Deploying Calendars via Profile Manager

I recently needed to start sharing calendars between staff here at school. I have successfully created and shared calendars between two test accounts, setting them up manually via the "Mail, Contacts & Calendars" section of system preferences for each user.
I then shared then opened up the calendar app and shared each test accounts calendar with each other via the right click menu>Sharing Settings.
Everything is working exactly as I want but I want to automate this setup for our staff and so I turned to profile manager thinking that we could at least skip the step that was covered through "Mail, Contacts and Calendar".
I could not.
It seems that Profile Manager settings requires a password which is terrible and that would have all staff subscribe to one calendar account rather than having their own.
Is there a way around this or am I destined to set up each user individually?

Thank you both so very much for using these forums. Today I was having the issue of the profile not pushing when there were Calendar settings in the profile. Then I ran across this discussion. I was able to confirm your findings Henry. Indeed when I set it to manual, downloaded the profile and installed, it worked like a charm. (sad this is still an issue in Yosemite) Anyway, it gave me an idea. All I did was add a description to the General section of the profile, changed it back to automatic push, no password installed and using SSL, and it worked. I have no idea, but just placing a comment in the field did the trick. Thought it should be shared. Thanks for your discussion, help, and feedback. Have a great day!

Similar Messages

Safari Keep-Alive via Profile Manager

Greetings Community!
Does anybody know of a way to issue a keep-alive to Safari via profile manager so it always stays open and that if it somehow closes it will automatically re-open?

Worked it out!
I also host a couple of personal websites and these were configured to use the IP of the server; removed this and set it to use the "Any" option and profile manager started working as expected. Not done a full test of the entire thing to see if anything else is broken but this has me moving on from here!

IPSEC VPN Settings via Profile Manager

It is not possible to set the following lines via GUI in Apples ProfileManager or via Apple Configurator in the IPSec section:
<key>XAuthPassword</key>
<string>myVPNuserPassword</string>
You can set the lines via GUI in the old iPhone Configuration Program on Windows.
If you can't set the "XAuthPassword", you have to type in the password every time you want to establish the VPN.
We use certificates for device authentication.
Anyone a solution ?
greetings
robin

klatuu wrote:
It is not possible to set the following lines via GUI in Apples ProfileManager or via Apple Configurator in the IPSec section:
<key>XAuthPassword</key>
<string>myVPNuserPassword</string>
You can set the lines via GUI in the old iPhone Configuration Program on Windows.
If you can't set the "XAuthPassword", you have to type in the password every time you want to establish the VPN.
We use certificates for device authentication.
Anyone a solution ?
greetings
robin
Yes, there are two possible solutions.
1. As per my article here http://jelockwood.blogspot.co.uk/2014/03/how-to-do-vpn-on-demand-for-ios-at-zero .html you would use a StrongSwan VPN server and as per my article use the xauth-noauth plugin to prevent it asking for a username and password, it will then only use the client certificate for device authentication.
2. You can use the two keys listed above but you will have to manually edit the mobileconfig file and add them. Therefore you cannot use Profile Manager or Apple Configurator. For this I used iPhone Configuration Utility to create the initial mobileconfig file, and then I used TextWrangler to add the two keys. With a manually produced mobileconfig file I do not believe there is anyway to send it via Profile Manager but you can either email it to the device or make it available via a web server. Other MDM solutions than Profile Manager do allow pushing uploaded mobileconfig files, I used Meraki Systems Manager and pushed my hand edited mobileconfig files 'over the air' to the devices.
It should be noted that if you are authenticating usernames and password against a directory server e.g. Active-Directory, Open Directory or LDAP, then if you enforce password ageing and changes you are going to have to hand edit and resend an updated mobileconfig file with the new password in it. This is why I chose option 1 above for my own situation. It is in theory less secure as it only uses a single basis for authentication - the certificate but I felt this an acceptable trade-off.

Where do Apps uploaded via Profile Manager go?

I've just up updated around 30+ apps and I've had to manually add them via profile manager one by one!
I was just wondering if anyone knew the location where the apps are stored on the server as I thought I could perhaps just drag and drop all of the updated ipas at once.

There are several tools which allow selecting network profile settings with respect to sites i.e. available network environment data:
ControlPlane - <http://www.controlplaneapp.com/>
Little Snitch - <http://www.obdev.at/products/littlesnitch/>
and maybe some more.
Additionally, you may find this discussion helpful:
ML Server: How do i push my school proxy settings to our ML clients?
i.e. <https://discussions.apple.com/thread/4715399>

Managing Dock Apps via Profile Manager

I'm trying to create a payload with specific apps in the dock. It seems the only apps I have available to choose from are the ones installed on the server running the profile manager service. For example, in order to put Firefox in the dock I had to install it on the server. Once I did that it showed up as an option to add to the dock. I hope there is another way that I am missing. Seems a bit silly to have to install software on the server for the sole purpose of being able to add it to the dock. Anyone know of another way to do it?
I realize I can still use WGM to set the dock and select apps from the machine I'm running WGM on, just trying to figure out the Profile Manager aspect.

Excellent guide. See announcment post -- https://discussions.apple.com/thread/4256735?tstart=0
https://docs.google.com/document/d/1SMBgyzONxcx6_FswgkW9XYLpA4oCt_2y1uw9ceMZ9F4/ edit?pli=1
IT Resources -- ios & OS X -- This is a fantastic web page. I like the education site over the business site.
View documentation, video tutorials, and web pages to help IT professionals develop and deploy education solutions.
http://www.apple.com/education/resources/information-technology.html
business site is:
http://www.apple.com/lae/ipad/business/resources/
good tips for initial deployment:
https://discussions.apple.com/message/18942350#18942350
https://discussions.apple.com/thread/3804209?tstart=0

Disable USB drive write access via Profile Manager

Is there a way to disable users from plugging in a USB flash drive and copying files to it via the Profile Manager?
We are trying to configure this on a Mac network running 10.10.x with Server 4.0.3.
I understand that this can be done by deleting the IOUSBMassStorageClass.kext as a solution in older versions of OS X and that this was apparently possible in Workgroup Manager (now legacy and not supported). I would like to learn how to do this using the latest methods in 10.10.1 or 10.9.
Any tips would be greatly appreciated.
Cheers,
MC

I post on both to try to raise awareness. All previous topics have been to delete the usb drivers, put hot glue in the ports and to use the now non-supported Workgroup Manager. Thanks for checking though!

Failing to push out apps via profile manager

Hi,
Been helping out at a school where they have bought 90 iPads for their kids to use - after weeks of frustrations they were all finally enrolled on the mac server (runs OS X Yosemite). Thought I had finally managed to help them finish it off but now when they try too push out apps from profile manager they're having an issue.
The devices are grouped in groups of 30 and when I tried too push out an app to them (Scratch Jr, if that makes any difference at all) it would only push out to 14 of the iPads in the group - with varying degrees of success. The room there kept in doesn't have a great signal from their wi-fi so I thought it might have something to do with that but when I tried to push out another app (PhotoMath) it got pushed out to all the iPads in the group, again with varying degrees of success.
Essentially I have 2 problems - Why would the server only push out to some iPads for some apps but then suddenly find them all when pushing out an another? And why would some iPads not even pick up the app? Even when, in the active tasks, it says app deployment has been successful? The school have had these iPads since September and have only been able to use them sparingly - so to say they're dead keen would be an understatement.
I hope I'm making sense - please help! I've checked the logs from the server but I'd be lying if I said I could understand that stuff...
Thank you.

I'm not familiar with LANDesk, but ARD will allow you to push files to remote Macs as specify their locations.
So if everybody need a particluar font on their computer, you could push it to /Library/Fonts on all of your Macs. You can also remotely install packages. This is useful if your deploying a something like Adobe CS5 to a bunch of workstations.

I can't find a way to upload applications to iOS via Profile Manager

I have Mac OS X Lion Server 10.7.2 and multiple devices. I added them to the Profile Manager and now I can create different profiles for them. But I have not found a way of moderation of installed applications on iOS. Please tell me how to do this?

CFax, I am experiencing the same problem. I see your solution, but I am unsure how to "install the main language English".
My system uses English. Is there a particular setting?
Thanks a bunch.

How to install Corporate applications via Profile manager

What is the correct procedure to install/push iOS applications created in our corporate apple development environment? I've read in one place that they have to be exported from the dev environment based on a specific path for the server, and then that you can't use the Lion server Profile Manager but need a 3rd party application. Any guidance is appreciated!

You just posted to the Lion (Client) forum. I've asked a moderator move your post. No action is needed on your part until it is moved. I'm not familiar with Lion Server.

Not apple to login to VPP via Profile Manager

Hello all,
I have a quick question.
In the past I have been abel to use the links found in the app section of Profile Manager to login to the VPP and purchase more licenses when needed. However, today when I tried to buy a couple apps for some staff members, I got the following error...
"Your request produced an error
[newNullResponse]"
Nothing else in the browser window.
I was able to login on another computer and complete the purchase, but it was weird that I couldn't do it from the server. After making the purchases I was able to receive and distribute the licences.
Anyone having similar issues, or experienced this in the past?
Thanks,
Leon

Thanks Sunny for looking into it,
You are correct but we want to check this WEBGUI from out side of the location, i.e. not only from premise but also from my public IP address. And also from IPAD or any Android Mobile Browser
Regards,
Prashant

How to deploy settings in Profile Manager through Device Groups

When I go to the Profile Manager web page and create a device group and configure the payload settings it doesn't seem to send the profile settings to the Mac devices that are in the group. How do I go about getting this to work so when I get a new device that is enrolled all I have to do is throw it in the group so it will automatically push out the correct payload settings that I configured?

What you're asking should work. You should be able to create a Device Group and adjust the setting for that group. Then when you add a device to that group, the settings will be pushed to the device automatically. So, it leaves me with a few questions for you:
Why don't you think it sends the payload? When you look under "Activity" do you see tasks in the "Active" area or in the "Completed" area... or something else?
What are you trying to change? Setting up email accounts on iPhones will appear right away, but there are other changes (especially on computers) that don't take affect until it restarts (or the user at least logs out and back in).
Are you sure you have devices in your device group? Sorry, probably a really silly question, but under your device group, do you see the devices under the "Members" section?
Are your devices "trusting" your server? Did you add the trust profile to the device when you enrolled it?
Sorry I can't be more help... but I can tell you that you can do what you are asking. We have it set up in our office, and it works really well. We just add the new device to the device group and it does the rest.

Calendar and Profile Manager Services - Service Unavailable

Not sure what has changed in my environment, because I have not made any manual changes lately. However I can't seem to access either iCal or Profile Manager from the web. Nor does the iCal seem to be propagating any informtion across the same account to different devices. I've read through many, many of the listings in these forums to no avail. That said, I haven't really been able to find one that displays the same error logs as I'm experiencing.
When trying to access from the web, I always get a the below...
Service Temporarily Unavailable
The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.
Apache/2.2.21 (Unix) mod_ssl/2.2.21 OpenSSL/0.9.8r DAV/2 PHP/5.3.8 with Suhosin-Patch Server at jared-hill.com Port 443
I've monitored my logs and here's the output I'm given....
Apr 27 16:15:24 jared-hill servermgrd[88]: servermgr_devicemgr: response statusCode: 0
Apr 27 16:15:24 jared-hill servermgrd[88]: servermgr_devicemgr: waiting for devicemgr to respond
Apr 27 16:15:24 jared-hill com.apple.launchd[1] (com.apple.collabcored4[2877]): Tried to setup shared memory more than once
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]: /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/fileuti ls.rb:1217:in `chmod': Operation not permitted - /var/log/collabd/coreclient.log (Errno::EPERM)
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/fileuti ls.rb:1217:in `chmod'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/fileuti ls.rb:870:in `chmod'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/fileuti ls.rb:869:in `each'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/fileuti ls.rb:869:in `chmod'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /usr/share/collabd/coreclient/config/application.rb:83
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `gem_original_require'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `require'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /usr/share/collabd/coreclient/config/environment.rb:11
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `gem_original_require'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /System/Library/Frameworks/Ruby.framework/Versions/1.8/usr/lib/ruby/1.8/rubygem s/custom_require.rb:31:in `require'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /usr/share/collabd/coreclient/config.ru:13
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /Library/Ruby/Gems/1.8/gems/rack-1.2.1/lib/rack/builder.rb:46:in `instance_eval'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /Library/Ruby/Gems/1.8/gems/rack-1.2.1/lib/rack/builder.rb:46:in `initialize'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /usr/share/collabd/coreclient/config.ru:1:in `new'
Apr 27 16:15:25 jared-hill com.apple.collabcored4[2877]:     from /usr/share/collabd/coreclient/config.ru:1
Apr 27 16:15:25 jared-hill com.apple.launchd[1] (com.apple.collabcored4[2877]): Exited with code: 1
Apr 27 16:15:25 jared-hill com.apple.launchd[1] (com.apple.collabcored4): Throttling respawn: Will start in 9 seconds
Any help would be greatly appreciated!!!!

hi there. did you find a way to solve this?
I am getting many (non-stop every minute) of "10/8/12 4:24:48.966 PM com.apple.launchd[1]: (com.apple.collabcored4) Throttling respawn: Will start in 7 seconds" errors. And my wiki is now unstable with error page once every few clicks.
Thanks in advance for any suggestion you might have.
Edward

Setting parental controls via profile manager

So I've got Lion Server running on an older mac mini. I've setup up accounts on the server for my kids. (they're my guinea pigs!) We have 2 other macs in the house both running Mavericks. I'm able to do a networkin login into the kids' accounts from those client machines with no problem. I'm also storing their home folders on the server and creating "mobile" accounts (I think that's the terminology) on the client machines. I've installed the Trust certificate from the server onto those client machines. I've also installed the group certificate on the client machiens. (most of the profile manager settings I have for the kids are handled in a group called "kids")
Here's the problem: if I try to enforce parental controls on the kids' accounts (such as limiting the time they can be on them, etc) it doesn't work. In fact, after the settings get pushed to the client machines, they (the client machines) often will lock-up or start acting really flaky. A reboot "fixes" that, but the parental controls still won't work.
I've tried this literally dozens of times with the same result. Other changes in profile manager, such as restricting access to certain apps, DOES seem to work. It's mainly just the settings related to parental controls that seem to be the problem.
Am I doing something wrong? Is this stuff supposed to work? Thanks for any help, this is incredibly frustrating!

Unfortunatley I never got this resolved. In fact, it turns out that this is really a bug in how the parental controls work with a "managed" account. All of the other settings that can be managed on OSX server seemed to work just fine in my testing, but the parental controls do not. Or more specifically, the curfew (time limit) settings definitely don't work. It's hard to believe, but apparently this is a use-case Apple never considered. (if you do some googling for parental controls and OSX server you'll find we're not alone)
I don't recall exactly, but if you're trying to determine if changes got pushed to the clients there is something in the profile manager (web UI) that shows "completed tasks" or "active tasks" (or something like that) which should show what was pushed and if it was succssfully received by the client.
Anyway, after all that effort I ended up not using the profile management feature in OSX server at all. My kids accounts are now just plain 'old local accounts. I came to the conclusion (as many others have) that OSX server, at least in a home setting, just isn't worth the effort. It's too bad because if it all worked properly it could be really useful. If you still want to mess around with OSX server you might want to check out some nice youtube videos by a guy named Todd Olthof. He has a bunch of videos on OSX server that are actually geared completely towards the home user.
Good luck!

Pushing Paid apps via 10.8 Profile Manager (working solution!)

Hello,
It seems the profile manager solution leaves a lot to be desired. I am quite disappointed there are several limitations that make the software a real deal breaker for it's price. The number one issue other than black/white listing non productive apps is of course, the PAID app Deployment. One would think they would totally OWN this process, but as they have done so many times before, left it up to a 3rd party solution. THANKS @pPl3! only no thanks.
Well I have created a solution that I believe works and would like to share it with everyone.
The model is simple, use Apple configurator to image and deploy the devices, and then manage them via Profile manager with 1 shared apple ID
1. The Master iPad we used was configured with 1 apple id:[email protected]. We set up all the Free applications we liked with our settings inputted. We then deleted any unique information such as usernames, wifi networks, etc. so it's a clean image with some custom configuration. We then connected to Apple configurator and created a back up.
2. We loaded any Free apps we wanted preinstalled into the Apple Configurator software and then when prompted used the same apple id as the ipad:[email protected]. These free apps were downloaded through itunes on the server using the same apple id. We also added one profile to be loaded, the trust profile and also have a web clip taking us to the "Enroll Device" page on
3. We then connected a brand new ipad, choose to wipe and restore from back up along with updating to the newest IOS. After that configured Wifi and Enrolled the device to the Profile manager server. Then added the device to the proper groups to get policy information downloaded.
4. Now the paid app Test, we purchased one application on the OSX Server's itunes. In order to be compliant with the test, we only purchased one licence, therefore we could only push it out to one device. We uploaded the App into the profile manager and deployed OTA to one of the iPads.
5. We accepted the install and then the App loaded and was able to launch. We removed it and the pushed it to another device freshly configured by profile manager, it worked as well.
6. For future purchases we use the VPP, buy as many apps as we want but only redeem ONE of the codes on the osx server, using the same apple ID as before. We then upload it to profile manager and deploy it to as many devices as we are licensed to.
The only problems I can imagine:
1. If apple doesn't like it, I am under the opinion we are not breaking any licensing compliance. We still have the apps paid for and legally have the licensing for auditing purposes.
2. IF after 10 devices the apple id starts giving us issues. I read there is a limit but it appears the options to manage your devices has been removed from itunes which makes me think, No this will never happen.

Wonder what went wrong...
Also do you find another solution?
Right I am looking at three companies that run on the OSX server.
Absolute Manage
nuVizz enterprise MDM
FileWave

Disallow app access to Calendar and Contacts by app in Profile Manager

Is there a method to disallow app access to Calendar and Contacts by app within a profile and push that out via Profile Manager?
I'm aware that you can do this on the device itself but I'd like to enforce policy.
I'm guessing I'd need a custom profile.
Thanks
Tim

Create a profile that contains an Restrictions profile and add thoase apps to the list of app you want to restrict.

Deploying Calendars via Profile Manager

Similar Messages

Maybe you are looking for