6

The profiles appear to be stored in /private/var/db/ConfigurationProfiles/Store/ConfigProfiles.binary I'd not recommend tampering with it, though. To see what profiles are installed, and then remove one, assuming you can sudo to the user, you could try: root$ sudo -u chymb profiles -L chymb[1] attribute: profileIdentifier: com.stackexchange.apple.test ...


3

From the Apple Developer man pages: appleprofilepolicyd is a system daemon that implements a policy for the services provided by AppleProfileFamily. When an AppleProfileFamily user asks to perform an action, this daemon is invoked to make the final policy decision. Essentially, this governs what apps, accounts, processes, etc. have access to what ...


2

Profile Manager isn't an MDM that reports details about app install which is usually used to determine jailbreak status. (i.e. If cydia app and other apps are installed, it's a good conclusion that the device has been jailbroken.) Also, once jailbroken, it's entirely possible the device won't report back the correct information depending on what else is ...


2

You need to import the cert via Server.app; that'll add it to the System keychain and several other locations that allow non-keychain-aware services to use it. I'm not sure why it'd be hanging, but I can think of a few things to try: If it's not a self-signed certificate, you probably need to import the appropriate intermediate certificate(s) by dragging ...


2

AFAICS local accounts on the server belong to it


2

At long last, yes you can set up management for zero touch deployment through a couple avenues. Use an Apple Service called Device Enrollment Program which is now part of the Apple Business Manager service / web app. https://business.apple.com Use a product to leverage the login process and install a tool like Jamf Connect which lets you run scripts and ...


2

Most of my searches land me on this Apple doc titled: Configuration Profile Reference. I also found this tutorial which covers using the /usr/bin/profiles command to work with profiles on macOS. That tutorial is titled: Use The Profiles Command In High Sierra. You can use commands like this to import profiles from a file: /usr/bin/profiles -I -F ~/Desktop/...


1

In profile manager you could set/force a passcode option under settings that could wipe the device after so many failed attempts which does not require internet access.


1

When you acquire VPP app licenses for free applications, are they appearing in your Apps tab in the Profile Manager [device manager interface] sidebar? Have your devices successfully enrolled to Profile Manager, and can you deploy configuration payloads/profiles to them? We ran into this when getting OS X Server and PM up and running, and then realized you ...


1

I believe that Profile/Device manager needs the full Certificate authority (to sign profiles) that is only available on the OD master, so it is probably by design.


1

Forcing iOS Updates to devices using Profile Manager is only possible if the devices are in the "supervised" state and the iOS version is out of date to begin with. Device supervision (the highest level of device management, enables MUCH MORE control over devices) is only possible by: Enrolling in Apple's DEP program (really only practical for device ...


1

As an admin you may be able to bypass the managed preference settings. Log out and then back in while holding the Option key. If allowed you'll see a dialog allowing you to disable managed preferences. As far as the clients not receiving the profiles check the system.log file for errors. Look for entries from mdmclient. On the server, check the Profile ...


1

Take it to an apple store. They will lookup purchase history from serial number and if it shows that the company paid for it, they will wipe it for you.


1

You need to install the 3rd party control panel onto the Mac running the server - then they appear to be allowed or not.


1

See page 5 of the iOS_Security_Oct12.pdf document. iOS won't allow an in-house app to run on a device that doesn't have the corresponding provisioning profile - this ensures that the app cannot be run on an unauthorized device. http://images.apple.com/iphone/business/docs/iOS_Security_Oct12.pdf


1

You cannot disable Apple Maps. iOS does not provide a method to do this. The best free MDM tool I know of is Meraki (aside from Profile Manager itself). However, I'm not 100% convinced it will do everything you need. Also Meraki was recently purchased by Cisco and I am a bit concerned about its future. You will also receive sales calls from their staff ...


1

I found the answer to this question myself accidentially. Please check this site for a more detailed explanation. There is no single answer to this Condensed: Some settings, such as controlling which items are opened at login, are cumulative because no one particular setting overrides another — any number of items can be opened at login. Some settings ...


1

MDM (Mobile Device Management) profiles can change many settings within the system. As you suspected, in this case the software update mechanism was redirected to a company server. There were likely other settings as well. If the profile forced all network traffic through a VPN, then the company could view it in transit. You can check by looking in the ...


1

I suspect writing an equivalent to codesign on a non-Apple platform will be tricky; but you might be lucky as parts may be open source. Consider having a Mac provide a code signing service solely for your web server. Then you can use Apple's codesign but avoid using the Mac as the public server. Apple provide two useful documents about code signing: Code ...


1

Seems someone had been fiddling with the DNS server :) All good now!


1

Bit late to the party, but it seems to be resolved through opening Server, turning Off open directory, waiting a few seconds, then turning it back On. Repeat if necessary. This has happened twice in the past month, both times were resolved by doing this. I'm now searching as to why this occurs, and if it happens again I'll test reinstalling the Server App. ...


1

I think your conclusion is correct. This information is not included in the MDM Protocol Reference and therefore isn't available through MDM. The only way I can think of would be to side-load (using an Enterprise Distribution certificate/profile) an app that uses private APIs to monitor such activity and report back. Not recommended and against the ...


1

Go to your HD > Applications > Server.app Right Click > Show Package Contents Go to Contents > ServerRoot > usr > share > devicemgr > backend > app > views > emailer Open the email_profile-multipart.erb file in your IDE of choice, and make your style edits to the HTML email.


1

Take a look at this blog post at nbalonso.com: Relative Paths in Configuration Profiles about including the Downloads folder into the Dock


1

You can only have 1 MDM profile installed at a time, so it will not allow you to re-enroll the devices if they are already enrolled (even if the original server is now defunct) I cannot recall if you can remove the MDM profile from a supervised device, but I believe that you can. The easiest way would be to probably send a link that can be opened in safari ...


1

This is actually a bug in iOS 8 (and 8.1). If you have guided access enabled when updating from iOS 7 it stops working. The fix is to turn it off, reboot the device, then turn it back on again.


1

I think what you are asking is how to enable (network) "Home Directories". Workstations need to be connected via Gigabit Ethernet for this to work well. For laptops, use "Portable Home Directories" over a robust Wi-Fi network (or Ethernet) Yes, you can use any (direct-attched) storage device, though for 40TB, I would recommend a RAID over Thunderbolt (2 if ...


1

Please enabled all the applicable ports. Apple's documentation (http://support.apple.com/kb/ht5302) also lists the service needing TCP ports 2195, 2196, and 5223 for the service to send/receive push notifications, which AFAIK is how the service communicates with clients.


1

Yes there are variables you can enter for common user fields http://krypted.com/mac-security/using-payload-variables-in-profile-manager/


1

if you sign out of iTunes / App Store, than won't disconnect you from iCloud and vise versa


Only top voted, non community-wiki answers of a minimum length are eligible