+ Post New Thread
Results 1 to 8 of 8
Mac Thread, Profile Manager half working in Technical; Got Profile Manager half working on OS X Server (Mavericks). I can get it to push device settings out to ...
  1. #1

    Join Date
    Oct 2005
    Posts
    62
    Thank Post
    7
    Thanked 20 Times in 17 Posts
    Rep Power
    21

    Profile Manager half working

    Got Profile Manager half working on OS X Server (Mavericks). I can get it to push device settings out to our Mac OS X 10.9 clients no problem. But how do you get it to push settings out to users? I have created some OD users, added them to a group in Profile Manager and made some settings for that group. But the settings never get applied on the clients. You don't even get anything showing up in Active Tasks or Completed Tasks in Profile Manager. It never appears anywhere. Tried it for both users and groups. Any ideas?

  2. #2
    ste1988's Avatar
    Join Date
    Jan 2012
    Location
    West Midlands
    Posts
    176
    Thank Post
    77
    Thanked 24 Times in 23 Posts
    Rep Power
    13
    Haven't got as far as you yet in my deployment but applying settings to the machine worked well, have to tested the manual download of the config file. To apply the settings to the machine did take a few restarts.

  3. #3
    Rick2134's Avatar
    Join Date
    Feb 2009
    Location
    Leeds
    Posts
    30
    Thank Post
    16
    Thanked 5 Times in 5 Posts
    Rep Power
    12
    This is a bug in OS X Server Mavericks, we are still awiting a fix from Apple.... The only way to depoly settings currently in Mavericks is to the client end not user.
    Last edited by Rick2134; 5th March 2014 at 05:17 PM.

  4. #4

    Join Date
    Sep 2012
    Location
    United Kingdom
    Posts
    94
    Thank Post
    22
    Thanked 4 Times in 4 Posts
    Rep Power
    4
    We have it working on Mavericks fine at a few sites.

    There is an issue with Mavericks where you can't "Nest" the OD groups with AD groups but if you add the AD users individually to the OD group then the settings get applied.

  5. #5
    ste1988's Avatar
    Join Date
    Jan 2012
    Location
    West Midlands
    Posts
    176
    Thank Post
    77
    Thanked 24 Times in 23 Posts
    Rep Power
    13
    Quote Originally Posted by ste1988 View Post
    Haven't got as far as you yet in my deployment but applying settings to the machine worked well, have to tested the manual download of the config file. To apply the settings to the machine did take a few restarts.
    Spoke too soon, when automatically pushing out profiles, it apples some right away, and other just seem to hang on applying, it would be great if there were some sort of refresh button, that would try re-applying the settings!

  6. #6
    RAS
    RAS is offline

    Join Date
    Mar 2014
    Posts
    2
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by OhDear View Post
    We have it working on Mavericks fine at a few sites.

    There is an issue with Mavericks where you can't "Nest" the OD groups with AD groups but if you add the AD users individually to the OD group then the settings get applied.
    Hi. We're at the same stage as you, I think. We can see the AD Users & Groups in the main Mavericks Server window, but have no real clue how to populate OD with them. (We got to this stage once we'd realised that Profile Manager can only 'see' existing AD Policy groupings at the moment, rather than the actual AD Group folder structure). With well over a thousand users, are you saying that we have to add them ONE AT A TIME to become bona fide OD users and groups?

  7. #7
    ste1988's Avatar
    Join Date
    Jan 2012
    Location
    West Midlands
    Posts
    176
    Thank Post
    77
    Thanked 24 Times in 23 Posts
    Rep Power
    13
    Getting a rather odd error when mapping drives, never was an issue in WGM.

    Screen Shot 2014-03-25 at 12.54.41.png
    Screen Shot 2014-03-25 at 12.55.03.png

    Errors an error saying path is wrong, but then when clicking ok, maps the drive and it works perfectly fine, tried the path every possible way it could work, and it does.

    Put still getting this error at logon.

  8. #8

    seawolf's Avatar
    Join Date
    Jan 2010
    Posts
    969
    Thank Post
    12
    Thanked 283 Times in 217 Posts
    Blog Entries
    1
    Rep Power
    175
    Have you checked the logs in Console to see what is triggering the error? This might shed some light on it.

    I tested mapping shares with Profiles and determined that it wasn't 100% reliable, but didn't get that error from memory. I decided to use an AppleScript to map the network shares, which is saved as an app with a nice icon and run at login. It can also be run if the shares disconnect while the user is logged in, which happens quite often since so many of our teachers just close the lid and can go weeks or months without actually logging in to their account on the network (sigh).

    The script that I use is below and can be edited easily for use in any environment:

    Code:
    try
    	set loggedInUser to do shell script "whoami"
    	
    	set accountType to do shell script "dscl . -read /Users/" & loggedInUser & " | grep UniqueID | cut -c 11-"
    	
    	set nodeName to do shell script "dscl . -read /Users/" & loggedInUser & " | awk '/^OriginalNodeName:/,/^Password:/' | head -2 | tail -1 | cut -c 2-"
    	
    	set ADGroups to do shell script "dscl " & quoted form of nodeName & " -read /Users/" & loggedInUser & " | awk '/^dsAttrTypeNative:memberOf:/,/^dsAttrTypeNative:msExchHomeServerName:/'"
    	
    	if accountType is less than 1000 then
    		tell me to quit
    	end if
    	
    	if ADGroups contains "AllStaff" then
    		mount volume "smb://<servername>/Staff/" & loggedInUser & ";" & loggedInUser & ":password"
    		mount volume "smb://<servername>/MediaLibrary/" & loggedInUser & ";" & loggedInUser & ":password"
    		mount volume "smb://<servername>/Scans/" & loggedInUser & ";" & loggedInUser & ":password"
    	end if
    	
    	if ADGroups contains "AllTeachers" then
    		mount volume "smb://<servername>/Curriculum_Archives/" & loggedInUser & ";" & loggedInUser & ":password"
    		mount volume "smb://<servername>/IWB/" & loggedInUser & ";" & loggedInUser & ":password"
    		mount volume "smb://<servername>/Reports/" & loggedInUser & ";" & loggedInUser & ":password"
    		mount volume "smb://<servername>/Teachers/" & loggedInUser & ";" & loggedInUser & ":password"
    	end if
    	
    	if ADGroups contains "IWB_Group" then
    		mount volume "smb://<servername>/Teachers/" & loggedInUser & ";" & loggedInUser & ":password"
    		mount volume "smb://<servername>/IWB/" & loggedInUser & ";" & loggedInUser & ":password"
    		mount volume "smb://<servername>/Scans/" & loggedInUser & ";" & loggedInUser & ":password"
    	end if
    	
    	if ADGroups contains "OHS" then
    		mount volume "smb://<servername>/OHS/" & loggedInUser & ";" & loggedInUser & ":password"
    	end if
    	
    	if ADGroups contains "AdminDepartment" then
    		mount volume "smb://<servername>/Admin/" & loggedInUser & ";" & loggedInUser & ":password"
    	end if
    	
    	if ADGroups contains "FinanceStaff" then
    		mount volume "smb://<servername>/Finance/" & loggedInUser & ";" & loggedInUser & ":password"
    	end if
    	
    	if ADGroups contains "PrimaryStudents" then
    		mount volume "smb://<servername>/Primary/" & loggedInUser & ";" & loggedInUser & ":password"
    	end if
    	
    	if ADGroups contains "PrimaryTeachers" then
    		mount volume "smb://<servername>/Primary/" & loggedInUser & ";" & loggedInUser & ":password"
    	end if
    	
    	if ADGroups contains "ICT" then
    		mount volume "smb://<servername>/Installers/" & loggedInUser & ";" & loggedInUser & ":password"
    		mount volume "smb://<servername>/ICT/" & loggedInUser & ";" & loggedInUser & ":password"
    		mount volume "smb://<servername>/Archives/" & loggedInUser & ";" & loggedInUser & ":password"
    		mount volume "smb://<servername>/ISO-Library/" & loggedInUser & ";" & loggedInUser & ":password"
    	end if
    	
    	if ADGroups contains "VCAL" then
    		mount volume "smb://<servername>/VCAL/" & loggedInUser & ";" & loggedInUser & ":password"
    	end if
    	
    	if ADGroups contains "MediaStudents" then
    		mount volume "smb://<servername>/VCD/" & loggedInUser & ";" & loggedInUser & ":password"
    	end if
    	
    	if ADGroups contains "MediaTeachers" then
    		mount volume "smb://<servername>/VCD/" & loggedInUser & ";" & loggedInUser & ":password"
    	end if
    	
    on error error_message number error_number
    	display alert ("One or more NetworkDrivefailedtoinstall.
    Pleasereportthiserrortothe ICT Help Desk.
    
    ") ¨
    		message error_message ¨
    		¨
    		& (" Error number ") & error_number & "."
    end try
    p.s. you can also use "afp" rather than "smb" shares in the script. We mostly use AFP, but I edited it as I suspect many on here will just be using SMB.
    Last edited by seawolf; 27th March 2014 at 11:12 AM.

  9. Thanks to seawolf from:

    ste1988 (27th March 2014)

SHARE:
+ Post New Thread

Similar Threads

  1. Apple Profile Manager - Push Settings Not Working Being Quashed By Smoothwall
    By jdell in forum Internet Related/Filtering/Firewall
    Replies: 5
    Last Post: 11th April 2014, 02:33 PM
  2. Replies: 4
    Last Post: 17th December 2013, 06:07 AM
  3. Replies: 11
    Last Post: 10th July 2012, 08:22 AM
  4. SIMS Profiles 7 offline working
    By Jonsi in forum MIS Systems
    Replies: 3
    Last Post: 3rd October 2008, 09:06 AM
  5. Software restriction policy, half working?
    By FN-GM in forum Windows
    Replies: 13
    Last Post: 10th December 2007, 12:22 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •