Detect Casper Restore Partition with Smart Group

JLNewsome2
New Contributor

I was wondering if anybody knew the answer to this question.

We have machines that are encrypted with Check Point Full Disk Encryption (Encrypting the Macintosh HD volume) and the Casper Restore partition in place. Is there anyway to build a Smart Group to detect whether or not a machine has the Casper Restore partition?

Any information would be most appreciated!

Thanks

2 REPLIES 2

mm2270
Legendary Contributor III

My guess is you'll need to create an Extension Attribute. I don't think there's any built in criteria to detect that.
I haven't used the Casper Restore partition in a long while now, but if I recall, its always there, mounted, but just hidden in the Finder, so a simple diskutil list and grepping out the Restore Partition should work.
Someone who actually has some Macs using it would need to give you more details though.

russeller
Contributor III

In the JSS you'd go to Settings > Computer Management > Extension Attributes > Name the EA and set Input Type to script. This is an example of something to start with, the JAMF community here is great and there are lots of bash experts on here that can help improve upon this.

#!/bin/sh

# Set the Name of the Restore Partition here
partitionName="Restore HD"

# Lists disks and looks for name of partition
diskCheck=`diskutil list | grep "$partitionName"`

# Returns true if any value is returned, false if null
if [[ "$diskCheck" ]]; then
    echo "<result>True</result>"
else
    echo "<result>False</result>"
fi

exit 0