Casper 9.64 Bugs Discovered

Today I was adding a Spotify widget to my OS X Yosemite notification center and noticed that I couldn't add it as it did not show up in Extensions in System Preferences. I also noticed that my passwords were no longer auto filling in Safari which I use myself but not everyone uses. Upon further digging, I determined that Casper with their latest update had added new restrictions to the Restrictions tab of configuration profiles. To read more check out the rest of the article.

When looking into the Restrictions tab in the configuration profile I noticed a new option for Safari titled Allow Safari AutoFill which if enabled, enables Safari auto fill and it cannot be disabled.  If you leave it disabled the reverse happens and it cannot be enabled. I like for my users to have the option to enable or disable this depending on their preference. As for the widgets, there is no option to configure them and they are just disabled by default.  There are some restrictions I like to put in place for instance:

• Disabling App Store adoption
• Restricting access to install OS X
• Allow Game Center
• Allow Sharing and AirDrop

Luckily I was able to move a lot of these configs to a couple plist files that I could use the Custom Settings tab in configuration profiles to deploy which resolved the issue. I have gone ahead and reported this issue to JAMF and hopefully will be receiving a defect number which I can attach to this post.

The new option for Safari in restrictions you can find under applications.  Attached is a screenshot:

No environment is created equal so this may not be a big issue for those environments that are extra restrictive. In our environment however all of our users are Faculty and Staff and it just seems counter productive to disable these things by default if you have other restrictions configured without the ability to modify them properly. If you have questions on this newly discovered issue please let me know.

UPDATE: Received defect numbers from JAMF for reference.

• D-008697 - Safari Autofill issue
• D-008603 - Yosemite Notification Center issue

com.apple.applicationaccess.new.plist

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE plist PUBLIC '-//Apple//DTD PLIST 1.0//EN' 'http://www.apple.com/DTDs/PropertyList-1.0.dtd'>
<plist version='1.0'>
<dict>
	<key>familyControlsEnabled</key>
	<true/>
	<key>pathBlackList</key>
	<array>
		<string>/Applications/Install OS X Yosemite.app/</string>
		<string>/Applications/Install OS X Mavericks.app/</string>
		<string>/Applications/Install OS X Mountain Lion.app/</string>
		<string>/Applications/Install Mac OS X Lion.app/</string>
	</array>
	<key>pathWhiteList</key>
	<array>
		<string>/</string>
	</array>
</dict>
</plist>

com.apple.appstore.plist

1
2
3
4
5
6
7
8
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE plist PUBLIC '-//Apple//DTD PLIST 1.0//EN' 'http://www.apple.com/DTDs/PropertyList-1.0.dtd'>
<plist version='1.0'>
<dict>
	<key>restrict-store-disable-app-adoption</key>
	<true/>
</dict>
</plist>

com.apple.gamed.plist

1
2
3
4
5
6
7
8
9
10
11
12
13
14
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE plist PUBLIC '-//Apple//DTD PLIST 1.0//EN' 'http://www.apple.com/DTDs/PropertyList-1.0.dtd'>
<plist version='1.0'>
<dict>
	<key>GKFeatureAccountModificationAllowed</key>
	<true/>
	<key>GKFeatureAddingGameCenterFriendsAllowed</key>
	<true/>
	<key>GKFeatureGameCenterAllowed</key>
	<true/>
	<key>GKFeatureMultiplayerGamingAllowed</key>
	<true/>
</dict>
</plist>