6

The profiles appear to be stored in /private/var/db/ConfigurationProfiles/Store/ConfigProfiles.binary I'd not recommend tampering with it, though. To see what profiles are installed, and then remove one, assuming you can sudo to the user, you could try: root$ sudo -u chymb profiles -L chymb[1] attribute: profileIdentifier: com.stackexchange.apple.test ...


4

I was able to locate the source for these pages. The comments on this question by ioi's were leading in the right direction. The root directory for the app is /usr/share/devicemgr/. The portal is actually a Ruby on Rails app, so there is no direct HTML to edit. However, there are CSS files that can be edited to fit your needs. The CSS files relating to ...


3

From the Apple Developer man pages: appleprofilepolicyd is a system daemon that implements a policy for the services provided by AppleProfileFamily. When an AppleProfileFamily user asks to perform an action, this daemon is invoked to make the final policy decision. Essentially, this governs what apps, accounts, processes, etc. have access to what ...


3

Do run migration assistant on both macs once you have updated each to the latest patch for your version of OS. https://support.apple.com/en-us/HT204350 It will let you bring over one user account with ease. Her password and desktop and settings and preferences will all be preserved to the maximum extent possible. If both macs are the same version of the OS ...


3

I assume you mean Open Directory, not Apple Directory. There is a check box in Workgroup Manager in the user's account. Set it to not allow simultaneous logins. This box is present in WGM on 10.3 - 10.6 I know that Lion deals with workgroups a little differently.


2

Another update... I started fresh with a new install of Lion. Updated to 10.7.3 first, having read about everyone's nightmares after this update. Anyway, my Kerberos realm is now set to domain1.com, but Profile Manager still insists on using the incoming server name (hostname.domain1.com)as the email address. I tried using both variables, %email% and %...


2

You can use %short_name% and %long_name% to autofill some fields (such as email address, username, full name) in Profile Manager, and they will pull that information from your user directory. If you're using Google Apps via Exchange ActiveSync, then that will only work if your on demand user accounts have the same short name as your Google Apps user ...


2

Mobility in Workgroup Manager and Mobility in Profile Manager are tools to do the same job. If you have used previous versions of Mac OSX Server Workgroup Manager is familiar but is now deprecated. Profile Manager should do all that is required to set up a network account that is accessible on a laptop out of the network office. What I have found is that ...


2

AFAICS local accounts on the server belong to it


2

I believe the files are stored in /Library/Server/ProfileManager/Data/FileStore but are not stored as IPA files.


2

Remove the profile from the client system preference pane.


2

You need to import the cert via Server.app; that'll add it to the System keychain and several other locations that allow non-keychain-aware services to use it. I'm not sure why it'd be hanging, but I can think of a few things to try: If it's not a self-signed certificate, you probably need to import the appropriate intermediate certificate(s) by dragging ...


2

Profile Manager isn't an MDM that reports details about app install which is usually used to determine jailbreak status. (i.e. If cydia app and other apps are installed, it's a good conclusion that the device has been jailbroken.) Also, once jailbroken, it's entirely possible the device won't report back the correct information depending on what else is ...


2

At long last, yes you can set up management for zero touch deployment through a couple avenues. Use an Apple Service called Device Enrollment Program which is now part of the Apple Business Manager service / web app. https://business.apple.com Use a product to leverage the login process and install a tool like Jamf Connect which lets you run scripts and ...


1

You can only have 1 MDM profile installed at a time, so it will not allow you to re-enroll the devices if they are already enrolled (even if the original server is now defunct) I cannot recall if you can remove the MDM profile from a supervised device, but I believe that you can. The easiest way would be to probably send a link that can be opened in safari ...


1

This is actually a bug in iOS 8 (and 8.1). If you have guided access enabled when updating from iOS 7 it stops working. The fix is to turn it off, reboot the device, then turn it back on again.


1

I think what you are asking is how to enable (network) "Home Directories". Workstations need to be connected via Gigabit Ethernet for this to work well. For laptops, use "Portable Home Directories" over a robust Wi-Fi network (or Ethernet) Yes, you can use any (direct-attched) storage device, though for 40TB, I would recommend a RAID over Thunderbolt (2 if ...


1

Please enabled all the applicable ports. Apple's documentation (http://support.apple.com/kb/ht5302) also lists the service needing TCP ports 2195, 2196, and 5223 for the service to send/receive push notifications, which AFAIK is how the service communicates with clients.


1

Yes there are variables you can enter for common user fields http://krypted.com/mac-security/using-payload-variables-in-profile-manager/


1

if you sign out of iTunes / App Store, than won't disconnect you from iCloud and vise versa


1

you can only change it if your devices are enrolled in supervised mode. use apple configurator 2 to enroll the device to MDM, then you can select the supervised mode option. after it's successfully enrolled, you can then rename the devices via the profile manager.


1

You should be able to do all the configuration by group. Add all the users into an OD group and then set all the WiFi preferences there. You should also be able to set a certificate for the group and allow the entire group to authenticate against the Radius server. When it comes to setting up PKI then you enter into the dark realms of Kerberos. (Be very ...


1

Check out DeployStudio :- http://www.deploystudio.com/Home.html which is the best image deployment tool. Monitoring is a little more problematic but I'm a big fan of Caspar if for no other reason than it provides enterprise management for Mac and iOS that runs on enterprise hardware. http://www.jamfsoftware.com/products/casper-suite/ Apple Remote ...


1

See page 5 of the iOS_Security_Oct12.pdf document. iOS won't allow an in-house app to run on a device that doesn't have the corresponding provisioning profile - this ensures that the app cannot be run on an unauthorized device. http://images.apple.com/iphone/business/docs/iOS_Security_Oct12.pdf


1

You cannot disable Apple Maps. iOS does not provide a method to do this. The best free MDM tool I know of is Meraki (aside from Profile Manager itself). However, I'm not 100% convinced it will do everything you need. Also Meraki was recently purchased by Cisco and I am a bit concerned about its future. You will also receive sales calls from their staff ...


1

This is still a supported function. It's something that needs care and tending (like any sync solution) when a burp causes problems, but Mountain Lion server hasn't made it better or worse than recent server versions (Lion, Snow Leopard) in the management and deployment of network home folders that sync. If you allow multiple log in or true mobile syncing ...


1

There are multiple different causes for that error. See also: http://support.apple.com/kb/TS4504 The important clues seem to be: <Warning>: [XSCertificate certificateWithDictionary:] returned nil Dec 5 15:42:39 server1.fm Server[69967] <Warning>: Error: The server '127.0.0.1' reported an error while processing a command of type: '...


1

Yes, you'll need to either forward these ports to your Lion server, or put the Lion server in your firewall's DMZ. You will also need to make sure that the DNS name of your Lion server is resolvable to devices outside of your network. The Apple Push Notification service used by Profile Manager will tell your device "Check in with this server", but your ...


1

Have you verified that all required ports are open from the iPads to the server? (Port 1640 specifically, but also you'll want to ensure access to 80/443 for web and 2195/2196/5223 for push) Lion Server: Ports used by Profile Manager You can also run some tests to see if this is a problem with the server itself or with the network. Connecting to the server'...


1

Same problem here. It is a bug in Apple Mail on 10.7.3. If you open the downloaded mobileconfig file in a text editor you will see that the correct email address is listed. I can confirm from testing that Apple Mail incorrectly populates the email address's domain part from the config's incoming mail server hostname.


Only top voted, non community-wiki answers of a minimum length are eligible