Search the Community

Hey hey, We have a bit of an issue with the ipad setup. In March all was working on, but for the last month we have had no luck with distributing apps to ipads in addition to buying new apps and getting them to appear in the profile manager. Nothing has been changed to my knowledge and all the settings look ok The ipads do talk somewhat to the profile manager as the enrolling and pushing apps that are already installed go into the completed tasks log and appear ok. The apps when being pushed to the ipads if they are new to the ipad will say ‘No Copies Available’ With apps that have been associated with that ipad before will with go through ok or get stuck on ‘In Progress’ Our ipads are on various IOS levels some are on 9.1 to the latest. I thought I would mention this as I know there was an issue with 9.2. I have also replaced the VPP token When buying from the educational store, the item is purchased ok and all e-mail notifications are done as usual. But sadly the item never appears on the server to distribute later. I think that this is the main issue and the part will hopefully fix the other issues we are having distributing to ipads Has anyone had this issue before or got any ideas?

I am looking for a way to push out Homepage settings for Firefox, Chrome and Safari with a profile to student iMac computers. In past, changed default profile but that is not working properly now with El Capitan and from what I read not the correct way to do it. Thanks for any help and guidance.

Afternoon all, Profile manager is driving me nuts. Basically I'm moving from a 10.9 and Workgroup Manager server environment to a 10.9 client and 10.10 server running profile manager. I have a set of test machines which point at the new mac server running profile manager - I'm not crossing the streams with any current / old systems. I will re-image the estate once (if ever) profile manager is sturdy. My main question is, are there any techies out there who have a successful Profile Manager environment within an education establishment? We have an AD domain and use OD to piggy back on to it. Basically the Mac server just sets user accounts and machine settings - no network files as such are stored on the mac server. Workgroup manager worked a treat and I'm quite comfortable with editing custom plists. Profile manager however just seems to clunky with failed profile installs here and there. Things that I've not got solid yet on the Profile Manager set up are : - desktop wallpaper set from a central network location - sidebar favourites intermittent - exchange settings intermittent (setting server location and username etc) - plus I'm sure lots more that will become apparent

Hi Everyone, Have an issue where I am unable to send Profile Manager commands over the internet. For example, I can send Profile Manager commands over the LAN normally. I can enable lost mode, update device info etc.. But when it comes to doing it to a managed device that's been taken off site or tethered to my iPhone, when sending a command from the profile manage console it just sticks in the job queue and nothing happens. When I check the php.log I can see the jobs I requested when the iPad was on the LAN but I am not able to see the jobs that I requested when the iPad was taken off site or tethered to my iPhone. I've spoken to our ISP who manages the ports and they have assured me that all necessary ones for Profile Manager have been opened up. I've tried my best to troubleshoot why this may not be working but i'm at a loose end. Anyone out there who is able to lend a hand?

Is it possiable to turn off the requirement to have a passcode on ipads ios7 I have configured ipads in mdm and final got it send apps out to devices with help from guides on here but the passcode could be a problem. I do not have passcode payloads configured but I still getting asked to set passcode. Thanks Stuart

We're trying to set up some infrastructure to allow us to manage Mavericks Mac clients, as we're going to be buying new Macs in the summer which won't be able to downgrade from Mavericks. We have a server with OS X 10.9.3 and Server.app 3.1.2, the server is an Open Directory master and is bound to our Active Directory. We can see the AD groups in Profile Manager but when we click on Members it reports "No Members". Members are visible in the Directory Editor in Directory Utility. Additionally, I've just noticed that Profile Manager is only displaying some of the AD groups we have and not all of them. There are many groups visible in Server.app that are not showing up in Profile Manager. Anyone have any ideas what to do to correct this? I've already tried wiping the Profile Manager database using the wipeDB.sh.

Good evening all, I'm having a nightmare and hopefully someone can help me out with what I imagine is a simple problem... I have a Server 2003R2 Based network Hosting DNS/DHCP/ETC. Cisco infrastructure including Wi-Fi I also have 50 iPads and a Mac Server to manage them, I've had everything working great at home. I've setup the DNS on the windows side and everything else on the mac, SSL Certificate and trust profile etc, upon enrolment Im receiving the message "SCEP server configuration is not supported" I have literally no idea where to start with this, I've had everything working at home so I'm not sure sure what the problem is? Many Thanks, Chris

So, i have 32 ipads on the Apple Profile Manager etc. Am trying to add another - have created the user, prepared & supervised it on Apple Configurator, now I'm trying to enroll it for VPP app distribution - I send the invitation to the user device , go through the steps of logging in with Apple ID, accept the terms & conditions and then it says "Yoru sessionhas timed out. Try again" I have tried around 40 times , i have reset the network settings on the device, created an new Apple ID, cleared the Safari cookies, tried different wireless LAN's (we have a few different ones), have even erased and redone the device twice. Last time I did it , it worked after about 3 attempts ( and resetting network settings ) - i am now at my wits end ! Any ideas??

Does anyone know where I can get decent help for a PM issue I'm having? Just upgraded our server hardware (mac) and OS. Running Big Sur on the server and Catalina on our clients. Using PM to set restrictions etc. Have 43 Macs. All bar five are working fine. The five that aren't simply refuse to pick up/receive the settings configs from the groups they are in. This is an excerpt of an email I have sent to my Mac guy (who is not available atm) explaining what I have tried: DNS is correct on all of them - they can ping both IP and DNS names for the server and their own names They have all been rebuilt at least twice. . They are added to PM and have the trust and Remote Management profile/certs installed. I have manually removed and re-added these more times than I can count. If I look at a working Mac (one with the settings applied) I can see all the relevant settings from each group appearing in the profiles section. For those not working there are no settings profiles appearing. I have even gone as far as to physically change known working network cables etc to try and troubleshoot.. I have also tried to manually download and installed the settings via the download option in Profile Manager. For most of these settings the download button is greyed out, so this doesn't work anyway but there is one setting that allows downloads. Problem is when I try to install the setting, I get an error message: This profile must originate from a user approved MDM server Getting desperate now... I have done some googling and I see mentions of PHP logs and APNS logs but I have neither of those on the server despite turning on the APNS bit using commands found on the web.. I really don't know enough about Macs to take this any further so if there's anyone out there with any insight or who can direct me to someone who may know something please respond!!!

Hi all, Over the summer we have had a mac server installed to help manage our new 25 iMac IT room. As a side line to this I am looking to use the profile manager to push configuration out to 7 iPad 2's that we now also have. Has anyone had any success trying to use this system? when I enroll the device the configuration fails to push out to devices. Any tips or suggestions would be handy. Cheers

Hi All We have just purchased some new iMac's along with a Mac Mini with Server. Everything is up to date and running Mavericks. We have created a master image which we have deployed through Deploy Studio. Everything is working fine except we are having issues getting the Mac's enrolled onto profile manager on the Mac Server. When we enroll an iMac it will show up as 'New Device' in profile manager instead of its actual name. If we leave the client mac's on eventually one by one very very slowly they enroll at silly times such as 1:30am. It only enrolls one at a time and so far we have only managed to get two enrolled. We have got another 25 to enroll but if we leave them to sort them selves they could take days at the rate its going. Has anybody had a similar issue or have any idea's what our problem could be? Sure it's something silly, but we have tried everything we see possible to resolve the issue. Thanks, Jack

Hi. I have a mac server OS X 10.9.5 with Server-app. We enroll and administrate about 1000 ipads with Profile manager. I ran the update of Server-app to 3.2.2 and now we no longer can login to the webinterface of profile manager or mydevices. We get the message: We're sorry, but something went wrong. We'e been notified about this issue and we'll take a look at it shortly. (if you're the administrator of this website, then please read the log file "profilemanager.log" to find out what went wrong.) I have the Time machine running sence years back but i dont exactly know which files to recover. I don't know if i can safely remove Server-app and install it again without loseing the database of all devices etc. This is the actions of the service log for Profile manager ## When I just browse to the webinterface of profilemanager [2678] [2014/10/20 12:09:06.896] I: Processing MagicController#admin_will_load (for xxx.yyy.zzz.xxx at 2014-10-20 12:09:06) [2678] [2014/10/20 12:09:06.898] I: auth_token doesn't exist [2678] [2014/10/20 12:09:06.898] I: Filter chain halted as [:verify_auth_token] rendered_or_redirected. [2678] [2014/10/20 12:09:06.898] I: Completed in 2ms (View: 0, DB: 2) | 403 Forbidden [https://xxx.zzz.yyy/magic/admin_will_load] [2679] [2014/10/20 12:09:08.401] I: Processing MagicController#do_magic (for xxx.yyy.zzz.xxx at 2014-10-20 12:09:08) [2679] [2014/10/20 12:09:08.403] I: auth_token doesn't exist [2679] [2014/10/20 12:09:08.403] I: Filter chain halted as [:verify_auth_token] rendered_or_redirected. [2679] [2014/10/20 12:09:08.403] I: Completed in 2ms (View: 0, DB: 2) | 403 Forbidden [https://xxx.zzz.yyy/magic/do_magic] ## When login with any account [2680] [2014/10/20 12:11:15.983] I: Processing AuthenticationController#callback (for xxx.yyy.zzz.xxx at 2014-10-20 12:11:15) [GET] [2680] [2014/10/20 12:11:16.272] F: ActiveRecord::StatementInvalid (PG::Error: ERROR: relation "view_all_user_groups_users_flat" does not exist LINE 2: FROM view_all_user_groups_users_flat AS j ^ : SELECT COUNT(j.*) FROM view_all_user_groups_users_flat AS j WHERE j.user_id = 7 AND j.user_group_id = 802 LIMIT 1 ): vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/connection_adapters/abstract_adapter.rb:227:in `rescue in log' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/connection_adapters/abstract_adapter.rb:204:in `log' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/connection_adapters/postgresql_adapter.rb:520:in `execute' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/connection_adapters/postgresql_adapter.rb:1002:in `select_raw' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/connection_adapters/postgresql_adapter.rb:989:in `select' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/connection_adapters/abstract/database_statements.rb:7:in `select_all' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/connection_adapters/abstract/query_cache.rb:60:in `block in select_all_with_query_cache' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/connection_adapters/abstract/query_cache.rb:81:in `cache_sql' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/connection_adapters/abstract/query_cache.rb:60:in `select_all_with_query_cache' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/connection_adapters/abstract/database_statements.rb:13:in `select_one' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/connection_adapters/abstract/database_statements.rb:19:in `select_value' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/base.rb:920:in `count_by_sql' app/models/user_group.rb:371:in `user_is_member_of_group' app/models/user.rb:293:in `user_is_admin?' app/controllers/application_controller.rb:258:in `verify_admin_logged_in' vendor/ruby/1.9.1/gems/activesupport-2.3.18/lib/active_support/callbacks.rb:178:in `evaluate_method' vendor/ruby/1.9.1/gems/activesupport-2.3.18/lib/active_support/callbacks.rb:166:in `call' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/filters.rb:225:in `call' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/filters.rb:629:in `run_before_filters' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/filters.rb:615:in `call_filters' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/filters.rb:610:in `perform_action_with_filters' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/benchmarking.rb:68:in `block in perform_action_with_benchmark' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/benchmarking.rb:68:in `perform_action_with_benchmark' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/rescue.rb:160:in `perform_action_with_rescue' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/flash.rb:151:in `perform_action_with_flash' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/base.rb:532:in `process' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/filters.rb:606:in `process_with_filters' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/base.rb:391:in `process' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/base.rb:386:in `call' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/routing/route_set.rb:438:in `call' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/dispatcher.rb:87:in `dispatch' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/dispatcher.rb:121:in `_call' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/dispatcher.rb:130:in `block in build_middleware_stack' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/string_coercion.rb:25:in `call' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/string_coercion.rb:25:in `call' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/params_parser.rb:15:in `call' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/session/abstract_store.rb:177:in `call' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/query_cache.rb:29:in `block in call' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/connection_adapters/abstract/query_cache.rb:34:in `cache' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/query_cache.rb:9:in `cache' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/query_cache.rb:28:in `call' vendor/ruby/1.9.1/gems/activerecord-2.3.18/lib/active_record/connection_adapters/abstract/connection_pool.rb:361:in `call' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/failsafe.rb:26:in `call' :10:in `synchronize' vendor/ruby/1.9.1/gems/actionpack-2.3.18/lib/action_controller/dispatcher.rb:106:in `call' vendor/ruby/1.9.1/gems/rails-2.3.18/lib/rails/rack/static.rb:31:in `call' vendor/ruby/1.9.1/gems/rails-2.3.18/lib/rails/rack/log_tailer.rb:17:in `call' vendor/ruby/1.9.1/gems/thin-1.5.1/lib/thin/connection.rb:81:in `block in pre_process' vendor/ruby/1.9.1/gems/thin-1.5.1/lib/thin/connection.rb:79:in `catch' vendor/ruby/1.9.1/gems/thin-1.5.1/lib/thin/connection.rb:79:in `pre_process' vendor/ruby/1.9.1/gems/thin-1.5.1/lib/thin/connection.rb:54:in `process' vendor/ruby/1.9.1/gems/thin-1.5.1/lib/thin/connection.rb:39:in `receive_data' vendor/ruby/1.9.1/gems/eventmachine-1.0.3/lib/eventmachine.rb:187:in `run_machine' vendor/ruby/1.9.1/gems/eventmachine-1.0.3/lib/eventmachine.rb:187:in `run' vendor/ruby/1.9.1/gems/thin-1.5.1/lib/thin/backends/base.rb:63:in `start' vendor/ruby/1.9.1/gems/thin-1.5.1/lib/thin/server.rb:159:in `start' vendor/ruby/1.9.1/gems/thin-1.5.1/lib/thin/controllers/controller.rb:86:in `start' vendor/ruby/1.9.1/gems/thin-1.5.1/lib/thin/runner.rb:187:in `run_command' vendor/ruby/1.9.1/gems/thin-1.5.1/lib/thin/runner.rb:152:in `run!' thin:11:in `' [2680] [2014/10/20 12:11:16.273] I: Rendering /Applications/Server.app/Contents/ServerRoot/usr/share/devicemgr/backend/public/500.html (500 Internal Server Error) Does anyone have a clue what we can do to fix this?

Afternoon all, hopefully this will solve a lot of your headaches and answer two common Mac questions. Problem - Desktop wallpaper being centrally managed and dock showing question marks rather than network shares. Remedy: So, the problem with setting your desktop wallpaper on a networked Mac running Yosemite and above is that the network shared is mapped AFTER the preference kicks in to set the wallpaper. To fix this, I created the desktop.jpg and placed it in a network location which all users have read access to. I then created a automator script which takes an input (the full path of the desktop.jpg) and then sets the wallpaper. This script has a 2 second pause at the start to ensure it runs after network connections have occurred. I made a local folder on the client mac named "Scripts", set the rights to everyone read only and put the automator app in there (ensure the automator app has read access for all network users or you may get an access denied icon displaying for other users). Use profile manager to set a "launch at login" item to point at the script. Ensure "desktop lock picture" is OFF to allow the script to set the wallpaper. This flag is set under "restrictions" within Profile manager. Happy days. The second common question is about having network shares on the dock. Again, network shares are connected AFTER the dock settings, so the dock doesn't know where to look and unfortunately doesn't connect to the network shares after clicking the question mark. Same fix really, make an automator app to kill the dock after a 2 second pause. Add script to profile manager the same way as before. screen shots and example automator files attached (note, the paths in the automator script obviously relate to my place of work - just change the paths to match you needs). cheers WallpaperAndDockAps.zip

Hello everyone, I have installed a PaperCut MF secondary server on our Mac Mini server and have created each of the MFDs as well as the Virtual Print Queue for the hold/release queue. However, when adding the Virtual Print Queue to Profile Manager (for a device group), the printer does not appear on the clients and says, "No Printer Selected". I click the Printer drop down and it is empty. Looking at the "Profiles" part of "System Preferences" it shows that this particular part has applied to the client. The Virtual Print Queue is set to use the Generic Postscript Driver as mentioned on a PaperCut help topic. Any help would be greatly appreciated as I am beginning to tear my hair out with it!! Thanks.

Googled this and cannot find any info, so hopefully one of you know. We have an XServe (early 2009) with server app and OS X 10.11.6 installed that pushes our profiles from Profile Manager. This works great on 10.11.x clients, but I am building a 10.12.3 image and profile manager will not push the device profiles. I suspect we need to upgrade the OS on the server to 10.12.x, but cannot find confirmation of this anywhere. Sierra needs a late 2009 model, so confirmation will hopefully get me some money. Anyone come across this, or have a link to confirm? T.I.A. Jon

Hey all, Just had a shiny new M1 Mac mini server installed running Big Sur. All our clients have been upgraded to Catalina (they're too old for anything more). Everything seems pretty much as expected bar one weird thing. One of the device groups in Profile Manager appears to have reset its name to "New Device Group". All the settings/payloads etx are unchanged. just the name. Problem is whenever I try to rename the group to what it should be I get Server Error please reload page. This happens on any browser on any computer even directly on the server. I thought I would simply create another group with the correct name and copy the settings across to it but apparently this cannot be done... I'm assuming that renaming a group that already has members can't be done - hence the "server error". Am I correct? Is there a way to rename the group or copy the settings to a new, correctly named group? Googling for stuff containing "New Device Group" and narrowing it down to what I need is quite challenging; or there's just nothing out there. TIA Mark P.

I put this in networks as I feel the problem is in my network somewhere but I cannot find the source of the issue. Long story short I set up a MacOS server running OS 10.10 and profile manager and all the goodies to manage a lab of macs we are deploying. Everything seems to work until I move a mac to a different subnet/vlan. I know certain ports need to be open for traffic to communicate and I do not see any reason why I would have ports 2195, 2196, 5223, 1640 blocked on internal traffic. In some reading on the internet I found that a IP Helper statement for the IP of the MacServer is needed on each VLAN for some traffic to communicate so I set that up on my core switches too (I do not think I need it on the endpoint switches) My network is primarily HP ProCurve based with some cisco switches thrown in for our Wireless. All the managed macs will be wired (at least at this point) but if I can get this to work we may use it for the handful of MacBooks we have assigned to some teachers. I am curious what I can check to see if the desired ports are opened and test communication for pushing profile settings across subnets. If I can get the Macs to Netboot and image across subnets too that is just an added bonus.