mezmerrick

I was in the same position some time ago, here's how I do things now. As you rightly state, the Volume Purchase Program is not available in the UK. What we do is have one Apple ID from which we purchase the apps we want once, we then gift ourselves the App the amount of times we need to cover the amount of iPads. Not ideal, but it covers us license wise. So we basically have a load of redemption codes which we have paid for, and install one copy of the App on all iPads. As for deployment, we have one dedicated Mac Mini and a 10 port USB hub - we sync all iPads through this Manually. The easiest way I found was to configure one iPad with all Apps, back it up and then restore it to all the others. Not perfect, but that's how we've started with things - and syncing 10 at a time saves time. Also, remember that you can wireless sync via iTunes - so you can add and remove Apps that way too (though you will need a pretty strong and reliable Wi-Fi network in place). I'm only just delving in to Profile Manager (MDM) and restricting our iPads myself, so this will probably make things a bit easier for us - especially to stop students setting Passcode's etc!! Hope this helps in some way.

Do you use Apple Remote Desktop? If you could find the last version of iTunes that worked you could distribute the package that way.

A quick Google on this suggests that it is a known issue, which has not been resolved by Apple. I couldn't find anyone mentioning a fix either. Maybe role back to the last version that worked?

The proxy authentication might well be your problem then. I deliver proxy info via WGM, but we don't use authentication. iTunes on 10.6.8 works fine here, so it could be that?

Any clues in the Console logs?

The one I use was just configured in the standard way. I believe you can configure one without the need for credit/debit card info, if that is going to be a problem (as it often can be for schools).

Yeh, I do usually tend to avoid first releases like the plague for production environments! We are planning on upgrading to Lion clients and Server though in the Summer, depending on my tests. We don't have anything older client-wise than 10.6.7. I'll probably leave it a year before Mountain Lion.

I'm currently planning a switch over in the Summer holidays from a 10.6 Server and WGM to a 10.7 Server and Profile Manager. I'm still working my way through a test setup to make sure I can replicate all of my preference settings in WGM with Profile Manager. If 10.8 server is stable when it comes out, I might take an early plunge to that if it can manage more! So far we are only using Profile Manager with our iPads, and it seems to work pretty well.

Yeh, I did think that wouldn't matter. Oh well, seems happy with 2008 x86.

I decided to go ahead and start from fresh in case I missed something, or messed something up. I built a new server running 2008 this time (I used 2003 last time). Followed your pdf guide and all is working hunky dory! Password changes are now moving with out error. Now I'm not sure if this was just a glitch somewhere a long the line, because I'm using 2008 instead of 2003, or because during building my new server I decided to check my GPO for password requirements and it was less than 6 characters. Thank you for your help anyway! Much appreciated.

It sure is. I've named it: ilmservice Yes, I've seen that. Wasn't much use i'm afraid. Thanks, I appreciate your effort.

Sure, I get: C:\Program Files\Microsoft Password Change Notification>pcnscfg.exe -LIST The service configuration is not set. Defaults will be used by the service. Default Service Configuration MaxQueueLength........: 0 MaxQueueAge...........: 259200 seconds MaxNotificationRetries: 0 RetryInterval.........: 60 seconds Targets Target Name...........: PCNSCLNT Target GUID...........: 1A1DFADF-FC93-4716-8A40-492BDE7F3337 Server FQDN or Address: pcs-billy-01.priory.internal Service Principal Name: PCNSCLNT/pcs-billy-01.priory.internal Authentication Service: Kerberos Inclusion Group Name..: PRIORY\Domain Users Exclusion Group Name..: Keep Alive Interval...: 0 seconds User Name Format......: 3 Queue Warning Level...: 0 Queue Warning Interval: 30 minutes Disabled..............: False Total targets: 1 C:\Program Files\Microsoft Password Change Notification> pcs-billy-01 is the name of the server running ILM.

Thanks for the fast response and for clearing up the PCNSCLNT bit! Yes, I have it installed on all of my DC's and rebooted them. According to the Event Viewer, the service starts fine; but as soon as I change a password I get errors (as mentioned above). I've tried so many different combinations of SPN and PCNS settings, but nothing seems to work! :/

Hi Guys, bit of a long shot (I realise this is an old thread). I'm having trouble setting up our PCNS solution for our Live@EDU. When I configure as per MS instructions and RabbieBurns pdf guide (found in a different thread), I change a password to test and get an error in the event log: PCNSSVC 6025 Password Change Notification Service received an RPC exception attempting to deliver notification. The password change notification target could not be contacted. User Action: The target server may not be running. Verify that the target server is running. Now what I'm slightly confused about during setup is regarding PCNSCLNT. Is this the actual word I use? Or a computer name supposed to go in place of that? I hope someone can help me out. Starting to hit my head against a brick wall!