Managing Macs with JAMF's Casper Suite

The Friendly Ghostin the Machine:

Managing Macs with JAMF’s Casper Suite

[email protected][email protected]

Tuesday, November 19, 13

mailto:[email protected]




Casper Suite - Overview

JSS (JAMF Software Server)- web application (Tomcat and MySQL)

jamf binary- installed on managed clients

Other components (Recon, Composer, Remote)


Casper Suite 8NCSU implementation

• JSS setup - 2 Xserves with 4 T Xraid SAN storage, 2 REL Virtual Machines (VMware) on independent chassis under virtual ip address, clustered.

• Distributed support model on campus - decisions made at college / department level

• NC State manages 3532 total devices(OS X 2778 and iOS 754)


3 Scenarios

1. Deploy a new Mac

2. Upgrade an existing Mac

3. Install a critical update


Scenario 1 - Deploy a new Mac

Workflow:

• Unbox, plug in to network(thunderbolt-ethernet adapter)

• NetBoot

• Casper Imaging runs automatically

• Complete post-imaging tasks



NetBoot server, custom NetBoot image

• Recent OS X (10.8.5 / 10.9)

• Auto login as root

• Casper Imaging runs at login

• MAC address filters on NetBoot image



Configuration (on JSS)

• Packages (e.g. Office, Chrome, etc.)

• Scripts (e.g. set network time server)

• Directory Bindings

• Management account



PreStage (on JSS)• installs the Configuration

• sets Department (CALS-NEW)

• limits scope (by Network Segment)



Post-imaging tasks• Edit location information in JSS

• Add to Groups in JSS

• Add to network

• Migrate account(s)


Why use thunderbolt-ethernet adapters?

So we don't have to:• wait for DHCP updates (hourly)• update MAC filter on NetBoot server• update Scope of the PreStage on the JSS



Scenario 2 - Update Existing Macaka Continuous Integration



Additions, Uninstalls, Upgrades: Set Priority

• Sweep out /Users

• Repair and Maintenance















Additions - New install of package



Additions - New install of package• Uninstalls/Deletes - Script or uninstall



Additions - New install of package• Uninstalls/Deletes - Script or uninstall• Upgrades - Prioritized packages with

before/after scripts





Sweep out /Users ??



Sweep out /Users ??• Are user files in /Uses on boot drive




• Do we really want to “nuke” all users files





• Do we need a backup first





• Do we need a backup first

• NO UNDO!!





Repair and Maintenance



Repair and Maintenance• Policy to do all cache cleans, maintenance, etc




• Apply all Apple updates




• Apply all Apple updates

• Only update inventory and reboot on last policy


Scenario 3 - Apply a critical update

Goal: Apply a critical security update to managed Macs quickly and efficiently.

Quickly = The next time a computer checks in w/ the JSS.

Efficiently = Install on all clients that need it, and only those that need it.



Extension Attribute• Runs a script to collection information,

stores the result in the JSS.#!/bin/bash

JavaPluginVersion=$(/usr/bin/defaults read "/Library/Internet Plug-Ins/JavaAppletPlugin.plugin/Contents/info" CFBundleVersion)

echo "<result>$JavaPluginVersion</result>"



Smart Group• Based on the Extension Attribute, this group

contains an up-to-date list of all clients that need the update



Policy• Installs the update package

• Scope is limited to the Smart Group



Reusable - Build once, re-use with only minor changes for future updates.

Example:

• upload new .pkg

• edit Smart Group criteria

• flush policy history


Questions?


More Resources:

jamfsoftware.com

jamfnation.com

slideshare.net

[email protected][email protected]






Technology

Managing Macs with JAMF's Casper Suite