Profile Manager Active Tasks

Hey guys,
Whenever we log into our Profile Manager, there's also a ton of active tasks running. I just checked now, and there are 40 tasks currently active. These are tasks we haven't initiated on our end, and for the majority, it's removing settings from our laptops. Sometimes, we'll just watch the active tasks list for a few minutes and within that period more and more tasks will get added that neither myself nor the other Mac tech has initiated.
Have you all heard anything like this before, and if there's a possible solution/reason?
Thanks!
Aaron Campbell
Tech II | Putnam City Schools

I found since profile manager is pulling over ad users I can search individual users and they are set by default to push settings does anyone know how to change this?

Similar Messages

Profile Manager Active Tasks Status stays on Pending

Hi, I have a Mavericks Server with Profile Manager, I have two device groups for iPads and iPhones. For some reason I can no longer apply any updates etc to devices, it hangs on pending under Active Tasks. Nothing has changed, I have the following ports open: TCP:2195,2196,1640,5223. Everything was working ok, I am struggling to work out why this has changed. I have even restarted the Server.
Any pointers or ideas would be well appreciated.

Hi dankgus, I was reading this article which explains how the mechanics of this work.
http://www.justinrummel.com/how-apns-works-with-mdms-that-manage-osx-and-ios/
I then thought about your firewall comment, when I configured my firewall to work with my Mac MDM I used this Apple KBA ------> http://support.apple.com/kb/ht5302 however I did not open TCP:443 for security reasons. I actually thought this was just for device enrollment and management however it looks like the iOS device might actually require it to function properly. I opened the port and ran a device update which worked. I think it worked ok initially because internally users can get to the MDM over TCP:443 through our split DNS and as soon as they took their iOS devices out of the reach of our corp WIFI it stopped working. I will observe the results and report back and of course I welcome comments.

Profile Manager - Activity Tasks - Unknown Target

Hardware Details
Product - Mac mini Server (Late 2012)
Processor - 2.3 GHz Intel Core i7
Memory - 4 GB 1600 MHz DDR3
OS - OS X Yosemite 10.10.2 (14C1510)
OS X Server Application Details
Version - 4.0.3 (14S350)
I am configuring the Profile Manager for Users. I have created Restrictions in the Settings tab for Users for one of the Users. After saving my Restrictions, the profile manager pushes it to devices and for some reason it will not push and the status is shown as Pending, because the device is Unknown.
How do I retrieve the unknown device and remove it from my PM as it is causing hassle every time I try to push the settings to the User.
[Attached image for clarification]

Did you setup DNS correctly?
Profilemanager relies heavily on a Fully Qualified Domain Name FQDN, so only using macserver.local might cause this issue.
Is the computer who is @unknown getting it's DNS information from the macserver as well or another DHCP server? And does that DHCP server point to the macserver, enrollment needs a valid DNS setup to work properly.
Is port forwarding enabled for profile manager? Can you tell us more about your setup?
Goodluck
Jeffrey

Profile Manager Active Tasks never complete, are always pending

I'm using OS X Server 3.2.2 on OS X 10.9.5. I'm attempting to push changes to a device or device group (iMacs in this case), but the task status is always pending and the task never completes. However, when I manually download the Enrollment Profile on a client machine, it will contact the server and grab the device and device group profiles during the initial enrollment. We're not blocking any ports and the server and client are both on the same VLAN and subnet. I'm stumped as to why I'm seemingly only able to communicate to the server from a client and not the other way around. I appreciate any help and suggestions. Thanks.

Hi dankgus, I was reading this article which explains how the mechanics of this work.
http://www.justinrummel.com/how-apns-works-with-mdms-that-manage-osx-and-ios/
I then thought about your firewall comment, when I configured my firewall to work with my Mac MDM I used this Apple KBA ------> http://support.apple.com/kb/ht5302 however I did not open TCP:443 for security reasons. I actually thought this was just for device enrollment and management however it looks like the iOS device might actually require it to function properly. I opened the port and ran a device update which worked. I think it worked ok initially because internally users can get to the MDM over TCP:443 through our split DNS and as soon as they took their iOS devices out of the reach of our corp WIFI it stopped working. I will observe the results and report back and of course I welcome comments.

10.9 Profile Manager Active Directory Advanced Options

Hey guys!
I've been working with Profile Manager in Mavericks Server and so far, I'm pretty excited with the improvments in functionality that have been made. I'm still using WGM and MCX settings for my 10.6 - 10.8 users but would like to move to Profiles for 10.9 and iOS 7. However I have a single road block in my way and it's in reference to this article:
http://support.apple.com/kb/HT5981
I am able to use the "Directory" payload to bind to AD cleanly and everything works. However, I need to access some of these Advanced Options referenced in the KB article.
The first set of instructions about creating the .mobileconfig, downloading it, and then editing it works prefectly. However, I would then have to manually distribute the .mobileconfig instead of being able to push it. If I eventually wanted to modify it (such as add an ADDomainAdminGroupList later on) I would again have to manually distribute the .mobileconfig.
The second set of instructions in the KB article reference (with a "by the way" attitude...) stating that these settings can be added in the Custom Settings Payload. I have been unable to get this to work in any fashion. I'm unsure if the Directory Payload still has to be configured, or if it needs a dedicated UUID, or if it needs the entire AD configuration, etc...
Anyone been able to successfully set this up? I can provide my mobileconfigs upon request if that will help.
Thanks!
Nick.

Hello Nick,
I wouldn't be as sure as GeneMCX about the custom settings section. I actually was able to create a payload for the Finder and then override some of the settings by uploading the following file under the custom settings section:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
 <key>ShowHardDrivesOnDesktop</key>
 <true/>
 <key>ShowExternalHardDrivesOnDesktop</key>
 <false/>
 <key>ShowRemovableMediaOnDesktop</key>
 <false/>
 <key>ShowMountedServersOnDesktop</key>
 <false/>
</dict>
</plist>
Important: the file was named com.apple.finder.plist in order to populated the "Preference Domain" correctly (com.apple.finder in this case).
In this particular case, I let the client download the profile using the mydevice portal. Not sure if things would have worked properly if the configuration had been pushed to him.
Bottom line is: in at least one case, custom settings do allow to tweak a payload configuration. But not always. I am still unable to do a similar thing with mail accounts. I have no idea whereas Active Directory Advanced Options fall in the first category or in the second one.
You could probably make tests using a "simpler" service than AD... like Finder by example. Just get used to all this. One useful command on the client side is "profiles". You can have a look here: http://krypted.com/tag/profile-manager/
I hope this helps. Good luck!

Mac Mini Profile Manager installing/updating ipad Apps - HELP!

Hi,
i am hoping someone might be able to help with the following.
we have a mac mini server to remote manage 25 ipads using profile manager.
this works well as we can lock, wipe and clear passcodes etc.and attach the policies without any trouble.
However we are trying to push out an app (version 1.4) to the devices and this is sort of working but not fully.
if the app is already installed with version 1.3 it doesnt update even though in profile manager, 'active tasks' it says successful.
if you go go into profile manager and select the device and select 'update info' this registers against the device but still shows as the old version.
if we delete the app from our test ipad and push it out via profile manager it goes in active tasks as successful then the ipad has a pop up message box saying the xxxxxx.ourdomain.co.uk would like to install the app, once this has been ok'd it installs on the ipad ok, but when you select the app it tries to open then goes back to the screen again and never opens the app.
if you download the app direct from itunes it opens with out any trouble.
here is the process i am using.
on the mac mini server.
download the app via itunes
then in apps i drag the app on to the desktop, this creates the .ipa file
in profile manager, select the device, edit apps and browse to the .ipa and upload
select the uploaded app and 'add'
when you save this, then go to active tasks it gets pushed out to the device and reports as successful
then the app either doesnt update if old version is installed or installs if no app is installed but doesnt open
any help welcome
regards
Gavin

Gavin,
We've run into the same issue that you mentioned. My understanding of the Push App functionality of Profile Manager is this:
Pushing apps is designed to be used to deliver In-House developed apps over the air (OTA). Meaning, if your organization develops an app for use on its own devices, you can upload the .ipa to Profile Manager and push it out while bypassing any App Store interaction. The In-House .ipa would contain its own provisioning profile that would dictate who is allowed to run it.
When you download an app from the App Store, the .ipa that you get actually contains the AppleID that was used to purchase/download the app in the .plist. If you then push that app to a device that has never been used with that AppleID, the app will fail to launch as it cannot verify that you actually own the app.
Before we go any further: what I'm about to discuss isn't officially condoned or supported by Apple, which means it is inheritly risky and could be patched over at any time.
In order to bypass the issue, what has worked for us is to sign into the App Store on each iPad with the AppleID that is used to purchase the apps on your Mac Mini. You need to download at least one app to the iPad while logged in with that AppleID in order for the iPad to retain the AppleID after the iPad users log in again with their personal AppleID. After you have done that, users may once again log in with their own AppleID.
At this point, you can push an app to any of those devices that have been paired with your Mac Mini's AppleID at least once. The apps won't (immediately) crash.
Here's the catch: I'm told that the .ipa contains an "expiration date" of sorts. Once that date has elapsed, your iPad will attempt to extend the expiration date by connecting to the App Store to verify that the same AppleID that was used to download the app in the first place is still active on the device. If it is not, the app may once again crash when you attempt to run it. Now, this expiration date or timer is not disclosed, meaning, if this is really the case, you will have no idea when the apps will stop working. It could be weeks, or months, or years. A gamble, really. So, use that at your own risk.
Currently, there is no official method for pushing App Store apps Over-the-air with Profile Manager or any other Mobile Device Management platform.
Remember!: If you are even considering pushing apps in the manner mentioned above, you will still need to account for licensing. As an organization, you must have purchased the same number of copies of an app as you intend to install on your devices. This is a non-issue with free apps, but for auditing purposes, you'd best look into VPP or steer clear of pushing apps altogether.
I hope some of that helped clear up your question.
Good luck!

Neither Firefox nor the profile manager will start. In my task manager, the process is using 50% of my cpu but does nothing. I love browsing with firefox, how can I fix this?

I've tried restarting my computer, the I tried uninstalling and reinstalling, then uninstalling, erasing all firefox files and folders, then restarting and reinstalling. I've also tried opening the profile manager to change my profile. After reinstalling a few times and trying to open the profile manager before launching firef0x, I got the firefox has crashed window and the process in the task manager is still using 50% of my cpu. The most recent expunge then re-download pops up a "file is corrupt" error and won't even install the program.

Kill those processes that you are seeing, including any plugincontainer.exe, only once firefox has stopped running should you try to update it.
Totally unexpected instances of firefox running may sometimes be the result of malware activity.

Tasks locked under Profile Manager

Hi everybody,
I configured a mac mini server with OS X Server 3 to use MDM for my organization. We have about 70 iPads to manage and I want to push Free Apps, Exchange settings, etc.
Following the setup assitant, I try to add a new iPad by connecting to my mdm/mydevices. I can add my organisation profiles but when I go to the profile manager to see if everything is OK, I have an active task, corresponding to my new iPad. This task has no target and stay active, without completing.
I can't see anything interesting in log files (or maybe I don't know where to find interesting data ?)
Thanks in advance for your help !

Also, when I sign into the users portal, the only device shown is this MAC which is my server and I do not want the users to enroll and be able to wipe the server. How can I stop the MAC server from being on the My Device list for the Users.

Firefox doesn't open, but is open in Processes in Task Manager, not even profile manager opens up for Firefox opens up. Please help

I'm using Vista, 32 bit - not even downloading the beta version of Firefox 4 helps; it downloads (just like the regular version of Firefox, 3.4) and I can install it, but trying to run it gives me nothing - no warning, no text; it just doesn't open up, but is still visible in my start menu, programs folder and in task manager. And not even profile manager opens up.

Make sure that you do not remove your personal data when you uninstall Firefox. Then you won't lose personal data stored in a different location in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Firefox Profile Folder].
See also http://kb.mozillazine.org/Profile_backup and [[Backing up your information]]
A possible cause is security software (firewall) that blocks Firefox. 
Remove all rules for Firefox from the permissions list in the firewall and let your firewall ask again for permission to get full unrestricted access to internet for Firefox. 
See [[Server not found]] and [[Firewalls]] and http://kb.mozillazine.org/Firewalls
See also http://kb.mozillazine.org/Browser_will_not_start_up
Do a malware check with a few malware scan programs. 
You need to use all programs because each detects different malware. 
Make sure that you update each program to get the latest version of the database. 
*http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
*http://www.superantispyware.com/ - SuperAntispyware
*http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
*http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
*http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
See also "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked and [[Searches are redirected to another site]]

Firefox won't start, profile manager won't start, but firefox.exe shows in processes list (task manager)

Firefox will not start, even though it is listed in my processes in task manager. Can't get profile manager to start either.
I have tried the following to no avail:
- try to start FF in Safe Mode, doesn't load
- started Windows Vista in Safe Mode, FF still does not load
- turned off Kaspersky AV, FF still does not load
- uninstalled FF, cleaned out user/####/AppData/Mozilla/Firefox folder, as well as ProgramFiles/Mozilla/Firefox folder, and cleaned our Registry manually from all references to Firefox. Downloaded FF 3.6.3, installed. still does not load
- whatever i seem to do, does not fix the problem. When I try to start Firefox, no window appears. I can see the process starting in my task manager. I can "end process" and try to start the program again by double-clicking program icon. Process starts in task manager, but no app window appears.
I am frustrated and have just wasted 2+hours of my night trying to get this to work. Downloaded Google Chrome, unless there is a fix for FF (which I would prefer to use), i will have to switch to Chrome.
I can't pinpoint when this trouble started, but may have been after a recent Windows Update. I already did a System Restore to a restore point about 5 days ago (the oldest one available to me, and I believe that was before the FF trouble started). This has not helped either.
I have run a full virus scan with Kaspersky and a Full scan with Windows Defender. Nothing came up.
Anyone else been able to find a solution to this?
== This happened ==
Every time Firefox opened
== Less than a week ago ==
== User Agent ==
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.86 Safari/533.4

I found a way to make it work somehow but not really fixing the error... one day when I got really pissed off because FF just won't open, I clicked the icon and killed the enter button, then multiple FF windows appeared. I tried to open it with just a single hit of the enter or double clicking but it won't work anymore, but repeatedly clicking the enter button (mine works with just 3 hits, sometimes 6) seem to open it. And until now, I have no technical explanation for this.

Firefox does not open, profile manager does not open, not listed in task manager

firefox worked fine about two days back. Our norton expired so I downloaded Kaspersky Anti-Virus 12.0.0.374. I don't know if that has any connection to firefox not working.
I click on the icon, nothing happens. The task is not mentioned in the task manager.
I try to run it in safe mode, nothing happens. I try to open the profile manager, nothing happens! What can I do to fix this?

Thank you fmdeveloper! I did some more research after I posted the question and it turns out Kaspersky was not the issue. I had done a system restore two days back and it says online that after a system restore, you have to uninstall and reinstall firefox. So I uninstalled it (kept my settings and data) and reinstalled it and voila, it works!
I did switch from Kaspersky to Avira too for Anti-vifus, don't know if that's a sane decision or not, but it's good to know that Kaspersky was not the culprit!

Firefox begins to start but then stops before loading any screen. Profile manager/safe mode appear then disappear. Task manager shows programs briefly in CPU then they disappear. Uninstall & reload makes no difference. Any ideas please ?

When we clicked as usual on the firefox icon the egg-timer started then went off. Nothing started up.
Checking the Task Manager showed firefox.exe briefly using the CPU then it dropped off the list.
We tried to uninstall and reload from the mozilla site (http://www.mozilla-europe.org/en/firefox/). Installation seemed to work ok, but the same problem recurred when we tried to start firefox.
Did this again, this time removing bookmarks, etc. same result.
Tried to use the profile manager - the screen came up but disappeared before we could use it.
Same thing happened when we tried to start in safe mode - screen briefly appeared but then disappeared.
Tried googling in IE to solve the problem but nothing seems to apply.
Have run all security checks but no apparent bugs or problems.
Have had to abandon firefox and use another browser. How do we get it back please ?

Did you check your security software (firewall)?
A possible cause is security software (firewall) that blocks or restricts Firefox without informing you about that, possibly after detecting changes (update) to the Firefox program.
Remove all rules for Firefox from the permissions list in the firewall and let your firewall ask again for permission to get full unrestricted access to internet for Firefox.
See [[Server not found]] and [[Firewalls]] and http://kb.mozillazine.org/Firewalls

Active Directory Permissions to Profile Manager

Hopefully this will help anyone else who runs into this trouble.
OSX 10.9
Server App 3.0.1
We have a profile manager server setup using our Active Directory. After initial setup the system was working fine and all users could access the services.
In attempting to adjust the web service the permissions for service was turned on and domain users could no longer log in to enroll devices.
To resolve this issue I worked through the following steps.
In Server App > Groups found Domain Users (The group containing all users in the domain)
Clicked the Gear and choose Edit Access to Service
Checked off Profile Manager.
I then added Domain Users to the Local Workgroup and allowed the same access to services. This could be done with a different group if needed.
It may work at this point but as an additional step you can install the Workgroup manager tool from Apples Download site. http://support.apple.com/kb/DL1698
Log int to your Local Directory, I used /LDAPv3/127.0.0.1
Find the group you added the permissions to in the local domain and add your Active Directory Domain Users to that group.
Hope this saves someone else the annoyances I went through.

So after a little more trouble shooting as well I ended up using ths post after a backup of the database.
To backup the database I use this Post - https://discussions.apple.com/thread/3791994
pg_dump -U _devicemgr -h /Library/Server/ProfileManager/Config/var/PostgreSQL/ -c device_management > $HOME/device_management.sql
And resetting the server app and database.
https://discussions.apple.com/message/23925691?tstart=15#23925691?tstart=15
Interstingly this pulled my old database info back in and restored some settings that had been lost. I'm not really sure why and wouldn't trust it to happen again.
My issue is now that AD users have to log in twice. The first time they get a denyed error. Then they log out and login on the same browser or a differnt computer al together and they can get in.

Error in solution manager; no active task list exists in sap change manager

Hi,
i have created a correction in Solution manager but when i want to set it in status in development i receive the message below
No active task list exists in SAP Change Manager
could you please help me?
thanks
C.

cmarrone wrote:Hi,
This says taht your ChaRM configuration is not complete. You need to rectify these errors to work in ChaRM.
>
> listed below the detail of the errors:
> Error in background job for program RSGET_SMSY error message No active job found
1. Please activate the Landscape fetch job for RSGET_SMSY from SPROSolution ManagerBasic Settings-- Schedule Bgd jobs.
> No RFC connection for system CIA client '000'
Please maintain a connection from solution manager to the transport domain system . I belive this is CIA.
> No CTS projects found for project ARC_AM_001
Recheck the transport configurations.
Rajeev

Can't log in to Profile Manager or My Devices with Active Directory logins

I have an OSX Lion 10.7.4 Server set up with Profile Manager and it is joined to AD.
I am able to see AD groups in the Profile Manager groups section.
I can also see and add AD users and groups using the server app.
I have enabled the "Can Enable Remote Management" check box for Domain Users through Profile Manager. I have also added Domain Admins to the Workgroup group in the Server app. I'm not sure that I want or need either of these options, but they were suggestions to try.
I am not able to log on to the Profile Manager or My Devices pages with AD logins.
I found these directions about nested groups in Workgroup Manager http://krypted.com/iphone/integrating-mac-os-x-lion-servers-profile-manager-with -active-directory/ but I don't have a com.apple.access_devicemanagement local group or any groups like are shown in the picture.
Any ideas what I'm missing?
Cheers,
Ian

I found the two pieces I was missing:
1) Install the Lion Server Admin Tools
Launch the Server Admin App
Click on the server name in the left pane
Click on the Access button in the upper part of the window
Click on Profile Manager
Either manually add specific groups to the list or if you're feeling brave choose the "Allow all users and groups" radio button
2) Run the command line steps on this page to change the authentication to plain text to support AD authentication:
http://support.apple.com/kb/HT4837
Voila!

Profile Manager Active Tasks

Similar Messages

Maybe you are looking for