Failing to push out apps via profile manager

Hi,
Been helping out at a school where they have bought 90 iPads for their kids to use - after weeks of frustrations they were all finally enrolled on the mac server (runs OS X Yosemite). Thought I had finally managed to help them finish it off but now when they try too push out apps from profile manager they're having an issue.
The devices are grouped in groups of 30 and when I tried too push out an app to them (Scratch Jr, if that makes any difference at all) it would only push out to 14 of the iPads in the group - with varying degrees of success. The room there kept in doesn't have a great signal from their wi-fi so I thought it might have something to do with that but when I tried to push out another app (PhotoMath) it got pushed out to all the iPads in the group, again with varying degrees of success.
Essentially I have 2 problems - Why would the server only push out to some iPads for some apps but then suddenly find them all when pushing out an another? And why would some iPads not even pick up the app? Even when, in the active tasks, it says app deployment has been successful? The school have had these iPads since September and have only been able to use them sparingly - so to say they're dead keen would be an understatement.
I hope I'm making sense - please help! I've checked the logs from the server but I'd be lying if I said I could understand that stuff...
Thank you.

I'm not familiar with LANDesk, but ARD will allow you to push files to remote Macs as specify their locations.
So if everybody need a particluar font on their computer, you could push it to /Library/Fonts on all of your Macs. You can also remotely install packages. This is useful if your deploying a something like Adobe CS5 to a bunch of workstations.

Similar Messages

Managing Dock Apps via Profile Manager

I'm trying to create a payload with specific apps in the dock. It seems the only apps I have available to choose from are the ones installed on the server running the profile manager service. For example, in order to put Firefox in the dock I had to install it on the server. Once I did that it showed up as an option to add to the dock. I hope there is another way that I am missing. Seems a bit silly to have to install software on the server for the sole purpose of being able to add it to the dock. Anyone know of another way to do it?
I realize I can still use WGM to set the dock and select apps from the machine I'm running WGM on, just trying to figure out the Profile Manager aspect.

Excellent guide. See announcment post -- https://discussions.apple.com/thread/4256735?tstart=0
https://docs.google.com/document/d/1SMBgyzONxcx6_FswgkW9XYLpA4oCt_2y1uw9ceMZ9F4/ edit?pli=1
IT Resources -- ios & OS X -- This is a fantastic web page. I like the education site over the business site.
View documentation, video tutorials, and web pages to help IT professionals develop and deploy education solutions.
http://www.apple.com/education/resources/information-technology.html
business site is:
http://www.apple.com/lae/ipad/business/resources/
good tips for initial deployment:
https://discussions.apple.com/message/18942350#18942350
https://discussions.apple.com/thread/3804209?tstart=0

Pushing Paid apps via 10.8 Profile Manager (working solution!)

Hello,
It seems the profile manager solution leaves a lot to be desired. I am quite disappointed there are several limitations that make the software a real deal breaker for it's price. The number one issue other than black/white listing non productive apps is of course, the PAID app Deployment. One would think they would totally OWN this process, but as they have done so many times before, left it up to a 3rd party solution. THANKS @pPl3! only no thanks.
Well I have created a solution that I believe works and would like to share it with everyone.
The model is simple, use Apple configurator to image and deploy the devices, and then manage them via Profile manager with 1 shared apple ID
1. The Master iPad we used was configured with 1 apple id:[email protected]. We set up all the Free applications we liked with our settings inputted. We then deleted any unique information such as usernames, wifi networks, etc. so it's a clean image with some custom configuration. We then connected to Apple configurator and created a back up.
2. We loaded any Free apps we wanted preinstalled into the Apple Configurator software and then when prompted used the same apple id as the ipad:[email protected]. These free apps were downloaded through itunes on the server using the same apple id. We also added one profile to be loaded, the trust profile and also have a web clip taking us to the "Enroll Device" page on
3. We then connected a brand new ipad, choose to wipe and restore from back up along with updating to the newest IOS. After that configured Wifi and Enrolled the device to the Profile manager server. Then added the device to the proper groups to get policy information downloaded.
4. Now the paid app Test, we purchased one application on the OSX Server's itunes. In order to be compliant with the test, we only purchased one licence, therefore we could only push it out to one device. We uploaded the App into the profile manager and deployed OTA to one of the iPads.
5. We accepted the install and then the App loaded and was able to launch. We removed it and the pushed it to another device freshly configured by profile manager, it worked as well.
6. For future purchases we use the VPP, buy as many apps as we want but only redeem ONE of the codes on the osx server, using the same apple ID as before. We then upload it to profile manager and deploy it to as many devices as we are licensed to.
The only problems I can imagine:
1. If apple doesn't like it, I am under the opinion we are not breaking any licensing compliance. We still have the apps paid for and legally have the licensing for auditing purposes.
2. IF after 10 devices the apple id starts giving us issues. I read there is a limit but it appears the options to manage your devices has been removed from itunes which makes me think, No this will never happen.

Wonder what went wrong...
Also do you find another solution?
Right I am looking at three companies that run on the OSX server.
Absolute Manage
nuVizz enterprise MDM
FileWave

Where do Apps uploaded via Profile Manager go?

I've just up updated around 30+ apps and I've had to manually add them via profile manager one by one!
I was just wondering if anyone knew the location where the apps are stored on the server as I thought I could perhaps just drag and drop all of the updated ipas at once.

There are several tools which allow selecting network profile settings with respect to sites i.e. available network environment data:
ControlPlane - <http://www.controlplaneapp.com/>
Little Snitch - <http://www.obdev.at/products/littlesnitch/>
and maybe some more.
Additionally, you may find this discussion helpful:
ML Server: How do i push my school proxy settings to our ML clients?
i.e. <https://discussions.apple.com/thread/4715399>

Push config files made in Server app with Profile manager

As I understand the manual you can distribuate configuration files with Profile manager.
A bit confused now when I want to use Profile manager to distribuate a configuration file I´ve made in Server app.
I saved a VPN configuration file and want to distribuate it with Profile manager but how do I import or add that file into the settings pane for my devices in profile manager?

Hi,
I have the same issue, very frustrating. Using a Win 2003 AD and 10.8.2 server and clients. If i use WGM I can see all users and groups correctly, but Server.app and Profile Manager does not show them correct.
Strange that we see issues like this since Profile Manager has been around for a while, really interested to hear other peoples experiences.
PS I see a similar thing here: https://discussions.apple.com/thread/4417085?start=0&tstart=0

Disallow app access to Calendar and Contacts by app in Profile Manager

Is there a method to disallow app access to Calendar and Contacts by app within a profile and push that out via Profile Manager?
I'm aware that you can do this on the device itself but I'd like to enforce policy.
I'm guessing I'd need a custom profile.
Thanks
Tim

Create a profile that contains an Restrictions profile and add thoase apps to the list of app you want to restrict.

Distribute Apps in Profile Manager

Updated to Lion Server OS X 10.7.2 on my MacMini (4GB RAM).
Setup a Device Group to Distribute an App as a test. Sent out both a commercial app (Keynote) and a free app (FirstClass Mobile).
The iPads received the apps, but neither worked. On the iPad, when I attempted to launch the app, the screen would flash and nothing would happen.
So is this new feature a 'tease' which doesn't work, or how do you get this to work?

I found in the documenation that the apps push only works for internally devleoped applications not apps from the market.
You can install and remove in-house iOS apps on managed devices.
In Profile Manager's Library, select a device or user, or a group.
Select the user, device, or group you want to modify from the list.
Click the Action (gear) button, then choose Edit Apps from the pop-up menu.
You can:
Upload an app to Profile Manager:
Click upload, then choose an .ipa file. You must select an app archive that has been created for enterprise distribution.Uploading the app to Profile Manager makes it available for you to add to other users, devices, and groups.
Send an app to a device:
Click the Add button next to an app. Make sure that the app's provisioning profile authorizes the device to use the app, or the app will not install.
Remove an app from a device:
Click the Remove button next to an app. The app and all of its data will be removed from the device. You can only remove apps you've previously added to the device using Profile Manager."
http://help.apple.com/profilemanager/mac/10.7/#apd65A815A6-4863-4F24-9B0F-313DD0 850FC8

Safari Keep-Alive via Profile Manager

Greetings Community!
Does anybody know of a way to issue a keep-alive to Safari via profile manager so it always stays open and that if it somehow closes it will automatically re-open?

Worked it out!
I also host a couple of personal websites and these were configured to use the IP of the server; removed this and set it to use the "Any" option and profile manager started working as expected. Not done a full test of the entire thing to see if anything else is broken but this has me moving on from here!

IPSEC VPN Settings via Profile Manager

It is not possible to set the following lines via GUI in Apples ProfileManager or via Apple Configurator in the IPSec section:
<key>XAuthPassword</key>
<string>myVPNuserPassword</string>
You can set the lines via GUI in the old iPhone Configuration Program on Windows.
If you can't set the "XAuthPassword", you have to type in the password every time you want to establish the VPN.
We use certificates for device authentication.
Anyone a solution ?
greetings
robin

klatuu wrote:
It is not possible to set the following lines via GUI in Apples ProfileManager or via Apple Configurator in the IPSec section:
<key>XAuthPassword</key>
<string>myVPNuserPassword</string>
You can set the lines via GUI in the old iPhone Configuration Program on Windows.
If you can't set the "XAuthPassword", you have to type in the password every time you want to establish the VPN.
We use certificates for device authentication.
Anyone a solution ?
greetings
robin
Yes, there are two possible solutions.
1. As per my article here http://jelockwood.blogspot.co.uk/2014/03/how-to-do-vpn-on-demand-for-ios-at-zero .html you would use a StrongSwan VPN server and as per my article use the xauth-noauth plugin to prevent it asking for a username and password, it will then only use the client certificate for device authentication.
2. You can use the two keys listed above but you will have to manually edit the mobileconfig file and add them. Therefore you cannot use Profile Manager or Apple Configurator. For this I used iPhone Configuration Utility to create the initial mobileconfig file, and then I used TextWrangler to add the two keys. With a manually produced mobileconfig file I do not believe there is anyway to send it via Profile Manager but you can either email it to the device or make it available via a web server. Other MDM solutions than Profile Manager do allow pushing uploaded mobileconfig files, I used Meraki Systems Manager and pushed my hand edited mobileconfig files 'over the air' to the devices.
It should be noted that if you are authenticating usernames and password against a directory server e.g. Active-Directory, Open Directory or LDAP, then if you enforce password ageing and changes you are going to have to hand edit and resend an updated mobileconfig file with the new password in it. This is why I chose option 1 above for my own situation. It is in theory less secure as it only uses a single basis for authentication - the certificate but I felt this an acceptable trade-off.

Remove app from Profile Manager

hello there,
Having set up my Lion Server with several users, I was testing the pushing of apps. It works just flawless.
But after playing I wanted to delete all the test apps I uploaded.
I can't find any option to delete them. Only a link on internet to delete it in the database.
Weird, one should be able to delete something?
Even, when I upload my first App, and then one day later the same App, but a newer file, still the old date of the first upload is in the App list.
Do I miss something?
Please helpme!
mattijn

http://krypted.com/mac-os-x/removing-apps-from-profile-manager-using-postgres/
this will leave "null" entries but clear the rest
Apple needs to fix. One of the reasons I stopped using Profile Manager and switched to Meraki.

Pushing out Apps to iPad without Apple ID credentials!

When are Apple going to allow educational institutes and business push out apps without requiring the apple ID and Password. Im not the only one to mention this! Very common issue!
Whenever we push out an app using our MDM tool, it asks for the Apple ID password! Our only option is to give the password to the teacher or student, but then we risk them logging into the online account and locking us out! (changing the password and security details etc...)
Somthing NEEDS! to be done here, Ive been frantically Googling for days trying to find a work around that DOSENT involve the Apple Configurator (with **** USB cables!) and i KNOW im not the only person in this situation....
Or at least have a layered password facility so that if we do give out a password to the teacher or student, the password they have cant do anything but install apps... that might work...
Apple really need to look at this!

I'd give apple a call. I think that I read that you do not need to enter the password with iOS 7 for app updates.
Until something better comes along.
"Deploying a great quantity of iOS devices means creating a great quantity of Apple IDs. This script allows automated Apple ID creation from a spreadsheet."
http://www.enterpriseios.com/wiki/Apple_ID_Automation_Builder

Push one new app and Profile Manager resends them all; turn this off?

I manage the ipads for a medium sized school district. We're using Apple Configurator on Maverics to manage about 700 ipads most of which have been updated to iOS7 and supervised manually through the mini that functions as our MDM and server.
So average day: a teacher requests a new app to be pushed out to the 30 ipads that are in one of the shared ipad carts. I have all the ipads in a device group in profile manager, so I go out to itunes, download the app, upload it to profile manager and add it to the device group, hit save, and I can see that a new active task has begun pushing that app out to all the devices in the cart.
The active task used to just say "Push Apps to [device group] 30 of 30 in progress: [#] succeded" 30 copies of an app, one for each of 30 devices. Totally normal.
Now since the update to iOS7/Maverics when I send one app to one cart configurator is erasing EVERY app on that cart and resending them ALL. So now the active task in the same situation looks like "Push apps to [device group] __ of 538; [#] succeded." Where the 538 is the total number of apps on all 30 ipads.
As you can imagine this is a bit of a mess. Not only does it bring the mac server to its knees, but it makes the ipads in question useless until the apps have all redownloaded-- which can take hours, if not days, depending on other network traffic. At the very least with iOS7 one doesn't have to hit "confrim" on each app install, but still, small consolation there.
Is there a way to turn this weird behavior off? Are other people experiencing this? Is it just a horrible bug that someone is planning to fix very soon?
Any insight is much apreciated!

Here are the places to report bugs:
Get an account at
http://developer.apple.com/ then submit a bug report to http://bugreporter.apple.com/
Developers:
"Submitting Bugs and Feedback
Your feedback goes a long way towards making our products even better. With Apple Bug Reporter, you can submit bug reports or request enhancements to APIs and developer tools."
https://developer.apple.com/bug-reporting/
Enterprise support:
Call enterprise support (866) 752-7753 to create a case ID number

Private, enterprise deployment + updating of iBooks, pdf's ... via app, or Profile Manager

Hello,
We wrote our own iBooks and PDF's for an internal, enterprise deployment. We need to distribute them to iPad users and then manage them (updates, etc.). Due to the content, there is no need and little desire to make them publically accessible (post on a webpage, use Drobox, Box, etc.). We could put them on smartcard or password controlled site. They are quite large so emailing them is a pain. In these later cases, it then requires the user to manually download the file, then when an update comes along, delete the old and download the new (a big pain). It would be best to do this automatically at night.
We're using MacOS Server Profile Manager for our MDM, which can push self-created apps & webclips but not iBooks and pdfs. It would be great if PM could add/delete/update iBooks & PDFs iOS iBooks app ... like it can with apps & webclips.
Until then, what's the solution to manage senstive iBooks & PDFs?
Create one (or more) apps the we self-publish & distribute that contains the iBooks and PDF files? Then update the very large app?
Thanks,
K

What about using a WebDav? Download a 3rd party WebDav APP and go to the following URL on your server:
https://subdoamin.yourdomain.com/webdav/
You do have to enable the share for WebDav to do this in server app but it works great. We use it for iWork and pdf documents.
Thanks,
ebrind

Pending Pushed App in Profile Manager

Hello,
I have been working in Profile Manager to push both ios and ox applications to mac laptops and to iPads. Right now, everything is pushing beautifully to the iPads, however under Active Tasks the applications just get stuck pending to the mac computers.
Any solutions?
Thanks!
Message was edited by: fkravtbc

So, this issue has been sovled. When installing OSX Server 10.9 the device manger database was replaced with a database named.
devicemgr_v2m0
I am not sure if this is the same name for all upgrades/new installs or diffrent based on the upgrade path.
Tim

Errors deploying Enterprise iOS app through Profile Manager

We manage about 35 iPads through Profile Manager, including deploying a custom made app.
We first deployed this app in July and had no problems with it. Our third party developers have released an update for iOS 7 and we are running into problems pushing it out through Profile Manager.
When I try to upload the IPA file through the web interface I get the attached error. Looking at the logs I see the following errors:
Sep 16 14:42:50 mdm.servername.com ProfileManager[210] <Info>: Unable to find icon file for '/var/devicemgr/ServiceData/Data/tmp/temp_extracted_folder_for_data_file_30/Pay load/Hope.app/Icon-72.png'
Sep 16 14:42:50 mdm.servername.com ProfileManager[210] <Info>: Unable to find icon file for '/var/devicemgr/ServiceData/Data/tmp/temp_extracted_folder_for_data_file_30/Pay load/Hope.app/Icon.png'
This is the first time we've tried to update our custom app. In trying to narrow down whether it was a problem with Profile Manager or the app I uploaded an older version of Apple's Podcast app, and pushed it out to a test iPad, then uploaded the current version through Profile Manager and pushed it out to the iPads with no problems.
Our developers say that nothing has changed from the original version to the new version.
Any ideas?

We could solve this by opening the firewall for some ports (443, 1640, 2195, 2196, 5223, ) and ip addresses (17.0.0.0/8). Have a look at
OS X Server: Ports used by Profile Manager
Start Profile Manager

Failing to push out apps via profile manager

Similar Messages

Maybe you are looking for