Ghost user in Profile Manager.

Hi. Got a problem with Profile Manager. It got three "Ghost" users. I have removed them from Server.app but they leave three unnamed usares in Profile Manager. Any tip on how to get rid of them?
See the attached image.

Sounds like this user is on the BES if your talking about the BlackBerry Manager, and if you are, this is not possible. You can activate two pop3/imap accounts though.
If someone helped you give them kudos. Research all info!

Similar Messages

"no users found" Profile Manager Mountain Lion

Hello to all.
Today we just notices something really wired and we need your Help ...
When we browsing the Profile's manager WEB interface we are able to see all Library components and their CONTENTS (px users etc)
-- Devices
-- Device Groups
-- Users
-- Grous
When we navigate and click on the Users menu all users appears in the right list ...
So far So Good ...
Now ... when we type anything in the search bar ... from a unique letter or a full name ... the message we taking is "NO USERS FOUND".
Any ideas?
Can anyone Help on this?
it's really critical.
Thank you all in advanced.

Unfortunately not yet.
If you find anything please let me know.
It's really critical for us.
Thank you again

Unable to push user profiles to AD groups with Profile Manager since upgrade to Server v3

Since upgrading our OS X Mac server from 10.8.5 to 10.9.1, and OS X Server app to v3 (now 3.0.2) I have been unable to push or modify user profiles to AD groups (or AD users) using Profile Manager. This was working fine on OS X 10.8.5. Pushing device profiles is still working OK after the upgrade.
From what I can see from the logs on the client side and server side, it seems related to a problem with the mdm authtoken.
In the client console I can see this entry:
27/01/14 14:30:15.844 mdmclient[38557]: *** ERROR *** [Agent:636102071] Unable to proceed with connection to: https://ourserver.ourdomain/devicemanagement/api/device/mdm_connect (com.apple.mdmconfig.mdm) because don't have valid MDM AuthToken
On the server, in the php.log I can see the corresponding attempt to authenticate:
1::Jan 27 14:29:50.930 [158] <192.168.28.171> {require_once (mdm_checkin.php:11)} vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv - PUT mdm_checkin
0::Jan 27 14:29:50.931 [158] <192.168.28.171> checkin: 'UserAuthenticate'
1::Jan 27 14:29:50.936 [158] <192.168.28.171> {Target_for_incoming_request (target.php:209)} Found target NETWORK LS: <User[156]@ourclientmachine>
0::Jan 27 14:29:50.937 [158] <192.168.28.171> {LabSession_validate_auth_token (mdm_checkin.php:22)} Failed auth for target NETWORK LS: <User[156]@Device[1697]>, incoming_request={
0::Jan 27 14:29:50.937 [158] <192.168.28.171>   'MessageType'=>'UserAuthenticate',
0::Jan 27 14:29:50.937 [158] <192.168.28.171>   'UDID'=>'17aff5c5a40f51acbbd78023d0028c80',
0::Jan 27 14:29:50.937 [158] <192.168.28.171>   'UserID'=>'A5EA25B7-7CCD-4EF4-B240-F23DED275EEC'
0::Jan 27 14:29:50.937 [158] <192.168.28.171> }
1::Jan 27 14:29:50.965 [158] <192.168.28.171> {SendFinalOutput (mdm_checkin.php:145)} Sent Final Output (407 bytes)
1::Jan 27 14:29:50.965 [158] <192.168.28.171> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ - /devicemanagement/mdm/mdm_checkin
0::Jan 27 14:29:50.965 [158] <192.168.28.171> {SendFinalOutput (mdm_checkin.php:145)} Completed in 34ms | 200 OK [https://ourserver.ourdomain/devicemanagement/api/device/mdm_checkin]
So I can see there is a failure to authenticate, but don't really know how to troubleshoot this further. Or maybe this is just a bug in the new server app?
I have tried to remove and re-enroll clients in Profile Manager but no joy there.
In the client's Keychain I can see an MDM user AuthToken linked to the correct user account.
Thanks in advance for any help or suggestions

I just wanted to update my post, as this issue for me is resolved.
I uninstalled and reinstalled the Server.app on our Mac server, since then I've been able to push profiles to AD Users and Groups. I guess that in my case the Server app got into a bit of a mess when it was upgraded to v3.
Now the next headache I have is that my AD Groups which are displayed in Profile Manager are not syncing any recent changes. I think I'm probably seeing the same issue as described in this post
https://discussions.apple.com/message/25420919#25420919

Can't log in to Profile Manager or My Devices with Active Directory logins

I have an OSX Lion 10.7.4 Server set up with Profile Manager and it is joined to AD.
I am able to see AD groups in the Profile Manager groups section.
I can also see and add AD users and groups using the server app.
I have enabled the "Can Enable Remote Management" check box for Domain Users through Profile Manager. I have also added Domain Admins to the Workgroup group in the Server app. I'm not sure that I want or need either of these options, but they were suggestions to try.
I am not able to log on to the Profile Manager or My Devices pages with AD logins.
I found these directions about nested groups in Workgroup Manager http://krypted.com/iphone/integrating-mac-os-x-lion-servers-profile-manager-with -active-directory/ but I don't have a com.apple.access_devicemanagement local group or any groups like are shown in the picture.
Any ideas what I'm missing?
Cheers,
Ian

I found the two pieces I was missing:
1) Install the Lion Server Admin Tools
Launch the Server Admin App
Click on the server name in the left pane
Click on the Access button in the upper part of the window
Click on Profile Manager
Either manually add specific groups to the list or if you're feeling brave choose the "Allow all users and groups" radio button
2) Run the command line steps on this page to change the authentication to plain text to support AD authentication:
http://support.apple.com/kb/HT4837
Voila!

Profile Manager Calendar Subscription

Is it possible to deploy calendar subscriptions to OSX Users with Profile Manager? Its listed as an option for iOS users, but not OSX. Perhaps a custom payload?

hi there. did you find a way to solve this?
I am getting many (non-stop every minute) of "10/8/12 4:24:48.966 PM com.apple.launchd[1]: (com.apple.collabcored4) Throttling respawn: Will start in 7 seconds" errors. And my wiki is now unstable with error page once every few clicks.
Thanks in advance for any suggestion you might have.
Edward

Can I use Apple Volume Purchasing Codes with Apple Profile Manager?

I am using Apple Profile Manager (on OS X 10.8) to manage some iOS devices. I would like to be able to push apps to users using Profile Manager, however, I cannot seem to find a way to import an Apple Volume Purchasing Program redemption code spreadsheet. Basically, I am looking for a way to deploy apps to the devices without the users having to purchase them using their own Apple ID's. I've done some research, and I have determined that this funcationality seems to be included in Apple Configurator. I am wondering if I can do the same thing in Profile Manager. I would rather not have to change my MDM solution, if at all possible. Thanks in advance, I appreciate it.

Hey JTShelatz,
just push you Apps with Profileservice. But just the amount of purchased licences .
Thats how I understood Apples VPP deployment strategy.

App-V 5 sp2, Citrix user profile manager and Event IDs 19104

Hi,
the environment:
Full Infrastructure, Appv 5 sp2 Client on server 2008r2, xenapp 6.5 and Citrix user profile manager.
We get the event error 19104 on published packages. But not on all users. %APPDATA%\Microsoft\AppV\Client\VFS and %LOCALAPPDATA%\Microsoft\AppV\Client\VFS are excluded per
http://blogs.technet.com/b/appv/archive/2013/10/01/support-tip-event-ids-19104-and-19105-are-logged-when-publishing-and-unpublishing-app-v-5-0-packages.aspx from my test GPO:
List of directories to exclude:
AppData\Local\Microsoft\AppV
AppData\Roaming\Microsoft\AppV\Client
Appdata\local
appdata\locallow
Still some users get app-v Applications, but some that are copies of the ones working does not get the Applications. I have tried to delete the profile. but still no closer to a solution. Anyone got this working?

Thanks Nicke, I should have tried harder to get you to come and work with me in Oslo earlier this year ;)
That thread does point on the Profile managment, and redirection of %appdata% and %localappdata% . Those to folders are not redirected. But when i run Procmon, i can see that a working user creates the c:\users\<username>\appdata\local\temp but non
working does not even try.Non working users also does not query the registry as much as working. Ofcourse this all work in my lab so the settings should be sound. but i cannot find the smoking environment variable or setting that causes it.

How can you disassociate a user from a computer in Profile Manager?

Our elementary school manages around 250 Macs. This year, we upgraded all our Macs and Mac Servers to Mavericks. We're now embracing Profile Manager as a replacement for WorkGroup Manager. This has not been a smooth transition. I really like Profile Manager, or at least what Profile Manager purports to be. But, we're running in to really odd issues that we just can't seem to figure out. Specifically, the issue we're having now is that we've noticed that when a student logs in to a Mac, Profile Manager recognizes that student being associated with that Mac. We can push out profile changes to that student's account and, though not perfect, will usually provide the updated settings within moments. However, when the student logs in to a different Mac, Profile Manager now associates that Mac with the student also. So, the next time a payload is sent out, there are two Active Tasks attempting to update each of the Macs that the student has logged in to. This would make sense if the student if the student regularly used both Macs. But this issue persists even when that Student's user account has been removed from the Mac. The student only has one user account on one Mac out of all the Macs in the elementary school, but when we deploy profile changes, it wants to update the student's account on two, three or however many Macs that student has ever logged in to. This is a particular problem for some students accounts who we used for testing and troubleshooting.
I feel like there's something basic that I'm missing, but I just haven't been able to figure it out yet. Any help or advise with Profile Manager would be greatly appreciated!

Once you have enabled this you will then need to go to:
http://www.verizon.com/fiostvcentral
Logon with your primary VZ email credentials and then access your DVR and channel guide. At the channel guide you can hit the record button.
Jim

Solution Manager 4.0 Solution Monitoring User -Roles-Profiles for Satellite

Hi All,
I have installed Solution Manager 4.0 (OS -Linux ,Database - DB2) .
Now i need to connect solution manager to the R/3 4.6C
Satellite Systems (DEV, QAS ,PRD) for Solution Monitoring
and Service level Reporting .
I have read the configuration guide , but unable to get clear idea .
1) what users (alos type of user -Dialog , Service, Communication etc) do i need create in DEV , and Test in QAS for solution Monitoring .
2) what exact roles /profiles need to be assigned to these users in satellite systems .
3) what users/roles /profiles needs to be done in SOLMAN system
i have applied all the required plug ins and support packs
in satellite systems and solman 40 ..
Please advice . Your response will be a great help for me .
Satish

Hello Satish,
Just clarify, if u have meant connecting the satellite systems for EWA reports to be precise. Early watch Reports. If its is the case, then repond so that i can putin my inputs which may be helpful for you in this config.
Rgds,
Sri

Users added to Profile Manager not showing up in everyone group

So profile manager was working quite well until I made a change to the workgroup group.
I removed the password policy from the workgroup group and added a new group for the password policy so we could essentially still manage non user assigned iOS devices.
Now when I add a new user to the workgroup group on the server I have them login to the mydevices site so we can enroll the device and they can login but are immediately presented with:
"You do not have permission to access the page you were looking for. Contact your system administrator."
In troubleshooting the issue I noticed that new users being added are not showing up the in the everyone group which is preventing the users from having proper access. Prior to all this I could add a user and they would show up in everyone as intended.
Any thoughts?

I'm not sure if this is the same issue, but I have a user in Server.app that is not showing up in Users group. She is listed in her sub-group, but I cannot add devices to her account. When I click on the arrow next to her name in the sub-group, it takes me to the Users list to the top user.
Any thoughts?

Is there a way in 10.8 Profile Manager to assign certain users the sole right of adding/removing users to user groups?

Hello,
I want to assign certain network users the ability to login via browser to the profile manager for 10.8.x server and add/remove other users from user groups. Think teachers managing their class rosters, if the class was a group and the users their students. I do not want any other admin funtionality beyond that for them.
Suggestions?

Well thank you for being so polite. Yes, on looking on my 10.8 server, I have the same thing. How annoying. I have no idea how to answer your question. If the management abilities are no longer in Workgroup Manager then there's a change that the server doesn't pay any attention to the settings, so manually changing settings in LDAP won't have any effect either.
At least I can verify that it's not just you who gets that result. I wonder what happened and how we're meant to do this now.

OS X Server 4.0.3 Profile Manager Settings for Mobile Users problems

OS X Yosemite 10.10.2 with Server 4.0.3
We are using Profile Manager to control Settings for Mobile Users, and give homeSync to the users. Our problem is that the exclude / Skip items (Items matching any of the following will not sync" This setting is not working an example. I have put this folder to Skip Items ~/Downloads but the home Sync still Syncing items in the Downloads folder.
I have this problem on all the 3 users/machines on that server. Every client is using os x 10.10.1 og 10.10.2 I have check that the profile from the server is on the client.
Has any a solution to that?
Regards
Brian

I have no solution but have experienced failing sync settings (quite often) in both 10.6 Server and 10.9 + Server 3 (upgraded from 10.6 Server) in the same way as you described, it syncs too much. We have given up on synched home folders and will cut them and use other backup methods since we’re not so dependant on switching between different devices. Our users usually have one computer, one iPhone, one iPad and stay with those until it’s time to exchange them.

Is there an easier/more-automated way to create user settings in Profile Manager?

I'm setting up a Mavericks Server and am setting up the settings for each user within the Profile Manager. I'm finding somewhat tedious to have to enter all of the server and account information per service per user. Seeing that it knows the details of the server it's running on – and the user for whom I'm setting up the profiles, is there no automatic way to produce a settings bundle for each user? At the very least, the server hostname and username should be prefilled.

What settings are you setting in the profiles? You can set a general setting that is available to all users, and also create various device configurations and add devices to them. I personally have not found much use for user specific profiles within profile management.

Fast User Switching through Profile Manager

We recently started using OS X Server to manage our Mac computers, currently only 2 but further expansion is expected. I only have one of the Macs set up on the server for testing purposes. We are primarily an Active Directory network and I have implemented Open Directory through OS X Server and bound that to the primary Windows domain controller.
So far, things have gone quite smoothly with the integration except for implementing fast user switching on the single client machine tied to the OS X Server box. I have gone through Profile Manager and under the Login Window settings for the laptop, enabled fast user switching. However, it still does not work on the client machine after the changes were pushed out.
The user does not get her user name listed in the upper right and we have found no other method of using fast user switching. She specifically wants to display the login window when she's not at her desk (and this is required for security reasons). As it is, she has to completely log out of her machine every time she leaves her desk which is, inconvenient, to say the least.
I have searched through the discussions here and every mention I've found that seems to reference this issue also references using network home directories, which we are not doing. I have the home directory set to continue to reside on the local machine so the AFP/NFS issue shouldn't apply.
Prior to implementing OS X Server, the only thing we were unable to do was limit external drive use and writable media on the Macs since they don't recognize those GPOs from the domain controller. Updates were easily handled through a third party appliance that we already use for all our other devices and computers on the network. At this point, if fast user switching is unavailable, it would be less work and less inconvenient for me to simply limit the external media use locally and allow the Mac to be locked by removing the influence of OS X Server.
If anyone knows how to enable it though, this would be my preference since the Software Update is *easier* through OS X Server.

I found the problem. The device group that the laptop in question was assigned to also has an option for fast user switching that was not enabled. I enabled it there and the problem was resolved.

How can users add their devices to Profile Manager without a user account?

We would like to allow company devices to be tracked, inventoried and managed in Profile Manager without creating a user account for each person so they can log into /MyDevices to download the mobile profiles. We aren't staffed to have someone manage user accounts as quickly as iPads are being purchased.
If we can't do some kind of guest access, can one user, maybe called Enroll, have literally one thousand devices attached to them?
The other alternative is to have the profiles on a small webpage with a password to download.

the easiest way is to use apple configurator
using apple configurator
enable enrollment in PM
un tick restrict to users in device library
apple configurator should pick up your server certs
and the PM auto enrollment profile
setup a enrolment wifi lan
configure your IOS devices with apple configurator adding the
server cert and your enrolment wifi lan
you'll still have to handle each device tapping yes to install each profile
but you should end up with the ipads in PM with no users
from there you can set which wifi you wish them to connect to
eg staff wifi, email setings, VPN etc.
open the correct ports on firewalls to allow PM to work internaly and externaily
and pr any port forwading as nessessary and you'll be able to wipe lock change settings outside on your network, providing the device is online.

Ghost user in Profile Manager.

Similar Messages

Maybe you are looking for