Profile Manager Tasks Queue up without completing

I've got a fresh Lion server, fully-qualified, publicly-addressable DNS, brand-new SSL Cert installed and working, ready for Profile Manager. I can enroll the iPad just fine, and it shows up in Profile Manager as a New Device. Unfortunately, it never makes it past that point. The initial tasks that Profile Manager performs on new devices (the "Update Info: New Device" tasks) just queue up, and never complete. If I do anything else with the iPad (setting restrictions, attempting to lock it, etc), those tasks just get added to the end of the queue and don't go anywhere.
I've got all the ports open for the Lion server (in fact, at the moment, I opened the firewall completely for the server). I also opened what I believe are the relevant ports for my LAN subnets as well (though in theory, that shouldn't be necessary, since the iPads only talk to the APNS servers and shouldn't need anything special beyond that).
Am I missing something?

Hi Josh,
I don't know if this fits with what you are doing! But, instead of automatic push, try manual download of profiles. You open profile manager/my devices in safari and log in as the user on your client machine. From there you can enroll and download profiles. You will have to configure the General payload for each device/group etc., to manual though on your server.
I've found this to be the easiest option because of all the hassles with auto push etc.. This means you can reapply your firewalls and close your ports.
LS 10.7.2 doesn't improve on any of the issues either. Very buggy indeed!
I hope this helps.
Paul.

Similar Messages

Setting parental controls via profile manager

So I've got Lion Server running on an older mac mini. I've setup up accounts on the server for my kids. (they're my guinea pigs!) We have 2 other macs in the house both running Mavericks. I'm able to do a networkin login into the kids' accounts from those client machines with no problem. I'm also storing their home folders on the server and creating "mobile" accounts (I think that's the terminology) on the client machines. I've installed the Trust certificate from the server onto those client machines. I've also installed the group certificate on the client machiens. (most of the profile manager settings I have for the kids are handled in a group called "kids")
Here's the problem: if I try to enforce parental controls on the kids' accounts (such as limiting the time they can be on them, etc) it doesn't work. In fact, after the settings get pushed to the client machines, they (the client machines) often will lock-up or start acting really flaky. A reboot "fixes" that, but the parental controls still won't work.
I've tried this literally dozens of times with the same result. Other changes in profile manager, such as restricting access to certain apps, DOES seem to work. It's mainly just the settings related to parental controls that seem to be the problem.
Am I doing something wrong? Is this stuff supposed to work? Thanks for any help, this is incredibly frustrating!

Unfortunatley I never got this resolved. In fact, it turns out that this is really a bug in how the parental controls work with a "managed" account. All of the other settings that can be managed on OSX server seemed to work just fine in my testing, but the parental controls do not. Or more specifically, the curfew (time limit) settings definitely don't work. It's hard to believe, but apparently this is a use-case Apple never considered. (if you do some googling for parental controls and OSX server you'll find we're not alone)
I don't recall exactly, but if you're trying to determine if changes got pushed to the clients there is something in the profile manager (web UI) that shows "completed tasks" or "active tasks" (or something like that) which should show what was pushed and if it was succssfully received by the client.
Anyway, after all that effort I ended up not using the profile management feature in OSX server at all. My kids accounts are now just plain 'old local accounts. I came to the conclusion (as many others have) that OSX server, at least in a home setting, just isn't worth the effort. It's too bad because if it all worked properly it could be really useful. If you still want to mess around with OSX server you might want to check out some nice youtube videos by a guy named Todd Olthof. He has a bunch of videos on OSX server that are actually geared completely towards the home user.
Good luck!

Tasks to iOS devices stuck sending in Profile Manager

I am managing about 30 iPads and 10 iPhones through Profile Manager.
I installed iOS 7 on a freshly wiped iPad and enrolled it with the server and everything works as expected (including locking, updating info, pushing settings, etc)
I then updated an already enrolled iPad from iOS 6.1.3 to iOS 7. Everything appears to still be intact (all settings, apps, profiles, etc) but it will not longer accept commands (lock, clear passcode, push settings, etc) from the Profile Manager. When I try to send a task it just shows sending and never fails or completes. The iPad has internet access (it is on the same wifi network as the above mentioned iPad that is working fine)
Other already enrolled devices that have not yet updated to iOS 7 seem to complete tasks (Update info) just fine.
I was running 10.8.4 with OS X Server 2.2.1 when this began, and have since updated to 10.8.5 and Server 2.2.2 with no change in behavior.
How can I troubleshoot why this iPad is not completing commands. I'm worried that as my users update to iOS 7 other iPads will not recieve commands and I will need to have them re-enroll with the server in order to manage them. (Which I would like to avoid if possible)

I've already asked people to hold off on updating, but without any way to prevent them from updating, I just have to hope...
I installed the iPCU and have looked at the console but I'm not seeing anything relevant. It's like the the command isn't being recieved by the iPad at all (even though Profile Manager shows it as sending, the iPad has internet access, and another iPad on the same network has no problem recieving commands)
Looking at the logs on an iPad that is receiving commands (the iPad with a fresh iOS 7 install, enrolled with Profile Manager after iOS 7 was installed) I see entries related to MDM:
Sep 19 07:18:05 iPad-iOS7 mdmd[99] <Notice>: (Note ) MDM: mdmd starting...
Sep 19 07:18:06 iPad-iOS7 mdmd[99] <Notice>: (Note ) MDM: Looking for managed app states to clean up
Sep 19 07:18:08 iPad-iOS7 mdmd[99] <Notice>: (Note ) MDM: Network reachability has changed.
Sep 19 07:18:08 iPad-iOS7 mdmd[99] <Notice>: (Note ) MDM: Push token received.
Sep 19 07:18:13 iPad-iOS7 mdmd[99] <Notice>: (Note ) MDM: mdmd stopping.

Tasks locked under Profile Manager

Hi everybody,
I configured a mac mini server with OS X Server 3 to use MDM for my organization. We have about 70 iPads to manage and I want to push Free Apps, Exchange settings, etc.
Following the setup assitant, I try to add a new iPad by connecting to my mdm/mydevices. I can add my organisation profiles but when I go to the profile manager to see if everything is OK, I have an active task, corresponding to my new iPad. This task has no target and stay active, without completing.
I can't see anything interesting in log files (or maybe I don't know where to find interesting data ?)
Thanks in advance for your help !

Also, when I sign into the users portal, the only device shown is this MAC which is my server and I do not want the users to enroll and be able to wipe the server. How can I stop the MAC server from being on the My Device list for the Users.

HT201334 How does one set up profile manager on a completely closed network with no Internet access available or even possible?

I need to set up Profile Manager on a completely closed network that has no Internet access at all. I can sneaker-net files into the network if I need to.
Profile Manager (and Lion Server in general) seems to need outside access to complete setup and I've been unable to find any meaningful answers.
Does anyone any any ideas?
Thanks to all

you could try it without enabling apple push notifications in server
you wont' be able to push out profiles without enabling apple push notification
but users could download them, or you could install manually, e-mail etc

Firefox begins to start but then stops before loading any screen. Profile manager/safe mode appear then disappear. Task manager shows programs briefly in CPU then they disappear. Uninstall & reload makes no difference. Any ideas please ?

When we clicked as usual on the firefox icon the egg-timer started then went off. Nothing started up.
Checking the Task Manager showed firefox.exe briefly using the CPU then it dropped off the list.
We tried to uninstall and reload from the mozilla site (http://www.mozilla-europe.org/en/firefox/). Installation seemed to work ok, but the same problem recurred when we tried to start firefox.
Did this again, this time removing bookmarks, etc. same result.
Tried to use the profile manager - the screen came up but disappeared before we could use it.
Same thing happened when we tried to start in safe mode - screen briefly appeared but then disappeared.
Tried googling in IE to solve the problem but nothing seems to apply.
Have run all security checks but no apparent bugs or problems.
Have had to abandon firefox and use another browser. How do we get it back please ?

Did you check your security software (firewall)?
A possible cause is security software (firewall) that blocks or restricts Firefox without informing you about that, possibly after detecting changes (update) to the Firefox program.
Remove all rules for Firefox from the permissions list in the firewall and let your firewall ask again for permission to get full unrestricted access to internet for Firefox.
See [[Server not found]] and [[Firewalls]] and http://kb.mozillazine.org/Firewalls

Firefox doesn't open, but is open in Processes in Task Manager, not even profile manager opens up for Firefox opens up. Please help

I'm using Vista, 32 bit - not even downloading the beta version of Firefox 4 helps; it downloads (just like the regular version of Firefox, 3.4) and I can install it, but trying to run it gives me nothing - no warning, no text; it just doesn't open up, but is still visible in my start menu, programs folder and in task manager. And not even profile manager opens up.

Make sure that you do not remove your personal data when you uninstall Firefox. Then you won't lose personal data stored in a different location in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Firefox Profile Folder].
See also http://kb.mozillazine.org/Profile_backup and [[Backing up your information]]
A possible cause is security software (firewall) that blocks Firefox. 
Remove all rules for Firefox from the permissions list in the firewall and let your firewall ask again for permission to get full unrestricted access to internet for Firefox. 
See [[Server not found]] and [[Firewalls]] and http://kb.mozillazine.org/Firewalls
See also http://kb.mozillazine.org/Browser_will_not_start_up
Do a malware check with a few malware scan programs. 
You need to use all programs because each detects different malware. 
Make sure that you update each program to get the latest version of the database. 
*http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
*http://www.superantispyware.com/ - SuperAntispyware
*http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
*http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
*http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
See also "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked and [[Searches are redirected to another site]]

Firefox won't start, profile manager won't start, but firefox.exe shows in processes list (task manager)

Firefox will not start, even though it is listed in my processes in task manager. Can't get profile manager to start either.
I have tried the following to no avail:
- try to start FF in Safe Mode, doesn't load
- started Windows Vista in Safe Mode, FF still does not load
- turned off Kaspersky AV, FF still does not load
- uninstalled FF, cleaned out user/####/AppData/Mozilla/Firefox folder, as well as ProgramFiles/Mozilla/Firefox folder, and cleaned our Registry manually from all references to Firefox. Downloaded FF 3.6.3, installed. still does not load
- whatever i seem to do, does not fix the problem. When I try to start Firefox, no window appears. I can see the process starting in my task manager. I can "end process" and try to start the program again by double-clicking program icon. Process starts in task manager, but no app window appears.
I am frustrated and have just wasted 2+hours of my night trying to get this to work. Downloaded Google Chrome, unless there is a fix for FF (which I would prefer to use), i will have to switch to Chrome.
I can't pinpoint when this trouble started, but may have been after a recent Windows Update. I already did a System Restore to a restore point about 5 days ago (the oldest one available to me, and I believe that was before the FF trouble started). This has not helped either.
I have run a full virus scan with Kaspersky and a Full scan with Windows Defender. Nothing came up.
Anyone else been able to find a solution to this?
== This happened ==
Every time Firefox opened
== Less than a week ago ==
== User Agent ==
Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.86 Safari/533.4

I found a way to make it work somehow but not really fixing the error... one day when I got really pissed off because FF just won't open, I clicked the icon and killed the enter button, then multiple FF windows appeared. I tried to open it with just a single hit of the enter or double clicking but it won't work anymore, but repeatedly clicking the enter button (mine works with just 3 hits, sometimes 6) seem to open it. And until now, I have no technical explanation for this.

Complete list of settings in Profile Manager

Hi!
I'm looking for a complete list of the settings available in the Profile Manager for iOS devices.
Restrictions
Push Apps
Push books and PDF's
Passcode policy
etc. etc.
So, is there a list out there with all the settings and features of Profile Manager with iOS?
Thanks!

Apple has a good developer page on most of the payloads:
https://developer.apple.com/library/ios/featuredarticles/iphoneconfigurationprof ileref/introduction/introduction.html
Sadly, Apple does not provide many examples nor a clear explanation of the management levels. But this is a great reference and now it includes OS X payloads, despite the URL name. Sadly, not all profiles are listed yet but Apple seems to be revising the document.
Reid
Apple Consultants Network
Author "Yosemite Server – Foundation Services" :: Exclusively available in Apple's iBooks Store
Author "Mavericks Server – Foundation Services" :: Exclusively available in Apple's iBooks Store
Author "Mavericks Server – Control and Collaboration" :: Exclusively available in Apple's iBooks Store

Can you please help me resolve this issue on Batch Management Completion. "Cannot Add row without complete selection of batch number." Message 29-77

'Another user or another operation modified data, to continue open the window again ' Inventory Transaction Log' (OITL)(ODBC-2039) (Message 131-183). If I click again on add I get the following message : 'Cannot add row without complete selection of Batch / Serial Nos. [Message-29-77]
Path:
Inventory -> Item Management -> Batches -> Batch Management - Complete form.
Before this I use Return Components on Receipts from Production as I am mistakenly issued it more than what was needed.
Were anyone be able to explain why it worked for certain items and not for others? I have successfully done “return components with some batches"

Hi Nagarajan,
I'm one of colleague of caterine, we only accessing the batch management-complete window, no other window is open, still the error occurs; see image below
Before that error occurs(in image); first error we encounter was batch number is already exist, then upon click add another person modified the window; but we tried to restore the db then try to add the batch number in different transaction like SI 1658(Goods Issue), and it is okay.. but on the SI 50003 which is Receipt from production we can't add it.
Hope you can help us.
Regards,
Lean

Firefox does not open, profile manager does not open, not listed in task manager

firefox worked fine about two days back. Our norton expired so I downloaded Kaspersky Anti-Virus 12.0.0.374. I don't know if that has any connection to firefox not working.
I click on the icon, nothing happens. The task is not mentioned in the task manager.
I try to run it in safe mode, nothing happens. I try to open the profile manager, nothing happens! What can I do to fix this?

Thank you fmdeveloper! I did some more research after I posted the question and it turns out Kaspersky was not the issue. I had done a system restore two days back and it says online that after a system restore, you have to uninstall and reinstall firefox. So I uninstalled it (kept my settings and data) and reinstalled it and voila, it works!
I did switch from Kaspersky to Avira too for Anti-vifus, don't know if that's a sane decision or not, but it's good to know that Kaspersky was not the culprit!

Neither Firefox nor the profile manager will start. In my task manager, the process is using 50% of my cpu but does nothing. I love browsing with firefox, how can I fix this?

I've tried restarting my computer, the I tried uninstalling and reinstalling, then uninstalling, erasing all firefox files and folders, then restarting and reinstalling. I've also tried opening the profile manager to change my profile. After reinstalling a few times and trying to open the profile manager before launching firef0x, I got the firefox has crashed window and the process in the task manager is still using 50% of my cpu. The most recent expunge then re-download pops up a "file is corrupt" error and won't even install the program.

Kill those processes that you are seeing, including any plugincontainer.exe, only once firefox has stopped running should you try to update it.
Totally unexpected instances of firefox running may sometimes be the result of malware activity.

How can users add their devices to Profile Manager without a user account?

We would like to allow company devices to be tracked, inventoried and managed in Profile Manager without creating a user account for each person so they can log into /MyDevices to download the mobile profiles. We aren't staffed to have someone manage user accounts as quickly as iPads are being purchased.
If we can't do some kind of guest access, can one user, maybe called Enroll, have literally one thousand devices attached to them?
The other alternative is to have the profiles on a small webpage with a password to download.

the easiest way is to use apple configurator
using apple configurator
enable enrollment in PM
un tick restrict to users in device library
apple configurator should pick up your server certs
and the PM auto enrollment profile
setup a enrolment wifi lan
configure your IOS devices with apple configurator adding the
server cert and your enrolment wifi lan
you'll still have to handle each device tapping yes to install each profile
but you should end up with the ipads in PM with no users
from there you can set which wifi you wish them to connect to
eg staff wifi, email setings, VPN etc.
open the correct ports on firewalls to allow PM to work internaly and externaily
and pr any port forwading as nessessary and you'll be able to wipe lock change settings outside on your network, providing the device is online.

Profile Manager Active Tasks

Hey guys,
Whenever we log into our Profile Manager, there's also a ton of active tasks running. I just checked now, and there are 40 tasks currently active. These are tasks we haven't initiated on our end, and for the majority, it's removing settings from our laptops. Sometimes, we'll just watch the active tasks list for a few minutes and within that period more and more tasks will get added that neither myself nor the other Mac tech has initiated.
Have you all heard anything like this before, and if there's a possible solution/reason?
Thanks!
Aaron Campbell
Tech II | Putnam City Schools

I found since profile manager is pulling over ad users I can search individual users and they are set by default to push settings does anyone know how to change this?

Profile Manager Active Tasks Status stays on Pending

Hi, I have a Mavericks Server with Profile Manager, I have two device groups for iPads and iPhones. For some reason I can no longer apply any updates etc to devices, it hangs on pending under Active Tasks. Nothing has changed, I have the following ports open: TCP:2195,2196,1640,5223. Everything was working ok, I am struggling to work out why this has changed. I have even restarted the Server.
Any pointers or ideas would be well appreciated.

Hi dankgus, I was reading this article which explains how the mechanics of this work.
http://www.justinrummel.com/how-apns-works-with-mdms-that-manage-osx-and-ios/
I then thought about your firewall comment, when I configured my firewall to work with my Mac MDM I used this Apple KBA ------> http://support.apple.com/kb/ht5302 however I did not open TCP:443 for security reasons. I actually thought this was just for device enrollment and management however it looks like the iOS device might actually require it to function properly. I opened the port and ran a device update which worked. I think it worked ok initially because internally users can get to the MDM over TCP:443 through our split DNS and as soon as they took their iOS devices out of the reach of our corp WIFI it stopped working. I will observe the results and report back and of course I welcome comments.

Profile Manager Tasks Queue up without completing

Similar Messages

Maybe you are looking for