > >PATH\Recon.exe -server DOMAIN.COM -username USER -password PASS > > > >But all the command does is launch Recon. Did the command change for >Recon on Windows? Or is there another recommended way of doing this? >Thanks. > > > >Tony S. Wu > >tonyswu at mac.com > >_______________________________________________ > >Casper mailing list > >Casper at list.jamfsoftware.com > >http://list.jamfsoftware.com/mailman/listinfo/casper > >_______________________________________________ >Casper mailing list >Casper at list.jamfsoftware.com >http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From donmontalvo at gmail.com Thu Oct 1 14:33:52 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Thu, 1 Oct 2009 16:33:52 -0500 Subject: [Casper] Imaging Macs In-Reply-To: References: Message-ID: Miles Leacy wrote: > Hey all, > > The way I've typically handled these items is to set nothing (or as > little as possible) in the OS package/image/installer. > > SSH (remote login) and ARD (remote management) can be enabled via > scripts (preferably separate scripts). > Accounts can be created with Casper Imaging, policies, or Casper > Remote. > > My deployment philosophy is to be as close to 100% modular as > possible. If I build an account into my OS package and then decide > to change it later, I need to rebuild my OS package. If I choose to > create the account with Casper Imaging instead, then I don't need to > change the OS package until the OS changes. > > This is just my personal deployment philosophy, and is by no means > the "correct answer" or even the "JAMF answer". It's just one of > many valid answers. > > I hope this helps... > > -- > Miles Leacy Hi Miles, I agree about keeping everything that can be managed separately, off the image. The goal should be to have a base image that works in all environments (in our case, across different customer environments). I haven't had a chance to play with Casper yet (will be building a sandbox soon), but on the imaging side, does it make sense to use the Apple installer defaults during the NetInstall base image process? I remember in the pre-OSX days, I worked with techs who like to strip out stuff on the base image (languages and other resources) during the image creation process. I was against doing that since things tend to break when patches are released. What's the best practice when making the base image for Casper to deploy - do you stick to the defaults, or do you go to the Customize button and enable everything there? My preference is to do the later. Wanted to bounce that off you guys. Once the image is dropped onto a Mac, does the NetInstall process allow you to queue up images to be put onto the Mac? Or do you image, reboot, push additional packages, then reboot? Sorry if these questions belong in another JAMF list - I've been lurking since Casper is one of the solutions I'm trying to get up to speed on. Thanks, Don --------------------------- Don Montalvo Cell: 347-421-2359 Email: donmontalvo at gmail.com Web: http://donmontalvo.com --------------------------- From William.Smith at merrillcorp.com Thu Oct 1 15:04:08 2009 From: William.Smith at merrillcorp.com (Smith, William) Date: Thu, 1 Oct 2009 17:04:08 -0500 Subject: [Casper] Imaging Macs In-Reply-To: Message-ID: On 10/1/09 4:33 PM, "don montalvo" wrote: > What's the best practice when making the base image for Casper to > deploy - do you stick to the defaults, or do you go to the Customize > button and enable everything there? My preference is to do the later. > Wanted to bounce that off you guys. Once the image is dropped onto a > Mac, does the NetInstall process allow you to queue up images to be > put onto the Mac? Or do you image, reboot, push additional packages, > then reboot? With Casper 7.0, you no longer need a "base image". A la InstaDMG, Casper Admin 7.0 can take a .dmg image of a Mac OS X 10 DVD and use that as your single source for all base OS installs. You can then create multiple custom configurations in just a couple of minutes. I have one configuration that turns off everything for my "Restore" partition. I have a second that turns off printers and extra languages that we don't use in our environment. I have a third with everything installed. You can make as many as you want and you're only consuming the space of just the one DVD .dmg file. This is one of my favorite features in Casper 7.0! FYI, Casper Imaging 7.0.1 and 7.1 broke custom OS installs and JAMF is aware of this. You can still, however, use Casper Imaging 7.0 or you can select your DVD .dmg instead of a custom install. -- William Smith Technical Analyst Merrill Communications LLC (651) 632-1492 From tonyswu at mac.com Thu Oct 1 19:19:06 2009 From: tonyswu at mac.com (Tony S. Wu) Date: Thu, 01 Oct 2009 19:19:06 -0700 Subject: [Casper] Windows Recon Rollout In-Reply-To: References: <83CEBE9E35F112448328416BD5E22F3301F3085F@sfo303ex01.na.corp.yr.com> Message-ID: <06CE195F-64A7-4680-84C7-647748431840@mac.com> This is exactly what we ended up doing. Tony S. Wu tonyswu at mac.com On Oct 1, 2009, at 10:02 AM, Chad Brewer wrote: > What I did is extract jamf.exe from recon.exe. You can do that by > running recon.exe /x. > > Then I run jamf.exe in a .bat file as a startup script via group > policy. My .bat files looks like this: > > copy /v /y "\\server.domain.com\distribution$\Recon\jamf.exe" c: > \windows\temp > c:\windows\temp\jamf.exe recon -overrideJSS https://casper.domain.com:8443 > -username imaging -password ****** > > > > > "Bradford, Chad" on September 30, 2009 at > 4:02 PM -0700 wrote: > After digging around, I think what you are supposed to do now is use > Recon.exe on one of your workstations to create a QuickAdd.msi file. > You can then host the MSI file in a shared folder some place and use > Group Policy to install the MSI file (under Computer Configuration > > Policies > Software Settings > Sosftware Installation ? doing this > will install it when the computer turns on, before login.) Just make > sure the Source path is a network path that Everyone has read access > to. > > > > Chad > > > > Chad Bradford | Systems Administrator | Y&R > 303 2nd Street, South Tower, 8th floor > San Francisco, CA 94107 USA > T: +1 415 882 0606 > F: +1 415 882 0601 > > > > > > > > > > > -----Original Message----- > From: casper-bounces at list.jamfsoftware.com [mailto:casper-bounces at list.jamfsoftware.com > ] On Behalf Of Tony S. Wu > Sent: Monday, September 28, 2009 2:49 PM > To: casper at list.jamfsoftware.com > Subject: [Casper] Windows Recon Rollout > > > > We are looking to roll out Recon on Windows using group policy. > > I found this command through some googling: > > > > PATH\Recon.exe -server DOMAIN.COM -username USER -password PASS > > > > But all the command does is launch Recon. Did the command change for > Recon on Windows? Or is there another recommended way of doing this? > Thanks. > > > > Tony S. Wu > > tonyswu at mac.com > > _______________________________________________ > > Casper mailing list > > Casper at list.jamfsoftware.com > > http://list.jamfsoftware.com/mailman/listinfo/casper > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Thu Oct 1 22:42:22 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Fri, 02 Oct 2009 00:42:22 -0500 Subject: [Casper] Windows Recon Rollout Message-ID: <4AC549F00200003900013779@gwmail.kckps.org> Since we had 6,000 Macbooks that also ran windows for me to keep track of which ones that did not run windows I did a dummy package system. Basically a script ran on every machine invoking the df command and it grep'd out the NTFS partition and if it was present it exited, if it was not present it installed a dummy package. Then I just looked at the policy status of every machine that had the dummy package installed and could tell what assets did not have windows on them. Now that I don't have to run Windows on my Macs I no longer care, but just thought I would share an alternate method if you are trying to keep track of Windows installs on your Macs. Thanks Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Tony S. Wu" 10/01/09 9:22 PM >>> This is exactly what we ended up doing. Tony S. Wu tonyswu at mac.com On Oct 1, 2009, at 10:02 AM, Chad Brewer wrote: > What I did is extract jamf.exe from recon.exe. You can do that by > running recon.exe /x. > > Then I run jamf.exe in a .bat file as a startup script via group > policy. My .bat files looks like this: > > copy /v /y "\\server.domain.com\distribution$\Recon\jamf.exe" c: > \windows\temp > c:\windows\temp\jamf.exe recon -overrideJSS https://casper.domain.com:8443 > -username imaging -password ****** > > > > > "Bradford, Chad" on September 30, 2009 at > 4:02 PM -0700 wrote: > After digging around, I think what you are supposed to do now is use > Recon.exe on one of your workstations to create a QuickAdd.msi file. > You can then host the MSI file in a shared folder some place and use > Group Policy to install the MSI file (under Computer Configuration > > Policies > Software Settings > Sosftware Installation ? doing this > will install it when the computer turns on, before login.) Just make > sure the Source path is a network path that Everyone has read access > to. > > > > Chad > > > > Chad Bradford | Systems Administrator | Y&R > 303 2nd Street, South Tower, 8th floor > San Francisco, CA 94107 USA > T: +1 415 882 0606 > F: +1 415 882 0601 > > > > > > > > > > > -----Original Message----- > From: casper-bounces at list.jamfsoftware.com [mailto:casper-bounces at list.jamfsoftware.com > ] On Behalf Of Tony S. Wu > Sent: Monday, September 28, 2009 2:49 PM > To: casper at list.jamfsoftware.com > Subject: [Casper] Windows Recon Rollout > > > > We are looking to roll out Recon on Windows using group policy. > > I found this command through some googling: > > > > PATH\Recon.exe -server DOMAIN.COM -username USER -password PASS > > > > But all the command does is launch Recon. Did the command change for > Recon on Windows? Or is there another recommended way of doing this? > Thanks. > > > > Tony S. Wu > > tonyswu at mac.com > > _______________________________________________ > > Casper mailing list > > Casper at list.jamfsoftware.com > > http://list.jamfsoftware.com/mailman/listinfo/casper > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper From Tommy.Birchett at martinagency.com Fri Oct 2 11:16:18 2009 From: Tommy.Birchett at martinagency.com (Tommy Birchett) Date: Fri, 2 Oct 2009 14:16:18 -0400 Subject: [Casper] CS4 vs CS3 Message-ID: <7ABB5919-C464-4DF6-81D1-34BF538FC794@martinagency.com> When we install CS4 via Casper using the JAMF reresource kit method it seems to break our existing CS3 installs. We get a licensing error when we launch CS3. Has anyone else experienced this? If so, what have you done to get both CS3 and CS4 working together after a Casper CS4 install? -- Tommy Birchett | The Martin Agency| 804-698-8592 | 804-389-3071 From tlarki at kckps.org Fri Oct 2 11:41:24 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Fri, 02 Oct 2009 13:41:24 -0500 Subject: [Casper] CS4 vs CS3 In-Reply-To: <7ABB5919-C464-4DF6-81D1-34BF538FC794@martinagency.com> References: <7ABB5919-C464-4DF6-81D1-34BF538FC794@martinagency.com> Message-ID: <4AC60304.7141.0039.0@kckps.org> CS4 is extremely broken for me. I am installing it manually. When I install it via Casper policy it sometimes works, sometimes skips a few apps and sometimes just stops half way through. If I use the same installer manually it works 100% of the time. If I install it via post imaging it seems to work better, but I am not about to reimage every computer that needs CS4. I also tried the things on the resource kit. My adobe CS4 image was downloaded from Adobe directly so it is one DMG file. Last year I created a DMG from the CS3 disks and had zero issues. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Tommy Birchett 10/02/09 1:16 PM >>> When we install CS4 via Casper using the JAMF reresource kit method it seems to break our existing CS3 installs. We get a licensing error when we launch CS3. Has anyone else experienced this? If so, what have you done to get both CS3 and CS4 working together after a Casper CS4 install? -- Tommy Birchett | The Martin Agency| 804-698-8592 | 804-389-3071 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From Dustin.Dorey at district196.org Fri Oct 2 12:04:11 2009 From: Dustin.Dorey at district196.org (Dorey, Dustin) Date: Fri, 2 Oct 2009 14:04:11 -0500 Subject: [Casper] Fall Casper Users Group Twin Cities Message-ID: http://www.district196.org/District/ContactUs/CUGmeetinginfo.cfm hey there folks, we're going to be hosting a Fall Casper User's Group here on October 29th. We didn't want Hopkins School District to have all the fun! Seriously though, John Wetter is the mastermind behind this so a thanks will need to go to him. But if you are in the area and able to attend please check out the site and sign up on the registration page! Dustin Dorey Technology Support Cluster Specialist Independent School District 196 Rosemount-Apple Valley-Eagan Public Schools dustin.dorey at district196.org 651|423|7971 -------------- next part -------------- An HTML attachment was scrubbed... URL: From john_wetter at hopkins.k12.mn.us Fri Oct 2 12:44:18 2009 From: john_wetter at hopkins.k12.mn.us (John Wetter) Date: Fri, 2 Oct 2009 14:44:18 -0500 Subject: [Casper] Fall 2009 Minneapolis area Casper Users Group Message-ID: Hello Everyone! The Date has been set for the fall Casper User Group in the Twin Cities area! This CUG will be held at the Rosemount-Apple Valley-Eagan Public Schools district offices on October 29th. Here are the particulars: October 29, 2009 12-4pm Preliminary Agenda: -What?s new in Snow Leopard Server -Casper 7 ? MCX and Application usage ? a look at how a couple organizations are using it -ISD 196 Casper Deployment Showcase -Open Exchange of Ideas Updates and to register: http://www.district196.org/District/ContactUs/CUGmeetinginfo.cfm We hope to see you there! Please be sure to register so we have a count for lunch! In the meantime, please let me know if you would be interested in hosting a future CUG or if you?d like to present something that you?re using the Casper Suite for! All Casper Users are welcome to attend regardless your affiliation! Thanks to District 196 for hosting! Thanks, John -- John Wetter Technology Support Administrator Educational Technology, Media & Information Services Hopkins Public Schools 952-988-5373 ________________________________ This electronic mail transmission may contain private or confidential data and is intended only for the person named. If you are not the intended recipient, you are notified that disclosing, copying, distributing, or taking any action in reliance on the contents of this information is strictly prohibited. If you received this message in error, please notify the sender, and delete it. Hopkins Public Schools reserves the right to monitor and review, without further consent, any messages created, sent, or received on its electronic mail system. -------------- next part -------------- An HTML attachment was scrubbed... URL: From donmontalvo at gmail.com Fri Oct 2 13:58:46 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Fri, 2 Oct 2009 15:58:46 -0500 Subject: [Casper] Imaging Macs In-Reply-To: References: Message-ID: "Smith, William" wrote: > On 10/1/09 4:33 PM, "don montalvo" wrote: > >> What's the best practice when making the base image for Casper to >> deploy - do you stick to the defaults, or do you go to the >> Customize button and enable everything there? My preference is to >> do the later. Wanted to bounce that off you guys. Once the image is >> dropped onto a Mac, does the NetInstall process allow you to queue >> up images to be put onto the Mac? Or do you image, reboot, push >> additional packages, then reboot? > > With Casper 7.0, you no longer need a "base image". > > A la InstaDMG, Casper Admin 7.0 can take a .dmg image of a Mac OS X > 10 DVD and use that as your single source for all base OS installs. > You can then create multiple custom configurations in just a couple > of minutes. That sounds great, but if Casper Imaging is using a Mac OS X 10 DVD image to reimage, it sounds like how NetInstall can do installer based (slower file copy, flexible) versus ASR based (faster block copy, less flexible). Is there a way to combine the two by doing block copy for a base image and then have the process run selected pkg installers for the rest of the required stuff? > I have one configuration that turns off everything for my "Restore" > partition. I have a second that turns off printers and extra > languages that we don't use in our environment. I have a third with > everything installed. You can make as many as you want and you're > only consuming the space of just the one DVD .dmg file. I checked the Casper Imaging documentation, so I see what you mean. Having the restored partition stripped down makes sense since it'll only be used to for rebuilding. Just concerned about speed since it's doing file copy instead of block copy. > This is one of my favorite features in Casper 7.0! > > FYI, Casper Imaging 7.0.1 and 7.1 broke custom OS installs and JAMF > is aware of this. You can still, however, use Casper Imaging 7.0 or > you can select your DVD .dmg instead of a custom install. I'm trying to get my head around how a large deployment would be handled by Casper. Let's say you have a large firm with 1000 Macs spread across different regions/countries. You're told to reimage 100 of them (upgrade them from Tiger to Leopard). Using the installer deployment method you mentioned above, what are the chances of getting these boxes reimaged in short time? Can Casper handle reimaging computers without touching the /Users directory? Let's say you have 100 computers that need to be upgraded from 10.4 to 10.5. They're spread across different subnets, and each of them have 100G in /Users that we need to protect. Can Casper Imaging do a reimage in place? Can the imaging process "trickle" the image down to the box - then trigger reimaging while preserving /Users data? I haven't had my hands on the Casper Suite yet. Just trying to see what parts of the Casper Suite we may need to use and what parts we don't need to use. I say this since there may already be processes in place that work fine and are integrated with the client's environment, where parts of the Casper Suite may overlap in functionality. Trying to plan ahead to avoid re-architecting an environment and creating dependancies or redundancy. Thanks, Don From sdiver at d125.org Fri Oct 2 14:10:29 2009 From: sdiver at d125.org (Steven Diver) Date: Fri, 02 Oct 2009 16:10:29 -0500 Subject: [Casper] Inventory Updates & Optical Drives Message-ID: I have a rather "odd" issue, that I was hoping someone had seen or experienced... When a machine (specifically it seems the white/black MacBooks, but we can reproduce on an older MacBook Pro), phone home every 15-minutes to update their inventory on the JSS, or when sudo jamf recon is run, the optical drive makes a noise as if a disk is ejecting. This is the same noice you may get when going into System Profiler and you choose Disk Burning in the Contents menu. It doesn't seem like a big issue, but we have users panicking that their hard drive is dying, and it would seem that over time this could potentially shorten the life of the hardware. I could obviously kill the Recon/Update inventory policy, but knowing how often things change around here, that's not the most appealing solution. Thanks, Steve -- Steven Diver, Network Manager Adlai E. Stevenson High School - http://www.d125.org Email: sdiver at d125.org - Phone: 847.415.4304 AIM: sdiver125 "Be not simply good, be good for something." -Henry David Thoreau (1817-1862) -------------- next part -------------- An HTML attachment was scrubbed... URL: From swood at integer.com Fri Oct 2 14:16:07 2009 From: swood at integer.com (Steve Wood) Date: Fri, 2 Oct 2009 16:16:07 -0500 Subject: [Casper] Inventory Updates & Optical Drives In-Reply-To: References: Message-ID: <438f5a310910021416m1710b505qff78811d85ab441@mail.gmail.com> I see it when kicking of a manual recon (jamf recon), but I don't see it on the 15 minute policy recons. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Fri, Oct 2, 2009 at 4:10 PM, Steven Diver wrote: > I have a rather "odd" issue, that I was hoping someone had seen or > experienced... > > When a machine (specifically it seems the white/black MacBooks, but we can > reproduce on an older MacBook Pro), phone home every 15-minutes to update > their inventory on the JSS, or when sudo jamf recon is run, the optical > drive makes a noise as if a disk is ejecting. This is the same noice you may > get when going into System Profiler and you choose *Disk Burning* in the > Contents menu. > > It doesn't seem like a big issue, but we have users panicking that their > hard drive is dying, and it would seem that over time this could potentially > shorten the life of the hardware. I could obviously kill the Recon/Update > inventory policy, but knowing how often things change around here, that's > not the most appealing solution. > > Thanks, > Steve > > -- > Steven Diver, Network Manager > Adlai E. Stevenson High School - http://www.d125.org > Email: sdiver at d125.org - Phone: 847.415.4304 > AIM: sdiver125 > > "Be not simply good, be good for something." > -Henry David Thoreau (1817-1862) > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From William.Smith at merrillcorp.com Fri Oct 2 14:26:10 2009 From: William.Smith at merrillcorp.com (Smith, William) Date: Fri, 2 Oct 2009 16:26:10 -0500 Subject: [Casper] Imaging Macs In-Reply-To: Message-ID: On 10/2/09 3:58 PM, "don montalvo" wrote: > "Smith, William" wrote: > >> With Casper 7.0, you no longer need a "base image". >> >> A la InstaDMG, Casper Admin 7.0 can take a .dmg image of a Mac OS X >> 10 DVD and use that as your single source for all base OS installs. >> You can then create multiple custom configurations in just a couple >> of minutes. > > That sounds great, but if Casper Imaging is using a Mac OS X 10 DVD > image to reimage, it sounds like how NetInstall can do installer based > (slower file copy, flexible) versus ASR based (faster block copy, less > flexible). Is there a way to combine the two by doing block copy for a > base image and then have the process run selected pkg installers for > the rest of the required stuff? The base Mac OS X software is installed using block copy if you create a package. :-) But then you don't get the flexibility of multiple configurations for one package file. :-( > I'm trying to get my head around how a large deployment would be > handled by Casper. Let's say you have a large firm with 1000 Macs > spread across different regions/countries. You're told to reimage 100 > of them (upgrade them from Tiger to Leopard). Using the installer > deployment method you mentioned above, what are the chances of getting > these boxes reimaged in short time? That all depends on whether or not your infrastructure is set up to do this. If all your Macs have a Restore partition then you can boot to them and pull packages from a local file server repository. Length of time depends on the model of Macs you have, network speed and amount of shtuff to install. This, of course, is also impacted by the amount of time you have to get this done. If all machines will get the exact same software then you can use Casper Admin to take a configuration of packages and create a monolithic image that you can then install using block copy. > Can Casper handle reimaging computers without touching the /Users > directory? Let's say you have 100 computers that need to be upgraded > from 10.4 to 10.5. They're spread across different subnets, and each > of them have 100G in /Users that we need to protect. Can Casper > Imaging do a reimage in place? Can the imaging process "trickle" the > image down to the box - then trigger reimaging while preserving /Users > data? Again, depends on whether or not you've set up your systems to enable this. JAMF suggests that you create a separate partition for User folders if you want to do this. Casper cannot trickle, however, it can cache files for a later install time. It cannot do this with the Mac OS itself but it can do this with updates. You'll want to either set the updates to occur overnight when no one is using the computers or at login/logout, when you know no apps are running. -- William Smith Technical Analyst Merrill Communications LLC (651) 632-1492 From swood at integer.com Fri Oct 2 14:30:11 2009 From: swood at integer.com (Steve Wood) Date: Fri, 2 Oct 2009 16:30:11 -0500 Subject: [Casper] Imaging Macs In-Reply-To: References: Message-ID: <438f5a310910021430w7737259bua025f6b959646a0d@mail.gmail.com> Casper 7 will do block copy if you "Compile" your configuration. If all you want in your configuration is your OS image, then that's all that needs to be there. But why not take advantage of Casper and have it push your basic applications along with the OS? Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Fri, Oct 2, 2009 at 4:26 PM, Smith, William < William.Smith at merrillcorp.com> wrote: > On 10/2/09 3:58 PM, "don montalvo" wrote: > > > "Smith, William" wrote: > > > >> With Casper 7.0, you no longer need a "base image". > >> > >> A la InstaDMG, Casper Admin 7.0 can take a .dmg image of a Mac OS X > >> 10 DVD and use that as your single source for all base OS installs. > >> You can then create multiple custom configurations in just a couple > >> of minutes. > > > > That sounds great, but if Casper Imaging is using a Mac OS X 10 DVD > > image to reimage, it sounds like how NetInstall can do installer based > > (slower file copy, flexible) versus ASR based (faster block copy, less > > flexible). Is there a way to combine the two by doing block copy for a > > base image and then have the process run selected pkg installers for > > the rest of the required stuff? > > The base Mac OS X software is installed using block copy if you create a > package. :-) But then you don't get the flexibility of multiple > configurations for one package file. :-( > > > I'm trying to get my head around how a large deployment would be > > handled by Casper. Let's say you have a large firm with 1000 Macs > > spread across different regions/countries. You're told to reimage 100 > > of them (upgrade them from Tiger to Leopard). Using the installer > > deployment method you mentioned above, what are the chances of getting > > these boxes reimaged in short time? > > That all depends on whether or not your infrastructure is set up to do > this. > If all your Macs have a Restore partition then you can boot to them and > pull > packages from a local file server repository. Length of time depends on the > model of Macs you have, network speed and amount of shtuff to install. > This, > of course, is also impacted by the amount of time you have to get this > done. > > If all machines will get the exact same software then you can use Casper > Admin to take a configuration of packages and create a monolithic image > that > you can then install using block copy. > > > Can Casper handle reimaging computers without touching the /Users > > directory? Let's say you have 100 computers that need to be upgraded > > from 10.4 to 10.5. They're spread across different subnets, and each > > of them have 100G in /Users that we need to protect. Can Casper > > Imaging do a reimage in place? Can the imaging process "trickle" the > > image down to the box - then trigger reimaging while preserving /Users > > data? > > Again, depends on whether or not you've set up your systems to enable this. > JAMF suggests that you create a separate partition for User folders if you > want to do this. > > Casper cannot trickle, however, it can cache files for a later install > time. > It cannot do this with the Mac OS itself but it can do this with updates. > You'll want to either set the updates to occur overnight when no one is > using the computers or at login/logout, when you know no apps are running. > > -- > > William Smith > Technical Analyst > Merrill Communications LLC > (651) 632-1492 > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > -------------- next part -------------- An HTML attachment was scrubbed... URL: From jheath at ecfs.org Sat Oct 3 21:37:01 2009 From: jheath at ecfs.org (Heath, Jay) Date: Sun, 4 Oct 2009 00:37:01 -0400 Subject: [Casper] Inventory Updates & Optical Drives In-Reply-To: <438f5a310910021416m1710b505qff78811d85ab441@mail.gmail.com> References: <438f5a310910021416m1710b505qff78811d85ab441@mail.gmail.com> Message-ID: <1DEF5800-3EB8-41D1-8FC2-30C4ECB95101@ecfs.org> I believe this is expected behavior during the recon process--this is the optical drive "checking in" to the inventory process. The same noise occurs during wake from sleep on these computers, right? I don't think this is anything to worry about, simply the way the optical drives run a sort of POST. Can anyone verify if this is correct? Jay On Oct 2, 2009, at 17:16, "Steve Wood" > wrote: I see it when kicking of a manual recon (jamf recon), but I don't see it on the 15 minute policy recons. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Fri, Oct 2, 2009 at 4:10 PM, Steven Diver <sdiver at d125.org> wrote: I have a rather "odd" issue, that I was hoping someone had seen or experienced... When a machine (specifically it seems the white/black MacBooks, but we can reproduce on an older MacBook Pro), phone home every 15-minutes to update their inventory on the JSS, or when sudo jamf recon is run, the optical drive makes a noise as if a disk is ejecting. This is the same noice you may get when going into System Profiler and you choose Disk Burning in the Contents menu. It doesn't seem like a big issue, but we have users panicking that their hard drive is dying, and it would seem that over time this could potentially shorten the life of the hardware. I could obviously kill the Recon/Update inventory policy, but knowing how often things change around here, that's not the most appealing solution. Thanks, Steve -- Steven Diver, Network Manager Adlai E. Stevenson High School - http://www.d125.org Email: sdiver at d125.org - Phone: 847.415.4304 AIM: sdiver125 "Be not simply good, be good for something." -Henry David Thoreau (1817-1862) _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From john_wetter at hopkins.k12.mn.us Sun Oct 4 20:03:54 2009 From: john_wetter at hopkins.k12.mn.us (John Wetter) Date: Sun, 4 Oct 2009 22:03:54 -0500 Subject: [Casper] Inventory Updates & Optical Drives In-Reply-To: References: Message-ID: Are you saying you're running Recon every 15 minutes? The noise is normal though, and when Recon runs any way (using the app, the CLI, or a policy trigger), it'll make that noise. Our computers are set to randomly do a recon once a week. The noise is the same as waking from sleep or looking at it in system profiler as has been mentioned. And, it makes the noise for the same reason as the recon is doing the same system profiler report and sending it back to the JSS. -- John Wetter Technology Support Administrator Educational Technology, Media & Information Services Hopkins Public Schools 952-988-5373 ________________________________ From: casper-bounces at list.jamfsoftware.com [casper-bounces at list.jamfsoftware.com] On Behalf Of Steven Diver [sdiver at d125.org] Sent: Friday, October 02, 2009 4:10 PM To: casper at list.jamfsoftware.com Subject: [Casper] Inventory Updates & Optical Drives I have a rather "odd" issue, that I was hoping someone had seen or experienced... When a machine (specifically it seems the white/black MacBooks, but we can reproduce on an older MacBook Pro), phone home every 15-minutes to update their inventory on the JSS, or when sudo jamf recon is run, the optical drive makes a noise as if a disk is ejecting. This is the same noice you may get when going into System Profiler and you choose Disk Burning in the Contents menu. It doesn't seem like a big issue, but we have users panicking that their hard drive is dying, and it would seem that over time this could potentially shorten the life of the hardware. I could obviously kill the Recon/Update inventory policy, but knowing how often things change around here, that's not the most appealing solution. Thanks, Steve -- Steven Diver, Network Manager Adlai E. Stevenson High School - http://www.d125.org Email: sdiver at d125.org - Phone: 847.415.4304 AIM: sdiver125 "Be not simply good, be good for something." -Henry David Thoreau (1817-1862) -------------- next part -------------- An HTML attachment was scrubbed... URL: From CMyers at uclan.ac.uk Mon Oct 5 00:22:30 2009 From: CMyers at uclan.ac.uk (Criss Myers) Date: Mon, 05 Oct 2009 08:22:30 +0100 Subject: [Casper] Final Cut Express (and other pro applications) In-Reply-To: <6201E739-0E41-44C3-B2B6-06D7D512E05C@mail.wvu.edu> References: <6201E739-0E41-44C3-B2B6-06D7D512E05C@mail.wvu.edu> Message-ID: <4AC9ACC6.BB96.0081.0@uclan.ac.uk> Hmm dont know i can help much as i have a volume license, i think a volume license us your best move, i package mine with Composer, i also package the license file just in case i need to re-install it, i have had cases where that file goes missing with no idea why, so i do a self heal on that package, i then made a composer package with the updates Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> Michael Bond 09/30/09 3:43 PM >>> What is the best way to create images for Final Cut Express, Final Cut Pro Suite, and the other apple pro applications? I created the package the normal way after Installing the software, getting the updates, running the application (and doing the registration). Pushed it out to 2 machines. Each machine requires me to re-enter my serial number and then re-register. I figured, since we don't have a volume license, that I will have to create a package for each machine with that machines serial number in it. So, I took the time to do that with my 2 test machines. Re-imaged the machines, pushed out the final cut package, then pushed out the registration package that i just created. Still asks for the serial number and to be re-registerd. So, i tried having it monitor the file system for changes, thinking that finding new and modified wasn't cutting it for some reason. Still no dice. I do have the packages set to replace files in default and existing profiles. I've also changed the permission on the registration files in /Library/ so that all users have read/write access to them (discovered that is needed for final cut pro suite to function properly as a restricted user). I need to find a way to push out the registration information via casper. Thanks. Michael Bond Professional Technologist WVU Libraries Office.: 304-293-0340 Cell....: 304-282-0640 Email.: Michael.Bond at mail.wvu.edu -------------- next part -------------- An HTML attachment was scrubbed... URL: From tqueck at nkasd.com Mon Oct 5 04:37:40 2009 From: tqueck at nkasd.com (Thomas Queck) Date: Mon, 5 Oct 2009 07:37:40 -0400 Subject: [Casper] Script for running Disk Permission Repair Message-ID: <8E116578-0D77-44E3-9A8D-B98CE64C2321@nkasd.com> Our network consultant suggested that we run Disk Permission Repair on all of our Mac Books to improve performance. Does anyone have a script that we could run that would accomplish this? Thanks. Tom Queck New Kensington Arnold School District New Kensington, PA From ERNSTCS at uwec.edu Mon Oct 5 05:05:27 2009 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Mon, 5 Oct 2009 07:05:27 -0500 Subject: [Casper] Script for running Disk Permission Repair Message-ID: Just create a policy that can do it to run offline perhaps. On the advanced tab there is an option for fix permissions. Or that same thing can be called with remote if you wanted to control when it happened. Or if you have a single partition system and really wanted a script: /usr/sbin/diskutil repairPermissions disk0s2 Or by volume name: /usr/sbin/diskutil repairPermissions "/Volumes/Macintosh HD" Craig E On 10/5/09 6:37 AM, "Thomas Queck" wrote: > Our network consultant suggested that we run Disk Permission Repair > on all of our Mac Books to improve performance. Does anyone have a > script that we could run that would accomplish this? Thanks. > Tom Queck > New Kensington Arnold School District > New Kensington, PA > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper From CMyers at uclan.ac.uk Mon Oct 5 06:17:19 2009 From: CMyers at uclan.ac.uk (Criss Myers) Date: Mon, 05 Oct 2009 14:17:19 +0100 Subject: [Casper] Adobe Acrobat pro 9 Message-ID: <4AC9FFEF.BB96.0081.0@uclan.ac.uk> Hi Guys, Has anyone else had problems with acrobat pro 9 or know how to successfully install it, There are no composer diffs for 9 I have made a package with Composer and got passed the crashing on launch for network users by redirecting the Application support folder, and have got passed the requiring admin password on first launch with the self heal stuff. But now it requires the serial number putting in on first launch. I made the composer package by installing, applying the updaters and then launching and serializing, but when i push the package out via self service or casper remote it requires a serial input on first launch. Anyone else had this issue or any tips Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Mon Oct 5 06:24:46 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 05 Oct 2009 08:24:46 -0500 Subject: [Casper] Script for running Disk Permission Repair In-Reply-To: <8E116578-0D77-44E3-9A8D-B98CE64C2321@nkasd.com> References: <8E116578-0D77-44E3-9A8D-B98CE64C2321@nkasd.com> Message-ID: <4AC9AD4E.7141.0039.0@kckps.org> Running repair permissions just resets the permissions to what Apple thinks is best. I doubt it would give you performance increases. However, if this is something you really want to do there are several ways: 1) write a script using /usr/sbin/diskutil to repair your disk permisisons 2) use the built in jamf binary, /usr/sbin/jamf fixPermissions 3) Log into your JSS and create a new policy. Under the advanced tab check the box that says "repair permissions." The last method will probably be the easiest. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Thomas Queck 10/05/09 6:37 AM >>> Our network consultant suggested that we run Disk Permission Repair on all of our Mac Books to improve performance. Does anyone have a script that we could run that would accomplish this? Thanks. Tom Queck New Kensington Arnold School District New Kensington, PA _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From ryan.manly at gmail.com Mon Oct 5 07:52:13 2009 From: ryan.manly at gmail.com (Ryan Manly) Date: Mon, 5 Oct 2009 09:52:13 -0500 Subject: [Casper] Windows partition is empty... Message-ID: I have created a new Windows image using winclone, when attempting to image a machine Casper will create the partition and takes about the right time doing the copy/install but after rebooting the windows partition is empty. I have checked and changed all settings for the partition creation but the result is always the same. This image does work if i use winclone to restore it onto the windows partition manually. Any ideas? or has anyone run into this before? Thanks in advance. -------------- next part -------------- An HTML attachment was scrubbed... URL: From lanceo at mac.com Mon Oct 5 08:12:27 2009 From: lanceo at mac.com (Lance Ogletree) Date: Mon, 05 Oct 2009 10:12:27 -0500 Subject: [Casper] Adobe Acrobat pro 9 In-Reply-To: <4AC9FFEF.BB96.0081.0@uclan.ac.uk> References: <4AC9FFEF.BB96.0081.0@uclan.ac.uk> Message-ID: <21722BF0-2F7C-4021-8EE7-D17252FA162C@mac.com> On Oct 5, 2009, at 8:17 AM, Criss Myers wrote: > Hi Guys, > > Has anyone else had problems with acrobat pro 9 or know how to > successfully install it, > > There are no composer diffs for 9 > > I have made a package with Composer and got passed the crashing on > launch for network users by redirecting the Application support > folder, and have got passed the requiring admin password on first > launch with the self heal stuff. > > But now it requires the serial number putting in on first launch. > > I made the composer package by installing, applying the updaters and > then launching and serializing, but when i push the package out via > self service or casper remote it requires a serial input on first > launch. > > Anyone else had this issue or any tips > > Criss > Chris, does your package for Acrobat 9 include the /LIbrary/Application\ Support/Adobe/Adobe\ PCD/ folder? I think this is the folder that holds the license file database for all of the products. ____________________________ Lance Ogletree lanceo at mac.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From cmyers at uclan.ac.uk Mon Oct 5 08:52:26 2009 From: cmyers at uclan.ac.uk (Criss Myers) Date: Mon, 5 Oct 2009 16:52:26 +0100 Subject: [Casper] Adobe Acrobat pro 9 In-Reply-To: <21722BF0-2F7C-4021-8EE7-D17252FA162C@mac.com> References: <4AC9FFEF.BB96.0081.0@uclan.ac.uk> <21722BF0-2F7C-4021-8EE7-D17252FA162C@mac.com> Message-ID: <9DC353F5-C428-4C25-8805-E63B53116B5E@uclan.ac.uk> I'll check tomorrow but don't think composer found that with a new and modified file snapshot Cheers Criss On 5 Oct 2009, at 16:12, Lance Ogletree wrote: > > On Oct 5, 2009, at 8:17 AM, Criss Myers wrote: > >> Hi Guys, >> >> Has anyone else had problems with acrobat pro 9 or know how to >> successfully install it, >> >> There are no composer diffs for 9 >> >> I have made a package with Composer and got passed the crashing on >> launch for network users by redirecting the Application support >> folder, and have got passed the requiring admin password on first >> launch with the self heal stuff. >> >> But now it requires the serial number putting in on first launch. >> >> I made the composer package by installing, applying the updaters >> and then launching and serializing, but when i push the package out >> via self service or casper remote it requires a serial input on >> first launch. >> >> Anyone else had this issue or any tips >> >> Criss >> > > > Chris, > does your package for Acrobat 9 include the /LIbrary/Application\ > Support/Adobe/Adobe\ PCD/ folder? > I think this is the folder that holds the license file database for > all of the products. > > > ____________________________ > Lance Ogletree > lanceo at mac.com > -------------- next part -------------- An HTML attachment was scrubbed... URL: From cmyers at uclan.ac.uk Mon Oct 5 08:53:39 2009 From: cmyers at uclan.ac.uk (Criss Myers) Date: Mon, 5 Oct 2009 16:53:39 +0100 Subject: [Casper] Windows partition is empty... In-Reply-To: References: Message-ID: I don't use winclone I use the Casper 6 method and it works great Criss On 5 Oct 2009, at 15:52, Ryan Manly wrote: > I have created a new Windows image using winclone, when attempting > to image a machine Casper will create the partition and takes about > the right time doing the copy/install but after rebooting the > windows partition is empty. > > I have checked and changed all settings for the partition creation > but the result is always the same. > > This image does work if i use winclone to restore it onto the > windows partition manually. > > Any ideas? or has anyone run into this before? > > Thanks in advance. > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper From tlarki at kckps.org Mon Oct 5 09:21:02 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 05 Oct 2009 11:21:02 -0500 Subject: [Casper] Windows partition is empty... In-Reply-To: References: Message-ID: <4AC9D69E.7141.0039.0@kckps.org> Ensure the user accounts that Casper uses to install the image has full permissions from the share. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Criss Myers 10/05/09 10:53 AM >>> I don't use winclone I use the Casper 6 method and it works great Criss On 5 Oct 2009, at 15:52, Ryan Manly wrote: > I have created a new Windows image using winclone, when attempting > to image a machine Casper will create the partition and takes about > the right time doing the copy/install but after rebooting the > windows partition is empty. > > I have checked and changed all settings for the partition creation > but the result is always the same. > > This image does work if i use winclone to restore it onto the > windows partition manually. > > Any ideas? or has anyone run into this before? > > Thanks in advance. > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From jyung at cmithun.com Mon Oct 5 09:32:16 2009 From: jyung at cmithun.com (Jon Yung) Date: Mon, 05 Oct 2009 11:32:16 -0500 Subject: [Casper] Windows Recon Rollout In-Reply-To: <06CE195F-64A7-4680-84C7-647748431840@mac.com> Message-ID: I have make a bat for recon using the startup script below. Is there a way to suppress the authentication after the bat runs? On 10/1/09 9:19 PM, "Tony S. Wu" wrote: > This is exactly what we ended up doing. > > > Tony S. Wu > tonyswu at mac.com > > > > > > On Oct 1, 2009, at 10:02 AM, Chad Brewer wrote: > >> What I did is extract jamf.exe from recon.exe. You can do that by running >> recon.exe /x. >> >> Then I run jamf.exe in a .bat file as a startup script via group policy. My >> .bat files looks like this: >> >> copy /v /y "\\server.domain.com\distribution$\Recon\jamf.exe" c:\windows\temp >> c:\windows\temp\jamf.exe recon -overrideJSS https://casper.domain.com:8443 >> -username imaging -password ****** >> >> >> >> >> "Bradford, Chad" on September 30, 2009 at 4:02 PM >> -0700 wrote: >> After digging around, I think what you are supposed to do now is use >> Recon.exe on one of your workstations to create a QuickAdd.msi file. You can >> then host the MSI file in a shared folder some place and use Group Policy to >> install the MSI file (under Computer Configuration > Policies > Software >> Settings > Sosftware Installation ? doing this will install it when the >> computer turns on, before login.) Just make sure the Source path is a network >> path that Everyone has read access to. >> >> >> >> Chad >> >> >> >> Chad Bradford | Systems Administrator | Y&R >> 303 2nd Street, South Tower, 8th floor >> San Francisco, CA 94107 USA >> T: +1 415 882 0606 >> F: +1 415 882 0601 >> >> >> >> >> >> >> >> >> >> >> -----Original Message----- >> From: casper-bounces at list.jamfsoftware.com >> [mailto:casper-bounces at list.jamfsoftware.com] On Behalf Of Tony S. Wu >> Sent: Monday, September 28, 2009 2:49 PM >> To: casper at list.jamfsoftware.com >> Subject: [Casper] Windows Recon Rollout >> >> >> >> We are looking to roll out Recon on Windows using group policy. >> >> I found this command through some googling: >> >> >> >> PATH\Recon.exe -server DOMAIN.COM -username USER -password PASS >> >> >> >> But all the command does is launch Recon. Did the command change for Recon on >> Windows? Or is there another recommended way of doing this? Thanks. >> >> >> >> Tony S. Wu >> >> tonyswu at mac.com >> >> _______________________________________________ >> >> Casper mailing list >> >> Casper at list.jamfsoftware.com >> >> http://list.jamfsoftware.com/mailman/listinfo/casper >> >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper >> >> >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From donmontalvo at gmail.com Mon Oct 5 11:01:22 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Mon, 5 Oct 2009 13:01:22 -0500 Subject: [Casper] Casper Digest, Vol 34, Issue 3 In-Reply-To: References: Message-ID: <6794939C-776D-4030-BF83-CCFCF78A3BD3@gmail.com> > Date: Fri, 2 Oct 2009 16:26:10 -0500 > From: "Smith, William" > Subject: Re: [Casper] Imaging Macs > To: "casper at list.jamfsoftware.com" > Message-ID: > Content-Type: text/plain; charset="us-ascii" > > On 10/2/09 3:58 PM, "don montalvo" wrote: > >> "Smith, William" wrote: >> >>> With Casper 7.0, you no longer need a "base image". >>> >>> A la InstaDMG, Casper Admin 7.0 can take a .dmg image of a Mac OS X >>> 10 DVD and use that as your single source for all base OS installs. >>> You can then create multiple custom configurations in just a couple >>> of minutes. >> >> That sounds great, but if Casper Imaging is using a Mac OS X 10 DVD >> image to reimage, it sounds like how NetInstall can do installer >> based >> (slower file copy, flexible) versus ASR based (faster block copy, >> less >> flexible). Is there a way to combine the two by doing block copy >> for a >> base image and then have the process run selected pkg installers for >> the rest of the required stuff? > > The base Mac OS X software is installed using block copy if you > create a > package. :-) But then you don't get the flexibility of multiple > configurations for one package file. :-( I'm not sure I follow. An image would be block copied to a target computer. A pkg installer would be a file copy. Are you saying Casper has a way of doing block copy using a pkg installer? Not sure if I'm confusing things. If we have an image containing OS X and common applications/tools (essentially, stuff every computer at the firm needs), can Casper deploy that image? Can the deployment process include running pkg installs for additional software? >> I'm trying to get my head around how a large deployment would be >> handled by Casper. Let's say you have a large firm with 1000 Macs >> spread across different regions/countries. You're told to reimage 100 >> of them (upgrade them from Tiger to Leopard). Using the installer >> deployment method you mentioned above, what are the chances of >> getting >> these boxes reimaged in short time? > > That all depends on whether or not your infrastructure is set up to > do this. > If all your Macs have a Restore partition then you can boot to them > and pull > packages from a local file server repository. Length of time depends > on the > model of Macs you have, network speed and amount of shtuff to > install. This, > of course, is also impacted by the amount of time you have to get > this done. Let's assume the worst - an unmanaged, sneaker net environment, no consistency, and all users are set up with a local admin account. This is not unheard of with new clients, as I'm sure most of you guys know. :) None have a restore partition. They're all just starting to get the recon agent installed (jury is open on when this will be done since there doesn't appear to be an available Mac inventory list). > If all machines will get the exact same software then you can use > Casper > Admin to take a configuration of packages and create a monolithic > image that > you can then install using block copy. See my note above regarding a core image containing common applications. >> Can Casper handle reimaging computers without touching the /Users >> directory? Let's say you have 100 computers that need to be upgraded >> from 10.4 to 10.5. They're spread across different subnets, and each >> of them have 100G in /Users that we need to protect. Can Casper >> Imaging do a reimage in place? Can the imaging process "trickle" the >> image down to the box - then trigger reimaging while preserving / >> Users >> data? > > Again, depends on whether or not you've set up your systems to > enable this. > JAMF suggests that you create a separate partition for User folders > if you > want to do this. I'd like to see a best practice document from JAMF outlining how this can be done. Reimaging without having to migrate user data off a Mac and back on is essential for large deployments. > Casper cannot trickle, however, it can cache files for a later > install time. > It cannot do this with the Mac OS itself but it can do this with > updates. > You'll want to either set the updates to occur overnight when no one > is > using the computers or at login/logout, when you know no apps are > running. There's at least one solution out there that can handle this: http://www.lanrev.com/solutions/disk-imaging.html The question is, can Casper do the same? It seems to have all the tools necessary to be able to. If not, it would certainly be worth adding this kind of functionality to their road map. Don > -- > > William Smith > Technical Analyst > Merrill Communications LLC > (651) 632-1492 From mthomas at fscj.edu Mon Oct 5 12:35:19 2009 From: mthomas at fscj.edu (Thomas, Michael) Date: Mon, 5 Oct 2009 15:35:19 -0400 Subject: [Casper] 7. Windows partition is empty... (Ryan Manly) Message-ID: I have had this same issue. We went into the JSS setup Utility and repaired permissions. This fixed my issues. On 5 Oct 2009, at 15:52, Ryan Manly wrote: > I have created a new Windows image using winclone, when attempting > to image a machine Casper will create the partition and takes about > the right time doing the copy/install but after rebooting the > windows partition is empty. > > I have checked and changed all settings for the partition creation > but the result is always the same. > > This image does work if i use winclone to restore it onto the > windows partition manually. > > Any ideas? or has anyone run into this before? > > Thanks in advance. From William.Smith at merrillcorp.com Mon Oct 5 13:02:26 2009 From: William.Smith at merrillcorp.com (Smith, William) Date: Mon, 5 Oct 2009 15:02:26 -0500 Subject: [Casper] Casper Digest, Vol 34, Issue 3 In-Reply-To: <6794939C-776D-4030-BF83-CCFCF78A3BD3@gmail.com> Message-ID: On 10/5/09 1:01 PM, "don montalvo" wrote: >> The base Mac OS X software is installed using block copy if you >> create a >> package. :-) But then you don't get the flexibility of multiple >> configurations for one package file. :-( > > I'm not sure I follow. An image would be block copied to a target > computer. A pkg installer would be a file copy. Are you saying Casper > has a way of doing block copy using a pkg installer? Not using a .pkg or .mpkg, no. You can create a .dmg and this will block copy. But only the first .dmg installed will do this when installing onto a clean system. While I've not tried it myself, you should be able to add the DVD .dmg to Casper Admin along with all Mac OS updates and then have it build you a fully patched .dmg from that, which will block copy. Of course, you can add other non-Apple items as well. > Not sure if I'm confusing things. If we have an image containing OS X > and common applications/tools (essentially, stuff every computer at > the firm needs), can Casper deploy that image? Can the deployment > process include running pkg installs for additional software? Casper Imaging can deploy a .dmg file to a machine. That .dmg file can be a monolithic image with Mac OS, applications, preferences, etc., or it can contain a single file. Your choice. > Let's assume the worst - an unmanaged, sneaker net environment, no > consistency, and all users are set up with a local admin account. This > is not unheard of with new clients, as I'm sure most of you guys > know. :) > > None have a restore partition. They're all just starting to get the > recon agent installed (jury is open on when this will be done since > there doesn't appear to be an available Mac inventory list). I know of no tools that can come in and fully manage existing clients without some prep work. In this case, I consider a Restore partition to be part of an infrastructure to get full management capabilities with Casper. If I had my druthers (and I know this isn't a perfect world), I would opt to rebuild all machines according to specs outlined with the client. When you start with a known good system then you limit surprises. This wouldn't have to happen immediately, but over time. > See my note above regarding a core image containing common applications. I hope I clearly explained how Casper Admin 7.0 can create the monolithic image and that you can deploy this with Casper Imaging. You can always deploy a monolithic image and then push even more stand-alone packages on top of that. > I'd like to see a best practice document from JAMF outlining how this > can be done. Reimaging without having to migrate user data off a Mac > and back on is essential for large deployments. I haven't seen such a document. JAMF's Casper training is probably where they go through what they consider to be best practices. That training is not included with the purchase of Casper. > There's at least one solution out there that can handle this: > > http://www.lanrev.com/solutions/disk-imaging.html > > The question is, can Casper do the same? It seems to have all the > tools necessary to be able to. If not, it would certainly be worth > adding this kind of functionality to their road map. Casper does not offer this support. I've never used LANrev and I'm intrigued that a product can fully re-image a system drive while booted from it. I've not heard of such a thing. -- William Smith Technical Analyst Merrill Communications LLC (651) 632-1492 From lanceo at mac.com Tue Oct 6 05:52:00 2009 From: lanceo at mac.com (Lance Ogletree) Date: Tue, 06 Oct 2009 07:52:00 -0500 Subject: [Casper] Adobe Acrobat pro 9 In-Reply-To: <4ACB3DB8.BB96.0081.0@uclan.ac.uk> References: <4AC9FFEF.BB96.0081.0@uclan.ac.uk> <21722BF0-2F7C-4021-8EE7-D17252FA162C@mac.com> <4ACB3DB8.BB96.0081.0@uclan.ac.uk> Message-ID: Adobe's licensing is pretty goofy at times. We had both a stand alone license for Acrobat 9 as well as the CS 4 suite. Layering CS 4 on top of an already deployed Acrobat 9 had no ill effects. Just make sure that the components are updated. Our fun began with dropping Acrobat 9 on top of a CS 3 deployment. Since they use the same license database, deploying Acrobat 9 after CS 3 would break the CS 3 licensing. What we had to do was to install and license CS 3 first. Install Acrobat 9 and license it, then package Acrobat 9 with the PCD folder which would then hold the combine license information for both CS 3 and Acrobat 9. Not pretty, but worked. On Oct 6, 2009, at 6:53 AM, Criss Myers wrote: > Hi, > > that was the job, however the same files are used for the rest of > the cs4 license so made it more difficult, have to make sure i dont > break the other apps from working when this gets installed > > thanks for your help > > Criss > > > Criss Myers > Senior Customer Support Analyst (Mac Services) > Apple Certified Technical Coordinator v10.5 > LIS Business Support Team > Library 301 > University of Central Lancashire > Preston PR1 2HE > Ex 5054 > 01772 895054 > > >>> Lance Ogletree 10/05/09 4:12 PM >>> > > On Oct 5, 2009, at 8:17 AM, Criss Myers wrote: > >> Hi Guys, >> >> Has anyone else had problems with acrobat pro 9 or know how to >> successfully install it, >> >> There are no composer diffs for 9 >> >> I have made a package with Composer and got passed the crashing on >> launch for network users by redirecting the Application support >> folder, and have got passed the requiring admin password on first >> launch with the self heal stuff. >> >> But now it requires the serial number putting in on first launch. >> >> I made the composer package by installing, applying the updaters >> and then launching and serializing, but when i push the package out >> via self service or casper remote it requires a serial input on >> first launch. >> >> Anyone else had this issue or any tips >> >> Criss >> > > > Chris, > does your package for Acrobat 9 include the /LIbrary/Application\ > Support/Adobe/Adobe\ PCD/ folder? > I think this is the folder that holds the license file database for > all of the products. > > > ____________________________ > Lance Ogletree > lanceo at mac.com > > ____________________________ Lance Ogletree lanceo at mac.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From lanceo at mac.com Tue Oct 6 06:02:58 2009 From: lanceo at mac.com (Lance Ogletree) Date: Tue, 06 Oct 2009 08:02:58 -0500 Subject: [Casper] Adobe Acrobat pro 9 In-Reply-To: <4ACB4D05.BB96.0081.0@uclan.ac.uk> References: <4AC9FFEF.BB96.0081.0@uclan.ac.uk> <21722BF0-2F7C-4021-8EE7-D17252FA162C@mac.com> <4ACB3DB8.BB96.0081.0@uclan.ac.uk> <4ACB4D05.BB96.0081.0@uclan.ac.uk> Message-ID: <10EBBAFC-14BB-470A-B12D-AA56D410E82B@mac.com> On Oct 6, 2009, at 7:58 AM, Criss Myers wrote: > Your cs3 issues looks like mine with cs4 and thats what i was > thinking of doing > > I currently deploy cs4 during imaging and all works fine, it deploys > and is licensed fine > > All the applications are separate and not part of a suite > > I then deploy acrobat after via self service, > > My hunch at the moment is that i need to do this > > 1. image the mac with cs 4 installing at reboot > 2. login as admin and launch each application in turn > 3. install acrobat and package > 4. include the whole PCD folder in the deployment pakage > 5. test > > including the PCD folder worked fine in test for Acrobat, acrobat > launched no problem as a user, as did photoshop, but all the rest > required a serial number, BUT, when i made the PCD folder i had > launched Photoshop as an admin first. > > Criss > > That should work. Like you said, the key is to making sure that all licensing is contained within the PCD database file so it can be packaged up as part of a base deployment. Using this method, you could then create multiple deployment packages. One could be the base install, everything but the applications. Then just add/remove application folders as needed to get the combination of deployed apps you want. Has a bit more overhead keeping things up to date, but should work. ____________________________ Lance Ogletree lanceo at mac.com -------------- next part -------------- An HTML attachment was scrubbed... URL: From donmontalvo at gmail.com Tue Oct 6 14:57:58 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Tue, 6 Oct 2009 16:57:58 -0500 Subject: [Casper] Casper Digest, Vol 34, Issue 6 In-Reply-To: References: Message-ID: <74AED80D-E999-48C1-8021-D31F79264E06@gmail.com> "Smith, William" wrote: > On 10/5/09 1:01 PM, "don montalvo" wrote: > >>> The base Mac OS X software is installed using block copy if you >>> create a >>> package. :-) But then you don't get the flexibility of multiple >>> configurations for one package file. :-( >> >> I'm not sure I follow. An image would be block copied to a target >> computer. A pkg installer would be a file copy. Are you saying Casper >> has a way of doing block copy using a pkg installer? > > Not using a .pkg or .mpkg, no. You can create a .dmg and this will > block > copy. But only the first .dmg installed will do this when installing > onto a > clean system. > > While I've not tried it myself, you should be able to add the > DVD .dmg to > Casper Admin along with all Mac OS updates and then have it build > you a > fully patched .dmg from that, which will block copy. Of course, you > can add > other non-Apple items as well. Ok, it's like the NetInstall workflow using System Image Utility, you can do this with those tools as well. >> Not sure if I'm confusing things. If we have an image containing OS X >> and common applications/tools (essentially, stuff every computer at >> the firm needs), can Casper deploy that image? Can the deployment >> process include running pkg installs for additional software? > > Casper Imaging can deploy a .dmg file to a machine. That .dmg file > can be a > monolithic image with Mac OS, applications, preferences, etc., or it > can > contain a single file. Your choice. > >> Let's assume the worst - an unmanaged, sneaker net environment, no >> consistency, and all users are set up with a local admin account. >> This >> is not unheard of with new clients, as I'm sure most of you guys >> know. :) >> >> None have a restore partition. They're all just starting to get the >> recon agent installed (jury is open on when this will be done since >> there doesn't appear to be an available Mac inventory list). > > I know of no tools that can come in and fully manage existing clients > without some prep work. In this case, I consider a Restore partition > to be part of an infrastructure to get full management capabilities > with Casper. I agree, if the solution is Casper. There are other solutions that don't need a lot of prep work since they can do a rebuild/upgrade in place. In essence, the necessary prep work is limited to getting an agent out to the Macs. :) > If I had my druthers (and I know this isn't a perfect world), I > would opt to > rebuild all machines according to specs outlined with the client. > When you > start with a known good system then you limit surprises. This > wouldn't have > to happen immediately, but over time. This is where Casper falls short. Once an agent is deployed to the Macs, introducing consistency should be a simple matter of doing a rebuild/ upgrade in place. I'm hoping JAMF is following this thread and responds with some kind of road map that includes rebuild/upgrade in place. I think this thread is opening a lot of eyes. That said, I think Casper is a decent toolset, but it lacks an essential function. >> See my note above regarding a core image containing common >> applications. > > I hope I clearly explained how Casper Admin 7.0 can create the > monolithic > image and that you can deploy this with Casper Imaging. You can always > deploy a monolithic image and then push even more stand-alone > packages on > top of that. Yes, you have. It looks like Casper adds some functions and flexibility to existing NetInstall processes. >> I'd like to see a best practice document from JAMF outlining how this >> can be done. Reimaging without having to migrate user data off a Mac >> and back on is essential for large deployments. > > I haven't seen such a document. JAMF's Casper training is probably > where > they go through what they consider to be best practices. That > training is > not included with the purchase of Casper. > >> There's at least one solution out there that can handle this: >> >> http://www.lanrev.com/solutions/disk-imaging.html >> >> The question is, can Casper do the same? It seems to have all the >> tools necessary to be able to. If not, it would certainly be worth >> adding this kind of functionality to their road map. > > Casper does not offer this support. I've never used LANrev LANrev is what NetOctopus would have been if Motorola didn't shut down the Netopia software development team. ;) > and I'm intrigued that a product can fully re-image a system drive > while booted from it. I've not heard of such a thing. FileWAVE can also do a upgrade in place as well...the white paper needs to be updated since you can in fact do a Tiger>Leopard upgrade in place as scripting takes care of the old roadblocks: http://www.filewave.com/fileadmin/PDF/Whitepaper_Imaging.pdf "FileWave performs imaging differently than traditional imaging such as the method of utilities like ?NetRestore? or ?Disk Utility?. FileWave images at the file level on an actively booted volume without the need to boot from a network or external drive. The client uses a multi-step imaging process. First, it downloads all files in the image fileset. Next, it erases all files that aren?t Filewave deployed or excluded. Finally, it activates the new image fileset and reboots the machine. User accounts may be preserved in Leopard to Leopard and Tiger to Tiger imaging scenarios; Tiger to Leopard user account migration is not available at this time." It's possible to do a rebuild/upgrade in place. The process can't use an ASR style block copy. It has to do file copy (pkg installs). If JAMF adds this functionality to Casper, it'll be a viable option for some of our clients. It's not, but I still need to understand it since one of our clients bought it. I'm hoping this thread is helpful, or at least food for thought for the JAMF folks. I've been watching Casper evolve over the past couple years, but it seems like it took a wrong turn somewhere and forgot to provide us with an essential functionality. Thanks, Don From patc at 180amsterdam.com Wed Oct 7 02:10:21 2009 From: patc at 180amsterdam.com (Pat Camporeale) Date: Wed, 07 Oct 2009 11:10:21 +0200 Subject: [Casper] Open Directory service running on JSS Box? In-Reply-To: Message-ID: Folks, Anyone have opinion or experience: I would like to run Open Directory on the same box that is hosting my JSS. All thoughts appreciated. Thanks in advance! -pat -- Yep, I?m using Comic Sans Pat Camporeale 180 Amsterdam Herengracht 506 1017CB Amsterdam +31 20 422 2180 DISCLAIMER 10/7/2009 This communication is intended only for use by casper at list.jamfsoftware.com. It may contain confidential or privileged information. If you receive this communication unintentionally, please inform us immediately. Thank you. 180 has registered companies in the United States and in the Netherlands. 180 Los Angeles LLC . (180) 1424 Second Street, Suite 200 and 300, Santa Monica, California 90401, is registered with the trade register in the US in Delaware under file number 4260284 and the corporation's FEIN is 20-5982098. 180 Amsterdam BV (180) Herengracht 506, 1017 CB, Amsterdam is registered with the trade register in the Netherlands under number 34253037 and VAT number NL8161.54.673.B.01. The content of this communications is not legally binding unless confirmed by letter or telefax. Please note that 180 is neither liable for the proper transmission nor for the complete transmission of the information contained in this communication or for any delay in its receipt. Also please note that the confidentiality of email communication is not warranted. All services and other work provided by 180 are subject to our general conditions (supplier terms and conditions). The conditions are available for inspection at Herengracht 506, Amsterdam and at the Chamber of Commerce in Amsterdam. If you wish to receive a hard copy of these conditions, please send an e-mail with your address to info at 180amsterdam.com In the event you send to 180 any unsolicited ideas and/or materials (whether consisting of texts, images, sounds, software, information or otherwise) ("Materials") by e-mail or otherwise, 180 shall be entitled to use, copy and/or commercially exploit such Materials to the fullest extent, free of charge and 180 will not be bound by any confidentiality obligation in respect thereof. -------------- next part -------------- An HTML attachment was scrubbed... URL: From ERNSTCS at uwec.edu Wed Oct 7 03:22:11 2009 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Wed, 7 Oct 2009 05:22:11 -0500 Subject: [Casper] Open Directory service running on JSS Box? In-Reply-To: References: Message-ID: I thonk it really depends on how many clients you manage, and if that is also your only distribution point. But I think OD doesn't take a super huge load on the server, not that I run OD anymore. Craig Ernst UW-Eau Claire (715) 836-3639 Sent from my iPhone On Oct 7, 2009, at 4:10 AM, "Pat Camporeale" > wrote: Folks, Anyone have opinion or experience: I would like to run Open Directory on the same box that is hosting my JSS. All thoughts appreciated. Thanks in advance! -pat -- Yep, I?m using Comic Sans Pat Camporeale 180 Amsterdam Herengracht 506 1017CB Amsterdam +31 20 422 2180 DISCLAIMER 10/7/2009 This communication is intended only for use by casper at list.jamfsoftware.com. It may contain confidential or privileged information. If you receive this communication unintentionally, please inform us immediately. Thank you. 180 has registered companies in the United States and in the Netherlands. 180 Los Angeles LLC . (180) 1424 Second Street, Suite 200 and 300, Santa Monica, California 90401, is registered with the trade register in the US in Delaware under file number 4260284 and the corporation's FEIN is 20-5982098. 180 Amsterdam BV (180) Herengracht 506, 1017 CB, Amsterdam is registered with the trade register in the Netherlands under number 34253037 and VAT number NL8161.54.673.B.01. The content of this communications is not legally binding unless confirmed by letter or telefax. Please note that 180 is neither liable for the proper transmission nor for the complete transmission of the information contained in this communication or for any delay in its receipt. Also please note that the confidentiality of email communication is not warranted. All services and other work provided by 180 are subject to our general conditions (supplier terms and conditions). The conditions are available for inspection at Herengracht 506, Amsterdam and at the Chamber of Commerce in Amsterdam. If you wish to receive a hard copy of these conditions, please send an e-mail with your address to info at 180amsterdam.com In the event you send to 180 any unsolicited ideas and/or materials (whether consisting of texts, images, sounds, software, information or otherwise) ("Materials") by e-mail or otherwise, 180 shall be entitled to use, copy and/or commercially exploit such Materials to the fullest extent, free of charge and 180 will not be bound by any confidentiality obligation in respect thereof. _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From aw_aca_bre at nwoca.org Wed Oct 7 05:25:43 2009 From: aw_aca_bre at nwoca.org (Brad Rellinger) Date: Wed, 7 Oct 2009 08:25:43 -0400 Subject: [Casper] Open Directory service running on JSS Box? In-Reply-To: References: Message-ID: <5596f1620910070525m12de9e9at772078e4f6883cad@mail.gmail.com> Are you also planning on Network Home Directories on this server? If not, I don't see a problem - but as Craig pointed out it all depends on how many users, and more specific, how many concurrent users will be authenticating. Of course it also depends on how much CPU the JSS is taking up. Best case would be to run JSS alone for a couple months and look at the CPU/Network utilization. If it is minimal then you shouldn't have a problem adding other services, like OD. -- Brad Rellinger Technology Specialist Anthony Wayne Local Schools K-12 aw_aca_bre at nwoca.org On Wed, Oct 7, 2009 at 6:22 AM, Ernst, Craig S. wrote: > I thonk it really depends on how many clients you manage, and if that is > also your only distribution point. But I think OD doesn't take a super huge > load on the server, not that I run OD anymore. > > Craig ErnstUW-Eau Claire > (715) 836-3639 > > Sent from my iPhone > > On Oct 7, 2009, at 4:10 AM, "Pat Camporeale" > wrote: > > Folks, > > Anyone have opinion or experience: > > I would like to run Open Directory on the same box that is hosting my > JSS. > > All thoughts appreciated. Thanks in advance! > > -pat > > -- > *Yep, I?m using Comic Sans > * > Pat Camporeale > 180 Amsterdam > Herengracht 506 > 1017CB Amsterdam > +31 20 422 2180 > > > DISCLAIMER 10/7/2009 > > This communication is intended only for use by > casper at list.jamfsoftware.com. It may contain confidential or privileged > information. If you receive this communication unintentionally, please > inform us immediately. Thank you. 180 has registered companies in the > United States and in the Netherlands. 180 Los Angeles LLC . (180) 1424 > Second Street, Suite 200 and 300, Santa Monica, California 90401, is > registered with the trade register in the US in Delaware under file number > 4260284 and the corporation's FEIN is 20-5982098. 180 Amsterdam BV (180) > Herengracht 506, 1017 CB, Amsterdam is registered with the trade register in > the Netherlands under number 34253037 and VAT number NL8161.54.673.B.01. > The content of this communications is not legally binding unless confirmed > by letter or telefax. Please note that 180 is neither liable for the proper > transmission nor for the complete transmission of the information contained > in this communication or for any delay in its receipt. Also please note that > the confidentiality of email communication is not warranted. All services > and other work provided by 180 are subject to our general conditions > (supplier terms and conditions). The conditions are available for inspection > at Herengracht 506, Amsterdam and at the Chamber of Commerce in Amsterdam. > If you wish to receive a hard copy of these conditions, please send an > e-mail with your address to info at 180amsterdam.com > > In the event you send to 180 any unsolicited ideas and/or materials > (whether consisting of texts, images, sounds, software, information or > otherwise) ("Materials") by e-mail or otherwise, 180 shall be entitled to > use, copy and/or commercially exploit such Materials to the fullest extent, > free of charge and 180 will not be bound by any confidentiality obligation > in respect thereof. > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From jared.nichols at ll.mit.edu Wed Oct 7 05:26:38 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Wed, 7 Oct 2009 08:26:38 -0400 Subject: [Casper] Open Directory service running on JSS Box? In-Reply-To: References: , Message-ID: <14BA94CFA668BC439032DD6F00A6AD2AACA2F3B98C@LLE2K7-BE01.mitll.ad.local> I'd agree with that statement. Though, I'd consider virtualizing those ancillary services. Keep your JSS on the live metal and then run a server VM with the other services. Yes, you're running on the same hardware so if you do have some sort of failure they'd all go down, but that would be the same case if they're all run off the same instance anyway. The benefit would be keeping things sandboxed. If you're unsure of configurations on new services that you're bringing up, you won't have to worry about client connections to the JSS while you're mucking around on the new stuff. j ________________________________________ From: casper-bounces at list.jamfsoftware.com [casper-bounces at list.jamfsoftware.com] On Behalf Of Ernst, Craig S. [ERNSTCS at uwec.edu] Sent: Wednesday, October 07, 2009 06:22 To: Pat Camporeale Cc: casper at list.jamfsoftware.com Subject: Re: [Casper] Open Directory service running on JSS Box? I thonk it really depends on how many clients you manage, and if that is also your only distribution point. But I think OD doesn't take a super huge load on the server, not that I run OD anymore. Craig Ernst UW-Eau Claire (715) 836-3639 Sent from my iPhone On Oct 7, 2009, at 4:10 AM, "Pat Camporeale" > wrote: Folks, Anyone have opinion or experience: I would like to run Open Directory on the same box that is hosting my JSS. All thoughts appreciated. Thanks in advance! -pat -- Yep, I?m using Comic Sans Pat Camporeale 180 Amsterdam Herengracht 506 1017CB Amsterdam +31 20 422 2180 DISCLAIMER 10/7/2009 This communication is intended only for use by casper at list.jamfsoftware.com. It may contain confidential or privileged information. If you receive this communication unintentionally, please inform us immediately. Thank you. 180 has registered companies in the United States and in the Netherlands. 180 Los Angeles LLC . (180) 1424 Second Street, Suite 200 and 300, Santa Monica, California 90401, is registered with the trade register in the US in Delaware under file number 4260284 and the corporation's FEIN is 20-5982098. 180 Amsterdam BV (180) Herengracht 506, 1017 CB, Amsterdam is registered with the trade register in the Netherlands under number 34253037 and VAT number NL8161.54.673.B.01. The content of this communications is not legally binding unless confirmed by letter or telefax. Please note that 180 is neither liable for the proper transmission nor for the complete transmission of the information contained in this communication or for any delay in its receipt. Also please note that the confidentiality of email communication is not warranted. All services and other work provided by 180 are subject to our general conditions (supplier terms and conditions). The conditions are available for inspection at Herengracht 506, Amsterdam and at the Chamber of Commerce in Amsterdam. If you wish to receive a hard copy of these conditions, please send an e-mail with your address to info at 180amsterdam.com In the event you send to 180 any unsolicited ideas and/or materials (whether consisting of texts, images, sounds, software, information or otherwise) ("Materials") by e-mail or otherwise, 180 shall be entitled to use, copy and/or commercially exploit such Materials to the fullest extent, free of charge and 180 will not be bound by any confidentiality obligation in respect thereof. _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper From jared.nichols at ll.mit.edu Wed Oct 7 05:26:38 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Wed, 7 Oct 2009 08:26:38 -0400 Subject: [Casper] Open Directory service running on JSS Box? In-Reply-To: References: , Message-ID: <14BA94CFA668BC439032DD6F00A6AD2AACA2F3B98C@LLE2K7-BE01.mitll.ad.local> I'd agree with that statement. Though, I'd consider virtualizing those ancillary services. Keep your JSS on the live metal and then run a server VM with the other services. Yes, you're running on the same hardware so if you do have some sort of failure they'd all go down, but that would be the same case if they're all run off the same instance anyway. The benefit would be keeping things sandboxed. If you're unsure of configurations on new services that you're bringing up, you won't have to worry about client connections to the JSS while you're mucking around on the new stuff. j ________________________________________ From: casper-bounces at list.jamfsoftware.com [casper-bounces at list.jamfsoftware.com] On Behalf Of Ernst, Craig S. [ERNSTCS at uwec.edu] Sent: Wednesday, October 07, 2009 06:22 To: Pat Camporeale Cc: casper at list.jamfsoftware.com Subject: Re: [Casper] Open Directory service running on JSS Box? I thonk it really depends on how many clients you manage, and if that is also your only distribution point. But I think OD doesn't take a super huge load on the server, not that I run OD anymore. Craig Ernst UW-Eau Claire (715) 836-3639 Sent from my iPhone On Oct 7, 2009, at 4:10 AM, "Pat Camporeale" > wrote: Folks, Anyone have opinion or experience: I would like to run Open Directory on the same box that is hosting my JSS. All thoughts appreciated. Thanks in advance! -pat -- Yep, I?m using Comic Sans Pat Camporeale 180 Amsterdam Herengracht 506 1017CB Amsterdam +31 20 422 2180 DISCLAIMER 10/7/2009 This communication is intended only for use by casper at list.jamfsoftware.com. It may contain confidential or privileged information. If you receive this communication unintentionally, please inform us immediately. Thank you. 180 has registered companies in the United States and in the Netherlands. 180 Los Angeles LLC . (180) 1424 Second Street, Suite 200 and 300, Santa Monica, California 90401, is registered with the trade register in the US in Delaware under file number 4260284 and the corporation's FEIN is 20-5982098. 180 Amsterdam BV (180) Herengracht 506, 1017 CB, Amsterdam is registered with the trade register in the Netherlands under number 34253037 and VAT number NL8161.54.673.B.01. The content of this communications is not legally binding unless confirmed by letter or telefax. Please note that 180 is neither liable for the proper transmission nor for the complete transmission of the information contained in this communication or for any delay in its receipt. Also please note that the confidentiality of email communication is not warranted. All services and other work provided by 180 are subject to our general conditions (supplier terms and conditions). The conditions are available for inspection at Herengracht 506, Amsterdam and at the Chamber of Commerce in Amsterdam. If you wish to receive a hard copy of these conditions, please send an e-mail with your address to info at 180amsterdam.com In the event you send to 180 any unsolicited ideas and/or materials (whether consisting of texts, images, sounds, software, information or otherwise) ("Materials") by e-mail or otherwise, 180 shall be entitled to use, copy and/or commercially exploit such Materials to the fullest extent, free of charge and 180 will not be bound by any confidentiality obligation in respect thereof. _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper From tgreenleaf at saintmarksschool.org Wed Oct 7 09:29:24 2009 From: tgreenleaf at saintmarksschool.org (Tatian Greenleaf) Date: Wed, 7 Oct 2009 09:29:24 -0700 Subject: [Casper] Smart Notebook on imaged machine Message-ID: <38d97fa20910070929p47606477jb300e11443c0fe0a@mail.gmail.com> Following up on my earlier thread about using Composer to create a package for Smart Notebook 10, I am now in the process of just trying to manually install a working copy on a machine that has been imaged using Casper. I've tried a clean uninstall and reinstall of the software using the newest (and older as well) versions from their website, I've tried creating a new local admin account and reinstalling, but none of this is working. When the program launches, I get an error about needing to reinstall. I gave the support staff at SmartTech remote access to one of our computers with this problem and they couldn't figure it out after several hours of trying. I'm desperate and hoping that someone else on this list may have had a similar problem with this software. I think it must come down to a permissions problem, but I can't figure out what to change. Repairing permission on the drive doesn't help. Help? Tatian ____________________________ Tatian Greenleaf Associate Director of Technology Saint Mark's School (415) 472-8000 x1014 -------------- next part -------------- An HTML attachment was scrubbed... URL: From ken.edgar at gmail.com Wed Oct 7 11:08:18 2009 From: ken.edgar at gmail.com (Kenneth Edgar) Date: Wed, 07 Oct 2009 13:08:18 -0500 Subject: [Casper] Creating distribution for QuarkXPress... All versions Message-ID: Hello, Has anyone created a distribution package or dmg of QuarkXPress successfully? I don?t even know how to start and am sort-of thinking it may me impossible with the single-licensed software as we have. For instance, Quark 6.x you cannot install without a val-code. Thank you for your help, Ken Edgar -------------- next part -------------- An HTML attachment was scrubbed... URL: From JStanford at serinocoyne.com Wed Oct 7 11:10:26 2009 From: JStanford at serinocoyne.com (Justin L. Stanford) Date: Wed, 7 Oct 2009 14:10:26 -0400 Subject: [Casper] Creating distribution for QuarkXPress... All versions In-Reply-To: References: Message-ID: <92C56D3ADF4B0D4DA360CAA362D716FD05EFB8D50A@scexmbox.serinocoyne.local> Ken- You can work with Quark to get all of your individual licenses rolled up into a site license, if that is something you wish to pursue. From there you can create a single package that will check out a license when opened from your Quark QLA server. Thanks, Justin From: casper-bounces at list.jamfsoftware.com [mailto:casper-bounces at list.jamfsoftware.com] On Behalf Of Kenneth Edgar Sent: Wednesday, October 07, 2009 2:08 PM To: casper at list.jamfsoftware.com Subject: [Casper] Creating distribution for QuarkXPress... All versions Hello, Has anyone created a distribution package or dmg of QuarkXPress successfully? I don't even know how to start and am sort-of thinking it may me impossible with the single-licensed software as we have. For instance, Quark 6.x you cannot install without a val-code. Thank you for your help, Ken Edgar -- _____________________________________________________ This email is intended only for the person to which it is addressed and contains confidential information. If you have received this email in error, please delete the email and immediately notify us at (212) 626-2700, or by sending an email to support at serinocoyne.com. Thank You. -------------- next part -------------- An HTML attachment was scrubbed... URL: From ken.edgar at gmail.com Wed Oct 7 11:14:04 2009 From: ken.edgar at gmail.com (Kenneth Edgar) Date: Wed, 7 Oct 2009 13:14:04 -0500 Subject: [Casper] Creating distribution for QuarkXPress... All versions In-Reply-To: <92C56D3ADF4B0D4DA360CAA362D716FD05EFB8D50A@scexmbox.serinocoyne.local> References: <92C56D3ADF4B0D4DA360CAA362D716FD05EFB8D50A@scexmbox.serinocoyne.local> Message-ID: <5470905315879892450@unknownmsgid> I was trying to stay away from needing a qla. Not too keen on thier licensing model. Sent from Ken's iPhone On Oct 7, 2009, at 1:10 PM, "Justin L. Stanford" wrote: Ken- You can work with Quark to get all of your individual licenses rolled up into a site license, if that is something you wish to pursue. From there you can create a single package that will check out a license when opened from your Quark QLA server. Thanks, Justin *From:* casper-bounces at list.jamfsoftware.com [mailto: casper-bounces at list.jamfsoftware.com] *On Behalf Of *Kenneth Edgar *Sent:* Wednesday, October 07, 2009 2:08 PM *To:* casper at list.jamfsoftware.com *Subject:* [Casper] Creating distribution for QuarkXPress... All versions Hello, Has anyone created a distribution package or dmg of QuarkXPress successfully? I don?t even know how to start and am sort-of thinking it may me impossible with the single-licensed software as we have. For instance, Quark 6.x you cannot install without a val-code. Thank you for your help, Ken Edgar -- _____________________________________________________ This email is intended only for the person to which it is addressed and contains confidential information. If you have received this email in error, please delete the email and immediately notify us at (212) 626-2700, or by sending an email to support at serinocoyne.com. Thank You. -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Wed Oct 7 11:46:22 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Wed, 07 Oct 2009 13:46:22 -0500 Subject: [Casper] Open Directory service running on JSS Box? In-Reply-To: <14BA94CFA668BC439032DD6F00A6AD2AACA2F3B98C@LLE2K7-BE01.mitll.ad.local> References: , <14BA94CFA668BC439032DD6F00A6AD2AACA2F3B98C@LLE2K7-BE01.mitll.ad.local> Message-ID: <4ACC9BAD.7141.0039.0@kckps.org> It depends on how heavy of a load the server gets. I got 1 ODM and 18 to 20 replicas with over 7000 user accounts in my directory. I had my boss buy me an actual server independent of OD that I run my JSS on. Before I had a dual G5 xserve for the JSS and to be honest, in my environment it was getting respited because of too many clients checking in at once. The mysql daemon was owning that server. I upgraded to dual quad core xeons and 8gigs of RAM and never looked back. My JSS peeks every day to around 20% of the CPU used and about 75% of the RAM used. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Nichols, Jared - 1160 - MITLL" 10/07/09 7:26 AM >>> I'd agree with that statement. Though, I'd consider virtualizing those ancillary services. Keep your JSS on the live metal and then run a server VM with the other services. Yes, you're running on the same hardware so if you do have some sort of failure they'd all go down, but that would be the same case if they're all run off the same instance anyway. The benefit would be keeping things sandboxed. If you're unsure of configurations on new services that you're bringing up, you won't have to worry about client connections to the JSS while you're mucking around on the new stuff. j ________________________________________ From: casper-bounces at list.jamfsoftware.com [casper-bounces at list.jamfsoftware.com] On Behalf Of Ernst, Craig S. [ERNSTCS at uwec.edu] Sent: Wednesday, October 07, 2009 06:22 To: Pat Camporeale Cc: casper at list.jamfsoftware.com Subject: Re: [Casper] Open Directory service running on JSS Box? I thonk it really depends on how many clients you manage, and if that is also your only distribution point. But I think OD doesn't take a super huge load on the server, not that I run OD anymore. Craig Ernst UW-Eau Claire (715) 836-3639 Sent from my iPhone On Oct 7, 2009, at 4:10 AM, "Pat Camporeale" > wrote: Folks, Anyone have opinion or experience: I would like to run Open Directory on the same box that is hosting my JSS. All thoughts appreciated. Thanks in advance! -pat -- Yep, I?m using Comic Sans Pat Camporeale 180 Amsterdam Herengracht 506 1017CB Amsterdam +31 20 422 2180 DISCLAIMER 10/7/2009 This communication is intended only for use by casper at list.jamfsoftware.com. It may contain confidential or privileged information. If you receive this communication unintentionally, please inform us immediately. Thank you. 180 has registered companies in the United States and in the Netherlands. 180 Los Angeles LLC . (180) 1424 Second Street, Suite 200 and 300, Santa Monica, California 90401, is registered with the trade register in the US in Delaware under file number 4260284 and the corporation's FEIN is 20-5982098. 180 Amsterdam BV (180) Herengracht 506, 1017 CB, Amsterdam is registered with the trade register in the Netherlands under number 34253037 and VAT number NL8161.54.673.B.01. The content of this communications is not legally binding unless confirmed by letter or telefax. Please note that 180 is neither liable for the proper transmission nor for the complete transmission of the information contained in this communication or for any delay in its receipt. Also please note that the confidentiality of email communication is not warranted. All services and other work provided by 180 are subject to our general conditions (supplier terms and conditions). The conditions are available for inspection at Herengracht 506, Amsterdam and at the Chamber of Commerce in Amsterdam. If you wish to receive a hard copy of these conditions, please send an e-mail with your address to info at 180amsterdam.com In the event you send to 180 any unsolicited ideas and/or materials (whether consisting of texts, images, sto use, copy and/or commercially exploit such Materials to the fullest extent, free of charge and 180 will not be bound by any confidentiality obligation in respect thereof. _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From jared.nichols at ll.mit.edu Wed Oct 7 11:42:47 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Wed, 7 Oct 2009 14:42:47 -0400 Subject: [Casper] Creating distribution for QuarkXPress... All versions In-Reply-To: References: Message-ID: <5E6E43AC-1272-4313-A6D1-5915E87AC57E@ll.mit.edu> InDesign. :) --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 7, 2009, at 2:08 PM, Kenneth Edgar wrote: Hello, Has anyone created a distribution package or dmg of QuarkXPress successfully? I don?t even know how to start and am sort-of thinking it may me impossible with the single-licensed software as we have. For instance, Quark 6.x you cannot install without a val-code. Thank you for your help, Ken Edgar _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From ken.edgar at gmail.com Wed Oct 7 11:54:25 2009 From: ken.edgar at gmail.com (Kenneth Edgar) Date: Wed, 7 Oct 2009 13:54:25 -0500 Subject: [Casper] Creating distribution for QuarkXPress... All versions In-Reply-To: <5E6E43AC-1272-4313-A6D1-5915E87AC57E@ll.mit.edu> References: <5E6E43AC-1272-4313-A6D1-5915E87AC57E@ll.mit.edu> Message-ID: <-384731598143682612@unknownmsgid> Hahaha, I agree with that! Sent from Ken's iPhone On Oct 7, 2009, at 1:51 PM, "Nichols, Jared - 1160 - MITLL" < jared.nichols at ll.mit.edu> wrote: InDesign. :) --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 7, 2009, at 2:08 PM, Kenneth Edgar wrote: Hello, Has anyone created a distribution package or dmg of QuarkXPress successfully? I don?t even know how to start and am sort-of thinking it may me impossible with the single-licensed software as we have. For instance, Quark 6.x you cannot install without a val-code. Thank you for your help, Ken Edgar _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From swood at integer.com Wed Oct 7 11:58:35 2009 From: swood at integer.com (Steve Wood) Date: Wed, 7 Oct 2009 13:58:35 -0500 Subject: [Casper] Creating distribution for QuarkXPress... All versions In-Reply-To: <-384731598143682612@unknownmsgid> References: <5E6E43AC-1272-4313-A6D1-5915E87AC57E@ll.mit.edu> <-384731598143682612@unknownmsgid> Message-ID: <438f5a310910071158k2f0bda68pb279bdd54c4b6bf1@mail.gmail.com> You may want to stay away from the QLA, but it will save you a ton of time and effort in this. I ran one at my last job and while it was a little cumbersome at first, they upgraded the software and it got a little (I stress little) easier to run. But, once installed, I was able to install Quark on every machine in the office and it worked perfectly. In fact, the QLA will work across subnets and across WAN links, so if you have multiple locations you can run everything thru one QLA server. And, for redundancy you can have a backup QLA server in a different location. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Wed, Oct 7, 2009 at 1:54 PM, Kenneth Edgar wrote: > Hahaha, I agree with that! > > Sent from Ken's iPhone > > On Oct 7, 2009, at 1:51 PM, "Nichols, Jared - 1160 - MITLL" < > jared.nichols at ll.mit.edu> wrote: > > InDesign. > :) > > > --- > Jared F. Nichols > Desktop Engineer, Infrastructure & Operations > Information Services Department > MIT Lincoln Laboratory > 244 Wood Street > Lexington, Massachusetts 02420 > 781.981.5436 > > On Oct 7, 2009, at 2:08 PM, Kenneth Edgar wrote: > > Hello, > > Has anyone created a distribution package or dmg of QuarkXPress > successfully? I don?t even know how to start and am sort-of thinking it may > me impossible with the single-licensed software as we have. For instance, > Quark 6.x you cannot install without a val-code. > > Thank you for your help, > Ken Edgar > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From DuCharmeC at District279.org Wed Oct 7 13:00:07 2009 From: DuCharmeC at District279.org (DuCharme, Cynthia (ESC)) Date: Wed, 7 Oct 2009 15:00:07 -0500 Subject: [Casper] Netboot w/Casper imaging (Version 7.0) Message-ID: <146FDAD69D1A1D4BA6492940077502420C59F06D@escexc02.core.oas.ld> We are having an issue with imaging with Casper Netboot (diskless). The process appears to work however, when the machine finishes imaging and reboots, the machine hasn't been imaged at all. It appears the hard drive isn't being erased. I have successfully imaged if I use disk util to erase the hard drive first. Cynthia R. DuCharme Technical Support Specialist\Helpdesk Support VM 763-391-7221 -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/jpeg Size: 2952 bytes Desc: image001.jpg URL: From Jason.Weber at district196.org Wed Oct 7 13:01:25 2009 From: Jason.Weber at district196.org (Weber, Jason) Date: Wed, 7 Oct 2009 15:01:25 -0500 Subject: [Casper] Smart Notebook on imaged machine In-Reply-To: <38d97fa20910070929p47606477jb300e11443c0fe0a@mail.gmail.com> References: <38d97fa20910070929p47606477jb300e11443c0fe0a@mail.gmail.com> Message-ID: I hate to suggest it, but it may be something in your base image, or possibly a problem with a package that lays down after your base. I've actually encountered similar issues with 'bad packages' causing other apps to throw errors. Usually it's due to another package modifying or setting incorrect permissions on a folder that the "problem app" needs to access. I would try loading a Mac from the CD with no other apps, then install SMART Notebook manually to see if you still have those troubles. If all works well at that point, at least you know to start eyeing packages.. We have deployed SMART notebook to about 3,000 computers with no problems. I didn't do anything special to build the application, just a "New" snapshot within Composer and installed the software. I've built a few versions from scratch as they updated from SP1 to SP3 over the summer months.. Hope that helps some, Jason Weber Technology Support Cluster Specialist Certified Casper Administrator Independent School District 196 From: casper-bounces at list.jamfsoftware.com [mailto:casper-bounces at list.jamfsoftware.com] On Behalf Of Tatian Greenleaf Sent: Wednesday, October 07, 2009 11:29 AM To: casper Subject: [Casper] Smart Notebook on imaged machine Following up on my earlier thread about using Composer to create a package for Smart Notebook 10, I am now in the process of just trying to manually install a working copy on a machine that has been imaged using Casper. I've tried a clean uninstall and reinstall of the software using the newest (and older as well) versions from their website, I've tried creating a new local admin account and reinstalling, but none of this is working. When the program launches, I get an error about needing to reinstall. I gave the support staff at SmartTech remote access to one of our computers with this problem and they couldn't figure it out after several hours of trying. I'm desperate and hoping that someone else on this list may have had a similar problem with this software. I think it must come down to a permissions problem, but I can't figure out what to change. Repairing permission on the drive doesn't help. Help? Tatian ____________________________ Tatian Greenleaf Associate Director of Technology Saint Mark's School (415) 472-8000 x1014 -------------- next part -------------- An HTML attachment was scrubbed... URL: From tgreenleaf at saintmarksschool.org Wed Oct 7 13:30:57 2009 From: tgreenleaf at saintmarksschool.org (Tatian Greenleaf) Date: Wed, 7 Oct 2009 13:30:57 -0700 Subject: [Casper] Smart Notebook on imaged machine In-Reply-To: References: <38d97fa20910070929p47606477jb300e11443c0fe0a@mail.gmail.com> Message-ID: <38d97fa20910071330w7da8dc43j96aceb94c6705a59@mail.gmail.com> Jason, Thank you. It's good to know that it is possible to build a working package with Composer. We're currently doing just what you suggested (reformatting and installing OS X clean from DVD) to see if it's our config that is the problem. Tatian ____________________________ Tatian Greenleaf Associate Director of Technology Saint Mark's School (415) 472-8000 x1014 On Wed, Oct 7, 2009 at 1:01 PM, Weber, Jason wrote: > I hate to suggest it, but it may be something in your base image, or > possibly a problem with a package that lays down after your base. > > > > I?ve actually encountered similar issues with ?bad packages? causing other > apps to throw errors. Usually it?s due to another package modifying or > setting incorrect permissions on a folder that the ?problem app? needs to > access. > > > > I would try loading a Mac from the CD with no other apps, then install > SMART Notebook manually to see if you still have those troubles. If all > works well at that point, at least you know to start eyeing packages.. > > > > We have deployed SMART notebook to about 3,000 computers with no problems. > I didn?t do anything special to build the application, just a ?New? snapshot > within Composer and installed the software. I?ve built a few versions from > scratch as they updated from SP1 to SP3 over the summer months.. > > > > Hope that helps some, > > > > > > Jason Weber > > Technology Support Cluster Specialist > > Certified Casper Administrator > > Independent School District 196 > > > > > > > > > > *From:* casper-bounces at list.jamfsoftware.com [mailto: > casper-bounces at list.jamfsoftware.com] *On Behalf Of *Tatian Greenleaf > *Sent:* Wednesday, October 07, 2009 11:29 AM > *To:* casper > *Subject:* [Casper] Smart Notebook on imaged machine > > > > Following up on my earlier thread about using Composer to create a package > for Smart Notebook 10, I am now in the process of just trying to manually > install a working copy on a machine that has been imaged using Casper. I've > tried a clean uninstall and reinstall of the software using the newest (and > older as well) versions from their website, I've tried creating a new local > admin account and reinstalling, but none of this is working. When the > program launches, I get an error about needing to reinstall. I gave the > support staff at SmartTech remote access to one of our computers with this > problem and they couldn't figure it out after several hours of trying. > > > > I'm desperate and hoping that someone else on this list may have had a > similar problem with this software. I think it must come down to a > permissions problem, but I can't figure out what to change. Repairing > permission on the drive doesn't help. > > > > Help? > > > > Tatian > > ____________________________ > Tatian Greenleaf > Associate Director of Technology > Saint Mark's School > (415) 472-8000 x1014 > -------------- next part -------------- An HTML attachment was scrubbed... URL: From sachsl at sec.gov Wed Oct 7 14:09:31 2009 From: sachsl at sec.gov (SACHS,LEONARD) Date: Wed, 07 Oct 2009 17:09:31 -0400 Subject: [Casper] McAfee EPO Servers, VirusScan &/or McAfee Security Message-ID: We are running McAfee EPO servers here. The EPO servers were upgraded from version 3.6 to 4.0 recently. PCs were moved from the 3.6 server to the 4.0 server using McAfee?s tools. We were not successful moving Mac users EPO servers via the McAfee server tools. I'd like to prepare for the move to Snow Leopard by installing McAfee Security 1.0 (aka VirusScan 9.0), since VirusScan 8.6 is not compatible with 10.6 Through trial and error and speaking with support at McAfee, this is the process followed: 1. Remove VirusScan 8.6 - (run the uninstall.command) - 2. Remove the EPO Pointer - /Library/McAfee/cma/uninstall.sh I wrapped the first two together in a preinstall shell script for the .pkg 3. Install the new EPO Pointer (script from the EPO server) 4. Install McAfee Security 1.0 aka McAfee VirusScan 9 I wrapped the second two together with a postinstall shell script for that kicks off: sudo /tmp/EpoScripts/install.sh -i sudo installer -pkg /tmp/EpoScripts/McAfee\ Security\ for\ Mac-Anti-malware-1.0-RTW-644.mpkg -target / This has been tested and works fine. The EPO server manager and I tested moving the software via the server, and kept getting lots of VirusScan errors in the console - as it looks like the installer (from EPO console) doesn't kill one of the processes ? also looks like we need to force a restart if we run the process from the console (I don?t like interfering with user?s work). I'd like to be able to get this to the point that we can do all of this from the EPO console. Has anyone else on the list had experience with McAfee EPO? Can we collaborate? Thanks a million. Lenny Sachs -------------- next part -------------- An HTML attachment was scrubbed... URL: From ERNSTCS at uwec.edu Wed Oct 7 14:58:10 2009 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Wed, 7 Oct 2009 16:58:10 -0500 Subject: [Casper] Creating distribution for QuarkXPress... All versions In-Reply-To: Message-ID: Funny thing...I just had to restart my Quark license service about 5 minutes ago...it was hung on ?Starting?...I guess it never really wanted to be totally ?Started? after reboot for patches... But yeah, we deploy it using a server for licensing. It works decent. Craig E On 10/7/09 1:08 PM, "Kenneth Edgar" wrote: Hello, Has anyone created a distribution package or dmg of QuarkXPress successfully? I don?t even know how to start and am sort-of thinking it may me impossible with the single-licensed software as we have. For instance, Quark 6.x you cannot install without a val-code. Thank you for your help, Ken Edgar -------------- next part -------------- An HTML attachment was scrubbed... URL: From William.Smith at merrillcorp.com Wed Oct 7 19:17:45 2009 From: William.Smith at merrillcorp.com (Smith, William) Date: Wed, 7 Oct 2009 21:17:45 -0500 Subject: [Casper] Creating distribution for QuarkXPress... All versions In-Reply-To: <5470905315879892450@unknownmsgid> Message-ID: From: Kenneth Edgar Date: Wed, 7 Oct 2009 13:14:04 -0500 > I was trying to stay away from needing a qla. ?Not too keen on thier licensing > model. Not to keen on their licensing model? With a QLA server, you're legally allowed to install QuarkXPress on as many machines as you choose without worrying about per seat licensing. That's fantastic! We've used QLA for the past few years and for the most part it just runs. It's serving both our Mac and Windows clients in more than a dozen sites around the world. If one server becomes unavailable then the backup takes over. If both are unavailable (such as a network outage) then each workstation can run up to 120 hours before having to reconnect. I won't say we haven't had problems a couple of times with the servers but they've been worth maintaining compared to having to maintain 80+ individual serial numbers. Plus, we've actually been able to reduce the number of licenses we'd have to maintain individually because not everyone uses QuarkXPress at the same time. The downside? Yes, you have to pay an additional fee to convert one of your stand-alone licenses to the QLA server license. It's been very worth it for us. I strongly suggest looking into it. -- bill William M. Smith, Technical Analyst MCS IT Merrill Communications, LLC (651) 632-1492 From Rich_Barron at vfc.com Thu Oct 8 11:10:00 2009 From: Rich_Barron at vfc.com (Rich_Barron at vfc.com) Date: Thu, 8 Oct 2009 11:10:00 -0700 Subject: [Casper] Scripting help - might be easy Message-ID: I'm having a strange problem that is randomly showing up where the admin GROUP is being deleted from the users systems, demoting the local admin account to a standard user. The users are all standard users anyway so they don't notice a thing until they ask a tech to update/install something and the tech can't do it. I have a fix I can run in terminal to delete the existing admin group, create a new one, and add the admin user to the admin group: dseditgroup -o delete admin dseditgroup -o create admin dscl . -append /Groups/admin GroupMembership admin Now, I wanted to add this as a self service option so that I don't have to remote into the machine and run this command via terminal, or be able to do it via ARD. But the problem I am having is that the terminal asks for confirmation (are you sure you want to do this? y or n) and I don't know how to skip that question or enter 'y'. Can someone give me a hand? And has anyone heard of the admin group being deleted from a system randomly? This has never happened before, but now we are using Centrify Direct Control for connecting to AD. Not sure if there is a cause/effect relationship there or not. Thanks for any help! Rich Barron -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Thu Oct 8 11:25:03 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 08 Oct 2009 13:25:03 -0500 Subject: [Casper] Scripting help - might be easy In-Reply-To: References: Message-ID: <4ACDE82F.7141.0039.0@kckps.org> Deleted randomly? No way, I have never heard of that happening. Are your local admin accounts in /Users? I have a few ideas I can toss at you that might help out a lot. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> 10/08/09 1:10 PM >>> I'm having a strange problem that is randomly showing up where the admin GROUP is being deleted from the users systems, demoting the local admin account to a standard user. The users are all standard users anyway so they don't notice a thing until they ask a tech to update/install something and the tech can't do it. I have a fix I can run in terminal to delete the existing admin group, create a new one, and add the admin user to the admin group: dseditgroup -o delete admin dseditgroup -o create admin dscl . -append /Groups/admin GroupMembership admin Now, I wanted to add this as a self service option so that I don't have to remote into the machine and run this command via terminal, or be able to do it via ARD. But the problem I am having is that the terminal asks for confirmation (are you sure you want to do this? y or n) and I don't know how to skip that question or enter 'y'. Can someone give me a hand? And has anyone heard of the admin group being deleted from a system randomly? This has never happened before, but now we are using Centrify Direct Control for connecting to AD. Not sure if there is a cause/effect relationship there or not. Thanks for any help! Rich Barron -------------- next part -------------- An HTML attachment was scrubbed... URL: From donmontalvo at gmail.com Thu Oct 8 12:20:20 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Thu, 8 Oct 2009 14:20:20 -0500 Subject: [Casper] Creating distribution for QuarkXPress... All versions In-Reply-To: References: Message-ID: <71E9853B-D629-4FC6-B672-687C934795ED@gmail.com> "Smith, William" wrote: >> I was trying to stay away from needing a qla. ?Not too keen on >> thier licensing >> model. > > Not to keen on their licensing model? > > With a QLA server, you're legally allowed to install QuarkXPress on > as many > machines as you choose without worrying about per seat licensing. > That's > fantastic! > > We've used QLA for the past few years and for the most part it just > runs. > It's serving both our Mac and Windows clients in more than a dozen > sites > around the world. If one server becomes unavailable then the backup > takes > over. If both are unavailable (such as a network outage) then each > workstation can run up to 120 hours before having to reconnect. > > I won't say we haven't had problems a couple of times with the > servers but > they've been worth maintaining compared to having to maintain 80+ > individual > serial numbers. Plus, we've actually been able to reduce the number of > licenses we'd have to maintain individually because not everyone uses > QuarkXPress at the same time. > > The downside? Yes, you have to pay an additional fee to convert one > of your > stand-alone licenses to the QLA server license. It's been very worth > it for > us. > > I strongly suggest looking into it. Everything William said and then some. Having QLA also allows you to package QuarkXPress, along with the QLAClient.properties license file (which should have DNS names for the main and failover servers). Can't do that with individual licenses (unless you create one pkg installer for each licensed copy. QLA servers can (and should) be set up with main/failover servers so clients can continue to work if the main server goes down. If both servers go down, you can push emergency keys out to the users so they can continue to work. I can agree with the original poster if by "licensing model", they meant the upgrade price, lack of cross upgrade offerings, etc. But one thing Quark has their act together on is QLA. If Adobe followed their lead, there would be a lot less "Adobe CS installer stinks" threads and articles circulating on the internet. :) Don From donmontalvo at gmail.com Thu Oct 8 13:40:31 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Thu, 8 Oct 2009 15:40:31 -0500 Subject: [Casper] Casper Digest, Vol 34, Issue 7 In-Reply-To: References: Message-ID: On Oct 7, 2009, at 2:00 PM, casper-request at list.jamfsoftware.com wrote: ...[SNIP]... ...[SNIP]... ...[SNIP]... ...[SNIP]... ...[SNIP]... ...[SNIP]... > FileWAVE can also do a upgrade in place as well...the white paper > needs to > be updated since you can in fact do a Tiger>Leopard upgrade in place > as > scripting takes care of the old roadblocks: > > http://www.filewave.com/fileadmin/PDF/Whitepaper_Imaging.pdf > > "FileWave performs imaging differently than traditional imaging > such as > the method of utilities like ?NetRestore? or ?Disk Utility?. FileWave > images at the file level on an actively booted volume without the > need > to boot from a network or external drive. > > The client uses a multi-step imaging process. First, it downloads all > files in the image fileset. Next, it erases all files that aren?t > Filewave deployed or excluded. Finally, it activates the new image > fileset and reboots the machine. > > User accounts may be preserved in Leopard to Leopard and Tiger to > Tiger > imaging scenarios; Tiger to Leopard user account migration is not > available at this time." > > It's possible to do a rebuild/upgrade in place. The process can't use > an ASR > style block copy. It has to do file copy (pkg installs). If JAMF adds > this > functionality to Casper, it'll be a viable option for some of our > clients. It's > not, but I still need to understand it since one of our clients bought > it. > > I'm hoping this thread is helpful, or at least food for thought for > the JAMF > folks. I've been watching Casper evolve over the past couple years, > but it > seems like it took a wrong turn somewhere and forgot to provide us > with an > essential functionality. > > Thanks, > Don CORRECTION...the above text from the Filewave imaging PDF is outdated. In place imaging works with Tiger>Leopard as well as Tiger>Tiger or Leopard>Leopard. There are differences between Tiger and Leopard that are handled by the process: Beginning with version 3.7, FileWave has introduced an imaging solution, which allows for the in-place deployment of OS images to any FileWave managed clients. This guide is an overview of the FileWave imaging and fileset creation process. FileWave performs imaging differently than traditional imaging such as the method of utilities like ?NetRestore? or ?Disk Utility?. FileWave images at the file level on an actively booted volume without the need to boot from a network or external drive. Imaging takes place in a multi-step process. First, image files are downloaded silently in the background on the live client while the client remains usable to the end user. The user is then prompted to log out at which time, all image files are activated and copied to their correct location on the file system. Files that are not in the image fileset or any other FileWave application filesets are then removed from the file system. Finally, the client reboots into its new OS environment. Optionally, user accounts and user data may be preserved and migrated to the new target operating system. Other application and data folders may also be configured to be preserved during the imaging process. It would be great if JAMF had a plan to add this kind of functionality to Casper. Don From zach at jamfsoftware.com Thu Oct 8 16:07:04 2009 From: zach at jamfsoftware.com (Zach Halmstad) Date: Thu, 8 Oct 2009 16:07:04 -0700 Subject: [Casper] Imaging Macs In-Reply-To: References: Message-ID: Hey everyone- Just wanted to chime in from JAMF on a few things... The base Mac OS X software is installed using block copy if you create a package. :-) But then you don't get the flexibility of multiple configurations for one package file. :-( I'm not sure I follow. An image would be block copied to a target computer. A pkg installer would be a file copy. Are you saying Casper has a way of doing block copy using a pkg installer? Not sure if I'm confusing things. If we have an image containing OS X and common applications/tools (essentially, stuff every computer at the firm needs), can Casper deploy that image? Can the deployment process include running pkg installs for additional software? I think that the main issue here is related to our rather liberal use of the term package. We don't limit the use of the term package to only PKG and MPKG packages. We also consider the following items "packages": - Disk images of an OS ("OS Package") - Disk images of any files that mirror the directory structure ("DMG Package") - Disk images of a Mac OS X Installer DVD ("OS X Installer Package") - Disk images of an Adobe Installer DVD ("Adobe Installer Package") - Disk images of an Adobe Updater ("Adobe Updater Package") - Winclone bundle ("Winclone Package") The imaging process is capable of utilizing any combination of these at installation time. The Adobe installers actually have to run the silent installation at the time of the first reboot (that is automated with the same process that handles the directory bindings at reboot), but all other installers run before the reboot. FileWAVE can also do a upgrade in place as well...the white paper needs to be updated since you can in fact do a Tiger>Leopard upgrade in place as scripting takes care of the old roadblocks: It would be great if JAMF had a plan to add this kind of functionality to Casper. Don -------------- next part -------------- An HTML attachment was scrubbed... URL: From ken.edgar at gmail.com Thu Oct 8 17:47:53 2009 From: ken.edgar at gmail.com (ken edgar) Date: Thu, 8 Oct 2009 19:47:53 -0500 Subject: [Casper] Creating distribution for QuarkXPress... All versions In-Reply-To: <71E9853B-D629-4FC6-B672-687C934795ED@gmail.com> References: <71E9853B-D629-4FC6-B672-687C934795ED@gmail.com> Message-ID: <4b4190f00910081747h6a4cc613m82f0df1f30777e92@mail.gmail.com> I agree that the QLA makes it easier... however what other software requires a machine or more for volume licensing to work? This to me is ridiculous. As much as I don't care for Adobe's installers... atleast I can re-package or setup a silent installer. Microsoft... just install or re-package and it works... Quark... too bad, Install one or more QLA servers which cost extra money and require some maintenance... or individually install. I was just hoping there was a way to get around it... for now I think I will stick with individual installs as painful as it is. We have people running 6.x 7.x and 8.x... all at different sites. I don't think QLA would make sense. On Thu, Oct 8, 2009 at 2:20 PM, Don Montalvo wrote: > "Smith, William" wrote: > > I was trying to stay away from needing a qla. ?Not too keen on thier >>> licensing >>> model. >>> >> >> Not to keen on their licensing model? >> >> With a QLA server, you're legally allowed to install QuarkXPress on as >> many >> machines as you choose without worrying about per seat licensing. That's >> fantastic! >> >> We've used QLA for the past few years and for the most part it just runs. >> It's serving both our Mac and Windows clients in more than a dozen sites >> around the world. If one server becomes unavailable then the backup takes >> over. If both are unavailable (such as a network outage) then each >> workstation can run up to 120 hours before having to reconnect. >> >> I won't say we haven't had problems a couple of times with the servers but >> they've been worth maintaining compared to having to maintain 80+ >> individual >> serial numbers. Plus, we've actually been able to reduce the number of >> licenses we'd have to maintain individually because not everyone uses >> QuarkXPress at the same time. >> >> The downside? Yes, you have to pay an additional fee to convert one of >> your >> stand-alone licenses to the QLA server license. It's been very worth it >> for >> us. >> >> I strongly suggest looking into it. >> > > Everything William said and then some. > > Having QLA also allows you to package QuarkXPress, along with the > QLAClient.properties license file (which should have DNS names for the main > and failover servers). Can't do that with individual licenses (unless you > create one pkg installer for each licensed copy. > > QLA servers can (and should) be set up with main/failover servers so > clients can continue to work if the main server goes down. If both servers > go down, you can push emergency keys out to the users so they can continue > to work. > > I can agree with the original poster if by "licensing model", they meant > the upgrade price, lack of cross upgrade offerings, etc. But one thing Quark > has their act together on is QLA. If Adobe followed their lead, there would > be a lot less "Adobe CS installer stinks" threads and articles circulating > on the internet. :) > > Don > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > -------------- next part -------------- An HTML attachment was scrubbed... URL: From ERNSTCS at uwec.edu Thu Oct 8 19:06:48 2009 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Thu, 8 Oct 2009 21:06:48 -0500 Subject: [Casper] Creating distribution for QuarkXPress... All versions In-Reply-To: <4b4190f00910081747h6a4cc613m82f0df1f30777e92@mail.gmail.com> Message-ID: I think there is an assumption made that in an environment that needs to support multiple licenses in a central location they would have some infrastructure in place to deal with this. We have several pieces of software that we host hardware hasps (even MORE fun) for on a Windows server. It?s a bit more common than I?d like. Regardless...I do agree, and although Adobe?s installer is a huge pain...at least they don?t also do mother ship license servers! Craig E On 10/8/09 7:47 PM, "ken edgar" wrote: I agree that the QLA makes it easier... however what other software requires a machine or more for volume licensing to work? This to me is ridiculous. As much as I don't care for Adobe's installers... atleast I can re-package or setup a silent installer. Microsoft... just install or re-package and it works... Quark... too bad, Install one or more QLA servers which cost extra money and require some maintenance... or individually install. I was just hoping there was a way to get around it... for now I think I will stick with individual installs as painful as it is. We have people running 6.x 7.x and 8.x... all at different sites. I don't think QLA would make sense. On Thu, Oct 8, 2009 at 2:20 PM, Don Montalvo wrote: "Smith, William" wrote: I was trying to stay away from needing a qla. ?Not too keen on thier licensing model. Not to keen on their licensing model? With a QLA server, you're legally allowed to install QuarkXPress on as many machines as you choose without worrying about per seat licensing. That's fantastic! We've used QLA for the past few years and for the most part it just runs. It's serving both our Mac and Windows clients in more than a dozen sites around the world. If one server becomes unavailable then the backup takes over. If both are unavailable (such as a network outage) then each workstation can run up to 120 hours before having to reconnect. I won't say we haven't had problems a couple of times with the servers but they've been worth maintaining compared to having to maintain 80+ individual serial numbers. Plus, we've actually been able to reduce the number of licenses we'd have to maintain individually because not everyone uses QuarkXPress at the same time. The downside? Yes, you have to pay an additional fee to convert one of your stand-alone licenses to the QLA server license. It's been very worth it for us. I strongly suggest looking into it. Everything William said and then some. Having QLA also allows you to package QuarkXPress, along with the QLAClient.properties license file (which should have DNS names for the main and failover servers). Can't do that with individual licenses (unless you create one pkg installer for each licensed copy. QLA servers can (and should) be set up with main/failover servers so clients can continue to work if the main server goes down. If both servers go down, you can push emergency keys out to the users so they can continue to work. I can agree with the original poster if by "licensing model", they meant the upgrade price, lack of cross upgrade offerings, etc. But one thing Quark has their act together on is QLA. If Adobe followed their lead, there would be a lot less "Adobe CS installer stinks" threads and articles circulating on the internet. :) Don _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From cmyers at uclan.ac.uk Thu Oct 8 22:38:57 2009 From: cmyers at uclan.ac.uk (Criss Myers) Date: Fri, 9 Oct 2009 06:38:57 +0100 Subject: [Casper] Creating distribution for QuarkXPress... All versions In-Reply-To: <4b4190f00910081747h6a4cc613m82f0df1f30777e92@mail.gmail.com> References: <71E9853B-D629-4FC6-B672-687C934795ED@gmail.com> <4b4190f00910081747h6a4cc613m82f0df1f30777e92@mail.gmail.com> Message-ID: <4AA2633B-4BB2-451A-B156-83880457718E@uclan.ac.uk> Sibelius network requires a server As do some other network versions of software Criss On 9 Oct 2009, at 01:47, ken edgar wrote: > I agree that the QLA makes it easier... however what other software > requires a machine or more for volume licensing to work? This to me > is ridiculous. As much as I don't care for Adobe's installers... > atleast I can re-package or setup a silent installer. Microsoft... > just install or re-package and it works... Quark... too bad, Install > one or more QLA servers which cost extra money and require some > maintenance... or individually install. > > I was just hoping there was a way to get around it... for now I > think I will stick with individual installs as painful as it is. We > have people running 6.x 7.x and 8.x... all at different sites. I > don't think QLA would make sense. > > On Thu, Oct 8, 2009 at 2:20 PM, Don Montalvo > wrote: > "Smith, William" wrote: > > I was trying to stay away from needing a qla. ?Not too keen on thier > licensing > model. > > Not to keen on their licensing model? > > With a QLA server, you're legally allowed to install QuarkXPress on > as many > machines as you choose without worrying about per seat licensing. > That's > fantastic! > > We've used QLA for the past few years and for the most part it just > runs. > It's serving both our Mac and Windows clients in more than a dozen > sites > around the world. If one server becomes unavailable then the backup > takes > over. If both are unavailable (such as a network outage) then each > workstation can run up to 120 hours before having to reconnect. > > I won't say we haven't had problems a couple of times with the > servers but > they've been worth maintaining compared to having to maintain 80+ > individual > serial numbers. Plus, we've actually been able to reduce the number of > licenses we'd have to maintain individually because not everyone uses > QuarkXPress at the same time. > > The downside? Yes, you have to pay an additional fee to convert one > of your > stand-alone licenses to the QLA server license. It's been very worth > it for > us. > > I strongly suggest looking into it. > > Everything William said and then some. > > Having QLA also allows you to package QuarkXPress, along with the > QLAClient.properties license file (which should have DNS names for > the main and failover servers). Can't do that with individual > licenses (unless you create one pkg installer for each licensed copy. > > QLA servers can (and should) be set up with main/failover servers so > clients can continue to work if the main server goes down. If both > servers go down, you can push emergency keys out to the users so > they can continue to work. > > I can agree with the original poster if by "licensing model", they > meant the upgrade price, lack of cross upgrade offerings, etc. But > one thing Quark has their act together on is QLA. If Adobe followed > their lead, there would be a lot less "Adobe CS installer stinks" > threads and articles circulating on the internet. :) > > Don > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From bazmail at bazmac.co.uk Fri Oct 9 04:00:52 2009 From: bazmail at bazmac.co.uk (Michael Curtis) Date: Fri, 9 Oct 2009 12:00:52 +0100 Subject: [Casper] NetInstall via Resource Kit Message-ID: Hi, I have made a Snow Leopard netinstall image with the resource kit, but when I quite Casper Imaging I get a kernal panic. The same thing happens with my Leopard 10.5.8 netinstall image made the same way. It does not kernal panic on the auto reboot after the image and the image boots fine. Any ideas? Best wishes Michael -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/pkcs7-signature Size: 2534 bytes Desc: not available URL: -------------- next part -------------- ***************************************************** This E-Mail has been scanned by Sophos Anti-Virus ***************************************************** From JStanford at serinocoyne.com Fri Oct 9 05:43:37 2009 From: JStanford at serinocoyne.com (Justin L. Stanford) Date: Fri, 9 Oct 2009 08:43:37 -0400 Subject: [Casper] NetInstall via Resource Kit In-Reply-To: References: Message-ID: <3739F6E2-E325-42B0-BDA3-6EE454DE4E33@serinocoyne.com> Michael- I spent most of the day yesterday trying to get a Snow Leopard 10.6 Netinstall image working, to no avail. It looked ok in the netboot console (image activated, service started) but I was unable to check the "diskless" check box and most importantly I was unable to boot to it or even see it as available in the "startup disk" area of system preferences instead I just saw a question mark there. This is on a Snow Leopard server install fully patched. I contacted JAMF support and they mentioned that they have seen problems using the Netinstall creator to make Snow Leopard Netinstall images, in that some of them were not functional, and instead suggested to create a standard Netboot image perhaps based on a "restore" image whereby it auto logs in as root, launches casper imaging.app. Since I created two separate Netinstall images that did not work and in fact rebuilt my casper server to snow leopard thinking that may be the issue I'm out of options so I'll be trying the netboot route today. -Justin On Oct 9, 2009, at 7:00 AM, Michael Curtis wrote: > Hi, > > I have made a Snow Leopard netinstall image with the resource kit, but > when I quite Casper Imaging I get a kernal panic. The same thing > happens with my Leopard 10.5.8 netinstall image made the same way. It > does not kernal panic on the auto reboot after the image and the image > boots fine. > > Any ideas? > > Best wishes > > Michael > > -- _____________________________________________________ This email is intended only for the person to which it is addressed and contains confidential information. If you have received this email in error, please delete the email and immediately notify us at (212) 626-2700, or by sending an email to support at serinocoyne.com. Thank You. From bfranke at ucls.uchicago.edu Fri Oct 9 06:09:58 2009 From: bfranke at ucls.uchicago.edu (Baker Franke) Date: Fri, 9 Oct 2009 08:09:58 -0500 Subject: [Casper] nightly imaging NOT happening...why God, why? Message-ID: <28D946DA-EB8A-44AE-B581-97BF7D217E5B@ucls.uchicago.edu> I have been having a dickens of a time getting my computer lab to image every night. I've been at it for a few weeks, and every time I think I have it solved, I don't. My current setup is this: - 26 machines, with a Restore partition, and packages cached. - 2 "scheduled tasks" that I use as policy triggers - one goes off at 10pm and one at 3am. Both triggers are scoped to the whole lab. - One policy, scoped to 13 of the machines triggered by the 10pm scheduled task, ongoing - it reboots the machine to the Restore partition - One policy, scoped to the other 13 machines triggered by the 3am scheduled task, ongoing - reboots the machine to the Restore partition. But every morning I wake up and the policy logs for those policies show that it hasn't run. Previously, of course, I just had one policy set to reboot the machines between 10pm and 4am, but I was getting inconsistent results and inconsistent imaging - packages not being installed, etc - probably due to bandwidth issues? Anyway, that's why I tried the alternate route of scheduled tasks. Anyway, if anyone has experience with policies not firing when they should, I'd like to hear about your experience(s). I'm very close to just adding a script to /etc/periodic/daily but I'd prefer to do the Casper solution. Thanks, -Baker -------------------------------------------------------------- Baker Franke Computer Science Dept. The University of Chicago Laboratory Schools 773.702.5419 From ERNSTCS at uwec.edu Fri Oct 9 07:48:45 2009 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Fri, 9 Oct 2009 09:48:45 -0500 Subject: [Casper] nightly imaging NOT happening...why God, why? In-Reply-To: <28D946DA-EB8A-44AE-B581-97BF7D217E5B@ucls.uchicago.edu> References: <28D946DA-EB8A-44AE-B581-97BF7D217E5B@ucls.uchicago.edu> Message-ID: <054FD66B-4C75-41DA-AB64-D4BDFE15BA35@uwec.edu> I would say check your scope (computers and network segments) and trigger in your policy Download Lingon on one of the systems and make sure scheduled policies are in launchd. Name com.jamfsoftware.... Check your logs for those times to see of there are errors. Try kicking the reboot task off manually on the system and watching what happens. On the terminal of the system type sudo /usr/sbin/jamf policy -trigger Where name is name your scheduled task in the JSS that triggers those policies. I would have console open to jamf.log too. Amd lastly, nightly reimages get REALLY hard on the drives. Might want to consider DeepFreeze if you MUSTbe back to square one each day. We just reboot and delete user homes each night now. Craig Ernst UW-Eau Claire (715) 836-3639 Sent from my iPhone On Oct 9, 2009, at 8:10 AM, "Baker Franke" wrote: > I have been having a dickens of a time getting my computer lab to > image every night. I've been at it for a few weeks, and every time I > think I have it solved, I don't. > > My current setup is this: > > - 26 machines, with a Restore partition, and packages cached. > - 2 "scheduled tasks" that I use as policy triggers - one goes off at > 10pm and one at 3am. Both triggers are scoped to the whole lab. > - One policy, scoped to 13 of the machines triggered by the 10pm > scheduled task, ongoing - it reboots the machine to the Restore > partition > - One policy, scoped to the other 13 machines triggered by the 3am > scheduled task, ongoing - reboots the machine to the Restore > partition. > > But every morning I wake up and the policy logs for those policies > show that it hasn't run. > > Previously, of course, I just had one policy set to reboot the > machines between 10pm and 4am, but I was getting inconsistent results > and inconsistent imaging - packages not being installed, etc - > probably due to bandwidth issues? Anyway, that's why I tried the > alternate route of scheduled tasks. > > > Anyway, if anyone has experience with policies not firing when they > should, I'd like to hear about your experience(s). > > I'm very close to just adding a script to /etc/periodic/daily but I'd > prefer to do the Casper solution. > > Thanks, > > -Baker > > > -------------------------------------------------------------- > Baker Franke > Computer Science Dept. > The University of Chicago Laboratory Schools > 773.702.5419 > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper From donmontalvo at gmail.com Fri Oct 9 08:32:32 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Fri, 9 Oct 2009 10:32:32 -0500 Subject: [Casper] Imaging Macs In-Reply-To: References: Message-ID: <8C14056A-9C93-4F40-B18B-CF9BE5B299F0@gmail.com> On Oct 8, 2009, at 6:07 PM, Zach Halmstad wrote: > Hey everyone- > > Just wanted to chime in from JAMF on a few things... > > >>> The base Mac OS X software is installed using block copy if you >>> create a >>> package. :-) But then you don't get the flexibility of multiple >>> configurations for one package file. :-( >> >> I'm not sure I follow. An image would be block copied to a target >> computer. A pkg installer would be a file copy. Are you saying Casper >> has a way of doing block copy using a pkg installer? >> >> Not sure if I'm confusing things. If we have an image containing OS X >> and common applications/tools (essentially, stuff every computer at >> the firm needs), can Casper deploy that image? Can the deployment >> process include running pkg installs for additional software? > > I think that the main issue here is related to our rather liberal > use of the term package. We don't limit the use of the term package > to only PKG and MPKG packages. We also consider the following items > "packages": > > - Disk images of an OS ("OS Package") > - Disk images of any files that mirror the directory structure ("DMG > Package") > - Disk images of a Mac OS X Installer DVD ("OS X Installer Package") > - Disk images of an Adobe Installer DVD ("Adobe Installer Package") > - Disk images of an Adobe Updater ("Adobe Updater Package") > - Winclone bundle ("Winclone Package") > > The imaging process is capable of utilizing any combination of these > at installation time. The Adobe installers actually have to run the > silent installation at the time of the first reboot (that is > automated with the same process that handles the directory bindings > at reboot), but all other installers run before the reboot. Zach, I appreciate your response. I guess I was confusing the Apple pkg/mpkg format with the generic "package" term. I had a conversation with my Wintel colleagues (who manage huge environments) over lunch about the Adobe installer fiasco and they all had the same opinion...if it works, go with it. I'm all for it, since we all have the same goal, to distribute stuff using the most efficient, reliable, manageable and cost effective method. That said, as some of use have experienced, the Adobe silent install can fail and leave you with a mess on your hands. How does Casper handle failure of Adobe silent install? I'm a huge fan of InstallDMG since it uses a very consistent and manageable method for image management. We have many environments set up with InstaDMG image workflows. How does the Casper Imaging workflow differ from the InstallDMG? Is it reasonable to assume that we can continue to use InstaDMG to manage our images (since it strictly uses Apple pkg/mpkg format installers as building blocks), and have Casper distribute the images - and along the way have Casper handle the cr at ppy Adobe installers on reboot? Trying to see if Casper can be used without having to re-architect workflows that are in place now (that work). Thanks, Don From donmontalvo at gmail.com Fri Oct 9 08:50:47 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Fri, 9 Oct 2009 10:50:47 -0500 Subject: [Casper] Imaging Macs In-Reply-To: <8C14056A-9C93-4F40-B18B-CF9BE5B299F0@gmail.com> References: <8C14056A-9C93-4F40-B18B-CF9BE5B299F0@gmail.com> Message-ID: On Oct 9, 2009, at 10:32 AM, Don Montalvo wrote: > > On Oct 8, 2009, at 6:07 PM, Zach Halmstad wrote: > >> Hey everyone- >> >> Just wanted to chime in from JAMF on a few things... >> >> >>>> The base Mac OS X software is installed using block copy if you >>>> create a >>>> package. :-) But then you don't get the flexibility of multiple >>>> configurations for one package file. :-( >>> >>> I'm not sure I follow. An image would be block copied to a target >>> computer. A pkg installer would be a file copy. Are you saying >>> Casper >>> has a way of doing block copy using a pkg installer? >>> >>> Not sure if I'm confusing things. If we have an image containing >>> OS X >>> and common applications/tools (essentially, stuff every computer at >>> the firm needs), can Casper deploy that image? Can the deployment >>> process include running pkg installs for additional software? >> >> I think that the main issue here is related to our rather liberal >> use of the term package. We don't limit the use of the term package >> to only PKG and MPKG packages. We also consider the following items >> "packages": >> >> - Disk images of an OS ("OS Package") >> - Disk images of any files that mirror the directory structure >> ("DMG Package") >> - Disk images of a Mac OS X Installer DVD ("OS X Installer Package") >> - Disk images of an Adobe Installer DVD ("Adobe Installer Package") >> - Disk images of an Adobe Updater ("Adobe Updater Package") >> - Winclone bundle ("Winclone Package") >> >> The imaging process is capable of utilizing any combination of >> these at installation time. The Adobe installers actually have to >> run the silent installation at the time of the first reboot (that >> is automated with the same process that handles the directory >> bindings at reboot), but all other installers run before the reboot. > > Zach, > > I appreciate your response. I guess I was confusing the Apple pkg/ > mpkg format with the generic "package" term. I had a conversation > with my Wintel colleagues (who manage huge environments) over lunch > about the Adobe installer fiasco and they all had the same > opinion...if it works, go with it. I'm all for it, since we all have > the same goal, to distribute stuff using the most efficient, > reliable, manageable and cost effective method. That said, as some > of use have experienced, the Adobe silent install can fail and leave > you with a mess on your hands. How does Casper handle failure of > Adobe silent install? > > I'm a huge fan of InstallDMG since it uses a very consistent and > manageable method for image management. We have many environments > set up with InstaDMG image workflows. How does the Casper Imaging > workflow differ from the InstallDMG? Is it reasonable to assume that > we can continue to use InstaDMG to manage our images (since it > strictly uses Apple pkg/mpkg format installers as building blocks), > and have Casper distribute the images - and along the way have > Casper handle the cr at ppy Adobe installers on reboot? Trying to see > if Casper can be used without having to re-architect workflows that > are in place now (that work). > > Thanks, > Don Of course I meant InstaDMG... From swood at integer.com Fri Oct 9 08:52:50 2009 From: swood at integer.com (Steve Wood) Date: Fri, 9 Oct 2009 10:52:50 -0500 Subject: [Casper] Imaging Macs In-Reply-To: <8C14056A-9C93-4F40-B18B-CF9BE5B299F0@gmail.com> References: <8C14056A-9C93-4F40-B18B-CF9BE5B299F0@gmail.com> Message-ID: <438f5a310910090852s14e0bdb4kbf3850505c17f91@mail.gmail.com> You can absolutely continue to use InstaDMG to create the base image. Like you I love InstaDMG and use it for my base images. I have seen some issues trying to create 10.6 images with the 1.4 and even the 1.5 versions of InstaDMG, but I'm just testing now and can wait for those to work themselves out. I create a base OS image using InstaDMG and then layer on all of the other application installs. All of this is done thru Casper. The only item I do not push as part of the initial imaging process are my Adobe installs. I've seen the Adobe installs hang up after the first reboot and cause problems. Instead I have a policy that installs Adobe products on first login to the machine. During initial imaging I set the name of the computer to the MAC address prefixed by the word IMAGED. I then have a Smart Group set to collect all of these imaged machines. The policy that pushes Adobe installs is scoped to that Smart Group. Hence, at login Adobe software and udpates are all pushed. I capture all current Adobe updates via Composer and build a package of udpates to push to the machines. Using this method I have had zero issues pushing Adobe software. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Fri, Oct 9, 2009 at 10:32 AM, Don Montalvo wrote: > > On Oct 8, 2009, at 6:07 PM, Zach Halmstad wrote: > > Hey everyone- >> >> Just wanted to chime in from JAMF on a few things... >> >> >> The base Mac OS X software is installed using block copy if you >>>> create a >>>> package. :-) But then you don't get the flexibility of multiple >>>> configurations for one package file. :-( >>>> >>> >>> I'm not sure I follow. An image would be block copied to a target >>> computer. A pkg installer would be a file copy. Are you saying Casper >>> has a way of doing block copy using a pkg installer? >>> >>> Not sure if I'm confusing things. If we have an image containing OS X >>> and common applications/tools (essentially, stuff every computer at >>> the firm needs), can Casper deploy that image? Can the deployment >>> process include running pkg installs for additional software? >>> >> >> I think that the main issue here is related to our rather liberal use of >> the term package. We don't limit the use of the term package to only PKG and >> MPKG packages. We also consider the following items "packages": >> >> - Disk images of an OS ("OS Package") >> - Disk images of any files that mirror the directory structure ("DMG >> Package") >> - Disk images of a Mac OS X Installer DVD ("OS X Installer Package") >> - Disk images of an Adobe Installer DVD ("Adobe Installer Package") >> - Disk images of an Adobe Updater ("Adobe Updater Package") >> - Winclone bundle ("Winclone Package") >> >> The imaging process is capable of utilizing any combination of these at >> installation time. The Adobe installers actually have to run the silent >> installation at the time of the first reboot (that is automated with the >> same process that handles the directory bindings at reboot), but all other >> installers run before the reboot. >> > > Zach, > > I appreciate your response. I guess I was confusing the Apple pkg/mpkg > format with the generic "package" term. I had a conversation with my Wintel > colleagues (who manage huge environments) over lunch about the Adobe > installer fiasco and they all had the same opinion...if it works, go with > it. I'm all for it, since we all have the same goal, to distribute stuff > using the most efficient, reliable, manageable and cost effective method. > That said, as some of use have experienced, the Adobe silent install can > fail and leave you with a mess on your hands. How does Casper handle failure > of Adobe silent install? > > I'm a huge fan of InstallDMG since it uses a very consistent and manageable > method for image management. We have many environments set up with InstaDMG > image workflows. How does the Casper Imaging workflow differ from the > InstallDMG? Is it reasonable to assume that we can continue to use InstaDMG > to manage our images (since it strictly uses Apple pkg/mpkg format > installers as building blocks), and have Casper distribute the images - and > along the way have Casper handle the cr at ppy Adobe installers on reboot? > Trying to see if Casper can be used without having to re-architect workflows > that are in place now (that work). > > Thanks, > Don > > > > > > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > -------------- next part -------------- An HTML attachment was scrubbed... URL: From aavarca at anl.gov Fri Oct 9 10:24:48 2009 From: aavarca at anl.gov (Anthony Avarca) Date: Fri, 9 Oct 2009 12:24:48 -0500 Subject: [Casper] Script's in Resource Kit Message-ID: All, When using the following scripts from the Resource Kit: setTimeServer.sh enableFileSharing.sh enableFirewall.sh encryptVirtualMemory.sh I receive the following errors: /usr/sbin/jamf is version 7.01 Executing Policy ACI Compliance Preferences... Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//enableFileSharing.sh ... Running Script enableFileSharing.sh... Script Exit Code:2 Script Result: /private/tmp/enableFileSharing.sh: line 1: syntax error near unexpected token `newline' /private/tmp/enableFileSharing.sh: line 1: `' Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//enableFirewall.sh ... Running Script enableFirewall.sh... Script Exit Code:2 Script Result: /private/tmp/enableFirewall.sh: line 1: syntax error near unexpected token `newline' /private/tmp/enableFirewall.sh: line 1: `' Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//encryptVirtualMemory.sh ... Running Script encryptVirtualMemory.sh... Script Exit Code:2 Script Result: /private/tmp/encryptVirtualMemory.sh: line 1: syntax error near unexpected token `newline' /private/tmp/encryptVirtualMemory.sh: line 1: `' Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//ACIsetTimeServer.sh ... Running Script ACIsetTimeServer.sh... Script Exit Code:2 Script Result: /private/tmp/ACIsetTimeServer.sh: line 1: syntax error near unexpected token `newline' /private/tmp/ACIsetTimeServer.sh: line 1: `' I'm running the scripts has a policy that execute at login, (tried startup as well). I tried hard coding the values into the script, and specifying the value in parameter 4 of JSS. Any ideas why the script does not work? When hard coded, script runs fine in terminal. Anthony Avarca aavarca at anl.gov 630.252.4940 -------------- next part -------------- An HTML attachment was scrubbed... URL: From rcorbin at mac.com Fri Oct 9 10:33:08 2009 From: rcorbin at mac.com (Roger Corbin) Date: Fri, 09 Oct 2009 13:33:08 -0400 Subject: [Casper] Optimum "max_allowed_packet" variable In-Reply-To: References: Message-ID: <3105882A-749F-474C-9B78-00E985AF9E8C@mac.com> I was recently trying to flush a large log and it came up with an error. Did a little reading and I think it's because my max packet size was set to the default of 1M. I see in the JSS Utility you can take it up to 16MB. Is there an optimum setting ? The server is 8 core Mac Pro with 8GB of RAM running Leopard Server. Roger Corbin Richmond SD38 From cmyers at uclan.ac.uk Fri Oct 9 10:45:53 2009 From: cmyers at uclan.ac.uk (Criss Myers) Date: Fri, 9 Oct 2009 18:45:53 +0100 Subject: [Casper] Script's in Resource Kit In-Reply-To: References: Message-ID: Did u tab from one parameter to the next when u set them I think that's a bug in setting parameters On 9 Oct 2009, at 18:24, Anthony Avarca wrote: > All, > > When using the following scripts from the Resource Kit: > > setTimeServer.sh > enableFileSharing.sh > enableFirewall.sh > encryptVirtualMemory.sh > > I receive the following errors: > > /usr/sbin/jamf is version 7.01 > Executing Policy ACI Compliance Preferences... > Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//enableFileSharing.sh > ... > Running Script enableFileSharing.sh... > Script Exit Code:2 > Script Result: /private/tmp/enableFileSharing.sh: line 1: syntax > error near unexpected token `newline' > /private/tmp/enableFileSharing.sh: line 1: `' > Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//enableFirewall.sh > ... > Running Script enableFirewall.sh... > Script Exit Code:2 > Script Result: /private/tmp/enableFirewall.sh: line 1: syntax error > near unexpected token `newline' > /private/tmp/enableFirewall.sh: line 1: `' > Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//encryptVirtualMemory.sh > ... > Running Script encryptVirtualMemory.sh... > Script Exit Code:2 > Script Result: /private/tmp/encryptVirtualMemory.sh: line 1: syntax > error near unexpected token `newline' > /private/tmp/encryptVirtualMemory.sh: line 1: `' > Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//ACIsetTimeServer.sh > ... > Running Script ACIsetTimeServer.sh... > Script Exit Code:2 > Script Result: /private/tmp/ACIsetTimeServer.sh: line 1: syntax > error near unexpected token `newline' > /private/tmp/ACIsetTimeServer.sh: line 1: `' > > > I'm running the scripts has a policy that execute at login, (tried > startup as well). I tried hard coding the values into the script, > and specifying the value in parameter 4 of JSS. > > Any ideas why the script does not work? When hard coded, script runs > fine in terminal. > > Anthony Avarca > aavarca at anl.gov > 630.252.4940 > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From aavarca at anl.gov Fri Oct 9 11:22:57 2009 From: aavarca at anl.gov (Anthony Avarca) Date: Fri, 9 Oct 2009 13:22:57 -0500 (CDT) Subject: [Casper] Script's in Resource Kit In-Reply-To: Message-ID: <13787987.1338311255112577354.JavaMail.root@zimbra> I recreated the policy, without using tab to set parameters, but the outcome is the same. Here is additional info from the system that might help bring more? clarity: Oct ?9 13:19:02 caspertest com.apple.loginwindow[5492]: Executing Policy ACI Compliance Preferences... Oct ?9 13:19:02 caspertest com.apple.loginwindow[5492]: Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//enableFileSharing.sh... Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: Running Script enableFileSharing.sh... Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: Script Exit Code:2 Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: Script Result: /private/tmp/enableFileSharing.sh: line 1: syntax error near unexpected token `newline' Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: /private/tmp/enableFileSharing.sh: line 1: `' Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//enableFirewall.sh... Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: Running Script enableFirewall.sh... Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: Script Exit Code:2 Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: Script Result: /private/tmp/enableFirewall.sh: line 1: syntax error near unexpected token `newline' Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: /private/tmp/enableFirewall.sh: line 1: `' Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//encryptVirtualMemory.sh... Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: Running Script encryptVirtualMemory.sh... Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: Script Exit Code:2 Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: Script Result: /private/tmp/encryptVirtualMemory.sh: line 1: syntax error near unexpected token `newline' Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: /private/tmp/encryptVirtualMemory.sh: line 1: `' Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//ACIsetTimeServer.sh... Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: Running Script ACIsetTimeServer.sh... Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: Script Exit Code:2 Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: Script Result: /private/tmp/ACIsetTimeServer.sh: line 1: syntax error near unexpected token `newline' Oct ?9 13:19:03 caspertest com.apple.loginwindow[5492]: /private/tmp/ACIsetTimeServer.sh: line 1: `' Oct ?9 13:19:04 caspertest com.apple.loginwindow[5492]: Submitting log to https://zaphod.it.anl.gov:8443/... ? ----- Original Message ----- From: "Criss Myers" To: "Anthony Avarca" Cc: casper at list.jamfsoftware.com Sent: Friday, October 9, 2009 12:45:53 PM GMT -06:00 US/Canada Central Subject: Re: [Casper] Script's in Resource Kit Did u tab from one parameter to the next when u set them I think that's a bug in setting parameters? On 9 Oct 2009, at 18:24, Anthony Avarca < aavarca at anl.gov > wrote: All, When using the following scripts from the Resource Kit: setTimeServer.sh enableFileSharing.sh enableFirewall.sh encryptVirtualMemory.sh I receive the following errors: /usr/sbin/jamf is version 7.01 Executing Policy ACI Compliance Preferences... Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//enableFileSharing.sh ... Running Script enableFileSharing.sh... Script Exit Code:2 Script Result: /private/tmp/enableFileSharing.sh: line 1: syntax error near unexpected token `newline' /private/tmp/enableFileSharing.sh: line 1: `' Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//enableFirewall.sh ... Running Script enableFirewall.sh... Script Exit Code:2 Script Result: /private/tmp/enableFirewall.sh: line 1: syntax error near unexpected token `newline' /private/tmp/enableFirewall.sh: line 1: `' Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//encryptVirtualMemory.sh ... Running Script encryptVirtualMemory.sh... Script Exit Code:2 Script Result: /private/tmp/encryptVirtualMemory.sh: line 1: syntax error near unexpected token `newline' /private/tmp/encryptVirtualMemory.sh: line 1: `' Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//ACIsetTimeServer.sh ... Running Script ACIsetTimeServer.sh... Script Exit Code:2 Script Result: /private/tmp/ACIsetTimeServer.sh: line 1: syntax error near unexpected token `newline' /private/tmp/ACIsetTimeServer.sh: line 1: `' I'm running the scripts has a policy that execute at login, (tried startup as well). I tried hard coding the values into the script, and specifying the value in parameter 4 of JSS.? Any ideas why the script does not work? When hard coded, script runs fine in terminal.? Anthony Avarca aavarca at anl.gov 630.252.4940 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From tonyswu at mac.com Fri Oct 9 19:22:42 2009 From: tonyswu at mac.com (Tony S. Wu) Date: Fri, 09 Oct 2009 19:22:42 -0700 Subject: [Casper] Script's in Resource Kit In-Reply-To: <13787987.1338311255112577354.JavaMail.root@zimbra> References: <13787987.1338311255112577354.JavaMail.root@zimbra> Message-ID: <199C0292-1B42-47C1-8339-ABEFF5E09AA5@mac.com> open the script file, go to the beginning of the second line. press delete to remove the return on the first line. then press enter again. save, and then try the script again. Tony S. Wu tonyswu at mac.com On Oct 9, 2009, at 11:22 AM, Anthony Avarca wrote: > I recreated the policy, without using tab to set parameters, but the > outcome is the same. Here is additional info from the system that > might help bring more clarity: > > > Oct 9 13:19:02 caspertest com.apple.loginwindow[5492]: Executing > Policy ACI Compliance Preferences... > Oct 9 13:19:02 caspertest com.apple.loginwindow[5492]: Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//enableFileSharing.sh > ... > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: Running > Script enableFileSharing.sh... > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: Script Exit > Code:2 > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: Script > Result: /private/tmp/enableFileSharing.sh: line 1: syntax error near > unexpected token `newline' > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: /private/tmp/ > enableFileSharing.sh: line 1: ` encoding="ISO-8859-1"?>' > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//enableFirewall.sh > ... > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: Running > Script enableFirewall.sh... > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: Script Exit > Code:2 > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: Script > Result: /private/tmp/enableFirewall.sh: line 1: syntax error near > unexpected token `newline' > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: /private/tmp/ > enableFirewall.sh: line 1: ` encoding="ISO-8859-1"?>' > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//encryptVirtualMemory.sh > ... > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: Running > Script encryptVirtualMemory.sh... > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: Script Exit > Code:2 > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: Script > Result: /private/tmp/encryptVirtualMemory.sh: line 1: syntax error > near unexpected token `newline' > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: /private/tmp/ > encryptVirtualMemory.sh: line 1: ` encoding="ISO-8859-1"?>' > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//ACIsetTimeServer.sh > ... > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: Running > Script ACIsetTimeServer.sh... > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: Script Exit > Code:2 > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: Script > Result: /private/tmp/ACIsetTimeServer.sh: line 1: syntax error near > unexpected token `newline' > Oct 9 13:19:03 caspertest com.apple.loginwindow[5492]: /private/tmp/ > ACIsetTimeServer.sh: line 1: ` encoding="ISO-8859-1"?>' > Oct 9 13:19:04 caspertest com.apple.loginwindow[5492]: Submitting > log to https://zaphod.it.anl.gov:8443/... > > > > ----- Original Message ----- > From: "Criss Myers" > To: "Anthony Avarca" > Cc: casper at list.jamfsoftware.com > Sent: Friday, October 9, 2009 12:45:53 PM GMT -06:00 US/Canada Central > Subject: Re: [Casper] Script's in Resource Kit > > Did u tab from one parameter to the next when u set them > > I think that's a bug in setting parameters > > On 9 Oct 2009, at 18:24, Anthony Avarca wrote: > > All, > > When using the following scripts from the Resource Kit: > > setTimeServer.sh > enableFileSharing.sh > enableFirewall.sh > encryptVirtualMemory.sh > > I receive the following errors: > > /usr/sbin/jamf is version 7.01 > Executing Policy ACI Compliance Preferences... > Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//enableFileSharing.sh > ... > Running Script enableFileSharing.sh... > Script Exit Code:2 > Script Result: /private/tmp/enableFileSharing.sh: line 1: syntax > error near unexpected token `newline' > /private/tmp/enableFileSharing.sh: line 1: `' > Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//enableFirewall.sh > ... > Running Script enableFirewall.sh... > Script Exit Code:2 > Script Result: /private/tmp/enableFirewall.sh: line 1: syntax error > near unexpected token `newline' > /private/tmp/enableFirewall.sh: line 1: `' > Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//encryptVirtualMemory.sh > ... > Running Script encryptVirtualMemory.sh... > Script Exit Code:2 > Script Result: /private/tmp/encryptVirtualMemory.sh: line 1: syntax > error near unexpected token `newline' > /private/tmp/encryptVirtualMemory.sh: line 1: `' > Downloading http://zaphod.it.anl.gov:80/CasperShare/Scripts//ACIsetTimeServer.sh > ... > Running Script ACIsetTimeServer.sh... > Script Exit Code:2 > Script Result: /private/tmp/ACIsetTimeServer.sh: line 1: syntax > error near unexpected token `newline' > /private/tmp/ACIsetTimeServer.sh: line 1: `' > > > I'm running the scripts has a policy that execute at login, (tried > startup as well). I tried hard coding the values into the script, > and specifying the value in parameter 4 of JSS. > > Any ideas why the script does not work? When hard coded, script runs > fine in terminal. > > Anthony Avarca > aavarca at anl.gov > 630.252.4940 > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From joseph.tesauro at jwt.com Sat Oct 10 12:20:19 2009 From: joseph.tesauro at jwt.com (joseph.tesauro at jwt.com) Date: Sat, 10 Oct 2009 15:20:19 -0400 Subject: [Casper] Joseph Tesauro is out of the office. Message-ID: I will be out of the office starting 10/09/2009 and will not return until 10/19/2009. I will respond to your message when I return.

This transmission is intended solely for the person or organization to whom it is addressed and it may contain privileged and confidential information. If you are not the intended recipient you should not copy, distribute or take any action in reliance on it. If you believe you received this transmission in error please notify the sender.

-------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Mon Oct 12 05:43:56 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 12 Oct 2009 07:43:56 -0500 Subject: [Casper] nightly imaging NOT happening...why God, why? In-Reply-To: <054FD66B-4C75-41DA-AB64-D4BDFE15BA35@uwec.edu> References: <28D946DA-EB8A-44AE-B581-97BF7D217E5B@ucls.uchicago.edu> <054FD66B-4C75-41DA-AB64-D4BDFE15BA35@uwec.edu> Message-ID: <4AD2DE3B.7141.0039.0@kckps.org> FYI to everyone Lingon is retired, Peter Borg is no longer supporting it. It is up on sourceforge.net and so is the source code, so hopefully someone will pick it up and continue to publish it. Not sure if Lingon works with Snow Leopard. This is just a FYI as I just recently found this out myself. If you are a developer or know one, urge them to keep the project alive! As for this, here is what I can say about troubleshooting the issue you have. I would ensure that the machine is managed with the proper ssh account and password. I would ensure that all shares it is pulling from have proper permissions and that the user accounts that casper uses for read and write have proper POSIX or ACLs enabled. I like what Craig mentioned, try it manually make sure it works manually. Also check the JSS logs to see if it is even running. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Ernst, Craig S." 10/09/09 9:48 AM >>> I would say check your scope (computers and network segments) and trigger in your policy Download Lingon on one of the systems and make sure scheduled policies are in launchd. Name com.jamfsoftware.... Check your logs for those times to see of there are errors. Try kicking the reboot task off manually on the system and watching what happens. On the terminal of the system type sudo /usr/sbin/jamf policy -trigger Where name is name your scheduled task in the JSS that triggers those policies. I would have console open to jamf.log too. Amd lastly, nightly reimages get REALLY hard on the drives. Might want to consider DeepFreeze if you MUSTbe back to square one each day. We just reboot and delete user homes each night now. Craig Ernst UW-Eau Claire (715) 836-3639 Sent from my iPhone On Oct 9, 2009, at 8:10 AM, "Baker Franke" wrote: > I have been having a dickens of a time getting my computer lab to > image every night. I've been at it for a few weeks, and every time I > think I have it solved, I don't. > > My current setup is this: > > - 26 machines, with a Restore partition, and packages cached. > - 2 "scheduled tasks" that I use as policy triggers - one goes off at > 10pm and one at 3am. Both triggers are scoped to the whole lab. > - One policy, scoped to 13 of the machines triggered by the 10pm > scheduled task, ongoing - it reboots the machine to the Restore > partition > - One policy, scoped to the other 13 machines triggered by the 3am > scheduled task, ongoing - reboots the machine to the Restore > partition. > > But every morning I wake up and the policy logs for those policies > show that it hasn't run. > > Previously, of course, I just had one policy set to reboot the > machines between 10pm and 4am, but I was getting inconsistent results > and inconsistent imaging - packages not being installed, etc - > probably due to bandwidth issues? Anyway, that's why I tried the > alternate route of scheduled tasks. > > > Anyway, if anyone has experience with policies not firing when they > should, I'd like to hear about your experience(s). > > I'm very close to just adding a script to /etc/periodic/daily but I'd > prefer to do the Casper solution. > > Thanks, > > -Baker > > > -------------------------------------------------------------- > Baker Franke > Computer Science Dept. > The University of Chicago Laboratory Schools > 773.702.5419 > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From bfranke at ucls.uchicago.edu Mon Oct 12 05:49:44 2009 From: bfranke at ucls.uchicago.edu (Baker Franke) Date: Mon, 12 Oct 2009 07:49:44 -0500 Subject: [Casper] nightly imaging NOT happening...why God, why? In-Reply-To: <4AD2DE3B.7141.0039.0@kckps.org> References: <28D946DA-EB8A-44AE-B581-97BF7D217E5B@ucls.uchicago.edu> <054FD66B-4C75-41DA-AB64-D4BDFE15BA35@uwec.edu> <4AD2DE3B.7141.0039.0@kckps.org> Message-ID: <06C18ED8-4128-4990-B91A-F2D73C623BDA@ucls.uchicago.edu> Yes, I tried it manually and discovered the problem was with one of my policies, in which a script snuck in that was rebooting the machine before the rest of the policy could execute...d'oh! So, that was the issue. Of course, since then, Craig has convinced me that imaging the machines nightly is probably not a good thing for the hard drives. So now I'm reinventing the wheel, and just doing a "little" nightly cleanup to see if I can avoid re-imaging all the time. Thanks, -Baker On Oct 12, 2009, at 7:43 AM, Thomas Larkin wrote: > FYI to everyone > > Lingon is retired, Peter Borg is no longer supporting it. It is up > on sourceforge.net and so is the source code, so hopefully someone > will pick it up and continue to publish it. Not sure if Lingon > works with Snow Leopard. This is just a FYI as I just recently > found this out myself. If you are a developer or know one, urge > them to keep the project alive! > > As for this, here is what I can say about troubleshooting the issue > you have. I would ensure that the machine is managed with the > proper ssh account and password. I would ensure that all shares it > is pulling from have proper permissions and that the user accounts > that casper uses for read and write have proper POSIX or ACLs enabled. > > I like what Craig mentioned, try it manually make sure it works > manually. Also check the JSS logs to see if it is even running. > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > > > > > > >>> "Ernst, Craig S." 10/09/09 9:48 AM >>> > I would say check your scope (computers and network segments) and > trigger in your policy > > Download Lingon on one of the systems and make sure scheduled policies > are in launchd. Name com.jamfsoftware.... > > Check your logs for those times to see of there are errors. > > Try kicking the reboot task off manually on the system and watching > what happens. On the terminal of the system type > > sudo /usr/sbin/jamf policy -trigger > > Where name is name your scheduled task in the JSS that triggers those > policies. I would have console open to jamf.log too. > > Amd lastly, nightly reimages get REALLY hard on the drives. Might want > to consider DeepFreeze if you MUSTbe back to square one each day. We > just reboot and delete user homes each night now. > > Craig Ernst > UW-Eau Claire > (715) 836-3639 > > Sent from my iPhone > > On Oct 9, 2009, at 8:10 AM, "Baker Franke" > wrote: > > > I have been having a dickens of a time getting my computer lab to > > image every night. I've been at it for a few weeks, and every > time I > > think I have it solved, I don't. > > > > My current setup is this: > > > > - 26 machines, with a Restore partition, and packages cached. > > - 2 "scheduled tasks" that I use as policy triggers - one goes off > at > > 10pm and one at 3am. Both triggers are scoped to the whole lab. > > - One policy, scoped to 13 of the machines triggered by the 10pm > > scheduled task, ongoing - it reboots the machine to the Restore > > partition > > - One policy, scoped to the other 13 machines triggered by the 3am > > scheduled task, ongoing - reboots the machine to the Restore > > partition. > > > > But every morning I wake up and the policy logs for those policies > > show that it hasn't run. > > > > Previously, of course, I just had one policy set to reboot the > > machines between 10pm and 4am, but I was getting inconsistent > results > > and inconsistent imaging - packages not being installed, etc - > > probably due to bandwidth issues? Anyway, that's why I tried the > > alternate route of scheduled tasks. > > > > > > Anyway, if anyone has experience with policies not firing when they > > should, I'd like to hear about your experience(s). > > > > I'm very close to just adding a script to /etc/periodic/daily but > I'd > > prefer to do the Casper solution. > > > > Thanks, > > > > -Baker > > > > > > -------------------------------------------------------------- > > Baker Franke > > Computer Science Dept. > > The University of Chicago Laboratory Schools > > 773.702.5419 > > > > _______________________________________________ > > Casper mailing list > > Casper at list.jamfsoftware.com > > http://list.jamfsoftware.com/mailman/listinfo/casper > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Mon Oct 12 07:02:26 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 12 Oct 2009 09:02:26 -0500 Subject: [Casper] nightly imaging NOT happening...why God, why? In-Reply-To: <06C18ED8-4128-4990-B91A-F2D73C623BDA@ucls.uchicago.edu> References: <28D946DA-EB8A-44AE-B581-97BF7D217E5B@ucls.uchicago.edu> <054FD66B-4C75-41DA-AB64-D4BDFE15BA35@uwec.edu> <4AD2DE3B.7141.0039.0@kckps.org> <06C18ED8-4128-4990-B91A-F2D73C623BDA@ucls.uchicago.edu> Message-ID: <4AD2F0A2.7141.0039.0@kckps.org> I sent out an email to the list but it never got posted.... What exactly are you trying to clean out every night? ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Baker Franke 10/12/09 7:49 AM >>> Yes, I tried it manually and discovered the problem was with one of my policies, in which a script snuck in that was rebooting the machine before the rest of the policy could execute...d'oh! So, that was the issue. Of course, since then, Craig has convinced me that imaging the machines nightly is probably not a good thing for the hard drives. So now I'm reinventing the wheel, and just doing a "little" nightly cleanup to see if I can avoid re-imaging all the time. Thanks, -Baker On Oct 12, 2009, at 7:43 AM, Thomas Larkin wrote: FYI to everyone Lingon is retired, Peter Borg is no longer supporting it. It is up on sourceforge.net and so is the source code, so hopefully someone will pick it up and continue to publish it. Not sure if Lingon works with Snow Leopard. This is just a FYI as I just recently found this out myself. If you are a developer or know one, urge them to keep the project alive! As for this, here is what I can say about troubleshooting the issue you have. I would ensure that the machine is managed with the proper ssh account and password. I would ensure that all shares it is pulling from have proper permissions and that the user accounts that casper uses for read and write have proper POSIX or ACLs enabled. I like what Craig mentioned, try it manually make sure it works manually. Also check the JSS logs to see if it is even running. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Ernst, Craig S." 10/09/09 9:48 AM >>> I would say check your scope (computers and network segments) and trigger in your policy Download Lingon on one of the systems and make sure scheduled policies are in launchd. Name com.jamfsoftware.... Check your logs for those times to see of there are errors. Try kicking the reboot task off manually on the system and watching what happens. On the terminal of the system type sudo /usr/sbin/jamf policy -trigger Where name is name your scheduled task in the JSS that triggers those policies. I would have console open to jamf.log too. Amd lastly, nightly reimages get REALLY hard on the drives. Might want to consider DeepFreeze if you MUSTbe back to square one each day. We just reboot and delete user homes each night now. Craig Ernst UW-Eau Claire (715) 836-3639 Sent from my iPhone On Oct 9, 2009, at 8:10 AM, "Baker Franke" wrote: > I have been having a dickens of a time getting my computer lab to > image every night. I've been at it for a few weeks, and every time I > think I have it solved, I don't. > > My current setup is this: > > - 26 machines, with a Restore partition, and packages cached. > - 2 "scheduled tasks" that I use as policy triggers - one goes off at > 10pm and one at 3am. Both triggers are scoped to the whole lab. > - One policy, scoped to 13 of the machines triggered by the 10pm > scheduled task, ongoing - it reboots the machine to the Restore > partition > - One policy, scoped to the other 13 machines triggered by the 3am > scheduled task, ongoing - reboots the machine to the Restore > partition. > > But every morning I wake up and the policy logs for those policies > show that it hasn't run. > > Previously, of course, I just had one policy set to reboot the > machines between 10pm and 4am, but I was getting inconsistent results > and inconsistent imaging - packages not being installed, etc - > probably due to bandwidth issues? Anyway, that's why I tried the > alternate route of scheduled tasks. > > > Anyway, if anyone has experience with policies not firing when they > should, I'd like to hear about your experience(s). > > I'm very close to just adding a script to /etc/periodic/daily but I'd > prefer to do the Casper solution. > > Thanks, > > -Baker > > > -------------------------------------------------------------- > Baker Franke > Computer Science Dept. > The University of Chicago Laboratory Schools > 773.702.5419 > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From ERNSTCS at uwec.edu Mon Oct 12 07:04:49 2009 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Mon, 12 Oct 2009 09:04:49 -0500 Subject: [Casper] nightly imaging NOT happening...why God, why? In-Reply-To: <4AD2F0A2.7141.0039.0@kckps.org> References: <28D946DA-EB8A-44AE-B581-97BF7D217E5B@ucls.uchicago.edu> <054FD66B-4C75-41DA-AB64-D4BDFE15BA35@uwec.edu> <4AD2DE3B.7141.0039.0@kckps.org> <06C18ED8-4128-4990-B91A-F2D73C623BDA@ucls.uchicago.edu> <4AD2F0A2.7141.0039.0@kckps.org> Message-ID: <6A2E3F8F-D46E-4324-AD3B-97F9D6B9BC1A@uwec.edu> We got your message earlier. Craig Ernst UW-Eau Claire (715) 836-3639 Sent from my iPhone On Oct 12, 2009, at 7:02 AM, "Thomas Larkin" > wrote: I sent out an email to the list but it never got posted.... What exactly are you trying to clean out every night? ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Baker Franke > 10/12/09 7:49 AM >>> Yes, I tried it manually and discovered the problem was with one of my policies, in which a script snuck in that was rebooting the machine before the rest of the policy could execute...d'oh! So, that was the issue. Of course, since then, Craig has convinced me that imaging the machines nightly is probably not a good thing for the hard drives. So now I'm reinventing the wheel, and just doing a "little" nightly cleanup to see if I can avoid re-imaging all the time. Thanks, -Baker On Oct 12, 2009, at 7:43 AM, Thomas Larkin wrote: FYI to everyone Lingon is retired, Peter Borg is no longer supporting it. It is up on sourceforge.net and so is the source code, so hopefully someone will pick it up and continue to publish it. Not sure if Lingon works with Snow Leopard. This is just a FYI as I just recently found this out myself. If you are a developer or know one, urge them to keep the project alive! As for this, here is what I can say about troubleshooting the issue you have. I would ensure that the machine is managed with the proper ssh account and password. I would ensure that all shares it is pulling from have proper permissions and that the user accounts that casper uses for read and write have proper POSIX or ACLs enabled. I like what Craig mentioned, try it manually make sure it works manually. Also check the JSS logs to see if it is even running. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Ernst, Craig S." <ERNSTCS at uwec.edu> 10/09/09 9:48 AM >>> I would say check your scope (computers and network segments) and trigger in your policy Download Lingon on one of the systems and make sure scheduled policies are in launchd. Name com.jamfsoftware.... Check your logs for those times to see of there are errors. Try kicking the reboot task off manually on the system and watching what happens. On the terminal of the system type sudo /usr/sbin/jamf policy -trigger Where name is name your scheduled task in the JSS that triggers those policies. I would have console open to jamf.log too. Amd lastly, nightly reimages get REALLY hard on the drives. Might want to consider DeepFreeze if you MUSTbe back to square one each day. We just reboot and delete user homes each night now. Craig Ernst UW-Eau Claire (715) 836-3639 Sent from my iPhone On Oct 9, 2009, at 8:10 AM, "Baker Franke" <bfranke at ucls.uchicago.edu> wrote: > I have been having a dickens of a time getting my computer lab to > image every night. I've been at it for a few weeks, and every time I > think I have it solved, I don't. > > My current setup is this: > > - 26 machines, with a Restore partition, and packages cached. > - 2 "scheduled tasks" that I use as policy triggers - one goes off at > 10pm and one at 3am. Both triggers are scoped to the whole lab. > - One policy, scoped to 13 of the machines triggered by the 10pm > scheduled task, ongoing - it reboots the machine to the Restore > partition > - One policy, scoped to the other 13 machines triggered by the 3am > scheduled task, ongoing - reboots the machine to the Restore > partition. > > But every morning I wake up and the policy logs for those policies > show that it hasn't run. > > Previously, of course, I just had one policy set to reboot the > machines between 10pm and 4am, but I was getting inconsistent results > and inconsistent imaging - packages not being installed, etc - > probably due to bandwidth issues? Anyway, that's why I tried the > alternate route of scheduled tasks. > > > Anyway, if anyone has experience with policies not firing when they > should, I'd like to hear about your experience(s). > > I'm very close to just adding a script to /etc/periodic/daily but I'd > prefer to do the Casper solution. > > Thanks, > > -Baker > > > -------------------------------------------------------------- > Baker Franke > Computer Science Dept. > The University of Chicago Laboratory Schools > 773.702.5419 > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Mon Oct 12 07:15:59 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 12 Oct 2009 09:15:59 -0500 Subject: [Casper] nightly imaging NOT happening...why God, why? In-Reply-To: <6A2E3F8F-D46E-4324-AD3B-97F9D6B9BC1A@uwec.edu> References: <28D946DA-EB8A-44AE-B581-97BF7D217E5B@ucls.uchicago.edu> <054FD66B-4C75-41DA-AB64-D4BDFE15BA35@uwec.edu> <4AD2DE3B.7141.0039.0@kckps.org> <06C18ED8-4128-4990-B91A-F2D73C623BDA@ucls.uchicago.edu> <4AD2F0A2.7141.0039.0@kckps.org> <6A2E3F8F-D46E-4324-AD3B-97F9D6B9BC1A@uwec.edu> Message-ID: <4AD2F3CF.7141.0039.0@kckps.org> Hmm, I did not get a copy of that email in my Casper folder in my email client like I always do. Must have been a glitch in the system or something. That or the email gnomes took it. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Ernst, Craig S." 10/12/09 9:04 AM >>> We got your message earlier. Craig Ernst UW-Eau Claire (715) 836-3639 Sent from my iPhone On Oct 12, 2009, at 7:02 AM, "Thomas Larkin" wrote: I sent out an email to the list but it never got posted.... What exactly are you trying to clean out every night? ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Baker Franke 10/12/09 7:49 AM >>> Yes, I tried it manually and discovered the problem was with one of my policies, in which a script snuck in that was rebooting the machine before the rest of the policy could execute...d'oh! So, that was the issue. Of course, since then, Craig has convinced me that imaging the machines nightly is probably not a good thing for the hard drives. So now I'm reinventing the wheel, and just doing a "little" nightly cleanup to see if I can avoid re-imaging all the time. Thanks, -Baker On Oct 12, 2009, at 7:43 AM, Thomas Larkin wrote: FYI to everyone Lingon is retired, Peter Borg is no longer supporting it. It is up on sourceforge.net and so is the source code, so hopefully someone will pick it up and continue to publish it. Not sure if Lingon works with Snow Leopard. This is just a FYI as I just recently found this out myself. If you are a developer or know one, urge them to keep the project alive! As for this, here is what I can say about troubleshooting the issue you have. I would ensure that the machine is managed with the proper ssh account and password. I would ensure that all shares it is pulling from have proper permissions and that the user accounts that casper uses for read and write have proper POSIX or ACLs enabled. I like what Craig mentioned, try it manually make sure it works manually. Also check the JSS logs to see if it is even running. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Ernst, Craig S." 10/09/09 9:48 AM >>> I would say check your scope (computers and network segments) and trigger in your policy Download Lingon on one of the systems and make sure scheduled policies are in launchd. Name com.jamfsoftware.... Check your logs for those times to see of there are errors. Try kicking the reboot task off manually on the system and watching what happens. On the terminal of the system type sudo /usr/sbin/jamf policy -trigger Where name is name your scheduled task in the JSS that triggers those policies. I would have console open to jamf.log too. Amd lastly, nightly reimages get REALLY hard on the drives. Might want to consider DeepFreeze if you MUSTbe back to square one each day. We just reboot and delete user homes each night now. Craig Ernst UW-Eau Claire (715) 836-3639 Sent from my iPhone On Oct 9, 2009, at 8:10 AM, "Baker Franke" wrote: > I have been having a dickens of a time getting my computer lab to > image every night. I've been at it for a few weeks, and every time I > think I have it solved, I don't. > > My current setup is this: > > - 26 machines, with a Restore partition, and packages cached. > - 2 "scheduled tasks" that I use as policy triggers - one goes off at > 10pm and one at 3am. Both triggers are scoped to the whole lab. > - One policy, scoped to 13 of the machines triggered by the 10pm > scheduled task, ongoing - it reboots the machine to the Restore > partition > - One policy, scoped to the other 13 machines triggered by the 3am > scheduled task, ongoing - reboots the machine to the Restore > partition. > > But every morning I wake up and the policy logs for those policies > show that it hasn't run. > > Previously, of course, I just had one policy set to reboot the > machines between 10pm and 4am, but I was getting inconsistent results > and inconsistent imaging - packages not being installed, etc - > probably due to bandwidth issues? Anyway, that's why I tried the > alternate route of scheduled tasks. > > > Anyway, if anyone has experience with policies not firing when they > should, I'd like to hear about your experience(s). > > I'm very close to just adding a script to /etc/periodic/daily but I'd > prefer to do the Casper solution. > > Thanks, > > -Baker > > > -------------------------------------------------------------- > Baker Franke > Computer Science Dept. > The University of Chicago Laboratory Schools > 773.702.5419 > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From paul.austin at wachovia.com Mon Oct 12 08:49:19 2009 From: paul.austin at wachovia.com (Paul Austin) Date: Mon, 12 Oct 2009 11:49:19 -0400 Subject: [Casper] hashed password with jamf binary Message-ID: <31FD8D54-8923-49F1-B12D-8A8A72C3DB70@wachovia.com> I am trying to use the mount flag with the jamf binary to mount a network drive for further script processing. I want to hash the password into the script but am not having any luck. Has anyone gotten this to work correctly with a hashed password? If so, What could I be doing wrong. Thanks Paul Austin End User Computing Wells Fargo/Wachovia 704 427-0903 From bfranke at ucls.uchicago.edu Mon Oct 12 09:41:36 2009 From: bfranke at ucls.uchicago.edu (Baker Franke) Date: Mon, 12 Oct 2009 11:41:36 -0500 Subject: [Casper] nightly imaging NOT happening...why God, why? In-Reply-To: <4AD2F0A2.7141.0039.0@kckps.org> References: <28D946DA-EB8A-44AE-B581-97BF7D217E5B@ucls.uchicago.edu> <054FD66B-4C75-41DA-AB64-D4BDFE15BA35@uwec.edu> <4AD2DE3B.7141.0039.0@kckps.org> <06C18ED8-4128-4990-B91A-F2D73C623BDA@ucls.uchicago.edu> <4AD2F0A2.7141.0039.0@kckps.org> Message-ID: <11C44397-4283-4926-9B09-5B331CEDA1DA@ucls.uchicago.edu> Yeah, I want it looking fresh. This is in a computer lab so I was re- imaging mostly as a vandalism deterrent. I wrote my own script that scrubs the Users folder, etc. Thanks for the offer, though. But my question is what else do I need to worry about, in terms of making the computers "fresh" each day. I used to use Radmind (kind of like deepfreeze, sort of), and I don't want to pay for DeepFreeze. Willing to do stuff by hand, but I need to know what to look out for. Thanks, -Baker Baker Franke Computer Science Dept. University of Chicago Laboratory Schools 773.702.5419 On Oct 12, 2009, at 9:02 AM, Thomas Larkin wrote: > I sent out an email to the list but it never got posted.... > > What exactly are you trying to clean out every night? > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > > > > > > >>> Baker Franke 10/12/09 7:49 AM >>> > Yes, I tried it manually and discovered the problem was with one of > my policies, in which a script snuck in that was rebooting the > machine before the rest of the policy could execute...d'oh! > > So, that was the issue. > > Of course, since then, Craig has convinced me that imaging the > machines nightly is probably not a good thing for the hard drives. > So now I'm reinventing the wheel, and just doing a "little" nightly > cleanup to see if I can avoid re-imaging all the time. > > Thanks, > > -Baker > > > > On Oct 12, 2009, at 7:43 AM, Thomas Larkin wrote: > >> FYI to everyone >> >> Lingon is retired, Peter Borg is no longer supporting it. It is up >> on sourceforge.net and so is the source code, so hopefully someone >> will pick it up and continue to publish it. Not sure if Lingon >> works with Snow Leopard. This is just a FYI as I just recently >> found this out myself. If you are a developer or know one, urge >> them to keep the project alive! >> >> As for this, here is what I can say about troubleshooting the issue >> you have. I would ensure that the machine is managed with the >> proper ssh account and password. I would ensure that all shares it >> is pulling from have proper permissions and that the user accounts >> that casper uses for read and write have proper POSIX or ACLs >> enabled. >> >> I like what Craig mentioned, try it manually make sure it works >> manually. Also check the JSS logs to see if it is even running. >> >> >> ___________________________ >> Thomas Larkin >> TIS Department >> KCKPS USD500 >> tlarki at kckps.org >> blackberry: 913-449-7589 >> office: 913-627-0351 >> >> >> >> >> >> >>> "Ernst, Craig S." 10/09/09 9:48 AM >>> >> I would say check your scope (computers and network segments) and >> trigger in your policy >> >> Download Lingon on one of the systems and make sure scheduled >> policies >> are in launchd. Name com.jamfsoftware.... >> >> Check your logs for those times to see of there are errors. >> >> Try kicking the reboot task off manually on the system and watching >> what happens. On the terminal of the system type >> >> sudo /usr/sbin/jamf policy -trigger >> >> Where name is name your scheduled task in the JSS that triggers those >> policies. I would have console open to jamf.log too. >> >> Amd lastly, nightly reimages get REALLY hard on the drives. Might >> want >> to consider DeepFreeze if you MUSTbe back to square one each day. We >> just reboot and delete user homes each night now. >> >> Craig Ernst >> UW-Eau Claire >> (715) 836-3639 >> >> Sent from my iPhone >> >> On Oct 9, 2009, at 8:10 AM, "Baker Franke" >> >> wrote: >> >> > I have been having a dickens of a time getting my computer lab to >> > image every night. I've been at it for a few weeks, and every >> time I >> > think I have it solved, I don't. >> > >> > My current setup is this: >> > >> > - 26 machines, with a Restore partition, and packages cached. >> > - 2 "scheduled tasks" that I use as policy triggers - one goes >> off at >> > 10pm and one at 3am. Both triggers are scoped to the whole lab. >> > - One policy, scoped to 13 of the machines triggered by the 10pm >> > scheduled task, ongoing - it reboots the machine to the Restore >> > partition >> > - One policy, scoped to the other 13 machines triggered by the 3am >> > scheduled task, ongoing - reboots the machine to the Restore >> > partition. >> > >> > But every morning I wake up and the policy logs for those policies >> > show that it hasn't run. >> > >> > Previously, of course, I just had one policy set to reboot the >> > machines between 10pm and 4am, but I was getting inconsistent >> results >> > and inconsistent imaging - packages not being installed, etc - >> > probably due to bandwidth issues? Anyway, that's why I tried the >> > alternate route of scheduled tasks. >> > >> > >> > Anyway, if anyone has experience with policies not firing when they >> > should, I'd like to hear about your experience(s). >> > >> > I'm very close to just adding a script to /etc/periodic/daily >> but I'd >> > prefer to do the Casper solution. >> > >> > Thanks, >> > >> > -Baker >> > >> > >> > -------------------------------------------------------------- >> > Baker Franke >> > Computer Science Dept. >> > The University of Chicago Laboratory Schools >> > 773.702.5419 >> > >> > _______________________________________________ >> > Casper mailing list >> > >> >> Casper at list.jamfsoftware.com >> > >> >> http://list.jamfsoftware.com/mailman/listinfo/casper >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From smith.jonathan at gene.com Mon Oct 12 09:43:44 2009 From: smith.jonathan at gene.com (Jonathan Smith) Date: Mon, 12 Oct 2009 09:43:44 -0700 Subject: [Casper] nightly imaging NOT happening...why God, why? In-Reply-To: <4AD2F3CF.7141.0039.0@kckps.org> References: <28D946DA-EB8A-44AE-B581-97BF7D217E5B@ucls.uchicago.edu> <054FD66B-4C75-41DA-AB64-D4BDFE15BA35@uwec.edu> <4AD2DE3B.7141.0039.0@kckps.org> <06C18ED8-4128-4990-B91A-F2D73C623BDA@ucls.uchicago.edu> <4AD2F0A2.7141.0039.0@kckps.org> <6A2E3F8F-D46E-4324-AD3B-97F9D6B9BC1A@uwec.edu> <4AD2F3CF.7141.0039.0@kckps.org> Message-ID: <462d1b830910120943w315fbc0frbda0dcbdf9ea529e@mail.gmail.com> I don't know if they have a Mac Client but we use a product called Deep Freeze to "reset" out training machines after each training session. Jon Sr. Systems Engineer Genentech. On Mon, Oct 12, 2009 at 7:15 AM, Thomas Larkin wrote: > Hmm, I did not get a copy of that email in my Casper folder in my email > client like I always do. Must have been a glitch in the system or > something. That or the email gnomes took it. > > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > > > > > > >>> "Ernst, Craig S." 10/12/09 9:04 AM >>> > > We got your message earlier. > > Craig Ernst > > UW-Eau Claire > > (715) 836-3639 > > > Sent from my iPhone > > > On Oct 12, 2009, at 7:02 AM, "Thomas Larkin" wrote: > > > I sent out an email to the list but it never got posted.... > > > What exactly are you trying to clean out every night? > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > > > > > > >>> Baker Franke 10/12/09 7:49 AM >>> > Yes, I tried it manually and discovered the problem was with one of my > policies, in which a script snuck in that was rebooting the machine before > the rest of the policy could execute...d'oh! > > > So, that was the issue. > > > Of course, since then, Craig has convinced me that imaging the machines > nightly is probably not a good thing for the hard drives. So now I'm > reinventing the wheel, and just doing a "little" nightly cleanup to see if I > can avoid re-imaging all the time. > > > Thanks, > > > -Baker > > > > > On Oct 12, 2009, at 7:43 AM, Thomas Larkin wrote: > > > FYI to everyone > > > Lingon is retired, Peter Borg is no longer supporting it. It is up on > sourceforge.net and so is the source code, so hopefully someone will pick > it up and continue to publish it. Not sure if Lingon works with Snow > Leopard. This is just a FYI as I just recently found this out myself. If > you are a developer or know one, urge them to keep the project alive! > > > As for this, here is what I can say about troubleshooting the issue you > have. I would ensure that the machine is managed with the proper ssh > account and password. I would ensure that all shares it is pulling from > have proper permissions and that the user accounts that casper uses for read > and write have proper POSIX or ACLs enabled. > > > I like what Craig mentioned, try it manually make sure it works > manually. Also check the JSS logs to see if it is even running. > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > > > > > > >>> "Ernst, Craig S." 10/09/09 9:48 AM >>> > I would say check your scope (computers and network segments) and > trigger in your policy > > Download Lingon on one of the systems and make sure scheduled policies > are in launchd. Name com.jamfsoftware.... > > Check your logs for those times to see of there are errors. > > Try kicking the reboot task off manually on the system and watching > what happens. On the terminal of the system type > > sudo /usr/sbin/jamf policy -trigger > > Where name is name your scheduled task in the JSS that triggers those > policies. I would have console open to jamf.log too. > > Amd lastly, nightly reimages get REALLY hard on the drives. Might want > to consider DeepFreeze if you MUSTbe back to square one each day. We > just reboot and delete user homes each night now. > > Craig Ernst > UW-Eau Claire > (715) 836-3639 > > Sent from my iPhone > > On Oct 9, 2009, at 8:10 AM, "Baker Franke" > wrote: > > > I have been having a dickens of a time getting my computer lab to > > image every night. I've been at it for a few weeks, and every time I > > think I have it solved, I don't. > > > > My current setup is this: > > > > - 26 machines, with a Restore partition, and packages cached. > > - 2 "scheduled tasks" that I use as policy triggers - one goes off at > > 10pm and one at 3am. Both triggers are scoped to the whole lab. > > - One policy, scoped to 13 of the machines triggered by the 10pm > > scheduled task, ongoing - it reboots the machine to the Restore > > partition > > - One policy, scoped to the other 13 machines triggered by the 3am > > scheduled task, ongoing - reboots the machine to the Restore > > partition. > > > > But every morning I wake up and the policy logs for those policies > > show that it hasn't run. > > > > Previously, of course, I just had one policy set to reboot the > > machines between 10pm and 4am, but I was getting inconsistent results > > and inconsistent imaging - packages not being installed, etc - > > probably due to bandwidth issues? Anyway, that's why I tried the > > alternate route of scheduled tasks. > > > > > > Anyway, if anyone has experience with policies not firing when they > > should, I'd like to hear about your experience(s). > > > > I'm very close to just adding a script to /etc/periodic/daily but I'd > > prefer to do the Casper solution. > > > > Thanks, > > > > -Baker > > > > > > -------------------------------------------------------------- > > Baker Franke > > Computer Science Dept. > > The University of Chicago Laboratory Schools > > 773.702.5419 > > > > _______________________________________________ > > Casper mailing list > > > > > > Casper at list.jamfsoftware.com > > > > > > http://list.jamfsoftware.com/mailman/listinfo/casper > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -- Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | -------------- next part -------------- An HTML attachment was scrubbed... URL: From ryan.manly at gmail.com Mon Oct 12 09:59:24 2009 From: ryan.manly at gmail.com (Ryan Manly) Date: Mon, 12 Oct 2009 11:59:24 -0500 Subject: [Casper] Scripting help - might be easy In-Reply-To: References: Message-ID: I remember the "demotion" being a VERY common problem in 10.5.0 but it should be resolved now. I have not seen it in upgraded software. I also never thought to check back then whether the ultimate cause was related to the admin group being missing. :( Good luck! http://support.apple.com/kb/TS1278 Ryan M. Manly Mac OS X Expert Glenbrook High Schools 1835 Landwehr Rd. Glenview, IL 60026 (847) 486-4948 On Thu, Oct 8, 2009 at 1:10 PM, wrote: > I'm having a strange problem that is randomly showing up where the admin > GROUP is being deleted from the users systems, demoting the local admin > account to a standard user. The users are all standard users anyway so they > don't notice a thing until they ask a tech to update/install something and > the tech can't do it. > > I have a fix I can run in terminal to delete the existing admin group, > create a new one, and add the admin user to the admin group: > > dseditgroup -o delete admin > dseditgroup -o create admin > dscl . -append /Groups/admin GroupMembership admin > > Now, I wanted to add this as a self service option so that I don't have to > remote into the machine and run this command via terminal, or be able to do > it via ARD. But the problem I am having is that the terminal asks for > confirmation (are you sure you want to do this? y or n) and I don't know how > to skip that question or enter 'y'. Can someone give me a hand? > > And has anyone heard of the admin group being deleted from a system > randomly? This has never happened before, but now we are using Centrify > Direct Control for connecting to AD. Not sure if there is a cause/effect > relationship there or not. > > Thanks for any help! > > Rich Barron > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Mon Oct 12 13:00:31 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 12 Oct 2009 15:00:31 -0500 Subject: [Casper] nightly imaging NOT happening...why God, why? In-Reply-To: <462d1b830910120943w315fbc0frbda0dcbdf9ea529e@mail.gmail.com> References: <28D946DA-EB8A-44AE-B581-97BF7D217E5B@ucls.uchicago.edu> <054FD66B-4C75-41DA-AB64-D4BDFE15BA35@uwec.edu> <4AD2DE3B.7141.0039.0@kckps.org> <06C18ED8-4128-4990-B91A-F2D73C623BDA@ucls.uchicago.edu> <4AD2F0A2.7141.0039.0@kckps.org> <6A2E3F8F-D46E-4324-AD3B-97F9D6B9BC1A@uwec.edu> <4AD2F3CF.7141.0039.0@kckps.org> <462d1b830910120943w315fbc0frbda0dcbdf9ea529e@mail.gmail.com> Message-ID: <4AD3448E.7141.0039.0@kckps.org> They do have a mac client but I don't like deep freeze that much, but trust me I am very biased so don't take my opinion for it. Take what I say about deep freeze with a grain of salt. This is what I do, and I must warn you there are several things I do to prevent the local admin accounts from being deleted. 1) local admin account home folders live in /private/var 2) all non admin accounts home folders live in /Users This is why I can get away with this. I don't have the script handy but I will wing it, so pleas test this out before you even try to implement it, and it will delete EVERYTHING from /users. #!/bin/bash for a in /bin/ls /Users | grep -v "^Shared" ; do #remove from directory services if applicable /usr/bin/dscl . -delete /Groups/admin GroupMembership $a /usr/bin/dscl . -delete /Users/$a #now get rid of the local data /bin/rm -rf /Users/$a /bin/echo "all done" exit 0 This deletes it from directory services and kills all user data. You could go on to have the script also purge log files and such to really "clean it out," if you so wished. I also just winged this from memory so it is not tested. I would test it out but it is very simple and you should get the idea from looking at it. This way you clean your machine off with out having to reimage it. Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Jonathan Smith 10/12/09 11:43 AM >>> I don't know if they have a Mac Client but we use a product called Deep Freeze to "reset" out training machines after each training session. Jon Sr. Systems Engineer Genentech. On Mon, Oct 12, 2009 at 7:15 AM, Thomas Larkin wrote: Hmm, I did not get a copy of that email in my Casper folder in my email client like I always do. Must have been a glitch in the system or something. That or the email gnomes took it. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Ernst, Craig S." 10/12/09 9:04 AM >>> We got your message earlier. Craig Ernst UW-Eau Claire (715) 836-3639 Sent from my iPhone On Oct 12, 2009, at 7:02 AM, "Thomas Larkin" wrote: I sent out an email to the list but it never got posted.... What exactly are you trying to clean out every night? ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Baker Franke 10/12/09 7:49 AM >>> Yes, I tried it manually and discovered the problem was with one of my policies, in which a script snuck in that was rebooting the machine before the rest of the policy could execute...d'oh! So, that was the issue. Of course, since then, Craig has convinced me that imaging the machines nightly is probably not a good thing for the hard drives. So now I'm reinventing the wheel, and just doing a "little" nightly cleanup to see if I can avoid re-imaging all the time. Thanks, -Baker On Oct 12, 2009, at 7:43 AM, Thomas Larkin wrote: FYI to everyone Lingon is retired, Peter Borg is no longer supporting it. It is up on sourceforge.net and so is the source code, so hopefully someone will pick it up and continue to publish it. Not sure if Lingon works with Snow Leopard. This is just a FYI as I just recently found this out myself. If you are a developer or know one, urge them to keep the project alive! As for this, here is what I can say about troubleshooting the issue you have. I would ensure that the machine is managed with the proper ssh account and password. I would ensure that all shares it is pulling from have proper permissions and that the user accounts that casper uses for read and write have proper POSIX or ACLs enabled. I like what Craig mentioned, try it manually make sure it works manually. Also check the JSS logs to see if it is even running. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Ernst, Craig S." 10/09/09 9:48 AM >>> I would say check your scope (computers and network segments) and trigger in your policy Download Lingon on one of the systems and make sure scheduled policies are in launchd. Name com.jamfsoftware.... Check your logs for those times to see of there are errors. Try kicking the reboot task off manually on the system and watching what happens. On the terminal of the system type sudo /usr/sbin/jamf policy -trigger Where name is name your scheduled task in the JSS that triggers those policies. I would have console open to jamf.log too. Amd lastly, nightly reimages get REALLY hard on the drives. Might want to consider DeepFreeze if you MUSTbe back to square one each day. We just reboot and delete user homes each night now. Craig Ernst UW-Eau Claire (715) 836-3639 Sent from my iPhone On Oct 9, 2009, at 8:10 AM, "Baker Franke" wrote: > I have been having a dickens of a time getting my computer lab to > image every night. I've been at it for a few weeks, and every time I > think I have it solved, I don't. > > My current setup is this: > > - 26 machines, with a Restore partition, and packages cached. > - 2 "scheduled tasks" that I use as policy triggers - one goes off at > 10pm and one at 3am. Both triggers are scoped to the whole lab. > - One policy, scoped to 13 of the machines triggered by the 10pm > scheduled task, ongoing - it reboots the machine to the Restore > partition > - One policy, scoped to the other 13 machines triggered by the 3am > scheduled task, ongoing - reboots the machine to the Restore > partition. > > But every morning I wake up and the policy logs for those policies > show that it hasn't run. > > Previously, of course, I just had one policy set to reboot the > machines between 10pm and 4am, but I was getting inconsistent results > and inconsistent imaging - packages not being installed, etc - > probably due to bandwidth issues? Anyway, that's why I tried the > alternate route of scheduled tasks. > > > Anyway, if anyone has experience with policies not firing when they > should, I'd like to hear about your experience(s). > > I'm very close to just adding a script to /etc/periodic/daily but I'd > prefer to do the Casper solution. > > Thanks, > > -Baker > > > -------------------------------------------------------------- > Baker Franke > Computer Science Dept. > The University of Chicago Laboratory Schools > 773.702.5419 > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -- Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | -------------- next part -------------- An HTML attachment was scrubbed... URL: From donmontalvo at gmail.com Mon Oct 12 14:18:56 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Mon, 12 Oct 2009 16:18:56 -0500 Subject: [Casper] Imaging Macs In-Reply-To: <438f5a310910090852s14e0bdb4kbf3850505c17f91@mail.gmail.com> References: <8C14056A-9C93-4F40-B18B-CF9BE5B299F0@gmail.com> <438f5a310910090852s14e0bdb4kbf3850505c17f91@mail.gmail.com> Message-ID: <90105BCA-4BDF-4C0C-B468-E79EADF043CB@gmail.com> On Oct 9, 2009, at 10:52 AM, Steve Wood wrote: > On Fri, Oct 9, 2009 at 10:32 AM, Don Montalvo > wrote: > >> On Oct 8, 2009, at 6:07 PM, Zach Halmstad wrote: >> >> >>> Hey everyone- >>> >>> Just wanted to chime in from JAMF on a few things... >>> >>>> >>>>> The base Mac OS X software is installed using block copy if you >>>>> create a package. :-) But then you don't get the flexibility of >>>>> multiple configurations for one package file. :-( >>>> >>>> I'm not sure I follow. An image would be block copied to a target >>>> computer. A pkg installer would be a file copy. Are you saying >>>> Casper has a way of doing block copy using a pkg installer? >>>> >>>> Not sure if I'm confusing things. If we have an image containing >>>> OS X and common applications/tools (essentially, stuff every >>>> computer at the firm needs), can Casper deploy that image? Can >>>> the deployment process include running pkg installs for >>>> additional software? >>> >>> I think that the main issue here is related to our rather liberal >>> use of the term package. We don't limit the use of the term >>> package to only PKG and MPKG packages. We also consider the >>> following items "packages": >>> >>> - Disk images of an OS ("OS Package") >>> - Disk images of any files that mirror the directory structure >>> ("DMG Package") >>> - Disk images of a Mac OS X Installer DVD ("OS X Installer Package") >>> - Disk images of an Adobe Installer DVD ("Adobe Installer Package") >>> - Disk images of an Adobe Updater ("Adobe Updater Package") >>> - Winclone bundle ("Winclone Package") >>> >>> The imaging process is capable of utilizing any combination of >>> these at installation time. The Adobe installers actually have to >>> run the silent installation at the time of the first reboot (that >>> is automated with the same process that handles the directory >>> bindings at reboot), but all other installers run before the reboot. >> >> Zach, >> >> I appreciate your response. I guess I was confusing the Apple pkg/ >> mpkg format with the generic "package" term. I had a conversation >> with my Wintel colleagues (who manage huge environments) over lunch >> about the Adobe installer fiasco and they all had the same >> opinion...if it works, go with it. I'm all for it, since we all >> have the same goal, to distribute stuff using the most efficient, >> reliable, manageable and cost effective method. That said, as some >> of use have experienced, the Adobe silent install can fail and >> leave you with a mess on your hands. How does Casper handle failure >> of Adobe silent install? >> >> I'm a huge fan of InstallDMG since it uses a very consistent and >> manageable method for image management. We have many environments >> set up with InstaDMG image workflows. How does the Casper Imaging >> workflow differ from the InstallDMG? Is it reasonable to assume >> that we can continue to use InstaDMG to manage our images (since it >> strictly uses Apple pkg/mpkg format installers as building blocks), >> and have Casper distribute the images - and along the way have >> Casper handle the cr at ppy Adobe installers on reboot? Trying to see >> if Casper can be used without having to re-architect workflows that >> are in place now (that work). >> >> Thanks, >> Don > > You can absolutely continue to use InstaDMG to create the base > image. Like you I love InstaDMG and use it for my base images. I > have seen some issues trying to create 10.6 images with the 1.4 and > even the 1.5 versions of InstaDMG, but I'm just testing now and can > wait for those to work themselves out. > > I create a base OS image using InstaDMG and then layer on all of the > other application installs. All of this is done thru Casper. > > The only item I do not push as part of the initial imaging process > are my Adobe installs. I've seen the Adobe installs hang up after > the first reboot and cause problems. Instead I have a policy that > installs Adobe products on first login to the machine. During > initial imaging I set the name of the computer to the MAC address > prefixed by the word IMAGED. I then have a Smart Group set to > collect all of these imaged machines. The policy that pushes Adobe > installs is scoped to that Smart Group. Hence, at login Adobe > software and udpates are all pushed. I capture all current Adobe > updates via Composer and build a package of udpates to push to the > machines. > > Using this method I have had zero issues pushing Adobe software. > > Steve Wood > Director of IT > swood at integer.com Hi Steve, Thanks for confirming that Casper can deploy a base image created with InstaDMG. Your example (InstaDMG for base image, Casper deployment including Adobe silent install) sounds like just the ticket. Thanks, Don From tqueck at nkasd.com Tue Oct 13 06:03:26 2009 From: tqueck at nkasd.com (Thomas Queck) Date: Tue, 13 Oct 2009 09:03:26 -0400 Subject: [Casper] Managing iPODS with Casper 7.1 Message-ID: <3BA09F48-0B1A-4FB7-8E83-86F0E5E9D81B@nkasd.com> We are going to be deploying iPod Carts to our elementary schools in the near future and would like to manage these units through Casper. I've heard this feature is now available in Casper Suite 7.1 Has anyone tried doing this? If so, how did you go about it and how successful was it? Thanks. Tom Queck New Kensington Arnold School district From jstrauss at loyolahs.edu Tue Oct 13 10:17:10 2009 From: jstrauss at loyolahs.edu (Jeff Strauss) Date: Tue, 13 Oct 2009 10:17:10 -0700 Subject: [Casper] WGM GUI Message-ID: Does anyone know where the "..." button pulls names from in the Computer Groups tab in Workgroup Manager? I've deleted computers and when I click the "+" to re-add them they're not there, but they're listed with the "..." button. Curious. Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 Please consider the environment before printing this e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Tue Oct 13 10:20:20 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Tue, 13 Oct 2009 12:20:20 -0500 Subject: [Casper] WGM GUI In-Reply-To: References: Message-ID: <4AD47083.7141.0039.0@kckps.org> You mean computer groups? The names are imported by doing an authenticated bind. I am not sure what you are exactly asking, can you post a screen shot? ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Jeff Strauss 10/13/09 12:17 PM >>> Does anyone know where the ?...? button pulls names from in the Computer Groups tab in Workgroup Manager? I?ve deleted computers and when I click the ?+? to re-add them they?re not there, but they?re listed with the ?...? button. Curious. Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 Please consider the environment before printing this e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: From swood at integer.com Tue Oct 13 10:27:27 2009 From: swood at integer.com (Steve Wood) Date: Tue, 13 Oct 2009 12:27:27 -0500 Subject: [Casper] WGM GUI In-Reply-To: <4AD47083.7141.0039.0@kckps.org> References: <4AD47083.7141.0039.0@kckps.org> Message-ID: <438f5a310910131027n7233627an79a4f5a3f5c812e6@mail.gmail.com> While I cannot find any concrete evidence (i.e. no manual or web link), I believe this list is generated via Bonjour. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 13, 2009 at 12:20 PM, Thomas Larkin wrote: > You mean computer groups? The names are imported by doing an > authenticated bind. I am not sure what you are exactly asking, can you post > a screen shot? > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > > > > > > >>> Jeff Strauss 10/13/09 12:17 PM >>> > > Does anyone know where the ?...? button pulls names from in the Computer > Groups tab in Workgroup Manager? I?ve deleted computers and when I click > the ?+? to re-add them they?re not there, but they?re listed with > the ?...? button. Curious. > * > Jeffrey A. Strauss > *Department of Educational Technology > *Systems Administrator > *Loyola High School of Los Angeles > 1901 Venice Blvd. > Los Angeles, Ca 90006 > (213) 381-5121 x265 > > Please consider the environment before printing this e-mail. > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From swood at integer.com Tue Oct 13 10:28:27 2009 From: swood at integer.com (Steve Wood) Date: Tue, 13 Oct 2009 12:28:27 -0500 Subject: [Casper] WGM GUI In-Reply-To: <438f5a310910131027n7233627an79a4f5a3f5c812e6@mail.gmail.com> References: <4AD47083.7141.0039.0@kckps.org> <438f5a310910131027n7233627an79a4f5a3f5c812e6@mail.gmail.com> Message-ID: <438f5a310910131028h3ec1e454j3ea87f3e5bbd0837@mail.gmail.com> I stand corrected. I should have waited for the page to load: http://support.apple.com/kb/TS2079?viewlocale=en_US Appears there are two conditions: - The client is bound to the server using Directory Utility or - The client receives LDAP information via DHCP (also referred to as "option 95") Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 13, 2009 at 12:27 PM, Steve Wood wrote: > While I cannot find any concrete evidence (i.e. no manual or web link), I > believe this list is generated via Bonjour. > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > On Tue, Oct 13, 2009 at 12:20 PM, Thomas Larkin wrote: > >> You mean computer groups? The names are imported by doing an >> authenticated bind. I am not sure what you are exactly asking, can you post >> a screen shot? >> >> >> ___________________________ >> Thomas Larkin >> TIS Department >> KCKPS USD500 >> tlarki at kckps.org >> blackberry: 913-449-7589 >> office: 913-627-0351 >> >> >> >> >> >> >>> Jeff Strauss 10/13/09 12:17 PM >>> >> >> Does anyone know where the ?...? button pulls names from in the Computer >> Groups tab in Workgroup Manager? I?ve deleted computers and when I click >> the ?+? to re-add them they?re not there, but they?re listed with >> the ?...? button. Curious. >> * >> Jeffrey A. Strauss >> *Department of Educational Technology >> *Systems Administrator >> *Loyola High School of Los Angeles >> 1901 Venice Blvd. >> Los Angeles, Ca 90006 >> (213) 381-5121 x265 >> >> Please consider the environment before printing this e-mail. >> >> >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper >> >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: From aw_aca_bre at nwoca.org Tue Oct 13 10:28:37 2009 From: aw_aca_bre at nwoca.org (Brad Rellinger) Date: Tue, 13 Oct 2009 13:28:37 -0400 Subject: [Casper] WGM GUI In-Reply-To: References: Message-ID: <5596f1620910131028h3113296auc1a08533870f7fcc@mail.gmail.com> Bonjour on your local computer I thought. -- Brad Rellinger Technology Specialist Anthony Wayne Local Schools K-12 aw_aca_bre at nwoca.org On Tue, Oct 13, 2009 at 1:17 PM, Jeff Strauss wrote: > Does anyone know where the ?...? button pulls names from in the Computer > Groups tab in Workgroup Manager? I?ve deleted computers and when I click the > ?+? to re-add them they?re not there, but they?re listed with the ?...? > button. Curious. > * > Jeffrey A. Strauss > *Department of Educational Technology > *Systems Administrator > *Loyola High School of Los Angeles > 1901 Venice Blvd. > Los Angeles, Ca 90006 > (213) 381-5121 x265 > > Please consider the environment before printing this e-mail. > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Tue Oct 13 10:32:37 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Tue, 13 Oct 2009 12:32:37 -0500 Subject: [Casper] WGM GUI In-Reply-To: <438f5a310910131028h3ec1e454j3ea87f3e5bbd0837@mail.gmail.com> References: <4AD47083.7141.0039.0@kckps.org> <438f5a310910131027n7233627an79a4f5a3f5c812e6@mail.gmail.com> <438f5a310910131028h3ec1e454j3ea87f3e5bbd0837@mail.gmail.com> Message-ID: <4AD47364.7141.0039.0@kckps.org> Well I am fairly certain it has to be an authenticated bind with the computer's name... ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Steve Wood 10/13/09 12:28 PM >>> I stand corrected. I should have waited for the page to load: http://support.apple.com/kb/TS2079?viewlocale=en_US ( http://support.apple.com/kb/TS2079?viewlocale=en_US ) Appears there are two conditions: The client is bound to the server using Directory Utility or The client receives LDAP information via DHCP (also referred to as "option 95") Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 13, 2009 at 12:27 PM, Steve Wood wrote: While I cannot find any concrete evidence (i.e. no manual or web link), I believe this list is generated via Bonjour. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 13, 2009 at 12:20 PM, Thomas Larkin wrote: You mean computer groups? The names are imported by doing an authenticated bind. I am not sure what you are exactly asking, can you post a screen shot? ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Jeff Strauss 10/13/09 12:17 PM >>> Does anyone know where the ?...? button pulls names from in the Computer Groups tab in Workgroup Manager? I?ve deleted computers and when I click the ?+? to re-add them they?re not there, but they?re listed with the ?...? button. Curious. Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 Please consider the environment before printing this e-mail. _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From jstrauss at loyolahs.edu Tue Oct 13 10:39:07 2009 From: jstrauss at loyolahs.edu (Jeff Strauss) Date: Tue, 13 Oct 2009 10:39:07 -0700 Subject: [Casper] WGM GUI In-Reply-To: <4AD47364.7141.0039.0@kckps.org> Message-ID: In any case, here are the screenies. * Matthews02 shows the entire group without Matthews01 (the one I delete) using the "+" button * Matthews01 shows Matthews01 (the one I deleted) appear using the "..." button On 10/13/09 10:32 AM, "Thomas Larkin" wrote: Well I am fairly certain it has to be an authenticated bind with the computer's name... ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Steve Wood 10/13/09 12:28 PM >>> I stand corrected. I should have waited for the page to load: http://support.apple.com/kb/TS2079?viewlocale=en_US Appears there are two conditions: * * * The client is bound to the server using Directory Utility * or * * * * The client receives LDAP information via DHCP (also referred to as "option 95") * Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 13, 2009 at 12:27 PM, Steve Wood wrote: While I cannot find any concrete evidence (i.e. no manual or web link), I believe this list is generated via Bonjour. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 13, 2009 at 12:20 PM, Thomas Larkin wrote: You mean computer groups? The names are imported by doing an authenticated bind. I am not sure what you are exactly asking, can you post a screen shot? ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Jeff Strauss 10/13/09 12:17 PM >>> Does anyone know where the "..." button pulls names from in the Computer Groups tab in Workgroup Manager? I've deleted computers and when I click the "+" to re-add them they're not there, but they're listed with the "..." button. Curious. Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 Please consider the environment before printing this e-mail. _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 Please consider the environment before printing this e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: matthews01.tiff Type: application/octet-stream Size: 30120 bytes Desc: matthews01.tiff URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: matthews02.tiff Type: application/octet-stream Size: 267524 bytes Desc: matthews02.tiff URL: From jstrauss at loyolahs.edu Tue Oct 13 10:50:39 2009 From: jstrauss at loyolahs.edu (Jeff Strauss) Date: Tue, 13 Oct 2009 10:50:39 -0700 Subject: [Casper] WGM GUI In-Reply-To: Message-ID: I'm thinking this issue is a reason why this particular computer isn't receiving appropriate management from the server... Every time I try to perform an authenticated bind to the server I get an error saying the computer is already there and I can't overwrite. Dunno if it's related, but I'm still trying to figure out why some computers won't receive prefs. On 10/13/09 10:39 AM, "Jeff Strauss" wrote: In any case, here are the screenies. * Matthews02 shows the entire group without Matthews01 (the one I delete) using the "+" button * Matthews01 shows Matthews01 (the one I deleted) appear using the "..." button On 10/13/09 10:32 AM, "Thomas Larkin" wrote: Well I am fairly certain it has to be an authenticated bind with the computer's name... ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Steve Wood 10/13/09 12:28 PM >>> I stand corrected. I should have waited for the page to load: http://support.apple.com/kb/TS2079?viewlocale=en_US Appears there are two conditions: * * * The client is bound to the server using Directory Utility * or * * * * The client receives LDAP information via DHCP (also referred to as "option 95") * Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 13, 2009 at 12:27 PM, Steve Wood wrote: While I cannot find any concrete evidence (i.e. no manual or web link), I believe this list is generated via Bonjour. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 13, 2009 at 12:20 PM, Thomas Larkin wrote: You mean computer groups? The names are imported by doing an authenticated bind. I am not sure what you are exactly asking, can you post a screen shot? ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Jeff Strauss 10/13/09 12:17 PM >>> Does anyone know where the "..." button pulls names from in the Computer Groups tab in Workgroup Manager? I've deleted computers and when I click the "+" to re-add them they're not there, but they're listed with the "..." button. Curious. Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 Please consider the environment before printing this e-mail. _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 Please consider the environment before printing this e-mail. Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 ? ACSP | ? ACTC | ? ACSA | Casper Certified Administrator Please consider the environment before printing this e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: From Jason.Weber at district196.org Tue Oct 13 10:59:23 2009 From: Jason.Weber at district196.org (Weber, Jason) Date: Tue, 13 Oct 2009 12:59:23 -0500 Subject: [Casper] 10.6.x NetInstall vs Netboot Message-ID: Wanted to throw a feeler message out there to see what others are doing, and any pros and cons for the Netboot process with Snow Leopard and Casper 7.1. We plan on doing an upgrade here at the end of next week, so I'll need to rebuild my Netinstall/Netboot images at that point. Because of issues we had in the past using Netboot images to deploy .pkgs/.mpkgs to Intel machines (running Casper 6.1 - Leopard servers), we had switched over to using the NetInstall creator to use a NetInstall set for imaging our Intels. This has been working flawlessly, so I am reluctant to change back to using a Netboot image for fear of running into similar issues as earlier. The problem was we couldn't deploy .pkg files during deployment of a config, unless it ran as a post image process. What is everyone doing right now, and what is JAMF recommending at this point?? Pros, cons?? Thanks everyone! Jason Weber Technology Support Cluster Specialist Certified Casper Administrator Independent School District 196 jason.weber at district196.org -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Tue Oct 13 11:03:56 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Tue, 13 Oct 2009 13:03:56 -0500 Subject: [Casper] WGM GUI In-Reply-To: References: Message-ID: <4AD47ABC.7141.0039.0@kckps.org> If you delete a computer and are running OD replication you probably have to delete it, then force a replication then readd it in, maybe? >>> Jeff Strauss 10/13/09 12:50 PM >>> I?m thinking this issue is a reason why this particular computer isn?t receiving appropriate management from the server... Every time I try to perform an authenticated bind to the server I get an error saying the computer is already there and I can?t overwrite. Dunno if it?s related, but I?m still trying to figure out why some computers won?t receive prefs. On 10/13/09 10:39 AM, "Jeff Strauss" wrote: In any case, here are the screenies. Matthews02 shows the entire group without Matthews01 (the one I delete) using the ?+? button Matthews01 shows Matthews01 (the one I deleted) appear using the ?...? button On 10/13/09 10:32 AM, "Thomas Larkin" wrote: Well I am fairly certain it has to be an authenticated bind with the computer's name... ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Steve Wood 10/13/09 12:28 PM >>> I stand corrected. I should have waited for the page to load: http://support.apple.com/kb/TS2079?viewlocale=en_US ( http://support.apple.com/kb/TS2079?viewlocale=en_US ) Appears there are two conditions: The client is bound to the server using Directory Utility or The client receives LDAP information via DHCP (also referred to as "option 95") Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 13, 2009 at 12:27 PM, Steve Wood wrote: While I cannot find any concrete evidence (i.e. no manual or web link), I believe this list is generated via Bonjour. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 13, 2009 at 12:20 PM, Thomas Larkin wrote: You mean computer groups? The names are imported by doing an authenticated bind. I am not sure what you are exactly asking, can you post a screen shot? ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Jeff Strauss 10/13/09 12:17 PM >>> Does anyone know where the ?...? button pulls names from in the Computer Groups tab in Workgroup Manager? I?ve deleted computers and when I click the ?+? to re-add them they?re not there, but they?re listed with the ?...? button. Curious. Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 Please consider the environment before printing this e-mail. _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 Please consider the environment before printing this e-mail. Jeffrey A. Strauss Department of Educational Technology SystPlease consider the environment before printing this e-mail. -------------- next part -------------- An HTML attachment was scrubbed... URL: From rcorbin at mac.com Tue Oct 13 11:48:53 2009 From: rcorbin at mac.com (Roger Corbin) Date: Tue, 13 Oct 2009 14:48:53 -0400 Subject: [Casper] Recon.exe In-Reply-To: References: Message-ID: <54606B26-5E8B-4998-88B7-F2997A6D904A@mac.com> Is it just me or has the documentation for using Recon.exe on PC's disappeared ? There is a version of Recon.exe in Casper 7.1 but there is nothing in the documentation about it. You used to be able to add them using a command like this. C:\Prg\Casper\Recon.exe -autorun -server 10.1.1.1 -username username - password yourpassword Is that still valid ? Roger Corbin Richmond SD38 -------------- next part -------------- An HTML attachment was scrubbed... URL: From JStanford at serinocoyne.com Tue Oct 13 11:55:02 2009 From: JStanford at serinocoyne.com (Justin L. Stanford) Date: Tue, 13 Oct 2009 14:55:02 -0400 Subject: [Casper] Recon.exe In-Reply-To: <54606B26-5E8B-4998-88B7-F2997A6D904A@mac.com> References: <54606B26-5E8B-4998-88B7-F2997A6D904A@mac.com> Message-ID: <92C56D3ADF4B0D4DA360CAA362D716FD05EFC8667E@scexmbox.serinocoyne.local> Roger- I had the same problem and found the below email chain, and most specifically the latest response directly below from Chad Brewer, to be most helpful. (Thanks Chad!) Thanks, Justin _____________________________________________________ Justin L. Stanford | IT Director P | 212.626.2704 E | JStanford at serinocoyne.com ------------------------ From: casper-bounces at list.jamfsoftware.com [mailto:casper-bounces at list.jamfsoftware.com] On Behalf Of Chad Brewer Sent: Thursday, October 01, 2009 1:02 PM To: casper at list.jamfsoftware.com Subject: Re: [Casper] Windows Recon Rollout What I did is extract jamf.exe from recon.exe. You can do that by running recon.exe /x. Then I run jamf.exe in a .bat file as a startup script via group policy. My .bat files looks like this: copy /v /y "\\server.domain.com\distribution$\Recon\jamf.exe" c:\windows\temp c:\windows\temp\jamf.exe recon -overrideJSS https://casper.domain.com:8443 -username imaging -password ****** "Bradford, Chad" > on September 30, 2009 at 4:02 PM -0700 wrote: After digging around, I think what you are supposed to do now is use Recon.exe on one of your workstations to create a QuickAdd.msi file. You can then host the MSI file in a shared folder some place and use Group Policy to install the MSI file (under Computer Configuration > Policies > Software Settings > Sosftware Installation - doing this will install it when the computer turns on, before login.) Just make sure the Source path is a network path that Everyone has read access to. Chad Chad Bradford | Systems Administrator | Y&R 303 2nd Street, South Tower, 8th floor San Francisco, CA 94107 USA T: +1 415 882 0606 F: +1 415 882 0601 -----Original Message----- From: casper-bounces at list.jamfsoftware.com [mailto:casper-bounces at list.jamfsoftware.com] On Behalf Of Tony S. Wu Sent: Monday, September 28, 2009 2:49 PM To: casper at list.jamfsoftware.com Subject: [Casper] Windows Recon Rollout We are looking to roll out Recon on Windows using group policy. I found this command through some googling: PATH\Recon.exe -server DOMAIN.COM -username USER -password PASS But all the command does is launch Recon. Did the command change for Recon on Windows? Or is there another recommended way of doing this? Thanks. Tony S. Wu tonyswu at mac.com _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -- From: casper-bounces at list.jamfsoftware.com [mailto:casper-bounces at list.jamfsoftware.com] On Behalf Of Roger Corbin Sent: Tuesday, October 13, 2009 2:49 PM To: casper at list.jamfsoftware.com Subject: [Casper] Recon.exe Is it just me or has the documentation for using Recon.exe on PC's disappeared ? There is a version of Recon.exe in Casper 7.1 but there is nothing in the documentation about it. You used to be able to add them using a command like this. * C:\Prg\Casper\Recon.exe -autorun -server 10.1.1.1 -username username -password yourpassword Is that still valid ? Roger Corbin Richmond SD38 -- _____________________________________________________ This email is intended only for the person to which it is addressed and contains confidential information. If you have received this email in error, please delete the email and immediately notify us at (212) 626-2700, or by sending an email to support at serinocoyne.com. Thank You. -------------- next part -------------- An HTML attachment was scrubbed... URL: From jheath at ecfs.org Tue Oct 13 13:10:41 2009 From: jheath at ecfs.org (Heath, Jay) Date: Tue, 13 Oct 2009 16:10:41 -0400 Subject: [Casper] View multiple MAC addresses in advanced JSS search Message-ID: This should be simple: I am trying to provide a master inventory to our Technology director with all the system specs as well as user and asset information. All the system specs are easy: I do a saved search and select no criteria (selecting all), then select the applicable display fields. Then search into a csv. Easy! We are on Casper 7.1 The problem is this: I would like the excel sheet that I provide to show both the ethernet AND the airport MAC addresses, but there is no checkbox for multiple MAC's or MAC 1 and MAC 2, just "MAC Address." I spoke with JAMF and they told me there are a few options: submit a feature request, or, use terminal to dump the Airport MAC into a field (like Room or Phone) in the JSS. This would take a bit of research, plus I currently use all of those fields. I thought there must be a way to export that information (the MAC from en1, in most cases) for all my machines from the MySQL database. Or maybe something even easier. Just wondering if anyone has a way to get information from the JSS into a CSV where there is no option under Display Field in saved searches. Again, it's simple, but any help is appreciated. Thanks. - Jay Heath Fieldston Lower jheath at ecfs.org From aw_aca_bre at nwoca.org Tue Oct 13 16:32:57 2009 From: aw_aca_bre at nwoca.org (Brad Rellinger) Date: Tue, 13 Oct 2009 19:32:57 -0400 Subject: [Casper] View multiple MAC addresses in advanced JSS search In-Reply-To: References: Message-ID: <5596f1620910131632p14d3be80q549231432d293069@mail.gmail.com> We use a custom report to get the Airport MAC address. I have attached it here - you may have to modify it as it only shows you the computer name, Ethernet MAC address, and Airport MAC address. Or you may be able to get all the info by: 1) export all the information that you can they way you are now. 2) export the ethernet mac and airport mac with the attached report. 3) use excel (or filemaker) to import the airport address by matching the ethernet mac address. Hope this helps. --Brad Rellinger Technology Specialist Anthony Wayne Local Schools K-12 aw_aca_bre at nwoca.org On Tue, Oct 13, 2009 at 4:10 PM, Heath, Jay wrote: > This should be simple: > > I am trying to provide a master inventory to our Technology director > with all the system specs as well as user and asset information. All > the system specs are easy: I do a saved search and select no criteria > (selecting all), then select the applicable display fields. Then > search into a csv. Easy! We are on Casper 7.1 > > The problem is this: I would like the excel sheet that I provide to > show both the ethernet AND the airport MAC addresses, but there is no > checkbox for multiple MAC's or MAC 1 and MAC 2, just "MAC Address." I > spoke with JAMF and they told me there are a few options: submit a > feature request, or, use terminal to dump the Airport MAC into a field > (like Room or Phone) in the JSS. This would take a bit of research, > plus I currently use all of those fields. I thought there must be a > way to export that information (the MAC from en1, in most cases) for > all my machines from the MySQL database. Or maybe something even easier. > > Just wondering if anyone has a way to get information from the JSS > into a CSV where there is no option under Display Field in saved > searches. Again, it's simple, but any help is appreciated. Thanks. > > - Jay Heath > > Fieldston Lower > jheath at ecfs.org > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: AirportReport.jsp Type: application/octet-stream Size: 2594 bytes Desc: not available URL: From tlarki at kckps.org Wed Oct 14 06:37:17 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Wed, 14 Oct 2009 08:37:17 -0500 Subject: [Casper] View multiple MAC addresses in advanced JSS search In-Reply-To: <5596f1620910131632p14d3be80q549231432d293069@mail.gmail.com> References: <5596f1620910131632p14d3be80q549231432d293069@mail.gmail.com> Message-ID: <4AD58DBD.7141.0039.0@kckps.org> This could be done via simple shell script as well....here is a quick example I just whipped up. ######################## #!/bin/bash nic=/usr/sbin/networksetup -getmacaddress Ethernet | awk '/ / { print $3 }' aport=/usr/sbin/networksetup -getmacaddress Airport | awk '/ / { print $3 }' #now write to a file /bin/echo "Ethernet MAC is $nic, Airport MAC is $aport" > /Library/Receipts/macadd.txt exit 0 ############################## ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Brad Rellinger 10/13/09 6:32 PM >>> We use a custom report to get the Airport MAC address. I have attached it here - you may have to modify it as it only shows you the computer name, Ethernet MAC address, and Airport MAC address. Or you may be able to get all the info by: 1) export all the information that you can they way you are now. 2) export the ethernet mac and airport mac with the attached report. 3) use excel (or filemaker) to import the airport address by matching the ethernet mac address. Hope this helps. -- Brad Rellinger Technology Specialist Anthony Wayne Local Schools K-12 aw_aca_bre at nwoca.org On Tue, Oct 13, 2009 at 4:10 PM, Heath, Jay wrote: This should be simple: I am trying to provide a master inventory to our Technology director with all the system specs as well as user and asset information. All the system specs are easy: I do a saved search and select no criteria (selecting all), then select the applicable display fields. Then search into a csv. Easy! We are on Casper 7.1 The problem is this: I would like the excel sheet that I provide to show both the ethernet AND the airport MAC addresses, but there is no checkbox for multiple MAC's or MAC 1 and MAC 2, just "MAC Address." I spoke with JAMF and they told me there are a few options: submit a feature request, or, use terminal to dump the Airport MAC into a field (like Room or Phone) in the JSS. This would take a bit of research, plus I currently use all of those fields. I thought there must be a way to export that information (the MAC from en1, in most cases) for all my machines from the MySQL database. Or maybe something even easier. Just wondering if anyone has a way to get information from the JSS into a CSV where there is no option under Display Field in saved searches. Again, it's simple, but any help is appreciated. Thanks. - Jay Heath Fieldston Lower jheath at ecfs.org _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From CMyers at uclan.ac.uk Wed Oct 14 06:40:35 2009 From: CMyers at uclan.ac.uk (Criss Myers) Date: Wed, 14 Oct 2009 14:40:35 +0100 Subject: [Casper] View multiple MAC addresses in advanced JSS search In-Reply-To: <4AD58DBD.7141.0039.0@kckps.org> References: <5596f1620910131632p14d3be80q549231432d293069@mail.gmail.com> <4AD58DBD.7141.0039.0@kckps.org> Message-ID: <4AD5E2E3.BB96.0081.0@uclan.ac.uk> you could also add the computer name so you could identify later Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> "Thomas Larkin" 10/14/09 2:37 PM >>> This could be done via simple shell script as well....here is a quick example I just whipped up. ######################## #!/bin/bash nic=/usr/sbin/networksetup -getmacaddress Ethernet | awk '/ / { print $3 }' aport=/usr/sbin/networksetup -getmacaddress Airport | awk '/ / { print $3 }' #now write to a file /bin/echo "Ethernet MAC is $nic, Airport MAC is $aport" > /Library/Receipts/macadd.txt exit 0 ############################## ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Brad Rellinger 10/13/09 6:32 PM >>> We use a custom report to get the Airport MAC address. I have attached it here - you may have to modify it as it only shows you the computer name, Ethernet MAC address, and Airport MAC address. Or you may be able to get all the info by: 1) export all the information that you can they way you are now. 2) export the ethernet mac and airport mac with the attached report. 3) use excel (or filemaker) to import the airport address by matching the ethernet mac address. Hope this helps. -- Brad Rellinger Technology Specialist Anthony Wayne Local Schools K-12 aw_aca_bre at nwoca.org On Tue, Oct 13, 2009 at 4:10 PM, Heath, Jay wrote: This should be simple: I am trying to provide a master inventory to our Technology director with all the system specs as well as user and asset information. All the system specs are easy: I do a saved search and select no criteria (selecting all), then select the applicable display fields. Then search into a csv. Easy! We are on Casper 7.1 The problem is this: I would like the excel sheet that I provide to show both the ethernet AND the airport MAC addresses, but there is no checkbox for multiple MAC's or MAC 1 and MAC 2, just "MAC Address." I spoke with JAMF and they told me there are a few options: submit a feature request, or, use terminal to dump the Airport MAC into a field (like Room or Phone) in the JSS. This would take a bit of research, plus I currently use all of those fields. I thought there must be a way to export that information (the MAC from en1, in most cases) for all my machines from the MySQL database. Or maybe something even easier. Just wondering if anyone has a way to get information from the JSS into a CSV where there is no option under Display Field in saved searches. Again, it's simple, but any help is appreciated. Thanks. - Jay Heath Fieldston Lower jheath at ecfs.org _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Wed Oct 14 06:40:33 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Wed, 14 Oct 2009 08:40:33 -0500 Subject: [Casper] View multiple MAC addresses in advanced JSS search In-Reply-To: <4AD58DBD.7141.0039.0@kckps.org> References: <5596f1620910131632p14d3be80q549231432d293069@mail.gmail.com> <4AD58DBD.7141.0039.0@kckps.org> Message-ID: <4AD58E81.7141.0039.0@kckps.org> Not enough coffee yet, you need to add back ticks to those variables for it to work.... >>> "Thomas Larkin" 10/14/09 8:37 AM >>> This could be done via simple shell script as well....here is a quick example I just whipped up. ######################## #!/bin/bash nic=/usr/sbin/networksetup -getmacaddress Ethernet | awk '/ / { print $3 }' aport=/usr/sbin/networksetup -getmacaddress Airport | awk '/ / { print $3 }' #now write to a file /bin/echo "Ethernet MAC is $nic, Airport MAC is $aport" > /Library/Receipts/macadd.txt exit 0 ############################## ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Brad Rellinger 10/13/09 6:32 PM >>> We use a custom report to get the Airport MAC address. I have attached it here - you may have to modify it as it only shows you the computer name, Ethernet MAC address, and Airport MAC address. Or you may be able to get all the info by: 1) export all the information that you can they way you are now. 2) export the ethernet mac and airport mac with the attached report. 3) use excel (or filemaker) to import the airport address by matching the ethernet mac address. Hope this helps. -- Brad Rellinger Technology Specialist Anthony Wayne Local Schools K-12 aw_aca_bre at nwoca.org On Tue, Oct 13, 2009 at 4:10 PM, Heath, Jay wrote: This should be simple: I am trying to provide a master inventory to our Technology director with all the system specs as well as user and asset information. All the system specs are easy: I do a saved search and select no criteria (selecting all), then select the applicable display fields. Then search into a csv. Easy! We are on Casper 7.1 The problem is this: I would like the excel sheet that I provide to show both the ethernet AND the airport MAC addresses, but there is no checkbox for multiple MAC's or MAC 1 and MAC 2, just "MAC Address." I spoke with JAMF and they told me there are a few options: submit a feature request, or, use terminal to dump the Airport MAC into a field (like Room or Phone) in the JSS. This would take a bit of research, plus I currently use all of those fields. I thought there must be a way to export that information (the MAC from en1, in most cases) for all my machines from the MySQL database. Or maybe something even easier. Just wondering if anyone has a way to get information from the JSS into a CSV where there is no option under Display Field in saved searches. Again, it's simple, but any help is appreciated. Thanks. - Jay Heath Fieldston Lower jheath at ecfs.org _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Wed Oct 14 06:46:13 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Wed, 14 Oct 2009 08:46:13 -0500 Subject: [Casper] View multiple MAC addresses in advanced JSS search In-Reply-To: <4AD58E81.7141.0039.0@kckps.org> References: <5596f1620910131632p14d3be80q549231432d293069@mail.gmail.com> <4AD58DBD.7141.0039.0@kckps.org> <4AD58E81.7141.0039.0@kckps.org> Message-ID: <4AD58FD4.7141.0039.0@kckps.org> Yeah OK, so since Criss added that I will just rewrite it real quick. I had a few more sips of coffee. Back ticks now included. ######################## #!/bin/bash nic=`/usr/sbin/networksetup -getmacaddress Ethernet | awk '/ / { print $3 }'` aport=`/usr/sbin/networksetup -getmacaddress Airport | awk '/ / { print $3 }'` cname=`/usr/sbin/networksetup -getcomputername` #now write to a file /bin/echo "$cname has Ethernet MAC of $nic, and Airport MAC of $aport" > /Library/Receipts/macadd.txt exit 0 ############################## >>> "Thomas Larkin" 10/14/09 8:40 AM >>> Not enough coffee yet, you need to add back ticks to those variables for it to work.... >>> "Thomas Larkin" 10/14/09 8:37 AM >>> This could be done via simple shell script as well....here is a quick example I just whipped up. ######################## #!/bin/bash nic=/usr/sbin/networksetup -getmacaddress Ethernet | awk '/ / { print $3 }' aport=/usr/sbin/networksetup -getmacaddress Airport | awk '/ / { print $3 }' #now write to a file /bin/echo "Ethernet MAC is $nic, Airport MAC is $aport" > /Library/Receipts/macadd.txt exit 0 ############################## ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Brad Rellinger 10/13/09 6:32 PM >>> We use a custom report to get the Airport MAC address. I have attached it here - you may have to modify it as it only shows you the computer name, Ethernet MAC address, and Airport MAC address. Or you may be able to get all the info by: 1) export all the information that you can they way you are now. 2) export the ethernet mac and airport mac with the attached report. 3) use excel (or filemaker) to import the airport address by matching the ethernet mac address. Hope this helps. -- Brad Rellinger Technology Specialist Anthony Wayne Local Schools K-12 aw_aca_bre at nwoca.org On Tue, Oct 13, 2009 at 4:10 PM, Heath, Jay wrote: This should be simple: I am trying to provide a master inventory to our Technology director with all the system specs as well as user and asset information. All the system specs are easy: I do a saved search and select no criteria (selecting all), then select the applicable display fields. Then search into a csv. Easy! We are on Casper 7.1 The problem is this: I would like the excel sheet that I provide to show both the ethernet AND the airport MAC addresses, but there is no checkbox for multiple MAC's or MAC 1 and MAC 2, just "MAC Address." I spoke with JAMF and they told me there are a few options: submit a feature request, or, use terminal to dump the Airport MAC into a field (like Room or Phone) in the JSS. This would take a bit of research, plus I currently use all of those fields. I thought there must be a way to export that information (the MAC from en1, in most cases) for all my machines from the MySQL database. Or maybe something even easier. Just wondering if anyone has a way to get information from the JSS into a CSV where there is no option under Display Field in saved searches. Again, it's simple, but any help is appreciated. Thanks. - Jay Heath Fieldston Lower jheath at ecfs.org _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Wed Oct 14 08:06:29 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Wed, 14 Oct 2009 10:06:29 -0500 Subject: [Casper] View multiple MAC addresses in advanced JSS search In-Reply-To: <4AD58FD4.7141.0039.0@kckps.org> References: <5596f1620910131632p14d3be80q549231432d293069@mail.gmail.com> <4AD58DBD.7141.0039.0@kckps.org> <4AD58E81.7141.0039.0@kckps.org> <4AD58FD4.7141.0039.0@kckps.org> Message-ID: <4AD5A2A5.7141.0039.0@kckps.org> Actually, now that I think about it, if you wanted to do this in a fashion where you could get a centralized. I tested this and it worked on one machine, but I didn't go much further. This is juts proof of concept. #!/bin/bash ############ # this script is meant for building a report # and writing certain information to a text file over the network # # this script will contain a username and password to mount a network share ############# #set the variables of the info we need nic=`/usr/sbin/networksetup -getmacaddress Ethernet | awk '/ / { print $3 }'` aport=`/usr/sbin/networksetup -getmacaddress Airport | awk '/ / { print $3 }'` cname=`/usr/sbin/networksetup -getcomputername` #not make sure that we can mount the network share to write to a text file #please edit this to reflect your environment /bin/mkdir /Volumes/temp/ /sbin/mount -t afp afp://username:password at myserver.com/sharepoint /Volumes/temp/ #now make sure that the mount point is mounted #edit this line to reflect what should go here mountpoint="/Volumes/temp/Sharepoint" if [[ -e $mountpoint ]] then /bin/echo "$cname, $nic, $aport" >> $mountpoint/report.txt else exit 1 fi exit 0 You could go further to unmount the share point when the script exits. I also used commas in the echo, that way when you go to import it in say a spread sheet, you can use the comma as a point to separate fields. Since I used the double >> it will keep adding lines to that text file. So then just set up a casper policy to run this script on every computer and it will mount the share, write to that file and then exit. You can of course go even further and add lots of more info. I am not sure how Casper does their reports under the hood, but I got to assume it is something similar. Of course I just tested this on my local machine, and it worked so it is just proof of concept. Just FYI, Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Thomas Larkin" 10/14/09 8:46 AM >>> Yeah OK, so since Criss added that I will just rewrite it real quick. I had a few more sips of coffee. Back ticks now included. ######################## #!/bin/bash nic=`/usr/sbin/networksetup -getmacaddress Ethernet | awk '/ / { print $3 }'` aport=`/usr/sbin/networksetup -getmacaddress Airport | awk '/ / { print $3 }'` cname=`/usr/sbin/networksetup -getcomputername` #now write to a file /bin/echo "$cname has Ethernet MAC of $nic, and Airport MAC of $aport" > /Library/Receipts/macadd.txt exit 0 ############################## >>> "Thomas Larkin" 10/14/09 8:40 AM >>> Not enough coffee yet, you need to add back ticks to those variables for it to work.... >>> "Thomas Larkin" 10/14/09 8:37 AM >>> This could be done via simple shell script as well....here is a quick example I just whipped up. ######################## #!/bin/bash nic=/usr/sbin/networksetup -getmacaddress Ethernet | awk '/ / { print $3 }' aport=/usr/sbin/networksetup -getmacaddress Airport | awk '/ / { print $3 }' #now write to a file /bin/echo "Ethernet MAC is $nic, Airport MAC is $aport" > /Library/Receipts/macadd.txt exit 0 ############################## ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> Brad Rellinger 10/13/09 6:32 PM >>> We use a custom report to get the Airport MAC address. I have attached it here - you may have to modify it as it only shows you the computer name, Ethernet MAC address, and Airport MAC address. Or you may be able to get all the info by: 1) export all the information that you can they way you are now. 2) export the ethernet mac and airport mac with the attached report. 3) use excel (or filemaker) to import the airport address by matching the ethernet mac address. Hope this helps. -- Brad Rellinger Technology Specialist Anthony Wayne Local Schools K-12 aw_aca_bre at nwoca.org On Tue, Oct 13, 2009 at 4:10 PM, Heath, Jay wrote: This should be simple: I am trying to provide a master inventory to our Technology director with all the system specs as well as user and asset information. All the system specs are easy: I do a saved search and select no criteria (selecting all), then select the applicable display fields. Then search into a csv. Easy! We are on Casper 7.1 The problem is this: I would like the excel sheet that I provide to show both the ethernet AND the airport MAC addresses, but there is no checkbox for multiple MAC's or MAC 1 and MAC 2, just "MAC Address." I spoke with JAMF and they told me there are a few options: submit a feature request, or, use terminal to dump the Airport MAC into a field (like Room or Phone) in the JSS. This would take a bit of research, plus I currently use all of those fields. I thought there must be a way to export that information (the MAC from en1, in most cases) for all my machines from the MySQL database. Or maybe something even easier. Just wondering if anyone has a way to get information from the JSS into a CSV where there is no option under Display Field in saved searches. Again, it's simple, but any help is appreciated. Thanks. - Jay Heath Fieldston Lower jheath at ecfs.org _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From jared.nichols at ll.mit.edu Wed Oct 14 07:57:13 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Wed, 14 Oct 2009 10:57:13 -0400 Subject: [Casper] Detect GUID partition table? Message-ID: Hi- Does anyone have a creative way of figuring out if a client computer has a GUID partition table? I have a piece of security software that I'd like to offer through self service but it must have a GUID partition table for installation. Intel is the primary requirement, but it's possible to have an Intel proc but still have an APT. I assume the answer is a dummy package but I just don't know what to script for before laying that package. Thanks! j --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Wed Oct 14 08:21:53 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Wed, 14 Oct 2009 10:21:53 -0500 Subject: [Casper] Detect GUID partition table? In-Reply-To: References: Message-ID: <4AD5A641.7141.0039.0@kckps.org> Oh you hit the head on the nail the answer is dummy package. Have a simple shells script run on each computer and have it run a diskutil list with either awk or grep and see if it has GUID or not. Then based on that have it trigger a custom casper policy that loads your dummy package on the system. Then you should be able to build a report based on the policy logs. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 >>> "Nichols, Jared - 1160 - MITLL" 10/14/09 9:57 AM >>> Hi- Does anyone have a creative way of figuring out if a client computer has a GUID partition table? I have a piece of security software that I'd like to offer through self service but it must have a GUID partition table for installation. Intel is the primary requirement, but it's possible to have an Intel proc but still have an APT. I assume the answer is a dummy package but I just don't know what to script for before laying that package. Thanks! j --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 -------------- next part -------------- An HTML attachment was scrubbed... URL: From jared.nichols at ll.mit.edu Wed Oct 14 08:31:59 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Wed, 14 Oct 2009 11:31:59 -0400 Subject: [Casper] Detect GUID partition table? In-Reply-To: <4AD5A641.7141.0039.0@kckps.org> References: <4AD5A641.7141.0039.0@kckps.org> Message-ID: <83A63CAA-A170-4E48-8A4A-CD6AA10AF716@ll.mit.edu> Just what I needed :) Thanks! --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 14, 2009, at 11:21 AM, Thomas Larkin wrote: Have a simple shells script run on each computer and have it run a diskutil list with either awk or grep and see if it has GUID or not. -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Wed Oct 14 09:12:19 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Wed, 14 Oct 2009 11:12:19 -0500 Subject: [Casper] virtual machine deployment Message-ID: <4AD5B213.7141.0039.0@kckps.org> How do you do it? How do you deploy Windows? Sysprep? How do you automate it so no user interaction takes place? Looking at virtual box since it is FOSS Thanks Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 -------------- next part -------------- An HTML attachment was scrubbed... URL: From ryan.manly at gmail.com Wed Oct 14 09:55:40 2009 From: ryan.manly at gmail.com (Ryan Manly) Date: Wed, 14 Oct 2009 11:55:40 -0500 Subject: [Casper] virtual machine deployment In-Reply-To: <4AD5B213.7141.0039.0@kckps.org> References: <4AD5B213.7141.0039.0@kckps.org> Message-ID: I am interested in other's responses as well. We have thought of a few different ways to do this but don't think they are worth the legwork?yet. We have a terminal services farm setup already and each machine is dual-booting with a Parallels VM pointing to the Boot Camp partition. So this isn't something big we are concerned with, just another option for the users. We have thought of the following NO USER INTERACTION methods. The idea being they can pull down a VM from Self-Service and just run it and be bound to AD and be getting policy etc. at any time they want without a tech having to touch it. These are our ideas: You can sysprep XP with a wildcard for the system name to generate a -$RAND and append it to the computer name but then you lose your naming convention. With Vista and 7 you can pre-populate the OUs with the computer names you want and have sysprep do a secure bind and get the name from AD with a unique identifier (ie MAC address) for the system but that is a ton of work ahead of time. Ryan M. Manly Mac OS X Expert Glenbrook High Schools 1835 Landwehr Rd. Glenview, IL 60026 (847) 486-4948 On Wed, Oct 14, 2009 at 11:12 AM, Thomas Larkin wrote: > How do you do it? How do you deploy Windows? Sysprep? How do you > automate it so no user interaction takes place? > > Looking at virtual box since it is FOSS > > Thanks > > Tom > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > > > > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From chad.brewer at bend.k12.or.us Wed Oct 14 11:40:15 2009 From: chad.brewer at bend.k12.or.us (Chad Brewer) Date: Wed, 14 Oct 2009 11:40:15 -0700 Subject: [Casper] Smart Group based on Plug-ins Message-ID: I want to create a Smart Group based on Plug-Ins but It's not working for me. Is the Plugin Title looking for things located in /Library/Internet Plug-Ins? If so, what do I use as the Title - just the name of the plugin file? For example, if I create a test group and use "Flip4Mac WMV Plugin" as the title name it finds 0 computers. However, we should have several thousand computers with that plug-in installed. -------------- next part -------------- An HTML attachment was scrubbed... URL: From dderusha at schawk.com Wed Oct 14 12:40:09 2009 From: dderusha at schawk.com (Dan DeRusha) Date: Wed, 14 Oct 2009 14:40:09 -0500 Subject: [Casper] Smart Group based on Plug-ins In-Reply-To: References: Message-ID: <4A27E61D-00FC-4EA4-84F2-104E6CC29AC7@schawk.com> Chad- Flip for mac is also an application. you would search for application title called WMV Player.app you need the file extension at the end or it doesn't like it. see attached Thanks Dan On Oct 14, 2009, at 1:40 PM, Chad Brewer wrote: > I want to create a Smart Group based on Plug-Ins but It's not > working for me. Is the Plugin Title looking for things located in / > Library/Internet Plug-Ins? If so, what do I use as the Title - just > the name of the plugin file? > > For example, if I create a test group and use "Flip4Mac WMV Plugin" > as the title name it finds 0 computers. However, we should have > several thousand computers with that plug-in installed. > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: Screen shot 2009-10-14 at 2.39.26 PM.png Type: image/png Size: 58573 bytes Desc: not available URL: From donmontalvo at gmail.com Wed Oct 14 12:55:37 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Wed, 14 Oct 2009 14:55:37 -0500 Subject: [Casper] First post - please be easy on me.. In-Reply-To: References: Message-ID: On Sep 3, 2009, at 1:06 PM, Ernst, Craig S. wrote: > Of course I?ll chime in! My comments below as well, but pretty much > everyone has nailed it down. > > On 9/3/09 11:40 AM, "don montalvo" wrote: > >> ...[snip]... >> >> 1. Where does one get Casper training? I called JAMF and they only >> offer Jumpstart training if you purchase their solution. Doesn't >> seem fair to the client, since JAMF is essentially forcing techs to >> learn on the clients' dime. JAMF also suggested 6 or more months of >> real experience before going for certification. There seems to be a >> HUGE lack of resources for techs who want to learn Casper...I would >> think JAMF would see the value in providing training, if only to >> help their product get out there. Are there any Dallas area Casper >> user groups? >>> >> > > As already mentioned JAMF does offer several certification courses > throughout the year. It is a good recommendation to use the software > first before going for this for the reasons already mentioned. I > don?t quite get the whole clients? dime thing. Nothing is really > free. You want a tech to come out and help you setup your product/ > environment. That?s not exactly free for JAMF to send someone, so of > course costs get passed along to the person requesting the services. > The online KB is good, there are video examples on the website, this > list is very helpful, the manual is probably the best source to > learn on your own, and of course a jump start. I am of the mind that > the product, over all, is a very easy product to learn after the > brain wraps around some really basic concepts. Get an eval copy, dig > into the manual, and get your hands dirty. > >> 2. I see several Casper suites. I'm currently most interested in >> imaging/packaging/distribution. I've got years of imaging, >> packaging and distribution experience, so it shouldn't take long to >> learn the JAMF toolset. Can one buy the Casper suite to run in a >> LAB environment? Training is fine - but you do need to LAB test >> before deploying (initially, changes, etc.). > > We use the suite to manage all of our macs, both labs and offices. > We run a test environment to try and test as best we can everything > we deploy. If you have to deal with Adobe Creative Suite this tool > will help with that greatly. > >> 3. Can I get some input from those who have deployed Casper to >> managed/integrated environments? How is AD/OD integration impacted >> by Casper? Can our clients continue to use OD for policies? Can our >> legacy packages/scripts be used if Casper is deployed? >> > > We?re an AD only place. It just works, although the addition of > other binding options like AdmitMac, etc in version 7 have somewhat > limited one function of AD binding (specifying a different > computer_id than the machine name), it still just works. I don?t > know what you have for packages necessarily. Some of them may be > able to just get dropped in. Your scripts should just be able to get > dropped in and used. > >> 4. How comfortable is everyone that Casper isn't going to be the >> next NetOctopus? Is there more than one person steering Casper >> development? Or is there a chance one person can leave JAMF to >> start his own company, and leave all Casper deployment folks out in >> the cold? >> > > A very large percentage of this company is actually alumni or former > employees of this university, including one of the founders. I know > many of them quite well. This company isn?t going anywhere based on > the growth and customer base it now has. There is a group of people > that work on development of the product itself, but the primary > developer is one of the co-founders. I don?t think he?s going > anywhere, and neither are any of the employees. I imagine they have > a next to zero turn over on employees. They do very much listen and > try to cram as much of what the people have spoken for into the > product. The latest release, version 7, is sick (if I can use that > term in a positive manner) and a testament to that. I haven?t even > had the time to use the new version to its full potential there is > so much there. It?s a smaller company focused on a single goal and > because of that and who they are I think they have a unique passion > for trying to make what they provide great. > >> Thanks, >> Don > > Craig Ernst > Systems Management & Configuration > ---------------------------------- > University of Wisconsin-Eau Claire > Learning & Technology Services > Old Library 2109 > 105 Garfield Ave > Eau Claire, WI 54701 > Phone: (715) 836-3639 > Fax: (715) 836-6001 > ---------------------------------- > ernstcs at uwec.edu Craig, My apologies, I never had a chance to respond to your email. Many thanks for your input, it's very helpful. Don From chad.brewer at bend.k12.or.us Wed Oct 14 14:00:52 2009 From: chad.brewer at bend.k12.or.us (Chad Brewer) Date: Wed, 14 Oct 2009 14:00:52 -0700 Subject: [Casper] Smart Group based on Plug-ins In-Reply-To: <4A27E61D-00FC-4EA4-84F2-104E6CC29AC7@schawk.com> References: <4A27E61D-00FC-4EA4-84F2-104E6CC29AC7@schawk.com> Message-ID: I was just using Flip4Mac as an example. I need the Plugin Title to work. We've got a 3rd party web app that requires a plug-in and there's no associated application. Dan DeRusha on October 14, 2009 at 12:40 PM -0700 wrote: >Chad- > > >Flip for mac is also an application. > > >you would search for application title called WMV Player.app > > >you need the file extension at the end or it doesn't like it. > > >see attached >[Image] > > > > >Thanks > > >Dan > >On Oct 14, 2009, at 1:40 PM, Chad Brewer wrote: > > > >I want to create a Smart Group based on Plug-Ins but It's not working for >me. Is the Plugin Title looking for things located in /Library/Internet >Plug-Ins? If so, what do I use as the Title - just the name of the >plugin file? > >For example, if I create a test group and use "Flip4Mac WMV Plugin" as >the title name it finds 0 computers. However, we should have several >thousand computers with that plug-in installed. >_______________________________________________ >Casper mailing list >[ mailto:Casper at list.jamfsoftware.com ]Casper at list.jamfsoftware.com >[ http://list.jamfsoftware.com/mailman/listinfo/casper >]http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: Screen shot 2009-10-14 at 2.39.26 PM.png Type: image/png Size: 58573 bytes Desc: not available URL: From dderusha at schawk.com Wed Oct 14 14:10:35 2009 From: dderusha at schawk.com (Dan DeRusha) Date: Wed, 14 Oct 2009 16:10:35 -0500 Subject: [Casper] Smart Group based on Plug-ins In-Reply-To: References: <4A27E61D-00FC-4EA4-84F2-104E6CC29AC7@schawk.com> Message-ID: <45E18B4E-D1F6-4F80-B46C-E873617AE1F3@schawk.com> Chad- go to your web interface Settings- Inventory options - inventory Preferences and click the software tab click the Add custom search path hyperlink add the plugin path /Library/Internet Plug-Ins make your smart group based on plugin Title has Flash Player.plugin You should be good to go. Flash player was just an example ;0) Dan On Oct 14, 2009, at 4:00 PM, Chad Brewer wrote: > I was just using Flip4Mac as an example. I need the Plugin Title to > work. We've got a 3rd party web app that requires a plug-in and > there's no associated application. > > > > Dan DeRusha on October 14, 2009 at 12:40 PM > -0700 wrote: > Chad- > > > Flip for mac is also an application. > > > you would search for application title called WMV Player.app > > > you need the file extension at the end or it doesn't like it. > > > see attached > > > > > > Thanks > > > Dan > > On Oct 14, 2009, at 1:40 PM, Chad Brewer wrote: > > > > I want to create a Smart Group based on Plug-Ins but It's not > working for me. Is the Plugin Title looking for things located in / > Library/Internet Plug-Ins? If so, what do I use as the Title - just > the name of the plugin file? > > For example, if I create a test group and use "Flip4Mac WMV Plugin" > as the title name it finds 0 computers. However, we should have > several thousand computers with that plug-in installed. > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Thu Oct 15 13:45:36 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 15 Oct 2009 15:45:36 -0500 Subject: [Casper] virtual machine deployment In-Reply-To: References: <4AD5B213.7141.0039.0@kckps.org> Message-ID: <4AD743A0.7141.0039.0@kckps.org> So, nobody currently deploys say a Windows VM in Virtual Box or a commercial VM software package? I guess I am going to just try a few things and see where it goes... -Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Ryan Manly 10/14/09 11:55 AM >>> I am interested in other's responses as well. We have thought of a few different ways to do this but don't think they are worth the legwork?yet. We have a terminal services farm setup already and each machine is dual-booting with a Parallels VM pointing to the Boot Camp partition. So this isn't something big we are concerned with, just another option for the users. We have thought of the following NO USER INTERACTION methods. The idea being they can pull down a VM from Self-Service and just run it and be bound to AD and be getting policy etc. at any time they want without a tech having to touch it. These are our ideas: You can sysprep XP with a wildcard for the system name to generate a -$RAND and append it to the computer name but then you lose your naming convention. With Vista and 7 you can pre-populate the OUs with the computer names you want and have sysprep do a secure bind and get the name from AD with a unique identifier (ie MAC address) for the system but that is a ton of work ahead of time. Ryan M. Manly Mac OS X Expert Glenbrook High Schools 1835 Landwehr Rd. Glenview, IL 60026 (847) 486-4948 On Wed, Oct 14, 2009 at 11:12 AM, Thomas Larkin wrote: How do you do it? How do you deploy Windows? Sysprep? How do you automate it so no user interaction takes place? Looking at virtual box since it is FOSS Thanks Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From Halvorson.Jason at mayo.edu Thu Oct 15 14:46:49 2009 From: Halvorson.Jason at mayo.edu (Jason Halvorson) Date: Thu, 15 Oct 2009 16:46:49 -0500 Subject: [Casper] virtual machine deployment In-Reply-To: <4AD743A0.7141.0039.0@kckps.org> Message-ID: I am not sure if you have already seen the documents below, but I think they may help address your questions for deploying virtual machines. JAMF offers a white paper that covers Packaging and Deploying VMware Fusion with Casper Suite: http://www.jamfsoftware.com/libraries/pdf/white_papers/VMware_and_CasperSuit e.pdf VMware has a Mass Deployment of VMware Fusion document: http://www.vmware.com/files/pdf/Mass_Deployment_of_VMware_Fusion_wp2.pdf -- Jason D. Halvorson ____________________________ Mayo Clinic 200 First Street SW Rochester, MN 55905 www.mayoclinic.org From: Thomas Larkin Date: Thu, 15 Oct 2009 15:45:36 -0500 To: Ryan Manly , casper Subject: Re: [Casper] virtual machine deployment So, nobody currently deploys say a Windows VM in Virtual Box or a commercial VM software package? I guess I am going to just try a few things and see where it goes... -Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Ryan Manly 10/14/09 11:55 AM >>> I am interested in other's responses as well. We have thought of a few different ways to do this but don't think they are worth the legwork?yet. We have a terminal services farm setup already and each machine is dual-booting with a Parallels VM pointing to the Boot Camp partition. So this isn't something big we are concerned with, just another option for the users. We have thought of the following NO USER INTERACTION methods. The idea being they can pull down a VM from Self-Service and just run it and be bound to AD and be getting policy etc. at any time they want without a tech having to touch it. These are our ideas: You can sysprep XP with a wildcard for the system name to generate a -$RAND and append it to the computer name but then you lose your naming convention. With Vista and 7 you can pre-populate the OUs with the computer names you want and have sysprep do a secure bind and get the name from AD with a unique identifier (ie MAC address) for the system but that is a ton of work ahead of time. Ryan M. Manly Mac OS X Expert Glenbrook High Schools 1835 Landwehr Rd. Glenview, IL 60026 (847) 486-4948 On Wed, Oct 14, 2009 at 11:12 AM, Thomas Larkin wrote: > > > > How do you do it? How do you deploy Windows? Sysprep? How do you automate it > so no user interaction takes place? > > > > > > > Looking at virtual box since it is FOSS > > > > > > > Thanks > > > > > > > Tom > > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > > > > > > > > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From peterj4ones at hotmail.co.uk Sat Oct 17 00:51:19 2009 From: peterj4ones at hotmail.co.uk (Peter Jones) Date: Sat, 17 Oct 2009 08:51:19 +0100 Subject: [Casper] Application Deployment Message-ID: Hello I am currently planning to a staged rollout of 65 new macbooks, imacs and macbook pros.I have a NetBoot server in place, which will run a Netinstall set and partition the disk 2 ways. 1 partition holds the OS, and the other will take the user's home folder. I have the NetBoot running at a nice pace now, and am happy with this stage of the process. The Casper suite is preinstalled on the Netinstall image I am using.Where I am having an issue, is with finding the best way to to get the rest of the applications added. Would it be possible to use Casper Imaging for this, or should I try something else?(CS3/CS4, After Effects, Office 2008, Final Cut Xpress, iLife and other applications as required, to be installed on first boot.)If I were to use the Casper Admin application to create a configuration, what would be the best way of getting this set of apps out to the new machines? (Bearing in mind that I will need this deployment to be carried out by people with less Mac knowledge than I would like, meaning I need this to be completed with as little end interaction as possible). Peter JonesMac Systems AdministratorLoretto _________________________________________________________________ Stay in touch with your friends through Messenger on your mobile http://clk.atdmt.com/UKM/go/174426567/direct/01/ -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Sat Oct 17 11:48:47 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Sat, 17 Oct 2009 13:48:47 -0500 Subject: [Casper] Application Deployment Message-ID: <4AD9CB400200003900014145@gwmail.kckps.org> Peter, I would create packages with composer for those apps and upload them into Casper admin. Then create a work flow in the JSS for the auto run data for those client machines. Then when you image them, they will get all those applications. This way it is all automated and no one has to do anything at all. Unless you are trying to roll them out to machines that are already deployed, then just send them out via Casper Remote or a policy in the JSS. -Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Peter Jones 10/17/09 2:53 AM >>> Hello I am currently planning to a staged rollout of 65 new macbooks, imacs and macbook pros.I have a NetBoot server in place, which will run a Netinstall set and partition the disk 2 ways. 1 partition holds the OS, and the other will take the user's home folder. I have the NetBoot running at a nice pace now, and am happy with this stage of the process. The Casper suite is preinstalled on the Netinstall image I am using.Where I am having an issue, is with finding the best way to to get the rest of the applications added. Would it be possible to use Casper Imaging for this, or should I try something else?(CS3/CS4, After Effects, Office 2008, Final Cut Xpress, iLife and other applications as required, to be installed on first boot.)If I were to use the Casper Admin application to create a configuration, what would be the best way of getting this set of apps out to the new machines? (Bearing in mind that I will need this deployment to be carried out by people with less Mac knowledge than I would like, meaning I need this to be completed with as little end interaction as possible). Peter JonesMac Systems AdministratorLoretto _________________________________________________________________ Stay in touch with your friends through Messenger on your mobile http://clk.atdmt.com/UKM/go/174426567/direct/01/ From jared.nichols at ll.mit.edu Mon Oct 19 10:47:39 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Mon, 19 Oct 2009 13:47:39 -0400 Subject: [Casper] Polling for partition table script Message-ID: Hi- I recently posted that I needed to poll for partition table type on the list. I've written the basics of the script and figured someone else may need it. Here it is... copy, paste, modify... whatevs. Obviously, throw in your own comments into the code. j #!/bin/sh PartitionType=`diskutil list | grep 0:` case $PartitionType in *Apple_partition_scheme*) echo "You have an Apple Partition Table" ## Add in whatever action you want like a "touch" command to place a dummy package ;; *GUID_partition_scheme*) echo "You have a GUID Partition Table" ## Add in whatever action you want like a "touch" command to place a dummy package ;; esac exit 0 --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 -------------- next part -------------- An HTML attachment was scrubbed... URL: From jared.nichols at ll.mit.edu Mon Oct 19 10:47:39 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Mon, 19 Oct 2009 13:47:39 -0400 Subject: [Casper] Polling for partition table script Message-ID: Hi- I recently posted that I needed to poll for partition table type on the list. I've written the basics of the script and figured someone else may need it. Here it is... copy, paste, modify... whatevs. Obviously, throw in your own comments into the code. j #!/bin/sh PartitionType=`diskutil list | grep 0:` case $PartitionType in *Apple_partition_scheme*) echo "You have an Apple Partition Table" ## Add in whatever action you want like a "touch" command to place a dummy package ;; *GUID_partition_scheme*) echo "You have a GUID Partition Table" ## Add in whatever action you want like a "touch" command to place a dummy package ;; esac exit 0 --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Mon Oct 19 11:08:02 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 19 Oct 2009 13:08:02 -0500 Subject: [Casper] Polling for partition table script In-Reply-To: References: Message-ID: <4ADC64B2.7141.0039.0@kckps.org> Jared, I actually wrote a few interactive shell scripts for the IT department at my old job. We used Novell's Zen imaging and I used a script to run the commands from an interactive menu. Here is an example of an OS X troubleshooting script I wrote a few years back that you could use as an example: I will bold it so enable HTML on your email. #!/bin/bash #This is a menu for basic diagnostics by Thomas Larkin echo "Hello $USER, Welcome to the Tom's Diagnostic script!" echo "Today is ";date echo "Number of user logged in : " ; who | wc -l echo "Calendar" cal selection= until [ "$selection" = "0" ]; do echo "" echo "Select an option please" echo "1 - Display all objects in /Volumes" echo "2 - Display total disk usage of /, this may take a while. You will be prompted for admin access" echo "3 - Display the disk usage of my Home Directory, this may take a while" echo "4 - Print the contents of /var/log/system.log" echo "5 - List all current users logged in this computer" echo "6 - Display my Network Settings and Information" echo "7 - Display my BASH command paths" echo "8 - Display all the current running processes" echo "9 - Display current resources being used" echo "10 - Display the print error log" echo "11 - Display the crash reporter log" echo "12 - Run Verify permissions on the boot volume" echo "13 - Run Repair Permissions on the boot volume" echo "14 - Run verify volume on the boot volume" echo "15 - list all information of boot volume" echo "0 - exit program" echo "" echo -n "Enter selection: " read selection echo "" case $selection in 1 ) /bin/ls -al /Volumes ;; 2 ) sudo /usr/bin/du -h -x / | sort ;; 3 ) /usr/bin/du -a -h -x /Users/$USER | sort ;; 4 ) /bin/cat /var/log/system.log ;; 5 ) /usr/bin/finger -h ;; 6 ) /sbin/ifconfig ;; 7 ) /bin/echo $PATH ;; 8 ) /bin/ps -A ;; 9 ) /usr/bin/top -s5 20 ;; 10 ) /bin/cat /var/log/cups/error_log ;; 11 ) /bin/cat /var/log/crashreporter.log ;; 12 ) /usr/sbin/diskutil verifyPermissions / ;; 13 ) /usr/sbin/diskutil repairPermissions / ;; 14 ) /usr/sbin/diskutil verifyVolume / ;; 15 ) /usr/sbin/diskutil list / ;; 0 ) exit ;; * ) echo "Please enter a valid option" esac done So you could just edit the commands into a script of your own and run it and it can be interactive. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> "Nichols, Jared - 1160 - MITLL" 10/19/09 12:47 PM >>> Hi- I recently posted that I needed to poll for partition table type on the list. I've written the basics of the script and figured someone else may need it. Here it is... copy, paste, modify... whatevs. Obviously, throw in your own comments into the code. j #!/bin/sh PartitionType=`diskutil list | grep 0:` case $PartitionType in *Apple_partition_scheme*) echo "You have an Apple Partition Table" ## Add in whatever action you want like a "touch" command to place a dummy package ;; *GUID_partition_scheme*) echo "You have a GUID Partition Table" ## Add in whatever action you want like a "touch" command to place a dummy package ;; esac exit 0 --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 -------------- next part -------------- An HTML attachment was scrubbed... URL: From jared.nichols at ll.mit.edu Mon Oct 19 11:11:04 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Mon, 19 Oct 2009 14:11:04 -0400 Subject: [Casper] Polling for partition table script In-Reply-To: <4ADC64B2.7141.0039.0@kckps.org> References: <4ADC64B2.7141.0039.0@kckps.org> Message-ID: On Oct 19, 2009, at 2:08 PM, Thomas Larkin wrote: We used Novell's Zen imaging ::shudder:: nice script though :) --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Mon Oct 19 11:33:46 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 19 Oct 2009 13:33:46 -0500 Subject: [Casper] Polling for partition table script In-Reply-To: References: <4ADC64B2.7141.0039.0@kckps.org> Message-ID: <4ADC6ABA.7141.0039.0@kckps.org> It honestly wasn't bad, after we made my script run first automatically after a PXE boot you just hit a number and walked away from it. >>> "Nichols, Jared - 1160 - MITLL" 10/19/09 1:11 PM >>> On Oct 19, 2009, at 2:08 PM, Thomas Larkin wrote: We used Novell's Zen imaging ::shudder:: nice script though :) --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Mon Oct 19 11:42:23 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 19 Oct 2009 13:42:23 -0500 Subject: [Casper] Polling for partition table script In-Reply-To: <4ADC6ABA.7141.0039.0@kckps.org> References: <4ADC64B2.7141.0039.0@kckps.org> <4ADC6ABA.7141.0039.0@kckps.org> Message-ID: <4ADC6CBF.7141.0039.0@kckps.org> I just copied and pasted that script from an old post of mine on a mac forum. It was written I think for 10.3 so you may have to alter it, let me know if you need any more help with it. I think that you could take my interactive script and modify it to do what you want to do. Or, you could just do an expression to automate the whole thing if you are going to do a dummy package. -Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> "Thomas Larkin" 10/19/09 1:33 PM >>> It honestly wasn't bad, after we made my script run first automatically after a PXE boot you just hit a number and walked away from it. >>> "Nichols, Jared - 1160 - MITLL" 10/19/09 1:11 PM >>> On Oct 19, 2009, at 2:08 PM, Thomas Larkin wrote: We used Novell's Zen imaging ::shudder:: nice script though :) --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 -------------- next part -------------- An HTML attachment was scrubbed... URL: From sachsl at sec.gov Mon Oct 19 13:18:44 2009 From: sachsl at sec.gov (SACHS,LEONARD) Date: Mon, 19 Oct 2009 16:18:44 -0400 Subject: [Casper] Software reports: Office 12.2.1 Message-ID: In putting together a report on MS Office 2008, I would like to create a report that grabs all systems with 12.2.1... Presently all I can grab, due to MS, is Version 12.2.0, since the Latest installed update is 12.2.1. Is there a way to filter on 12.2.1? My plan ? that we?ve tested is to: 1. create a 12.2.1 package 2. offer the package as self service 3. have users update when it isn?t interfering with their work It?s worked just fine for my 15 or so testers.... Lenny Sachs U.S. Securities and Exchange Commission Office of Information Technology SEC Macintosh Developer Phone: 202-551-8716 Cell: 626 255-5676 Email: Sachsl at sec.gov -------------- next part -------------- An HTML attachment was scrubbed... URL: From William.Smith at merrillcorp.com Mon Oct 19 14:08:06 2009 From: William.Smith at merrillcorp.com (Smith, William) Date: Mon, 19 Oct 2009 16:08:06 -0500 Subject: [Casper] Software reports: Office 12.2.1 In-Reply-To: Message-ID: On 10/19/09 3:18 PM, "SACHS,LEONARD" wrote: > In putting together a report on MS Office 2008, I would like to create a > report that grabs all systems with 12.2.1... Presently all I can grab, due to > MS, is Version 12.2.0, since the Latest installed update is 12.2.1. Is there a > way to filter on 12.2.1? The MicrosoftComponentPlugin will always return the current version. The following is a one line AppleScript to get you the version number: set fileInfo to short version of (info for file "Macintosh HD:Applications:Microsoft Office 2008:Office:MicrosoftComponentPlugin.framework") -- William Smith Technical Analyst Merrill Communications LLC (651) 632-1492 From davidsgenericemail at gmail.com Mon Oct 19 14:58:46 2009 From: davidsgenericemail at gmail.com (David) Date: Mon, 19 Oct 2009 14:58:46 -0700 Subject: [Casper] 2-partition Casper solution....? Message-ID: <8e4b95890910191458v104ef749hc62e48f7133832f2@mail.gmail.com> Hello Happy Casper People! Out of a dire need to quickly and efficiently upgrade users from one OS to another (say, leopard to snow leopard), I've decided to research how having a two-partition scheme can help us all save time and money. Here's the breakdown I've been testing: Partition One - System Files and Folders Partition Two - User folders and Applications I do a regular OS installation from DVD, then create a second partition. I copy the "Users" and "Applications" folder over to this new second partition and then - using symbolic links - I link them back to the main System partition. This set-up runs smoothly and efficiently... when I create it on my own. But scripting this solution in Casper has not been easy to figure out, so I'm calling on all ya'll for some help. While the Casper Imaging.app allow one to create new partitions on the fly, it DOESN'T allow you to wipe a drive, create two partitions from scratch and then apply the images you've uploaded to Casper Admin to each of those new partitions. Which begs the question: how can I pull this off?! Best I can tell, I'd have to: 1) snapshot a base OS image 2) snapshot an Data image comprised of the "applications" and "users" folders 3) launch casper imaging, apply my base OS image to the existing partition 4) create a second partition using casper imaging 5) apply the Data image to the second partition 6) run a script to create the symlinks necessary to allow the two partitions to talk to one another Happy to hear your thoughts. I can't really find any "best practices" notes of this topic on the KB over at JAMF so if any of you have experience in this arena, please share your thoughts! -- David Koff | SysAdmin | ITS | The J. Paul Getty Trust dkoff at getty.edu | p. 310.440.6266 | f. 310.440.7705 Getty Cell Phone 310.869.8791 --------------------------------------------------- Please consider the environment before printing this email --------------------------------------------------- -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Tue Oct 20 07:15:32 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Tue, 20 Oct 2009 09:15:32 -0500 Subject: [Casper] 2-partition Casper solution....? In-Reply-To: <8e4b95890910191458v104ef749hc62e48f7133832f2@mail.gmail.com> References: <8e4b95890910191458v104ef749hc62e48f7133832f2@mail.gmail.com> Message-ID: <4ADD7FB4.7141.0039.0@kckps.org> David, There are several ways to accomplish this. First I would have a preflight script that lays down your partitions. Then lay down your image on the primary partition and make two folders on the secondary called /Users and /Applications with a post image script. Then create symbolic links to each folder. You can then move all your applications to the next partition. Actually you want to move them first then create a symbolic link. I guess you could also make a compiled configuration of your Applications into one image, then set that image to a manual trigger policy and in the post flight have it block copy to your secondary partition. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> David 10/19/09 4:58 PM >>> Hello Happy Casper People! Out of a dire need to quickly and efficiently upgrade users from one OS to another (say, leopard to snow leopard), I've decided to research how having a two-partition scheme can help us all save time and money. Here's the breakdown I've been testing: Partition One - System Files and Folders Partition Two - User folders and Applications I do a regular OS installation from DVD, then create a second partition. I copy the "Users" and "Applications" folder over to this new second partition and then - using symbolic links - I link them back to the main System partition. This set-up runs smoothly and efficiently... when I create it on my own. But scripting this solution in Casper has not been easy to figure out, so I'm calling on all ya'll for some help. While the Casper Imaging.app allow one to create new partitions on the fly, it DOESN'T allow you to wipe a drive, create two partitions from scratch and then apply the images you've uploaded to Casper Admin to each of those new partitions. Which begs the question: how can I pull this off?! Best I can tell, I'd have to: 1) snapshot a base OS image 2) snapshot an Data image comprised of the "applications" and "users" folders 3) launch casper imaging, apply my base OS image to the existing partition 4) create a second partition using casper imaging 5) apply the Data image to the second partition 6) run a script to create the symlinks necessary to allow the two partitions to talk to one another Happy to hear your thoughts. I can't really find any "best practices" notes of this topic on the KB over at JAMF so if any of you have experience in this arena, please share your thoughts! -- David Koff | SysAdmin | ITS | The J. Paul Getty Trust dkoff at getty.edu | p. 310.440.6266 | f. 310.440.7705 Getty Cell Phone 310.869.8791 --------------------------------------------------- Please consider the environment before printing this email --------------------------------------------------- -------------- next part -------------- An HTML attachment was scrubbed... URL: From RobbGibson at OfficeMax.com Tue Oct 20 09:29:14 2009 From: RobbGibson at OfficeMax.com (Gibson, Robb) Date: Tue, 20 Oct 2009 11:29:14 -0500 Subject: [Casper] 2-partition Casper solution....? In-Reply-To: <4ADD7FB4.7141.0039.0@kckps.org> Message-ID: Hi David. Is the partition that contains your /User folder tied into Active Directory at all or are they local? Robb Gibson System Engineer - eMMS, Publishing Systems OfficeMax : 263 Shuman Blvd. : Naperville, IL 60563 (630) 864-5242 On 10/20/09 9:15 AM, "Thomas Larkin" wrote: > > > David, > > > > There are several ways to accomplish this. First I would have a preflight > script that lays down your partitions. Then lay down your image on the > primary partition and make two folders on the secondary called /Users and > /Applications with a post image script. Then create symbolic links to each > folder. You can then move all your applications to the next partition. > Actually you want to move them first then create a symbolic link. > > > > I guess you could also make a compiled configuration of your Applications > into one image, then set that image to a manual trigger policy and in the post > flight have it block copy to your secondary partition. > > > > > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > >>>> >>> David 10/19/09 4:58 PM >>> > Hello Happy Casper People! > > Out of a dire need to quickly and efficiently upgrade users from one OS to > another (say, leopard to snow leopard), I've decided to research how having a > two-partition scheme can help us all save time and money. > > Here's the breakdown I've been testing: > > Partition One - System Files and Folders > Partition Two - User folders and Applications > > I do a regular OS installation from DVD, then create a second partition. I > copy the "Users" and "Applications" folder over to this new second partition > and then - using symbolic links - I link them back to the main System > partition. This set-up runs smoothly and efficiently... when I create it on my > own. But scripting this solution in Casper has not been easy to figure out, so > I'm calling on all ya'll for some help. > > While the Casper Imaging.app allow one to create new partitions on the fly, it > DOESN'T allow you to wipe a drive, create two partitions from scratch and then > apply the images you've uploaded to Casper Admin to each of those new > partitions. > > Which begs the question: how can I pull this off?! Best I can tell, I'd have > to: > > 1) snapshot a base OS image > 2) snapshot an Data image comprised of the "applications" and "users" folders > 3) launch casper imaging, apply my base OS image to the existing partition > 4) create a second partition using casper imaging > 5) apply the Data image to the second partition > 6) run a script to create the symlinks necessary to allow the two partitions > to talk to one another > > Happy to hear your thoughts. I can't really find any "best practices" notes of > this topic on the KB over at JAMF so if any of you have experience in this > arena, please share your thoughts! > > -- > > > David Koff | SysAdmin | ITS | The J. Paul Getty Trust > dkoff at getty.edu | p. 310.440.6266 | f. 310.440.7705 > Getty Cell Phone 310.869.8791 > > --------------------------------------------------- > > Please consider the environment > before printing this email > > --------------------------------------------------- > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/gif Size: 4528 bytes Desc: not available URL: From tlarki at kckps.org Tue Oct 20 11:25:33 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Tue, 20 Oct 2009 13:25:33 -0500 Subject: [Casper] Feature request, change keychain with password change via policy Message-ID: <4ADDBA4D.7141.0039.0@kckps.org> I am doing my master password resets right now on all client machines. I am going to have to now write a post script to also modify the system keychain to reflect the password change of the local admin account. I would like to see this feature built into the Casper Suite in the future if possible. Thanks Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base -------------- next part -------------- An HTML attachment was scrubbed... URL: From gallaghersj at email.chop.edu Tue Oct 20 13:46:01 2009 From: gallaghersj at email.chop.edu (Gallagher, Sean J) Date: Tue, 20 Oct 2009 16:46:01 -0400 Subject: [Casper] Re 1 Software reports: Office 12.2.1 In-Reply-To: Message-ID: I had the same issue. I installed the 12.2.1 update on a test machine, then I created a smart group based on the Receipt info. This gave me a list of users with that version installed. Sean On 10/20/09 3:00 PM, "casper-request at list.jamfsoftware.com" wrote: Send Casper mailing list submissions to casper at list.jamfsoftware.com To subscribe or unsubscribe via the World Wide Web, visit http://list.jamfsoftware.com/mailman/listinfo/casper or, via email, send a message with subject or body 'help' to casper-request at list.jamfsoftware.com You can reach the person managing the list at casper-owner at list.jamfsoftware.com When replying, please edit your Subject line so it is more specific than "Re: Contents of Casper digest..." Today's Topics: 1. Software reports: Office 12.2.1 (SACHS,LEONARD) 2. Re: Software reports: Office 12.2.1 (Smith, William) 3. 2-partition Casper solution....? (David) 4. Re: 2-partition Casper solution....? (Thomas Larkin) 5. Re: 2-partition Casper solution....? (Gibson, Robb) 6. Feature request, change keychain with password change via policy (Thomas Larkin) ---------------------------------------------------------------------- Message: 1 Date: Mon, 19 Oct 2009 16:18:44 -0400 From: "SACHS,LEONARD" Subject: [Casper] Software reports: Office 12.2.1 To: Message-ID: Content-Type: text/plain; charset="iso-8859-1" In putting together a report on MS Office 2008, I would like to create a report that grabs all systems with 12.2.1... Presently all I can grab, due to MS, is Version 12.2.0, since the Latest installed update is 12.2.1. Is there a way to filter on 12.2.1? My plan ? that we?ve tested is to: 1. create a 12.2.1 package 2. offer the package as self service 3. have users update when it isn?t interfering with their work It?s worked just fine for my 15 or so testers.... Lenny Sachs U.S. Securities and Exchange Commission Office of Information Technology SEC Macintosh Developer Phone: 202-551-8716 Cell: 626 255-5676 Email: Sachsl at sec.gov -------------- next part -------------- An HTML attachment was scrubbed... URL: ------------------------------ Message: 2 Date: Mon, 19 Oct 2009 16:08:06 -0500 From: "Smith, William" Subject: Re: [Casper] Software reports: Office 12.2.1 To: "casper at list.jamfsoftware.com" Message-ID: Content-Type: text/plain; charset="us-ascii" On 10/19/09 3:18 PM, "SACHS,LEONARD" wrote: > In putting together a report on MS Office 2008, I would like to create a > report that grabs all systems with 12.2.1... Presently all I can grab, due to > MS, is Version 12.2.0, since the Latest installed update is 12.2.1. Is there a > way to filter on 12.2.1? The MicrosoftComponentPlugin will always return the current version. The following is a one line AppleScript to get you the version number: set fileInfo to short version of (info for file "Macintosh HD:Applications:Microsoft Office 2008:Office:MicrosoftComponentPlugin.framework") -- William Smith Technical Analyst Merrill Communications LLC (651) 632-1492 ------------------------------ Message: 3 Date: Mon, 19 Oct 2009 14:58:46 -0700 From: David Subject: [Casper] 2-partition Casper solution....? To: casper at list.jamfsoftware.com Message-ID: <8e4b95890910191458v104ef749hc62e48f7133832f2 at mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1" Hello Happy Casper People! Out of a dire need to quickly and efficiently upgrade users from one OS to another (say, leopard to snow leopard), I've decided to research how having a two-partition scheme can help us all save time and money. Here's the breakdown I've been testing: Partition One - System Files and Folders Partition Two - User folders and Applications I do a regular OS installation from DVD, then create a second partition. I copy the "Users" and "Applications" folder over to this new second partition and then - using symbolic links - I link them back to the main System partition. This set-up runs smoothly and efficiently... when I create it on my own. But scripting this solution in Casper has not been easy to figure out, so I'm calling on all ya'll for some help. While the Casper Imaging.app allow one to create new partitions on the fly, it DOESN'T allow you to wipe a drive, create two partitions from scratch and then apply the images you've uploaded to Casper Admin to each of those new partitions. Which begs the question: how can I pull this off?! Best I can tell, I'd have to: 1) snapshot a base OS image 2) snapshot an Data image comprised of the "applications" and "users" folders 3) launch casper imaging, apply my base OS image to the existing partition 4) create a second partition using casper imaging 5) apply the Data image to the second partition 6) run a script to create the symlinks necessary to allow the two partitions to talk to one another Happy to hear your thoughts. I can't really find any "best practices" notes of this topic on the KB over at JAMF so if any of you have experience in this arena, please share your thoughts! -- David Koff | SysAdmin | ITS | The J. Paul Getty Trust dkoff at getty.edu | p. 310.440.6266 | f. 310.440.7705 Getty Cell Phone 310.869.8791 --------------------------------------------------- Please consider the environment before printing this email --------------------------------------------------- -------------- next part -------------- An HTML attachment was scrubbed... URL: ------------------------------ Message: 4 Date: Tue, 20 Oct 2009 09:15:32 -0500 From: "Thomas Larkin" Subject: Re: [Casper] 2-partition Casper solution....? To: "David" , Message-ID: <4ADD7FB4.7141.0039.0 at kckps.org> Content-Type: text/plain; charset="us-ascii" David, There are several ways to accomplish this. First I would have a preflight script that lays down your partitions. Then lay down your image on the primary partition and make two folders on the secondary called /Users and /Applications with a post image script. Then create symbolic links to each folder. You can then move all your applications to the next partition. Actually you want to move them first then create a symbolic link. I guess you could also make a compiled configuration of your Applications into one image, then set that image to a manual trigger policy and in the post flight have it block copy to your secondary partition. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> David 10/19/09 4:58 PM >>> Hello Happy Casper People! Out of a dire need to quickly and efficiently upgrade users from one OS to another (say, leopard to snow leopard), I've decided to research how having a two-partition scheme can help us all save time and money. Here's the breakdown I've been testing: Partition One - System Files and Folders Partition Two - User folders and Applications I do a regular OS installation from DVD, then create a second partition. I copy the "Users" and "Applications" folder over to this new second partition and then - using symbolic links - I link them back to the main System partition. This set-up runs smoothly and efficiently... when I create it on my own. But scripting this solution in Casper has not been easy to figure out, so I'm calling on all ya'll for some help. While the Casper Imaging.app allow one to create new partitions on the fly, it DOESN'T allow you to wipe a drive, create two partitions from scratch and then apply the images you've uploaded to Casper Admin to each of those new partitions. Which begs the question: how can I pull this off?! Best I can tell, I'd have to: 1) snapshot a base OS image 2) snapshot an Data image comprised of the "applications" and "users" folders 3) launch casper imaging, apply my base OS image to the existing partition 4) create a second partition using casper imaging 5) apply the Data image to the second partition 6) run a script to create the symlinks necessary to allow the two partitions to talk to one another Happy to hear your thoughts. I can't really find any "best practices" notes of this topic on the KB over at JAMF so if any of you have experience in this arena, please share your thoughts! -- David Koff | SysAdmin | ITS | The J. Paul Getty Trust dkoff at getty.edu | p. 310.440.6266 | f. 310.440.7705 Getty Cell Phone 310.869.8791 --------------------------------------------------- Please consider the environment before printing this email --------------------------------------------------- -------------- next part -------------- An HTML attachment was scrubbed... URL: ------------------------------ Message: 5 Date: Tue, 20 Oct 2009 11:29:14 -0500 From: "Gibson, Robb" Subject: Re: [Casper] 2-partition Casper solution....? To: Message-ID: Content-Type: text/plain; charset="us-ascii" Hi David. Is the partition that contains your /User folder tied into Active Directory at all or are they local? Robb Gibson System Engineer - eMMS, Publishing Systems OfficeMax : 263 Shuman Blvd. : Naperville, IL 60563 (630) 864-5242 On 10/20/09 9:15 AM, "Thomas Larkin" wrote: > > > David, > > > > There are several ways to accomplish this. First I would have a preflight > script that lays down your partitions. Then lay down your image on the > primary partition and make two folders on the secondary called /Users and > /Applications with a post image script. Then create symbolic links to each > folder. You can then move all your applications to the next partition. > Actually you want to move them first then create a symbolic link. > > > > I guess you could also make a compiled configuration of your Applications > into one image, then set that image to a manual trigger policy and in the post > flight have it block copy to your secondary partition. > > > > > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > >>>> >>> David 10/19/09 4:58 PM >>> > Hello Happy Casper People! > > Out of a dire need to quickly and efficiently upgrade users from one OS to > another (say, leopard to snow leopard), I've decided to research how having a > two-partition scheme can help us all save time and money. > > Here's the breakdown I've been testing: > > Partition One - System Files and Folders > Partition Two - User folders and Applications > > I do a regular OS installation from DVD, then create a second partition. I > copy the "Users" and "Applications" folder over to this new second partition > and then - using symbolic links - I link them back to the main System > partition. This set-up runs smoothly and efficiently... when I create it on my > own. But scripting this solution in Casper has not been easy to figure out, so > I'm calling on all ya'll for some help. > > While the Casper Imaging.app allow one to create new partitions on the fly, it > DOESN'T allow you to wipe a drive, create two partitions from scratch and then > apply the images you've uploaded to Casper Admin to each of those new > partitions. > > Which begs the question: how can I pull this off?! Best I can tell, I'd have > to: > > 1) snapshot a base OS image > 2) snapshot an Data image comprised of the "applications" and "users" folders > 3) launch casper imaging, apply my base OS image to the existing partition > 4) create a second partition using casper imaging > 5) apply the Data image to the second partition > 6) run a script to create the symlinks necessary to allow the two partitions > to talk to one another > > Happy to hear your thoughts. I can't really find any "best practices" notes of > this topic on the KB over at JAMF so if any of you have experience in this > arena, please share your thoughts! > > -- > > > David Koff | SysAdmin | ITS | The J. Paul Getty Trust > dkoff at getty.edu | p. 310.440.6266 | f. 310.440.7705 > Getty Cell Phone 310.869.8791 > > --------------------------------------------------- > > Please consider the environment > before printing this email > > --------------------------------------------------- > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/gif Size: 4528 bytes Desc: not available URL: ------------------------------ Message: 6 Date: Tue, 20 Oct 2009 13:25:33 -0500 From: "Thomas Larkin" Subject: [Casper] Feature request, change keychain with password change via policy To: Message-ID: <4ADDBA4D.7141.0039.0 at kckps.org> Content-Type: text/plain; charset="us-ascii" I am doing my master password resets right now on all client machines. I am going to have to now write a post script to also modify the system keychain to reflect the password change of the local admin account. I would like to see this feature built into the Casper Suite in the future if possible. Thanks Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base -------------- next part -------------- An HTML attachment was scrubbed... URL: ------------------------------ _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper End of Casper Digest, Vol 34, Issue 20 ************************************** -------------- next part -------------- An HTML attachment was scrubbed... URL: From nmiller at comanche.k12.ok.us Wed Oct 21 09:06:42 2009 From: nmiller at comanche.k12.ok.us (Nelson Miller) Date: Wed, 21 Oct 2009 11:06:42 -0500 Subject: [Casper] Managed Admins Message-ID: I have noticed recently that all of my Mac's admin accounts are now labeled as "Admin, Managed". My local admin does not have the right to do anything now. This never happened before I got Casper up and running. The only managed preference that I have is the Home Page setting. This is setup to run on all Macs. I did disable it and restarted several test computers and it did not seem to fix the issue. Any ideas? -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Wed Oct 21 11:40:20 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Wed, 21 Oct 2009 13:40:20 -0500 Subject: [Casper] Managed Admins In-Reply-To: References: Message-ID: <4ADF0F44.7141.0039.0@kckps.org> Sounds like MCX was implemented wrong and globally disabled all users. Undo whatever Casper management you did with MCX and see if the problem goes away. -Tom ?xml version="1.0" encoding="ISO-8859-1"?> ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> "Nelson Miller" 10/21/09 11:06 AM >>> I have noticed recently that all of my Mac's admin accounts are now labeled as "Admin, Managed". My local admin does not have the right to do anything now. This never happened before I got Casper up and running. The only managed preference that I have is the Home Page setting. This is setup to run on all Macs. I did disable it and restarted several test computers and it did not seem to fix the issue. Any ideas? -------------- next part -------------- An HTML attachment was scrubbed... URL: From nicometo.tim at mayo.edu Wed Oct 21 12:20:31 2009 From: nicometo.tim at mayo.edu (Nicometo, Tim S.) Date: Wed, 21 Oct 2009 14:20:31 -0500 Subject: [Casper] LP Admin Group In-Reply-To: Message-ID: We just experienced this issue first hand. Our scenario is a bit different... When imaging machines, we use Casper Imaging 7.1 to create user accounts. These users are simple local admins. We do not use any form of AD to administer the accounts. We have been able to verify using dscl, that users created using Casper Imaging 7.1 are NOT included in the lpadmin group, however they are included in the admin group. Local admin accounts created using the System Preferences/Accounts are added to all appropriate groups. Currently, we have about 50 machines in the field with users that cannot add printers. Company policy is to allow our users to do this. In order to solve the current issue, would it be best to send out the following command/script; dscl . -append /Groups/_lpadmin GroupMembership /$3 More of a question however, is why is this happening to begin with? -- Tim S. Nicometo Media Engineer Media Support Services Phone: 507 284-0741 E-mail: timn at mayo.edu _____________________________ Mayo Clinic 200 First Street SW Rochester, MN 55905 www.mayoclinic.org > From: "Nicholas, Lauren" > Date: Thu, 20 Aug 2009 13:28:43 -0400 > To: Alan Benedict , Casper List > > Subject: Re: [Casper] LP Admin Group > > I'm really not sure why, but I have still been having a heck of a time getting > this lpadmin group to actually work. I've tried the couple of scripts > (distributed via policy) that have been shared with the listserv. Also I've > tried the MCX management. Still not sure what is going wrong! I'm on 10.5.8 > and I thought that was resolved with that update? Anyhow, in my environment I > have network users who are given admin rights to their local machines via the > management console in AD. When they login to their Mac, and go to Accounts, > you see "username: Admin, Network" So, maybe that was why I was having some > issues with the lpadmin group? > > Anyhow, either way, here's how I fixed it: > > Booted up into Single User Mode. > > mount -uw / > /bin/launchctl load > /System/Library/LaunchDaemons/com.apple.DirectoryServices.plist & > dseditgroup -o edit -p -a admin -t group _lpadmin > > reboot > > works great. > not sure why the other solutions weren't working for me. If anyone has any > ideas, let me know. Either way, maybe this will help someone. > - > lauren > > -----Original Message----- > From: casper-bounces at list.jamfsoftware.com on behalf of Alan Benedict > Sent: Thu 8/20/2009 9:57 AM > To: Casper List > Cc: > Subject: Re: [Casper] LP Admin Group > > Right, mine works as well when my users are in the lpadmin group. My > problem is if I don't want my users to be able to add or delete printers > then they also lose the pause, delete and resume functionality as well. > -- > Alan Benedict > ? > Macintosh Technician > The Integer Group > O: 515-247-2738 > C: 515-770-8234 > http://www.integer.com > > > > On Thu, Aug 20, 2009 at 6:02 AM, Criss Myers wrote: > >> The lpadmin group works fine my users to stop delete and resume ques >> >> >> On 19 Aug 2009, at 22:23, Alan Benedict wrote: >> >> Miles, Good article. Does this apply differently to network users that are >> using mobile accounts? Is there any way to have CUPS look authenticate from >> an OD group, or is that even necessary? The problem I've seen with the >> security is users cannot even pause or un-pause a printer, nor can they >> delete jobs from the queue. Otherwise I could care less if my users can add >> printers or not. Any thoughts? >> -- >> Alan Benedict >> ? >> Macintosh Technician >> The Integer Group >> O: 515-247-2738 >> C: 515-770-8234 >> http://www.integer.com >> >> >> >> On Wed, Aug 19, 2009 at 2:41 PM, Miles Leacy < >> miles.leacy at jamfsoftware.com> wrote: >> >>> Kathie, >>> >>> I posted an article to my blog recently on printing security >>> configuration. I think it may be of some use to you. You may be able to >>> package up a single file or use a defaults or PlistBuddy script to achieve >>> your goals. >>> >>> Have a look at: >>> >>> http://themacadmin.com/2009/08/12/printing-for-non-admins-in-leopard/ >>> >>> And now for the disclaimer: Anything you find on my blog is written from >>> my personal experiences as a Mac sysadmin and is not endorsed, supported, >>> provided by or connected to JAMF Software in any way. Follow good testing >>> and QA procedures if you choose to use anything you find there. >>> >>> I hope this is helpful. >>> >>> Thanks, >>> >>> -- >>> Miles Leacy >>> Technical Training Manager >>> Mobile (347) 277-7321 >>> >>> miles at jamfsoftware.com >>> .................................................................... >>> JAMF Software >>> 1011 Washington Ave. S >>> Suite 350 >>> Minneapolis, MN 55415 >>> .................................................................... >>> Office: (612) 605-6625 >>> Facsimile: (612) 332-9054 >>> .................................................................... >>> US Support: (612) 216-1296 >>> UK Support +44.(0)20.3002.3907 >>> AU Support +61.(0)2.8014.7469 >>> .................................................................... >>> http://www.jamfsoftware.com >>> >>> >>> >>> >>> >>> >>> On 8/19/09 10:51 AM, "Kathie Iorizzo" < >>> kiorizzo at latinschool.org> wrote: >>> >>> Ryan, >>> >>> We just tested this changing the script for our environment.. and it >>> appears to go through, but when I try add or pause/resume.. it prompts >>> me for the user name and password for an admin user. >>> ___________ >>> Kathie Iorizzo >>> Lower School Technician >>> The Latin School of Chicago >>> kiorizzo at latinschool.org >>> 312.582.6136 >>> >>> >>> >>> On Aug 19, 2009, at 8:20 AM, Harter, Ryan wrote: >>> >>>> For the script, it is just a one liner, unless you want to add error >>>> checking which is always good. I like to make sure users are >>>> network users by ensuring their uid is > 100000. >>>> >>>> #!/bin/bash >>>> >>>> dscl . -append /Groups/_lpadmin GroupMembership /$3 >>>> >>>> For the path to users, in our active directory environment it is "/ >>>> Active Directory/All Domains/Users/". It may be different for you, >>>> you'll just have to hop into dscl (by just entering the dscl command >>>> with no arguments) and ls and cd your way around to find out what it >>>> is. >>>> >>>> Then I just created a policy set to be available offline, at login, >>>> that runs that script. >>>> >>>> Note that this script is untested. We do similar things, but not >>>> this exact operation, so make sure you test this in your test >>>> environment before deploying it. >>> >>> >>> _______________________________________________ >>> Casper mailing list >>> Casper at list.jamfsoftware.com >>> >>> http://list.jamfsoftware.com/mailman/listinfo/casper >>> >>> >>> _______________________________________________ >>> Casper mailing list >>> Casper at list.jamfsoftware.com >>> >>> http://list.jamfsoftware.com/mailman/listinfo/casper >>> >>> >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper >> >> > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper From tlarki at kckps.org Wed Oct 21 12:21:53 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Wed, 21 Oct 2009 14:21:53 -0500 Subject: [Casper] JSS web front end unresponsive after updating to 7.1 Message-ID: <4ADF1901.7141.0039.0@kckps.org> Anyone else experiencing this? It seems if I refresh the server the JSS comes back up, activity monitor doesn't show anything killing the server... Thoughts? -Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base -------------- next part -------------- An HTML attachment was scrubbed... URL: From swood at integer.com Wed Oct 21 12:25:39 2009 From: swood at integer.com (Steve Wood) Date: Wed, 21 Oct 2009 14:25:39 -0500 Subject: [Casper] JSS web front end unresponsive after updating to 7.1 In-Reply-To: <4ADF1901.7141.0039.0@kckps.org> References: <4ADF1901.7141.0039.0@kckps.org> Message-ID: <438f5a310910211225na758509yc27b9b8464e00adc@mail.gmail.com> Had it. Followed this KB to fix it: http://jamfsoftware.com/kb/article.php?id=242 Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Wed, Oct 21, 2009 at 2:21 PM, Thomas Larkin wrote: > Anyone else experiencing this? It seems if I refresh the server the JSS > comes back up, activity monitor doesn't show anything killing the server... > > Thoughts? > > -Tom > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From tgreenleaf at saintmarksschool.org Wed Oct 21 12:26:26 2009 From: tgreenleaf at saintmarksschool.org (Tatian Greenleaf) Date: Wed, 21 Oct 2009 12:26:26 -0700 Subject: [Casper] Fwd: JSS web front end unresponsive after updating to 7.1 In-Reply-To: <38d97fa20910211225q34bbfe28leaed22b2efb8e1e2@mail.gmail.com> References: <4ADF1901.7141.0039.0@kckps.org> <38d97fa20910211225q34bbfe28leaed22b2efb8e1e2@mail.gmail.com> Message-ID: <38d97fa20910211226n75fe3e26we3d3830d0d1955bb@mail.gmail.com> Yep. It's a known issue. I talked to support and here's the fix (worked for me): http://www.jamfsoftware.com/kb/article.php?id=242 If you then do not have an Install button (but rather Uninstall), do this: "To get around this, first unschedule the monitor services section in the Automated Maintenance section of the server, then stop the web application again. If the web application is showing as stopped, then refresh the JSS Setup Utility with the Refresh button at the top of the window." Tatian ____________________________ Tatian Greenleaf Associate Director of Technology Saint Mark's School (415) 472-8000 x1014 On Wed, Oct 21, 2009 at 12:21 PM, Thomas Larkin wrote: > Anyone else experiencing this? It seems if I refresh the server the JSS > comes back up, activity monitor doesn't show anything killing the server... > > Thoughts? > > -Tom > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Wed Oct 21 13:41:20 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Wed, 21 Oct 2009 15:41:20 -0500 Subject: [Casper] Fwd: JSS web front end unresponsive after updating to 7.1 In-Reply-To: <38d97fa20910211226n75fe3e26we3d3830d0d1955bb@mail.gmail.com> References: <4ADF1901.7141.0039.0@kckps.org> <38d97fa20910211225q34bbfe28leaed22b2efb8e1e2@mail.gmail.com> <38d97fa20910211226n75fe3e26we3d3830d0d1955bb@mail.gmail.com> Message-ID: <4ADF2BA0.7141.0039.0@kckps.org> Thanks guys, that response was faster than any support team out there! It seems to have done the trick. I had to uninstall the JSS though and reinstall it. So far no quirks . Thanks Tom >>> Tatian Greenleaf 10/21/09 2:26 PM >>> Yep. It's a known issue. I talked to support and here's the fix (worked for me): http://www.jamfsoftware.com/kb/article.php?id=242 ( http://www.jamfsoftware.com/kb/article.php?id=242 ) If you then do not have an Install button (but rather Uninstall), do this: "To get around this, first unschedule the monitor services section in the Automated Maintenance section of the server, then stop the web application again. If the web application is showing as stopped, then refresh the JSS Setup Utility with the Refresh button at the top of the window." Tatian ____________________________ Tatian Greenleaf Associate Director of Technology Saint Mark's School (415) 472-8000 x1014 On Wed, Oct 21, 2009 at 12:21 PM, Thomas Larkin wrote: Anyone else experiencing this? It seems if I refresh the server the JSS comes back up, activity monitor doesn't show anything killing the server... Thoughts? -Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From ken.edgar at gmail.com Wed Oct 21 13:59:34 2009 From: ken.edgar at gmail.com (Kenneth Edgar) Date: Wed, 21 Oct 2009 15:59:34 -0500 Subject: [Casper] LP Admin Group In-Reply-To: Message-ID: I have seen this happen as well. I just installed Casper Suite a couple of weeks ago. I create my base image in InstaDMG with no user accounts. Casper Imaging handles the creation of the local admin account, but it does not add to _lpadmin group. However I'm using the script from the Resource Kit that adds the staff group into _lpadmin. This seems to work pretty well. > From: "Nicometo, Tim S." > Date: Wed, 21 Oct 2009 14:20:31 -0500 > To: Casper List > Subject: Re: [Casper] LP Admin Group > > We just experienced this issue first hand. Our scenario is a bit > different... > > When imaging machines, we use Casper Imaging 7.1 to create user accounts. > These users are simple local admins. We do not use any form of AD to > administer the accounts. > > We have been able to verify using dscl, that users created using Casper > Imaging 7.1 are NOT included in the lpadmin group, however they are included > in the admin group. > > Local admin accounts created using the System Preferences/Accounts are added > to all appropriate groups. > > Currently, we have about 50 machines in the field with users that cannot add > printers. Company policy is to allow our users to do this. In order to > solve the current issue, would it be best to send out the following > command/script; > > dscl . -append /Groups/_lpadmin GroupMembership /$3 > > More of a question however, is why is this happening to begin with? > > -- > Tim S. Nicometo > Media Engineer > Media Support Services > Phone: 507 284-0741 > E-mail: timn at mayo.edu > _____________________________ > Mayo Clinic > 200 First Street SW > Rochester, MN 55905 > www.mayoclinic.org > > > >> From: "Nicholas, Lauren" >> Date: Thu, 20 Aug 2009 13:28:43 -0400 >> To: Alan Benedict , Casper List >> >> Subject: Re: [Casper] LP Admin Group >> >> I'm really not sure why, but I have still been having a heck of a time >> getting >> this lpadmin group to actually work. I've tried the couple of scripts >> (distributed via policy) that have been shared with the listserv. Also I've >> tried the MCX management. Still not sure what is going wrong! I'm on 10.5.8 >> and I thought that was resolved with that update? Anyhow, in my environment I >> have network users who are given admin rights to their local machines via the >> management console in AD. When they login to their Mac, and go to Accounts, >> you see "username: Admin, Network" So, maybe that was why I was having some >> issues with the lpadmin group? >> >> Anyhow, either way, here's how I fixed it: >> >> Booted up into Single User Mode. >> >> mount -uw / >> /bin/launchctl load >> /System/Library/LaunchDaemons/com.apple.DirectoryServices.plist & >> dseditgroup -o edit -p -a admin -t group _lpadmin >> >> reboot >> >> works great. >> not sure why the other solutions weren't working for me. If anyone has any >> ideas, let me know. Either way, maybe this will help someone. >> - >> lauren >> >> -----Original Message----- >> From: casper-bounces at list.jamfsoftware.com on behalf of Alan Benedict >> Sent: Thu 8/20/2009 9:57 AM >> To: Casper List >> Cc: >> Subject: Re: [Casper] LP Admin Group >> >> Right, mine works as well when my users are in the lpadmin group. My >> problem is if I don't want my users to be able to add or delete printers >> then they also lose the pause, delete and resume functionality as well. >> -- >> Alan Benedict >> ? >> Macintosh Technician >> The Integer Group >> O: 515-247-2738 >> C: 515-770-8234 >> http://www.integer.com >> >> >> >> On Thu, Aug 20, 2009 at 6:02 AM, Criss Myers wrote: >> >>> The lpadmin group works fine my users to stop delete and resume ques >>> >>> >>> On 19 Aug 2009, at 22:23, Alan Benedict wrote: >>> >>> Miles, Good article. Does this apply differently to network users that are >>> using mobile accounts? Is there any way to have CUPS look authenticate from >>> an OD group, or is that even necessary? The problem I've seen with the >>> security is users cannot even pause or un-pause a printer, nor can they >>> delete jobs from the queue. Otherwise I could care less if my users can add >>> printers or not. Any thoughts? >>> -- >>> Alan Benedict >>> ? >>> Macintosh Technician >>> The Integer Group >>> O: 515-247-2738 >>> C: 515-770-8234 >>> http://www.integer.com >>> >>> >>> >>> On Wed, Aug 19, 2009 at 2:41 PM, Miles Leacy < >>> miles.leacy at jamfsoftware.com> wrote: >>> >>>> Kathie, >>>> >>>> I posted an article to my blog recently on printing security >>>> configuration. I think it may be of some use to you. You may be able to >>>> package up a single file or use a defaults or PlistBuddy script to achieve >>>> your goals. >>>> >>>> Have a look at: >>>> >>>> http://themacadmin.com/2009/08/12/printing-for-non-admins-in-leopard/ >>>> >>>> And now for the disclaimer: Anything you find on my blog is written from >>>> my personal experiences as a Mac sysadmin and is not endorsed, supported, >>>> provided by or connected to JAMF Software in any way. Follow good testing >>>> and QA procedures if you choose to use anything you find there. >>>> >>>> I hope this is helpful. >>>> >>>> Thanks, >>>> >>>> -- >>>> Miles Leacy >>>> Technical Training Manager >>>> Mobile (347) 277-7321 >>>> >>>> miles at jamfsoftware.com >>>> .................................................................... >>>> JAMF Software >>>> 1011 Washington Ave. S >>>> Suite 350 >>>> Minneapolis, MN 55415 >>>> .................................................................... >>>> Office: (612) 605-6625 >>>> Facsimile: (612) 332-9054 >>>> .................................................................... >>>> US Support: (612) 216-1296 >>>> UK Support +44.(0)20.3002.3907 >>>> AU Support +61.(0)2.8014.7469 >>>> .................................................................... >>>> http://www.jamfsoftware.com >>>> >>>> >>>> >>>> >>>> >>>> >>>> On 8/19/09 10:51 AM, "Kathie Iorizzo" < >>>> kiorizzo at latinschool.org> wrote: >>>> >>>> Ryan, >>>> >>>> We just tested this changing the script for our environment.. and it >>>> appears to go through, but when I try add or pause/resume.. it prompts >>>> me for the user name and password for an admin user. >>>> ___________ >>>> Kathie Iorizzo >>>> Lower School Technician >>>> The Latin School of Chicago >>>> kiorizzo at latinschool.org >>>> 312.582.6136 >>>> >>>> >>>> >>>> On Aug 19, 2009, at 8:20 AM, Harter, Ryan wrote: >>>> >>>>> For the script, it is just a one liner, unless you want to add error >>>>> checking which is always good. I like to make sure users are >>>>> network users by ensuring their uid is > 100000. >>>>> >>>>> #!/bin/bash >>>>> >>>>> dscl . -append /Groups/_lpadmin GroupMembership /$3 >>>>> >>>>> For the path to users, in our active directory environment it is "/ >>>>> Active Directory/All Domains/Users/". It may be different for you, >>>>> you'll just have to hop into dscl (by just entering the dscl command >>>>> with no arguments) and ls and cd your way around to find out what it >>>>> is. >>>>> >>>>> Then I just created a policy set to be available offline, at login, >>>>> that runs that script. >>>>> >>>>> Note that this script is untested. We do similar things, but not >>>>> this exact operation, so make sure you test this in your test >>>>> environment before deploying it. >>>> >>>> >>>> _______________________________________________ >>>> Casper mailing list >>>> Casper at list.jamfsoftware.com >>>> >>>> http://list.jamfsoftware.com/mailman/listinfo/casper >>>> >>>> >>>> _______________________________________________ >>>> Casper mailing list >>>> Casper at list.jamfsoftware.com >>>> >>>> http://list.jamfsoftware.com/mailman/listinfo/casper >>>> >>>> >>> _______________________________________________ >>> Casper mailing list >>> Casper at list.jamfsoftware.com >>> http://list.jamfsoftware.com/mailman/listinfo/casper >>> >>> >> >> >> >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper From eanderson at mitty.com Wed Oct 21 16:39:26 2009 From: eanderson at mitty.com (Eric Anderson) Date: Wed, 21 Oct 2009 16:39:26 -0700 Subject: [Casper] In-Reply-To: References: Message-ID: <76d2eca30910211639v4e2dc166l960e1e382742460e@mail.gmail.com> I've having this exact same issue right now. Were you able to get a resolution for this? Thanks, Eric Anderson Director of Information Technology Archbishop Mitty High School 408-342-4240 (Direct) On Mon, Sep 14, 2009 at 2:53 PM, Jeff Strauss wrote: > I?m using OD to manage allowed applications, but some of my users are > falling out of the ?managed? category (in System Prefs -> Accounts, they?re > only ?Mobile,? no longer ?Managed,? and preferences aren?t applied). Is > there a way to get them ?Managed? again? I?ve tried to rebind the machine to > the server, but that doesn?t seem to do the trick... > > Thanks for any help :) > * > Jeffrey A. Strauss > *Department of Educational Technology > *Systems Administrator > *Loyola High School of Los Angeles > 1901 Venice Blvd. > Los Angeles, Ca 90006 > (213) 381-5121 x265 > > Please consider the environment before printing this e-mail. > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Thu Oct 22 06:33:48 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 22 Oct 2009 08:33:48 -0500 Subject: [Casper] In-Reply-To: <76d2eca30910211639v4e2dc166l960e1e382742460e@mail.gmail.com> References: <76d2eca30910211639v4e2dc166l960e1e382742460e@mail.gmail.com> Message-ID: <4AE018EC.7141.0039.0@kckps.org> Take a working and non working client and compare what the managed client info in System Profiler says. That will usually help you figure out your management issue. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Eric Anderson 10/21/09 6:39 PM >>> I've having this exact same issue right now. Were you able to get a resolution for this? Thanks, Eric Anderson Director of Information Technology Archbishop Mitty High School 408-342-4240 (Direct) On Mon, Sep 14, 2009 at 2:53 PM, Jeff Strauss wrote: I?m using OD to manage allowed applications, but some of my users are falling out of the ?managed? category (in System Prefs -> Accounts, they?re only ?Mobile,? no longer ?Managed,? and preferences aren?t applied). Is there a way to get them ?Managed? again? I?ve tried to rebind the machine to the server, but that doesn?t seem to do the trick... Thanks for any help :) Jeffrey A. Strauss Department of Educational Technology Systems Administrator Loyola High School of Los Angeles 1901 Venice Blvd. Los Angeles, Ca 90006 (213) 381-5121 x265 Please consider the environment before printing this e-mail. _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From paul.austin at wachovia.com Thu Oct 22 12:00:17 2009 From: paul.austin at wachovia.com (Paul Austin) Date: Thu, 22 Oct 2009 15:00:17 -0400 Subject: [Casper] Controlling Airport Message-ID: I have an interesting challenge that one of you may have faced already. We have a new security policy that requires wireless to be disabled on a machine if it is connected wired to the corporate network. Have any of you had to deal with this issue yet and if so, how did you tackle it? Thanks in advance. Paul Austin End User Computing Wells Fargo 704 427-0903 From eric.winkelhake at mundocomww.com Thu Oct 22 12:10:26 2009 From: eric.winkelhake at mundocomww.com (Eric Winkelhake) Date: Thu, 22 Oct 2009 14:10:26 -0500 Subject: [Casper] Controlling Airport In-Reply-To: References: Message-ID: resource kit. eric winkelhake mundocomww office 312 220 1669 cell 312 504 5155 From: Paul Austin To: "casper at list.jamfsoftware.com" Date: 10/22/2009 02:02 PM Subject: [Casper] Controlling Airport Sent by: casper-bounces at list.jamfsoftware.com I have an interesting challenge that one of you may have faced already. We have a new security policy that requires wireless to be disabled on a machine if it is connected wired to the corporate network. Have any of you had to deal with this issue yet and if so, how did you tackle it? Thanks in advance. Paul Austin End User Computing Wells Fargo 704 427-0903 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. ------------------------------------------------------------------------ Mundocom UK Limited, Registered in England and Wales. Registration Number 2882166. Registered Office: Warwick Building, Kensington Village, Avonmore Road, London W14 8HQ. -------------- next part -------------- An HTML attachment was scrubbed... URL: From reverson at solon.k12.ia.us Thu Oct 22 12:15:29 2009 From: reverson at solon.k12.ia.us (Robert Everson) Date: Thu, 22 Oct 2009 14:15:29 -0500 Subject: [Casper] Controlling Airport In-Reply-To: References: Message-ID: <148569FB-AE41-4183-B69B-D9306F3005DF@solon.k12.ia.us> You can use the script in the resource kit to disable the airport, but to do this immediately when the ethernet cable is active, and then undo this when it is disabled, you'll have to use kicker (for 10.4) or crankd (for 10.5, not sure if it works in 10.6). crankd is available here (http://code.google.com/p/pymacadmin/) You'll have to setup a policy to run on a specific trigger, and then have crankd call this trigger when the cable is plugged in. Then you'll have to cache a policy that runs when crankd is called when the cable is unplugged. I haven't done this, but crankd does look useful for this type of dynamic scenario. -Robert On Oct 22, 2009, at 2:00 PM, Paul Austin wrote: > I have an interesting challenge that one of you may have faced > already. We have a new security policy that requires wireless to be > disabled on a machine if it is connected wired to the corporate > network. Have any of you had to deal with this issue yet and if so, > how did you tackle it? > > Thanks in advance. > > Paul Austin > End User Computing > Wells Fargo > 704 427-0903 > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > From tlarki at kckps.org Thu Oct 22 12:18:41 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 22 Oct 2009 14:18:41 -0500 Subject: [Casper] Controlling Airport In-Reply-To: <148569FB-AE41-4183-B69B-D9306F3005DF@solon.k12.ia.us> References: <148569FB-AE41-4183-B69B-D9306F3005DF@solon.k12.ia.us> Message-ID: <4AE069C0.7141.0039.0@kckps.org> Assuming wired and wireless VLANs are different you can script something out to switch or disable. However, that script would run constantly eating up both battery power and CPU cycles since it would constantly be running that script. >>> Robert Everson 10/22/09 2:15 PM >>> You can use the script in the resource kit to disable the airport, but to do this immediately when the ethernet cable is active, and then undo this when it is disabled, you'll have to use kicker (for 10.4) or crankd (for 10.5, not sure if it works in 10.6). crankd is available here (http://code.google.com/p/pymacadmin/) You'll have to setup a policy to run on a specific trigger, and then have crankd call this trigger when the cable is plugged in. Then you'll have to cache a policy that runs when crankd is called when the cable is unplugged. I haven't done this, but crankd does look useful for this type of dynamic scenario. -Robert On Oct 22, 2009, at 2:00 PM, Paul Austin wrote: > I have an interesting challenge that one of you may have faced > already. We have a new security policy that requires wireless to be > disabled on a machine if it is connected wired to the corporate > network. Have any of you had to deal with this issue yet and if so, > how did you tackle it? > > Thanks in advance. > > Paul Austin > End User Computing > Wells Fargo > 704 427-0903 > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From John.Brenner at merrillcorp.com Thu Oct 22 12:21:52 2009 From: John.Brenner at merrillcorp.com (Brenner, John) Date: Thu, 22 Oct 2009 14:21:52 -0500 Subject: [Casper] Controlling Airport In-Reply-To: Message-ID: To what end? Are they just trying to limit the ability of internet sharing? What is the goal of the policy? On 10/22/09 2:00 PM, "Paul Austin" wrote: > I have an interesting challenge that one of you may have faced > already. We have a new security policy that requires wireless to be > disabled on a machine if it is connected wired to the corporate > network. Have any of you had to deal with this issue yet and if so, > how did you tackle it? > > Thanks in advance. > > Paul Austin > End User Computing > Wells Fargo > 704 427-0903 > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper John Brenner | Merrill Corporation | MCS IT | 651-632-4072 From jyung at cmithun.com Thu Oct 22 12:26:05 2009 From: jyung at cmithun.com (Jon Yung) Date: Thu, 22 Oct 2009 14:26:05 -0500 Subject: [Casper] CS2 removal script Message-ID: I know there is a script for the removal of CS3 and CS4. Has anyone written one for CS2? Thanks for your help. -- Jon Yung Desktop Support | Campbell Mithun Campbell Mithun Tower | 222 South 9th Street Minneapolis, MN 55402 | 612-347-1568 -------------- next part -------------- An HTML attachment was scrubbed... URL: From jared.nichols at ll.mit.edu Thu Oct 22 12:26:35 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Thu, 22 Oct 2009 15:26:35 -0400 Subject: [Casper] Controlling Airport In-Reply-To: <4AE069C0.7141.0039.0@kckps.org> References: <148569FB-AE41-4183-B69B-D9306F3005DF@solon.k12.ia.us> <4AE069C0.7141.0039.0@kckps.org> Message-ID: <41F3B5C4-B3C1-4C2D-A465-B3DC1407D7AF@ll.mit.edu> I'm going to make an assumption about your network, but if you've only got hardwire connections in your AOR (i.e. your company doesn't use wireless and you want to disable wireless because someone may have been using it at home and they didn't turn it off before connecting at work,) you can use networksetup to get and set the airport power option. So, you could scope the policy to a IP range of your wired network and set a script on every15 to shut off airport power. --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 22, 2009, at 3:18 PM, Thomas Larkin wrote: Assuming wired and wireless VLANs are different you can script something out to switch or disable. However, that script would run constantly eating up both battery power and CPU cycles since it would constantly be running that script. >>> Robert Everson > 10/22/09 2:15 PM >>> You can use the script in the resource kit to disable the airport, but to do this immediately when the ethernet cable is active, and then undo this when it is disabled, you'll have to use kicker (for 10.4) or crankd (for 10.5, not sure if it works in 10.6). crankd is available here (http://code.google.com/p/pymacadmin/) You'll have to setup a policy to run on a specific trigger, and then have crankd call this trigger when the cable is plugged in. Then you'll have to cache a policy that runs when crankd is called when the cable is unplugged. I haven't done this, but crankd does look useful for this type of dynamic scenario. -Robert On Oct 22, 2009, at 2:00 PM, Paul Austin wrote: > I have an interesting challenge that one of you may have faced > already. We have a new security policy that requires wireless to be > disabled on a machine if it is connected wired to the corporate > network. Have any of you had to deal with this issue yet and if so, > how did you tackle it? > > Thanks in advance. > > Paul Austin > End User Computing > Wells Fargo > 704 427-0903 > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Thu Oct 22 12:41:15 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 22 Oct 2009 14:41:15 -0500 Subject: [Casper] CS2 removal script In-Reply-To: References: Message-ID: <4AE06F0B.7141.0039.0@kckps.org> I think you can download these from Adobe's site ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Jon Yung 10/22/09 2:26 PM >>> I know there is a script for the removal of CS3 and CS4. Has anyone written one for CS2? Thanks for your help. -- Jon Yung Desktop Support | Campbell Mithun Campbell Mithun Tower | 222 South 9th Street Minneapolis, MN 55402 | 612-347-1568 -------------- next part -------------- An HTML attachment was scrubbed... URL: From jyung at cmithun.com Thu Oct 22 12:44:18 2009 From: jyung at cmithun.com (Jon Yung) Date: Thu, 22 Oct 2009 14:44:18 -0500 Subject: [Casper] CS2 removal script In-Reply-To: <4AE06F0B.7141.0039.0@kckps.org> Message-ID: Thomas, Karl Told me this information: CS2 only needs to be trashed from the Applications folder. This obviously does not remove preferences, etc. CS3 and CS4 need the uninstall script to remove auxilary files or else you cannot re-install. Wish there was a script. I like a clean and complete uninstall. Maybe someone has written one..... On 10/22/09 2:41 PM, "Thomas Larkin" wrote: > > > I think you can download these from Adobe's site > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > >>>> >>> Jon Yung 10/22/09 2:26 PM >>> > > > > > I know there is a script for the removal of CS3 and CS4. Has anyone written > one for CS2? > > Thanks for your help. > > -- > Jon Yung > Desktop Support | Campbell Mithun > Campbell Mithun Tower | 222 South 9th Street > Minneapolis, MN 55402 | 612-347-1568 > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Thu Oct 22 12:43:46 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 22 Oct 2009 14:43:46 -0500 Subject: [Casper] Controlling Airport In-Reply-To: <41F3B5C4-B3C1-4C2D-A465-B3DC1407D7AF@ll.mit.edu> References: <148569FB-AE41-4183-B69B-D9306F3005DF@solon.k12.ia.us> <4AE069C0.7141.0039.0@kckps.org> <41F3B5C4-B3C1-4C2D-A465-B3DC1407D7AF@ll.mit.edu> Message-ID: <4AE06FA1.7141.0039.0@kckps.org> Even easier, you can require admin rights to modify the Airport status, then your casper policy can control it >>> "Nichols, Jared - 1160 - MITLL" 10/22/09 2:26 PM >>> I'm going to make an assumption about your network, but if you've only got hardwire connections in your AOR (i.e. your company doesn't use wireless and you want to disable wireless because someone may have been using it at home and they didn't turn it off before connecting at work,) you can use networksetup to get and set the airport power option. So, you could scope the policy to a IP range of your wired network and set a script on every15 to shut off airport power. --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 22, 2009, at 3:18 PM, Thomas Larkin wrote: Assuming wired and wireless VLANs are different you can script something out to switch or disable. However, that script would run constantly eating up both battery power and CPU cycles since it would constantly be running that script. >>> Robert Everson 10/22/09 2:15 PM >>> You can use the script in the resource kit to disable the airport, but to do this immediately when the ethernet cable is active, and then undo this when it is disabled, you'll have to use kicker (for 10.4) or crankd (for 10.5, not sure if it works in 10.6). crankd is available here (http://code.google.com/p/pymacadmin/) You'll have to setup a policy to run on a specific trigger, and then have crankd call this trigger when the cable is plugged in. Then you'll have to cache a policy that runs when crankd is called when the cable is unplugged. I haven't done this, but crankd does look useful for this type of dynamic scenario. -Robert On Oct 22, 2009, at 2:00 PM, Paul Austin wrote: > I have an interesting challenge that one of you may have faced > already. We have a new security policy that requires wireless to be > disabled on a machine if it is connected wired to the corporate > network. Have any of you had to deal with this issue yet and if so, > how did you tackle it? > > Thanks in advance. > > Paul Austin > End User Computing > Wells Fargo > 704 427-0903 > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Thu Oct 22 12:50:41 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 22 Oct 2009 14:50:41 -0500 Subject: [Casper] [BULK] Re: CS2 removal script In-Reply-To: References: <4AE06F0B.7141.0039.0@kckps.org> Message-ID: <4AE07141.7141.0039.0@kckps.org> I can just modify my ARD uninstaller script if you can provide me the info where all the files are stored. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Jon Yung 10/22/09 2:44 PM >>> Thomas, Karl Told me this information: CS2 only needs to be trashed from the Applications folder. This obviously does not remove preferences, etc. CS3 and CS4 need the uninstall script to remove auxilary files or else you cannot re-install. Wish there was a script. I like a clean and complete uninstall. Maybe someone has written one..... On 10/22/09 2:41 PM, "Thomas Larkin" wrote: I think you can download these from Adobe's site ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Jon Yung 10/22/09 2:26 PM >>> I know there is a script for the removal of CS3 and CS4. Has anyone written one for CS2? Thanks for your help. -- Jon Yung Desktop Support | Campbell Mithun Campbell Mithun Tower | 222 South 9th Street Minneapolis, MN 55402 | 612-347-1568 -------------- next part -------------- An HTML attachment was scrubbed... URL: From eric.winkelhake at mundocomww.com Thu Oct 22 12:55:37 2009 From: eric.winkelhake at mundocomww.com (Eric Winkelhake) Date: Thu, 22 Oct 2009 14:55:37 -0500 Subject: [Casper] [BULK] Re: CS2 removal script In-Reply-To: <4AE07141.7141.0039.0@kckps.org> References: <4AE06F0B.7141.0039.0@kckps.org> <4AE07141.7141.0039.0@kckps.org> Message-ID: do you have just a standard install of cs2?? you could just create a package with composer, drop it in casper admin, index it, check allow unistall, then uninstall it with a policy or casper remote. eric winkelhake mundocomww office 312 220 1669 cell 312 504 5155 From: "Thomas Larkin" To: "Jon Yung" , "casper usergroup" Date: 10/22/2009 02:52 PM Subject: [Casper] [BULK] Re: CS2 removal script Sent by: casper-bounces at list.jamfsoftware.com I can just modify my ARD uninstaller script if you can provide me the info where all the files are stored. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Jon Yung 10/22/09 2:44 PM >>> Thomas, Karl Told me this information: CS2 only needs to be trashed from the Applications folder. This obviously does not remove preferences, etc. CS3 and CS4 need the uninstall script to remove auxilary files or else you cannot re-install. Wish there was a script. I like a clean and complete uninstall. Maybe someone has written one..... On 10/22/09 2:41 PM, "Thomas Larkin" wrote: I think you can download these from Adobe's site ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Jon Yung 10/22/09 2:26 PM >>> I know there is a script for the removal of CS3 and CS4. Has anyone written one for CS2? Thanks for your help. -- Jon Yung Desktop Support | Campbell Mithun Campbell Mithun Tower | 222 South 9th Street Minneapolis, MN 55402 | 612-347-1568 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper ------------------------------------------------------------------------ Disclaimer The information in this email and any attachments may contain proprietary and confidential information that is intended for the addressee(s) only. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this information is prohibited. When addressed to our clients or vendors, any information contained in this e-mail or any attachments is subject to the terms and conditions in any governing contract. If you have received this e-mail in error, please immediately contact the sender and delete the e-mail. ------------------------------------------------------------------------ Mundocom UK Limited, Registered in England and Wales. Registration Number 2882166. Registered Office: Warwick Building, Kensington Village, Avonmore Road, London W14 8HQ. -------------- next part -------------- An HTML attachment was scrubbed... URL: From paul.austin at wachovia.com Thu Oct 22 12:56:20 2009 From: paul.austin at wachovia.com (Paul Austin) Date: Thu, 22 Oct 2009 15:56:20 -0400 Subject: [Casper] Controlling Airport In-Reply-To: <4AE06FA1.7141.0039.0@kckps.org> References: <148569FB-AE41-4183-B69B-D9306F3005DF@solon.k12.ia.us> <4AE069C0.7141.0039.0@kckps.org> <41F3B5C4-B3C1-4C2D-A465-B3DC1407D7AF@ll.mit.edu> <4AE06FA1.7141.0039.0@kckps.org> Message-ID: Maybe I should clarify a bit. My network is HUGE, we have well over 300k machines. We are a combined company of many mergers. Several of the merged portions of the network still have infrastructure and addressing from the old companies. I have macs scattered all over the country on this network. Usually they are in pockets of marketing users, but we do have some machines that are in single mac locations. On windoze, our security department has a utility that will disable wireless if it sees a wired connection on the machine. The user can re-enable wireless on the machine without admin rights as long as a wired connection is not connected. I have to duplicate this functionality. So, if a cable with an active ethernet connection gets plugged in, wireless needs to be turned off. No need to have it automatically switch back the other way. The users can re-enable on their own. PAul On Oct 22, 2009, at 3:43 PM, Thomas Larkin wrote: Even easier, you can require admin rights to modify the Airport status, then your casper policy can control it >>> "Nichols, Jared - 1160 - MITLL" > 10/22/09 2:26 PM >>> I'm going to make an assumption about your network, but if you've only got hardwire connections in your AOR (i.e. your company doesn't use wireless and you want to disable wireless because someone may have been using it at home and they didn't turn it off before connecting at work,) you can use networksetup to get and set the airport power option. So, you could scope the policy to a IP range of your wired network and set a script on every15 to shut off airport power. --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 22, 2009, at 3:18 PM, Thomas Larkin wrote: Assuming wired and wireless VLANs are different you can script something out to switch or disable. However, that script would run constantly eating up both battery power and CPU cycles since it would constantly be running that script. >>> Robert Everson > 10/22/09 2:15 PM >>> You can use the script in the resource kit to disable the airport, but to do this immediately when the ethernet cable is active, and then undo this when it is disabled, you'll have to use kicker (for 10.4) or crankd (for 10.5, not sure if it works in 10.6). crankd is available here (http://code.google.com/p/pymacadmin/) You'll have to setup a policy to run on a specific trigger, and then have crankd call this trigger when the cable is plugged in. Then you'll have to cache a policy that runs when crankd is called when the cable is unplugged. I haven't done this, but crankd does look useful for this type of dynamic scenario. -Robert On Oct 22, 2009, at 2:00 PM, Paul Austin wrote: > I have an interesting challenge that one of you may have faced > already. We have a new security policy that requires wireless to be > disabled on a machine if it is connected wired to the corporate > network. Have any of you had to deal with this issue yet and if so, > how did you tackle it? > > Thanks in advance. > > Paul Austin > End User Computing > Wells Fargo > 704 427-0903 > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From swood at integer.com Thu Oct 22 13:27:29 2009 From: swood at integer.com (Steve Wood) Date: Thu, 22 Oct 2009 15:27:29 -0500 Subject: [Casper] Casper 7.1 OS Image Building Message-ID: <438f5a310910221327p49ed189al9d7c4d83cb103970@mail.gmail.com> Okay, I thought I heard that Casper 7.1 allowed for a "build train" like InstaDMG uses for building OS install images. I know I heard Josh Wisenbaker mention it Tuesday at an Apple Enterprise event here in Dallas, however I am having a difficult time figuring out how it works. Does anyone know how to use this feature in Casper 7? I thought the process was to add the DVD image of your OS, whether the Retail DVD or a Drop In box DVD that comes with machines, into Casper Admin and then build a configuration. However, that didn't work for me. I'm looking for the same functionality of InstaDMG. Anyone? Thanks. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Thu Oct 22 13:39:06 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 22 Oct 2009 15:39:06 -0500 Subject: [Casper] Controlling Airport In-Reply-To: References: <148569FB-AE41-4183-B69B-D9306F3005DF@solon.k12.ia.us> <4AE069C0.7141.0039.0@kckps.org> <41F3B5C4-B3C1-4C2D-A465-B3DC1407D7AF@ll.mit.edu> <4AE06FA1.7141.0039.0@kckps.org> Message-ID: <4AE07C9A.7141.0039.0@kckps.org> OK, you would know your network better than any of us, and here is something I just whipped up. You can use it at your own risk, and I urge you to test test test test test test test and then test test test again before you deploy it. #!/bin/bash #get status of airport estatus=`/usr/sbin/networksetup -getinfo Ethernet | /usr/bin/awk '/address/ { print $4 }'` #now see check results with if then if [[ $estatus == none ]] then /bin/echo "computer is not on Ethernet" exit 1 else /usr/sbin/networksetup -setairportpower off exit 0 The script is in bold and red above. Test it out as I just whipped it up together really quick. It basically checks to to see if the Ethernet has an IP or not then does a command based on what it finds. I think this script needs some debugging though, but it can at least get you started. -Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Paul Austin 10/22/09 2:56 PM >>> Maybe I should clarify a bit. My network is HUGE, we have well over 300k machines. We are a combined company of many mergers. Several of the merged portions of the network still have infrastructure and addressing from the old companies. I have macs scattered all over the country on this network. Usually they are in pockets of marketing users, but we do have some machines that are in single mac locations. On windoze, our security department has a utility that will disable wireless if it sees a wired connection on the machine. The user can re-enable wireless on the machine without admin rights as long as a wired connection is not connected. I have to duplicate this functionality. So, if a cable with an active ethernet connection gets plugged in, wireless needs to be turned off. No need to have it automatically switch back the other way. The users can re-enable on their own. PAul On Oct 22, 2009, at 3:43 PM, Thomas Larkin wrote: Even easier, you can require admin rights to modify the Airport status, then your casper policy can control it >>> "Nichols, Jared - 1160 - MITLL" 10/22/09 2:26 PM >>> I'm going to make an assumption about your network, but if you've only got hardwire connections in your AOR (i.e. your company doesn't use wireless and you want to disable wireless because someone may have been using it at home and they didn't turn it off before connecting at work,) you can use networksetup to get and set the airport power option. So, you could scope the policy to a IP range of your wired network and set a script on every15 to shut off airport power. --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 22, 2009, at 3:18 PM, Thomas Larkin wrote: Assuming wired and wireless VLANs are different you can script something out to switch or disable. However, that script would run constantly eating up both battery power and CPU cycles since it would constantly be running that script. >>> Robert Everson 10/22/09 2:15 PM >>> You can use the script in the resource kit to disable the airport, but to do this immediately when the ethernet cable is active, and then undo this when it is disabled, you'll have to use kicker (for 10.4) or crankd (for 10.5, not sure if it works in 10.6). crankd is available here (http://code.google.com/p/pymacadmin/) You'll have to setup a policy to run on a specific trigger, and then have crankd call this trigger when the cable is plugged in. Then you'll have to cache a policy that runs when crankd is called when the cable is unplugged. I haven't done this, but crankd does look useful for this type of dynamic scenario. -Robert On Oct 22, 2009, at 2:00 PM, Paul Austin wrote: > I have an interesting challenge that one of you may have faced > already. We have a new security policy that requires wireless to be > disabled on a machine if it is connected wired to the corporate > network. Have any of you had to deal with this issue yet and if so, > how did you tackle it? > > Thanks in advance. > > Paul Austin > End User Computing > Wells Fargo > 704 427-0903 > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From chad.brewer at bend.k12.or.us Thu Oct 22 13:55:20 2009 From: chad.brewer at bend.k12.or.us (Chad Brewer) Date: Thu, 22 Oct 2009 13:55:20 -0700 Subject: [Casper] Controlling Airport In-Reply-To: <4AE07C9A.7141.0039.0@kckps.org> References: <, > <148569FB-AE41-4183-B69B-D9306F3005DF@solon.k12.ia.us> <, > <4AE069C0.7141.0039.0@kckps.org> <, > <41F3B5C4-B3C1-4C2D-A465-B3DC1407D7AF@ll.mit.edu> <, > <4AE06FA1.7141.0039.0@kckps.org> <, > <,> <4AE07C9A.7141.0039.0@kckps.org> Message-ID: We use something similar. All of our computers are on the 10.0.0.0/8 subnet so I grep for 10. in ifconfig en0. If there's no 10.xxx.xxx.xxx IP address on en0 then wireless gets shut off. #!/bin/bash /sbin/ifconfig en0|grep 'inet 10\.' if [ $? -eq 0 ]; then /usr/sbin/networksetup -setairportpower off else echo "Leaving AirPort on." fi "Thomas Larkin" on October 22, 2009 at 1:39 PM -0700 wrote: > > >OK, you would know your network better than any of us, and here is >something I just whipped up. You can use it at your own risk, and I urge >you to test test test test test test test and then test test test again >before you deploy it. > > > > >#!/bin/bash > > > > >#get status of airport > > > > >estatus=`/usr/sbin/networksetup -getinfo Ethernet | /usr/bin/awk >'/address/ { print $4 }'` > > > > >#now see check results with if then > > > > >if [[ $estatus == none ]] > > > > > then /bin/echo "computer is not on Ethernet" > > > > > exit 1 > > > > > else /usr/sbin/networksetup -setairportpower off > > > > >exit 0 > > > >The script is in bold and red above. Test it out as I just whipped it up >together really quick. It basically checks to to see if the Ethernet has >an IP or not then does a command based on what it finds. I think this >script needs some debugging though, but it can at least get you started. > > > > >-Tom > > > > > > >___________________________ >Thomas Larkin >TIS Department >KCKPS USD500 >[ mailto:tlarki at kckps.org ]tlarki at kckps.org >blackberry: 913-449-7589 >office: 913-627-0351 >chown -R us /.base > > > > > >>>> Paul Austin 10/22/09 2:56 PM >>> >Maybe I should clarify a bit. > > > > > > > > > > >My network is HUGE, we have well over 300k machines. We are a combined >company of many mergers. Several of the merged portions of the network >still have infrastructure and addressing from the old companies. I have >macs scattered all over the country on this network. Usually they are in >pockets of marketing users, but we do have some machines that are in >single mac locations. > > > > > > > > > > >On windoze, our security department has a utility that will disable >wireless if it sees a wired connection on the machine. The user can >re-enable wireless on the machine without admin rights as long as a wired >connection is not connected. I have to duplicate this functionality. So, >if a cable with an active ethernet connection gets plugged in, wireless >needs to be turned off. No need to have it automatically switch back the >other way. The users can re-enable on their own. > > > > > > > > > > >PAul > > > > > > > > > > >On Oct 22, 2009, at 3:43 PM, Thomas Larkin wrote: > > > > > > > > > >Even easier, you can require admin rights to modify the Airport status, >then your casper policy can control it > >>>> "Nichols, Jared - 1160 - MITLL" <[ mailto:jared.nichols at ll.mit.edu >]jared.nichols at ll.mit.edu> 10/22/09 2:26 PM >>> >I'm going to make an assumption about your network, but if you've only >got hardwire connections in your AOR (i.e. your company doesn't use >wireless and you want to disable wireless because someone may have been >using it at home and they didn't turn it off before connecting at work,) >you can use networksetup to get and set the airport power option. > > > > > > > > > > >So, you could scope the policy to a IP range of your wired network and >set a script on every15 to shut off airport power. > > > > > >--- > > > > >Jared F. Nichols > > > > >Desktop Engineer, Infrastructure & Operations > > > > >Information Services Department > > > > >MIT Lincoln Laboratory > > > > >244 Wood Street > > > > >Lexington, Massachusetts 02420 > > > > >781.981.5436 > > > > > > > > > > >On Oct 22, 2009, at 3:18 PM, Thomas Larkin wrote: > > > > > > > > > > > > >Assuming wired and wireless VLANs are different you can script something >out to switch or disable. However, that script would run constantly >eating up both battery power and CPU cycles since it would constantly be >running that script. > >>>> Robert Everson <[ mailto:reverson at solon.k12.ia.us >]reverson at solon.k12.ia.us> 10/22/09 2:15 PM >>> >You can use the script in the resource kit to disable the airport, but >to do this immediately when the ethernet cable is active, and then >undo this when it is disabled, you'll have to use kicker (for 10.4) or >crankd (for 10.5, not sure if it works in 10.6). > >crankd is available here ([ http://code.google.com/p/pymacadmin/ >]http://code.google.com/p/pymacadmin/) > >You'll have to setup a policy to run on a specific trigger, and then >have crankd call this trigger when the cable is plugged in. Then >you'll have to cache a policy that runs when crankd is called when the >cable is unplugged. > >I haven't done this, but crankd does look useful for this type of >dynamic scenario. > >-Robert > > >On Oct 22, 2009, at 2:00 PM, Paul Austin wrote: > >> I have an interesting challenge that one of you may have faced >> already. We have a new security policy that requires wireless to be >> disabled on a machine if it is connected wired to the corporate >> network. Have any of you had to deal with this issue yet and if so, >> how did you tackle it? >> >> Thanks in advance. >> >> Paul Austin >> End User Computing >> Wells Fargo >> 704 427-0903 >> _______________________________________________ >> Casper mailing list >> > > > > > > > > > >[ mailto:Casper at list.jamfsoftware.com ]Casper at list.jamfsoftware.com >> > > > > > > > > > >[ http://list.jamfsoftware.com/mailman/listinfo/casper >]http://list.jamfsoftware.com/mailman/listinfo/casper >> > >_______________________________________________ >Casper mailing list >[ mailto:Casper at list.jamfsoftware.com ]Casper at list.jamfsoftware.com >[ http://list.jamfsoftware.com/mailman/listinfo/casper >]http://list.jamfsoftware.com/mailman/listinfo/casper > > > > > >_______________________________________________ >Casper mailing list >[ mailto:Casper at list.jamfsoftware.com ]Casper at list.jamfsoftware.com >[ http://list.jamfsoftware.com/mailman/listinfo/casper >]http://list.jamfsoftware.com/mailman/listinfo/casper > > > > > > > > > > > > > > > > > > > > >_______________________________________________ >Casper mailing list >Casper at list.jamfsoftware.com >http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From sean.hansell at jwt.com Thu Oct 22 14:03:07 2009 From: sean.hansell at jwt.com (sean.hansell at jwt.com) Date: Thu, 22 Oct 2009 17:03:07 -0400 Subject: [Casper] MCX Database/Repository Message-ID: Curious, does anyone know of any websites or documents that serves as a repository or database of known (MCX) Managed Preferences for the various apps written to support MCX. I love the JSS's Templates, but I need more stuff for more apps. I could ask for specifics but I wanted to throw it out there for anyone who's run into this situation before. Thanks.

This transmission is intended solely for the person or organization to whom it is addressed and it may contain privileged and confidential information. If you are not the intended recipient you should not copy, distribute or take any action in reliance on it. If you believe you received this transmission in error please notify the sender.

-------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/jpeg Size: 40781 bytes Desc: not available URL: From john_wetter at hopkins.k12.mn.us Thu Oct 22 16:01:17 2009 From: john_wetter at hopkins.k12.mn.us (John Wetter) Date: Thu, 22 Oct 2009 18:01:17 -0500 Subject: [Casper] MCX Database/Repository In-Reply-To: Message-ID: AFP548 has some preference manifests on their site for Office and other apps as well, so that would be one spot. http://www.afp548.com/article.php?story=manifest-destiny Other than the link above, just do a search on their site and they have several. Thanks, John -- John Wetter Technology Support Administrator Educational Technology, Media & Information Services Hopkins Public Schools 952-988-5373 ________________________________ From: "sean.hansell at jwt.com" Date: Thu, 22 Oct 2009 16:03:07 -0500 To: "casper at list.jamfsoftware.com" Subject: [Casper] MCX Database/Repository Curious, does anyone know of any websites or documents that serves as a repository or database of known (MCX) Managed Preferences for the various apps written to support MCX. I love the JSS's Templates, but I need more stuff for more apps. I could ask for specifics but I wanted to throw it out there for anyone who's run into this situation before. Thanks. [cid:3339079277_6581394] This transmission is intended solely for the person or organization to whom it is addressed and it may contain privileged and confidential information. If you are not the intended recipient you should not copy, distribute or take any action in reliance on it. If you believe you received this transmission in error please notify the sender. -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: image.jpg Type: image/jpeg Size: 40781 bytes Desc: image.jpg URL: From tlarki at kckps.org Thu Oct 22 16:10:06 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 22 Oct 2009 18:10:06 -0500 Subject: [Casper] Casper 7.1 OS Image Building Message-ID: <4AE09D750200003900014564@gwmail.kckps.org> I am trying to get my 10.5.0 + 10.5.8 combo updater to image on a brand new iMac. Apple swears to me that even though these iMacs ship with 10.6 they will still boot 10.5.... I will post whatever I find in the next few days. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Steve Wood 10/22/09 3:29 PM >>> Okay, I thought I heard that Casper 7.1 allowed for a "build train" like InstaDMG uses for building OS install images. I know I heard Josh Wisenbaker mention it Tuesday at an Apple Enterprise event here in Dallas, however I am having a difficult time figuring out how it works. Does anyone know how to use this feature in Casper 7? I thought the process was to add the DVD image of your OS, whether the Retail DVD or a Drop In box DVD that comes with machines, into Casper Admin and then build a configuration. However, that didn't work for me. I'm looking for the same functionality of InstaDMG. Anyone? Thanks. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 From paul.austin at wachovia.com Fri Oct 23 05:06:44 2009 From: paul.austin at wachovia.com (Paul Austin) Date: Fri, 23 Oct 2009 08:06:44 -0400 Subject: [Casper] Controlling Airport In-Reply-To: <4AE07C9A.7141.0039.0@kckps.org> References: <148569FB-AE41-4183-B69B-D9306F3005DF@solon.k12.ia.us> <4AE069C0.7141.0039.0@kckps.org> <41F3B5C4-B3C1-4C2D-A465-B3DC1407D7AF@ll.mit.edu> <4AE06FA1.7141.0039.0@kckps.org> <4AE07C9A.7141.0039.0@kckps.org> Message-ID: <24369FE2-C3DE-4C7A-90E8-4C7BD14482CC@wachovia.com> Thanks to everyone with their great ideas, This is what I ended up doing. I did some research and found out that the /Library/Preferences/SystemConfiguration directory is modified every time there is a configuration change like enabling or disabling of a network interface. I created a user agent and had launchd watch the folder for changes. Label com.wf.wifiblocker ProgramArguments /private/etc/scripts/wifiBlocker WatchPaths /Library/Preferences/SystemConfiguration I then modified the example script you sent over and had the script also look for airport to be active before making any actions. #!/bin/bash # Get airport status wstatus=`/usr/sbin/networksetup -getairportpower Airport | /usr/bin/awk '/Airport/ { print $4 }'` if [[ $wstatus == On ]]; then #Get ethernet status estatus=`/usr/sbin/networksetup -getinfo Ethernet | /usr/bin/awk '/address/ { print $4 }'` if [[ $estatus != none ]]; then #Disable ethernet /usr/sbin/networksetup -setairportpower Airport off #Notify user with growl /usr/local/bin/growlnotify -s -a /Applications/Utilities/AirPort\ Utility.app -m "The airport wireless card has been disabled. To re-enable wireless networking, disconnect from the wired network." -t "Wired Network Detected" exit 1 fi fi exit 0 I then threw in growl notification to let the user know the status of the airport. So far in my testing this has worked pretty well. I still need to make a modification to the script to do OS version detection for the networksetup utility. The syntax changed between 10.5 and 10.6 and I need to be able to support both OSs. Paul Austin End User Computing Wells Fargo 704 427-0903 On Oct 22, 2009, at 4:39 PM, Thomas Larkin wrote: OK, you would know your network better than any of us, and here is something I just whipped up. You can use it at your own risk, and I urge you to test test test test test test test and then test test test again before you deploy it. #!/bin/bash #get status of airport estatus=`/usr/sbin/networksetup -getinfo Ethernet | /usr/bin/awk '/address/ { print $4 }'` #now see check results with if then if [[ $estatus == none ]] then /bin/echo "computer is not on Ethernet" exit 1 else /usr/sbin/networksetup -setairportpower off exit 0 The script is in bold and red above. Test it out as I just whipped it up together really quick. It basically checks to to see if the Ethernet has an IP or not then does a command based on what it finds. I think this script needs some debugging though, but it can at least get you started. -Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Paul Austin > 10/22/09 2:56 PM >>> Maybe I should clarify a bit. My network is HUGE, we have well over 300k machines. We are a combined company of many mergers. Several of the merged portions of the network still have infrastructure and addressing from the old companies. I have macs scattered all over the country on this network. Usually they are in pockets of marketing users, but we do have some machines that are in single mac locations. On windoze, our security department has a utility that will disable wireless if it sees a wired connection on the machine. The user can re-enable wireless on the machine without admin rights as long as a wired connection is not connected. I have to duplicate this functionality. So, if a cable with an active ethernet connection gets plugged in, wireless needs to be turned off. No need to have it automatically switch back the other way. The users can re-enable on their own. PAul On Oct 22, 2009, at 3:43 PM, Thomas Larkin wrote: Even easier, you can require admin rights to modify the Airport status, then your casper policy can control it >>> "Nichols, Jared - 1160 - MITLL" > 10/22/09 2:26 PM >>> I'm going to make an assumption about your network, but if you've only got hardwire connections in your AOR (i.e. your company doesn't use wireless and you want to disable wireless because someone may have been using it at home and they didn't turn it off before connecting at work,) you can use networksetup to get and set the airport power option. So, you could scope the policy to a IP range of your wired network and set a script on every15 to shut off airport power. --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 22, 2009, at 3:18 PM, Thomas Larkin wrote: Assuming wired and wireless VLANs are different you can script something out to switch or disable. However, that script would run constantly eating up both battery power and CPU cycles since it would constantly be running that script. >>> Robert Everson > 10/22/09 2:15 PM >>> You can use the script in the resource kit to disable the airport, but to do this immediately when the ethernet cable is active, and then undo this when it is disabled, you'll have to use kicker (for 10.4) or crankd (for 10.5, not sure if it works in 10.6). crankd is available here (http://code.google.com/p/pymacadmin/) You'll have to setup a policy to run on a specific trigger, and then have crankd call this trigger when the cable is plugged in. Then you'll have to cache a policy that runs when crankd is called when the cable is unplugged. I haven't done this, but crankd does look useful for this type of dynamic scenario. -Robert On Oct 22, 2009, at 2:00 PM, Paul Austin wrote: > I have an interesting challenge that one of you may have faced > already. We have a new security policy that requires wireless to be > disabled on a machine if it is connected wired to the corporate > network. Have any of you had to deal with this issue yet and if so, > how did you tackle it? > > Thanks in advance. > > Paul Austin > End User Computing > Wells Fargo > 704 427-0903 > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From Ben.Toms at grey.com Fri Oct 23 05:19:31 2009 From: Ben.Toms at grey.com (Toms, Ben (Grey Communications Group - IT)) Date: Fri, 23 Oct 2009 13:19:31 +0100 Subject: [Casper] PreAdobeInstall.pkg questions Message-ID: <2C9878F55C186649BD688D66964EBE2403F2FC3B@EX-LON-MB-01.weu.grey.global> Hi All, Yep it's ANOTHER CS4 deployment question! So.. we've a Adobe install created that seems to work fine via Casper Remote, BUT only if we do the below: 1. Logout any user that's logged in. 2. Run the Adobe Install with the Pre & Post pkg's from the Resource Kit. 3. The PreAdobeInstall will not fully install unless we then login as a user. 4. After logging in, it's hit & miss whether we get the Adobe Install splash screen. But the products install IF we don't launch anything. Is this similar to what you guys are experiencing? We followed the guide here: http://jamfsoftware.com/kb/article.php?id=195 to create the installer. Like I said, it seems to work.. but also seems to be a bit of a faff! Another way we could do it is for us to create a Configuration in Casper Admin with just the Adobe Installer, add this to machines autorun & netboot them. There has to be an easier way or a document I've missed.. Thanks in advance. Regards, Ben Toms IT Support Analyst, GREY Communications Group The Johnson Building, 77 Hatton Garden, London, EC1N 8JS T: +44 (0)20 3037 3883 | DDI: +44 (0)20 3037 3819 Agency Network of the Year - Euro Effies 2005, 2006, 2007 & 2008 Grey Communications Group Limited Registered No. 1795794, Registered in England Registered Office The Johnson Building, 77 Hatton Garden, London, EC1N 8JS VAT Number GB 404 6245 78 CONFIDENTIALITY The information contained in this communication may contain confidential, privileged and copyright information and is solely for the use of the intended recipient. Access to this email by anyone else is unauthorised. If you are not the intended recipient any disclosure, copying, distribution or any action taken, or omitted to be taken, or in response to it is prohibited and may be unlawful. If you have received this email in error, please notify us and then delete this message at once. VIRUSES We cannot guarantee that any attachment is completely free from computer viruses and we do not therefore accept any liability for loss or damage which may be caused. Please therefore check any attachments for viruses before using them on your own equipment. If you do find a computer virus please inform us immediately so that we may take appropriate action. SECURITY Unencrypted internet communications are not secure. As a result the Company does not accept responsibility for the confidentiality of this message nor guarantee that the sender shown is the actual sender. NOTIFICATION WITH REGARD TO PRIVACY You are hereby advised that the Company monitors the use of and intercepts emails on its equipment and system. Emails sent and received may be read for valid business reasons. -------------- next part -------------- An HTML attachment was scrubbed... URL: From donmontalvo at gmail.com Fri Oct 23 07:27:23 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Fri, 23 Oct 2009 09:27:23 -0500 Subject: [Casper] Casper 7.1 OS Image Building In-Reply-To: References: Message-ID: Steve Wood wrote: > Okay, I thought I heard that Casper 7.1 allowed for a "build train" > like > InstaDMG uses for building OS install images. I know I heard Josh > Wisenbaker mention it Tuesday at an Apple Enterprise event here in > Dallas, > however I am having a difficult time figuring out how it works. > > Does anyone know how to use this feature in Casper 7? > > I thought the process was to add the DVD image of your OS, whether the > Retail DVD or a Drop In box DVD that comes with machines, into > Casper Admin > and then build a configuration. However, that didn't work for me. > > I'm looking for the same functionality of InstaDMG. > > Anyone? > > Thanks. > > Steve Wood > Director of IT > swood at integer.com Hi Steve, First, thanks for your recent demo of Casper at your office in Dallas. It was comforting to see InstaDMG working along side Casper. You demonstrated reimaging a Mac, where the process included automagically layering on CS4 (Adobe's Silent Install). The time and effort are greatly appreciated. If there are any other shops in the Dallas (DFW) area, I'd love to see how you're using it in your environment (breakfast or lunch is on me!). :) I'm heading to west coast to meet our front end guys who bought Casper for this client to review the strategy for this client. I'm holding to my InstaDMG workflow until Casper's imaging toolset achieves feature parity. InstaDMG has a workflow that satisfies a lot of the process requirements for us. Hopefully that'll be soon, since I have to ramp up for image production for all our clients from here at our back office location. JAMF are helping us to develop a strategy for multi- tiered support model. In conversations with some Casper and InstaDMG users, the consensus was that Casper Imaging and even Apple's System Image Utility in 10.6 are not yet at the level of the InstaDMG workflow. Hopefully JAMF will add in all the InstaDMG flexibility and controls, so we can lay InstaDMG down to rest. JAMF certainly backs up their product with firm commitments and resources. Thanks, Don Don Montalvo Dallas, TX From jared.nichols at ll.mit.edu Fri Oct 23 07:57:51 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Fri, 23 Oct 2009 10:57:51 -0400 Subject: [Casper] External database access Message-ID: Has anyone setup their JSS database with external read-only access for some automated reporting originating from other systems? Thanks j --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Fri Oct 23 08:41:09 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Fri, 23 Oct 2009 10:41:09 -0500 Subject: [Casper] Casper 7.1 OS Image Building In-Reply-To: References: Message-ID: <4AE18845.7141.0039.0@kckps.org> Here is my issue.... I took a 10.5.0 retail DVD and made an image of it. I then mounted it and took a OS snap shot with Composer. I am testing this now, but previously I had just dropped the image into Casper Admin and told CA that it was an OS X installer. It gave me the options to create an install and when it block copies to the iMac, it just block copies the actual image. It doesn't lay down the OS installed. Now I also told it to install the 10.5.8 combo update as well, which it doesn't seem to do that either. I am currently playing with it, and will post back when I figure out how to get it done. How do you guys deploy updates? I was thinking I may have to convert an update to source and then compile it with my OS image to create a 10.5.8 base image? Thanks Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Don Montalvo 10/23/09 9:27 AM >>> Steve Wood wrote: > Okay, I thought I heard that Casper 7.1 allowed for a "build train" > like > InstaDMG uses for building OS install images. I know I heard Josh > Wisenbaker mention it Tuesday at an Apple Enterprise event here in > Dallas, > however I am having a difficult time figuring out how it works. > > Does anyone know how to use this feature in Casper 7? > > I thought the process was to add the DVD image of your OS, whether the > Retail DVD or a Drop In box DVD that comes with machines, into > Casper Admin > and then build a configuration. However, that didn't work for me. > > I'm looking for the same functionality of InstaDMG. > > Anyone? > > Thanks. > > Steve Wood > Director of IT > swood at integer.com Hi Steve, First, thanks for your recent demo of Casper at your office in Dallas. It was comforting to see InstaDMG working along side Casper. You demonstrated reimaging a Mac, where the process included automagically layering on CS4 (Adobe's Silent Install). The time and effort are greatly appreciated. If there are any other shops in the Dallas (DFW) area, I'd love to see how you're using it in your environment (breakfast or lunch is on me!). :) I'm heading to west coast to meet our front end guys who bought Casper for this client to review the strategy for this client. I'm holding to my InstaDMG workflow until Casper's imaging toolset achieves feature parity. InstaDMG has a workflow that satisfies a lot of the process requirements for us. Hopefully that'll be soon, since I have to ramp up for image production for all our clients from here at our back office location. JAMF are helping us to develop a strategy for multi- tiered support model. In conversations with some Casper and InstaDMG users, the consensus was that Casper Imaging and even Apple's System Image Utility in 10.6 are not yet at the level of the InstaDMG workflow. Hopefully JAMF will add in all the InstaDMG flexibility and controls, so we can lay InstaDMG down to rest. JAMF certainly backs up their product with firm commitments and resources. Thanks, Don Don Montalvo Dallas, TX _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From dderusha at schawk.com Fri Oct 23 08:51:57 2009 From: dderusha at schawk.com (Dan DeRusha) Date: Fri, 23 Oct 2009 10:51:57 -0500 Subject: [Casper] Casper 7.1 OS Image Building In-Reply-To: <4AE18845.7141.0039.0@kckps.org> References: <4AE18845.7141.0039.0@kckps.org> Message-ID: <5928207B-767C-4C86-9111-5EA8084E741E@schawk.com> Turn on software update on your apple server. Point all your clients to this update server in the JSS Management-Software update servers- add server create a policy that installs the software updates from this server at night. Let me know if you want more details Dan On Oct 23, 2009, at 10:41 AM, Thomas Larkin wrote: > Here is my issue.... > > I took a 10.5.0 retail DVD and made an image of it. I then mounted > it and took a OS snap shot with Composer. I am testing this now, > but previously I had just dropped the image into Casper Admin and > told CA that it was an OS X installer. It gave me the options to > create an install and when it block copies to the iMac, it just > block copies the actual image. It doesn't lay down the OS > installed. Now I also told it to install the 10.5.8 combo update as > well, which it doesn't seem to do that either. I am currently > playing with it, and will post back when I figure out how to get it > done. > > How do you guys deploy updates? I was thinking I may have to > convert an update to source and then compile it with my OS image to > create a 10.5.8 base image? > > Thanks > > Tom > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > > >>> Don Montalvo 10/23/09 9:27 AM >>> > Steve Wood wrote: > > > Okay, I thought I heard that Casper 7.1 allowed for a "build train" > > like > > InstaDMG uses for building OS install images. I know I heard Josh > > Wisenbaker mention it Tuesday at an Apple Enterprise event here in > > Dallas, > > however I am having a difficult time figuring out how it works. > > > > Does anyone know how to use this feature in Casper 7? > > > > I thought the process was to add the DVD image of your OS, whether > the > > Retail DVD or a Drop In box DVD that comes with machines, into > > Casper Admin > > and then build a configuration. However, that didn't work for me. > > > > I'm looking for the same functionality of InstaDMG. > > > > Anyone? > > > > Thanks. > > > > Steve Wood > > Director of IT > > swood at integer.com > > Hi Steve, > > First, thanks for your recent demo of Casper at your office in Dallas. > It was comforting to see InstaDMG working along side Casper. You > demonstrated reimaging a Mac, where the process included automagically > layering on CS4 (Adobe's Silent Install). The time and effort are > greatly appreciated. If there are any other shops in the Dallas (DFW) > area, I'd love to see how you're using it in your environment > (breakfast or lunch is on me!). :) > > I'm heading to west coast to meet our front end guys who bought Casper > for this client to review the strategy for this client. I'm holding to > my InstaDMG workflow until Casper's imaging toolset achieves feature > parity. InstaDMG has a workflow that satisfies a lot of the process > requirements for us. Hopefully that'll be soon, since I have to ramp > up for image production for all our clients from here at our back > office location. JAMF are helping us to develop a strategy for multi- > tiered support model. > > In conversations with some Casper and InstaDMG users, the consensus > was that Casper Imaging and even Apple's System Image Utility in 10.6 > are not yet at the level of the InstaDMG workflow. Hopefully JAMF will > add in all the InstaDMG flexibility and controls, so we can lay > InstaDMG down to rest. JAMF certainly backs up their product with firm > commitments and resources. > > Thanks, > Don > > Don Montalvo > Dallas, TX > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From ERNSTCS at uwec.edu Fri Oct 23 08:53:10 2009 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Fri, 23 Oct 2009 10:53:10 -0500 Subject: [Casper] External database access In-Reply-To: Message-ID: Hi Jared, We actually have several web pages used to access resources in the JSS for various reasons with a read only account in the mysql database. The three things we really hit are: * In our general access labs we have scripts for startup, login, and logout that toggle information in a separate database to indicate if someone is logged in (1) or not (0) and then have a diagram of the lab and have open seat status so you can see from a website if a seat is open in any of our labs and go there. The part that ties in to the JSS is the heartbeat, when the system last reported in. If it hasn?t reported in after so many hours the system then appears offline/broken * Similar to this when our nightly maintenance in labs runs it also hits a database and updates when that maintenance last ran successfully. So for our internal support people they go to a website and view status. This page basically looks into the JSS tables to see which machines or group of machines are assigned to that specific policy then lists them out in order. From there it looks at the systems JSS ID and compares it to the maintenance log table of the separate database as well as that heartbeat again in the jSS itself, and also see if a system is logged into or not, all in one page. This way each morning they check to see what ran properly, what didn?t, and if they can remote in without bothering someone if they wanted to run maintenance quickly. * The last part is to help people find where software is loaded. A page is available to search software titles based on the information I have in the page notes and description fields, if there is info there. So they type in what they want and it will return the configurations that have it. You can also do it with just selecting a configuration (a lab location really) and see what?s assigned to it at imaging. So that?s what we have in terms of web pages accessing the JSS with read only. So it?s possible, just need to understand the tables and where stuff is. That and it?s only as good as the data you keep. I need to actually go through and update all my package descriptions and notes since some of them aren?t showing up right now. =) We aren?t unique with this and we do it on our Windows side as well. http://labs.uwec.edu/ Check the Open Seats and Find Mac Software links. B50 ? Brewer 50 is a good example Mac lab. Craig E On 10/23/09 9:57 AM, "Nichols, Jared - 1160 - MITLL" wrote: Has anyone setup their JSS database with external read-only access for some automated reporting originating from other systems? Thanks j --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Fri Oct 23 08:55:24 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Fri, 23 Oct 2009 10:55:24 -0500 Subject: [Casper] Casper 7.1 OS Image Building In-Reply-To: <5928207B-767C-4C86-9111-5EA8084E741E@schawk.com> References: <4AE18845.7141.0039.0@kckps.org> <5928207B-767C-4C86-9111-5EA8084E741E@schawk.com> Message-ID: <4AE18B9C.7141.0039.0@kckps.org> Our WAN traffic is maxed out pretty much from Internet usage and my SUS server is an old PPC server that chokes when too many clients hit it. I would very much prefer to slip stream the update into the image itself and for it to be pristine so I don't have to fuss with things. Then just download the PKG of the combo updater and go from there. I have lots of clients and not really the infrastructure to set up one SUS. My other alternative is to setup SUS at each building but then I got over head on my OD servers. Plus, I manage a 1:1 and laptops go off campus at night. Thanks Tom >>> Dan DeRusha 10/23/09 10:51 AM >>> Turn on software update on your apple server. Point all your clients to this update server in the JSS Management-Software update servers- add server create a policy that installs the software updates from this server at night. Let me know if you want more details Dan On Oct 23, 2009, at 10:41 AM, Thomas Larkin wrote: Here is my issue.... I took a 10.5.0 retail DVD and made an image of it. I then mounted it and took a OS snap shot with Composer. I am testing this now, but previously I had just dropped the image into Casper Admin and told CA that it was an OS X installer. It gave me the options to create an install and when it block copies to the iMac, it just block copies the actual image. It doesn't lay down the OS installed. Now I also told it to install the 10.5.8 combo update as well, which it doesn't seem to do that either. I am currently playing with it, and will post back when I figure out how to get it done. How do you guys deploy updates? I was thinking I may have to convert an update to source and then compile it with my OS image to create a 10.5.8 base image? Thanks Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Don Montalvo 10/23/09 9:27 AM >>> Steve Wood wrote: > Okay, I thought I heard that Casper 7.1 allowed for a "build train" > like > InstaDMG uses for building OS install images. I know I heard Josh > Wisenbaker mention it Tuesday at an Apple Enterprise event here in > Dallas, > however I am having a difficult time figuring out how it works. > > Does anyone know how to use this feature in Casper 7? > > I thought the process was to add the DVD image of your OS, whether the > Retail DVD or a Drop In box DVD that comes with machines, into > Casper Admin > and then build a configuration. However, that didn't work for me. > > I'm looking for the same functionality of InstaDMG. > > Anyone? > > Thanks. > > Steve Wood > Director of IT > swood at integer.com Hi Steve, First, thanks for your recent demo of Casper at your office in Dallas. It was comforting to see InstaDMG working along side Casper. You demonstrated reimaging a Mac, where the process included automagically layering on CS4 (Adobe's Silent Install). The time and effort are greatly appreciated. If there are any other shops in the Dallas (DFW) area, I'd love to see how you're using it in your environment (breakfast or lunch is on me!). :) I'm heading to west coast to meet our front end guys who bought Casper for this client to review the strategy for this client. I'm holding to my InstaDMG workflow until Casper's imaging toolset achieves feature parity. InstaDMG has a workflow that satisfies a lot of the process requirements for us. Hopefully that'll be soon, since I have to ramp up for image production for all our clients from here at our back office location. JAMF are helping us to develop a strategy for multi- tiered support model. In conversations with some Casper and InstaDMG users, the consensus was that Casper Imaging and even Apple's System Image Utility in 10.6 are not yet at the level of the InstaDMG workflow. Hopefully JAMF will add in all the InstaDMG flexibility and controls, so we can lay InstaDMG down to rest. JAMF certainly backs up their product with firm commitments and resources. Thanks, Don Don Montalvo Dallas, TX _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From abenedict at integer.com Fri Oct 23 09:57:19 2009 From: abenedict at integer.com (Alan Benedict) Date: Fri, 23 Oct 2009 11:57:19 -0500 Subject: [Casper] Casper 7.1 OS Image Building In-Reply-To: <4AE18845.7141.0039.0@kckps.org> References: <4AE18845.7141.0039.0@kckps.org> Message-ID: <5fe906620910230957u790bab01s994d769fed788cf@mail.gmail.com> Once you make an image from the installer disk, there is no need to mount it and take an OS snapshot. All you need to do is drop the image of the installer disk into the Casper Admin and check the box that it is an OS X installer. My image came from a Mac Pro that has the highest build for any of our Macs. I also have dropped the 10.5.8 combo updater into the admin and made that part of the configuration. The one thing I have noticed is, if I try and image from that config that has the installer, it will lock up sometime during the install. If I compile the image first, it works every time. -- Alan Benedict ? Macintosh Technician The Integer Group O: 515-247-2738 C: 515-770-8234 http://www.integer.com On Fri, Oct 23, 2009 at 10:41 AM, Thomas Larkin wrote: > Here is my issue.... > > I took a 10.5.0 retail DVD and made an image of it. I then mounted it > and took a OS snap shot with Composer. I am testing this now, but > previously I had just dropped the image into Casper Admin and told CA that > it was an OS X installer. It gave me the options to create an install and > when it block copies to the iMac, it just block copies the actual image. It > doesn't lay down the OS installed. Now I also told it to install the 10.5.8 > combo update as well, which it doesn't seem to do that either. I am > currently playing with it, and will post back when I figure out how to get > it done. > > How do you guys deploy updates? I was thinking I may have to convert an > update to source and then compile it with my OS image to create a 10.5.8 > base image? > > Thanks > > Tom > > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > > >>> Don Montalvo 10/23/09 9:27 AM >>> > > Steve Wood wrote: > > > Okay, I thought I heard that Casper 7.1 allowed for a "build train" > > like > > InstaDMG uses for building OS install images. I know I heard Josh > > Wisenbaker mention it Tuesday at an Apple Enterprise event here in > > Dallas, > > however I am having a difficult time figuring out how it works. > > > > Does anyone know how to use this feature in Casper 7? > > > > I thought the process was to add the DVD image of your OS, whether the > > Retail DVD or a Drop In box DVD that comes with machines, into > > Casper Admin > > and then build a configuration. However, that didn't work for me. > > > > I'm looking for the same functionality of InstaDMG. > > > > Anyone? > > > > Thanks. > > > > Steve Wood > > Director of IT > > swood at integer.com > > Hi Steve, > > First, thanks for your recent demo of Casper at your office in Dallas. > It was comforting to see InstaDMG working along side Casper. You > demonstrated reimaging a Mac, where the process included automagically > layering on CS4 (Adobe's Silent Install). The time and effort are > greatly appreciated. If there are any other shops in the Dallas (DFW) > area, I'd love to see how you're using it in your environment > (breakfast or lunch is on me!). :) > > I'm heading to west coast to meet our front end guys who bought Casper > for this client to review the strategy for this client. I'm holding to > my InstaDMG workflow until Casper's imaging toolset achieves feature > parity. InstaDMG has a workflow that satisfies a lot of the process > requirements for us. Hopefully that'll be soon, since I have to ramp > up for image production for all our clients from here at our back > office location. JAMF are helping us to develop a strategy for multi- > tiered support model. > > In conversations with some Casper and InstaDMG users, the consensus > was that Casper Imaging and even Apple's System Image Utility in 10.6 > are not yet at the level of the InstaDMG workflow. Hopefully JAMF will > add in all the InstaDMG flexibility and controls, so we can lay > InstaDMG down to rest. JAMF certainly backs up their product with firm > commitments and resources. > > Thanks, > Don > > Don Montalvo > Dallas, TX > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Fri Oct 23 10:28:23 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Fri, 23 Oct 2009 12:28:23 -0500 Subject: [Casper] [BULK] Re: Casper 7.1 OS Image Building In-Reply-To: <5fe906620910230957u790bab01s994d769fed788cf@mail.gmail.com> References: <4AE18845.7141.0039.0@kckps.org> <5fe906620910230957u790bab01s994d769fed788cf@mail.gmail.com> Message-ID: <4AE1A167.7141.0039.0@kckps.org> I am complaining my newest one right now, so hopefully it works. My 10.5.7 image on the new iMac works but I don't want that image on there, I want to do package based and then make comps for specific usage. >>> Alan Benedict 10/23/09 11:57 AM >>> Once you make an image from the installer disk, there is no need to mount it and take an OS snapshot. All you need to do is drop the image of the installer disk into the Casper Admin and check the box that it is an OS X installer. My image came from a Mac Pro that has the highest build for any of our Macs. I also have dropped the 10.5.8 combo updater into the admin and made that part of the configuration. The one thing I have noticed is, if I try and image from that config that has the installer, it will lock up sometime during the install. If I compile the image first, it works every time. -- Alan Benedict ? Macintosh Technician The Integer Group O: 515-247-2738 C: 515-770-8234 http://www.integer.com On Fri, Oct 23, 2009 at 10:41 AM, Thomas Larkin wrote: Here is my issue.... I took a 10.5.0 retail DVD and made an image of it. I then mounted it and took a OS snap shot with Composer. I am testing this now, but previously I had just dropped the image into Casper Admin and told CA that it was an OS X installer. It gave me the options to create an install and when it block copies to the iMac, it just block copies the actual image. It doesn't lay down the OS installed. Now I also told it to install the 10.5.8 combo update as well, which it doesn't seem to do that either. I am currently playing with it, and will post back when I figure out how to get it done. How do you guys deploy updates? I was thinking I may have to convert an update to source and then compile it with my OS image to create a 10.5.8 base image? Thanks Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Don Montalvo 10/23/09 9:27 AM >>> Steve Wood wrote: > Okay, I thought I heard that Casper 7.1 allowed for a "build train" > like > InstaDMG uses for building OS install images. I know I heard Josh > Wisenbaker mention it Tuesday at an Apple Enterprise event here in > Dallas, > however I am having a difficult time figuring out how it works. > > Does anyone know how to use this feature in Casper 7? > > I thought the process was to add the DVD image of your OS, whether the > Retail DVD or a Drop In box DVD that comes with machines, into > Casper Admin > and then build a configuration. However, that didn't work for me. > > I'm looking for the same functionality of InstaDMG. > > Anyone? > > Thanks. > > Steve Wood > Director of IT > swood at integer.com Hi Steve, First, thanks for your recent demo of Casper at your office in Dallas. It was comforting to see InstaDMG working along side Casper. You demonstrated reimaging a Mac, where the process included automagically layering on CS4 (Adobe's Silent Install). The time and effort are greatly appreciated. If there are any other shops in the Dallas (DFW) area, I'd love to see how you're using it in your environment (breakfast or lunch is on me!). :) I'm heading to west coast to meet our front end guys who bought Casper for this client to review the strategy for this client. I'm holding to my InstaDMG workflow until Casper's imaging toolset achieves feature parity. InstaDMG has a workflow that satisfies a lot of the process requirements for us. Hopefully that'll be soon, since I have to ramp up for image production for all our clients from here at our back office location. JAMF are helping us to develop a strategy for multi- tiered support model. In conversations with some Casper and InstaDMG users, the consensus was that Casper Imaging and even Apple's System Image Utility in 10.6 are not yet at the leveInstaDMG down to rest. JAMF certainly backs up their product with firm commitments and resources. Thanks, Don Don Montalvo Dallas, TX _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From john_wetter at hopkins.k12.mn.us Fri Oct 23 11:41:16 2009 From: john_wetter at hopkins.k12.mn.us (John Wetter) Date: Fri, 23 Oct 2009 13:41:16 -0500 Subject: [Casper] Reminder: Minneapolis Fall 2009 Casper Users Group Message-ID: Don?t forget! And don?t forget to register! The Date has been set for the fall Casper User Group in the Twin Cities area! This CUG will be held at the Rosemount-Apple Valley-Eagan Public Schools district offices on October 29th. Here are the particulars: October 29, 2009 12-4pm For the agenda and to register: http://www.district196.org/District/ContactUs/CUGmeetinginfo.cfm We hope to see you there! Please be sure to register so we have a count for lunch! In the meantime, please let me know if you would be interested in hosting a future CUG or if you?d like to present something that you?re using the Casper Suite for! All Casper Users are welcome to attend regardless your affiliation! Thanks to District 196 for hosting! John -- John Wetter Technology Support Administrator Educational Technology, Media & Information Services Hopkins Public Schools 952-988-5373 ________________________________ This electronic mail transmission may contain private or confidential data and is intended only for the person named. If you are not the intended recipient, you are notified that disclosing, copying, distributing, or taking any action in reliance on the contents of this information is strictly prohibited. If you received this message in error, please notify the sender, and delete it. Hopkins Public Schools reserves the right to monitor and review, without further consent, any messages created, sent, or received on its electronic mail system. -------------- next part -------------- An HTML attachment was scrubbed... URL: From swood at integer.com Fri Oct 23 13:14:28 2009 From: swood at integer.com (Steve Wood) Date: Fri, 23 Oct 2009 15:14:28 -0500 Subject: [Casper] [BULK] Re: Casper 7.1 OS Image Building In-Reply-To: <4AE1A167.7141.0039.0@kckps.org> References: <4AE18845.7141.0039.0@kckps.org> <5fe906620910230957u790bab01s994d769fed788cf@mail.gmail.com> <4AE1A167.7141.0039.0@kckps.org> Message-ID: <438f5a310910231314g3b98eecap9e60cca0f7e0a7ac@mail.gmail.com> So, interesting thing happened on the way to the image..... I tried using my machine to set the "Mac OS X Installer" flag in Casper Admin, but it would not let me. Complained that the installer could not be run on my system. Now my machine is running 10.6.2 (latest dev build of the beta) and the disc that I was trying to use was a 10.6 disc. So, I tried on a system running 10.5.7, but still received the no go. So on a hunch I installed the 10.6 installer onto my external hard drive and lo and behold I was able to open the image as an OS X Installer in Casper Admin. Can anyone else confirm this? Do we only have the ability to open images for the same level OS as the machine you are on? Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Fri, Oct 23, 2009 at 12:28 PM, Thomas Larkin wrote: > I am complaining my newest one right now, so hopefully it works. My > 10.5.7 image on the new iMac works but I don't want that image on there, I > want to do package based and then make comps for specific usage. > > >>> Alan Benedict 10/23/09 11:57 AM >>> > > Once you make an image from the installer disk, there is no need to mount > it and take an OS snapshot. All you need to do is drop the image of the > installer disk into the Casper Admin and check the box that it is an OS X > installer. > > > My image came from a Mac Pro that has the highest build for any of our > Macs. I also have dropped the 10.5.8 combo updater into the admin and made > that part of the configuration. > > > The one thing I have noticed is, if I try and image from that config > that has the installer, it will lock up sometime during the install. If I > compile the image first, it works every time. > > > -- > Alan Benedict > ? > Macintosh Technician > The Integer Group > O: 515-247-2738 > C: 515-770-8234 > http://www.integer.com > > > > > On Fri, Oct 23, 2009 at 10:41 AM, Thomas Larkin > > > > wrote: > >> Here is my issue.... >> >> >> I took a 10.5.0 retail DVD and made an image of it. I then mounted it >> and took a OS snap shot with Composer. I am testing this now, but previously >> I had just dropped the image into Casper Admin and told CA that it was an OS >> X installer. It gave me the options to create an install and when it block >> copies to the iMac, it just block copies the actual image. It doesn't lay >> down the OS installed. Now I also told it to install the 10.5.8 combo update >> as well, which it doesn't seem to do that either. I am currently playing >> with it, and will post back when I figure out how to get it done. >> >> >> How do you guys deploy updates? I was thinking I may have to convert an >> update to source and then compile it with my OS image to create a 10.5.8 >> base image? >> >> >> Thanks >> >> >> Tom >> >> >> >> >> ___________________________ >> Thomas Larkin >> TIS Department >> KCKPS USD500 >> tlarki at kckps.org >> blackberry: 913-449-7589 >> office: 913-627-0351 >> chown -R us /.base >> >> >> >> >> >> >>> Don Montalvo 10/23/09 9:27 AM >>> >> >> >> Steve Wood wrote: >> >> > Okay, I thought I heard that Casper 7.1 allowed for a "build train" >> > like >> > InstaDMG uses for building OS install images. I know I heard Josh >> > Wisenbaker mention it Tuesday at an Apple Enterprise event here in >> > Dallas, >> > however I am having a difficult time figuring out how it works. >> > >> > Does anyone know how to use this feature in Casper 7? >> > >> > I thought the process was to add the DVD image of your OS, whether the >> > Retail DVD or a Drop In box DVD that comes with machines, into >> > Casper Admin >> > and then build a configuration. However, that didn't work for me. >> > >> > I'm looking for the same functionality of InstaDMG. >> > >> > Anyone? >> > >> > Thanks. >> > >> > Steve Wood >> > Director of IT >> > swood at integer.com >> >> Hi Steve, >> >> First, thanks for your recent demo of Casper at your office in Dallas. >> It was comforting to see InstaDMG working along side Casper. You >> demonstrated reimaging a Mac, where the process included automagically >> layering on CS4 (Adobe's Silent Install). The time and effort are >> greatly appreciated. If there are any other shops in the Dallas (DFW) >> area, I'd love to see how you're using it in your environment >> (breakfast or lunch is on me!). :) >> >> I'm heading to west coast to meet our front end guys who bought Casper >> for this client to review the strategy for this client. I'm holding to >> my InstaDMG workflow until Casper's imaging toolset achieves feature >> parity. InstaDMG has a workflow that satisfies a lot of the process >> requirements for us. Hopefully that'll be soon, since I have to ramp >> up for image production for all our clients from here at our back >> office location. JAMF are helping us to develop a strategy for multi- >> tiered support model. >> >> In conversations with some Casper and InstaDMG users, the consensus >> was that Casper Imaging and even Apple's System Image Utility in 10.6 >> are not yet at the level of the InstaDMG workflow. Hopefully JAMF will >> add in all the InstaDMG flexibility and controls, so we can lay >> InstaDMG down to rest. JAMF certainly backs up their product with firm >> commitments and resources. >> >> Thanks, >> Don >> >> Don Montalvo >> Dallas, TX >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper >> >> >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper >> >> > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From bob.feldhake.pyb3 at statefarm.com Mon Oct 26 05:53:36 2009 From: bob.feldhake.pyb3 at statefarm.com (Bob Feldhake) Date: Mon, 26 Oct 2009 05:53:36 -0700 Subject: [Casper] [BULK] Re: Casper 7.1 OS Image Building In-Reply-To: <438f5a310910231314g3b98eecap9e60cca0f7e0a7ac@mail.gmail.com> References: <4AE18845.7141.0039.0@kckps.org><5fe906620910230957u790bab01s994d769fed788cf@mail.gmail.com><4AE1A167.7141.0039.0@kckps.org> <438f5a310910231314g3b98eecap9e60cca0f7e0a7ac@mail.gmail.com> Message-ID: That is known to be the case?to click that checkbox, you have to be running the same 10.X as the disk you?re trying to set as a Mac OS X Installer. I?m guessing the 10.6.2 didn?t work because it?s still in beta and they haven?t added support for it yet. On another note, after checking that box, you have the option of creating multiple OS copies off of that initial image, for adding different drivers and whatnot. Though, I have had absolutely no luck in putting one of the copies into a configuration, unless you plan on re-compiling with every change. If you try to leave the config un-compiled to do a package based install, it will skip over the OS every single time. Bob From: casper-bounces at list.jamfsoftware.com [mailto:casper-bounces at list.jamfsoftware.com] On Behalf Of Steve Wood Sent: Friday, October 23, 2009 3:14 PM To: Thomas Larkin Cc: Don Montalvo; casper at list.jamfsoftware.com Subject: Re: [Casper] [BULK] Re: Casper 7.1 OS Image Building So, interesting thing happened on the way to the image..... I tried using my machine to set the "Mac OS X Installer" flag in Casper Admin, but it would not let me. Complained that the installer could not be run on my system. Now my machine is running 10.6.2 (latest dev build of the beta) and the disc that I was trying to use was a 10.6 disc. So, I tried on a system running 10.5.7, but still received the no go. So on a hunch I installed the 10.6 installer onto my external hard drive and lo and behold I was able to open the image as an OS X Installer in Casper Admin. Can anyone else confirm this? Do we only have the ability to open images for the same level OS as the machine you are on? Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Fri, Oct 23, 2009 at 12:28 PM, Thomas Larkin wrote: I am complaining my newest one right now, so hopefully it works. My 10.5.7 image on the new iMac works but I don't want that image on there, I want to do package based and then make comps for specific usage. >>> Alan Benedict 10/23/09 11:57 AM >>> Once you make an image from the installer disk, there is no need to mount it and take an OS snapshot. All you need to do is drop the image of the installer disk into the Casper Admin and check the box that it is an OS X installer. My image came from a Mac Pro that has the highest build for any of our Macs. I also have dropped the 10.5.8 combo updater into the admin and made that part of the configuration. The one thing I have noticed is, if I try and image from that config that has the installer, it will lock up sometime during the install. If I compile the image first, it works every time. -- Alan Benedict ? Macintosh Technician The Integer Group O: 515-247-2738 C: 515-770-8234 http://www.integer.com On Fri, Oct 23, 2009 at 10:41 AM, Thomas Larkin wrote: Here is my issue.... I took a 10.5.0 retail DVD and made an image of it. I then mounted it and took a OS snap shot with Composer. I am testing this now, but previously I had just dropped the image into Casper Admin and told CA that it was an OS X installer. It gave me the options to create an install and when it block copies to the iMac, it just block copies the actual image. It doesn't lay down the OS installed. Now I also told it to install the 10.5.8 combo update as well, which it doesn't seem to do that either. I am currently playing with it, and will post back when I figure out how to get it done. How do you guys deploy updates? I was thinking I may have to convert an update to source and then compile it with my OS image to create a 10.5.8 base image? Thanks Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Don Montalvo 10/23/09 9:27 AM >>> Steve Wood wrote: > Okay, I thought I heard that Casper 7.1 allowed for a "build train" > like > InstaDMG uses for building OS install images. I know I heard Josh > Wisenbaker mention it Tuesday at an Apple Enterprise event here in > Dallas, > however I am having a difficult time figuring out how it works. > > Does anyone know how to use this feature in Casper 7? > > I thought the process was to add the DVD image of your OS, whether the > Retail DVD or a Drop In box DVD that comes with machines, into > Casper Admin > and then build a configuration. However, that didn't work for me. > > I'm looking for the same functionality of InstaDMG. > > Anyone? > > Thanks. > > Steve Wood > Director of IT > swood at integer.com Hi Steve, First, thanks for your recent demo of Casper at your office in Dallas. It was comforting to see InstaDMG working along side Casper. You demonstrated reimaging a Mac, where the process included automagically layering on CS4 (Adobe's Silent Install). The time and effort are greatly appreciated. If there are any other shops in the Dallas (DFW) area, I'd love to see how you're using it in your environment (breakfast or lunch is on me!). :) I'm heading to west coast to meet our front end guys who bought Casper for this client to review the strategy for this client. I'm holding to my InstaDMG workflow until Casper's imaging toolset achieves feature parity. InstaDMG has a workflow that satisfies a lot of the process requirements for us. Hopefully that'll be soon, since I have to ramp up for image production for all our clients from here at our back office location. JAMF are helping us to develop a strategy for multi- tiered support model. In conversations with some Casper and InstaDMG users, the consensus was that Casper Imaging and even Apple's System Image Utility in 10.6 are not yet at the level of the InstaDMG workflow. Hopefully JAMF will add in all the InstaDMG flexibility and controls, so we can lay InstaDMG down to rest. JAMF certainly backs up their product with firm commitments and resources. Thanks, Don Don Montalvo Dallas, TX _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From donmontalvo at gmail.com Mon Oct 26 07:13:34 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Mon, 26 Oct 2009 09:13:34 -0500 Subject: [Casper] [BULK] Re: Casper 7.1 OS Image Building In-Reply-To: References: <4AE18845.7141.0039.0@kckps.org><5fe906620910230957u790bab01s994d769fed788cf@mail.gmail.com><4AE1A167.7141.0039.0@kckps.org> <438f5a310910231314g3b98eecap9e60cca0f7e0a7ac@mail.gmail.com> Message-ID: <9491F362-60EC-49B9-BB0C-0B27BD156584@gmail.com> Curious, does this mean Casper needs different admin computers to create images for 10.5.x and 10.6.x? Don On Oct 26, 2009, at 7:53 AM, Bob Feldhake wrote: > That is known to be the case?to click that checkbox, you have to be > running the same 10.X as the disk you?re trying to set as a Mac OS > X Installer. I?m guessing the 10.6.2 didn?t work because it?s > still in beta and they haven?t added support for it yet. > > On another note, after checking that box, you have the option of > creating multiple OS copies off of that initial image, for adding > different drivers and whatnot. Though, I have had absolutely no luck > in putting one of the copies into a configuration, unless you plan > on re-compiling with every change. If you try to leave the config un- > compiled to do a package based install, it will skip over the OS > every single time. > > Bob > > From: casper-bounces at list.jamfsoftware.com [mailto:casper- > bounces at list.jamfsoftware.com] On Behalf Of Steve Wood > Sent: Friday, October 23, 2009 3:14 PM > To: Thomas Larkin > Cc: Don Montalvo; casper at list.jamfsoftware.com > Subject: Re: [Casper] [BULK] Re: Casper 7.1 OS Image Building > > So, interesting thing happened on the way to the image..... > > I tried using my machine to set the "Mac OS X Installer" flag in > Casper Admin, but it would not let me. Complained that the > installer could not be run on my system. Now my machine is running > 10.6.2 (latest dev build of the beta) and the disc that I was trying > to use was a 10.6 disc. > > So, I tried on a system running 10.5.7, but still received the no > go. So on a hunch I installed the 10.6 installer onto my external > hard drive and lo and behold I was able to open the image as an OS X > Installer in Casper Admin. > > Can anyone else confirm this? Do we only have the ability to open > images for the same level OS as the machine you are on? > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > On Fri, Oct 23, 2009 at 12:28 PM, Thomas Larkin > wrote: > I am complaining my newest one right now, so hopefully it works. My > 10.5.7 image on the new iMac works but I don't want that image on > there, I want to do package based and then make comps for specific > usage. > > >>> Alan Benedict 10/23/09 11:57 AM >>> > > Once you make an image from the installer disk, there is no need to > mount it and take an OS snapshot. All you need to do is drop the > image of the installer disk into the Casper Admin and check the box > that it is an OS X installer. > > My image came from a Mac Pro that has the highest build for any of > our Macs. I also have dropped the 10.5.8 combo updater into the > admin and made that part of the configuration. > > The one thing I have noticed is, if I try and image from that config > that has the installer, it will lock up sometime during the install. > If I compile the image first, it works every time. > > -- > Alan Benedict > ? > Macintosh Technician > The Integer Group > O: 515-247-2738 > C: 515-770-8234 > http://www.integer.com > > > > > On Fri, Oct 23, 2009 at 10:41 AM, Thomas Larkin > > wrote: > Here is my issue.... > > I took a 10.5.0 retail DVD and made an image of it. I then mounted > it and took a OS snap shot with Composer. I am testing this now, but > previously I had just dropped the image into Casper Admin and told > CA that it was an OS X installer. It gave me the options to create > an install and when it block copies to the iMac, it just block > copies the actual image. It doesn't lay down the OS installed. Now I > also told it to install the 10.5.8 combo update as well, which it > doesn't seem to do that either. I am currently playing with it, and > will post back when I figure out how to get it done. > > How do you guys deploy updates? I was thinking I may have to convert > an update to source and then compile it with my OS image to create a > 10.5.8 base image? > > Thanks > > Tom > > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > > >>> Don Montalvo 10/23/09 9:27 AM >>> > > > Steve Wood wrote: > > > Okay, I thought I heard that Casper 7.1 allowed for a "build train" > > like > > InstaDMG uses for building OS install images. I know I heard Josh > > Wisenbaker mention it Tuesday at an Apple Enterprise event here in > > Dallas, > > however I am having a difficult time figuring out how it works. > > > > Does anyone know how to use this feature in Casper 7? > > > > I thought the process was to add the DVD image of your OS, whether > the > > Retail DVD or a Drop In box DVD that comes with machines, into > > Casper Admin > > and then build a configuration. However, that didn't work for me. > > > > I'm looking for the same functionality of InstaDMG. > > > > Anyone? > > > > Thanks. > > > > Steve Wood > > Director of IT > > swood at integer.com > > Hi Steve, > > First, thanks for your recent demo of Casper at your office in Dallas. > It was comforting to see InstaDMG working along side Casper. You > demonstrated reimaging a Mac, where the process included automagically > layering on CS4 (Adobe's Silent Install). The time and effort are > greatly appreciated. If there are any other shops in the Dallas (DFW) > area, I'd love to see how you're using it in your environment > (breakfast or lunch is on me!). :) > > I'm heading to west coast to meet our front end guys who bought Casper > for this client to review the strategy for this client. I'm holding to > my InstaDMG workflow until Casper's imaging toolset achieves feature > parity. InstaDMG has a workflow that satisfies a lot of the process > requirements for us. Hopefully that'll be soon, since I have to ramp > up for image production for all our clients from here at our back > office location. JAMF are helping us to develop a strategy for multi- > tiered support model. > > In conversations with some Casper and InstaDMG users, the consensus > was that Casper Imaging and even Apple's System Image Utility in 10.6 > are not yet at the level of the InstaDMG workflow. Hopefully JAMF will > add in all the InstaDMG flexibility and controls, so we can lay > InstaDMG down to rest. JAMF certainly backs up their product with firm > commitments and resources. > > Thanks, > Don > > Don Montalvo > Dallas, TX > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > From tlarki at kckps.org Mon Oct 26 07:35:41 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 26 Oct 2009 09:35:41 -0500 Subject: [Casper] [BULK] Re: [BULK] Re: Casper 7.1 OS Image Building In-Reply-To: <9491F362-60EC-49B9-BB0C-0B27BD156584@gmail.com> References: <4AE18845.7141.0039.0@kckps.org><5fe906620910230957u790bab01s994d769fed788cf@mail.gmail.com><4AE1A167.7141.0039.0@kckps.org> <438f5a310910231314g3b98eecap9e60cca0f7e0a7ac@mail.gmail.com> <9491F362-60EC-49B9-BB0C-0B27BD156584@gmail.com> Message-ID: <4AE56D6D.7141.0039.0@kckps.org> Do compiled configurations require a nbi made from Casper imaging version 7? I compiled mine over the weekend and it installed 10.5.0 and then 10.5.8 combo updater but it is still not working. Thanks Tom >>> Don Montalvo 10/26/09 9:13 AM >>> Curious, does this mean Casper needs different admin computers to create images for 10.5.x and 10.6.x? Don On Oct 26, 2009, at 7:53 AM, Bob Feldhake wrote: > That is known to be the case?to click that checkbox, you have to be > running the same 10.X as the disk you?re trying to set as a Mac OS > X Installer. I?m guessing the 10.6.2 didn?t work because it?s > still in beta and they haven?t added support for it yet. > > On another note, after checking that box, you have the option of > creating multiple OS copies off of that initial image, for adding > different drivers and whatnot. Though, I have had absolutely no luck > in putting one of the copies into a configuration, unless you plan > on re-compiling with every change. If you try to leave the config un- > compiled to do a package based install, it will skip over the OS > every single time. > > Bob > > From: casper-bounces at list.jamfsoftware.com [mailto:casper- > bounces at list.jamfsoftware.com] On Behalf Of Steve Wood > Sent: Friday, October 23, 2009 3:14 PM > To: Thomas Larkin > Cc: Don Montalvo; casper at list.jamfsoftware.com > Subject: Re: [Casper] [BULK] Re: Casper 7.1 OS Image Building > > So, interesting thing happened on the way to the image..... > > I tried using my machine to set the "Mac OS X Installer" flag in > Casper Admin, but it would not let me. Complained that the > installer could not be run on my system. Now my machine is running > 10.6.2 (latest dev build of the beta) and the disc that I was trying > to use was a 10.6 disc. > > So, I tried on a system running 10.5.7, but still received the no > go. So on a hunch I installed the 10.6 installer onto my external > hard drive and lo and behold I was able to open the image as an OS X > Installer in Casper Admin. > > Can anyone else confirm this? Do we only have the ability to open > images for the same level OS as the machine you are on? > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > On Fri, Oct 23, 2009 at 12:28 PM, Thomas Larkin > wrote: > I am complaining my newest one right now, so hopefully it works. My > 10.5.7 image on the new iMac works but I don't want that image on > there, I want to do package based and then make comps for specific > usage. > > >>> Alan Benedict 10/23/09 11:57 AM >>> > > Once you make an image from the installer disk, there is no need to > mount it and take an OS snapshot. All you need to do is drop the > image of the installer disk into the Casper Admin and check the box > that it is an OS X installer. > > My image came from a Mac Pro that has the highest build for any of > our Macs. I also have dropped the 10.5.8 combo updater into the > admin and made that part of the configuration. > > The one thing I have noticed is, if I try and image from that config > that has the installer, it will lock up sometime during the install. > If I compile the image first, it works every time. > > -- > Alan Benedict > ? > Macintosh Technician > The Integer Group > O: 515-247-2738 > C: 515-770-8234 > http://www.integer.com > > > > > On Fri, Oct 23, 2009 at 10:41 AM, Thomas Larkin > > wrote: > Here is my issue.... > > I took a 10.5.0 retail DVD and made an image of it. I then mounted > it and took a OS snap shot with Composer. I am testing this now, but > previously I had just dropped the image into Casper Admin and told > CA that it was an OS X installer. It gave me the options to create > an install and when it block copies to the iMac, it just block > copies the actual image> also told it to install the 10.5.8 combo update as well, which it > doesn't seem to do that either. I am currently playing with it, and > will post back when I figure out how to get it done. > > How do you guys deploy updates? I was thinking I may have to convert > an update to source and then compile it with my OS image to create a > 10.5.8 base image? > > Thanks > > Tom > > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > > >>> Don Montalvo 10/23/09 9:27 AM >>> > > > Steve Wood wrote: > > > Okay, I thought I heard that Casper 7.1 allowed for a "build train" > > like > > InstaDMG uses for building OS install images. I know I heard Josh > > Wisenbaker mention it Tuesday at an Apple Enterprise event here in > > Dallas, > > however I am having a difficult time figuring out how it works. > > > > Does anyone know how to use this feature in Casper 7? > > > > I thought the process was to add the DVD image of your OS, whether > the > > Retail DVD or a Drop In box DVD that comes with machines, into > > Casper Admin > > and then build a configuration. However, that didn't work for me. > > > > I'm looking for the same functionality of InstaDMG. > > > > Anyone? > > > > Thanks. > > > > Steve Wood > > Director of IT > > swood at integer.com > > Hi Steve, > > First, thanks for your recent demo of Casper at your office in Dallas. > It was comforting to see InstaDMG working along side Casper. You > demonstrated reimaging a Mac, where the process included automagically > layering on CS4 (Adobe's Silent Install). The time and effort are > greatly appreciated. If there are any other shops in the Dallas (DFW) > area, I'd love to see how you're using it in your environment > (breakfast or lunch is on me!). :) > > I'm heading to west coast to meet our front end guys who bought Casper > for this client to review the strategy for this client. I'm holding to > my InstaDMG workflow until Casper's imaging toolset achieves feature > parity. InstaDMG has a workflow that satisfies a lot of the process > requirements for us. Hopefully that'll be soon, since I have to ramp > up for image production for all our clients from here at our back > office location. JAMF are helping us to develop a strategy for multi- > tiered support model. > > In conversations with some Casper and InstaDMG users, the consensus > was that Casper Imaging and even Apple's System Image Utility in 10.6 > are not yet at the level of the InstaDMG workflow. Hopefully JAMF will > add in all the InstaDMG flexibility and controls, so we can lay > InstaDMG down to rest. JAMF certainly backs up their product with firm > commitments and resources. > > Thanks, > Don > > Don Montalvo > Dallas, TX > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From bob.feldhake.pyb3 at statefarm.com Mon Oct 26 07:44:37 2009 From: bob.feldhake.pyb3 at statefarm.com (Bob Feldhake) Date: Mon, 26 Oct 2009 07:44:37 -0700 Subject: [Casper] [BULK] Re: Casper 7.1 OS Image Building Message-ID: -----Original Message----- From: Bob Feldhake Sent: Monday, October 26, 2009 9:20 AM To: 'Don Montalvo' Subject: RE: [Casper] [BULK] Re: Casper 7.1 OS Image Building You know, I'm not 100% sure on the backwards-compatibility. I haven't tried testing to see if you can check that box on a 10.5 image when you're running 10.6...If you test that out let me know how it works! I just know it doesn't work the other way around. I've got two separate machines at my desk, but I plan to consolidate to 1 with two different partitions... Bob -----Original Message----- From: Don Montalvo [mailto:donmontalvo at gmail.com] Sent: Monday, October 26, 2009 9:14 AM To: Bob Feldhake Cc: Steve Wood; Thomas Larkin; casper at list.jamfsoftware.com Subject: Re: [Casper] [BULK] Re: Casper 7.1 OS Image Building Curious, does this mean Casper needs different admin computers to create images for 10.5.x and 10.6.x? Don On Oct 26, 2009, at 7:53 AM, Bob Feldhake wrote: > That is known to be the case?to click that checkbox, you have to be > running the same 10.X as the disk you?re trying to set as a Mac OS X > Installer. I?m guessing the 10.6.2 didn?t work because it?s still in > beta and they haven?t added support for it yet. > > On another note, after checking that box, you have the option of > creating multiple OS copies off of that initial image, for adding > different drivers and whatnot. Though, I have had absolutely no luck > in putting one of the copies into a configuration, unless you plan on > re-compiling with every change. If you try to leave the config un- > compiled to do a package based install, it will skip over the OS every > single time. > > Bob > > From: casper-bounces at list.jamfsoftware.com [mailto:casper- > bounces at list.jamfsoftware.com] On Behalf Of Steve Wood > Sent: Friday, October 23, 2009 3:14 PM > To: Thomas Larkin > Cc: Don Montalvo; casper at list.jamfsoftware.com > Subject: Re: [Casper] [BULK] Re: Casper 7.1 OS Image Building > > So, interesting thing happened on the way to the image..... > > I tried using my machine to set the "Mac OS X Installer" flag in > Casper Admin, but it would not let me. Complained that the installer > could not be run on my system. Now my machine is running > 10.6.2 (latest dev build of the beta) and the disc that I was trying > to use was a 10.6 disc. > > So, I tried on a system running 10.5.7, but still received the no go. > So on a hunch I installed the 10.6 installer onto my external hard > drive and lo and behold I was able to open the image as an OS X > Installer in Casper Admin. > > Can anyone else confirm this? Do we only have the ability to open > images for the same level OS as the machine you are on? > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T > 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > On Fri, Oct 23, 2009 at 12:28 PM, Thomas Larkin > wrote: > I am complaining my newest one right now, so hopefully it works. My > 10.5.7 image on the new iMac works but I don't want that image on > there, I want to do package based and then make comps for specific > usage. > > >>> Alan Benedict 10/23/09 11:57 AM >>> > > Once you make an image from the installer disk, there is no need to > mount it and take an OS snapshot. All you need to do is drop the image > of the installer disk into the Casper Admin and check the box that it > is an OS X installer. > > My image came from a Mac Pro that has the highest build for any of our > Macs. I also have dropped the 10.5.8 combo updater into the admin and > made that part of the configuration. > > The one thing I have noticed is, if I try and image from that config > that has the installer, it will lock up sometime during the install. > If I compile the image first, it works every time. > > -- > Alan Benedict > ? > Macintosh Technician > The Integer Group > O: 515-247-2738 > C: 515-770-8234 > http://www.integer.com > > > > > On Fri, Oct 23, 2009 at 10:41 AM, Thomas Larkin > wrote: > Here is my issue.... > > I took a 10.5.0 retail DVD and made an image of it. I then mounted it > and took a OS snap shot with Composer. I am testing this now, but > previously I had just dropped the image into Casper Admin and told CA > that it was an OS X installer. It gave me the options to create an > install and when it block copies to the iMac, it just block copies the > actual image. It doesn't lay down the OS installed. Now I also told it > to install the 10.5.8 combo update as well, which it doesn't seem to > do that either. I am currently playing with it, and will post back > when I figure out how to get it done. > > How do you guys deploy updates? I was thinking I may have to convert > an update to source and then compile it with my OS image to create a > 10.5.8 base image? > > Thanks > > Tom > > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > > >>> Don Montalvo 10/23/09 9:27 AM >>> > > > Steve Wood wrote: > > > Okay, I thought I heard that Casper 7.1 allowed for a "build train" > > like > > InstaDMG uses for building OS install images. I know I heard Josh > > Wisenbaker mention it Tuesday at an Apple Enterprise event here in > > Dallas, however I am having a difficult time figuring out how it > > works. > > > > Does anyone know how to use this feature in Casper 7? > > > > I thought the process was to add the DVD image of your OS, whether > the > > Retail DVD or a Drop In box DVD that comes with machines, into > > Casper Admin and then build a configuration. However, that didn't > > work for me. > > > > I'm looking for the same functionality of InstaDMG. > > > > Anyone? > > > > Thanks. > > > > Steve Wood > > Director of IT > > swood at integer.com > > Hi Steve, > > First, thanks for your recent demo of Casper at your office in Dallas. > It was comforting to see InstaDMG working along side Casper. You > demonstrated reimaging a Mac, where the process included automagically > layering on CS4 (Adobe's Silent Install). The time and effort are > greatly appreciated. If there are any other shops in the Dallas (DFW) > area, I'd love to see how you're using it in your environment > (breakfast or lunch is on me!). :) > > I'm heading to west coast to meet our front end guys who bought Casper > for this client to review the strategy for this client. I'm holding to > my InstaDMG workflow until Casper's imaging toolset achieves feature > parity. InstaDMG has a workflow that satisfies a lot of the process > requirements for us. Hopefully that'll be soon, since I have to ramp > up for image production for all our clients from here at our back > office location. JAMF are helping us to develop a strategy for multi- > tiered support model. > > In conversations with some Casper and InstaDMG users, the consensus > was that Casper Imaging and even Apple's System Image Utility in 10.6 > are not yet at the level of the InstaDMG workflow. Hopefully JAMF will > add in all the InstaDMG flexibility and controls, so we can lay > InstaDMG down to rest. JAMF certainly backs up their product with firm > commitments and resources. > > Thanks, > Don > > Don Montalvo > Dallas, TX > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > From pgawlocki at cellsignal.net Mon Oct 26 08:19:27 2009 From: pgawlocki at cellsignal.net (Peter Gawlocki) Date: Mon, 26 Oct 2009 11:19:27 -0400 Subject: [Casper] Off Topic Message-ID: <0686159A-C39E-4270-BEE2-909751FB4CF0@cellsignal.net> Our Sr. SysAdmin is trying to migrate our OD to a new box. From 10.4 to 10.5 (or beyond) It seems that he cannot migrate it over intact... having the users passwords migrate also. He would have to migrate it over and then have the users all change their passwords. Our company is not large, @300 users, but we need to get this done without user intervention. We are a mostly Mac company but we do have 40 or so windows machines bound to the domain. I know some of you have much larger installations than I have... how did you overcome this issue? This is sort an off topic request, although i can see where using casper to bind the Macs to OD again is a Casper thing. Thanks Peter From tlarki at kckps.org Mon Oct 26 08:56:25 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Mon, 26 Oct 2009 10:56:25 -0500 Subject: [Casper] Off Topic In-Reply-To: <0686159A-C39E-4270-BEE2-909751FB4CF0@cellsignal.net> References: <0686159A-C39E-4270-BEE2-909751FB4CF0@cellsignal.net> Message-ID: <4AE58059.7141.0039.0@kckps.org> Peter, This can be easily remedied several different ways. First and foremost the only time you can preserve user passwords is if you do a full archive of LDAP in OS X Server. It is really not best practice to do this when migrating from one version to the next. The best practice is to export your users/groups to plain text and reimport them. Then set, say a master password for all user accounts and then check the box that says "Force password change on next log in." This way the user will log in with the password of say, monday, and once they log in using that password they will be prompted to pick a new one. If you don't own a license to the app called Passenger I really recommend you go ahead and get it. It is a very awesome GUI tool designed to tailor import files into OD. I use it all the time. It has a few other features in the app itself that are useful as well, and couple more that I don't use at all. I wrote up a tech article and review of it on my site (yeah I know another shameless self plug). http://tlarkin.com/tech/passenger-v379-review Now if you do scrap it and redo all users, they will have a new UID and it will not match the old UID that is assigned to the home folder. Passenger has batch permission jobs it can run to remedy this. I also have a few shell scripts I have written myself that do the same thing on the client side which I would gladly share with you. As for binding the client, Casper can do that easily. It has a built in easy button. I use a script to bind my clients that I have Casper run at first boot post imaging. You can also set your OD server to set bindings via DHCP services. That is, if you decide to have your OS X Server run DHCP. In my humble opinion, Passenger is well worth the $100 to $150 you pay for it. I have 30+ servers and 7,000+ user accounts that I manage in my 1:1 deployment and I think I created every user account with in a few hours in one day using Passenger this summer. Your Sys Admin will really like it. -Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Peter Gawlocki 10/26/09 10:19 AM >>> Our Sr. SysAdmin is trying to migrate our OD to a new box. From 10.4 to 10.5 (or beyond) It seems that he cannot migrate it over intact... having the users passwords migrate also. He would have to migrate it over and then have the users all change their passwords. Our company is not large, @300 users, but we need to get this done without user intervention. We are a mostly Mac company but we do have 40 or so windows machines bound to the domain. I know some of you have much larger installations than I have... how did you overcome this issue? This is sort an off topic request, although i can see where using casper to bind the Macs to OD again is a Casper thing. Thanks Peter _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From tgreenleaf at saintmarksschool.org Mon Oct 26 09:00:40 2009 From: tgreenleaf at saintmarksschool.org (Tatian Greenleaf) Date: Mon, 26 Oct 2009 09:00:40 -0700 Subject: [Casper] Smart Notebook software & composer In-Reply-To: <38d97fa20909021407h2fe8ef1aj6186412412fdb09d@mail.gmail.com> References: <38d97fa20908310902l40ccdc3fyb39f1c502bb06804@mail.gmail.com> <38d97fa20909021407h2fe8ef1aj6186412412fdb09d@mail.gmail.com> Message-ID: <38d97fa20910260900s72a12664v649d846f9e65f165@mail.gmail.com> UPDATE: Turns out that our LDAP binding was causing the problem with SMART Notebook. Disabling binding allows Notebook to run properly. Tatian ____________________________ Tatian Greenleaf Associate Director of Technology Saint Mark's School (415) 472-8000 x1014 On Wed, Sep 2, 2009 at 2:07 PM, Tatian Greenleaf < tgreenleaf at saintmarksschool.org> wrote: > Yes, but it wasn't working with Composer. We were able to package it > finally, but it would crash when running the initial update of the software. > My colleague ended up removing the update feature from the package, and > packaging Tools and Notebook separately. It works IF we image machines with > Tools first and then with Notebook, but not the other way around. > > Tatian > > ____________________________ > Tatian Greenleaf > Associate Director of Technology > Saint Mark's School > (415) 472-8000 x1014 > > > On Mon, Aug 31, 2009 at 4:56 PM, Marcus Rowell wrote: > >> On Tue, Sep 1, 2009 at 2:02 AM, Tatian >> Greenleaf wrote: >> > We've had no success building a package of the Smart Notebook 10 >> software >> > (drivers and tools) using Composer. Either we get an error related to >> > hdutil, or we successfully build a package only to have it freeze while >> > trying to update the software on first launch. >> > Has anyone else built this package? Did you run into any problems? >> >> Tatian, >> >> Have you seen the Smart Install Manager and SMART Administrator >> Toolkit Administrator's Guide for Mac Operating Systems for packaging >> and pre-registering Smart NoteBook. >> >> >> http://www2.smarttech.com/st/en-US/Support/Downloads/Admin+tools/AdminToolsNBMac.htm >> http://www2.smarttech.com/kbdoc/125889 >> >> I am in the process of testing deployment using those methods and it >> seems to work well. >> >> Marcus. >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper >> > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From ganderson at phrd.ab.ca Mon Oct 26 10:12:48 2009 From: ganderson at phrd.ab.ca (Gene Anderson) Date: Mon, 26 Oct 2009 11:12:48 -0600 Subject: [Casper] Smart Notebook software & composer In-Reply-To: <38d97fa20910260900s72a12664v649d846f9e65f165@mail.gmail.com> References: <38d97fa20910260900s72a12664v649d846f9e65f165@mail.gmail.com> Message-ID: I meant to post to the list on how I got Smart's latest NoteBook and driver package installed without including it my base image. Sorry for taking so long on this. I had the same experience as everyone else it appears in trying to bundle or deploy Notebook and the drivers package either together or separately. I finally cobbled together a script which did the install and I had it run "At Reboot" for my Casper imaging configuration. The script also works as part of a policy. For all of those who are including Smart's software as part of their base image, this script could be changed to install any needed updates later on. It generates an error due to the irritating warning messages within Smart's installer package, but it does install successfully. I've used it on a few hundred workstations with no ill effects so far (knock wood) and it's been a few months, so I believe it's safe to use. But as always, test, test, test and then test again to be sure it will work in your environment. Script operates as follows: 1) creates a directory within /Volumes 2) mounts a _hardcoded_ casper sharepoint and maps the sharepoint to the newly created Volumes directory 3) using Apple's installer, installs Smart's NoteBook and driver packages 4) copies the necessary Smart preferences for the licensing, gallery locations and Team content locations 5) sets permissions on the Smart preferences files to all users #!/bin/bash # written by Gene Anderson (ganderson at phrd.ab.ca) # Systems Analyst, PHRD #7 # June 18, 2009 # # This script was written to install the current version of Smart's # NoteBook software (v10.0.346.2) and drivers (v10.0.345.5). An error # occurs when trying to install this software silently as it incorreclty # reports Flash is missing and also warns to close all applications. # create Casper folder mkdir /Volumes/Casper # mount CaspeShare on server mount_afp "afp://user:password at server.yourdomain.com/CasperShare" /Volumes/Casper # install Smart NoteBook installer -pkg /Volumes/Casper/Packages/SB_10.0.346.2.mpkg -target / # install Smart drivers installer -pkg /Volumes/Casper/Packages/SMART\ Board\ Drivers\ 10.0.345.5.mpkg -target / # copy license preference file and set permissions cp /Volumes/Casper/Packages/com.smarttech.Registry.plist /Users/Shared/Library/Preferences/com.smarttech.Registry.plist cp /Volumes/Casper/Packages/com.smarttech.gallery.plist /Users/Shared/Library/Preferences/com.smarttech.gallery.plist chown phrdtech:staff /Users/Shared/Library/Preferences/com.smarttech.* chmod ugo=rx /Users/Shared/Library/Preferences/com.smarttech.* exit 0 Gene Anderson Systems Analyst, ACTC, MCP Pembina Hills Regional Division No.7 Phone: (780) 674-8535 ext 6860 email: ganderson at phrd.ab.ca "I'm not a quack, I'm a mad scientist. There's a difference" - Dr Cockroach, PHD. From jared.nichols at ll.mit.edu Tue Oct 27 10:13:36 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Tue, 27 Oct 2009 13:13:36 -0400 Subject: [Casper] Odd computer names Message-ID: Hi- I've got a machine in my inventory called {
Network {
HostNames {
and one called 2009-10-23 16:10:37.289 defaults[319] The domain/default Has anyone seen something like this before? Before I contact the user, I wanted to see if there was anything I could do on the service side of things. I ran a recon remotely and the names are still sticking. Should I delete them from the JSS and let them check in again? --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Tue Oct 27 10:42:42 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Tue, 27 Oct 2009 12:42:42 -0500 Subject: [Casper] Odd computer names In-Reply-To: References: Message-ID: <4AE6EAC2.7141.0039.0@kckps.org> I have seen this before too, which is why I came up with my keep name solution I posted on the list about a month ago. It works as intended but there are a few caveats to it. You must ensure that the name is set right during imaging, then this won't happen. If you want I can send the info to you off the list since it is on my site. -Tom >>> "Nichols, Jared - 1160 - MITLL" 10/27/09 12:13 PM >>> Hi- I've got a machine in my inventory called {
Network {
HostNames {
and one called 2009-10-23 16:10:37.289 defaults[319] The domain/default Has anyone seen something like this before? Before I contact the user, I wanted to see if there was anything I could do on the service side of things. I ran a recon remotely and the names are still sticking. Should I delete them from the JSS and let them check in again? --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 -------------- next part -------------- An HTML attachment was scrubbed... URL: From smith.jonathan at gene.com Tue Oct 27 10:51:09 2009 From: smith.jonathan at gene.com (Jonathan Smith) Date: Tue, 27 Oct 2009 10:51:09 -0700 Subject: [Casper] Odd computer names In-Reply-To: <4AE6EAC2.7141.0039.0@kckps.org> References: <4AE6EAC2.7141.0039.0@kckps.org> Message-ID: <462d1b830910271051r35d522depb9d7be86e263a8ca@mail.gmail.com> Hey Al- We get this same thing too. We would be interested in that fix script too. Thx Jon On Tue, Oct 27, 2009 at 10:42 AM, Thomas Larkin wrote: > I have seen this before too, which is why I came up with my keep name > solution I posted on the list about a month ago. It works as intended but > there are a few caveats to it. You must ensure that the name is set right > during imaging, then this won't happen. > > If you want I can send the info to you off the list since it is on my > site. > > -Tom > > >>> "Nichols, Jared - 1160 - MITLL" 10/27/09 > 12:13 PM >>> > Hi- > > > I've got a machine in my inventory called > > > {
Network {
HostNames {
> > and one called > > > 2009-10-23 16:10:37.289 defaults[319] The domain/default > > > Has anyone seen something like this before? Before I contact the user, > I wanted to see if there was anything I could do on the service side of > things. I ran a recon remotely and the names are still sticking. Should I > delete them from the JSS and let them check in again? > > --- > > Jared F. Nichols > > Desktop Engineer, Infrastructure & Operations > > Information Services Department > > MIT Lincoln Laboratory > > 244 Wood Street > > Lexington, Massachusetts 02420 > > 781.981.5436 > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -- Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Tue Oct 27 11:01:49 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Tue, 27 Oct 2009 13:01:49 -0500 Subject: [Casper] Odd computer names In-Reply-To: <462d1b830910271051r35d522depb9d7be86e263a8ca@mail.gmail.com> References: <4AE6EAC2.7141.0039.0@kckps.org> <462d1b830910271051r35d522depb9d7be86e263a8ca@mail.gmail.com> Message-ID: <4AE6EF3D.7141.0039.0@kckps.org> It is a two part script. The first script is meant to run after imaging, and it will write the name to a file in /Library/Receipts. This file will contain the computer name from when it was imaged. The second script you run as a policy via Casper that can run say, once a day for example. If you check the box that says make this policy available off line it will cache the script to the machine and run it at start up or once a day. The second script checks the file in /Library/Receipts and if the name matches it exits, if the name doesn't match the computer gets renamed to what it should be. The only thing I didn't add was a recon to update inventory but you could easily add that to my scripts My script is a bit redundant because I haven't tossed it into production yet, just tested it out in my test environment. However, it has worked for me as advertised. So, please make sure you test it, and you could probably even make it smaller. You can drop the touch command since > will create the file if it doesn't exist and you can probably drop the ownership and permissions commands. I just put them in there because I was still testing it and wanted to make sure certain things were there. If Casper creates a file I am sure Casper does it as root. http://tlarkin.com/tech/2-shell-scripts-maintain-standard-naming-conventions So, copy and paste both scripts in your favorite text editor, then upload them to the JSS. Make the first script run after post imaging, and the second script to run once a day and make it available off line. It will cache the second script to the machine locally and it will execute once every day. Now, when you image a machine ensure that the name is set properly, because if it is not then it will cache the wrong name to that receipt file. You could also technically accomplish this with out Casper and use launchd, but Casper puts the easy button on it. -Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Jonathan Smith 10/27/09 12:51 PM >>> Hey Al- We get this same thing too. We would be interested in that fix script too. Thx Jon On Tue, Oct 27, 2009 at 10:42 AM, Thomas Larkin wrote: I have seen this before too, which is why I came up with my keep name solution I posted on the list about a month ago. It works as intended but there are a few caveats to it. You must ensure that the name is set right during imaging, then this won't happen. If you want I can send the info to you off the list since it is on my site. -Tom >>> "Nichols, Jared - 1160 - MITLL" 10/27/09 12:13 PM >>> Hi- I've got a machine in my inventory called {
Network {
HostNames {
and one called 2009-10-23 16:10:37.289 defaults[319] The domain/default Has anyone seen something like this before? Before I contact the user, I wanted to see if there was anything I could do on the service side of things. I ran a recon remotely and the names are still sticking. Should I delete them from the JSS and let them check in again? --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -- Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | -------------- next part -------------- An HTML attachment was scrubbed... URL: From smith.jonathan at gene.com Tue Oct 27 11:19:25 2009 From: smith.jonathan at gene.com (Jonathan Smith) Date: Tue, 27 Oct 2009 11:19:25 -0700 Subject: [Casper] Odd computer names In-Reply-To: <4AE6EF3D.7141.0039.0@kckps.org> References: <4AE6EAC2.7141.0039.0@kckps.org> <462d1b830910271051r35d522depb9d7be86e263a8ca@mail.gmail.com> <4AE6EF3D.7141.0039.0@kckps.org> Message-ID: <462d1b830910271119s6377c7c5mb5016ffcdfed9550@mail.gmail.com> Thanks. We'll give this a whirl and see how it goes. On Tue, Oct 27, 2009 at 11:01 AM, Thomas Larkin wrote: > It is a two part script. > > The first script is meant to run after imaging, and it will write the > name to a file in /Library/Receipts. This file will contain the computer > name from when it was imaged. The second script you run as a policy via > Casper that can run say, once a day for example. If you check the box that > says make this policy available off line it will cache the script to the > machine and run it at start up or once a day. The second script checks the > file in /Library/Receipts and if the name matches it exits, if the name > doesn't match the computer gets renamed to what it should be. > > The only thing I didn't add was a recon to update inventory but you could > easily add that to my scripts > > My script is a bit redundant because I haven't tossed it into production > yet, just tested it out in my test environment. However, it has worked for > me as advertised. So, please make sure you test it, and you could probably > even make it smaller. You can drop the touch command since > will create > the file if it doesn't exist and you can probably drop the ownership and > permissions commands. I just put them in there because I was still testing > it and wanted to make sure certain things were there. If Casper creates a > file I am sure Casper does it as root. > > * > http://tlarkin.com/tech/2-shell-scripts-maintain-standard-naming-conventions > * > > So, copy and paste both scripts in your favorite text editor, then upload > them to the JSS. Make the first script run after post imaging, and the > second script to run once a day and make it available off line. It will > cache the second script to the machine locally and it will execute once > every day. Now, when you image a machine ensure that the name is set > properly, because if it is not then it will cache the wrong name to that > receipt file. > > You could also technically accomplish this with out Casper and use > launchd, but Casper puts the easy button on it. > > -Tom > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > > >>> Jonathan Smith 10/27/09 12:51 PM >>> > > Hey Al- > > We get this same thing too. We would be interested in that fix script too. > > Thx > Jon > > > On Tue, Oct 27, 2009 at 10:42 AM, Thomas Larkin > > > > wrote: > >> I have seen this before too, which is why I came up with my keep name >> solution I posted on the list about a month ago. It works as intended but >> there are a few caveats to it. You must ensure that the name is set right >> during imaging, then this won't happen. >> >> >> If you want I can send the info to you off the list since it is on my >> site. >> >> >> -Tom >> >> >>> "Nichols, Jared - 1160 - MITLL" 10/27/09 >> 12:13 PM >>> >> Hi- >> >> >> I've got a machine in my inventory called >> >> >> {
Network {
HostNames {
>> >> and one called >> >> >> 2009-10-23 16:10:37.289 defaults[319] The domain/default >> >> >> Has anyone seen something like this before? Before I contact the user, >> I wanted to see if there was anything I could do on the service side of >> things. I ran a recon remotely and the names are still sticking. Should I >> delete them from the JSS and let them check in again? >> >> --- >> >> Jared F. Nichols >> >> Desktop Engineer, Infrastructure & Operations >> >> Information Services Department >> >> MIT Lincoln Laboratory >> >> 244 Wood Street >> >> Lexington, Massachusetts 02420 >> >> 781.981.5436 >> >> >> >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper >> >> > > > -- > Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: > 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | > -- Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | -------------- next part -------------- An HTML attachment was scrubbed... URL: From Ben.Toms at grey.com Tue Oct 27 11:22:54 2009 From: Ben.Toms at grey.com (Toms, Ben (Grey Communications Group - IT)) Date: Tue, 27 Oct 2009 18:22:54 +0000 Subject: [Casper] PreAdobeInstall.pkg questions In-Reply-To: References: <2C9878F55C186649BD688D66964EBE2403F2FC3B@EX-LON-MB-01.weu.grey.global> Message-ID: <2C9878F55C186649BD688D66964EBE240416F81F@EX-LON-MB-01.weu.grey.global> Hi guys, Just an update. Thanks to Tony first up. We've created an CS4 installer from multiple discs & are currently just deploying as any app. In Casper Admin we ticked that it's an Adobe install & added the license info etc. Since then the install have been going fine. We're also deploying Universal Type Client & have found that simply uploading the pkg & changing priority to after the CS4 package has been deployed works fine too. Just wanted to mark is as a case closed incase someone else has the same q. Regards, Ben Toms IT Support Analyst, GREY Communications Group The Johnson Building, 77 Hatton Garden, London, EC1N 8JS T: +44 (0)20 3037 3883 | DDI: +44 (0)20 3037 3819 Agency Network of the Year - Euro Effies 2005, 2006, 2007 & 2008 From: Tony S. Wu [mailto:tonyswu at mac.com] Sent: 23 October 2009 15:23 To: Toms, Ben (Grey Communications Group - IT) Subject: Re: [Casper] PreAdobeInstall.pkg questions if you follow the guideline, you should be able to install it with casper remote without users logged out. also, the Pre & Post install are optional, as well. Tony S. Wu tonyswu at mac.com On Oct 23, 2009, at 5:19 AM, Toms, Ben (Grey Communications Group - IT) wrote: Hi All, Yep it's ANOTHER CS4 deployment question! So.. we've a Adobe install created that seems to work fine via Casper Remote, BUT only if we do the below: 1. Logout any user that's logged in. 2. Run the Adobe Install with the Pre & Post pkg's from the Resource Kit. 3. The PreAdobeInstall will not fully install unless we then login as a user. 4. After logging in, it's hit & miss whether we get the Adobe Install splash screen. But the products install IF we don't launch anything. Is this similar to what you guys are experiencing? We followed the guide here: http://jamfsoftware.com/kb/article.php?id=195 to create the installer. Like I said, it seems to work.. but also seems to be a bit of a faff! Another way we could do it is for us to create a Configuration in Casper Admin with just the Adobe Installer, add this to machines autorun & netboot them. There has to be an easier way or a document I've missed.. Thanks in advance. Regards, Ben Toms IT Support Analyst, GREY Communications Group The Johnson Building, 77 Hatton Garden, London, EC1N 8JS T: +44 (0)20 3037 3883 | DDI: +44 (0)20 3037 3819 Agency Network of the Year - Euro Effies 2005, 2006, 2007 & 2008 Grey Communications Group Limited Registered No. 1795794, Registered in England Registered Office The Johnson Building, 77 Hatton Garden, London, EC1N 8JS VAT Number GB 404 6245 78 CONFIDENTIALITY The information contained in this communication may contain confidential, privileged and copyright information and is solely for the use of the intended recipient. Access to this email by anyone else is unauthorised. If you are not the intended recipient any disclosure, copying, distribution or any action taken, or omitted to be taken, or in response to it is prohibited and may be unlawful. If you have received this email in error, please notify us and then delete this message at once. VIRUSES We cannot guarantee that any attachment is completely free from computer viruses and we do not therefore accept any liability for loss or damage which may be caused. Please therefore check any attachments for viruses before using them on your own equipment. If you do find a computer virus please inform us immediately so that we may take appropriate action. SECURITY Unencrypted internet communications are not secure. As a result the Company does not accept responsibility for the confidentiality of this message nor guarantee that the sender shown is the actual sender. NOTIFICATION WITH REGARD TO PRIVACY You are hereby advised that the Company monitors the use of and intercepts emails on its equipment and system. Emails sent and received may be read for valid business reasons. _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper Grey Communications Group Limited Registered No. 1795794, Registered in England Registered Office The Johnson Building, 77 Hatton Garden, London, EC1N 8JS VAT Number GB 404 6245 78 CONFIDENTIALITY The information contained in this communication may contain confidential, privileged and copyright information and is solely for the use of the intended recipient. Access to this email by anyone else is unauthorised. If you are not the intended recipient any disclosure, copying, distribution or any action taken, or omitted to be taken, or in response to it is prohibited and may be unlawful. If you have received this email in error, please notify us and then delete this message at once. VIRUSES We cannot guarantee that any attachment is completely free from computer viruses and we do not therefore accept any liability for loss or damage which may be caused. Please therefore check any attachments for viruses before using them on your own equipment. If you do find a computer virus please inform us immediately so that we may take appropriate action. SECURITY Unencrypted internet communications are not secure. As a result the Company does not accept responsibility for the confidentiality of this message nor guarantee that the sender shown is the actual sender. NOTIFICATION WITH REGARD TO PRIVACY You are hereby advised that the Company monitors the use of and intercepts emails on its equipment and system. Emails sent and received may be read for valid business reasons. -------------- next part -------------- An HTML attachment was scrubbed... URL: From swood at integer.com Tue Oct 27 11:43:30 2009 From: swood at integer.com (Steve Wood) Date: Tue, 27 Oct 2009 13:43:30 -0500 Subject: [Casper] Odd computer names In-Reply-To: <462d1b830910271119s6377c7c5mb5016ffcdfed9550@mail.gmail.com> References: <4AE6EAC2.7141.0039.0@kckps.org> <462d1b830910271051r35d522depb9d7be86e263a8ca@mail.gmail.com> <4AE6EF3D.7141.0039.0@kckps.org> <462d1b830910271119s6377c7c5mb5016ffcdfed9550@mail.gmail.com> Message-ID: <438f5a310910271143i55988882yd9afc65c15985676@mail.gmail.com> I was seeing this issue when imaging machines. The machine would not get re-named properly during the reboot and would end up with that name. The problem was traced back to the fact that I was using an InstaDMG image that had never been booted to image the machine with. It turns out that Casper looks for the preferences.plist file in /Library/Preferences/SystemConfiguration. That is the file that holds the machine name. If that file is not present, Casper will not rename the machine. My solution: build a package that drops a generic preferences.plist file into that directory. Problem solved. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 27, 2009 at 1:19 PM, Jonathan Smith wrote: > Thanks. We'll give this a whirl and see how it goes. > > > > On Tue, Oct 27, 2009 at 11:01 AM, Thomas Larkin wrote: > >> It is a two part script. >> >> The first script is meant to run after imaging, and it will write the >> name to a file in /Library/Receipts. This file will contain the computer >> name from when it was imaged. The second script you run as a policy via >> Casper that can run say, once a day for example. If you check the box that >> says make this policy available off line it will cache the script to the >> machine and run it at start up or once a day. The second script checks the >> file in /Library/Receipts and if the name matches it exits, if the name >> doesn't match the computer gets renamed to what it should be. >> >> The only thing I didn't add was a recon to update inventory but you >> could easily add that to my scripts >> >> My script is a bit redundant because I haven't tossed it into production >> yet, just tested it out in my test environment. However, it has worked for >> me as advertised. So, please make sure you test it, and you could probably >> even make it smaller. You can drop the touch command since > will create >> the file if it doesn't exist and you can probably drop the ownership and >> permissions commands. I just put them in there because I was still testing >> it and wanted to make sure certain things were there. If Casper creates a >> file I am sure Casper does it as root. >> >> * >> http://tlarkin.com/tech/2-shell-scripts-maintain-standard-naming-conventions >> * >> >> So, copy and paste both scripts in your favorite text editor, then >> upload them to the JSS. Make the first script run after post imaging, and >> the second script to run once a day and make it available off line. It will >> cache the second script to the machine locally and it will execute once >> every day. Now, when you image a machine ensure that the name is set >> properly, because if it is not then it will cache the wrong name to that >> receipt file. >> >> You could also technically accomplish this with out Casper and use >> launchd, but Casper puts the easy button on it. >> >> -Tom >> >> >> ___________________________ >> Thomas Larkin >> TIS Department >> KCKPS USD500 >> tlarki at kckps.org >> blackberry: 913-449-7589 >> office: 913-627-0351 >> chown -R us /.base >> >> >> >> >> >> >>> Jonathan Smith 10/27/09 12:51 PM >>> >> >> Hey Al- >> >> We get this same thing too. We would be interested in that fix script too. >> >> Thx >> Jon >> >> >> On Tue, Oct 27, 2009 at 10:42 AM, Thomas Larkin >> >> >> >> wrote: >> >>> I have seen this before too, which is why I came up with my keep name >>> solution I posted on the list about a month ago. It works as intended but >>> there are a few caveats to it. You must ensure that the name is set right >>> during imaging, then this won't happen. >>> >>> >>> If you want I can send the info to you off the list since it is on my >>> site. >>> >>> >>> -Tom >>> >>> >>> "Nichols, Jared - 1160 - MITLL" 10/27/09 >>> 12:13 PM >>> >>> Hi- >>> >>> >>> I've got a machine in my inventory called >>> >>> >>> {
Network {
HostNames {
>>> >>> and one called >>> >>> >>> 2009-10-23 16:10:37.289 defaults[319] The domain/default >>> >>> >>> Has anyone seen something like this before? Before I contact the >>> user, I wanted to see if there was anything I could do on the service side >>> of things. I ran a recon remotely and the names are still sticking. Should I >>> delete them from the JSS and let them check in again? >>> >>> --- >>> >>> Jared F. Nichols >>> >>> Desktop Engineer, Infrastructure & Operations >>> >>> Information Services Department >>> >>> MIT Lincoln Laboratory >>> >>> 244 Wood Street >>> >>> Lexington, Massachusetts 02420 >>> >>> 781.981.5436 >>> >>> >>> >>> _______________________________________________ >>> Casper mailing list >>> Casper at list.jamfsoftware.com >>> http://list.jamfsoftware.com/mailman/listinfo/casper >>> >>> >> >> >> -- >> Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: >> 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | >> > > > > -- > Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: > 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Tue Oct 27 11:55:17 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Tue, 27 Oct 2009 13:55:17 -0500 Subject: [Casper] Odd computer names In-Reply-To: <438f5a310910271143i55988882yd9afc65c15985676@mail.gmail.com> References: <4AE6EAC2.7141.0039.0@kckps.org> <462d1b830910271051r35d522depb9d7be86e263a8ca@mail.gmail.com> <4AE6EF3D.7141.0039.0@kckps.org> <462d1b830910271119s6377c7c5mb5016ffcdfed9550@mail.gmail.com> <438f5a310910271143i55988882yd9afc65c15985676@mail.gmail.com> Message-ID: <4AE6FBC5.7141.0039.0@kckps.org> During imaging you can set the name with Casper though or you can grab the name of the machine currently. The name during the image, should name it properly. I never used instaDMG as I did not like the time it took to build a pristine image, I could do it the old way faster. I am trying Casper 7 complies now though. >>> Steve Wood 10/27/09 1:43 PM >>> I was seeing this issue when imaging machines. The machine would not get re-named properly during the reboot and would end up with that name. The problem was traced back to the fact that I was using an InstaDMG image that had never been booted to image the machine with. It turns out that Casper looks for the preferences.plist file in /Library/Preferences/SystemConfiguration. That is the file that holds the machine name. If that file is not present, Casper will not rename the machine. My solution: build a package that drops a generic preferences.plist file into that directory. Problem solved. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 27, 2009 at 1:19 PM, Jonathan Smith wrote: Thanks. We'll give this a whirl and see how it goes. On Tue, Oct 27, 2009 at 11:01 AM, Thomas Larkin wrote: It is a two part script. The first script is meant to run after imaging, and it will write the name to a file in /Library/Receipts. This file will contain the computer name from when it was imaged. The second script you run as a policy via Casper that can run say, once a day for example. If you check the box that says make this policy available off line it will cache the script to the machine and run it at start up or once a day. The second script checks the file in /Library/Receipts and if the name matches it exits, if the name doesn't match the computer gets renamed to what it should be. The only thing I didn't add was a recon to update inventory but you could easily add that to my scripts My script is a bit redundant because I haven't tossed it into production yet, just tested it out in my test environment. However, it has worked for me as advertised. So, please make sure you test it, and you could probably even make it smaller. You can drop the touch command since > will create the file if it doesn't exist and you can probably drop the ownership and permissions commands. I just put them in there because I was still testing it and wanted to make sure certain things were there. If Casper creates a file I am sure Casper does it as root. http://tlarkin.com/tech/2-shell-scripts-maintain-standard-naming-conventions So, copy and paste both scripts in your favorite text editor, then upload them to the JSS. Make the first script run after post imaging, and the second script to run once a day and make it available off line. It will cache the second script to the machine locally and it will execute once every day. Now, when you image a machine ensure that the name is set properly, because if it is not then it will cache the wrong name to that receipt file. You could also technically accomplish this with out Casper and use launchd, but Casper puts the easy button on it. -Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Jonathan Smith 10/27/09 12:51 PM >>> Hey Al- We get this same thing too. We would be interested in that fix script too. Thx Jon On Tue, Oct 27, 2009 at 10:42 AM, Thomas Larkin wrote: I have seen this before too, which is why I came up with my keep name solution I posted on the list about a month ago. It works as intended but there are a few caveats to it. You must ensure that the name is set right during imaging, then this won't happen. If you want I can send the info to you off the list since it is on my site. -Tom >>> "Nichols, Jared - 1160 - MITLL" 10/27/09 12:13 PM >>> Hi- I've got a machine in my inventory called {
Network {
HostNames {
and one called 2009-10-23 16:10:37.289 defaults[319] The domain/default Has anyone seen something like this before? Before I contact the user, I wanted to see if there was anything I could do on the service side of things. I ran a recon remotely and the names are still sticking. Should I delete them from the JSS and let them check in again? --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -- Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | -- Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From swood at integer.com Tue Oct 27 12:09:38 2009 From: swood at integer.com (Steve Wood) Date: Tue, 27 Oct 2009 14:09:38 -0500 Subject: [Casper] Odd computer names In-Reply-To: <4AE6FBC5.7141.0039.0@kckps.org> References: <4AE6EAC2.7141.0039.0@kckps.org> <462d1b830910271051r35d522depb9d7be86e263a8ca@mail.gmail.com> <4AE6EF3D.7141.0039.0@kckps.org> <462d1b830910271119s6377c7c5mb5016ffcdfed9550@mail.gmail.com> <438f5a310910271143i55988882yd9afc65c15985676@mail.gmail.com> <4AE6FBC5.7141.0039.0@kckps.org> Message-ID: <438f5a310910271209o330ec74fqc1f7970000db6483@mail.gmail.com> You're right, that is exactly how it works, but it relies on that preferences.plist file. This came directly from JAMF, although I can't remember which engineer it was that helped me with the case. I'm working through the Casper 7 compiles myself, but I'm seeing a problem setting the first user. It doesn't seem to want to set. Still testing, and if I come across anything I'll post to the list. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 27, 2009 at 1:55 PM, Thomas Larkin wrote: > During imaging you can set the name with Casper though or you can grab > the name of the machine currently. The name during the image, should name > it properly. > > I never used instaDMG as I did not like the time it took to build a > pristine image, I could do it the old way faster. I am trying Casper 7 > complies now though. > > >>> Steve Wood 10/27/09 1:43 PM >>> > > I was seeing this issue when imaging machines. The machine would not get > re-named properly during the reboot and would end up with that name. The > problem was traced back to the fact that I was using an InstaDMG image that > had never been booted to image the machine with. It turns out that Casper > looks for the preferences.plist file in > /Library/Preferences/SystemConfiguration. That is the file that holds the > machine name. If that file is not present, Casper will not rename the > machine. > > My solution: build a package that drops a generic preferences.plist file > into that directory. Problem solved. > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > On Tue, Oct 27, 2009 at 1:19 PM, Jonathan Smith > > > > wrote: > >> Thanks. We'll give this a whirl and see how it goes. >> >> >> >> >> On Tue, Oct 27, 2009 at 11:01 AM, Thomas Larkin >> >> >> >> wrote: >> >>> It is a two part script. >>> >>> >>> The first script is meant to run after imaging, and it will write the >>> name to a file in /Library/Receipts. This file will contain the computer >>> name from when it was imaged. The second script you run as a policy via >>> Casper that can run say, once a day for example. If you check the box that >>> says make this policy available off line it will cache the script to the >>> machine and run it at start up or once a day. The second script checks the >>> file in /Library/Receipts and if the name matches it exits, if the name >>> doesn't match the computer gets renamed to what it should be. >>> >>> >>> The only thing I didn't add was a recon to update inventory but you >>> could easily add that to my scripts >>> >>> >>> My script is a bit redundant because I haven't tossed it into >>> production yet, just tested it out in my test environment. However, it has >>> worked for me as advertised. So, please make sure you test it, and you could >>> probably even make it smaller. You can drop the touch command since > will >>> create the file if it doesn't exist and you can probably drop the ownership >>> and permissions commands. I just put them in there because I was still >>> testing it and wanted to make sure certain things were there. If Casper >>> creates a file I am sure Casper does it as root. >>> >>> >>> * >>> http://tlarkin.com/tech/2-shell-scripts-maintain-standard-naming-conventions >>> * >>> >>> >>> So, copy and paste both scripts in your favorite text editor, then >>> upload them to the JSS. Make the first script run after post imaging, and >>> the second script to run once a day and make it available off line. It will >>> cache the second script to the machine locally and it will execute once >>> every day. Now, when you image a machine ensure that the name is set >>> properly, because if it is not then it will cache the wrong name to that >>> receipt file. >>> >>> >>> You could also technically accomplish this with out Casper and use >>> launchd, but Casper puts the easy button on it. >>> >>> >>> -Tom >>> >>> >>> ___________________________ >>> Thomas Larkin >>> TIS Department >>> KCKPS USD500 >>> tlarki at kckps.org >>> blackberry: 913-449-7589 >>> office: 913-627-0351 >>> chown -R us /.base >>> >>> >>> >>> >>> >>> >>> Jonathan Smith 10/27/09 12:51 PM >>> >>> >>> >>> Hey Al- >>> >>> We get this same thing too. We would be interested in that fix script >>> too. >>> >>> Thx >>> Jon >>> >>> >>> >>> On Tue, Oct 27, 2009 at 10:42 AM, Thomas Larkin >>> >>> >>> >>> wrote: >>> >>>> I have seen this before too, which is why I came up with my keep name >>>> solution I posted on the list about a month ago. It works as intended but >>>> there are a few caveats to it. You must ensure that the name is set right >>>> during imaging, then this won't happen. >>>> >>>> >>>> If you want I can send the info to you off the list since it is on my >>>> site. >>>> >>>> >>>> -Tom >>>> >>>> >>> "Nichols, Jared - 1160 - MITLL" 10/27/09 >>>> 12:13 PM >>> >>>> Hi- >>>> >>>> >>>> >>>> I've got a machine in my inventory called >>>> >>>> >>>> {
Network {
HostNames {
>>>> >>>> and one called >>>> >>>> >>>> 2009-10-23 16:10:37.289 defaults[319] The domain/default >>>> >>>> >>>> Has anyone seen something like this before? Before I contact the >>>> user, I wanted to see if there was anything I could do on the service side >>>> of things. I ran a recon remotely and the names are still sticking. Should I >>>> delete them from the JSS and let them check in again? >>>> >>>> --- >>>> >>>> Jared F. Nichols >>>> >>>> Desktop Engineer, Infrastructure & Operations >>>> >>>> Information Services Department >>>> >>>> MIT Lincoln Laboratory >>>> >>>> 244 Wood Street >>>> >>>> Lexington, Massachusetts 02420 >>>> >>>> 781.981.5436 >>>> >>>> >>>> >>>> _______________________________________________ >>>> Casper mailing list >>>> Casper at list.jamfsoftware.com >>>> http://list.jamfsoftware.com/mailman/listinfo/casper >>>> >>>> >>> >>> >>> -- >>> Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: >>> 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | >>> >> >> >> >> -- >> >> Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: >> 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | >> >> >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper >> >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: From gallaghersj at email.chop.edu Tue Oct 27 12:19:18 2009 From: gallaghersj at email.chop.edu (Gallagher, Sean J) Date: Tue, 27 Oct 2009 15:19:18 -0400 Subject: [Casper] Odd computer names In-Reply-To: <438f5a310910271209o330ec74fqc1f7970000db6483@mail.gmail.com> Message-ID: I have seen the same issue with compiles running 7.0.1 it never creates the first account. I am still testing as well. On 10/27/09 3:09 PM, "Steve Wood" wrote: You're right, that is exactly how it works, but it relies on that preferences.plist file. This came directly from JAMF, although I can't remember which engineer it was that helped me with the case. I'm working through the Casper 7 compiles myself, but I'm seeing a problem setting the first user. It doesn't seem to want to set. Still testing, and if I come across anything I'll post to the list. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 27, 2009 at 1:55 PM, Thomas Larkin wrote: During imaging you can set the name with Casper though or you can grab the name of the machine currently. The name during the image, should name it properly. I never used instaDMG as I did not like the time it took to build a pristine image, I could do it the old way faster. I am trying Casper 7 complies now though. >>> Steve Wood 10/27/09 1:43 PM >>> I was seeing this issue when imaging machines. The machine would not get re-named properly during the reboot and would end up with that name. The problem was traced back to the fact that I was using an InstaDMG image that had never been booted to image the machine with. It turns out that Casper looks for the preferences.plist file in /Library/Preferences/SystemConfiguration. That is the file that holds the machine name. If that file is not present, Casper will not rename the machine. My solution: build a package that drops a generic preferences.plist file into that directory. Problem solved. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 27, 2009 at 1:19 PM, Jonathan Smith wrote: Thanks. We'll give this a whirl and see how it goes. On Tue, Oct 27, 2009 at 11:01 AM, Thomas Larkin wrote: It is a two part script. The first script is meant to run after imaging, and it will write the name to a file in /Library/Receipts. This file will contain the computer name from when it was imaged. The second script you run as a policy via Casper that can run say, once a day for example. If you check the box that says make this policy available off line it will cache the script to the machine and run it at start up or once a day. The second script checks the file in /Library/Receipts and if the name matches it exits, if the name doesn't match the computer gets renamed to what it should be. The only thing I didn't add was a recon to update inventory but you could easily add that to my scripts My script is a bit redundant because I haven't tossed it into production yet, just tested it out in my test environment. However, it has worked for me as advertised. So, please make sure you test it, and you could probably even make it smaller. You can drop the touch command since > will create the file if it doesn't exist and you can probably drop the ownership and permissions commands. I just put them in there because I was still testing it and wanted to make sure certain things were there. If Casper creates a file I am sure Casper does it as root. http://tlarkin.com/tech/2-shell-scripts-maintain-standard-naming-conventions So, copy and paste both scripts in your favorite text editor, then upload them to the JSS. Make the first script run after post imaging, and the second script to run once a day and make it available off line. It will cache the second script to the machine locally and it will execute once every day. Now, when you image a machine ensure that the name is set properly, because if it is not then it will cache the wrong name to that receipt file. You could also technically accomplish this with out Casper and use launchd, but Casper puts the easy button on it. -Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Jonathan Smith 10/27/09 12:51 PM >>> Hey Al- We get this same thing too. We would be interested in that fix script too. Thx Jon On Tue, Oct 27, 2009 at 10:42 AM, Thomas Larkin wrote: I have seen this before too, which is why I came up with my keep name solution I posted on the list about a month ago. It works as intended but there are a few caveats to it. You must ensure that the name is set right during imaging, then this won't happen. If you want I can send the info to you off the list since it is on my site. -Tom >>> "Nichols, Jared - 1160 - MITLL" 10/27/09 12:13 PM >>> Hi- I've got a machine in my inventory called {
Network {
HostNames {
and one called 2009-10-23 16:10:37.289 defaults[319] The domain/default Has anyone seen something like this before? Before I contact the user, I wanted to see if there was anything I could do on the service side of things. I ran a recon remotely and the names are still sticking. Should I delete them from the JSS and let them check in again? --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -- Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | -- Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Tue Oct 27 12:22:32 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Tue, 27 Oct 2009 14:22:32 -0500 Subject: [Casper] Odd computer names In-Reply-To: References: <438f5a310910271209o330ec74fqc1f7970000db6483@mail.gmail.com> Message-ID: <4AE70227.7141.0039.0@kckps.org> How are you all creating the accounts? I am going to do a post image shell script that creates all the accounts that way all I ever need to modify is a script. >>> "Gallagher, Sean J" 10/27/09 2:19 PM >>> I have seen the same issue with compiles running 7.0.1 it never creates the first account. I am still testing as well. On 10/27/09 3:09 PM, "Steve Wood" wrote: You're right, that is exactly how it works, but it relies on that preferences.plist file. This came directly from JAMF, although I can't remember which engineer it was that helped me with the case. I'm working through the Casper 7 compiles myself, but I'm seeing a problem setting the first user. It doesn't seem to want to set. Still testing, and if I come across anything I'll post to the list. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 27, 2009 at 1:55 PM, Thomas Larkin wrote: During imaging you can set the name with Casper though or you can grab the name of the machine currently. The name during the image, should name it properly. I never used instaDMG as I did not like the time it took to build a pristine image, I could do it the old way faster. I am trying Casper 7 complies now though. >>> Steve Wood 10/27/09 1:43 PM >>> I was seeing this issue when imaging machines. The machine would not get re-named properly during the reboot and would end up with that name. The problem was traced back to the fact that I was using an InstaDMG image that had never been booted to image the machine with. It turns out that Casper looks for the preferences.plist file in /Library/Preferences/SystemConfiguration. That is the file that holds the machine name. If that file is not present, Casper will not rename the machine. My solution: build a package that drops a generic preferences.plist file into that directory. Problem solved. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 27, 2009 at 1:19 PM, Jonathan Smith wrote: Thanks. We'll give this a whirl and see how it goes. On Tue, Oct 27, 2009 at 11:01 AM, Thomas Larkin wrote: It is a two part script. The first script is meant to run after imaging, and it will write the name to a file in /Library/Receipts. This file will contain the computer name from when it was imaged. The second script you run as a policy via Casper that can run say, once a day for example. If you check the box that says make this policy available off line it will cache the script to the machine and run it at start up or once a day. The second script checks the file in /Library/Receipts and if the name matches it exits, if the name doesn't match the computer gets renamed to what it should be. The only thing I didn't add was a recon to update inventory but you could easily add that to my scripts My script is a bit redundant because I haven't tossed it into production yet, just tested it out in my test environment. However, it has worked for me as advertised. So, please make sure you test it, and you could probably even make it smaller. You can drop the touch command since > will create the file if it doesn't exist and you can probably drop the ownership and permissions commands. I just put them in there because I was still testing it and wanted to make sure certain things were there. If Casper creates a file I am sure Casper does it as root. http://tlarkin.com/tech/2-shell-scripts-maintain-standard-naming-conventions So, copy and paste both scripts in your favorite text editor, then upload them to the JSS. Make the first script run after post imaging, and the second script to run once a day and make it available off line. It will cache the second script to the machine locally and it will execute once every day. Now, when you image a machine ensure that the name is set properly, because if it is not then it will cache the wrong name to that receipt file. You could also technically accomplish this with out Casper and use launchd, but Casper puts the easy button on it. -Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Jonathan Smith 10/27/09 12:51 PM >>> Hey Al- We get this same thing too. We would be interested in that fix script too. Thx Jon On Tue, Oct 27, 2009 at 10:42 AM, Thomas Larkin wrote: I have seen this before too, which is why I came up with my keep name solution I posted on the list about a month ago. It works as intended but there are a few caveats to it. You must ensure that the name is set right during imaging, then this won't happen. If you want I can send the info to you off the list since it is on my site. -Tom >>> "Nichols, Jared - 1160 - MITLL" 10/27/09 12:13 PM >>> Hi- I've got a machine in my inventory called {
Network {
HostNames {
and one called 2009-10-23 16:10:37.289 defaults[319] The domain/default Has anyone seen something like this before? Before I contact the user, I wanted to see if there was anything I could do on the service side of things. I ran a recon remotely and the names are still sticking. Should I delete them from the JSS and let them check in again? --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -- Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | -- Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From swood at integer.com Tue Oct 27 12:25:55 2009 From: swood at integer.com (Steve Wood) Date: Tue, 27 Oct 2009 14:25:55 -0500 Subject: [Casper] Odd computer names In-Reply-To: <4AE70227.7141.0039.0@kckps.org> References: <438f5a310910271209o330ec74fqc1f7970000db6483@mail.gmail.com> <4AE70227.7141.0039.0@kckps.org> Message-ID: <438f5a310910271225n732458ddhceee3d70d8dae108@mail.gmail.com> I'm just using the configuration right now to do the initial admin account. You know, in Casper Admin setting the Management tab of the configuration. That doesn't work for me. And I've even done a post image script that adds a hidden user, and that user is not on there either. Like I said, still testing. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 27, 2009 at 2:22 PM, Thomas Larkin wrote: > How are you all creating the accounts? I am going to do a post image > shell script that creates all the accounts that way all I ever need to > modify is a script. > > >>> "Gallagher, Sean J" 10/27/09 2:19 PM >>> > > I have seen the same issue with compiles running 7.0.1 it never creates the > first account. I am still testing as well. > > > On 10/27/09 3:09 PM, "Steve Wood" wrote: > > You're right, that is exactly how it works, but it relies on that > preferences.plist file. This came directly from JAMF, although I can't > remember which engineer it was that helped me with the case. > > I'm working through the Casper 7 compiles myself, but I'm seeing a problem > setting the first user. It doesn't seem to want to set. Still testing, and > if I come across anything I'll post to the list. > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > On Tue, Oct 27, 2009 at 1:55 PM, Thomas Larkin wrote: > > > > > > > During imaging you can set the name with Casper though or you can grab the > name of the machine currently. The name during the image, should name it > properly. > > > > > > > > I never used instaDMG as I did not like the time it took to build a > pristine image, I could do it the old way faster. I am trying Casper 7 > complies now though. > > > >>> Steve Wood 10/27/09 1:43 PM >>> > > > I was seeing this issue when imaging machines. The machine would not get > re-named properly during the reboot and would end up with that name. The > problem was traced back to the fact that I was using an InstaDMG image that > had never been booted to image the machine with. It turns out that Casper > looks for the preferences.plist file in > /Library/Preferences/SystemConfiguration. That is the file that holds the > machine name. If that file is not present, Casper will not rename the > machine. > > My solution: build a package that drops a generic preferences.plist file > into that directory. Problem solved. > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > > > > > On Tue, Oct 27, 2009 at 1:19 PM, Jonathan Smith > > > > > > > > wrote: > > > > > > Thanks. We'll give this a whirl and see how it goes. > > > > > > > > > > > > > > > > On Tue, Oct 27, 2009 at 11:01 AM, Thomas Larkin > > > > > > > > wrote: > > > > > > > > > It is a two part script. > > > > > > > > > > > The first script is meant to run after imaging, and it will write the name > to a file in /Library/Receipts. This file will contain the computer name > from when it was imaged. The second script you run as a policy via Casper > that can run say, once a day for example. If you check the box that says > make this policy available off line it will cache the script to the machine > and run it at start up or once a day. The second script checks the file in > /Library/Receipts and if the name matches it exits, if the name doesn't > match the computer gets renamed to what it should be. > > > > > > > > > > > The only thing I didn't add was a recon to update inventory but you could > easily add that to my scripts > > > > > > > > > > > My script is a bit redundant because I haven't tossed it into production > yet, just tested it out in my test environment. However, it has worked for > me as advertised. So, please make sure you test it, and you could probably > even make it smaller. You can drop the touch command since > will create the > file if it doesn't exist and you can probably drop the ownership and > permissions commands. I just put them in there because I was still testing > it and wanted to make sure certain things were there. If Casper creates a > file I am sure Casper does it as root. > > > > > > > > > > > * > http://tlarkin.com/tech/2-shell-scripts-maintain-standard-naming-conventions > * > > < > http://tlarkin.com/tech/2-shell-scripts-maintain-standard-naming-conventions > > > > > > > > > > > So, copy and paste both scripts in your favorite text editor, then upload > them to the JSS. Make the first script run after post imaging, and the > second script to run once a day and make it available off line. It will > cache the second script to the machine locally and it will execute once > every day. Now, when you image a machine ensure that the name is set > properly, because if it is not then it will cache the wrong name to that > receipt file. > > > > > > > > > > > You could also technically accomplish this with out Casper and use launchd, > but Casper puts the easy button on it. > > > > > > > > > > > -Tom > > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > > >>> Jonathan Smith 10/27/09 12:51 PM > >>> > > > > > > > > > Hey Al- > > We get this same thing too. We would be interested in that fix script too. > > Thx > Jon > > > > > > > > > > > > > > On Tue, Oct 27, 2009 at 10:42 AM, Thomas Larkin > > > > > > > > wrote: > > > > > > > > > I have seen this before too, which is why I came up with my keep name > solution I posted on the list about a month ago. It works as intended but > there are a few caveats to it. You must ensure that the name is set right > during imaging, then this won't happen. > > > > > > > > > > > If you want I can send the info to you off the list since it is on my site. > > > > > > > > > > > > -Tom > > > >>> "Nichols, Jared - 1160 - MITLL" 10/27/09 > 12:13 PM >>> > Hi- > > > > > > > > > > > > > > > > > > I've got a machine in my inventory > called > > > > > > > > > > > > > > > > > {
Network {
HostNames {
> > > > > > > > > and one called > > > > > > > > > > > > > > > > > > 2009-10-23 16:10:37.289 defaults[319] The > domain/default > > > > > > > > > > > > > > > > Has anyone seen something like this before? Before I contact the user, I > wanted to see if there was anything I could do on the service side of > things. I ran a recon remotely and the names are still sticking. Should I > delete them from the JSS and let them check in > again? > > > > > > > > > > > > > --- > > > > > > > > > Jared F. Nichols > > > > > > > > > Desktop Engineer, Infrastructure & > Operations > > > > > > > > > Information Services > Department > > > > > > > > > MIT Lincoln Laboratory > > > > > > > > > 244 Wood Street > > > > > > > > > Lexington, Massachusetts > 02420 > > > > > > > > > 781.981.5436 > > > > > > > > > > > > > > > > > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > > > > > > > > -- > Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: > 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | > > > > > > > > > > > > > > > > > > -- > > > > > > > > > Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: > 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | > > > > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > > > > > > > > > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From ken.edgar at gmail.com Tue Oct 27 13:02:16 2009 From: ken.edgar at gmail.com (Kenneth Edgar) Date: Tue, 27 Oct 2009 15:02:16 -0500 Subject: [Casper] Odd computer names In-Reply-To: <438f5a310910271225n732458ddhceee3d70d8dae108@mail.gmail.com> Message-ID: I?m using Casper 7.1... I use InstaDMG and have not had the problems with naming. My admin account is created by the configuration, however it does not add the account to the _lpadmin group. On afp548.com, there is a package you can edit that creates accounts for you. You can put it in your configuration, or use it in instadmg. I think it?s simply called ?Create User?. I may go back to using that, or using my own script. From: Steve Wood Date: Tue, 27 Oct 2009 14:25:55 -0500 To: Thomas Larkin Cc: "casper at list.jamfsoftware.com" , JonathanSmith Subject: Re: [Casper] Odd computer names I'm just using the configuration right now to do the initial admin account.? You know, in Casper Admin setting the Management tab of the configuration.? That doesn't work for me.? And I've even done a post image script that adds a hidden user, and that user is not on there either. Like I said, still testing. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 27, 2009 at 2:22 PM, Thomas Larkin wrote: > > > > How are you all creating the accounts? ?I am going to do a post image shell > script that creates all the accounts that way all I ever need to modify is a > script. > >>>> >>> "Gallagher, Sean J" 10/27/09 2:19 PM >>> > > > > > > I have seen the same issue with compiles running 7.0.1 it never creates the > first account. I am still testing as well. > > > On 10/27/09 3:09 PM, "Steve Wood" > wrote: > > > > >> >> >> >> You're right, that is exactly how it works, but it relies on that >> preferences.plist file.??This came directly from JAMF, although I can't >> remember which engineer it was that helped me with the case. >> >> I'm working through the Casper 7 compiles myself, but I'm seeing a problem >> setting the first user.??It doesn't seem to want to set.??Still testing, and >> if I come across anything I'll post to the list. >> >> Steve Wood >> Director of IT >> swood at integer.com >> >> The Integer Group?|?1999 Bryan St.?|?Ste. 1700?|?Dallas, TX 75201 >> T 214.758.6813?|?F 214.758.6901?|?C 940.312.2475 >> >> >> On Tue, Oct 27, 2009 at 1:55 PM, Thomas Larkin > > wrote: >> >> >> >>> >>> >>> >>> ???? >>> ? >>> >>> ? >>> >>> >>> >>> >>> During imaging you can set the name with Casper though or you can grab the >>> name of the machine currently.??The name during the image, should name it >>> properly. >>> >>> >>> >>> >>> ??? >>> >>> ??????? >>> >>> ? >>> >>> >>> >>> >>> I never used instaDMG as I did not like the time it took to build a >>> pristine image, I could do it the old way faster.??I am trying Casper 7 >>> complies now though. >>> >>> >>> >>> >>> >>> >>>>>> >>> Steve Wood > 10/27/09 >>>>>> 1:43 PM >>> >>> >>> >>> I was seeing this issue when imaging machines. The machine would not get >>> re-named properly during the reboot and would end up with that name. The >>> problem was traced back to the fact that I was using an InstaDMG image that >>> had never been booted to image the machine with. It turns out that Casper >>> looks for the preferences.plist file in >>> /Library/Preferences/SystemConfiguration. That is the file that holds the >>> machine name. If that file is not present, Casper will not rename the >>> machine. >>> >>> My solution: build a package that drops a generic preferences.plist file >>> into that directory. Problem solved. >>> >>> Steve Wood >>> Director of IT >>> swood at integer.com >>> >>> The Integer Group?|?1999 Bryan St.?|?Ste. 1700?|?Dallas, TX 75201 >>> T 214.758.6813?|?F 214.758.6901?|?C 940.312.2475 >>> >>> >>> ???? >>> ? >>> ? >>> >>> ?On Tue, Oct 27, 2009 at 1:19 PM, Jonathan Smith?????? >>> ? >>> ? >>> >>> ? >???????? >>> ? >>> ? >>> >>> ?wrote: >>> ?????? >>> ? >>> >>> >>> >>>> >>>> >>>> >>>> >>>> >>>> ?Thanks. We'll give this a whirl and see how it goes. >>>> ???????? >>>> ? >>>> ? >>>> >>>> ??????????????? >>>> ? >>>> ? >>>> >>>> ? >>>> ? >>>> ? >>>> ? >>>> ? >>>> ? >>>> >>>> ?On Tue, Oct 27, 2009 at 11:01 AM, Thomas Larkin?????????????? >>>> ? >>>> ? >>>> >>>> ? >???????????????? >>>> ? >>>> ? >>>> >>>> ?wrote: >>>> ?????????????? >>>> ? >>>> >>>> >>>> >>>>> >>>>> >>>>> >>>>> >>>>> ? >>>>> >>>>> ? >>>>> >>>>> >>>>> >>>>> >>>>> It is a two part script. >>>>> >>>>> >>>>> >>>>> >>>>> ????????????????? >>>>> ? >>>>> >>>>> ? >>>>> ? >>>>> ? >>>>> >>>>> ? >>>>> >>>>> >>>>> >>>>> >>>>> The first script is meant to run after imaging, and it will write the >>>>> name to a file in /Library/Receipts. This file will contain the computer >>>>> name from when it was imaged. The second script you run as a policy via >>>>> Casper that can run say, once a day for example. If you check the box that >>>>> says make this policy available off line it will cache the script to the >>>>> machine and run it at start up or once a day. The second script checks the >>>>> file in /Library/Receipts and if the name matches it exits, if the name >>>>> doesn't match the computer gets renamed to what it should be. >>>>> >>>>> >>>>> >>>>> >>>>> ????????????????? >>>>> ? >>>>> >>>>> ? >>>>> ? >>>>> ? >>>>> >>>>> ? >>>>> >>>>> >>>>> >>>>> >>>>> The only thing I didn't add was a recon to update inventory but you could >>>>> easily add that to my scripts >>>>> >>>>> >>>>> >>>>> >>>>> ????????????????? >>>>> ? >>>>> >>>>> ? >>>>> ? >>>>> ? >>>>> >>>>> ? >>>>> >>>>> >>>>> >>>>> >>>>> My script is a bit redundant because I haven't tossed it into production >>>>> yet, just tested it out in my test environment. However, it has worked for >>>>> me as advertised. So, please make sure you test it, and you could probably >>>>> even make it smaller. You can drop the touch command since > will create >>>>> the file if it doesn't exist and you can probably drop the ownership and >>>>> permissions commands. I just put them in there because I was still testing >>>>> it and wanted to make sure certain things were there. If Casper creates a >>>>> file I am sure Casper does it as root. >>>>> >>>>> >>>>> >>>>> >>>>> ????????????????? >>>>> ? >>>>> >>>>> ? >>>>> ? >>>>> ? >>>>> >>>>> ? >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> http://tlarkin.com/tech/2-shell-scripts-maintain-standard-naming-conventio >>>>> ns >>>>> >>>> ons> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>> ons>??????????????????? >>>>> ? >>>>> >>>>> ? >>>>> ? >>>>> ? >>>>> >>>>> ? >>>>> >>>>> >>>>> >>>>> >>>>> So, copy and paste both scripts in your favorite text editor, then upload >>>>> them to the JSS. Make the first script run after post imaging, and the >>>>> second script to run once a day and make it available off line. It will >>>>> cache the second script to the machine locally and it will execute once >>>>> every day. Now, when you image a machine ensure that the name is set >>>>> properly, because if it is not then it will cache the wrong name to that >>>>> receipt file. >>>>> >>>>> >>>>> >>>>> >>>>> ????????????????? >>>>> ? >>>>> >>>>> ? >>>>> ? >>>>> ? >>>>> >>>>> ? >>>>> >>>>> >>>>> >>>>> >>>>> You could also technically accomplish this with out Casper and use >>>>> launchd, but Casper puts the easy button on it. >>>>> >>>>> >>>>> >>>>> >>>>> ????????????????? >>>>> ? >>>>> >>>>> ? >>>>> ? >>>>> ? >>>>> >>>>> ? >>>>> >>>>> >>>>> >>>>> >>>>> -Tom >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> ___________________________ >>>>> Thomas Larkin >>>>> TIS Department >>>>> KCKPS USD500 >>>>> tlarki at kckps.org >>>>> blackberry: 913-449-7589 >>>>> office: 913-627-0351 >>>>> chown -R us /.base >>>>> >>>>> >>>>> >>>>> >>>>> >>>>>>>> >>> Jonathan Smith >>>>>>> > 10/27/09 12:51 PM >>>>>>>> >>>?????????????????? >>>>> ? >>>>> ? >>>>> >>>>> ????????????????????????? >>>>> ? >>>>> ? >>>>> >>>>> ? >>>>> ?Hey Al- >>>>> >>>>> We get this same thing too. We would be interested in that fix script too. >>>>> >>>>> Thx >>>>> Jon >>>>> >>>>> >>>>> ?????????????????????? >>>>> ? >>>>> ? >>>>> ? >>>>> ? >>>>> >>>>> ????????????????????????? >>>>> ? >>>>> ? >>>>> ? >>>>> >>>>> ?On Tue, Oct 27, 2009 at 10:42 AM, Thomas Larkin???????????????????????? >>>>> ? >>>>> ? >>>>> >>>>> ? >?????????????????????????? >>>>> ? >>>>> ? >>>>> >>>>> ?wrote: >>>>> ???????????????????????? >>>>> ? >>>>> >>>>> >>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> I have seen this before too, which is why I came up with my keep name >>>>>> solution I posted on the list about a month ago. It works as intended but >>>>>> there are a few caveats to it. You must ensure that the name is set right >>>>>> during imaging, then this won't happen. >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ??????????????????????????? >>>>>> ? >>>>>> >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> If you want I can send the info to you off the list since it is on my >>>>>> site. >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ??????????????????????????? >>>>>> ? >>>>>> >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> -Tom >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>>>>> >>> "Nichols, Jared - 1160 - MITLL" >>>>>>>> > 10/27/09 12:13 PM >>> >>>>>> Hi-???????????????????????????? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> >>>>>> ?I've got a machine in my inventory >>>>>> called?????????????????????????????????? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ?{
Network?{
HostNames?{
???????????????????????????????????? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ?and one called???????????????????????????????????? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ?2009-10-23 16:10:37.289 defaults[319] The >>>>>> domain/default?????????????????????????????????????? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> >>>>>> ?Has anyone seen something like this before? Before I contact the user, I >>>>>> wanted to see if there was anything I could do on the service side of >>>>>> things. I ran a recon remotely and the names are still sticking. Should I >>>>>> delete them from the JSS and let them check in >>>>>> again??????????????????????????????????????? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ?---?????????????????????????????????????????????? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ?Jared F. Nichols?????????????????????????????????????????????? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ?Desktop Engineer, Infrastructure & >>>>>> Operations?????????????????????????????????????????????? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ?Information Services >>>>>> Department?????????????????????????????????????????????? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ?MIT Lincoln Laboratory?????????????????????????????????????????????? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ?244 Wood Street?????????????????????????????????????????????? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ?Lexington, Massachusetts >>>>>> 02420?????????????????????????????????????????????? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ?781.981.5436?????????????????????????????????????????????? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> ? >>>>>> >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> ? >>>>>> >>>>>> ? >>>>>> ?_______________________________________________ >>>>>> Casper mailing list >>>>>> Casper at list.jamfsoftware.com >>>>>> http://list.jamfsoftware.com/mailman/listinfo/casper >>>>>> >>>>>> ?????????????????????????? >>>>>> ? >>>>>> >>>>>> >>>>>> >>>>> >>>>> >>>>> >>>>> >>>>> ? >>>>> >>>>> ? >>>>> ? >>>>> ? >>>>> ?-- >>>>> Jonathan H. Smith?|?Sr. Systems Engineer?|?Genentech?|?office: >>>>> 650-225-4968|?mobile: 650-302-6985?|?smith.jonathan at gene.com >>>>> ?| >>>>> ? >>>>> ? >>>>> ? >>>>> ? >>>>> ? >>>>> >>>>> >>>>> >>>> >>>> >>>> >>>> >>>> ? >>>> >>>> ? >>>> ? >>>> ? >>>> ? >>>> ? >>>> ? >>>> ? >>>> >>>> ?-- >>>> ???????? >>>> ? >>>> ? >>>> >>>> ??????????????? >>>> ? >>>> ? >>>> >>>> ?Jonathan H. Smith?|?Sr. Systems Engineer?|?Genentech?|?office: >>>> 650-225-4968|?mobile: 650-302-6985?|?smith.jonathan at gene.com >>>> ?| >>>> ???????????? >>>> ? >>>> ? >>>> ? >>>> >>>> ? >>>> ?_______________________________________________ >>>> Casper mailing list >>>> Casper at list.jamfsoftware.com >>>> http://list.jamfsoftware.com/mailman/listinfo/casper >>>> >>>> ???????? >>>> ? >>>> >>>> >>>> >>> >>> >>> >>> >>> ? >>> >>> ? >>> ? >>> ? >>> >>> >>> >> >> >> >> >> >> >> >> > _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From swood at integer.com Tue Oct 27 13:19:54 2009 From: swood at integer.com (Steve Wood) Date: Tue, 27 Oct 2009 15:19:54 -0500 Subject: [Casper] Casper 7.1 Image Account Probs (was Odd Computer Names) Message-ID: <438f5a310910271319t5d690bb7nff5b46c06d233928@mail.gmail.com> I was using the Create User script too, but took that out for testing right now. Here's what I've tried: All of this is using a 10.6 Drop In Box DVD from a MacPro added to Casper Admin and selected as a Mac OS X Installer in Casper Admin. - Configuration with 10.6 image, 10.6.1 updater, and all packages and scripts I normally use with InstaDMG - result was no account on the box - 10.6 custom installer (adding Rosetta and one printer driver set), 10.6.1 updater, and all packages/scripts I use with InstaDMG - same result, no account - 10.6 image, 10.6 custom install set, and 10.6.1 updater - result - same - 10.6 image only - result -> appear to have an account on the box now. Someone responded on my other thread about using the Mac OS X Install DVD that the only way they could get the custom install to work was to compile the config. So, I'm going to try that real quick. If that works, then I will continue to add stuff back in (scripts and updates) until I fail. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 27, 2009 at 3:02 PM, Kenneth Edgar wrote: > I?m using Casper 7.1... I use InstaDMG and have not had the problems with > naming. My admin account is created by the configuration, however it does > not add the account to the _lpadmin group. On afp548.com, there is a > package you can edit that creates accounts for you. You can put it in your > configuration, or use it in instadmg. I think it?s simply called ?Create > User?. I may go back to using that, or using my own script. > > > ------------------------------ > *From: *Steve Wood > *Date: *Tue, 27 Oct 2009 14:25:55 -0500 > *To: *Thomas Larkin > *Cc: *"casper at list.jamfsoftware.com" , > JonathanSmith > *Subject: *Re: [Casper] Odd computer names > > > I'm just using the configuration right now to do the initial admin > account. You know, in Casper Admin setting the Management tab of the > configuration. That doesn't work for me. And I've even done a post image > script that adds a hidden user, and that user is not on there either. > > Like I said, still testing. > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > On Tue, Oct 27, 2009 at 2:22 PM, Thomas Larkin wrote: > > > > > How are you all creating the accounts? I am going to do a post image > shell script that creates all the accounts that way all I ever need to > modify is a script. > > >>> "Gallagher, Sean J" 10/27/09 2:19 PM >>> > > > > > > I have seen the same issue with compiles running 7.0.1 it never creates > the first account. I am still testing as well. > > > On 10/27/09 3:09 PM, "Steve Wood" http://swood at integer.com> > wrote: > > > > > > > > > You're right, that is exactly how it works, but it relies on that > preferences.plist file. This came directly from JAMF, although I can't > remember which engineer it was that helped me with the case. > > I'm working through the Casper 7 compiles myself, but I'm seeing a problem > setting the first user. It doesn't seem to want to set. Still testing, and > if I come across anything I'll post to the list. > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > On Tue, Oct 27, 2009 at 1:55 PM, Thomas Larkin http://tlarki at kckps.org> > wrote: > > > > > > > > > > > > > > > > During imaging you can set the name with Casper though or you can grab the > name of the machine currently. The name during the image, should name it > properly. > > > > > > > > > > > > > > I never used instaDMG as I did not like the time it took to build a > pristine image, I could do it the old way faster. I am trying Casper 7 > complies now though. > > > > > > > >>> Steve Wood > 10/27/09 > 1:43 PM >>> > > > > I was seeing this issue when imaging machines. The machine would not get > re-named properly during the reboot and would end up with that name. The > problem was traced back to the fact that I was using an InstaDMG image that > had never been booted to image the machine with. It turns out that Casper > looks for the preferences.plist file in > /Library/Preferences/SystemConfiguration. That is the file that holds the > machine name. If that file is not present, Casper will not rename the > machine. > > My solution: build a package that drops a generic preferences.plist file > into that directory. Problem solved. > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > > > > > On Tue, Oct 27, 2009 at 1:19 PM, Jonathan Smith > > > > > > > > > wrote: > > > > > > > > > > > > Thanks. We'll give this a whirl and see how it goes. > > > > > > > > > > > > > > > > On Tue, Oct 27, 2009 at 11:01 AM, Thomas Larkin > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > It is a two part script. > > > > > > > > > > > > > > > > > The first script is meant to run after imaging, and it will write the name > to a file in /Library/Receipts. This file will contain the computer name > from when it was imaged. The second script you run as a policy via Casper > that can run say, once a day for example. If you check the box that says > make this policy available off line it will cache the script to the machine > and run it at start up or once a day. The second script checks the file in > /Library/Receipts and if the name matches it exits, if the name doesn't > match the computer gets renamed to what it should be. > > > > > > > > > > > > > > > > > The only thing I didn't add was a recon to update inventory but you could > easily add that to my scripts > > > > > > > > > > > > > > > > > My script is a bit redundant because I haven't tossed it into production > yet, just tested it out in my test environment. However, it has worked for > me as advertised. So, please make sure you test it, and you could probably > even make it smaller. You can drop the touch command since > will create the > file if it doesn't exist and you can probably drop the ownership and > permissions commands. I just put them in there because I was still testing > it and wanted to make sure certain things were there. If Casper creates a > file I am sure Casper does it as root. > > > > > > > > > > > > > > > > > * > http://tlarkin.com/tech/2-shell-scripts-maintain-standard-naming-conventions > * < > http://tlarkin.com/tech/2-shell-scripts-maintain-standard-naming-conventions> > > > > > > < > http://tlarkin.com/tech/2-shell-scripts-maintain-standard-naming-conventions > > > > > > > > > > > > > > So, copy and paste both scripts in your favorite text editor, then upload > them to the JSS. Make the first script run after post imaging, and the > second script to run once a day and make it available off line. It will > cache the second script to the machine locally and it will execute once > every day. Now, when you image a machine ensure that the name is set > properly, because if it is not then it will cache the wrong name to that > receipt file. > > > > > > > > > > > > > > > > > You could also technically accomplish this with out Casper and use > launchd, but Casper puts the easy button on it. > > > > > > > > > > > > > > > > > -Tom > > > > > > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > > >>> Jonathan Smith http://smith.jonathan at gene.com> > 10/27/09 12:51 PM >>> > > > > > > > > > > Hey Al- > > We get this same thing too. We would be interested in that fix script too. > > Thx > Jon > > > > > > > > > > > > > > On Tue, Oct 27, 2009 at 10:42 AM, Thomas Larkin > > > > > > > > > wrote: > > > > > > > > > > > > > > > > > > I have seen this before too, which is why I came up with my keep name > solution I posted on the list about a month ago. It works as intended but > there are a few caveats to it. You must ensure that the name is set right > during imaging, then this won't happen. > > > > > > > > > > > > > > > > > If you want I can send the info to you off the list since it is on my > site. > > > > > > > > > > > > > > > > > -Tom > > > > > > > >>> "Nichols, Jared - 1160 - MITLL" http://jared.nichols at ll.mit.edu> > 10/27/09 12:13 PM >>> > > Hi- > > > > > > > > > > > > > > > > > > I've got a machine in my inventory > called > > > > > > > > > > > > > > > > > > > > > > > > > > > > > {
Network {
HostNames {
> > > > > > > > > > > > > > > > > and one called > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > 2009-10-23 16:10:37.289 defaults[319] The > domain/default > > > > > > > > > > > > > > > > > > > > Has anyone seen something like this before? Before I contact the user, I > wanted to see if there was anything I could do on the service side of > things. I ran a recon remotely and the names are still sticking. Should I > delete them from the JSS and let them check in > again? > > > > > > > > > > > > > > > > > > > > > --- > > > > > > > > > > > > > > > > > Jared F. Nichols > > > > > > > > > > > > > > > > > Desktop Engineer, Infrastructure & > Operations > > > > > > > > > > > > > > > > > Information Services > Department > > > > > > > > > > > > > > > > > MIT Lincoln Laboratory > > > > > > > > > > > > > > > > > 244 Wood Street > > > > > > > > > > > > > > > > > Lexington, Massachusetts > 02420 > > > > > > > > > > > > > > > > > 781.981.5436 > > > > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > > > > > > > > > > > > > > -- > Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: > 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com < > http://smith.jonathan at gene.com> | > > > > > > > > > > > > > > > > > > > > > > > > -- > > > > > > > > > Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: > 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com < > http://smith.jonathan at gene.com> | > > > > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > ------------------------------ > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Tue Oct 27 13:32:48 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Tue, 27 Oct 2009 15:32:48 -0500 Subject: [Casper] Odd computer names In-Reply-To: References: <438f5a310910271225n732458ddhceee3d70d8dae108@mail.gmail.com> Message-ID: <4AE712A0.7141.0039.0@kckps.org> Well part of the problem is the end user changing the name and messing up my smart groups, so I put a stop to that. They can rename it all they want but it gets forced back. I was jacking around with MCX trying to make that one thing root only, but it was a lot of work and it would break functionality of some local admin accounts. >>> Kenneth Edgar 10/27/09 3:02 PM >>> I?m using Casper 7.1... I use InstaDMG and have not had the problems with naming. My admin account is created by the configuration, however it does not add the account to the _lpadmin group. On afp548.com, there is a package you can edit that creates accounts for you. You can put it in your configuration, or use it in instadmg. I think it?s simply called ?Create User?. I may go back to using that, or using my own script. From: Steve Wood Date: Tue, 27 Oct 2009 14:25:55 -0500 To: Thomas Larkin Cc: "casper at list.jamfsoftware.com" , JonathanSmith Subject: Re: [Casper] Odd computer names I'm just using the configuration right now to do the initial admin account. You know, in Casper Admin setting the Management tab of the configuration. That doesn't work for me. And I've even done a post image script that adds a hidden user, and that user is not on there either. Like I said, still testing. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 27, 2009 at 2:22 PM, Thomas Larkin wrote: How are you all creating the accounts? I am going to do a post image shell script that creates all the accounts that way all I ever need to modify is a script. >>> "Gallagher, Sean J" 10/27/09 2:19 PM >>> I have seen the same issue with compiles running 7.0.1 it never creates the first account. I am still testing as well. On 10/27/09 3:09 PM, "Steve Wood" > wrote: You're right, that is exactly how it works, but it relies on that preferences.plist file. This came directly from JAMF, although I can't remember which engineer it was that helped me with the case. I'm working through the Casper 7 compiles myself, but I'm seeing a problem setting the first user. It doesn't seem to want to set. Still testing, and if I come across anything I'll post to the list. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 27, 2009 at 1:55 PM, Thomas Larkin > wrote: During imaging you can set the name with Casper though or you can grab the name of the machine currently. The name during the image, should name it properly. I never used instaDMG as I did not like the time it took to build a pristine image, I could do it the old way faster. I am trying Casper 7 complies now though. >>> Steve Wood > 10/27/09 1:43 PM >>> I was seeing this issue when imaging machines. The machine would not get re-named properly during the reboot and would end up with that name. The problem was traced back to the fact that I was using an InstaDMG image that had never been booted to image the machine with. It turns out that Casper looks for the preferences.plist file in /Library/Preferences/SystemConfiguration. That is the file that holds the machine name. If that file is not present, Casper will not rename the machine. My solution: build a package that drops a generic preferences.plist file into that directory. ProbleT 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Tue, Oct 27, 2009 at 1:19 PM, Jonathan Smith > wrote: Thanks. We'll give this a whirl and see how it goes. On Tue, Oct 27, 2009 at 11:01 AM, Thomas Larkin > wrote: It is a two part script. The first script is meant to run after imaging, and it will write the name to a file in /Library/Receipts. This file will contain the computer name from when it was imaged. The second script you run as a policy via Casper that can run say, once a day for example. If you check the box that says make this policy available off line it will cache the script to the machine and run it at start up or once a day. The second script checks the file in /Library/Receipts and if the name matches it exits, if the name doesn't match the computer gets renamed to what it should be. The only thing I didn't add was a recon to update inventory but you could easily add that to my scripts My script is a bit redundant because I haven't tossed it into production yet, just tested it out in my test environment. However, it has worked for me as advertised. So, please make sure you test it, and you could probably even make it smaller. You can drop the touch command since > will create the file if it doesn't exist and you can probably drop the ownership and permissions commands. I just put them in there because I was still testing it and wanted to make sure certain things were there. If Casper creates a file I am sure Casper does it as root. http://tlarkin.com/tech/2-shell-scripts-maintain-standard-naming-conventions So, copy and paste both scripts in your favorite text editor, then upload them to the JSS. Make the first script run after post imaging, and the second script to run once a day and make it available off line. It will cache the second script to the machine locally and it will execute once every day. Now, when you image a machine ensure that the name is set properly, because if it is not then it will cache the wrong name to that receipt file. You could also technically accomplish this with out Casper and use launchd, but Casper puts the easy button on it. -Tom ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> Jonathan Smith > 10/27/09 12:51 PM >>> Hey Al- We get this same thing too. We would be interested in that fix script too. Thx Jon On Tue, Oct 27, 2009 at 10:42 AM, Thomas Larkin > but there are a few caveats to it. You must ensure that the name is set right during imaging, then this won't happen. If you want I can send the info to you off the list since it is on my site. -Tom >>> "Nichols, Jared - 1160 - MITLL" > 10/27/09 12:13 PM >>> Hi- I've got a machine in my inventory called {
Network {
HostNames {
and one called 2009-10-23 16:10:37.289 defaults[319] The domain/default Has anyone seen something like this before? Before I contact the user, I wanted to see if there was anything I could do on the service side of things. I ran a recon remotely and the names are still sticking. Should I delete them from the JSS and let them check in again? --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -- Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | -- Jonathan H. Smith | Sr. Systems Engineer | Genentech | office: 650-225-4968| mobile: 650-302-6985 | smith.jonathan at gene.com | _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From swood at integer.com Tue Oct 27 13:36:59 2009 From: swood at integer.com (Steve Wood) Date: Tue, 27 Oct 2009 15:36:59 -0500 Subject: [Casper] Off Topic - Directory.app in Snow Leopard Message-ID: <438f5a310910271336n1e3389fs354ebb559d9e48b3@mail.gmail.com> Totally not a Casper question, but why not pose it to the list. I was just getting my users to start using the Directory.app application to look up users, and then Apple comes along and does away with it. Does anyone know of a replacement application under Snow Leopard? Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 -------------- next part -------------- An HTML attachment was scrubbed... URL: From ktrampe at basd.k12.wi.us Wed Oct 28 05:22:40 2009 From: ktrampe at basd.k12.wi.us (Kerry Trampe) Date: Wed, 28 Oct 2009 07:22:40 -0500 Subject: [Casper] Off Topic - Directory.app in Snow Leopard In-Reply-To: <438f5a310910271336n1e3389fs354ebb559d9e48b3@mail.gmail.com> References: <438f5a310910271336n1e3389fs354ebb559d9e48b3@mail.gmail.com> Message-ID: <6A048C81-CA49-416E-B90B-4A61263B1BDD@basd.k12.wi.us> Good Morning Steve, I believe Address Book would probably be the app you'd move them to. If you're just looking up users, it should work fine. If you're looking for something more, try ldapper: http://carl-bell-2.baylor.edu/~Carl_Bell/ReadMeFiles/LDapper.html Cheers! Kerry On Oct 27, 2009, at 3:36 PM, Steve Wood wrote: > Totally not a Casper question, but why not pose it to the list. > > I was just getting my users to start using the Directory.app > application to look up users, and then Apple comes along and does > away with it. Does anyone know of a replacement application under > Snow Leopard? > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From swood at integer.com Wed Oct 28 05:29:35 2009 From: swood at integer.com (Steve Wood) Date: Wed, 28 Oct 2009 07:29:35 -0500 Subject: [Casper] Off Topic - Directory.app in Snow Leopard In-Reply-To: <6A048C81-CA49-416E-B90B-4A61263B1BDD@basd.k12.wi.us> References: <438f5a310910271336n1e3389fs354ebb559d9e48b3@mail.gmail.com> <6A048C81-CA49-416E-B90B-4A61263B1BDD@basd.k12.wi.us> Message-ID: <438f5a310910280529k7f783f35ybcb04dfd8440075d@mail.gmail.com> But does Address Book in SL require Address Book Server to perform lookups? Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Wed, Oct 28, 2009 at 7:22 AM, Kerry Trampe wrote: > Good Morning Steve, > I believe Address Book would probably be the app you'd move them to. If > you're just looking up users, it should work fine. > > If you're looking for something more, try ldapper: > http://carl-bell-2.baylor.edu/~Carl_Bell/ReadMeFiles/LDapper.html > > Cheers! > Kerry > > On Oct 27, 2009, at 3:36 PM, Steve Wood wrote: > > Totally not a Casper question, but why not pose it to the list. > > I was just getting my users to start using the Directory.app application to > look up users, and then Apple comes along and does away with it. Does > anyone know of a replacement application under Snow Leopard? > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From jhill at sheboygan.k12.wi.us Wed Oct 28 05:38:12 2009 From: jhill at sheboygan.k12.wi.us (Janice Hill) Date: Wed, 28 Oct 2009 07:38:12 -0500 Subject: [Casper] Scheduling software updates - best practices Message-ID: We have hundreds of new machines deployed over the summer months that are now a few revs behind in software updates. With network activity issues in mind, I?m wondering how others set up Apple software update pollicies/schedules to run. I?m reluctant to set them to run on start up or log in or log out during the school day, but running them after school hours requires others to leave machines turned on overnight with a 4PM start trigger (I used ?any?) and met with mixed success, one building ran, another, not so much. Is anyone using a regularly scheduled or repeating option? Once a month? What is being set as a trigger? Please bear with the new user questions. -- Janice K. Hill PC Support Manager Sheboygan Area School District 920.459.4032 -------------- next part -------------- An HTML attachment was scrubbed... URL: From ktrampe at basd.k12.wi.us Wed Oct 28 05:39:01 2009 From: ktrampe at basd.k12.wi.us (Kerry Trampe) Date: Wed, 28 Oct 2009 07:39:01 -0500 Subject: [Casper] Off Topic - Directory.app in Snow Leopard In-Reply-To: <438f5a310910280529k7f783f35ybcb04dfd8440075d@mail.gmail.com> References: <438f5a310910271336n1e3389fs354ebb559d9e48b3@mail.gmail.com> <6A048C81-CA49-416E-B90B-4A61263B1BDD@basd.k12.wi.us> <438f5a310910280529k7f783f35ybcb04dfd8440075d@mail.gmail.com> Message-ID: <3D52EE2B-78D4-455F-A253-9F3DFDD3A30E@basd.k12.wi.us> > But does Address Book in SL require Address Book Server to perform > lookups? No, not in my experience. It can connect to any LDAP (even properly configured Active Directory Installations), CardDAV, or Exchange 2007 server. Go into Address Book's preferences > accounts pane > click the plus button > Account Type: LDAP > Server Address: your.od.server. etc, etc. Give it a shot, it's pretty quick and easy. Have a great morning, Kerry On Oct 28, 2009, at 7:29 AM, Steve Wood wrote: > But does Address Book in SL require Address Book Server to perform > lookups? > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > On Wed, Oct 28, 2009 at 7:22 AM, Kerry Trampe > wrote: > Good Morning Steve, > I believe Address Book would probably be the app you'd move them to. > If you're just looking up users, it should work fine. > > If you're looking for something more, try ldapper: > http://carl-bell-2.baylor.edu/~Carl_Bell/ReadMeFiles/LDapper.html > > Cheers! > Kerry > > On Oct 27, 2009, at 3:36 PM, Steve Wood wrote: > >> Totally not a Casper question, but why not pose it to the list. >> >> I was just getting my users to start using the Directory.app >> application to look up users, and then Apple comes along and does >> away with it. Does anyone know of a replacement application under >> Snow Leopard? >> >> Steve Wood >> Director of IT >> swood at integer.com >> >> The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 >> T 214.758.6813 | F 214.758.6901 | C 940.312.2475 >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: Screen shot 2009-10-28 at 7.32.38 AM.png Type: image/png Size: 195906 bytes Desc: not available URL: From jared.nichols at ll.mit.edu Wed Oct 28 06:27:07 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Wed, 28 Oct 2009 09:27:07 -0400 Subject: [Casper] Scheduling software updates - best practices In-Reply-To: References: Message-ID: <9C4942C6-C5EF-4695-AD7F-4C8CFF13DEE1@ll.mit.edu> Hi- We release patches on patch tuesday that have accumulated since the prior patch tuesday. Then, we give users two weeks to run them on their own (either from Self Service which will handle the admin rights on their behalf or if they have admin rights running software update on their own.) If they don't patch by the end of those two weeks, we then force the install when they log in next. That's the tricky part and is a bit more art than science. The problem with forcing updates in the background is that if they reboot their machine (having forgotten that they had a window telling them updates were being applied) they can break their machine. So, I came up with something that I think it's a bit more elegant (see screenshot). I created a small application that will fire off at login that quits the Finder and hides the Dock. The policy that fires off this application then does a sudo to launch Software Update. I think it's the right mix of "don't break anything but be in the user's face enough." There is the (hidden) option of bypassing the update notification if the user has a legit reason to, but I think it's enough that people will take it seriously and then run software update (especially seeing how it was just launched for them). We can always run a report to see if there are any serial offenders who don't update even after the notification and take it up with their management. j [cid:C57E40E3-9545-4DDE-81BE-F1406D1ED879 at llan.ll.mit.edu] --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 28, 2009, at 8:38 AM, Janice Hill wrote: We have hundreds of new machines deployed over the summer months that are now a few revs behind in software updates. With network activity issues in mind, I?m wondering how others set up Apple software update pollicies/schedules to run. I?m reluctant to set them to run on start up or log in or log out during the school day, but running them after school hours requires others to leave machines turned on overnight with a 4PM start trigger (I used ?any?) and met with mixed success, one building ran, another, not so much. Is anyone using a regularly scheduled or repeating option? Once a month? What is being set as a trigger? Please bear with the new user questions. -- Janice K. Hill PC Support Manager Sheboygan Area School District 920.459.4032 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: Screen shot 2009-10-28 at 9.22.55 AM.png Type: image/png Size: 3492395 bytes Desc: Screen shot 2009-10-28 at 9.22.55 AM.png URL: From swood at integer.com Wed Oct 28 07:38:42 2009 From: swood at integer.com (Steve Wood) Date: Wed, 28 Oct 2009 09:38:42 -0500 Subject: [Casper] Scheduling software updates - best practices In-Reply-To: <9C4942C6-C5EF-4695-AD7F-4C8CFF13DEE1@ll.mit.edu> References: <9C4942C6-C5EF-4695-AD7F-4C8CFF13DEE1@ll.mit.edu> Message-ID: <438f5a310910280738v29eedd4cg55d2f0bf35b098e3@mail.gmail.com> Jared it looks like you are using Growl Notify for that notification, is that right? Looks nice. Right now I have a policy set to run at 12 pm every Tuesday that installs all software updates. After finishing a window pops up alerting users to restart as soon as possible. This is all handled via Casper policies, including the notification window. I am experimenting with using iHook to do updates at either login or logout and provide a dialog box. I prefer logout, just because my users then don't have to wait for it to finish to get to their deskotp, they can simply logout and go home. Our machines are scheduled to shutdown at 10 pm each night, so that provides the restart that is needed for the updates. Of course the one wrinkle in this right now is getting users to logout. So, I may have to find another way to do this with a mixture of Growl Notify to tell them to restart before leaving (maybe with a timed policy for 4:30 pm each day) and iHook to alert them to what is being installed. I am looking to use this not just for software updates that Apple pushes out, but we are getting ready to roll CS4 out too. I want to cache CS4 to the machines and then do a rolling update of CS4 at logout (installAllCached). BTW, I spoke to Jonah from JAMF last week at an Apple event and asked him to add iHook type notification capability to the "wish list" for an upcoming Casper release. We should have a better notification system for login and logout installations. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Wed, Oct 28, 2009 at 8:27 AM, Nichols, Jared - 1160 - MITLL < jared.nichols at ll.mit.edu> wrote: > Hi- > > We release patches on patch tuesday that have accumulated since the prior > patch tuesday. Then, we give users two weeks to run them on their own > (either from Self Service which will handle the admin rights on their behalf > or if they have admin rights running software update on their own.) If they > don't patch by the end of those two weeks, we then force the install when > they log in next. > > That's the tricky part and is a bit more art than science. The problem > with forcing updates in the background is that if they reboot their machine > (having forgotten that they had a window telling them updates were being > applied) they can break their machine. So, I came up with something that I > think it's a bit more elegant (see screenshot). I created a small > application that will fire off at login that quits the Finder and hides the > Dock. The policy that fires off this application then does a sudo to launch > Software Update. I think it's the right mix of "don't break anything but be > in the user's face enough." There is the (hidden) option of bypassing the > update notification if the user has a legit reason to, but I think it's > enough that people will take it seriously and then run software update > (especially seeing how it was just launched for them). > > We can always run a report to see if there are any serial offenders who > don't update even after the notification and take it up with their > management. > > j > > > > --- > Jared F. Nichols > Desktop Engineer, Infrastructure & Operations > Information Services Department > MIT Lincoln Laboratory > 244 Wood Street > Lexington, Massachusetts 02420 > 781.981.5436 > > On Oct 28, 2009, at 8:38 AM, Janice Hill wrote: > > We have hundreds of new machines deployed over the summer months that are > now a few revs behind in software updates. With network activity issues in > mind, I?m wondering how others set up Apple software update > pollicies/schedules to run. I?m reluctant to set them to run on start up or > log in or log out during the school day, but running them after school hours > requires others to leave machines turned on overnight with a 4PM start > trigger (I used ?any?) and met with mixed success, one building ran, > another, not so much. Is anyone using a regularly scheduled or repeating > option? Once a month? What is being set as a trigger? > > Please bear with the new user questions. > > > -- > *Janice K. Hill > PC Support Manager > Sheboygan Area School District > 920.459.4032* > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/png Size: 3492395 bytes Desc: not available URL: From ken.edgar at gmail.com Wed Oct 28 08:26:10 2009 From: ken.edgar at gmail.com (ken edgar) Date: Wed, 28 Oct 2009 10:26:10 -0500 Subject: [Casper] Off Topic - Directory.app in Snow Leopard In-Reply-To: <3D52EE2B-78D4-455F-A253-9F3DFDD3A30E@basd.k12.wi.us> References: <438f5a310910271336n1e3389fs354ebb559d9e48b3@mail.gmail.com> <6A048C81-CA49-416E-B90B-4A61263B1BDD@basd.k12.wi.us> <438f5a310910280529k7f783f35ybcb04dfd8440075d@mail.gmail.com> <3D52EE2B-78D4-455F-A253-9F3DFDD3A30E@basd.k12.wi.us> Message-ID: <4b4190f00910280826q104b12c2hc8427cb44b881713@mail.gmail.com> I believe Directory.app was moved to /System/Library/CoreServices ... I may be wrong though On Wed, Oct 28, 2009 at 7:39 AM, Kerry Trampe wrote: > > *But does Address Book in SL require Address Book Server to perform > lookups?* > > > No, not in my experience. > > It can connect to any LDAP (even properly configured Active Directory > Installations), CardDAV, or Exchange 2007 server. > Go into Address Book's preferences > accounts pane > click the plus button > > Account Type: LDAP > Server Address: your.od.server. etc, etc. > > > Give it a shot, it's pretty quick and easy. > > Have a great morning, > Kerry > > > > On Oct 28, 2009, at 7:29 AM, Steve Wood wrote: > > But does Address Book in SL require Address Book Server to perform lookups? > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > On Wed, Oct 28, 2009 at 7:22 AM, Kerry Trampe wrote: > >> Good Morning Steve, >> I believe Address Book would probably be the app you'd move them to. If >> you're just looking up users, it should work fine. >> >> If you're looking for something more, try ldapper: >> http://carl-bell-2.baylor.edu/~Carl_Bell/ReadMeFiles/LDapper.html >> >> Cheers! >> Kerry >> >> On Oct 27, 2009, at 3:36 PM, Steve Wood wrote: >> >> Totally not a Casper question, but why not pose it to the list. >> >> I was just getting my users to start using the Directory.app application >> to look up users, and then Apple comes along and does away with it. Does >> anyone know of a replacement application under Snow Leopard? >> >> Steve Wood >> Director of IT >> swood at integer.com >> >> The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 >> T 214.758.6813 | F 214.758.6901 | C 940.312.2475 >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper >> >> >> > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/png Size: 195906 bytes Desc: not available URL: From swood at integer.com Wed Oct 28 08:29:44 2009 From: swood at integer.com (Steve Wood) Date: Wed, 28 Oct 2009 10:29:44 -0500 Subject: [Casper] Off Topic - Directory.app in Snow Leopard In-Reply-To: <4b4190f00910280826q104b12c2hc8427cb44b881713@mail.gmail.com> References: <438f5a310910271336n1e3389fs354ebb559d9e48b3@mail.gmail.com> <6A048C81-CA49-416E-B90B-4A61263B1BDD@basd.k12.wi.us> <438f5a310910280529k7f783f35ybcb04dfd8440075d@mail.gmail.com> <3D52EE2B-78D4-455F-A253-9F3DFDD3A30E@basd.k12.wi.us> <4b4190f00910280826q104b12c2hc8427cb44b881713@mail.gmail.com> Message-ID: <438f5a310910280829u7cfea8eet8a7af1061be55dc5@mail.gmail.com> Kerry hit the nail on the head! A little more cumbersome than Directory.app, but it will work. In Address Book you just have to choose the All Directories and then Directory Services (at least in my case) to search the directory. Was nicer with Directory.app. Thanks Kerry! Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Wed, Oct 28, 2009 at 10:26 AM, ken edgar wrote: > I believe Directory.app was moved to /System/Library/CoreServices ... I > may be wrong though > > > On Wed, Oct 28, 2009 at 7:39 AM, Kerry Trampe wrote: > >> >> *But does Address Book in SL require Address Book Server to perform >> lookups?* >> >> >> No, not in my experience. >> >> It can connect to any LDAP (even properly configured Active Directory >> Installations), CardDAV, or Exchange 2007 server. >> Go into Address Book's preferences > accounts pane > click the plus button >> > Account Type: LDAP > Server Address: your.od.server. etc, etc. >> >> >> Give it a shot, it's pretty quick and easy. >> >> Have a great morning, >> Kerry >> >> >> >> On Oct 28, 2009, at 7:29 AM, Steve Wood wrote: >> >> But does Address Book in SL require Address Book Server to perform >> lookups? >> >> Steve Wood >> Director of IT >> swood at integer.com >> >> The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 >> T 214.758.6813 | F 214.758.6901 | C 940.312.2475 >> >> >> On Wed, Oct 28, 2009 at 7:22 AM, Kerry Trampe wrote: >> >>> Good Morning Steve, >>> I believe Address Book would probably be the app you'd move them to. If >>> you're just looking up users, it should work fine. >>> >>> If you're looking for something more, try ldapper: >>> http://carl-bell-2.baylor.edu/~Carl_Bell/ReadMeFiles/LDapper.html >>> >>> Cheers! >>> Kerry >>> >>> On Oct 27, 2009, at 3:36 PM, Steve Wood wrote: >>> >>> Totally not a Casper question, but why not pose it to the list. >>> >>> I was just getting my users to start using the Directory.app application >>> to look up users, and then Apple comes along and does away with it. Does >>> anyone know of a replacement application under Snow Leopard? >>> >>> Steve Wood >>> Director of IT >>> swood at integer.com >>> >>> The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 >>> T 214.758.6813 | F 214.758.6901 | C 940.312.2475 >>> _______________________________________________ >>> Casper mailing list >>> Casper at list.jamfsoftware.com >>> http://list.jamfsoftware.com/mailman/listinfo/casper >>> >>> >>> >> >> >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper >> >> > -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/png Size: 195906 bytes Desc: not available URL: From joshua.schripsema at wizards.com Wed Oct 28 08:53:18 2009 From: joshua.schripsema at wizards.com (Schripsema, Joshua) Date: Wed, 28 Oct 2009 08:53:18 -0700 Subject: [Casper] Off Topic - Directory.app in Snow Leopard In-Reply-To: Message-ID: It was indeed moved here. Apple?s official new way of accessing this utility is to: 1. Open ?System Preferences? 2. Click on ?Accounts? 3. Select ?Login Options? 4. Select ?Edit? next to ?Network Account Server:? 5. Click ?Open Directory Utility. . .? Personally I find this far too cumbersome for a utility we use as much as we do in our Active Directory environment. We have a custom location for machines to be bound that we need to specify in Directory Utility that the default auto-bind does not navigate to. Since we already deploy our local admin account with a custom dock that points to the old location, right now while testing Snow Leopard I have worked the following script into the deployment which just aliases the new location into the old: ln -s /System/Library/CoreServices/Directory\ Utility.app/ /Applications/Utilities/Directory\ Utility.app ~ Josh -- Joshua Schripsema Technology Services Wizards of the Coast From: ken edgar > > I believe Directory.app was moved to /System/Library/CoreServices ... I may > be wrong though -------------- next part -------------- An HTML attachment was scrubbed... URL: From swood at integer.com Wed Oct 28 09:00:24 2009 From: swood at integer.com (Steve Wood) Date: Wed, 28 Oct 2009 11:00:24 -0500 Subject: [Casper] Off Topic - Directory.app in Snow Leopard In-Reply-To: References: Message-ID: <438f5a310910280900m4386099jeb689b9e0bbdf06@mail.gmail.com> Yes, that is a great way to get to Directory Utility, but, again, that was not the application I was looking for. I was looking for DIrectory.app, which has this icon: [image: ?ui=2&view=att&th=1249be01ba79b938&attid=0.1&disp=attd&realattid=ii_1249be01ba79b938&zw] We use this for looking up phone numbers instead of printing out phone lists. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Wed, Oct 28, 2009 at 10:53 AM, Schripsema, Joshua < joshua.schripsema at wizards.com> wrote: > It was indeed moved here. Apple?s official new way of accessing this > utility is to: > > 1. Open ?System Preferences? > 2. Click on ?Accounts? > 3. Select ?Login Options? > 4. Select ?Edit? next to ?Network Account Server:? > 5. Click ?Open Directory Utility. . .? > > > Personally I find this far too cumbersome for a utility we use as much as > we do in our Active Directory environment. We have a custom location for > machines to be bound that we need to specify in Directory Utility that the > default auto-bind does not navigate to. Since we already deploy our local > admin account with a custom dock that points to the old location, right now > while testing Snow Leopard I have worked the following script into the > deployment which just aliases the new location into the old: > > ln -s /System/Library/CoreServices/Directory\ Utility.app/ > /Applications/Utilities/Directory\ Utility.app > > ~ Josh > > -- > > Joshua Schripsema > Technology Services > Wizards of the Coast > > > From: ken edgar <*ken.edgar at gmail.com*> > > > I believe Directory.app was moved to /System/Library/CoreServices ... I > may > be wrong though > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: image/png Size: 12538 bytes Desc: not available URL: From jared.nichols at ll.mit.edu Wed Oct 28 09:11:07 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Wed, 28 Oct 2009 12:11:07 -0400 Subject: [Casper] Scheduling software updates - best practices In-Reply-To: <438f5a310910280738v29eedd4cg55d2f0bf35b098e3@mail.gmail.com> References: <9C4942C6-C5EF-4695-AD7F-4C8CFF13DEE1@ll.mit.edu> <438f5a310910280738v29eedd4cg55d2f0bf35b098e3@mail.gmail.com> Message-ID: Nope, not Growl Notify... I made it myself in XCode. I didn't want it dismissing itself after a set period of time and wanted it to stay in the user's face while software update was running. Though, Growl Notify is something I'm looking at implementing for our notification system. --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 28, 2009, at 10:38 AM, Steve Wood wrote: Jared it looks like you are using Growl Notify for that notification, is that right? Looks nice. Right now I have a policy set to run at 12 pm every Tuesday that installs all software updates. After finishing a window pops up alerting users to restart as soon as possible. This is all handled via Casper policies, including the notification window. I am experimenting with using iHook to do updates at either login or logout and provide a dialog box. I prefer logout, just because my users then don't have to wait for it to finish to get to their deskotp, they can simply logout and go home. Our machines are scheduled to shutdown at 10 pm each night, so that provides the restart that is needed for the updates. Of course the one wrinkle in this right now is getting users to logout. So, I may have to find another way to do this with a mixture of Growl Notify to tell them to restart before leaving (maybe with a timed policy for 4:30 pm each day) and iHook to alert them to what is being installed. I am looking to use this not just for software updates that Apple pushes out, but we are getting ready to roll CS4 out too. I want to cache CS4 to the machines and then do a rolling update of CS4 at logout (installAllCached). BTW, I spoke to Jonah from JAMF last week at an Apple event and asked him to add iHook type notification capability to the "wish list" for an upcoming Casper release. We should have a better notification system for login and logout installations. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Wed, Oct 28, 2009 at 8:27 AM, Nichols, Jared - 1160 - MITLL > wrote: Hi- We release patches on patch tuesday that have accumulated since the prior patch tuesday. Then, we give users two weeks to run them on their own (either from Self Service which will handle the admin rights on their behalf or if they have admin rights running software update on their own.) If they don't patch by the end of those two weeks, we then force the install when they log in next. That's the tricky part and is a bit more art than science. The problem with forcing updates in the background is that if they reboot their machine (having forgotten that they had a window telling them updates were being applied) they can break their machine. So, I came up with something that I think it's a bit more elegant (see screenshot). I created a small application that will fire off at login that quits the Finder and hides the Dock. The policy that fires off this application then does a sudo to launch Software Update. I think it's the right mix of "don't break anything but be in the user's face enough." There is the (hidden) option of bypassing the update notification if the user has a legit reason to, but I think it's enough that people will take it seriously and then run software update (especially seeing how it was just launched for them). We can always run a report to see if there are any serial offenders who don't update even after the notification and take it up with their management. j --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 28, 2009, at 8:38 AM, Janice Hill wrote: We have hundreds of new machines deployed over the summer months that are now a few revs behind in software updates. With network activity issues in mind, I?m wondering how others set up Apple software update pollicies/schedules to run. I?m reluctant to set them to run on start up or log in or log out during the school day, but running them after school hours requires others to leave machines turned on overnight with a 4PM start trigger (I used ?any?) and met with mixed success, one building ran, another, not so much. Is anyone using a regularly scheduled or repeating option? Once a month? What is being set as a trigger? Please bear with the new user questions. -- Janice K. Hill PC Support Manager Sheboygan Area School District 920.459.4032 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From jared.nichols at ll.mit.edu Wed Oct 28 09:11:07 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Wed, 28 Oct 2009 12:11:07 -0400 Subject: [Casper] Scheduling software updates - best practices In-Reply-To: <438f5a310910280738v29eedd4cg55d2f0bf35b098e3@mail.gmail.com> References: <9C4942C6-C5EF-4695-AD7F-4C8CFF13DEE1@ll.mit.edu> <438f5a310910280738v29eedd4cg55d2f0bf35b098e3@mail.gmail.com> Message-ID: Nope, not Growl Notify... I made it myself in XCode. I didn't want it dismissing itself after a set period of time and wanted it to stay in the user's face while software update was running. Though, Growl Notify is something I'm looking at implementing for our notification system. --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 28, 2009, at 10:38 AM, Steve Wood wrote: Jared it looks like you are using Growl Notify for that notification, is that right? Looks nice. Right now I have a policy set to run at 12 pm every Tuesday that installs all software updates. After finishing a window pops up alerting users to restart as soon as possible. This is all handled via Casper policies, including the notification window. I am experimenting with using iHook to do updates at either login or logout and provide a dialog box. I prefer logout, just because my users then don't have to wait for it to finish to get to their deskotp, they can simply logout and go home. Our machines are scheduled to shutdown at 10 pm each night, so that provides the restart that is needed for the updates. Of course the one wrinkle in this right now is getting users to logout. So, I may have to find another way to do this with a mixture of Growl Notify to tell them to restart before leaving (maybe with a timed policy for 4:30 pm each day) and iHook to alert them to what is being installed. I am looking to use this not just for software updates that Apple pushes out, but we are getting ready to roll CS4 out too. I want to cache CS4 to the machines and then do a rolling update of CS4 at logout (installAllCached). BTW, I spoke to Jonah from JAMF last week at an Apple event and asked him to add iHook type notification capability to the "wish list" for an upcoming Casper release. We should have a better notification system for login and logout installations. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Wed, Oct 28, 2009 at 8:27 AM, Nichols, Jared - 1160 - MITLL > wrote: Hi- We release patches on patch tuesday that have accumulated since the prior patch tuesday. Then, we give users two weeks to run them on their own (either from Self Service which will handle the admin rights on their behalf or if they have admin rights running software update on their own.) If they don't patch by the end of those two weeks, we then force the install when they log in next. That's the tricky part and is a bit more art than science. The problem with forcing updates in the background is that if they reboot their machine (having forgotten that they had a window telling them updates were being applied) they can break their machine. So, I came up with something that I think it's a bit more elegant (see screenshot). I created a small application that will fire off at login that quits the Finder and hides the Dock. The policy that fires off this application then does a sudo to launch Software Update. I think it's the right mix of "don't break anything but be in the user's face enough." There is the (hidden) option of bypassing the update notification if the user has a legit reason to, but I think it's enough that people will take it seriously and then run software update (especially seeing how it was just launched for them). We can always run a report to see if there are any serial offenders who don't update even after the notification and take it up with their management. j --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 28, 2009, at 8:38 AM, Janice Hill wrote: We have hundreds of new machines deployed over the summer months that are now a few revs behind in software updates. With network activity issues in mind, I?m wondering how others set up Apple software update pollicies/schedules to run. I?m reluctant to set them to run on start up or log in or log out during the school day, but running them after school hours requires others to leave machines turned on overnight with a 4PM start trigger (I used ?any?) and met with mixed success, one building ran, another, not so much. Is anyone using a regularly scheduled or repeating option? Once a month? What is being set as a trigger? Please bear with the new user questions. -- Janice K. Hill PC Support Manager Sheboygan Area School District 920.459.4032 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From jared.nichols at ll.mit.edu Wed Oct 28 10:41:47 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Wed, 28 Oct 2009 13:41:47 -0400 Subject: [Casper] Scheduling software updates - best practices In-Reply-To: <1FC4C58B-E2C7-47F6-A300-5024137F7E4A@uclan.ac.uk> References: <9C4942C6-C5EF-4695-AD7F-4C8CFF13DEE1@ll.mit.edu> <438f5a310910280738v29eedd4cg55d2f0bf35b098e3@mail.gmail.com> <1FC4C58B-E2C7-47F6-A300-5024137F7E4A@uclan.ac.uk> Message-ID: <7789F681-1558-47CC-86DB-4BB3DA6A956E@ll.mit.edu> If they click it, they can dismiss it. Never leave a decision up to the user :) --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 28, 2009, at 12:59 PM, Criss Myers wrote: Growl notify has persistance, u can set a flag to keep on screen till they click it I do that with all mine On 28 Oct 2009, at 16:11, "Nichols, Jared - 1160 - MITLL" > wrote: Nope, not Growl Notify... I made it myself in XCode. I didn't want it dismissing itself after a set period of time and wanted it to stay in the user's face while software update was running. Though, Growl Notify is something I'm looking at implementing for our notification system. --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 28, 2009, at 10:38 AM, Steve Wood wrote: Jared it looks like you are using Growl Notify for that notification, is that right? Looks nice. Right now I have a policy set to run at 12 pm every Tuesday that installs all software updates. After finishing a window pops up alerting users to restart as soon as possible. This is all handled via Casper policies, including the notification window. I am experimenting with using iHook to do updates at either login or logout and provide a dialog box. I prefer logout, just because my users then don't have to wait for it to finish to get to their deskotp, they can simply logout and go home. Our machines are scheduled to shutdown at 10 pm each night, so that provides the restart that is needed for the updates. Of course the one wrinkle in this right now is getting users to logout. So, I may have to find another way to do this with a mixture of Growl Notify to tell them to restart before leaving (maybe with a timed policy for 4:30 pm each day) and iHook to alert them to what is being installed. I am looking to use this not just for software updates that Apple pushes out, but we are getting ready to roll CS4 out too. I want to cache CS4 to the machines and then do a rolling update of CS4 at logout (installAllCached). BTW, I spoke to Jonah from JAMF last week at an Apple event and asked him to add iHook type notification capability to the "wish list" for an upcoming Casper release. We should have a better notification system for login and logout installations. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Wed, Oct 28, 2009 at 8:27 AM, Nichols, Jared - 1160 - MITLL <jared.nichols at ll.mit.edu> wrote: Hi- We release patches on patch tuesday that have accumulated since the prior patch tuesday. Then, we give users two weeks to run them on their own (either from Self Service which will handle the admin rights on their behalf or if they have admin rights running software update on their own.) If they don't patch by the end of those two weeks, we then force the install when they log in next. That's the tricky part and is a bit more art than science. The problem with forcing updates in the background is that if they reboot their machine (having forgotten that they had a window telling them updates were being applied) they can break their machine. So, I came up with something that I think it's a bit more elegant (see screenshot). I created a small application that will fire off at login that quits the Finder and hides the Dock. The policy that fires off this application then does a sudo to launch Software Update. I think it's the right mix of "don't break anything but be in the user's face enough." There is the (hidden) option of bypassing the update notification if the user has a legit reason to, but I think it's enough that people will take it seriously and then run software update (especially seeing how it was just launched for them). We can always run a report to see if there are any serial offenders who don't update even after the notification and take it up with their management. j --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 28, 2009, at 8:38 AM, Janice Hill wrote: We have hundreds of new machines deployed over the summer months that are now a few revs behind in software updates. With network activity issues in mind, I?m wondering how others set up Apple software update pollicies/schedules to run. I?m reluctant to set them to run on start up or log in or log out during the school day, but running them after school hours requires others to leave machines turned on overnight with a 4PM start trigger (I used ?any?) and met with mixed success, one building ran, another, not so much. Is anyone using a regularly scheduled or repeating option? Once a month? What is being set as a trigger? Please bear with the new user questions. -- Janice K. Hill PC Support Manager Sheboygan Area School District 920.459.4032 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From ken.edgar at gmail.com Thu Oct 29 04:24:31 2009 From: ken.edgar at gmail.com (ken edgar) Date: Thu, 29 Oct 2009 06:24:31 -0500 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites Message-ID: <4b4190f00910290424ob9c469cqc7e67c935788ff4@mail.gmail.com> Hello, What is the best way to package or distribute Adobe CS3 and/or CS4? I have run into many problems trying to re-package with Composer. I've also had problems in the past with editing the installer using Adobe's instructions. How do you guys do it, and do you have any problems afterwards? Some of the problems I've had: - Composer package - Acrobat and distiller missing items in menus - Crashing of various applications - Acrobat and Distiller auto-repair issues - Modified Adobe installer image - Sometimes does not install exiting with an error for no particular reason - Most likely need to create a post script to clean up fonts after install - Still need to manually launch the apps including Acrobat in order to create the pdf printer and other plug-ins -------------- next part -------------- An HTML attachment was scrubbed... URL: From jared.nichols at ll.mit.edu Thu Oct 29 04:37:21 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Thu, 29 Oct 2009 07:37:21 -0400 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: <4b4190f00910290424ob9c469cqc7e67c935788ff4@mail.gmail.com> References: <4b4190f00910290424ob9c469cqc7e67c935788ff4@mail.gmail.com> Message-ID: <124674F9-489B-4642-9226-FD1871234B0A@ll.mit.edu> Ken- Depends on what version of Casper you're using. If you're on 7, it should be a lot easier (though I haven't done it yet myself). All of my CS packaging has been on Casper 6 (both CS3 and CS4) and I documented - pretty step-by-step - the process that works for me here on the board. Search for a message with the title "Trials of packaging and distributing Adobe CS4." That may get you in the right direction. --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 29, 2009, at 7:24 AM, ken edgar wrote: Hello, What is the best way to package or distribute Adobe CS3 and/or CS4? I have run into many problems trying to re-package with Composer. I've also had problems in the past with editing the installer using Adobe's instructions. How do you guys do it, and do you have any problems afterwards? Some of the problems I've had: * Composer package * Acrobat and distiller missing items in menus * Crashing of various applications * Acrobat and Distiller auto-repair issues * Modified Adobe installer image * Sometimes does not install exiting with an error for no particular reason * Most likely need to create a post script to clean up fonts after install * Still need to manually launch the apps including Acrobat in order to create the pdf printer and other plug-ins _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From CMyers at uclan.ac.uk Thu Oct 29 04:49:06 2009 From: CMyers at uclan.ac.uk (Criss Myers) Date: Thu, 29 Oct 2009 11:49:06 +0000 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: <4b4190f00910290424ob9c469cqc7e67c935788ff4@mail.gmail.com> References: <4b4190f00910290424ob9c469cqc7e67c935788ff4@mail.gmail.com> Message-ID: <4AE98132.BB96.0081.0@uclan.ac.uk> I deploy the Casper way by adding the dmg's into Casper admin and scanning for adobe packages, then i install at first run and also have a self service policy to install as per users discretion Worked fine for CS3 and CS4 Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> ken edgar 10/29/09 11:24 AM >>> Hello, What is the best way to package or distribute Adobe CS3 and/or CS4? I have run into many problems trying to re-package with Composer. I've also had problems in the past with editing the installer using Adobe's instructions. How do you guys do it, and do you have any problems afterwards? Some of the problems I've had: Composer package Acrobat and distiller missing items in menus Crashing of various applications Acrobat and Distiller auto-repair issues Modified Adobe installer image Sometimes does not install exiting with an error for no particular reason Most likely need to create a post script to clean up fonts after install Still need to manually launch the apps including Acrobat in order to create the pdf printer and other plug-ins -------------- next part -------------- An HTML attachment was scrubbed... URL: From jorge at nyu.edu Thu Oct 29 06:07:54 2009 From: jorge at nyu.edu (jorge a. najera-ordonez) Date: Thu, 29 Oct 2009 09:07:54 -0400 Subject: [Casper] removing welcome to safari splash screen Message-ID: has anyone had success removing the welcome to safari screen that opens up when you first open safari. we rebuild accounts from the user template whenever someone logs off and every time someone logs back in the welcome screen pops up when they launch safari and then the top sites page. ideally we would like the home page we have set be what shows first. the only thing i thought might be it was a LastSessions.plist but that doesnt seem to be it. thanks jorge a. najera-ordonez From bfranke at ucls.uchicago.edu Thu Oct 29 06:08:39 2009 From: bfranke at ucls.uchicago.edu (Baker Franke) Date: Thu, 29 Oct 2009 08:08:39 -0500 Subject: [Casper] storing policies locally not sticking Message-ID: <790212EA-04C7-467A-9C74-63AF8B70AA2B@ucls.uchicago.edu> I have an ongoing login policy that I want to be available offline. We've had a few issues where the casper server has gone down and that renders my computer lab virtually unusable as login takes about 5 minutes while the connections to the JSS time out. The login policy just runs a shell script that makes sure some symlinks and permissions are set for the network user (LDAP) logging in. The policy plan reads: This policy is set to Ongoing This policy is triggered by login This policy will be made available offline This policy is assigned to 2 computer groups Run Script UH202login_v8.sh But the "avialable offline" part does not seem to be sticking. When the JSS is unavailable (like yesterday when the server room flooded, yikes!) The logs show failed connections to the JSS on login. Eventually it times out, and the script never runs. Is there something else hiding that I don't know about? What should I look for? Thanks, -Baker Baker Franke Computer Science Dept. University of Chicago Laboratory Schools 773.702.5419 From tlarki at kckps.org Thu Oct 29 06:15:47 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 29 Oct 2009 08:15:47 -0500 Subject: [Casper] storing policies locally not sticking In-Reply-To: <790212EA-04C7-467A-9C74-63AF8B70AA2B@ucls.uchicago.edu> References: <790212EA-04C7-467A-9C74-63AF8B70AA2B@ucls.uchicago.edu> Message-ID: <4AE94F33.7141.0039.0@kckps.org> Try it on a test machine. Set your scripts to run when off line, recon the machine, then disconnect it from your network and see if the scripts still run. Also, check your framework settings and make sure it is getting enforced at start up. -Tom >>> Baker Franke 10/29/09 8:08 AM >>> I have an ongoing login policy that I want to be available offline. We've had a few issues where the casper server has gone down and that renders my computer lab virtually unusable as login takes about 5 minutes while the connections to the JSS time out. The login policy just runs a shell script that makes sure some symlinks and permissions are set for the network user (LDAP) logging in. The policy plan reads: This policy is set to Ongoing This policy is triggered by login This policy will be made available offline This policy is assigned to 2 computer groups Run Script UH202login_v8.sh But the "avialable offline" part does not seem to be sticking. When the JSS is unavailable (like yesterday when the server room flooded, yikes!) The logs show failed connections to the JSS on login. Eventually it times out, and the script never runs. Is there something else hiding that I don't know about? What should I look for? Thanks, -Baker Baker Franke Computer Science Dept. University of Chicago Laboratory Schools 773.702.5419 _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From CMyers at uclan.ac.uk Thu Oct 29 06:59:58 2009 From: CMyers at uclan.ac.uk (Criss Myers) Date: Thu, 29 Oct 2009 13:59:58 +0000 Subject: [Casper] removing welcome to safari splash screen In-Reply-To: References: Message-ID: <4AE99FDE.BB96.0081.0@uclan.ac.uk> well i use a managed preference in my OD Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> "jorge a. najera-ordonez" 10/29/09 1:07 PM >>> has anyone had success removing the welcome to safari screen that opens up when you first open safari. we rebuild accounts from the user template whenever someone logs off and every time someone logs back in the welcome screen pops up when they launch safari and then the top sites page. ideally we would like the home page we have set be what shows first. the only thing i thought might be it was a LastSessions.plist but that doesnt seem to be it. thanks jorge a. najera-ordonez _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From ERNSTCS at uwec.edu Thu Oct 29 07:09:17 2009 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Thu, 29 Oct 2009 09:09:17 -0500 Subject: [Casper] removing welcome to safari splash screen In-Reply-To: <4AE99FDE.BB96.0081.0@uclan.ac.uk> Message-ID: Since I am currently not using managed preferences I have a package with the files for Safari. This works fine in our labs since each user gets a new profile when they login. For offices we didn?t bother. =) Just did a standard snapshot before and after launching Safari. Probably don?t need all of these files... Files are in: /Users//Preferences/ * com.apple.Safari.plist * com.apple.Safari.RSS.plist /Users//Safari/ * Bookmarks.plist * History.plist * HistoryIndex.sk * LastSession.plist * TopSites.plist * WebpageIcons.db Craig E On 10/29/09 8:59 AM, "Criss Myers" wrote: well i use a managed preference in my OD Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> "jorge a. najera-ordonez" 10/29/09 1:07 PM >>> has anyone had success removing the welcome to safari screen that opens up when you first open safari. we rebuild accounts from the user template whenever someone logs off and every time someone logs back in the welcome screen pops up when they launch safari and then the top sites page. ideally we would like the home page we have set be what shows first. the only thing i thought might be it was a LastSessions.plist but that doesnt seem to be it. thanks jorge a. najera-ordonez _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From abenedict at integer.com Thu Oct 29 07:28:24 2009 From: abenedict at integer.com (Alan Benedict) Date: Thu, 29 Oct 2009 09:28:24 -0500 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: <4AE98132.BB96.0081.0@uclan.ac.uk> References: <4b4190f00910290424ob9c469cqc7e67c935788ff4@mail.gmail.com> <4AE98132.BB96.0081.0@uclan.ac.uk> Message-ID: <5fe906620910290728n3ea9d4dfp4c4c702d78618776@mail.gmail.com> Along these same lines, does anyone have any suggestions for updating acrobat? I don't know why Adobe doesn't make the Acrobat updates deployable like the other CS updates. -- Alan Benedict ? Macintosh Technician The Integer Group O: 515-247-2738 C: 515-770-8234 http://www.integer.com On Thu, Oct 29, 2009 at 6:49 AM, Criss Myers wrote: > I deploy the Casper way by adding the dmg's into Casper admin and > scanning for adobe packages, then i install at first run and also have a > self service policy to install as per users discretion > > Worked fine for CS3 and CS4 > > Criss > > > > Criss Myers > Senior Customer Support Analyst (Mac Services) > Apple Certified Technical Coordinator v10.5 > LIS Business Support Team > Library 301 > University of Central Lancashire > Preston PR1 2HE > Ex 5054 > 01772 895054 > > >>> ken edgar 10/29/09 11:24 AM >>> > > Hello, > > What is the best way to package or distribute Adobe CS3 and/or CS4? I have > run into many problems trying to re-package with Composer. I've also had > problems in the past with editing the installer using Adobe's instructions. > How do you guys do it, and do you have any problems afterwards? > > Some of the problems I've had: > > > - > > Composer package > - > > Acrobat and distiller missing items in menus > - > > Crashing of various applications > - > > Acrobat and Distiller auto-repair issues > - > > Modified Adobe installer image > - > > Sometimes does not install exiting with an error for no particular > reason > - > > Most likely need to create a post script to clean up fonts after > install > - > > Still need to manually launch the apps including Acrobat in order to > create the pdf printer and other plug-ins > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > -------------- next part -------------- An HTML attachment was scrubbed... URL: From ERNSTCS at uwec.edu Thu Oct 29 07:34:12 2009 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Thu, 29 Oct 2009 09:34:12 -0500 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: <5fe906620910290728n3ea9d4dfp4c4c702d78618776@mail.gmail.com> Message-ID: As part of my Adobe install process, which I said I?d get steps out a long time ago (sorry, might start having time this Nov), I actually have a standard composer package of the update. Now on 9.1.3. So I basically install the base from my DMGs (as others do and have mentioned) and then I launch the application, make a beginning snapshot with composer, use the check for updates option within Acrobat to tie it into Adobe Updater (not necessary, but a lazy way to do it without downloading the updates from the website), install the updates, launch Acrobat, then take a differential snapshot and use that package last to lay over top. Only way I?ve been able to do it since the Acrobat, do this for Reader as well, Pro stuff is NOT part of the standard updates design and can?t be pushed out with the JSS...at least to my knowledge. Craig E On 10/29/09 9:28 AM, "Alan Benedict" wrote: Along these same lines, does anyone have any suggestions for updating acrobat? I don't know why Adobe doesn't make the Acrobat updates deployable like the other CS updates. -- Alan Benedict ? Macintosh Technician The Integer Group O: 515-247-2738 C: 515-770-8234 http://www.integer.com On Thu, Oct 29, 2009 at 6:49 AM, Criss Myers wrote: I deploy the Casper way by adding the dmg's into Casper admin and scanning for adobe packages, then i install at first run and also have a self service policy to install as per users discretion Worked fine for CS3 and CS4 Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> ken edgar 10/29/09 11:24 AM >>> Hello, What is the best way to package or distribute Adobe CS3 and/or CS4? I have run into many problems trying to re-package with Composer. I've also had problems in the past with editing the installer using Adobe's instructions. How do you guys do it, and do you have any problems afterwards? Some of the problems I've had: * * * Composer package * * * * Acrobat and distiller missing items in menus * * * * Crashing of various applications * * * * Acrobat and Distiller auto-repair issues * * * * Modified Adobe installer image * * * * Sometimes does not install exiting with an error for no particular reason * * * * Most likely need to create a post script to clean up fonts after install * * * * Still need to manually launch the apps including Acrobat in order to create the pdf printer and other plug-ins * * _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From ken.edgar at gmail.com Thu Oct 29 07:41:17 2009 From: ken.edgar at gmail.com (Kenneth Edgar) Date: Thu, 29 Oct 2009 09:41:17 -0500 Subject: [Casper] removing welcome to safari splash screen In-Reply-To: Message-ID: You may be able to get away with just writing a script to touch those files... I would assume it is similar to disabling the registration when creating an image with InstaDMG. The other thing you can do is to edit the new user template. From: "Ernst, Craig S." Date: Thu, 29 Oct 2009 09:09:17 -0500 To: Criss Myers , Casper List , "jorge a. najera-ordonez" Subject: Re: [Casper] removing welcome to safari splash screen Since I am currently not using managed preferences I have a package with the files for Safari. This works fine in our labs since each user gets a new profile when they login. For offices we didn?t bother. =) Just did a standard snapshot before and after launching Safari. Probably don?t need all of these files... Files are in: /Users//Preferences/ * com.apple.Safari.plist * com.apple.Safari.RSS.plist /Users//Safari/ * Bookmarks.plist * History.plist * HistoryIndex.sk * LastSession.plist * TopSites.plist * WebpageIcons.db Craig E On 10/29/09 8:59 AM, "Criss Myers" wrote: > > > well i use a managed preference in my OD > > > Criss Myers > > Senior Customer Support Analyst (Mac Services) > > Apple Certified Technical Coordinator v10.5 > > LIS Business Support Team > > Library 301 > > University of Central Lancashire > > Preston PR1 2HE > > Ex 5054 > > 01772 895054 > >>>> >>> "jorge a. najera-ordonez" 10/29/09 1:07 PM >>> > has anyone had success removing the welcome to safari screen that > opens up when you first open safari. we rebuild accounts from the user > template whenever someone logs off and every time someone logs back in > the welcome screen pops up when they launch safari and then the top > sites page. ideally we would like the home page we have set be what > shows first. the only thing i thought might be it was a > LastSessions.plist but that doesnt seem to be it. thanks > > jorge a. najera-ordonez > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From jared.nichols at ll.mit.edu Thu Oct 29 07:26:32 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Thu, 29 Oct 2009 10:26:32 -0400 Subject: [Casper] Casper Admin 7 Dock Icons Message-ID: <648B68F7-AAA5-4BD3-8FA6-E68BCF28322A@ll.mit.edu> Hi- I'm trying to add dock icons to a configuration in Admin 7 but can't seem to get them to drop onto the config. Am I just doing something wrong? --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 -------------- next part -------------- An HTML attachment was scrubbed... URL: From dderusha at schawk.com Thu Oct 29 07:49:38 2009 From: dderusha at schawk.com (Dan DeRusha) Date: Thu, 29 Oct 2009 09:49:38 -0500 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: References: Message-ID: We tried the Composer snapshot before and after and somehow it missed some items in the contents of Adobe Acrobat Pro.app. We tested this package and you could not interact with PDF forms. As soon as you would try and click in a field it would error. Went back to the mac that made this image and received the same result. We first installed the CS4 standard suite and ran all updates. Next we ran composer, installed acrobat updates and ran composer again. This package failed. I ended up using the before and after snapshot that failed - Deleted the Adobe Acrobat Pro directory located in applications - went to a working version of 9.1.3 and copied that adobe acrobat pro directory into the composer sources directory. Recompiled and we were back in business. We were surprised that it did not break anything in CS4. Dan On Oct 29, 2009, at 9:34 AM, Ernst, Craig S. wrote: > As part of my Adobe install process, which I said I?d get steps out > a long time ago (sorry, might start having time this Nov), I > actually have a standard composer package of the update. Now on 9.1.3. > > So I basically install the base from my DMGs (as others do and have > mentioned) and then I launch the application, make a beginning > snapshot with composer, use the check for updates option within > Acrobat to tie it into Adobe Updater (not necessary, but a lazy way > to do it without downloading the updates from the website), install > the updates, launch Acrobat, then take a differential snapshot and > use that package last to lay over top. > > Only way I?ve been able to do it since the Acrobat, do this for > Reader as well, Pro stuff is NOT part of the standard updates design > and can?t be pushed out with the JSS...at least to my knowledge. > > Craig E > > On 10/29/09 9:28 AM, "Alan Benedict" wrote: > >> Along these same lines, does anyone have any suggestions for >> updating acrobat? I don't know why Adobe doesn't make the Acrobat >> updates deployable like the other CS updates. >> >> -- >> Alan Benedict >> ? >> Macintosh Technician >> The Integer Group >> O: 515-247-2738 >> C: 515-770-8234 >> http://www.integer.com >> >> >> >> >> >> >> On Thu, Oct 29, 2009 at 6:49 AM, Criss Myers >> wrote: >>> >>> >>> >>> I deploy the Casper way by adding the dmg's into Casper admin and >>> scanning for adobe packages, then i install at first run and also >>> have a self service policy to install as per users discretion >>> >>> >>> >>> Worked fine for CS3 and CS4 >>> >>> >>> >>> Criss >>> >>> >>> >>> >>> Criss Myers >>> Senior Customer Support Analyst (Mac Services) >>> Apple Certified Technical Coordinator v10.5 >>> LIS Business Support Team >>> Library 301 >>> University of Central Lancashire >>> Preston PR1 2HE >>> Ex 5054 >>> 01772 895054 >>> >>> >>> ken edgar 10/29/09 11:24 AM >>> >>> >>> Hello, >>> >>> What is the best way to package or distribute Adobe CS3 and/or >>> CS4? I have run into many problems trying to re-package with >>> Composer. I've also had problems in the past with editing the >>> installer using Adobe's instructions. How do you guys do it, and >>> do you have any problems afterwards? >>> >>> Some of the problems I've had: >>> >>> >>> Composer package >>> >>> Acrobat and distiller missing items in menus >>> Crashing of various applications >>> Acrobat and Distiller auto-repair issues >>> >>> Modified Adobe installer image >>> >>> Sometimes does not install exiting with an error for no particular >>> reason >>> Most likely need to create a post script to clean up fonts after >>> install >>> Still need to manually launch the apps including Acrobat in order >>> to create the pdf printer and other plug-ins >>> >>> >>> >>> >>> >>> >>> >>> >>> _______________________________________________ >>> Casper mailing list >>> Casper at list.jamfsoftware.com >>> http://list.jamfsoftware.com/mailman/listinfo/casper >>> >> >> > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Thu Oct 29 07:52:47 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 29 Oct 2009 09:52:47 -0500 Subject: [Casper] Casper Admin 7 Dock Icons In-Reply-To: <648B68F7-AAA5-4BD3-8FA6-E68BCF28322A@ll.mit.edu> References: <648B68F7-AAA5-4BD3-8FA6-E68BCF28322A@ll.mit.edu> Message-ID: <4AE965EF.7141.0039.0@kckps.org> You run Casper admin and add the dock item from your dock. Make sure it is on your dock and then use Casper Admin to add it. Then you can scope out policy for it. >>> "Nichols, Jared - 1160 - MITLL" 10/29/09 9:26 AM >>> Hi- I'm trying to add dock icons to a configuration in Admin 7 but can't seem to get them to drop onto the config. Am I just doing something wrong? --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 -------------- next part -------------- An HTML attachment was scrubbed... URL: From swood at integer.com Thu Oct 29 08:21:39 2009 From: swood at integer.com (Steve Wood) Date: Thu, 29 Oct 2009 10:21:39 -0500 Subject: [Casper] OFF TOPIC - 10.6 SL Server, is it worth the upgrade? Message-ID: <438f5a310910290821g52649bc9qb1b928dfb24004dc@mail.gmail.com> Looking for opinions on upgrading from 10.5 Server to 10.6 Server. Not just from a Casper standpoint, but from an all around performance gain, etc, standpoint. Who has done the upgrade and is it worth it? We mainly use AFP, OD, DNS, DHCP, Netboot, and some web on our servers. Thoughts? Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 -------------- next part -------------- An HTML attachment was scrubbed... URL: From CMyers at uclan.ac.uk Thu Oct 29 08:27:35 2009 From: CMyers at uclan.ac.uk (Criss Myers) Date: Thu, 29 Oct 2009 15:27:35 +0000 Subject: [Casper] OFF TOPIC - 10.6 SL Server, is it worth the upgrade? In-Reply-To: <438f5a310910290821g52649bc9qb1b928dfb24004dc@mail.gmail.com> References: <438f5a310910290821g52649bc9qb1b928dfb24004dc@mail.gmail.com> Message-ID: <4AE9B467.BB96.0081.0@uclan.ac.uk> Well personally ,and AFAIK it is apple's advice too, not to upgrade to an os version till it is at least at .4, so for Snow Leopard 10.6.4 I would never upgrade a live server till 10.x.4 plus i would always test in a lab. There are plenty of issues with snow leopard client and no doubt plenty with server as well, but thats just my view Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> Steve Wood 10/29/09 3:21 PM >>> Looking for opinions on upgrading from 10.5 Server to 10.6 Server. Not just from a Casper standpoint, but from an all around performance gain, etc, standpoint. Who has done the upgrade and is it worth it? We mainly use AFP, OD, DNS, DHCP, Netboot, and some web on our servers. Thoughts? Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Thu Oct 29 08:32:06 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 29 Oct 2009 10:32:06 -0500 Subject: [Casper] OFF TOPIC - 10.6 SL Server, is it worth the upgrade? In-Reply-To: <4AE9B467.BB96.0081.0@uclan.ac.uk> References: <438f5a310910290821g52649bc9qb1b928dfb24004dc@mail.gmail.com> <4AE9B467.BB96.0081.0@uclan.ac.uk> Message-ID: <4AE96F26.7141.0039.0@kckps.org> We upgraded two years ago to 10.5.3 and it had a plethora of problems. So, did 10.5.4. In fact our issues weren't fixed until 10.5.5. I would plan all purchases around what OS the hardware can run so you aren't forced into any kind of upgrades. I have a new iMac on my bench for example that will image with my 10.5.7 image, however if I try to do a compiled install of a pristine image of 10.5.0 and 10.5.8 combo updater it fails. Not sure where the issue is because I know my 10.5.0 Leopard DVD will not boot this Mac, but the 10.5.7 image works. The problem is, I want to build a new image and use pristine installs and package based deployment now so I am slowly switching it over. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> "Criss Myers" 10/29/09 10:27 AM >>> Well personally ,and AFAIK it is apple's advice too, not to upgrade to an os version till it is at least at .4, so for Snow Leopard 10.6.4 I would never upgrade a live server till 10.x.4 plus i would always test in a lab. There are plenty of issues with snow leopard client and no doubt plenty with server as well, but thats just my view Criss Criss Myers Senior Customer Support Analyst (Mac Services) Apple Certified Technical Coordinator v10.5 LIS Business Support Team Library 301 University of Central Lancashire Preston PR1 2HE Ex 5054 01772 895054 >>> Steve Wood 10/29/09 3:21 PM >>> Looking for opinions on upgrading from 10.5 Server to 10.6 Server. Not just from a Casper standpoint, but from an all around performance gain, etc, standpoint. Who has done the upgrade and is it worth it? We mainly use AFP, OD, DNS, DHCP, Netboot, and some web on our servers. Thoughts? Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Thu Oct 29 09:39:59 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 29 Oct 2009 11:39:59 -0500 Subject: [Casper] [BULK] Re: Casper 7.1 OS Image Building In-Reply-To: References: Message-ID: <4AE97F0F.7141.0039.0@kckps.org> I got my pristine install to work, as well as the 10.5.8 combo updater, and now I am going on to looking at including updates. Does apple actually allow for individual downloads of every update? The packages I can compile I can update those when creating the packages, like iLife 09 and such. How are you all doing it? >>> "Bob Feldhake" 10/26/09 9:44 AM >>> -----Original Message----- From: Bob Feldhake Sent: Monday, October 26, 2009 9:20 AM To: 'Don Montalvo' Subject: RE: [Casper] [BULK] Re: Casper 7.1 OS Image Building You know, I'm not 100% sure on the backwards-compatibility. I haven't tried testing to see if you can check that box on a 10.5 image when you're running 10.6...If you test that out let me know how it works! I just know it doesn't work the other way around. I've got two separate machines at my desk, but I plan to consolidate to 1 with two different partitions... Bob -----Original Message----- From: Don Montalvo [mailto:donmontalvo at gmail.com] Sent: Monday, October 26, 2009 9:14 AM To: Bob Feldhake Cc: Steve Wood; Thomas Larkin; casper at list.jamfsoftware.com Subject: Re: [Casper] [BULK] Re: Casper 7.1 OS Image Building Curious, does this mean Casper needs different admin computers to create images for 10.5.x and 10.6.x? Don On Oct 26, 2009, at 7:53 AM, Bob Feldhake wrote: > That is known to be the case?to click that checkbox, you have to be > running the same 10.X as the disk you?re trying to set as a Mac OS X > Installer. I?m guessing the 10.6.2 didn?t work because it?s still in > beta and they haven?t added support for it yet. > > On another note, after checking that box, you have the option of > creating multiple OS copies off of that initial image, for adding > different drivers and whatnot. Though, I have had absolutely no luck > in putting one of the copies into a configuration, unless you plan on > re-compiling with every change. If you try to leave the config un- > compiled to do a package based install, it will skip over the OS every > single time. > > Bob > > From: casper-bounces at list.jamfsoftware.com [mailto:casper- > bounces at list.jamfsoftware.com] On Behalf Of Steve Wood > Sent: Friday, October 23, 2009 3:14 PM > To: Thomas Larkin > Cc: Don Montalvo; casper at list.jamfsoftware.com > Subject: Re: [Casper] [BULK] Re: Casper 7.1 OS Image Building > > So, interesting thing happened on the way to the image..... > > I tried using my machine to set the "Mac OS X Installer" flag in > Casper Admin, but it would not let me. Complained that the installer > could not be run on my system. Now my machine is running > 10.6.2 (latest dev build of the beta) and the disc that I was trying > to use was a 10.6 disc. > > So, I tried on a system running 10.5.7, but still received the no go. > So on a hunch I installed the 10.6 installer onto my external hard > drive and lo and behold I was able to open the image as an OS X > Installer in Casper Admin. > > Can anyone else confirm this? Do we only have the ability to open > images for the same level OS as the machine you are on? > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T > 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > On Fri, Oct 23, 2009 at 12:28 PM, Thomas Larkin > wrote: > I am complaining my newest one right now, so hopefully it works. My > 10.5.7 image on the new iMac works but I don't want that image on > there, I want to do package based and then make comps for specific > usage. > > >>> Alan Benedict 10/23/09 11:57 AM >>> > > Once you make an image from the installer disk, there is no need to > mount it and take an OS snapshot. All you need to do is drop the image > of the installer disk into the Casper Admin and check the box that it > is an OS X installer. > > My image came from a Mac Pro that has the highest build for any of our > Macs. I also have dropped the 10.> The one thing I have noticed is, if I try and image from that config > that has the installer, it will lock up sometime during the install. > If I compile the image first, it works every time. > > -- > Alan Benedict > ? > Macintosh Technician > The Integer Group > O: 515-247-2738 > C: 515-770-8234 > http://www.integer.com > > > > > On Fri, Oct 23, 2009 at 10:41 AM, Thomas Larkin > wrote: > Here is my issue.... > > I took a 10.5.0 retail DVD and made an image of it. I then mounted it > and took a OS snap shot with Composer. I am testing this now, but > previously I had just dropped the image into Casper Admin and told CA > that it was an OS X installer. It gave me the options to create an > install and when it block copies to the iMac, it just block copies the > actual image. It doesn't lay down the OS installed. Now I also told it > to install the 10.5.8 combo update as well, which it doesn't seem to > do that either. I am currently playing with it, and will post back > when I figure out how to get it done. > > How do you guys deploy updates? I was thinking I may have to convert > an update to source and then compile it with my OS image to create a > 10.5.8 base image? > > Thanks > > Tom > > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > > >>> Don Montalvo 10/23/09 9:27 AM >>> > > > Steve Wood wrote: > > > Okay, I thought I heard that Casper 7.1 allowed for a "build train" > > like > > InstaDMG uses for building OS install images. I know I heard Josh > > Wisenbaker mention it Tuesday at an Apple Enterprise event here in > > Dallas, however I am having a difficult time figuring out how it > > works. > > > > Does anyone know how to use this feature in Casper 7? > > > > I thought the process was to add the DVD image of your OS, whether > the > > Retail DVD or a Drop In box DVD that comes with machines, into > > Casper Admin and then build a configuration. However, that didn't > > work for me. > > > > I'm looking for the same functionality of InstaDMG. > > > > Anyone? > > > > Thanks. > > > > Steve Wood > > Director of IT > > swood at integer.com > > Hi Steve, > > First, thanks for your recent demo of Casper at your office in Dallas. > It was comforting to see InstaDMG working along side Casper. You > demonstrated reimaging a Mac, where the process included automagically > layering on CS4 (Adobe's Silent Install). The time and effort are > greatly appreciated. If there are any other shops in the Dallas (DFW) > area, I'd love to see how you're using it in your environment > (breakfast or lunch is on me!). :) > > I'm heading to west coast to meet our front end guys who bought Casper > for this client to review the strategy for this client. I'm holding to > my InstaDMG workflow until Casper's imaging toolset achieves feature > parity. InstaDMG has a workflow that satisfies a lot of the process > requirements for us. Hopefully that'll be soon, since I have to ramp > up for image production for all our clients from here at our back > office location. JAMF are helping us to develop a strategy for multi- > tiered support model. > > In conversations with some Casper and InstaDMG users, the consensus > was that Casper Imaging and even Apple's System Image Utility in 10.6 > are not yet at the level of the InstaDMG workflow. Hopefully JAMF will > add in all the InstaDMG flexibility and controls, so we can lay > InstaDMG down to rest. JAMF certainly backs up their product with firm > commitments and resources. > > Thanks, > Don > > Don Montalvo > Dallas, TX > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > h> Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From bob.feldhake.pyb3 at statefarm.com Thu Oct 29 11:03:57 2009 From: bob.feldhake.pyb3 at statefarm.com (Bob Feldhake) Date: Thu, 29 Oct 2009 11:03:57 -0700 Subject: [Casper] [BULK] Re: Casper 7.1 OS Image Building In-Reply-To: <4AE97F0F.7141.0039.0@kckps.org> References: <4AE97F0F.7141.0039.0@kckps.org> Message-ID: We just configured out JSS to point to our internal Software Update server, and either let users run updates themselves through a Self-Service policy, or we?ve got a policy that runs after work hours once a week/month (I don?t remember which right now) that installs any software updates available. From: Thomas Larkin [mailto:tlarki at kckps.org] Sent: Thursday, October 29, 2009 11:40 AM To: Don Montalvo; Bob Feldhake Cc: casper at list.jamfsoftware.com Subject: Re: [Casper] [BULK] Re: Casper 7.1 OS Image Building I got my pristine install to work, as well as the 10.5.8 combo updater, and now I am going on to looking at including updates. Does apple actually allow for individual downloads of every update? The packages I can compile I can update those when creating the packages, like iLife 09 and such. How are you all doing it? >>> "Bob Feldhake" 10/26/09 9:44 AM >>> -----Original Message----- From: Bob Feldhake Sent: Monday, October 26, 2009 9:20 AM To: 'Don Montalvo' Subject: RE: [Casper] [BULK] Re: Casper 7.1 OS Image Building You know, I'm not 100% sure on the backwards-compatibility. I haven't tried testing to see if you can check that box on a 10.5 image when you're running 10.6...If you test that out let me know how it works! I just know it doesn't work the other way around. I've got two separate machines at my desk, but I plan to consolidate to 1 with two different partitions... Bob -----Original Message----- From: Don Montalvo [mailto:donmontalvo at gmail.com] Sent: Monday, October 26, 2009 9:14 AM To: Bob Feldhake Cc: Steve Wood; Thomas Larkin; casper at list.jamfsoftware.com Subject: Re: [Casper] [BULK] Re: Casper 7.1 OS Image Building Curious, does this mean Casper needs different admin computers to create images for 10.5.x and 10.6.x? Don On Oct 26, 2009, at 7:53 AM, Bob Feldhake wrote: > That is known to be the case?to click that checkbox, you have to be > running the same 10.X as the disk you?re trying to set as a Mac OS X > Installer. I?m guessing the 10.6.2 didn?t work because it?s still in > beta and they haven?t added support for it yet. > > On another note, after checking that box, you have the option of > creating multiple OS copies off of that initial image, for adding > different drivers and whatnot. Though, I have had absolutely no luck > in putting one of the copies into a configuration, unless you plan on > re-compiling with every change. If you try to leave the config un- > compiled to do a package based install, it will skip over the OS every > single time. > > Bob > > From: casper-bounces at list.jamfsoftware.com [mailto:casper- > bounces at list.jamfsoftware.com] On Behalf Of Steve Wood > Sent: Friday, October 23, 2009 3:14 PM > To: Thomas Larkin > Cc: Don Montalvo; casper at list.jamfsoftware.com > Subject: Re: [Casper] [BULK] Re: Casper 7.1 OS Image Building > > So, interesting thing happened on the way to the image..... > > I tried using my machine to set the "Mac OS X Installer" flag in > Casper Admin, but it would not let me. Complained that the installer > could not be run on my system. Now my machine is running > 10.6.2 (latest dev build of the beta) and the disc that I was trying > to use was a 10.6 disc. > > So, I tried on a system running 10.5.7, but still received the no go. > So on a hunch I installed the 10.6 installer onto my external hard > drive and lo and behold I was able to open the image as an OS X > Installer in Casper Admin. > > Can anyone else confirm this? Do we only have the ability to open > images for the same level OS as the machine you are on? > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T > 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > On Fri, Oct 23, 2009 at 12:28 PM, Thomas Larkin > wrote: > I am complaining my newest one right now, so hopefully it works. My > 10.5.7 image on the new iMac works but I don't want that image on > there, I want to do package based and then make comps for specific > usage. > > >>> Alan Benedict 10/23/09 11:57 AM >>> > > Once you make an image from the installer disk, there is no need to > mount it and take an OS snapshot. All you need to do is drop the image > of the installer disk into the Casper Admin and check the box that it > is an OS X installer. > > My image came from a Mac Pro that has the highest build for any of our > Macs. I also have dropped the 10.5.8 combo updater into the admin and > made that part of the configuration. > > The one thing I have noticed is, if I try and image from that config > that has the installer, it will lock up sometime during the install. > If I compile the image first, it works every time. > > -- > Alan Benedict > ? > Macintosh Technician > The Integer Group > O: 515-247-2738 > C: 515-770-8234 > http://www.integer.com > > > > > On Fri, Oct 23, 2009 at 10:41 AM, Thomas Larkin > wrote: > Here is my issue.... > > I took a 10.5.0 retail DVD and made an image of it. I then mounted it > and took a OS snap shot with Composer. I am testing this now, but > previously I had just dropped the image into Casper Admin and told CA > that it was an OS X installer. It gave me the options to create an > install and when it block copies to the iMac, it just block copies the > actual image. It doesn't lay down the OS installed. Now I also told it > to install the 10.5.8 combo update as well, which it doesn't seem to > do that either. I am currently playing with it, and will post back > when I figure out how to get it done. > > How do you guys deploy updates? I was thinking I may have to convert > an update to source and then compile it with my OS image to create a > 10.5.8 base image? > > Thanks > > Tom > > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > > >>> Don Montalvo 10/23/09 9:27 AM >>> > > > Steve Wood wrote: > > > Okay, I thought I heard that Casper 7.1 allowed for a "build train" > > like > > InstaDMG uses for building OS install images. I know I heard Josh > > Wisenbaker mention it Tuesday at an Apple Enterprise event here in > > Dallas, however I am having a difficult time figuring out how it > > works. > > > > Does anyone know how to use this feature in Casper 7? > > > > I thought the process was to add the DVD image of your OS, whether > the > > Retail DVD or a Drop In box DVD that comes with machines, into > > Casper Admin and then build a configuration. However, that didn't > > work for me. > > > > I'm looking for the same functionality of InstaDMG. > > > > Anyone? > > > > Thanks. > > > > Steve Wood > > Director of IT > > swood at integer.com > > Hi Steve, > > First, thanks for your recent demo of Casper at your office in Dallas. > It was comforting to see InstaDMG working along side Casper. You > demonstrated reimaging a Mac, where the process included automagically > layering on CS4 (Adobe's Silent Install). The time and effort are > greatly appreciated. If there are any other shops in the Dallas (DFW) > area, I'd love to see how you're using it in your environment > (breakfast or lunch is on me!). :) > > I'm heading to west coast to meet our front end guys who bought Casper > for this client to review the strategy for this client. I'm holding to > my InstaDMG workflow until Casper's imaging toolset achieves feature > parity. InstaDMG has a workflow that satisfies a lot of the process > requirements for us. Hopefully that'll be soon, since I have to ramp > up for image production for all our clients from here at our back > office location. JAMF are helping us to develop a strategy for multi- > tiered support model. > > In conversations with some Casper and InstaDMG users, the consensus > was that Casper Imaging and even Apple's System Image Utility in 10.6 > are not yet at the level of the InstaDMG workflow. Hopefully JAMF will > add in all the InstaDMG flexibility and controls, so we can lay > InstaDMG down to rest. JAMF certainly backs up their product with firm > commitments and resources. > > Thanks, > Don > > Don Montalvo > Dallas, TX > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Thu Oct 29 11:19:01 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 29 Oct 2009 13:19:01 -0500 Subject: [Casper] [BULK] RE: [BULK] Re: Casper 7.1 OS Image Building In-Reply-To: References: <4AE97F0F.7141.0039.0@kckps.org> Message-ID: <4AE99645.7141.0039.0@kckps.org> I am downloading them individually, getting the PKG and will compile them into a base configuration. We have so many users online all day during school that pushing out updates while they are here would be very hard. Our bandwidth is typically at maximum capacity. I want to pack as much as I can in the image and then do incremental updates (like say a new version of iTunes) over self service. ___________________________ Thomas Larkin TIS Department KCKPS USD500 tlarki at kckps.org blackberry: 913-449-7589 office: 913-627-0351 chown -R us /.base >>> "Bob Feldhake" 10/29/09 1:03 PM >>> We just configured out JSS to point to our internal Software Update server, and either let users run updates themselves through a Self-Service policy, or we?ve got a policy that runs after work hours once a week/month (I don?t remember which right now) that installs any software updates available. From: Thomas Larkin [mailto:tlarki at kckps.org] Sent: Thursday, October 29, 2009 11:40 AM To: Don Montalvo; Bob Feldhake Cc: casper at list.jamfsoftware.com Subject: Re: [Casper] [BULK] Re: Casper 7.1 OS Image Building I got my pristine install to work, as well as the 10.5.8 combo updater, and now I am going on to looking at including updates. Does apple actually allow for individual downloads of every update? The packages I can compile I can update those when creating the packages, like iLife 09 and such. How are you all doing it? >>> "Bob Feldhake" 10/26/09 9:44 AM >>> -----Original Message----- From: Bob Feldhake Sent: Monday, October 26, 2009 9:20 AM To: 'Don Montalvo' Subject: RE: [Casper] [BULK] Re: Casper 7.1 OS Image Building You know, I'm not 100% sure on the backwards-compatibility. I haven't tried testing to see if you can check that box on a 10.5 image when you're running 10.6...If you test that out let me know how it works! I just know it doesn't work the other way around. I've got two separate machines at my desk, but I plan to consolidate to 1 with two different partitions... Bob -----Original Message----- From: Don Montalvo [mailto:donmontalvo at gmail.com] Sent: Monday, October 26, 2009 9:14 AM To: Bob Feldhake Cc: Steve Wood; Thomas Larkin; casper at list.jamfsoftware.com Subject: Re: [Casper] [BULK] Re: Casper 7.1 OS Image Building Curious, does this mean Casper needs different admin computers to create images for 10.5.x and 10.6.x? Don On Oct 26, 2009, at 7:53 AM, Bob Feldhake wrote: > That is known to be the case?to click that checkbox, you have to be > running the same 10.X as the disk you?re trying to set as a Mac OS X > Installer. I?m guessing the 10.6.2 didn?t work because it?s still in > beta and they haven?t added support for it yet. > > On another note, after checking that box, you have the option of > creating multiple OS copies off of that initial image, for adding > different drivers and whatnot. Though, I have had absolutely no luck > in putting one of the copies into a configuration, unless you plan on > re-compiling with every change. If you try to leave the config un- > compiled to do a package based install, it will skip over the OS every > single time. > > Bob > > From: casper-bounces at list.jamfsoftware.com [mailto:casper- > bounces at list.jamfsoftware.com] On Behalf Of Steve Wood > Sent: Friday, October 23, 2009 3:14 PM > To: Thomas Larkin > Cc: Don Montalvo; casper at list.jamfsoftware.com > Subject: Re: [Casper] [BULK] Re: Casper 7.1 OS Image Building > > So, interesting thing happened on the way to the image..... > > I tried using my machine to set the "Mac OS X Installer" flag in > Casper Admin, but it would not let me. Complained that the installer > could not be run on my system. Now my machine is running > 10.6.2 (latest dev build of the beta) and the disc that I was trying > to use was a 10.6 disc. > > So, I tried on a system running 10.5.7, but still receive> drive and lo and behold I was able to open the image as an OS X > Installer in Casper Admin. > > Can anyone else confirm this? Do we only have the ability to open > images for the same level OS as the machine you are on? > > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T > 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > > On Fri, Oct 23, 2009 at 12:28 PM, Thomas Larkin > wrote: > I am complaining my newest one right now, so hopefully it works. My > 10.5.7 image on the new iMac works but I don't want that image on > there, I want to do package based and then make comps for specific > usage. > > >>> Alan Benedict 10/23/09 11:57 AM >>> > > Once you make an image from the installer disk, there is no need to > mount it and take an OS snapshot. All you need to do is drop the image > of the installer disk into the Casper Admin and check the box that it > is an OS X installer. > > My image came from a Mac Pro that has the highest build for any of our > Macs. I also have dropped the 10.5.8 combo updater into the admin and > made that part of the configuration. > > The one thing I have noticed is, if I try and image from that config > that has the installer, it will lock up sometime during the install. > If I compile the image first, it works every time. > > -- > Alan Benedict > ? > Macintosh Technician > The Integer Group > O: 515-247-2738 > C: 515-770-8234 > http://www.integer.com > > > > > On Fri, Oct 23, 2009 at 10:41 AM, Thomas Larkin > wrote: > Here is my issue.... > > I took a 10.5.0 retail DVD and made an image of it. I then mounted it > and took a OS snap shot with Composer. I am testing this now, but > previously I had just dropped the image into Casper Admin and told CA > that it was an OS X installer. It gave me the options to create an > install and when it block copies to the iMac, it just block copies the > actual image. It doesn't lay down the OS installed. Now I also told it > to install the 10.5.8 combo update as well, which it doesn't seem to > do that either. I am currently playing with it, and will post back > when I figure out how to get it done. > > How do you guys deploy updates? I was thinking I may have to convert > an update to source and then compile it with my OS image to create a > 10.5.8 base image? > > Thanks > > Tom > > > > ___________________________ > Thomas Larkin > TIS Department > KCKPS USD500 > tlarki at kckps.org > blackberry: 913-449-7589 > office: 913-627-0351 > chown -R us /.base > > > > > > >>> Don Montalvo 10/23/09 9:27 AM >>> > > > Steve Wood wrote: > > > Okay, I thought I heard that Casper 7.1 allowed for a "build train" > > like > > InstaDMG uses for building OS install images. I know I heard Josh > > Wisenbaker mention it Tuesday at an Apple Enterprise event here in > > Dallas, however I am having a difficult time figuring out how it > > works. > > > > Does anyone know how to use this feature in Casper 7? > > > > I thought the process was to add the DVD image of your OS, whether > the > > Retail DVD or a Drop In box DVD that comes with machines, into > > Casper Admin and then build a configuration. However, that didn't > > work for me. > > > > I'm looking for the same functionality of InstaDMG. > > > > Anyone? > > > > Thanks. > > > > Steve Wood > > Director of IT > > swood at integer.com > > Hi Steve, > > First, thanks for your recent demo of Casper at your office in Dallas. > It was comforting to see InstaDMG working along side Casper. You > demonstrated reimaging a Mac, where the process included automagically > layering on CS4 (Adobe's Silent Install). The time and effort are > greatly appreciated. If there are any other shops in the Dallas (DFW) > area, I'd love to see how you're using it in your environment > (breakfast or lunch is on me!). :) > > I'm heading to west coast > my InstaDMG workflow until Casper's imaging toolset achieves feature > parity. InstaDMG has a workflow that satisfies a lot of the process > requirements for us. Hopefully that'll be soon, since I have to ramp > up for image production for all our clients from here at our back > office location. JAMF are helping us to develop a strategy for multi- > tiered support model. > > In conversations with some Casper and InstaDMG users, the consensus > was that Casper Imaging and even Apple's System Image Utility in 10.6 > are not yet at the level of the InstaDMG workflow. Hopefully JAMF will > add in all the InstaDMG flexibility and controls, so we can lay > InstaDMG down to rest. JAMF certainly backs up their product with firm > commitments and resources. > > Thanks, > Don > > Don Montalvo > Dallas, TX > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > > _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From donmontalvo at gmail.com Thu Oct 29 11:37:02 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Thu, 29 Oct 2009 11:37:02 -0700 Subject: [Casper] [BULK] Re: Casper 7.1 OS Image Building In-Reply-To: References: <4AE97F0F.7141.0039.0@kckps.org> Message-ID: Just curious, can Casper control what updates get applied to computers? For example, can a group of computers be scoped to get only iCal updates? Generally we run SUS internally (master SUS syncs to Apple, all other SUS sync to the master). We keep all checkboxes turned on in SUS. What if we wanted to update iCal for one group of computers, can that be controlled through Casper (scope, policy, etc.)? I guess it would work something like you would do in Terminal. Check what's available, then only apply what's defined by policy: softwareupdate --list softwareupdate --install Thanks, Don On Oct 29, 2009, at 11:03 AM, Bob Feldhake wrote: > We just configured out JSS to point to our internal Software Update > server, and either let users run updates themselves through a Self- > Service policy, or we?ve got a policy that runs after work hours > once a week/month (I don?t remember which right now) that installs > any software updates available. From jamespalmer at smsd.org Thu Oct 29 12:06:09 2009 From: jamespalmer at smsd.org (James Palmer) Date: Thu, 29 Oct 2009 14:06:09 -0500 Subject: [Casper] Lock Screen During Imaging Message-ID: I'm working on getting Casper Imaging setup and I'm looking for a way to lock down a station when imaging so that users can't interrupt the process or play with things while the process is happening. I'm using a netboot image to launch Casper Imaging right now but am open to other options. Has anyone devised a way to do this already? I'm thinking feature request about now. Thanks, JD Palmer Network Engineering Analyst II ACHDS, ACTC -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Thu Oct 29 12:30:18 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 29 Oct 2009 14:30:18 -0500 Subject: [Casper] Lock Screen During Imaging In-Reply-To: References: Message-ID: <4AE9A6FA.7141.0039.0@kckps.org> You can set the client machine to skip the configuration window and auto image once it netboots. That would not give anyone a chance to do anything when you tell it to image. >>> James Palmer 10/29/09 2:06 PM >>> I?m working on getting Casper Imaging setup and I?m looking for a way to lock down a station when imaging so that users can?t interrupt the process or play with things while the process is happening. I?m using a netboot image to launch Casper Imaging right now but am open to other options. Has anyone devised a way to do this already? I?m thinking feature request about now. Thanks, JD Palmer Network Engineering Analyst II ACHDS, ACTC -------------- next part -------------- An HTML attachment was scrubbed... URL: From jamespalmer at smsd.org Thu Oct 29 13:20:07 2009 From: jamespalmer at smsd.org (James Palmer) Date: Thu, 29 Oct 2009 15:20:07 -0500 Subject: [Casper] Lock Screen During Imaging In-Reply-To: <4AE9A6FA.7141.0039.0@kckps.org> References: <4AE9A6FA.7141.0039.0@kckps.org> Message-ID: You can set the client machine to skip the configuration window and auto image once it netboots. That would not give anyone a chance to do anything when you tell it to image. >>> James Palmer 10/29/09 2:06 PM >>> I?m working on getting Casper Imaging setup and I?m looking for a way to lock down a station when imaging so that users can?t interrupt the process or play with things while the process is happening. I?m using a netboot image to launch Casper Imaging right now but am open to other options. Has anyone devised a way to do this already? I?m thinking feature request about now. Well, we have it now where imaging starts automatically but you can open other applications and generally futz around with stuff while it?s imaging. I was using Deploy Studio before, where short of a hard power off the user couldn?t mess with anything, just watch the process tick away. The lockscreen.app is a good suggestion though. I?m not sure how I would launch that automatically upon booting though. - JD -------------- next part -------------- An HTML attachment was scrubbed... URL: From ddonegan at mitre.org Thu Oct 29 14:10:45 2009 From: ddonegan at mitre.org (Donegan, David) Date: Thu, 29 Oct 2009 17:10:45 -0400 Subject: [Casper] pulling data from Inventory? Message-ID: <3C6F21684E7C954193E6C7C4573B762703672B2B18@IMCMBX1.MITRE.ORG> Looking for a pointer to the Inventory database structure, and recommendations on the best way to pull out the data (to feed to other systems). Thanks, Dave -------------- next part -------------- An HTML attachment was scrubbed... URL: From tlarki at kckps.org Thu Oct 29 14:14:14 2009 From: tlarki at kckps.org (Thomas Larkin) Date: Thu, 29 Oct 2009 16:14:14 -0500 Subject: [Casper] pulling data from Inventory? In-Reply-To: <3C6F21684E7C954193E6C7C4573B762703672B2B18@IMCMBX1.MITRE.ORG> References: <3C6F21684E7C954193E6C7C4573B762703672B2B18@IMCMBX1.MITRE.ORG> Message-ID: <4AE9BF56.7141.0039.0@kckps.org> Email Jamf support they will give you the schematics of how their database works. They did for me when I was looking at pulling inventory data into our student check out system. >>> "Donegan, David" 10/29/09 4:10 PM >>> Looking for a pointer to the Inventory database structure, and recommendations on the best way to pull out the data (to feed to other systems). Thanks, Dave -------------- next part -------------- An HTML attachment was scrubbed... URL: From donmontalvo at gmail.com Thu Oct 29 14:34:18 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Thu, 29 Oct 2009 14:34:18 -0700 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: References: Message-ID: <87B0DC62-3107-4653-9164-D2E96628F877@gmail.com> "Criss Myers" wrote: > I deploy the Casper way by adding the dmg's into Casper admin and > scanning for adobe packages, then i install at first run and also > have a self service policy to install as per users discretion > > Worked fine for CS3 and CS4 > > Criss What's the strategy for deploying updates to the deployed CS3 and CS4 suites? Is it best practice to create a pkg? Or is it to run the Adobe Update app? On the later, is there a way for Casper to "Silently" run the Adobe Update app? If so, what about environments that have ISA proxy servers (that Adobe Update apps don't play well with)? Thanks, Don From swood at integer.com Thu Oct 29 15:05:36 2009 From: swood at integer.com (Steve Wood) Date: Thu, 29 Oct 2009 17:05:36 -0500 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: <87B0DC62-3107-4653-9164-D2E96628F877@gmail.com> References: <87B0DC62-3107-4653-9164-D2E96628F877@gmail.com> Message-ID: <438f5a310910291505v54ecf625p305de51207162d41@mail.gmail.com> There are a couple of strategies that can be employed: 1. Create a differential package using Composer of the updates - load CSx onto a machine, snap shot it, load the updates, create a diff package, then use the diff package for the updates. Then, whenever new updates come out, snap shot a computer that has CSx on it with your previous updates, lay down the new updates, then create a diff package for those. In Casper Admin you make sure that your CSx main package is set to a priority lower than your updates. Of course your updates need to be in priority order according to how they are created (i.e. CSxUpdate_April2009 would have a lower priority than CSxUpdate_October2009). 2. Add the Adobe update packages directly to Casper Admin, indicate they are Adobe updaters in Casper Admin, and then use a policy to push the updates out. I have had some problems (although this was back with Casper 5 or maybe 6) where some Adobe installers were not recognized. Hence I use strategy number 1. 3. Give your users admin permissions on their computers and let them run Adobe Updater. And of course, with option 1 and option 2 you can create Self Service policies that allow users to run the Adobe updates that you create when they have time. Steve Wood Director of IT swood at integer.com The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 T 214.758.6813 | F 214.758.6901 | C 940.312.2475 On Thu, Oct 29, 2009 at 4:34 PM, Don Montalvo wrote: > "Criss Myers" wrote: > > I deploy the Casper way by adding the dmg's into Casper admin and scanning >> for adobe packages, then i install at first run and also have a self service >> policy to install as per users discretion >> >> Worked fine for CS3 and CS4 >> >> Criss >> > > What's the strategy for deploying updates to the deployed CS3 and CS4 > suites? Is it best practice to create a pkg? > > Or is it to run the Adobe Update app? On the later, is there a way for > Casper to "Silently" run the Adobe Update app? If so, what about > environments that have ISA proxy servers (that Adobe Update apps don't play > well with)? > > Thanks, > Don > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper > -------------- next part -------------- An HTML attachment was scrubbed... URL: From donmontalvo at gmail.com Thu Oct 29 18:41:18 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Thu, 29 Oct 2009 18:41:18 -0700 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: <438f5a310910291505v54ecf625p305de51207162d41@mail.gmail.com> References: <87B0DC62-3107-4653-9164-D2E96628F877@gmail.com> <438f5a310910291505v54ecf625p305de51207162d41@mail.gmail.com> Message-ID: <94F99D51-6D6B-43A6-8A86-D0E6EDDE935F@gmail.com> On Oct 29, 2009, at 3:05 PM, Steve Wood wrote: > There are a couple of strategies that can be employed: > > 1. Create a differential package using Composer of the updates - > load CSx onto a machine, snap shot it, load the updates, create a > diff package, then use the diff package for the updates. Then, > whenever new updates come out, snap shot a computer that has CSx on > it with your previous updates, lay down the new updates, then create > a diff package for those. In Casper Admin you make sure that your > CSx main package is set to a priority lower than your updates. Of > course your updates need to be in priority order according to how > they are created (i.e. CSxUpdate_April2009 would have a lower > priority than CSxUpdate_October2009). Has this been tested? There have been a ton of patches released for CS4 since its release, and the need for Silent Install for initial deployment of CS4 has me concerned about using traditional pkg'ing techniques for updates. Acrobat Pro 9 (a beast on its own, bundled with CS4) has had 6 updates so far: http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Macintosh The rest of CS4 has a ton of updates listed on this page: http://www.adobe.com/support/downloads/collection.jsp?collID=1&platform=Macintosh ...there are also Illustrator/Photoshop/Indesign updates that aren't listed in either of those two pages. > 2. Add the Adobe update packages directly to Casper Admin, indicate > they are Adobe updaters in Casper Admin, and then use a policy to > push the updates out. I have had some problems (although this was > back with Casper 5 or maybe 6) where some Adobe installers were not > recognized. Hence I use strategy number 1. OK, I see in page 285 of the Casper Suite 7.1 admin manual it explains: *Installing Adobe CS3/CS4 Updates* "The Casper Suite allows you to deploy Adobe CS3 or CS4 updates without repackaging them. Once Casper Admin identifies a DMG as an updater, it can be deployed like any other package using either a Policy or Casper Remote." It would seem like you'd need to pull into Casper a few dozen updates so they can each be pushed out individually. If this works, it's a winner to me (at least until they fire all of the Adobe installer developers responsible for this fiasco, and hire fresh blood who can give us proper pkg installers ). > 3. Give your users admin permissions on their computers and let > them run Adobe Updater. Unfortunately that isn't an option for our clients. In most environments that wouldn't be possible anyway because of the presence of authenticating proxy servers: http://kb2.adobe.com/cps/331/331931.html "The Adobe Update Manager currently does not support downloading updates from an authenticating proxy server. Customers who access the internet using an authenticating Proxy Server will need to download updates manually from the Adobe website." > And of course, with option 1 and option 2 you can create Self > Service policies that allow users to run the Adobe updates that you > create when they have time. Sounds like a good option for some shops. In the shops we support, we're trying to handle these kinds of things so there's no user interaction, as unintrusive as possible. Thanks again for the valuable feedback! Don > Steve Wood > Director of IT > swood at integer.com > > The Integer Group | 1999 Bryan St. | Ste. 1700 | Dallas, TX 75201 > T 214.758.6813 | F 214.758.6901 | C 940.312.2475 > > >> > On Thu, Oct 29, 2009 at 4:34 PM, Don Montalvo > wrote: > "Criss Myers" wrote: > >> I deploy the Casper way by adding the dmg's into Casper admin and >> scanning for adobe packages, then i install at first run and also >> have a self service policy to install as per users discretion >> >> Worked fine for CS3 and CS4 >> >> Criss >> >>> What's the strategy for deploying updates to the deployed CS3 and >>> CS4 suites? Is it best practice to create a pkg? >>> >>> Or is it to run the Adobe Update app? On the later, is there a way >>> for Casper to "Silently" run the Adobe Update app? If so, what >>> about environments that have ISA proxy servers (that Adobe Update >>> apps don't play well with)? >>> >>> Thanks, >>> Don From ERNSTCS at uwec.edu Thu Oct 29 18:59:54 2009 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Thu, 29 Oct 2009 20:59:54 -0500 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: <94F99D51-6D6B-43A6-8A86-D0E6EDDE935F@gmail.com> Message-ID: This absolutely works for the CS4 patches, just dropping the downloaded ones directly into the JSS. I use it as part of my install process. Just install your Adobe CS4 base, run Adobe Updater to download the updates, just don't install them, and put them into the JSS. I also make note of the order that the Adobe Updater wants to install the patches. A self-service policy to install CS4 performs a sequence of three different policies called by a script. As a self-service it's nice because the user is already logged in. - First Adobe CS4 Base installs - Second Adobe CS4 patches install - Lastly all of my traditional composer packages lay over top for Reader and Pro, installs PDF9 printer, and a recon cycle. This is my basic process for FirstRun as well except for all of the intricacies for making the patching part happen. What happens here is that a script at the end of FirstRun is triggered that calls a policy that adds a local user, installs an autologin package for that user, and then reboots the system. When the system reboots it auto logs on, a policy looking for that user is triggered to perform the patches and lay over packages. Since a user is logged in things are fairly reliable. At the end it removes the auto login stuff, installs a startup item, and reboots again. The startup item runs, deletes the user and home for patching, and runs a recon. Of course there are a myriad of scripts and policies for these two things to work, but it does work. I had some issues for a little while with my FirstRun install because a different policy was installing at FirstRun that required a reboot so it would reboot mid FirstRun and then it was a nasty loop since FirstRun never had the chance to delete itself. =) I really do hope I have time to get this all typed up in greater detail. Craig E On 10/29/09 8:41 PM, "Don Montalvo" wrote: > It would seem like you'd need to pull into Casper a few dozen updates > so they can each be pushed out individually. If this works, it's a > winner to me (at least until they fire all of the Adobe installer > developers responsible for this fiasco, and hire fresh blood who can > give us proper pkg installers ). From jared.nichols at ll.mit.edu Fri Oct 30 04:30:04 2009 From: jared.nichols at ll.mit.edu (Nichols, Jared - 1160 - MITLL) Date: Fri, 30 Oct 2009 07:30:04 -0400 Subject: [Casper] pulling data from Inventory? In-Reply-To: <3C6F21684E7C954193E6C7C4573B762703672B2B18@IMCMBX1.MITRE.ORG> References: <3C6F21684E7C954193E6C7C4573B762703672B2B18@IMCMBX1.MITRE.ORG> Message-ID: Hi- Jamf Support just sent me an article on doing this and I've done the same thing. http://jamfsoftware.com/kb/article.php?id=022 Use MySQL Query Browser to construct queries for your other system to use. j --- Jared F. Nichols Desktop Engineer, Infrastructure & Operations Information Services Department MIT Lincoln Laboratory 244 Wood Street Lexington, Massachusetts 02420 781.981.5436 On Oct 29, 2009, at 5:10 PM, Donegan, David wrote: Looking for a pointer to the Inventory database structure, and recommendations on the best way to pull out the data (to feed to other systems). Thanks, Dave _______________________________________________ Casper mailing list Casper at list.jamfsoftware.com http://list.jamfsoftware.com/mailman/listinfo/casper -------------- next part -------------- An HTML attachment was scrubbed... URL: From ERNSTCS at uwec.edu Fri Oct 30 06:39:54 2009 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Fri, 30 Oct 2009 08:39:54 -0500 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: Message-ID: The other thing that I forgot to mention was a feature request I put in regarding patching. I had asked for them to make an additional tab on your Adobe install where you select the applications to install and input your license code that had all the Adobe updaters listed, you could check them, and they would get applied immediately after the main Adobe install would run. This way the process is totally integrated into their processes. Good idea? Bad idea? Thoughts? Craig E On 10/29/09 8:59 PM, "Ernst, Craig S." wrote: > This absolutely works for the CS4 patches, just dropping the downloaded ones > directly into the JSS. I use it as part of my install process. > > Just install your Adobe CS4 base, run Adobe Updater to download the updates, > just don't install them, and put them into the JSS. I also make note of the > order that the Adobe Updater wants to install the patches. > > A self-service policy to install CS4 performs a sequence of three different > policies called by a script. As a self-service it's nice because the user is > already logged in. > > - First Adobe CS4 Base installs > - Second Adobe CS4 patches install > - Lastly all of my traditional composer packages lay over top for Reader and > Pro, installs PDF9 printer, and a recon cycle. > > This is my basic process for FirstRun as well except for all of the > intricacies for making the patching part happen. What happens here is that a > script at the end of FirstRun is triggered that calls a policy that adds a > local user, installs an autologin package for that user, and then reboots > the system. > > When the system reboots it auto logs on, a policy looking for that user is > triggered to perform the patches and lay over packages. Since a user is > logged in things are fairly reliable. At the end it removes the auto login > stuff, installs a startup item, and reboots again. > > The startup item runs, deletes the user and home for patching, and runs a > recon. > > Of course there are a myriad of scripts and policies for these two things to > work, but it does work. I had some issues for a little while with my > FirstRun install because a different policy was installing at FirstRun that > required a reboot so it would reboot mid FirstRun and then it was a nasty > loop since FirstRun never had the chance to delete itself. =) > > I really do hope I have time to get this all typed up in greater detail. > > Craig E > > > On 10/29/09 8:41 PM, "Don Montalvo" wrote: > >> It would seem like you'd need to pull into Casper a few dozen updates >> so they can each be pushed out individually. If this works, it's a >> winner to me (at least until they fire all of the Adobe installer >> developers responsible for this fiasco, and hire fresh blood who can >> give us proper pkg installers ). > > _______________________________________________ > Casper mailing list > Casper at list.jamfsoftware.com > http://list.jamfsoftware.com/mailman/listinfo/casper From William.Smith at merrillcorp.com Fri Oct 30 07:25:49 2009 From: William.Smith at merrillcorp.com (Smith, William) Date: Fri, 30 Oct 2009 09:25:49 -0500 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: Message-ID: On 10/30/09 8:39 AM, "Ernst, Craig S." wrote: > The other thing that I forgot to mention was a feature request I put in > regarding patching. I had asked for them to make an additional tab on your > Adobe install where you select the applications to install and input your > license code that had all the Adobe updaters listed, you could check them, > and they would get applied immediately after the main Adobe install would > run. This way the process is totally integrated into their processes. > > Good idea? Bad idea? Thoughts? I put in a request a long time ago (probably verbally and I should submit formally) for the ability to "group" packages and scripts and then be able to select the group for configurations or select it in Casper Remote. That way, I could choose to install "Adobe CS4" and it would really mean 1.) install CS4, 2.) apply every patch, 3.) run some custom setup scripts, etc. This would be ideal for Microsoft apps too. Right now, I'm putting everything into an "Install Adobe CS4" policy and then calling that policy in a script after imaging. -- William Smith Technical Analyst Merrill Communications LLC (651) 632-1492 From donmontalvo at gmail.com Fri Oct 30 08:14:34 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Fri, 30 Oct 2009 08:14:34 -0700 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: References: Message-ID: <636BA91B-D69D-4856-8E8A-EAC0294973F6@gmail.com> Great idea. I'd also like to see Casper intelligently sort the many dozens of Adobe CS4 updates that we need to pull down and push out. So we don't have to guess the order. Don On Oct 30, 2009, at 6:39, "Ernst, Craig S." wrote: > The other thing that I forgot to mention was a feature request I put > in > regarding patching. I had asked for them to make an additional tab > on your > Adobe install where you select the applications to install and input > your > license code that had all the Adobe updaters listed, you could check > them, > and they would get applied immediately after the main Adobe install > would > run. This way the process is totally integrated into their processes. > > Good idea? Bad idea? Thoughts? > > Craig E > > > On 10/29/09 8:59 PM, "Ernst, Craig S." wrote: > >> This absolutely works for the CS4 patches, just dropping the >> downloaded ones >> directly into the JSS. I use it as part of my install process. >> >> Just install your Adobe CS4 base, run Adobe Updater to download the >> updates, >> just don't install them, and put them into the JSS. I also make >> note of the >> order that the Adobe Updater wants to install the patches. >> >> A self-service policy to install CS4 performs a sequence of three >> different >> policies called by a script. As a self-service it's nice because >> the user is >> already logged in. >> >> - First Adobe CS4 Base installs >> - Second Adobe CS4 patches install >> - Lastly all of my traditional composer packages lay over top for >> Reader and >> Pro, installs PDF9 printer, and a recon cycle. >> >> This is my basic process for FirstRun as well except for all of the >> intricacies for making the patching part happen. What happens here >> is that a >> script at the end of FirstRun is triggered that calls a policy that >> adds a >> local user, installs an autologin package for that user, and then >> reboots >> the system. >> >> When the system reboots it auto logs on, a policy looking for that >> user is >> triggered to perform the patches and lay over packages. Since a >> user is >> logged in things are fairly reliable. At the end it removes the >> auto login >> stuff, installs a startup item, and reboots again. >> >> The startup item runs, deletes the user and home for patching, and >> runs a >> recon. >> >> Of course there are a myriad of scripts and policies for these two >> things to >> work, but it does work. I had some issues for a little while with my >> FirstRun install because a different policy was installing at >> FirstRun that >> required a reboot so it would reboot mid FirstRun and then it was a >> nasty >> loop since FirstRun never had the chance to delete itself. =) >> >> I really do hope I have time to get this all typed up in greater >> detail. >> >> Craig E >> >> >> On 10/29/09 8:41 PM, "Don Montalvo" wrote: >> >>> It would seem like you'd need to pull into Casper a few dozen >>> updates >>> so they can each be pushed out individually. If this works, it's a >>> winner to me (at least until they fire all of the Adobe installer >>> developers responsible for this fiasco, and hire fresh blood who can >>> give us proper pkg installers ). >> >> _______________________________________________ >> Casper mailing list >> Casper at list.jamfsoftware.com >> http://list.jamfsoftware.com/mailman/listinfo/casper > From ERNSTCS at uwec.edu Fri Oct 30 08:16:14 2009 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Fri, 30 Oct 2009 10:16:14 -0500 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: <636BA91B-D69D-4856-8E8A-EAC0294973F6@gmail.com> Message-ID: You don't really need to guess the order...just run through an Adobe Updater cycle once after a fresh install and observe the order it installs it in. =) Craig E On 10/30/09 10:14 AM, "Don Montalvo" wrote: > Great idea. I'd also like to see Casper intelligently sort the many > dozens of Adobe CS4 updates that we need to pull down and push out. So > we don't have to guess the order. > > Don > > On Oct 30, 2009, at 6:39, "Ernst, Craig S." wrote: > >> The other thing that I forgot to mention was a feature request I put >> in >> regarding patching. I had asked for them to make an additional tab >> on your >> Adobe install where you select the applications to install and input >> your >> license code that had all the Adobe updaters listed, you could check >> them, >> and they would get applied immediately after the main Adobe install >> would >> run. This way the process is totally integrated into their processes. >> >> Good idea? Bad idea? Thoughts? >> >> Craig E >> >> >> On 10/29/09 8:59 PM, "Ernst, Craig S." wrote: >> >>> This absolutely works for the CS4 patches, just dropping the >>> downloaded ones >>> directly into the JSS. I use it as part of my install process. >>> >>> Just install your Adobe CS4 base, run Adobe Updater to download the >>> updates, >>> just don't install them, and put them into the JSS. I also make >>> note of the >>> order that the Adobe Updater wants to install the patches. >>> >>> A self-service policy to install CS4 performs a sequence of three >>> different >>> policies called by a script. As a self-service it's nice because >>> the user is >>> already logged in. >>> >>> - First Adobe CS4 Base installs >>> - Second Adobe CS4 patches install >>> - Lastly all of my traditional composer packages lay over top for >>> Reader and >>> Pro, installs PDF9 printer, and a recon cycle. >>> >>> This is my basic process for FirstRun as well except for all of the >>> intricacies for making the patching part happen. What happens here >>> is that a >>> script at the end of FirstRun is triggered that calls a policy that >>> adds a >>> local user, installs an autologin package for that user, and then >>> reboots >>> the system. >>> >>> When the system reboots it auto logs on, a policy looking for that >>> user is >>> triggered to perform the patches and lay over packages. Since a >>> user is >>> logged in things are fairly reliable. At the end it removes the >>> auto login >>> stuff, installs a startup item, and reboots again. >>> >>> The startup item runs, deletes the user and home for patching, and >>> runs a >>> recon. >>> >>> Of course there are a myriad of scripts and policies for these two >>> things to >>> work, but it does work. I had some issues for a little while with my >>> FirstRun install because a different policy was installing at >>> FirstRun that >>> required a reboot so it would reboot mid FirstRun and then it was a >>> nasty >>> loop since FirstRun never had the chance to delete itself. =) >>> >>> I really do hope I have time to get this all typed up in greater >>> detail. >>> >>> Craig E >>> >>> >>> On 10/29/09 8:41 PM, "Don Montalvo" wrote: >>> >>>> It would seem like you'd need to pull into Casper a few dozen >>>> updates >>>> so they can each be pushed out individually. If this works, it's a >>>> winner to me (at least until they fire all of the Adobe installer >>>> developers responsible for this fiasco, and hire fresh blood who can >>>> give us proper pkg installers ). >>> >>> _______________________________________________ >>> Casper mailing list >>> Casper at list.jamfsoftware.com >>> http://list.jamfsoftware.com/mailman/listinfo/casper >> From donmontalvo at gmail.com Fri Oct 30 08:27:39 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Fri, 30 Oct 2009 08:27:39 -0700 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: References: Message-ID: Thats the usual process, but are we sure the install order doesn't change when a new patch is released? On Oct 30, 2009, at 8:16, "Ernst, Craig S." wrote: > You don't really need to guess the order...just run through an Adobe > Updater > cycle once after a fresh install and observe the order it installs > it in. =) > > Craig E > > On 10/30/09 10:14 AM, "Don Montalvo" wrote: > >> Great idea. I'd also like to see Casper intelligently sort the many >> dozens of Adobe CS4 updates that we need to pull down and push out. >> So >> we don't have to guess the order. >> >> Don >> >> On Oct 30, 2009, at 6:39, "Ernst, Craig S." wrote: >> >>> The other thing that I forgot to mention was a feature request I put >>> in >>> regarding patching. I had asked for them to make an additional tab >>> on your >>> Adobe install where you select the applications to install and input >>> your >>> license code that had all the Adobe updaters listed, you could check >>> them, >>> and they would get applied immediately after the main Adobe install >>> would >>> run. This way the process is totally integrated into their >>> processes. >>> >>> Good idea? Bad idea? Thoughts? >>> >>> Craig E >>> >>> >>> On 10/29/09 8:59 PM, "Ernst, Craig S." wrote: >>> >>>> This absolutely works for the CS4 patches, just dropping the >>>> downloaded ones >>>> directly into the JSS. I use it as part of my install process. >>>> >>>> Just install your Adobe CS4 base, run Adobe Updater to download the >>>> updates, >>>> just don't install them, and put them into the JSS. I also make >>>> note of the >>>> order that the Adobe Updater wants to install the patches. >>>> >>>> A self-service policy to install CS4 performs a sequence of three >>>> different >>>> policies called by a script. As a self-service it's nice because >>>> the user is >>>> already logged in. >>>> >>>> - First Adobe CS4 Base installs >>>> - Second Adobe CS4 patches install >>>> - Lastly all of my traditional composer packages lay over top for >>>> Reader and >>>> Pro, installs PDF9 printer, and a recon cycle. >>>> >>>> This is my basic process for FirstRun as well except for all of the >>>> intricacies for making the patching part happen. What happens here >>>> is that a >>>> script at the end of FirstRun is triggered that calls a policy that >>>> adds a >>>> local user, installs an autologin package for that user, and then >>>> reboots >>>> the system. >>>> >>>> When the system reboots it auto logs on, a policy looking for that >>>> user is >>>> triggered to perform the patches and lay over packages. Since a >>>> user is >>>> logged in things are fairly reliable. At the end it removes the >>>> auto login >>>> stuff, installs a startup item, and reboots again. >>>> >>>> The startup item runs, deletes the user and home for patching, and >>>> runs a >>>> recon. >>>> >>>> Of course there are a myriad of scripts and policies for these two >>>> things to >>>> work, but it does work. I had some issues for a little while with >>>> my >>>> FirstRun install because a different policy was installing at >>>> FirstRun that >>>> required a reboot so it would reboot mid FirstRun and then it was a >>>> nasty >>>> loop since FirstRun never had the chance to delete itself. =) >>>> >>>> I really do hope I have time to get this all typed up in greater >>>> detail. >>>> >>>> Craig E >>>> >>>> >>>> On 10/29/09 8:41 PM, "Don Montalvo" wrote: >>>> >>>>> It would seem like you'd need to pull into Casper a few dozen >>>>> updates >>>>> so they can each be pushed out individually. If this works, it's a >>>>> winner to me (at least until they fire all of the Adobe installer >>>>> developers responsible for this fiasco, and hire fresh blood who >>>>> can >>>>> give us proper pkg installers ). >>>> >>>> _______________________________________________ >>>> Casper mailing list >>>> Casper at list.jamfsoftware.com >>>> http://list.jamfsoftware.com/mailman/listinfo/casper >>> > From ERNSTCS at uwec.edu Fri Oct 30 08:29:02 2009 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Fri, 30 Oct 2009 10:29:02 -0500 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: Message-ID: Nope...so you need to do it each time if you want to be sure. Sucks, but...it's what we got. On 10/30/09 10:27 AM, "Don Montalvo" wrote: > Thats the usual process, but are we sure the install order doesn't > change when a new patch is released? > > On Oct 30, 2009, at 8:16, "Ernst, Craig S." wrote: > >> You don't really need to guess the order...just run through an Adobe >> Updater >> cycle once after a fresh install and observe the order it installs >> it in. =) >> >> Craig E >> >> On 10/30/09 10:14 AM, "Don Montalvo" wrote: >> >>> Great idea. I'd also like to see Casper intelligently sort the many >>> dozens of Adobe CS4 updates that we need to pull down and push out. >>> So >>> we don't have to guess the order. >>> >>> Don >>> >>> On Oct 30, 2009, at 6:39, "Ernst, Craig S." wrote: >>> >>>> The other thing that I forgot to mention was a feature request I put >>>> in >>>> regarding patching. I had asked for them to make an additional tab >>>> on your >>>> Adobe install where you select the applications to install and input >>>> your >>>> license code that had all the Adobe updaters listed, you could check >>>> them, >>>> and they would get applied immediately after the main Adobe install >>>> would >>>> run. This way the process is totally integrated into their >>>> processes. >>>> >>>> Good idea? Bad idea? Thoughts? >>>> >>>> Craig E >>>> >>>> >>>> On 10/29/09 8:59 PM, "Ernst, Craig S." wrote: >>>> >>>>> This absolutely works for the CS4 patches, just dropping the >>>>> downloaded ones >>>>> directly into the JSS. I use it as part of my install process. >>>>> >>>>> Just install your Adobe CS4 base, run Adobe Updater to download the >>>>> updates, >>>>> just don't install them, and put them into the JSS. I also make >>>>> note of the >>>>> order that the Adobe Updater wants to install the patches. >>>>> >>>>> A self-service policy to install CS4 performs a sequence of three >>>>> different >>>>> policies called by a script. As a self-service it's nice because >>>>> the user is >>>>> already logged in. >>>>> >>>>> - First Adobe CS4 Base installs >>>>> - Second Adobe CS4 patches install >>>>> - Lastly all of my traditional composer packages lay over top for >>>>> Reader and >>>>> Pro, installs PDF9 printer, and a recon cycle. >>>>> >>>>> This is my basic process for FirstRun as well except for all of the >>>>> intricacies for making the patching part happen. What happens here >>>>> is that a >>>>> script at the end of FirstRun is triggered that calls a policy that >>>>> adds a >>>>> local user, installs an autologin package for that user, and then >>>>> reboots >>>>> the system. >>>>> >>>>> When the system reboots it auto logs on, a policy looking for that >>>>> user is >>>>> triggered to perform the patches and lay over packages. Since a >>>>> user is >>>>> logged in things are fairly reliable. At the end it removes the >>>>> auto login >>>>> stuff, installs a startup item, and reboots again. >>>>> >>>>> The startup item runs, deletes the user and home for patching, and >>>>> runs a >>>>> recon. >>>>> >>>>> Of course there are a myriad of scripts and policies for these two >>>>> things to >>>>> work, but it does work. I had some issues for a little while with >>>>> my >>>>> FirstRun install because a different policy was installing at >>>>> FirstRun that >>>>> required a reboot so it would reboot mid FirstRun and then it was a >>>>> nasty >>>>> loop since FirstRun never had the chance to delete itself. =) >>>>> >>>>> I really do hope I have time to get this all typed up in greater >>>>> detail. >>>>> >>>>> Craig E >>>>> >>>>> >>>>> On 10/29/09 8:41 PM, "Don Montalvo" wrote: >>>>> >>>>>> It would seem like you'd need to pull into Casper a few dozen >>>>>> updates >>>>>> so they can each be pushed out individually. If this works, it's a >>>>>> winner to me (at least until they fire all of the Adobe installer >>>>>> developers responsible for this fiasco, and hire fresh blood who >>>>>> can >>>>>> give us proper pkg installers ). >>>>> >>>>> _______________________________________________ >>>>> Casper mailing list >>>>> Casper at list.jamfsoftware.com >>>>> http://list.jamfsoftware.com/mailman/listinfo/casper >>>> >> From ERNSTCS at uwec.edu Fri Oct 30 08:29:38 2009 From: ERNSTCS at uwec.edu (Ernst, Craig S.) Date: Fri, 30 Oct 2009 10:29:38 -0500 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: Message-ID: This would all be moot if Adobe used a command line updater that we could just trigger in the background... On 10/30/09 10:27 AM, "Don Montalvo" wrote: > Thats the usual process, but are we sure the install order doesn't > change when a new patch is released? > > On Oct 30, 2009, at 8:16, "Ernst, Craig S." wrote: > >> You don't really need to guess the order...just run through an Adobe >> Updater >> cycle once after a fresh install and observe the order it installs >> it in. =) >> >> Craig E >> >> On 10/30/09 10:14 AM, "Don Montalvo" wrote: >> >>> Great idea. I'd also like to see Casper intelligently sort the many >>> dozens of Adobe CS4 updates that we need to pull down and push out. >>> So >>> we don't have to guess the order. >>> >>> Don >>> >>> On Oct 30, 2009, at 6:39, "Ernst, Craig S." wrote: >>> >>>> The other thing that I forgot to mention was a feature request I put >>>> in >>>> regarding patching. I had asked for them to make an additional tab >>>> on your >>>> Adobe install where you select the applications to install and input >>>> your >>>> license code that had all the Adobe updaters listed, you could check >>>> them, >>>> and they would get applied immediately after the main Adobe install >>>> would >>>> run. This way the process is totally integrated into their >>>> processes. >>>> >>>> Good idea? Bad idea? Thoughts? >>>> >>>> Craig E >>>> >>>> >>>> On 10/29/09 8:59 PM, "Ernst, Craig S." wrote: >>>> >>>>> This absolutely works for the CS4 patches, just dropping the >>>>> downloaded ones >>>>> directly into the JSS. I use it as part of my install process. >>>>> >>>>> Just install your Adobe CS4 base, run Adobe Updater to download the >>>>> updates, >>>>> just don't install them, and put them into the JSS. I also make >>>>> note of the >>>>> order that the Adobe Updater wants to install the patches. >>>>> >>>>> A self-service policy to install CS4 performs a sequence of three >>>>> different >>>>> policies called by a script. As a self-service it's nice because >>>>> the user is >>>>> already logged in. >>>>> >>>>> - First Adobe CS4 Base installs >>>>> - Second Adobe CS4 patches install >>>>> - Lastly all of my traditional composer packages lay over top for >>>>> Reader and >>>>> Pro, installs PDF9 printer, and a recon cycle. >>>>> >>>>> This is my basic process for FirstRun as well except for all of the >>>>> intricacies for making the patching part happen. What happens here >>>>> is that a >>>>> script at the end of FirstRun is triggered that calls a policy that >>>>> adds a >>>>> local user, installs an autologin package for that user, and then >>>>> reboots >>>>> the system. >>>>> >>>>> When the system reboots it auto logs on, a policy looking for that >>>>> user is >>>>> triggered to perform the patches and lay over packages. Since a >>>>> user is >>>>> logged in things are fairly reliable. At the end it removes the >>>>> auto login >>>>> stuff, installs a startup item, and reboots again. >>>>> >>>>> The startup item runs, deletes the user and home for patching, and >>>>> runs a >>>>> recon. >>>>> >>>>> Of course there are a myriad of scripts and policies for these two >>>>> things to >>>>> work, but it does work. I had some issues for a little while with >>>>> my >>>>> FirstRun install because a different policy was installing at >>>>> FirstRun that >>>>> required a reboot so it would reboot mid FirstRun and then it was a >>>>> nasty >>>>> loop since FirstRun never had the chance to delete itself. =) >>>>> >>>>> I really do hope I have time to get this all typed up in greater >>>>> detail. >>>>> >>>>> Craig E >>>>> >>>>> >>>>> On 10/29/09 8:41 PM, "Don Montalvo" wrote: >>>>> >>>>>> It would seem like you'd need to pull into Casper a few dozen >>>>>> updates >>>>>> so they can each be pushed out individually. If this works, it's a >>>>>> winner to me (at least until they fire all of the Adobe installer >>>>>> developers responsible for this fiasco, and hire fresh blood who >>>>>> can >>>>>> give us proper pkg installers ). >>>>> >>>>> _______________________________________________ >>>>> Casper mailing list >>>>> Casper at list.jamfsoftware.com >>>>> http://list.jamfsoftware.com/mailman/listinfo/casper >>>> >> From donmontalvo at gmail.com Fri Oct 30 12:16:15 2009 From: donmontalvo at gmail.com (Don Montalvo) Date: Fri, 30 Oct 2009 12:16:15 -0700 Subject: [Casper] Distribution of Adobe CS3 and CS4 suites In-Reply-To: References: Message-ID: Yes, ala the Appke softwareupdate tool. Can't wait until Adobe cleans house at their installer dev group. ;) On Oct 30, 2009, at 8:29, "Ernst, Craig S." wrote: > This would all be moot if Adobe used a command line updater that we > could > just trigger in the background... > > On 10/30/09 10:27 AM, "Don Montalvo" wrote: > >> Thats the usual process, but are we sure the install order doesn't >> change when a new patch is released? >> >> On Oct 30, 2009, at 8:16, "Ernst, Craig S." wrote: >> >>> You don't really need to guess the order...just run through an Adobe >>> Updater >>> cycle once after a fresh install and observe the order it installs >>> it in. =) >>> >>> Craig E >>> >>> On 10/30/09 10:14 AM, "Don Montalvo" wrote: >>> >>>> Great idea. I'd also like to see Casper intelligently sort the many >>>> dozens of Adobe CS4 updates that we need to pull down and push out. >>>> So >>>> we don't have to guess the order. >>>> >>>> Don >>>> >>>> On Oct 30, 2009, at 6:39, "Ernst, Craig S." >>>> wrote: >>>> >>>>> The other thing that I forgot to mention was a feature request I >>>>> put >>>>> in >>>>> regarding patching. I had asked for them to make an additional tab >>>>> on your >>>>> Adobe install where you select the applications to install and >>>>> input >>>>> your >>>>> license code that had all the Adobe updaters listed, you could >>>>> check >>>>> them, >>>>> and they would get applied immediately after the main Adobe >>>>> install >>>>> would >>>>> run. This way the process is totally integrated into their >>>>> processes. >>>>> >>>>> Good idea? Bad idea? Thoughts? >>>>> >>>>> Craig E >>>>> >>>>> >>>>> On 10/29/09 8:59 PM, "Ernst, Craig S." wrote: >>>>> >>>>>> This absolutely works for the CS4 patches, just dropping the >>>>>> downloaded ones >>>>>> directly into the JSS. I use it as part of my install process. >>>>>> >>>>>> Just install your Adobe CS4 base, run Adobe Updater to download >>>>>> the >>>>>> updates, >>>>>> just don't install them, and put them into the JSS. I also make >>>>>> note of the >>>>>> order that the Adobe Updater wants to install the patches. >>>>>> >>>>>> A self-service policy to install CS4 performs a sequence of three >>>>>> different >>>>>> policies called by a script. As a self-service it's nice because >>>>>> the user is >>>>>> already logged in. >>>>>> >>>>>> - First Adobe CS4 Base installs >>>>>> - Second Adobe CS4 patches install >>>>>> - Lastly all of my traditional composer packages lay over top for >>>>>> Reader and >>>>>> Pro, installs PDF9 printer, and a recon cycle. >>>>>> >>>>>> This is my basic process for FirstRun as well except for all of >>>>>> the >>>>>> intricacies for making the patching part happen. What happens >>>>>> here >>>>>> is that a >>>>>> script at the end of FirstRun is triggered that calls a policy >>>>>> that >>>>>> adds a >>>>>> local user, installs an autologin package for that user, and then >>>>>> reboots >>>>>> the system. >>>>>> >>>>>> When the system reboots it auto logs on, a policy looking for >>>>>> that >>>>>> user is >>>>>> triggered to perform the patches and lay over packages. Since a >>>>>> user is >>>>>> logged in things are fairly reliable. At the end it removes the >>>>>> auto login >>>>>> stuff, installs a startup item, and reboots again. >>>>>> >>>>>> The startup item runs, deletes the user and home for patching, >>>>>> and >>>>>> runs a >>>>>> recon. >>>>>> >>>>>> Of course there are a myriad of scripts and policies for these >>>>>> two >>>>>> things to >>>>>> work, but it does work. I had some issues for a little while with >>>>>> my >>>>>> FirstRun install because a different policy was installing at >>>>>> FirstRun that >>>>>> required a reboot so it would reboot mid FirstRun and then it >>>>>> was a >>>>>> nasty >>>>>> loop since FirstRun never had the chance to delete itself. =) >>>>>> >>>>>> I really do hope I have time to get this all typed up in greater >>>>>> detail. >>>>>> >>>>>> Craig E >>>>>> >>>>>> >>>>>> On 10/29/09 8:41 PM, "Don Montalvo" >>>>>> wrote: >>>>>> >>>>>>> It would seem like you'd need to pull into Casper a few dozen >>>>>>> updates >>>>>>> so they can each be pushed out individually. If this works, >>>>>>> it's a >>>>>>> winner to me (at least until they fire all of the Adobe >>>>>>> installer >>>>>>> developers responsible for this fiasco, and hire fresh blood who >>>>>>> can >>>>>>> give us proper pkg installers ). >>>>>> >>>>>> _______________________________________________ >>>>>> Casper mailing list >>>>>> Casper at list.jamfsoftware.com >>>>>> http://list.jamfsoftware.com/mailman/listinfo/casper >>>>> >>> >