Profile Manager 3.1.2 home sync setting being ignored on client

Hey,
We currently have all of our Mac clients successfully home syncing with Server 2.2.2 and WGM but we would like to upgrade to the latest version and finally move over to Profile Manager.
I am currently trying to test Server 3.1.2 on a closed network with a couple of test clients.
Everything seems to be working as expected and all deployment settings are being correctly set on each client.
However the one thing that refuses to work on the client is the Home Sync settings that have been deployed.
I have Home Sync set to sync at logout and manually only.
On the client i can clearly see that the variable "syncBackgroundSetAtLogout" is set to "sync" within the com.apple.homeSync.plist file. However when I logout on either client I get no sync happening at all.
Manually syncing works fine but I need this logout sync setting to work as I do not wish to have to go to each client on our network and manually set the settings from the "mobile settings" pane in preferences.
Has anyone else come across this with 3.1.2 and maybe overcome it?
Thanks, Justin

Figured it out. I think it's just my interpretation of the sync settings that was the problem. For some reason you have to manage settings that you don't want managed and specify not to manage them. (?!)

Similar Messages

Firewall setting being ignored?

I've searched for this and not found anything about it, and hope this isn't a misunderstanding of how the firewall settings work, but I've been having an issue with the firewall since I installed Leopard. This was a fresh install, not an upgrade.
Basically, I have the firewall turned on, with the option to "Set access for specific services and applications" allowing apps such as iPhoto, Adium etc to allow incoming connections.
But despite that, when I start these applications, I always get a prompt saying "Do you want the application .... to accept incoming network connections?"
I had this from time to time with Tiger when an application was updated, and usually removing and re-adding it to the list sorted that. But I've tried that here, doesn't work.
Does anyone know why this is happening? It's irritating, but not the end of the world.

Hi,
I too have been experiencing this, and I've come across a few threads here on it.
For me it only happens with non-Apple applications. see this post - http://discussions.apple.com/thread.jspa?messageID=5956798&#5956798 and this - http://discussions.apple.com/thread.jspa?messageID=5829874&#5829874
Regards

Set or Change Device Name in Profile Manager

Hello,
Is it possible to set or change the device name of an enrolled device using profile manager?
I notice WGMs old 'Set computer name to computer record name' is still there under Login Window options, but I couldn't find away to actually change the record name.
Am I missing something obvious?

The only way I have found to change the device name in Profile Manager is to change it on the device itself, then wait for the updated info to reach PM.
The option to "set the computer name to computer record name" will set the computer name to the name of a computer record that matches in Open Directory (based on MAC). This option would allow you to change the device name in Profile Manager in a round about way... change the computer record name in OD, wait for the change to make it's way to the computer, then back up to the Profile Manager. In my experience, this doesn't take too long.

Exclude large files from mobile home sync

Hi, is there a way to exclude files from mobile home sync based on their file size? For example, I work with many VMs on my MacBook Pro, juggling around between different installation ISOs for various Linux distros and version of Windows. For the mostpart, these large ISOs (some pushing 4GB in size) are only used on my MacBook and not on my Mac Mini running OS X Lion Server.
I have mobile home sync set up, and it's been working great, until I happen to download a large file. If I'm not paying attention, my home directory will begin to sync with the server, pushing these large files over the wireless network, soaking up all of the bandwidth.
I understand I can create specific directories to exclude from syncing via Workgroup Manager, and also use various rules with regex in regard to the naming of the files and directories that should also be excluded from sync. But I'm often juggling around files of various formats between various directories in my development environment, and it would be troublesome to write rules that would encapsulate all of the scenarios. The most simple solution would be to base it on file size, and I can't seem to find much on this in Workgroup Manager.
Anyone know of a way to exclude files from mobile home sync based on their file size?

Hi, is there a way to exclude files from mobile home sync based on their file size? For example, I work with many VMs on my MacBook Pro, juggling around between different installation ISOs for various Linux distros and version of Windows. For the mostpart, these large ISOs (some pushing 4GB in size) are only used on my MacBook and not on my Mac Mini running OS X Lion Server.
I have mobile home sync set up, and it's been working great, until I happen to download a large file. If I'm not paying attention, my home directory will begin to sync with the server, pushing these large files over the wireless network, soaking up all of the bandwidth.
I understand I can create specific directories to exclude from syncing via Workgroup Manager, and also use various rules with regex in regard to the naming of the files and directories that should also be excluded from sync. But I'm often juggling around files of various formats between various directories in my development environment, and it would be troublesome to write rules that would encapsulate all of the scenarios. The most simple solution would be to base it on file size, and I can't seem to find much on this in Workgroup Manager.
Anyone know of a way to exclude files from mobile home sync based on their file size?

Lion Server Profile Manager Configuration

Hi Guys,
Currently have been testing Lion Server and Profile Manager Configuration.
So Far Have setup
Lion with Server App and Server Admin Tools
Configured Open Directory Master and enabled SSL on LDAP
Once Configured OD has created a CA Certificate can use for Profile Manager
Have Enabled in Server.app Web and Profile manager
In SSL Certificate Configuration have set CA Certificate for Web and Enabled Apple push notifications with my apple ID
In Profile Manager Enabled Device Management and Enabled Sign configuration profiles and selected CA Open Directory Certificate Created when setting up OD Master.
On Server Originally could install Trust Profile OK and Enroll Server OK with no issues, but on any other 10.7 Devices could install Trust Profile OK but would always say unsigned and Enroll would never work or just hang.
Now Since Played around with settings on 10.7 Server can no longer enroll but trust OK.
Questions have is
For SSL and Profile Manager to work properly as well as Certificates do you require to purchase a proper SSL Certificate or can we use the OD Master Certificate that gets created. All we are testing is on the Local LAN so don't want to get a SSL certificate from the internet.
Also why cannot 10.7 clients trust profile and enroll Devices Properly? How do I get this working properly?
Any ideas?
Regards,
Shane

taubmas wrote:
Not sure if its that as finally got Lion Server working on a VM setup so network shouldn't be an issue...
Had 1 OSX Lion Server VM and 1 OSX Lion Client VM and OSX Lion Server VM gets profile and enrolls device fine but again OSX client doesn't get enroll just sits again at installing..... even if set keychain to trust and make trust profile verified..
any other ideas? I think need to somehow get the server to trust trust profile by default instead of going to keychain all the time.
Shane
Did you get this to work in an ESXI envrionment? If so, which version are you running?

Home sync restoring files I deleted

I have mobile home sync set up between our office Macs and our Snow Leopard Server, the syncing works fine, but there's a really annoying problem.
I have my home set to only sync manually -- so every few days I tell it to sync myself when I'm ready. However, I just deleted a bunch of files locally while cleaning up, and a sync with my network home just restores back all of the files I intentionally deleted...
Is there a way to override and "prefer" the files on my local?

Copy the files to the external drive in the Finder instead of going through Time Machine. If you want that drive to have a bootable OS, you'll need to use software such as Carbon Copy Cloner or SuperDuper.
Time Machine backups are designed for recovery of accidentally or inadvertently deleted files. They aren't meant for primary storage of files you don't want on any other drive. In any case, drives eventually fail; anything you want to keep shouldn't be on only one drive.
(70364)

Setting parental controls via profile manager

So I've got Lion Server running on an older mac mini. I've setup up accounts on the server for my kids. (they're my guinea pigs!) We have 2 other macs in the house both running Mavericks. I'm able to do a networkin login into the kids' accounts from those client machines with no problem. I'm also storing their home folders on the server and creating "mobile" accounts (I think that's the terminology) on the client machines. I've installed the Trust certificate from the server onto those client machines. I've also installed the group certificate on the client machiens. (most of the profile manager settings I have for the kids are handled in a group called "kids")
Here's the problem: if I try to enforce parental controls on the kids' accounts (such as limiting the time they can be on them, etc) it doesn't work. In fact, after the settings get pushed to the client machines, they (the client machines) often will lock-up or start acting really flaky. A reboot "fixes" that, but the parental controls still won't work.
I've tried this literally dozens of times with the same result. Other changes in profile manager, such as restricting access to certain apps, DOES seem to work. It's mainly just the settings related to parental controls that seem to be the problem.
Am I doing something wrong? Is this stuff supposed to work? Thanks for any help, this is incredibly frustrating!

Unfortunatley I never got this resolved. In fact, it turns out that this is really a bug in how the parental controls work with a "managed" account. All of the other settings that can be managed on OSX server seemed to work just fine in my testing, but the parental controls do not. Or more specifically, the curfew (time limit) settings definitely don't work. It's hard to believe, but apparently this is a use-case Apple never considered. (if you do some googling for parental controls and OSX server you'll find we're not alone)
I don't recall exactly, but if you're trying to determine if changes got pushed to the clients there is something in the profile manager (web UI) that shows "completed tasks" or "active tasks" (or something like that) which should show what was pushed and if it was succssfully received by the client.
Anyway, after all that effort I ended up not using the profile management feature in OSX server at all. My kids accounts are now just plain 'old local accounts. I came to the conclusion (as many others have) that OSX server, at least in a home setting, just isn't worth the effort. It's too bad because if it all worked properly it could be really useful. If you still want to mess around with OSX server you might want to check out some nice youtube videos by a guy named Todd Olthof. He has a bunch of videos on OSX server that are actually geared completely towards the home user.
Good luck!

Dns problems setting up profile manager

i have been experimenting setting up OS X Server (10.8) on a new Mac mini on a network with Time Capsule. server's host name is "server.me.private" at IP address 192.168.1.100 , Time Machine DHCP server address is 192.168.1.1 .
Open Directory and Profile Manger are on in Server.app. (Profile Management: Enabled, Signing config profiles using the Apple Certified Push Certificate, w/ Apple push notifications on in Server settings.)
I can not, however, get Profile Manager to open and connect in a browser using "server.me.private/profilemanager" from either the mini itself or from another mac on the nework. i can get a brower to connect to Profile Manager using "192.168.1.100/profilemanager" but after successfully logging in, the browser is redirected to a "server.me.private/..." address and shows connection failure.
i HAVE gotten a browser to connect and function properly by changing the DNS Server in the the Network System Preferences on that specific Mac from "192.168.1.1" to "192.168.1.100". (DNS in Server.app, for the record is also on in this instance, forwarding server to 192.168.1.1 ) this, howerver, is a pain and also doesn't work trying to connect an iOS device.
i'm definitely missing something here. it seems to me that the Time Capsule should remain the DNS Server for the network and forward "server.me.private" to "192.168.1.100". it is not doing this, and there are no options for setting this with Airport Utility.
some light on this subject would be greatly appreciated. Thanks very much!

thanks very much for your thoughts and reply, Thomas.
if i were to change the Time Capsule to use the Mini as the primary DNS server, is this where i'd do it in Airport Utility?
but it won't let me change the DNS Servers fields here. and if i can change the DNS Serever to my Mini's 192.168.1.100, what address should i keep for the second DNS Server?
Thanks again!

HT201334 How does one set up profile manager on a completely closed network with no Internet access available or even possible?

I need to set up Profile Manager on a completely closed network that has no Internet access at all. I can sneaker-net files into the network if I need to.
Profile Manager (and Lion Server in general) seems to need outside access to complete setup and I've been unable to find any meaningful answers.
Does anyone any any ideas?
Thanks to all

you could try it without enabling apple push notifications in server
you wont' be able to push out profiles without enabling apple push notification
but users could download them, or you could install manually, e-mail etc

I have set up my firefox shortcut to go directly to the profile manager. I have had it that way for years. All the sudden it has stopped working

Hi,
I cannot get my firefox shortcuts to go directly to the profile manager anymore. I don't know why. I know I have set the target up correctly in properties but it still will not go to the profile manger. Please help.
Here is what is in the target location in properties:
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -profilemanger

Glad all is working again.
If you have not come across this problem in two years maybe you just do not set Firefox as the Sytem's default browser. If so no need to read any further.
Just be aware that in some circumstances you will run into problems with the way you appear to have done this. If you try to take an action that opens Firefox indirectly it may fail.
The action you are trying to avoid, opening another window of the existing Firefox is sometimes essential.
If you try to use a hyperlink or an HTML file your Windows Vista OS will normally try to use your default browser. That may well be Firefox. If that is the case and Firefox tries to open with -no-remote it will fail if the profile is in use. (Or warn you then automatically close down the already running profile )
I will quote from another help article
* http://kb.mozillazine.org/Opening_a_new_instance_of_your_Mozilla_application_with_another_profile <blockquote>'''Important:''' Never use -no-remote to start the "default" profile (the one that is set to open without asking when you launch Firefox). That's because when you launch Firefox, for example, by clicking a link in your mail program, you will get a [http://kb.mozillazine.org/Profile_in_use Firefox is already running but is not responding message] if the default profile is already in use. The solution is to always start the default profile normally and launch all others with -no-remote. Then it will work.</blockquote>

Getting Error in setting configuration of iPod using OS X Server Profile Manager

We are getting error when we are trying to configure the iPods using Profile Manager. Please let me know what is causing for this kind of error. Please see in attachment.

We have device groups, once the device have been enrolled we then move to a pre-configured profile which sets up items such as wifi, e-mail and passcpde etc all in one go, this has had mixed results, I've now setup profile groups for each item to give us more control over only given the user what they need instead on forcing everything, this resolved my item above but more testing is needed, the main issue has been trying to pass a pre-owned device to a new user as it seems to remember the pervious user in some cases, this is why I asked about if it was possible to delete device history.

How to set a profile to a system profile in Profile Manager on Server Mavericks

We're trying to create a profile to allow wifi connection to allow AD logins. We have 802.1x PEAP network and we are able to set the profile up but it does not connect until after an user signs in. I know that there used to be a setting in Profile Manager to set the type (User, System or Login Window) but I can't seem to find it now. I know I could edit the profile code but I'd rather not get mucking around in there unless absolutely necessary.

You posted in the iPad forum instead of the OSX Server forum. To get answers to your question, next time post in the proper forum. See https://discussions.apple.com/index.jspa I'll request that Apple relocate your post.
 Cheers, Tom

Can an IOS device be enrolled through profile manager when the server is set as .private? If so what steps?

I have my server set as server.xxxxxx.private, and need to know if it is possible to enroll it using profile manager. I assume this would have to be done when the IOS device is on the same network, and subsequently the DNS server would have to be added to the WiFi configuration. When I do this it tells me that Safari can't open the page. I manually installed the self signed certificate.

Same issues here.
Buggy as ****..
Also after some time, the Profile Manager PAne doesn't even fill in Server.app.....stays at Loading...
Nevertheless, the service itself works with the bug you outlined, plus enroll is impossible for me (check my post here: Can't enroll devices with Profile Manager - invalid key )
I hope all these get fixed in 10.7.1 !!!

Profile Manager - Remove icons in ipad and disable home button

Hello,
First of all sorry for my bad english.
Im working on a project, installed LION Server with Profile Manager configured, also Enrolled my iPad, i can also push the settings in to the ipad.
But now what i realy want, what the meaning of the project is; remove all of the icons and place only one icon (WEBCLIP) and what even will be beter is, when i boot my iPad the webclip popups by default. Is this possible guys?
Thank you!

It's impossible to develop an iPad app that can't be closed until some actions are done. The iPad programmer cannot override what happens when the user presses the 'Home' button. The 'Home' button will always tell the front application to go to the background, and if that application doesn't cooperate within a reasonable time it will be terminated.
Bear in mind that an iPad is an overgrown iPhone. It's always possible that someone will phone you up when you're running an app, and the app must release control and let you answer that phonecall.
I suggest you discuss the design philosophy with whoever wants the application, remembering that computers are meant to help us do what we want to do, not boss us about.

Can the iPhone have settings profiles? I want the settings of what apps are using the "call home" automatically set based on my location or the time of day. Is this possible?

Can the iPhone have settings profiles? I want the settings of what apps are using the "call home" automatically set based on my location or the time of day. Is this possible? Of course the GPS location feature will need to be on in order for this to work. But the idea here would be to optimize battery life by disabling the 'call home' requests of apps. The settings profile should also support downloads as I would like to download and allow it when I am on WiFi but not so much when I am using my cellular data.

No, this is not possible as the sandboxed nature of iOS would not allow any app to modify another app like that. Such a feature would have to be enabled by Apple as a part of iOS itself. You can submit feedback to Apple about the idea if you wish to.
https://www.apple.com/feedback/

Profile Manager 3.1.2 home sync setting being ignored on client

Similar Messages

Maybe you are looking for