manick Posted June 5, 2015 Posted June 5, 2015 Hi all, I wondered if anybody could point me in the direction of a guide to help set up the Mac Profile Manager in a windows domain. A couple of minutes into the setup and I'm wondering what I should do! and I've no doubt there will be several other queries as I go along. The first issue I have hit is with the setting up of the Mac Server as a Network Directory, I've taken this to mean that this is the Mac version of AD, is my assumption correct? if so how will it affect my current AD structure (if at all?)? Any help appreciated! Regards Nick
furby Posted June 8, 2015 Posted June 8, 2015 The first issue I have hit is with the setting up of the Mac Server as a Network Directory, I've taken this to mean that this is the Mac version of AD, is my assumption correct? if so how will it affect my current AD structure (if at all?)? Yes and, it doesn't affect it at all. Assuming you're on the the latest software versions, the Krypted is always quite thorough. Configure Profile Manager On Yosemite Server (Yosemite running the Server app) | krypted.com 1
manick Posted June 11, 2015 Author Posted June 11, 2015 Thanks Furby! I've now added the server to the domain installed Open Directory and am now in the process of setting up a profile for the iPads in profile manager. I'm lost as to how I'm now supposed to add apps to the devices. We already had a VPP account, so I've downloaded the majority of Apps I need for the devices. As far as I can see though I can't push these out to the device groups and can only push devices out to user groups, is this correct? We've got 30 shared devices, how does it work with users/how have others worked this? Many thanks for any help!! Nick
furby Posted June 12, 2015 Posted June 12, 2015 Sounds like you're well on the way to having this done. I might not be as much help here though, I've set up all the infrastructure to deploy apps (sounds like you have too), but haven't actually pushed one out. I'll give it a go later and see what happens @Quackers wrote a guide, I imagine it's still broadly correct http://www.edugeek.net/forums/netbooks-pda-phones/130232-setup-silent-app-deployment-guide.html#post1112343
Carter Posted June 12, 2015 Posted June 12, 2015 We run AD here and I've never had an issue. Apple's OD (Open Directory) would be the closest and even then has no affect on the AD domain.
manick Posted June 12, 2015 Author Posted June 12, 2015 Hi All, I now have a different issue, I'm attempting to enrol devices but it sticks on pending, nothing more happens. I've asked SWGFL to open the necessary ports to the internal IP address of the Mac (as I'd seen this issue raised elsewhere) but still nothing. Has anybody any ideas where I should be looking or what I can test next? Again, many thanks!! Nick
furby Posted June 12, 2015 Posted June 12, 2015 (edited) Could be a few things, Are you going to http://machinename.domain.whatever/mydevices to enroll them? Are you installing the Trust Profile? What stage do you get to before it starts pending? Edit/Actually do you mean it's says "pending' in Profile Manager itself? Edited June 12, 2015 by furby
manick Posted June 12, 2015 Author Posted June 12, 2015 Hi Furby, Yes, it says pending in Profile Manager. I Install the Trust profile first, then I enroll, then....nothing! Cheers Nick
furby Posted June 12, 2015 Posted June 12, 2015 Cancel the pending task in profile manager Uninstall the trust profile from the device and try again. For some reason, recently I've had to install the trust profile after enrolling devices. I just enrolled my iPhone to the directory, was sitting pending for a few minutes, how long did you give it? If it doesn't fail I suspect there's no error in the logs but check the Profile manger(service) logs in the server.app. Does it show it processing the IP of the device you're enrolling? Or anything else that sticks out as not right?
manick Posted June 12, 2015 Author Posted June 12, 2015 Hi Furby, I've tried un-installing and reinstalling the trust profile, but no joy, I'm leaving it a good hour or more!! I'm off home in a minute but will dig more under the bonnet on Monday. I may try starting from scratch and see what happens. Thanks for the help so far and have a good weekend!! Cheers Nick
alfatec Posted June 15, 2015 Posted June 15, 2015 Hi Manick, Make sure you put an exception to the Apple server in your proxy bypass settings otherwise it will stay on pending.
manick Posted June 18, 2015 Author Posted June 18, 2015 Hi Alfatec, I presume you are referring to the iPads? If so I am unable to put in an exception. I have uninstalled an re-installed the server, but the same issue applies. Enrolling devices are still pending. At one point I made a change to the Everyone user group and some settings were changed when I manually installed the profiles, I've since tried again and I am informed that it is unable to apply the restrictions unless the device is 'supervised', which I cannot do as the device won't enrol! cheers all Nick
alfatec Posted June 18, 2015 Posted June 18, 2015 Have you tried using a proxy.pac file. The information I was relating to was for Macbookpro's.
manick Posted June 18, 2015 Author Posted June 18, 2015 OK, So I ran "/usr/bin/nc -v -w 15 gateway.push.apple.com 2195" on the server and got a "failed, connection refused" message. My first port of call will be SWGFL from whom I requested the changes in the firewall and who have said they carried them out, however I will get them to double check! Cheers Nick
manick Posted June 19, 2015 Author Posted June 19, 2015 (edited) I'm slowly getting there an am now pushing out the pac file to a device and I'll see how I get on from there. Many thanks for the help so far. Nick Edited June 19, 2015 by manick
manick Posted June 22, 2015 Author Posted June 22, 2015 It is now working it was a misunderstanding on my part how it worked! I thought that the only ports that needed opening were between the server itself and the Apple services. SWGFL have now opened up all of the ports for me and I can enroll devices at last. My bad... Thanks for all your help people! Nick
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now