abillybob Posted May 31, 2017 Posted May 31, 2017 Hi All So finally after a bunch of issues with profile manager, certificates and OD I have been able to enroll a Mac into profile manager. I have gone into groups on profile manager and set a bunch of restrictions under an AD group called Pupils and saved it. I then logged in as a child under that same group, it took around 1 minutes to login and when it did it hasn't applied any of the settings. Somehow it seems like the desktop background I've set is being applied as that works but everything else such as their allowed apps etc isn't. I checked profile manager and it just says under 'Completed Tasks' that 'Push Settings: Pupils 1 Failed' I have tried to login a couple of times after that as the same student but profile manager won't report it's doing anything else after that first initial push of settings. I have used this app to ensure that push settings can work called "Push Diagnostic" and it seemed to work fine. Can anyone help? I'd really appreciate it!! Thanks
SamanthaD Posted June 1, 2017 Posted June 1, 2017 I always used to have issues with Profile Manager - usually restarting the Mac server sorted 98% of them!
abillybob Posted June 1, 2017 Author Posted June 1, 2017 Nope not that just restarted the server and still saying the same thing just keeps failing! :/ 1
Shadow_Walker Posted June 1, 2017 Posted June 1, 2017 Know this won't be much help but we had to ditch profile manager as it just would not work for our mac suite. Part solution was to use workgroup manager (had to install earlier version of mac os) as it was more stable but in the end we invested in casper suite and it just worked for us. 1
abillybob Posted June 1, 2017 Author Posted June 1, 2017 We used Casper but could never quite get that working either. I'm so close with profile manager it hurts the settings just won't apply Grrr FML!!!
Shadow_Walker Posted June 1, 2017 Posted June 1, 2017 We used Casper but could never quite get that working either. I'm so close with profile manager it hurts the settings just won't apply Grrr FML!!! I know I spent weeks trying to get Profile Manager working. For some reason it just does not seem to work as intended. 1
abillybob Posted June 1, 2017 Author Posted June 1, 2017 Does this mean anything to anyone? 'ErrorCode'=>-307, 'ErrorDomain'=>'ConfigProfilePluginDomain', 'LocalizedDescription'=>'Some required information in the profile is missing.' I seem to get this error message when profile manager tries to push the settings?
Brimstone Posted June 2, 2017 Posted June 2, 2017 You need to ensure all the correct ports are open, if you couldn't get Casper working I would suggest checking them... https://support.apple.com/en-gb/HT202487 1
abillybob Posted June 2, 2017 Author Posted June 2, 2017 You need to ensure all the correct ports are open, if you couldn't get Casper working I would suggest checking them... https://support.apple.com/en-gb/HT202487 Already done this and tested. Those ports are all working. Really can't get my head around this!
jb2201 Posted June 3, 2017 Posted June 3, 2017 Are you going through a proxy server? If so make sure that the IP of your Mac server is being bypassing the proxy.
abillybob Posted June 4, 2017 Author Posted June 4, 2017 Are you going through a proxy server? If so make sure that the IP of your Mac server is being bypassing the proxy. What do you mean? Our mac servers name and IP range are in the proxy exception settings if that's what you mean? We're panicking a bit now as we tried as much as we could to get it working but still nothing. The macs where supposed to be all done by Monday as the music teacher uses them a lot for coursework and exams on garageband. Though without pupil restrictions we're not going to be able to let them use them in mass as when they login now they're effectively an administrator.
AngryITGuy Posted June 4, 2017 Posted June 4, 2017 Profile Manager is a PITA it works here but that was after much messing about. Even now we have restrictions applied to AD groups but when I go in to that group on Profile Manager to modify the restrictions the policy is empty ... yet it's still applying restrictions! I'm going to trash it and revert it back to default in the summer and start again but regarding your problem are the Macs bound to AD, OD or both? Might be worthwhile checking DNS entries ... but then again if you've bound them to the domain DNS won't be an issue! Usually when we have had issues with pushing out restrictions it's always been down to an issue with the firewall blocking ports but you've said that all the necessary ports are open! Is the profile Manager certificate installed on the Macs? How are you enrolling the Macs in Profile Manager, we had an issue with enrolment and I found that you have to install the Trust Profile and then the Enrollment Profile. As a temporary workaround you could try applying the restrictions to the device group instead of the AD group.
abillybob Posted June 5, 2017 Author Posted June 5, 2017 We where using workgroup manager and it never had an issue but after a powercut the mac server restarted and updated itself, something I was putting off and even though the Workgroup Manager settings where still working fine and dandy I couldn't edit them anymore so we where pretty much forced to go with Profile Manager. The Macs are bound to both, AD and OD, already checked DNS and it's all fine the Mac servers name resolves to the correct IP and visa versa. Yes the profile manager certificate and the trust profile are both installed on the client machines. Tried just doing the devices also but it fails each time as well.
Brimstone Posted June 5, 2017 Posted June 5, 2017 You're not using .local on the Mac Server, ? you need a FQDN
tobiasclarity Posted June 5, 2017 Posted June 5, 2017 We have never had profile manager working 100% stable. Unfortunately it is scarcely support by Apple. We were at one point having to reboot the mac server daily just to get the 'PUSH' side working to deploy what we needed etc. Its far from great! i agree with Shadow_Walker workgroup manager although old is a far more stable and reliable means! 1
abillybob Posted June 5, 2017 Author Posted June 5, 2017 You're not using .local on the Mac Server, ? you need a FQDN Not using .local and we're using the FQDN
aidenbran2000 Posted June 12, 2017 Posted June 12, 2017 You need to ensure all the correct ports are open, if you couldn't get Casper working I would suggest checking them... https://support.apple.com/en-gb/HT202487 Ports were are biggest issue as well. However profile manager just does not work as it is intended too!!!!
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now