Can configurator/profile manager group apps

Appologies if this post is in the wrong section.
I have been asked to set up profile manager in such a way that the on-site admin can not only wirelessly deploy apps to devices, but also group and re-group those apps together on the devices screen over-the-air. End result should be that end users do not have to wade through a sea of apps just to find one application (users include a large number of very young children, so it has to be easy to direct them to specific apps).
Now I'm aware that this could be achieved by making a back-up of a pre-configured device, however, this doesn't work well in terms of maintaining the iPads configuration since any new apps added would fall outside of the grouping and the devices would need to be returned to the server room to get their configurations updated with a new backup image and would defeat the purpose of using Profile Manager. I have attempted to convince the on-site admin that they should assign the devices to gropus in profile manager so that Group A only get the apps they use, Group B only get the apps they use, and so on the really isn't keen on the idea because there would still be way too many apps (we're talking 50 or so per device) to wade through just to find the one the class will use.
Is this possible or will it at some point in the future be possible? The advances made by this new version of profile manager and the VPP store is fantastic, but it'd be nice if this feature could be added at some point in future.
Kindly
Stom

If I remember it correctly the user (Apple ID) get a 30 days grace period during which they can migrate data from the app and continue use it. When that period ends they get the opportunity to buy the app for themselves and continue using it for their own money.

Similar Messages

How to configure profile manager in Maverics when DNS is externally managed?

Are there any guides to configuring Profile Manager as a MDM?
Here is my story.
Recently installed Mac mini at a school where the DNS is externally managed by the Education departments IT group. Upgraded to Maverics and installed Server app. Configured profile manager to the point where we could generate a trust profile and enrolment profile. Doesn't work because there is no DNS entry for Mac mini server. Create entry but need to change host name and computer name and local machine name to match entry. Suddenly profile manager not working at all. Delete server app and it's configuration file in ~/Library/. Reinstall. Now Profile manager won't even activate. Speak to Apple on phone, run various commands to reinitialise Open Directory and reset profile manager. To no avail. Apple say to reinstall Mavericks, Server and try again.
Funny thing is I got profile manager to work as an MDM in a test environment, but changing DNS after doing so much configuration seems to have made a real mess of things. Vowing to make a time machine backup as soon as Mavericks re-installs.
Anyone know of any guides other than the one on krypted.com, which appears to be for the previous version of Profile Manager.
Stom

In general, either your OS X Server box has a DNS translation for its address, or it doesn't.
If you don't have valid DNS, you will have problems with various services, as DNS is fundamental to distributed authentication and encryption, among other uses.
OS X Server doesn't recover well from installations that start off with DNS errors, and the wipe and reinstallation suggested by Apple is usually easier than resolving the various issues that tend to arise within the configurations of the various services.
If your server doesn't have a valid DNS translation, then either add the DNS translation into your organization's local DNS environment, or work to retrain or replace the folks that are unwilling or unable to administer and to properly maintain local DNS services, or (far less desirably) configure and start your own parallel DNS services. There are other options, of course.
I'd escalate this discussion to management, and let them sort this out — at its core, this very likely isn't a technical issue.

Profile Manager deploy apps silently

We have Profile Manager , how do we stop the iPad from asking the user if they wish to install the app when we push it with Profile Manager? No point in them being in supervised if the user can cancel the install!

FWIW, in my experience, there is a bug so that this is handled inconsistently regardless of whether or not the device is supervised.
Drew

Advance Security manager 'Group App/Db access' issue

It appears that ASM has some issues loading calc script lists - it appears to ignore the Parameter 'Access All Calculation=false' (followed by calc script list) and sets up the group with access to all calculations. Has anyone found a workaround for this? Or is there a latest/greatest version of ASM that this functionality works in?

Take a look at the thread
User access rights list
It talks about getting security info, in particular Essbase security viewer. I did a search on the web and found this link to download it
http://maxupload.com/F62683B4
Note, I have not tried the version in the link, but looked at security viewer in the past and it looked pretty good

HT5188 Can I use Profile Manager to deploy paid Apps?

Can I import VPP codes and push the apps to the ipads without user interaction?

No, some user interaction will be required. With any MDM they will have to accept the app.
While we use the term push, the user has to accept all App installations on the device. They will have to touch install. Please read below from:
http://krypted.com/iphone/configuring-using-profile-manager-2-in-os-x-mountain-l ion-server/
" This brings up an interesting limitation of how Profile Manager interacts with the App Store. It kinda’ doesn’t. If I were pushing apps to elementary school iPads in a 1:1 I could either use Apple Configurator (if I wanted to burn up a VPP code per student per year) or I could use iTunes (if I wanted a labor intensive process of restoring an iPad per computer rather than a parallel process). But either way, I’m gonna’ stay away from Profile Manager for apps.
So if you push an app to a device and the user taps on the app and the screen goes black then make sure the app is owned by the AppleID signed into the device. If it is, have the user open App Store and update any other app and see if the app then opens."

Configuring the default configuration profile for Profile Manager

Hello folks,
I would like to edit the default configuration profile served by Profile Manger. As far as I understand the only thing I can configure from the Server.app is the name of the profile. The settings for the different services provided by the server (such Mail, Messages, etc.) are automatically chosen by Server.app. When logging as an administrator on the Profile Manager webapp, I can go to "Groups", choose "Everyone", go to "Settings" to review the different payloads. However, almost none of the settings are editable. You can read "This payload is configured using the Server app" on the top of the various panels.
So my question is: How do you use Server to tweek those payloads? Can this be done using the serveradmin command line tool?
Thank you very much for your help.
Regards

Bump. This is annoying the crap out of me. Every time I try to design a website using Coda, this color picker bug plagues me. I just wish I could turn off color profiles completely as I will never use them.

HT201334 Apple configurator vs Profile Manager

I downloaded apple configurator and have it working. Then I realized profile manager in OSX Server does the same thing. What is the difference, can I leave it as is? Any benefit of just using profile manager?

Apple configurator has its uses.
Apple configurator can be used as a "manual" standalone solution to manage you iDevices and AppleTVs.
Apple configurator can be used in blended approach with Profile Manager.
With Profile Manager you can manage iDevices , Macs , and I believe AppleTv over the AIR.
- Apple Configure Stand Alone.
When using Apple Configurator by itself you can , lock down an iPad in a way you see fit.
1. You can make an iDevice in "Supervise Mode" increasing restricting of your iDevice , Profile Manager cannot do this at the moment , this feature will be available in Mavericks.
2. Any future configuration changes to your iDevices , must be physically plugged in everytime for those changes.
3. You can distribute free and paid apps.
4. You can update your IOS updates all at once. When IOS 7 comes out this fall you probably dont want to touch every iDevice and update 1 at a time. You can use Apple Configurator to download the latest IOS , and any IDevice that you plugin will receive the update, this means downloading th IOS update one time on the mac, and pushing it out to whoever needs it. Profile Manager can't do this.
5. You can name several iDevices sequently. If you have a cart of 30 it will be easy to rename your iDevices. Profile Manager can't do this.
6. Apple configurator allows you to "backup and restore" its not a true complete image but its close. Profile Manager does not do backups or restores.
7. Apple Configurator can be used to erase an iDevice.
8. I'm probably missing some more features.
- Profile Manager Stand Alone
1. You can manage Macs not just iDevices.
2. You must enroll the device before you can manage it, this can be done by pushing out an email , via a website etc.
3. Everything happens over the Air.
4. When enrolling , users can use their Open Directory or Active Directory ( if your Apple server is bound to AD server ). You can also create a generic account for enrolling purposes.
5. You can wipe devices over the air.
6. You can make pass code resets for iDevices.
7. You can manage users in groups , even nested groups. I manage staff and student iDevices. Our wireless system is seperated for staff and students each wireless has its own SSID. I created 2 upper level Profile Manager Groups , one called WiFi Student and one called WiFi Staff, all my student iDevice groups are nested under WiFi Student group and all my staff idevice groups are nested. This makes managing my wifi a breeze. I also include my mifi wireless info , in case i need a backup emergency wireless.
8. Im sure theres other features.
- Apple Configurator And Profile Manager Blended
1. Push out initial wifi settings. I setup a simple wireless router to connect my devices ( there are types when I setup over 50 ipads , and our network runs out of IPs)
2. You can use Apple Configurator to push out Profile Managers "enrollment profile" to many iDevices. You dont want to enroll a full iDevice cart one at a time via a web browser.
Maverick and IOS 7
In the fall everything will change , it is amazing what we will be able to do. Over the Air Supervise Mode , Install Apps over the air with no user interaction, App codes become licenses , which are revokeable and reusable. Out of the box enrollment ... There may be no need for Apple Configurator come this fall. So many things are changing I recommend watching the new WWDC2013 Videos, specially the one on device management.
Back to original topic.
I value both products , they have their specilties and when you blended , you can get things done efficiently.

Can't log in to Profile Manager or My Devices with Active Directory logins

I have an OSX Lion 10.7.4 Server set up with Profile Manager and it is joined to AD.
I am able to see AD groups in the Profile Manager groups section.
I can also see and add AD users and groups using the server app.
I have enabled the "Can Enable Remote Management" check box for Domain Users through Profile Manager. I have also added Domain Admins to the Workgroup group in the Server app. I'm not sure that I want or need either of these options, but they were suggestions to try.
I am not able to log on to the Profile Manager or My Devices pages with AD logins.
I found these directions about nested groups in Workgroup Manager http://krypted.com/iphone/integrating-mac-os-x-lion-servers-profile-manager-with -active-directory/ but I don't have a com.apple.access_devicemanagement local group or any groups like are shown in the picture.
Any ideas what I'm missing?
Cheers,
Ian

I found the two pieces I was missing:
1) Install the Lion Server Admin Tools
Launch the Server Admin App
Click on the server name in the left pane
Click on the Access button in the upper part of the window
Click on Profile Manager
Either manually add specific groups to the list or if you're feeling brave choose the "Allow all users and groups" radio button
2) Run the command line steps on this page to change the authentication to plain text to support AD authentication:
http://support.apple.com/kb/HT4837
Voila!

Profile Manager, installing OS X apps

Hi,
In profile manager, in "Apps" tab one of the filters is "OS X apps". However, when looking in Devices there is "Apps" tab for iOS devices, but there is none for OS X devices. Also I cannot add any Mac application to the applications list, I always get the "File Not Supported" error (tried pkg, dmg). Similar topics without the answer here:
https://discussions.apple.com/message/19261926
https://discussions.apple.com/message/17842816
What is the reason for this filter, when it's impossible to install any application on OS X through PM?

It says 'No eligible devices.' when I try it in Device Groups, Users and Groups (with assigned devices). In Devices, this option is not accesesible.

Help - can no longer manage apps in iTunes

I can no longer manage my Apps from my PC as the screen is greyed out. This seems to have happened when I updated iTunes software (10.1.1.4) as well as the iPod Touch (4.2.1). I have removed all restrictions on the iPod, authorized my computer, logged out and in of iTunes account, removed and reinstalled iTunes.... I'm not sure what else to try.
Any suggestions?

*im having the same problem as hurricane44. does anyone know what to do?*
i dont think my problem has to do with updating itunes because i just got my ipod and i always used this version itunes for it and it was working for a while.

Management Group Not Configured

Hello,
My SCOM 2012 R2 server was upgraded from 2007 R2 CU7. Now that it is SCOM 2012 R2, I noticed in the Event Log that I have this error multiple times:
OpsMgr has no configuration for management group xxxx and is requesting new configuration from the Configuration Service.
How do i resolve this?

Hi,
Have you load the latest update for SCOM 2012 R2?
http://blogs.technet.com/b/momteam/archive/2014/01/28/issues-that-are-fixed-in-system-center-2012-r2-operations-manager-update-rollup-1.aspx
If so, you may need to reinstall management servers and re-configure the management group.
Niki Han
TechNet Community Support

A device which is not part of this management group has attempted to access this Health Service.

Has anyone found an answer to this yet? I have uninstalled/reinstalled the agents both manually and through the push. Rebooted the client, rebooted the sce server. Forced the group policy to reapply, forced the health agent to /reportnow and I still get the error. The client shows up under the agent managed section but under the health state column it shows not monitored. The clients can ping the SCE server by FQDN and RDP to it as well so name resolution is working fine.
On the the SCE server I get this in the log
Event Type: Information
Event Source: OpsMgr Connector
Event Category: None
Event ID: 20000
Date:  6/25/2009
Time:  10:09:40 AM
User:  N/A
Computer: *******
Description:
A device which is not part of this management group has attempted to access this Health Service.
Requesting Device Name : *****
And this
Event Type:            Information
Event Source:           OpsMgr Connector
Event Category:       None
Event ID: 21042
Date:                        6/25/2009
Time:                       10:25:14 AM
User:                        N/A
Computer:                ***********
Description:
Operations Manager has discarded 1 items in management group Servername_MG, which came from $$ROOT$$. These items have been discarded because no valid route exists at this time. This can happen when new devices are added to the topology but the complete topology has not been distributed yet. The discarded items will be regenerated.
On the client I get
Event Type: Error
Event Source: OpsMgr Connector
Event Category: None
Event ID: 20070
Date:  06/25/2009
Time:  10:06:13 AM
User:  N/A
Computer: ******
Description:
The OpsMgr Connector connected to ****** but the connection was closed immediately after authentication occured. The most likely cause of this error is that the agent is not authorized to communicate with the server, or the server has not received configuration. Check the event log on the server for the presence of 20000 events, indicating that agents which are not approved are attempting to connect.
And this as well
Event Type:            Error
Event Source:           OpsMgr Connector
Event Category:       None
Event ID: 21016
Date:                        06/25/2009
Time:                       10:06:18 AM
User:                        N/A
Computer:                ******
Description:
OpsMgr was unable to set up a communications channel to **** and there are no failover hosts. Communication will resume when ******* is both available and allows communication from this computer.
And this
OpsMgr has no configuration for management group Servername_MG and is requesting new configuration from the Configuration Service.

Hey Nathan,
Yea I have sent the script to eveyone that has aked for it. I dont know if its helped anybody else as none has given me any feedback either way.
I guess I can post it here for everyone to use.
Please keep in mind that if you use this script from MS its at your own risk, If your DB blows up, massive catastrophic failure ensues and so forth ITS YOUR OWN FAULT. MAKE SURE YOU HAVE GOOD BACKUPS
Step 1) Run this against your SCE 2007 DB
DECLARE @BaseManagedEntityInternalId int
DECLARE @BaseManagedEntityId uniqueidentifier
DECLARE @ViewName sysname
DECLARE @Statement nvarchar(max)
SET @BaseManagedEntityInternalId = 0
WHILE EXISTS (SELECT * FROM BaseManagedEntity WHERE (BaseManagedEntityInternalId >
@BaseManagedEntityInternalId))
BEGIN
SELECT TOP 1
@BaseManagedEntityInternalId = bme.BaseManagedEntityInternalId
,@BaseManagedEntityId = bme.BaseManagedEntityId
,@ViewName = met.ManagedTypeViewName
FROM BaseManagedEntity bme
JOIN ManagedType met ON (bme.BaseManagedTypeId = met.ManagedTypeId)
WHERE (bme.BaseManagedEntityInternalId > @BaseManagedEntityInternalId)
AND (bme.IsDeleted = 0)
ORDER BY BaseManagedEntityInternalId
SELECT @Statement = 'IF NOT EXISTS (SELECT * FROM ' + QUOTENAME(@ViewName) + '
WHERE BaseManagedEntityId = ''' + CAST(@BaseManagedEntityId AS varchar(50)) + ''')
PRINT ''' + CAST(@BaseManagedEntityId AS varchar(50)) + ' ' + @ViewName + ''''
EXECUTE(@Statement)
END
STEP 2)
If your problem was the same a mine you should get some GUID’s returned. (For example 93790c0B-09C4-3A4D-CE72-F4E3Dd917D78 MTV_DeploymentSettings)
Using the GUID that we got in the output file
Execute the below given query:
==========================
select fullname
from basemanagedentity
where basemanagedentityid = ‘<GUID>’
==========================
Verify that the device or the object mentioned in the above output is not displayed in Operations console.
Only in case if the object is not displayed then use the below given query to delete it from database.
==========================
update basemanagedentity
set isdeleted = 1
where basemanagedentityid = ‘<GUID>’
==========================
Before executing the above query please ensure that you have the backup of the database. Also note that you need to run the above said query only incase if you do not see the object in the Operations console.
After executing this query, run this stored procedure:
==========================
exec p_Detectandfixinstancespaceinconsistencies
==========================
Once it is done:
> Stop all the three OpsMgr services: health, Config and SDK on Management Server
> Cleared the health service state folder.
> Start all the three OpsMgr services: SDK, Config, and health on Management Server.
> Wait for 30 minutes and see if the agents start getting monitored.
I hope this helps everyone

Do I need internet access on my iOS devices to enroll with Profile Manager?

Hi, I'm trying to configure Profile Manager on a closed network. The Mac Server does have Internet access, but the network for the iOS devices can only have communication with the server, but not to the internet because of company policies. Is there a way around to make it work or do I need internet access on the iOS devices as well?
I've made the enrollment process in another network with internet access for every device and everything works well, but on the other network(no internet for iOS devices) everything seems ok (from conection to the server, profile certifiacation and stuf) but the devices can't send or receive anything else, like pushed configurations and device info. Ports and everything is ok, I even read that they need to be on an open network so I know it all comes down to having internet access, but just wanted to ask if there's another way around?? Suggestions?
Thanks!

You can share internet connection with your XP-PC using a router(as I do with XP-old MAC's,connected via cable).You may look for more info at:
http://homepage.mac.com/car1son/mylinksyssetup.html
and
http://homepage.mac.com/car1son/os9xnet_nfilesharing.html
Did you ever use a MAC before? Have you got Airport at your PC?Which?
Good luck

PGError: ERROR: could not serialise access due to concurrent update profile - profile manager 2

trying to push free apps to devices using profile manager 2 - apps install fine but then need an apple id to run. wierd thing is it was working this morning but not now and i dont know whats changed!

If your DAO is nicely separated from your service layer as it should be then the solution I suggested above works and doesn't require you to change many classes because you can catch the expection in the DAO layer and do the retry in the DAO layer. That's where the solution belongs too because it's only applicable for your current database solution (Postgres). i.e If you change your database solution you need to change your DAO anyway, but only your DAO. If you put the solution in your service layer (or client layer) then you need to change those layers when you change your database solution which defeats the purpose of the separation.
If you still want the interceptor approach, you need to check if the transaction has been marked for rollback back, then you need to join the transaction with EM.join and from there you attempt to close and discard the joined transaction before starting another one to invoke the retry operation on. Bear in mind that you only do the rety when the transaction was marked for roll back because of that specific exception. Needless to say that this doesn't seem to be a clean way to handle your transactions (if you can get it to work that is).

Command line control Profile Manager 2

Greeting All,
Any guide that introduce command line that can control Profile Manager 2 to make device camera on/off? Do know is this possible via command line?
Here is the sernario.
1. User scan a QR code that trigger App to commnuicate Profile Manager turn off camera.
2. App to login Profile Manager in background and turn off camera in profile.
3. Profile Manager push profile to trun off device camera.
4. App logout Profile Manager in background.
Any advise is welcome.
Thanks,
Spin

The CommandLine tool is also shipped with JCAPS and which is very useful to tool.
We can do deploy, redeploy and undeploy with this tool. and the respective docs are available as said in the above location.

Can configurator/profile manager group apps

Similar Messages

Maybe you are looking for