tobiasclarity Posted April 10, 2013 Posted April 10, 2013 I am really confused, i built 9 imacs over the network with a new image i created and when i try and enrol any of them onto the profile manager they all seem to be using the same profile so for example if i logon to mac1 and try and enrol it it will go on fine but if i then log onto mac2 it says already enrolled and equally if i then remove the profile from mac 2 then mac 1 loses it. Sorry this is probably something really simple but has totally thrown me off
tobiasclarity Posted April 10, 2013 Author Posted April 10, 2013 Also just to add the machine wasnt enrolled before it was imaged and then sent out
Sean-OC04 Posted April 10, 2013 Posted April 10, 2013 I am really confused, i built 9 imacs over the network with a new image i created and when i try and enrol any of them onto the profile manager they all seem to be using the same profile so for example if i logon to mac1 and try and enrol it it will go on fine but if i then log onto mac2 it says already enrolled and equally if i then remove the profile from mac 2 then mac 1 loses it. Sorry this is probably something really simple but has totally thrown me off After seeing all the questions you keep posting on here, have you not thought about getting an Apple Certified engineer to install it?
tobiasclarity Posted April 10, 2013 Author Posted April 10, 2013 After seeing all the questions you keep posting on here, have you not thought about getting an Apple Certified engineer to install it? Thank you kindly for the knife in the side
tobiasclarity Posted April 10, 2013 Author Posted April 10, 2013 Also way to plug your own business wink wink
truebluesteve Posted April 10, 2013 Posted April 10, 2013 Have you considered using Meraki MDM to manage your Macs? 1
tobiasclarity Posted April 10, 2013 Author Posted April 10, 2013 Hi Steve I hadn't even had a chance to consider it to be honest, I had a very short space of time to make magic happen with an os I wouldn't normally deal with. Luckily most things have been pretty straight forward and I have already learnt a lot in the process. Cheers for the suggestion now things are calming down I should be able to have a look
DMcCoy Posted April 10, 2013 Posted April 10, 2013 (edited) I've not used OS X with OD for some time, but imaging with 10.5 had some issues binding to WGM due to duplicate kerberos IDs These are *old* instructions for fixing that, but it may be worth trying on *a* machine if configureLocalKDC still exists. You will probably want to unbind from all directories first then join after a reboot. 1. Using Keychain Access, locate the com.apple.kerberos.kdc certificate and key pair in the System keychain. Delete all three entries. 2. Using Terminal, execute this command to remove the local KDC: sudo rm -fr /var/db/krb5kdc 3. Using Terminal, execute this command to re-generate the local KDC root certificate and key pair: sudo /usr/libexec/configureLocalKDC Edited April 10, 2013 by DMcCoy 1
tobiasclarity Posted April 11, 2013 Author Posted April 11, 2013 I've not used OS X with OD for some time, but imaging with 10.5 had some issues binding to WGM due to duplicate kerberos IDs These are *old* instructions for fixing that, but it may be worth trying on *a* machine if configureLocalKDC still exists. You will probably want to unbind from all directories first then join after a reboot. 1. Using Keychain Access, locate the com.apple.kerberos.kdc certificate and key pair in the System keychain. Delete all three entries. 2. Using Terminal, execute this command to remove the local KDC: sudo rm -fr /var/db/krb5kdc 3. Using Terminal, execute this command to re-generate the local KDC root certificate and key pair: sudo /usr/libexec/configureLocalKDC Hey many thanks for taking the time to go through this, will try and take a look at it this weekend and give it a shot. Cheers again
3s-gtech Posted April 11, 2013 Posted April 11, 2013 We stuck with WGM rather than Profile Manager for Macs themselves (PM is used for iOS devices only here). It still works nicely in 10.8.
tobiasclarity Posted April 11, 2013 Author Posted April 11, 2013 I'm starting to wonder if that is the best way forward, I am currently using pm for everything however now I can't get ad users to pick up mac policies I am hoping I can just create a user group in wgm purely for ad users and add bits there I only need to map an smb share which works through od just not ad users
Sean-OC04 Posted April 12, 2013 Posted April 12, 2013 Also way to plug your own business wink wink Sorry, at what point was I plugging my own bushiness ? (not that I even have my own business) Have you tried looking at the following......? Configuring & Using Profile Manager 2 in OS X Mountain Lion Server | Krypted.com Profile Manager 2
tobiasclarity Posted April 12, 2013 Author Posted April 12, 2013 Sorry, at what point was I plugging my own bushiness ? (not that I even have my own business) Have you tried looking at the following......? Configuring & Using Profile Manager 2 in OS X Mountain Lion Server | Krypted.com Profile Manager 2 Thanks I know how profile manager works however this was a specific issue, plugging business was aimed at the company website you have in your profile, anyway no more on this we are all adults and I am not into point scoring
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now