Profile Manager half working

[PeterH]

Got Profile Manager half working on OS X Server (Mavericks). I can get it to push device settings out to our Mac OS X 10.9 clients no problem. But how do you get it to push settings out to users? I have created some OD users, added them to a group in Profile Manager and made some settings for that group. But the settings never get applied on the clients. You don't even get anything showing up in Active Tasks or Completed Tasks in Profile Manager. It never appears anywhere. Tried it for both users and groups. Any ideas?

[ste1988]

Haven't got as far as you yet in my deployment but applying settings to the machine worked well, have to tested the manual download of the config file. To apply the settings to the machine did take a few restarts.

[Rick2134]

This is a bug in OS X Server Mavericks, we are still awiting a fix from Apple.... The only way to depoly settings currently in Mavericks is to the client end not user. Edited March 5, 2014 by Rick2134

[OhDear]

We have it working on Mavericks fine at a few sites.

 

There is an issue with Mavericks where you can't "Nest" the OD groups with AD groups but if you add the AD users individually to the OD group then the settings get applied.

[ste1988]

Haven't got as far as you yet in my deployment but applying settings to the machine worked well, have to tested the manual download of the config file. To apply the settings to the machine did take a few restarts.

 

Spoke too soon, when automatically pushing out profiles, it apples some right away, and other just seem to hang on applying, it would be great if there were some sort of refresh button, that would try re-applying the settings!

[RAS]

We have it working on Mavericks fine at a few sites.

 

There is an issue with Mavericks where you can't "Nest" the OD groups with AD groups but if you add the AD users individually to the OD group then the settings get applied.

 

Hi. We're at the same stage as you, I think. We can see the AD Users & Groups in the main Mavericks Server window, but have no real clue how to populate OD with them. (We got to this stage once we'd realised that Profile Manager can only 'see' existing AD Policy groupings at the moment, rather than the actual AD Group folder structure). With well over a thousand users, are you saying that we have to add them ONE AT A TIME to become bona fide OD users and groups?

[ste1988]

Getting a rather odd error when mapping drives, never was an issue in WGM.

 

 

Errors an error saying path is wrong, but then when clicking ok, maps the drive and it works perfectly fine, tried the path every possible way it could work, and it does.

 

Put still getting this error at logon.

[seawolf]

Have you checked the logs in Console to see what is triggering the error? This might shed some light on it.

 

I tested mapping shares with Profiles and determined that it wasn't 100% reliable, but didn't get that error from memory. I decided to use an AppleScript to map the network shares, which is saved as an app with a nice icon and run at login. It can also be run if the shares disconnect while the user is logged in, which happens quite often since so many of our teachers just close the lid and can go weeks or months without actually logging in to their account on the network (sigh).

 

The script that I use is below and can be edited easily for use in any environment:

 

try
set loggedInUser to do shell script "whoami"

set accountType to do shell script "dscl . -read /Users/" & loggedInUser & " | grep UniqueID | cut -c 11-"

set nodeName to do shell script "dscl . -read /Users/" & loggedInUser & " | awk '/^OriginalNodeName:/,/^Password:/' | head -2 | tail -1 | cut -c 2-"

set ADGroups to do shell script "dscl " & quoted form of nodeName & " -read /Users/" & loggedInUser & " | awk '/^dsAttrTypeNative:memberOf:/,/^dsAttrTypeNative:msExchHomeServerName:/'"

if accountType is less than 1000 then
	tell me to quit
end if

if ADGroups contains "AllStaff" then
	mount volume "smb:///Staff/" & loggedInUser & ";" & loggedInUser & ":password"
	mount volume "smb:///MediaLibrary/" & loggedInUser & ";" & loggedInUser & ":password"
	mount volume "smb:///Scans/" & loggedInUser & ";" & loggedInUser & ":password"
end if

if ADGroups contains "AllTeachers" then
	mount volume "smb:///Curriculum_Archives/" & loggedInUser & ";" & loggedInUser & ":password"
	mount volume "smb:///IWB/" & loggedInUser & ";" & loggedInUser & ":password"
	mount volume "smb:///Reports/" & loggedInUser & ";" & loggedInUser & ":password"
	mount volume "smb:///Teachers/" & loggedInUser & ";" & loggedInUser & ":password"
end if

if ADGroups contains "IWB_Group" then
	mount volume "smb:///Teachers/" & loggedInUser & ";" & loggedInUser & ":password"
	mount volume "smb:///IWB/" & loggedInUser & ";" & loggedInUser & ":password"
	mount volume "smb:///Scans/" & loggedInUser & ";" & loggedInUser & ":password"
end if

if ADGroups contains "OHS" then
	mount volume "smb:///OHS/" & loggedInUser & ";" & loggedInUser & ":password"
end if

if ADGroups contains "AdminDepartment" then
	mount volume "smb:///Admin/" & loggedInUser & ";" & loggedInUser & ":password"
end if

if ADGroups contains "FinanceStaff" then
	mount volume "smb:///Finance/" & loggedInUser & ";" & loggedInUser & ":password"
end if

if ADGroups contains "PrimaryStudents" then
	mount volume "smb:///Primary/" & loggedInUser & ";" & loggedInUser & ":password"
end if

if ADGroups contains "PrimaryTeachers" then
	mount volume "smb:///Primary/" & loggedInUser & ";" & loggedInUser & ":password"
end if

if ADGroups contains "ICT" then
	mount volume "smb:///Installers/" & loggedInUser & ";" & loggedInUser & ":password"
	mount volume "smb:///ICT/" & loggedInUser & ";" & loggedInUser & ":password"
	mount volume "smb:///Archives/" & loggedInUser & ";" & loggedInUser & ":password"
	mount volume "smb:///ISO-Library/" & loggedInUser & ";" & loggedInUser & ":password"
end if

if ADGroups contains "VCAL" then
	mount volume "smb:///VCAL/" & loggedInUser & ";" & loggedInUser & ":password"
end if

if ADGroups contains "MediaStudents" then
	mount volume "smb:///VCD/" & loggedInUser & ";" & loggedInUser & ":password"
end if

if ADGroups contains "MediaTeachers" then
	mount volume "smb:///VCD/" & loggedInUser & ";" & loggedInUser & ":password"
end if

on error error_message number error_number
display alert ("One or more NetworkDrivefailedtoinstall.
Pleasereportthiserrortothe ICT Help Desk.

") ¬
	message error_message ¬
	¬
	& (" Error number ") & error_number & "."
end try

 

p.s. you can also use "afp" rather than "smb" shares in the script. We mostly use AFP, but I edited it as I suspect many on here will just be using SMB.

Edited March 27, 2014 by seawolf