Profile Manager problems: enroll fails, organization name NULL

At the moment I have 4 VM's running OS X Lion Server. All four are running different services.
I have one OD Master, and 3 OD replica's. On one of the three replica's I am trying to setup Profile Manager.
Two problems came up:
1. Organization is set to NULL instead of my Domain.
Jan 24 17:13:45 laelaps scep_helper[2165]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-702.13/scep_helper/m ain.m:1084 'org' is NULL
My Trust Profile is listed as Trust Profile for. No additional name is attached.
2. Devices fail to enroll even after installing the trust profile. If I install the trust profile they state that the SCEP Server is invalid.
Any advice on those two problems?

The solution turned out to be simple, but much work.
I destroyed the OD. Reinitialized the server that was - according to my planning - be serving Profile Manager as an Open Directory Master, configured the other servers as replica's, yet the 'org' NULL did not go away.
The enrollment was succesfull thanks to Jonathan Melville's solution.
After that I completely reinstalled the four servers. Made the server that was supposed to be serving ProfileManager the directory master. The three other servers were configured as replica's. Set up Profile Manager and it worked out as it was supposed to.
The morale of this story: Server Admin does not set the organisation correctly. If you create the Open Directory using Server.app it will set this correctly. So make sure you use Server.app for the Open Directory creation. Replica's can - and have to - be done by the Server Admin.
Thanks for the help Jonathan Melville, your shot at masters and replica's was correct.

Similar Messages

Profile Manager: Service has failed with status 500?

I am getting a "Service has failed with status 500" error when trying to enroll a device with profile manager. Does anyone have a resolution for this?

In OS X Server 2.1.1 there seems to be an error, according to: https://discussions.apple.com/thread/4365626?start=0&tstart=0

Delivering Profile Manager Policies/Enrolling via Workgroup Manager MCX?

Does anyone know if it is possible, and what strategy one would use for enrolling clients in an existing WGM/MCX infrastructure into a Profile Manager managed scenario?
Basically, what we are talking about doing is automating the run of the .mobileconfig profiles/Enrollment profiles on each system.
Assuming one can deploy WGM settings to these systems, is there a zero-touch way to enroll them?
Thanks.

You can create many different workflows in Deploystudio and these can do all sorts of things, such as partition a hard disk, image a computer and enroll them in configuration profiles, bind to active directory, set open firmware password. Of course you can also create a single step workflow that just enrolls them and reboots. Enrollment is one of the build in templates.
If you have ARD, you use the GUI to copy the profiles to a certain directory and reboot (there are instructions on the net).
If it doesn't work, there is also a UNIX command you can run in the GUI.
http://www.afp548.com/2012/06/01/automating-enrollment-of-lion-into-profile-mana ger-on-os-x-server/

Profile Manager cannot enrol any device...

Hi, everyone hope I could find some help. I am having problem with enrollment of my clients to my server.
Below are some of my Server Log error:-
Unable to create ProfileManager log file at '/var/log/devicemgr/profilemanager.log' (No such file or directory)
www com.apple.launchd[1] (com.apple.DeviceManagement.php-fpm[65995]): Exited with code: 78
ruby[65926]: Unable to create ProfileManager log file at '/var/log/devicemgr/
(com.apple.DeviceManagement.php-fpm): Throttling respawn: Will start in 10 seconds
an I have an airport ext problem due to the latest update to server app.
I did try this:-
http://support.apple.com/kb/HT5349
but it didnt work..
Many Thanks.

Hi Gerry,
Thanks. I will take note of it.
www:~ admin$ ls -aFl /var/log
total 7472
drwxr-xr-x 69 root             wheel            2346 Nov 12 00:30 ./
drwxr-xr-x 29 root             wheel             986 Oct 17 18:01 ../
drwxrwx---   8 root             admin             272 Nov 12 00:00 DiagnosticMessages/
drwxr-xr-x   6 root             wheel             204 Nov 12 12:54 apache2/
-rw-r--r--   1 root             wheel             195 Nov 8 05:32 appfirewall.log
drwxr-xr-x 40 root             wheel            1360 Nov 12 12:32 asl/
drwxr-xr-x   5 _calendar        _calendar         170 Nov 8 05:31 caldavd/
lrwxr-xr-x   1 root             wheel              25 Nov 8 05:33 collabd@ -> /Library/Server/Wiki/Logs
drwxr-xr-x   2 root             wheel              68 Nov 4 22:54 com.apple.launchd/
drwx------   2 justin           wheel              68 Oct 18 17:15 com.apple.launchd.peruser.1025/
drwx------   2 ghchan           wheel              68 Oct 23 12:37 com.apple.launchd.peruser.1026/
drwx------   2 hocklye          wheel              68 Oct 23 12:38 com.apple.launchd.peruser.1027/
drwx------   2 jowell           wheel              68 Oct 23 12:40 com.apple.launchd.peruser.1028/
drwx------   2 jasmine          wheel              68 Oct 23 12:42 com.apple.launchd.peruser.1029/
drwx------   2 hilda            wheel              68 Oct 23 12:43 com.apple.launchd.peruser.1030/
drwx------   2 alice            wheel              68 Oct 23 12:44 com.apple.launchd.peruser.1031/
drwx------   2 yee              wheel              68 Oct 23 12:47 com.apple.launchd.peruser.1032/
drwx------   2 zyann            wheel              68 Oct 23 12:48 com.apple.launchd.peruser.1033/
drwx------   2 grace            wheel              68 Oct 23 12:50 com.apple.launchd.peruser.1034/
drwx------   2 irene            wheel              68 Oct 23 12:54 com.apple.launchd.peruser.1036/
drwx------   3 _softwareupdate wheel             102 Nov 10 05:32 com.apple.launchd.peruser.200/
drwx------   3 _coreaudiod      wheel             102 Nov 8 05:48 com.apple.launchd.peruser.202/
drwx------   4 _cvmsroot        wheel             136 Nov 12 13:04 com.apple.launchd.peruser.212/
drwx------   3 _dovecot         wheel             102 Nov 8 05:33 com.apple.launchd.peruser.214/
drwx------   4 _postgres        wheel             136 Nov 12 12:43 com.apple.launchd.peruser.216/
drwx------   4 _devicemgr       wheel             136 Nov 8 06:18 com.apple.launchd.peruser.220/
drwx------   4 _webauthserver   wheel             136 Nov 12 13:17 com.apple.launchd.peruser.221/
drwx------   2 _lp              wheel              68 Nov 5 08:08 com.apple.launchd.peruser.26/
drwx------   4 _postfix         wheel             136 Nov 8 06:50 com.apple.launchd.peruser.27/
drwx------   4 nobody           wheel             136 Nov 12 13:53 com.apple.launchd.peruser.4294967294/
drwx------   2 admin            wheel              68 Nov 4 22:54 com.apple.launchd.peruser.501/
drwx------   4 _www             wheel             136 Nov 12 13:20 com.apple.launchd.peruser.70/
drwx------   4 _clamav          wheel             136 Nov 12 05:52 com.apple.launchd.peruser.82/
drwx------   4 _amavisd         wheel             136 Nov 12 13:14 com.apple.launchd.peruser.83/
drwx------   2 _jabber          wheel              68 Nov 4 22:54 com.apple.launchd.peruser.84/
drwx------   2 _windowserver    wheel              68 Nov 4 22:54 com.apple.launchd.peruser.88/
drwx------   2 _spotlight       wheel              68 Nov 4 22:54 com.apple.launchd.peruser.89/
drwx------   3 _securityagent   wheel             102 Nov 8 05:37 com.apple.launchd.peruser.92/
drwx------   4 _calendar        wheel             136 Nov 8 05:57 com.apple.launchd.peruser.93/
drwx------   4 _teamsserver     wheel             136 Nov 8 16:11 com.apple.launchd.peruser.94/
drwx------   2 _atsserver       wheel              68 Nov 4 22:54 com.apple.launchd.peruser.97/
drwxr-xr-x   5 root             wheel             170 Nov 8 05:32 cups/
-rw-r--r--   1 root             wheel            7067 Nov 12 03:15 daily.out
drwxr-xr-x   2 root             wheel              68 Oct 17 16:10 emond/
drwxr-xr-x   8 root             wheel             272 Nov 12 00:00 eventmonitor/
drwxr-xr-x   2 root             wheel              68 Jun 21 04:26 fax/
-rw-r--r--   1 root             wheel            1770 Nov 8 05:43 fsck_hfs.log
-rw-r--r--   1 root             wheel           35598 Nov 12 12:54 getsslpassphrase.log
-rw-r--r--   1 root             wheel           91448 Nov 12 13:52 install.log
drwx------   2 root             wheel              68 Oct 17 16:24 krb5kdc/
-rw-r-----+ 1 root             admin          930307 Nov 12 13:56 mail.log
-rw-r--r--   1 root             wheel               0 Nov 8 05:31 notifyd.log
-rw-r-----   1 root             admin            4763 Nov 8 10:53 opendirectoryd.log
drwxr-xr-x   2 _teamsserver     _teamsserver       68 Oct 17 17:53 passwordreset/
drwxr-xr-x   8 root             wheel             272 Nov 12 00:00 performance/
drwxr-xr-x   2 root             wheel              68 Aug 25 16:01 ppp/
drwx------   3 root             wheel             102 Jun 21 07:50 radius/
drwxr-xr-x   2 root             wheel              68 Aug 8 09:40 sa/
drwxrw----   8 root             wheel             272 Nov 8 05:36 server_backup/
-rw-r--r--   1 root             wheel             205 Nov 8 05:32 servermgrd.log
-rw-r--r--   1 root             wheel            7565 Nov 12 12:41 slapd.log
-rw-r-----   1 root             admin         2268575 Nov 12 13:57 system.log
-rw-r-----   1 root             admin           78463 Nov 12 00:30 system.log.0.bz2
-rw-r-----   1 root             admin           77896 Nov 11 00:30 system.log.1.bz2
-rw-r-----   1 root             admin           79303 Nov 10 00:30 system.log.2.bz2
-rw-r-----+ 1 root             admin          200494 Nov 9 00:30 system.log.3.bz2
drwxr-xr-x   2 _uucp            wheel              68 Jun 21 04:07 uucp/
-rw-r--r--   1 root             wheel              87 Nov 10 03:15 weekly.out
drwxr-xr-x   4 root             wheel             136 Nov 11 22:53 xscertd-crls/
Thanks
Justin

Accepted Solution Recovery Manager Problem (Recovery fails)

HP, I received my Recovery kit ordered from HP distribution Center, and so started doing recovery Window 7 64bit as instructed. Everything went smooth, formatting of partitions, copying files for restoring system etc. And when the HP software installation finished, it came to the WELCOME page, and the message window poped up " recovery attempt failed. Seleted one of the following buttons: Save Log Details Retry " I saved log to a USB drive , its a SRD file so I cannot open it, and I hit retry, and i t all started from the beginning again. Please tell me what is going wrong here ? What I should do ??? I have spend hours trying work this out !!!

Hi ,
Thank you for visiting the HP Support Forums and Welcome. It is a great site for information and questions. I have looked into your issue about your HP Pavilion dv6z-6c00 Notebook and issues with System Recovery. Here is a link on somethings that might cause it to fail. Have you tested the Hardware on the Notebook?This is another document on recovery issues. Please note remove any and all USB devices. Disconnect all non-essential devices, as these could cause some issues. If those do not help take a look at how to disable Secure Boot in the BIOS, this could cause it not to go through. I hope this helps you, please let me know. Thanks.

Remove VPP Token from Profile Manager

Hello,
I recently set up a test OSX Mavericks server and enrolled our VPP for testing purposes. To continue testing other options, I signed up for a Meraki account, and wanted to see how their VPP process compared with OSX Server. However, when I tried to enroll the VPP at Meraki I got an error...
"one or more errors occurred. No changes have been saved. VPP service token contains invalid characters."
I am trying to trouble shoot this, but not having much luck. At first I thought it might be an issue with our account name because we have Japanese in the business name. However, when I made some changes to teh OSX server during testing and re-entered the VPP it said that it was in use and that continuing would reset it. I said OK.
So no I wonder if the Meraki error is a resualt of teh VPP token already being registered with a different MDM.
Any body have experience with this error from Meraki or with how to remove the token from OSX Server.
Thanks for any help or insight you can offer.
Leon McCormick

http://krypted.com/mac-os-x/removing-apps-from-profile-manager-using-postgres/
this will leave "null" entries but clear the rest
Apple needs to fix. One of the reasons I stopped using Profile Manager and switched to Meraki.

Setting apn with Profile Manager

apn profiles in Profile Manager seemes malformed.
This is a snippet of how it looks when downloaded from Profile Manager:
<dict>
          <key>DefaultsData</key>
          <dict>
                    <key>apns</key>
                    <array>
                              <dict>
                                        <key>apn</key>
                                        <string>mytestapn</string>
                                        <key>proxy</key>
                                        <string></string>
                                        <key>proxyPort</key>
                                        <string></string>
                              </dict>
                    </array>
          </dict>
</dict>
<dict>
          <key>DefaultsDomainName</key>
          <string>com.apple.managedCarrier</string>
</dict>
when I create a .mobileconfig file with IPCU, the xml looks like this:
<dict>
          <key>DefaultsData</key>
          <dict>
                    <key>apns</key>
                    <array>
                              <dict>
                                        <key>apn</key>
                                        <string>mytestapn</string>
                                        <key>proxy</key>
                                        <string></string>
                                        <key>proxyPort</key>
                                        <integer></integer>
                              </dict>
                    </array>
          </dict>
          <key>DefaultsDomainName</key>
          <string>com.apple.managedCarrier</string>
</dict>
that is, in profile Manager, DefaultsDomainName key is contained within its own dict tag, and in IPCU it is located together with the DefaultsData key.
when I try to deploy the profile to a device using profile manager, the job failed with MCPayloadErrorDomain
Has anyone had any luck on setting apn settings with Profile Manager?

Just updated OSX - problem solved

Lion Profile Manager clear passcode ipad 2

Hi All,
First ever post to Apple forums:) I'll try to make it simple
Ok on Profile manager I enrolled the ipad all went good, with passcode setting.
Now the user has forgotten the passcode.
I go to profile manager, select the device and select clear passcode and Its stuck on sending, because the ipad cannot connect to the internet since it uses proxy with authentication.
So is there a workaround to this problem, I cant change the proxy settings on the ipad since it is locked.
So how can I clear the passcode
Thanks in advance

Hi
Is the Lion server directly on the internet, or is there a proxy server or fire wall? These will block the ports needed for the Lion server to send the push request to the Apple Cloud.
Is the Web browser you used, Safari or Firefox? Safari is more relaible to connect to the profile manager.

Profile cannot be loaded, profile manager cannot be accessed, firefox not working

This is somewhat similar to other listed profile manager problems but none of the answers worked for me. OS is Win 8-64 bit. Have 2 user accounts. Admin and Limited. In Admin, Firefox works, can access Profile Manager, there is this profile.ini etc. Everything ok.
But in the Limited account, can not access Firefox. When clicked, it says 'Your Firefox profile can not be loaded. It may be missing or inaccessible'. Cannot access Profile Manager "C:\Program Files (x86)\Mozilla Firefox\firefox.exe" -p. Gives the same error message (Firefox not running).
Tried copying files in the Admin in to Limited. But the error message is same.
Uninstalled and installed using the Limited Account (supplying Admin password), no result.
Please help me.
Thank you for your time.

Hello jcbala
see '''IF''' we can create a test profile in the location you want, type the command:
===== "C:\Users\Limited\AppData\Roaming\Mozilla\Firefox\firefox.exe" -CreateProfile test =====
check if the path is correct (in the specific location)
http://kb.mozillazine.org/Command_line_arguments
thank you

Profile Manager Mavericks & Active Directory Users.

I have recently being trying to implement MDM Profile Manger to facilitate the deployment of Mavericks OSX on our domain.
We currently run a mixed environment of Windows 7 and OSX Mountain Lion. Using Workgroup Manager with Active Directory created users. The old Workgroup manager works brilliantly the way we want it to do for Snow Leopard OSX.
MDM however does not work in the same fashion. It might be my understanding of MDM that is misconstrued and that it doesn't do what I want or I'm not setting it up correctly.
MDM works fine for mobile devices. The issue is with iMac's. I can send 'device' settings to my test mac and they get automatically implemented. However if I sign on as a domain user that is assigned to a group created in MDM. None of the 'profile' settings get applied.
The test iMac I am using is first joined to AD then the OD of the MDM server.
To enroll a device on MDM. I use the OD administrator account. I then remove the device from the OD Admin account. As each iMac needs to be logged into by various users with different levels of access. So our iMacs cannot be associated to just one user account.
I then login to the test iMac using an AD user that is assigned to a User Group created on the MDM server. No User Group settings get applied to the test user.
Also which is a little weird. If I assign the test iMac device to My AD user. The profile settings get applied to the local account that I accessed profile manager to enroll the device. Even though the account is not linked to the MDM in any way.
I’m just wondering if anyone has had any success with AD users and MDM.

Hi,
first you should consult http://support.apple.com/kb/HT4837
and then you have to import the specific users. You can do this in the Server.app by adding a new user an then select not new user but instead import the user from the Active Directory. I hope this helps. It is confusing
that Lion Server does not uses the Active Directory to store the information, but instead creates a new Open Directory Master an uses augumented entries for the ADS users.
Bye

Remove app from Profile Manager

hello there,
Having set up my Lion Server with several users, I was testing the pushing of apps. It works just flawless.
But after playing I wanted to delete all the test apps I uploaded.
I can't find any option to delete them. Only a link on internet to delete it in the database.
Weird, one should be able to delete something?
Even, when I upload my first App, and then one day later the same App, but a newer file, still the old date of the first upload is in the App list.
Do I miss something?
Please helpme!
mattijn

http://krypted.com/mac-os-x/removing-apps-from-profile-manager-using-postgres/
this will leave "null" entries but clear the rest
Apple needs to fix. One of the reasons I stopped using Profile Manager and switched to Meraki.

Profile manager enrolled device names

I have been playing around with profile manger on 10.7.3 enrolling and iPhone and a couple of iPads.
The iPhone enrolls correctly and the name in the devices tab shows the device name "xxx's iphone" and I can see the information about the device including encryption, apps installed etc.
Both iPads appear to enroll correctly however instead of showing "xxx's iPad" they show the device name of "New Device". I even tried pre-enrolling the device using the serial number and UUID and gave the device a meaningful name, however when then enrolling the device it accepts the enrollment and promptly chnages the name from the meaningful name back to "New Device".
I have tried this on both and iPad 2 and iPAd 3 running the latest IOS.
I also notice that the jobs that communicate with the device to collect the device informantion never complete, where they do for the iPhone.
I am sure this was working before the IOS 5.1 update.

I would try demoting your Open Directory server from Master to Standalone in the Server Admin app - there's an assistant in Server Admin > Open Directory > Settings > General > click the change button.
Once it's demoted to a standalone, restart.
From there, don't create an OD Master again - go to Profile Manager in Server.app and run through the wizard again. In the process, it will create an OD Master for you.
Hope that helps,
Chris

Can't enroll devices with Profile Manager - invalid key

n my case I can install profiles on devices from Profile Manager page but I cannot enroll devices.
The certificate I download to enroll is reject by my MacBook Pro Lion: Says Invalid blablabla at the end:
Now I have done log research and I now exactly and understand why it doesn't work:
the scep_helper daemon is supposed to listen to port 1640 TCP (which you should forward to your server by the way, if you want to be able to enroll devices) and provide the requsting client the root CA that signed the certificate. In my case, it can't find the root CAT to provide the client with so it can finalize the cert validation process.
In my case, that's what I see in the log:
Jul 29 02:12:44 teknologism scep_helper[1638]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:727 'status = SCEPGetCACert(session, NULL, 0)' = -25300
Jul 29 02:12:44 teknologism scep_helper[1638]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:513 'SCEPGetCACert(session, NULL, 0)' = -25300
Jul 29 02:12:44 teknologism scep_helper[1638]: SCEP_HELPER: /SourceCache/RemoteDeviceManagement/RemoteDeviceManagement-701.70/scep_helper/m ain.m:819 'challenge = GetChallengeFromSCEP(password, guid, hostURL)' is NULL
Jul 29 02:12:44 teknologism ProfileManager[516]: Could not retrieve root certificate from open directory server.
No , as for the bad news: I have no idea on how to fix. Have dug into scep_helper, googled etc. Not a single clue on how to check it's configuration or even why it can't find the root CA. By the way everyhting else (I really mean everything, ical,cardav,web,wiki etc.) work great. And profile manager too, it's just the enroll thingy that doesn't work. And the root CA cert is in /etc/certificates. My server a legit Class 1 SSL cert signed by a system trsuted CA (Startfiel to name it)
I have tried with other certs etc... It's a no go.
Can anyone help ??
How can I add that missing CA Cert in opendirectory ?

Here is some more infos...
teknologism:root root# serveradmin settings devicemgr
devicemgr:SSLAuthorityChain = "/etc/certificates/trinity.teknologism.org.C1D19D55699B48C94A18787E4F53B4C3230E 91FE.chain.pem"
devicemgr:od_active = yes
devicemgr:ssl_active = yes
devicemgr:enableCodeSigning = yes
devicemgr:updated_at = 2011-07-28 16:04:52 +0000
devicemgr:email_delivery_method = ""
devicemgr:CodeSigningPrivateKey = "/etc/certificates/teknologism.org Code Signing Certificate.ED29CE4BD9D2926D64E60EF7A117EFDB2213F0CC.key.pem"
devicemgr:apns_active = yes
devicemgr:CodeSigningAuthorityChain = "/etc/certificates/teknologism.org Code Signing Certificate.ED29CE4BD9D2926D64E60EF7A117EFDB2213F0CC.chain.pem"
devicemgr:default_profile_created_at_least_once = yes
devicemgr:knob_sets_enabled:com.apple.mail.managed = yes
devicemgr:knob_sets_enabled:com.apple.vpn.managed = yes
devicemgr:knob_sets_enabled:com.apple.carddav.account = yes
devicemgr:knob_sets_enabled:com.apple.jabber.account = yes
devicemgr:knob_sets_enabled:com.apple.caldav.account = yes
devicemgr:email_authentication = ""
devicemgr:email_port = 25
devicemgr:email_username = ""
devicemgr:id = 1
devicemgr:last_modified_guid = ""
devicemgr:SSLPrivateKey = "/etc/certificates/trinity.teknologism.org.C1D19D55699B48C94A18787E4F53B4C3230E 91FE.key.pem"
devicemgr:od_master = "127.0.0.1"
devicemgr:apns_topic = ""
devicemgr:email_password = ""
devicemgr:mdm_acl = 2047
devicemgr:user_timeout = 43200
devicemgr:server_organization = ""
devicemgr:SSLCertificate = "/etc/certificates/trinity.teknologism.org.C1D19D55699B48C94A18787E4F53B4C3230E 91FE.cert.pem"
devicemgr:created_at = 2011-07-24 11:47:33 +0000
devicemgr:email_address = ""
devicemgr:email_domain = ""
devicemgr:CodeSigningCertificate = "/etc/certificates/teknologism.org Code Signing Certificate.ED29CE4BD9D2926D64E60EF7A117EFDB2213F0CC.cert.pem"
devicemgr:email_server_address = ""
devicemgr:admin_session = ""
The 3 CodeSigning certs/keys are in /etc/certificates and their permissions are correct.
Also, don't ask me why but my ProfileManager pane in Server.app is working again. It shows all the config...but can't modify anything....as soon as I try to modify it spins the waiting whell forever... I guess it's the same error as command line serveradmin...

Can't enroll new clients in Profile Manager 3.0.3

I just upgraded a server from 10.8.5 to 10.9.2 and updated the Server app to v3.0.3. Almost everything seems to have gone smoothly, except that I can no longer enroll clients in Profile Manager, and the user under which all devices were originally enrolled disappeared.
I manually re-added the user through the Server app, and used the same short name and password for the account.
All of the old clients (OS X systems running 10.8.5) are still there. I can search within the device list, create profiles, edit profiles, and remove profiles. But none of them show up when I log into the My Devices web page with the re-created user.
This user does not have admin privileges, but even when I try to enroll a device using an admin account I still get a "500 Internal Server Error".
I can't seem to find any other threads covering this exact problem, although there seem to have been others with various PostgreSQL database migration issues during the upgrade. For examples, see this thread: Managed Settings missing in Profile Manager after upgrade to Server 3
Looking for some ideas...

Well, that is one idea that I've already had, Linc, but I'm reluctant to use the "nuclear option" for obvious reasons. I'm actually wondering now if the Secure Cert / OD problem is affecting Profile Manager. See this thread: https://discussions.apple.com/message/23686348#23686348

Name clash in profile manager after NetRestore

Hi there,
New to the Apple world (Hi ) and struggling with profile manager.
I have used NetRestore to get an image onto 2 iMacs and I'm just going through the process of adding them to our network.
Post build I'm trying to enroll both iMacs but they are somehow clashing or linked. If I enroll MU112MAC, MU111MAC suddenly shows as enrolled (from the http://macserver/mydevices page). I've checked to make sure they have the correct computer name/host name but for some reason as soon as I enroll 1 they both show as enrolled (though only 1 device shows in profile manager devices).
Coming from a Windows background I thought this might be due to lack of a sysprep (or equivalent) beign run pre-capture but from some searching there doesn't seem to be a sysprep as such but rather guides on cleaning up cache and creating default user profile. I have a feeling the device was enrolled pre-capture so wondering if that's where the problem has arisen?
Any pointers/suggestions gratefully received.

Hi there,
New to the Apple world (Hi ) and struggling with profile manager.
I have used NetRestore to get an image onto 2 iMacs and I'm just going through the process of adding them to our network.
Post build I'm trying to enroll both iMacs but they are somehow clashing or linked. If I enroll MU112MAC, MU111MAC suddenly shows as enrolled (from the http://macserver/mydevices page). I've checked to make sure they have the correct computer name/host name but for some reason as soon as I enroll 1 they both show as enrolled (though only 1 device shows in profile manager devices).
Coming from a Windows background I thought this might be due to lack of a sysprep (or equivalent) beign run pre-capture but from some searching there doesn't seem to be a sysprep as such but rather guides on cleaning up cache and creating default user profile. I have a feeling the device was enrolled pre-capture so wondering if that's where the problem has arisen?
Any pointers/suggestions gratefully received.

Profile Manager problems: enroll fails, organization name NULL

Similar Messages

Maybe you are looking for