Profile manager w/o Apple Push Certification

Hello all.
Is it possible to use Profile manager without using Apple Push Certification?
The Mac Pro running Lion Server has no Internet access but i want to use it to manage network accounts for the lab (all iMac and Mac Mini systems).
Can this be done or do I need to use Workgroup Manager?
Cheers

No. You can still create and distribute profiles but not through a push solution. Look at MCX in WGM or even Apple Configurator and manually distribute.
If this is a lab with no internet, how much change management do you need?

Similar Messages

How do I push VPP managed apps to devices using Profile Manager silently?

Here is my setup.
100 to 150 Ipads in carts used by their departments in classrooms.
OSX Mavericks Server running Profile manager
I use Apple Configurator to push a wifi payload to the ipads as well as an auto enrollment profile to connect to Profile Manager.
That part works like a dream.
Now that I have that working. I am having a problem pushing apps to the Ipads. I downloaded some free apps, GDrive for example, using the managed distribution.
But I cannot figure out how to push the apps to the iPads without having the iPads asking for an Apple ID and password.
I just want to push VPP apps to the iPads silently.
Thanks for any help.

Sorry. Added this to the wrong section.

HT201334 Apple configurator vs Profile Manager

I downloaded apple configurator and have it working. Then I realized profile manager in OSX Server does the same thing. What is the difference, can I leave it as is? Any benefit of just using profile manager?

Apple configurator has its uses.
Apple configurator can be used as a "manual" standalone solution to manage you iDevices and AppleTVs.
Apple configurator can be used in blended approach with Profile Manager.
With Profile Manager you can manage iDevices , Macs , and I believe AppleTv over the AIR.
- Apple Configure Stand Alone.
When using Apple Configurator by itself you can , lock down an iPad in a way you see fit.
1. You can make an iDevice in "Supervise Mode" increasing restricting of your iDevice , Profile Manager cannot do this at the moment , this feature will be available in Mavericks.
2. Any future configuration changes to your iDevices , must be physically plugged in everytime for those changes.
3. You can distribute free and paid apps.
4. You can update your IOS updates all at once. When IOS 7 comes out this fall you probably dont want to touch every iDevice and update 1 at a time. You can use Apple Configurator to download the latest IOS , and any IDevice that you plugin will receive the update, this means downloading th IOS update one time on the mac, and pushing it out to whoever needs it. Profile Manager can't do this.
5. You can name several iDevices sequently. If you have a cart of 30 it will be easy to rename your iDevices. Profile Manager can't do this.
6. Apple configurator allows you to "backup and restore" its not a true complete image but its close. Profile Manager does not do backups or restores.
7. Apple Configurator can be used to erase an iDevice.
8. I'm probably missing some more features.
- Profile Manager Stand Alone
1. You can manage Macs not just iDevices.
2. You must enroll the device before you can manage it, this can be done by pushing out an email , via a website etc.
3. Everything happens over the Air.
4. When enrolling , users can use their Open Directory or Active Directory ( if your Apple server is bound to AD server ). You can also create a generic account for enrolling purposes.
5. You can wipe devices over the air.
6. You can make pass code resets for iDevices.
7. You can manage users in groups , even nested groups. I manage staff and student iDevices. Our wireless system is seperated for staff and students each wireless has its own SSID. I created 2 upper level Profile Manager Groups , one called WiFi Student and one called WiFi Staff, all my student iDevice groups are nested under WiFi Student group and all my staff idevice groups are nested. This makes managing my wifi a breeze. I also include my mifi wireless info , in case i need a backup emergency wireless.
8. Im sure theres other features.
- Apple Configurator And Profile Manager Blended
1. Push out initial wifi settings. I setup a simple wireless router to connect my devices ( there are types when I setup over 50 ipads , and our network runs out of IPs)
2. You can use Apple Configurator to push out Profile Managers "enrollment profile" to many iDevices. You dont want to enroll a full iDevice cart one at a time via a web browser.
Maverick and IOS 7
In the fall everything will change , it is amazing what we will be able to do. Over the Air Supervise Mode , Install Apps over the air with no user interaction, App codes become licenses , which are revokeable and reusable. Out of the box enrollment ... There may be no need for Apple Configurator come this fall. So many things are changing I recommend watching the new WWDC2013 Videos, specially the one on device management.
Back to original topic.
I value both products , they have their specilties and when you blended , you can get things done efficiently.

How to install managed apps to iPads silently OTA using Profile Manager

Here is my setup.
100 to 150 Ipads in carts used by their departments in classrooms.
OSX Mavericks Server running Profile manager
I use Apple Configurator to push a wifi payload to the ipads as well as an auto enrollment profile to connect to Profile Manager.
That part works like a dream.
Now that I have that working. I am having a problem pushing apps to the Ipads. I downloaded some free apps, GDrive for example, using the managed distribution.
But I cannot figure out how to push the apps to the iPads without having the iPads asking for an Apple ID and password.
I just want to push VPP apps to the iPads silently.
Thanks for any help.

Then you need include the apps when you clone with Configurator.
Managed Distribution of Apps is flexible because it works for the following scenarios:
Device
     • Device is owned by the company and distributed to the user
     • Device is BYOD and enrolled in corporate MDM
     • Device is BYOD and unmanaged
User
     • Device is "assigned' or used by a single individual
     • The individual has an Apple ID (or is capable of getting one)
     • The user is entered into your Profile Manager and has an email address (or device is enrolled and you do a push notify to ask for enrollment - remember, Managed Distro works without MDM)
     • User accepts the invitation to your VPP program with an Apple ID of choice - enterprise does not care what it is
Apps
     • Apps are assigned to the user account in Profile Manager
     • Apps become visible in the Apple ID's App Store account as available for install
     • If the device is set to autoinstall "purchased" apps, the apps for iPad will just appear
     • Apps can be "revoked" by the enterprise, returning the license to the available pool
     • Apps do not dissapear from devices
Managed Distro does not really fit education as depending on age your students may not be able to have an Apple ID, may not have email, and the devices may not be deployed in a one-to-one.
You are back to master image cloning through Configurator.
R-
Apple Consultants Network
Apple Professional Services
Author "Mavericks Server – Foundation Services" :: Exclusively available in Apple's iBooks Store

Profile Manager - webauthd LDAP authentication

I'm trying to make Lion Server talk to an simple OpenDS directory server.
After jumping through a series of hoops to get everything (iChat, Directory Utility) working, I now had to look into Profile Manager.
Now, Apple has put up a support article at http://support.apple.com/kb/HT4837 (Lion Server: Using the Profile Manager or Wiki service with Active Directory or third-party LDAP services) showing how you can change the authentication mechanism. Unfortunately
- these are both SASL mechanisms (plaintext or digest-md5) which are disactivated on my OpenDS server
- after just giving up and activating these mechanisms I bang into the fact that I use SHA1 as password storage scheme
[25/Oct/2011:21:43:18 +0200] BIND RES conn=4 op=1 msgID=2 result=49 authFailureID=1245392 authFailureReason="SASL DIGEST-MD5 authentication is not possible for user uid=greg,ou=People,dc=example,dc=com because none of the passwords in the user entry are stored in a reversible form" etime=4
There is no way I can weasel my way into a less secure password scheme due to legal constraints.
Does anyone know how to make webauthd talk to LDAP in plain plaintext?
Overall, integrating Lion Server in a very classic and strictly regulated data center proves to be an exercise in frustration.

Hi
If I understand you correctly then this is normal behaviour. MCX follows a set order of precedence. Users, Computers, Groups. A particular setting defined at Computer Group Level will override the same setting applied at Group Level and so on. Settings can accumulate. The Users Admin Manual provides all the information you could want about how managed preferences work:
http://images.apple.com/server/macosx/docs/UserManagementv10.5.mnl.pdf
In an AD-OD Integration environment you can't apply MCX to Users from AD directly. You can only do so if you create a Group in the LDAP node and nest AD users or better still AD groups within that Group. Generally I would create suitable Computer Groups and apply a managed setting for the Login Window and possibly Energy Saver. Every other MCX I would apply at Group level.
Perhaps you're making it overly complex when you don't have to?
Tony

Profile manager wildcard options

Is it possible to use wildcards for such things as usernames in the profile manager for VPN? I'd like to preconfigure VPN for all Macbooks without having to setup a profile for each user. The username field is a required field so leaving it blank isn't an option.

I haven't tried this for a VPN profile but have done variables with an Exchange email profile. The user logs into the My Devices web portal with credentials that are then used for the installation of the profile substituting their real information for the variable. See these articles:
http://krypted.com/iphone/using-payload-variables-in-profile-manager/
http://help.apple.com/profilemanager/mac/10.7/#apd073333AA-30C6-4FD2-B2E0-E0C956 58A2C4

Unable to push user profiles to AD groups with Profile Manager since upgrade to Server v3

Since upgrading our OS X Mac server from 10.8.5 to 10.9.1, and OS X Server app to v3 (now 3.0.2) I have been unable to push or modify user profiles to AD groups (or AD users) using Profile Manager. This was working fine on OS X 10.8.5. Pushing device profiles is still working OK after the upgrade.
From what I can see from the logs on the client side and server side, it seems related to a problem with the mdm authtoken.
In the client console I can see this entry:
27/01/14 14:30:15.844 mdmclient[38557]: *** ERROR *** [Agent:636102071] Unable to proceed with connection to: https://ourserver.ourdomain/devicemanagement/api/device/mdm_connect (com.apple.mdmconfig.mdm) because don't have valid MDM AuthToken
On the server, in the php.log I can see the corresponding attempt to authenticate:
1::Jan 27 14:29:50.930 [158] <192.168.28.171> {require_once (mdm_checkin.php:11)} vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv - PUT mdm_checkin
0::Jan 27 14:29:50.931 [158] <192.168.28.171> checkin: 'UserAuthenticate'
1::Jan 27 14:29:50.936 [158] <192.168.28.171> {Target_for_incoming_request (target.php:209)} Found target NETWORK LS: <User[156]@ourclientmachine>
0::Jan 27 14:29:50.937 [158] <192.168.28.171> {LabSession_validate_auth_token (mdm_checkin.php:22)} Failed auth for target NETWORK LS: <User[156]@Device[1697]>, incoming_request={
0::Jan 27 14:29:50.937 [158] <192.168.28.171>   'MessageType'=>'UserAuthenticate',
0::Jan 27 14:29:50.937 [158] <192.168.28.171>   'UDID'=>'17aff5c5a40f51acbbd78023d0028c80',
0::Jan 27 14:29:50.937 [158] <192.168.28.171>   'UserID'=>'A5EA25B7-7CCD-4EF4-B240-F23DED275EEC'
0::Jan 27 14:29:50.937 [158] <192.168.28.171> }
1::Jan 27 14:29:50.965 [158] <192.168.28.171> {SendFinalOutput (mdm_checkin.php:145)} Sent Final Output (407 bytes)
1::Jan 27 14:29:50.965 [158] <192.168.28.171> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ - /devicemanagement/mdm/mdm_checkin
0::Jan 27 14:29:50.965 [158] <192.168.28.171> {SendFinalOutput (mdm_checkin.php:145)} Completed in 34ms | 200 OK [https://ourserver.ourdomain/devicemanagement/api/device/mdm_checkin]
So I can see there is a failure to authenticate, but don't really know how to troubleshoot this further. Or maybe this is just a bug in the new server app?
I have tried to remove and re-enroll clients in Profile Manager but no joy there.
In the client's Keychain I can see an MDM user AuthToken linked to the correct user account.
Thanks in advance for any help or suggestions

I just wanted to update my post, as this issue for me is resolved.
I uninstalled and reinstalled the Server.app on our Mac server, since then I've been able to push profiles to AD Users and Groups. I guess that in my case the Server app got into a bit of a mess when it was upgraded to v3.
Now the next headache I have is that my AD Groups which are displayed in Profile Manager are not syncing any recent changes. I think I'm probably seeing the same issue as described in this post
https://discussions.apple.com/message/25420919#25420919

Profile Manager, Push, Kerberos and other oddities

Hey all,
First time setting up a Mac Server on our network, thought we'd give Lion a try since we're seeing more and more Macs make their way into our ranks. I'm having issues with the following areas, hopefully someone could shed some light.
Push
I can't for the life of me get push to work behind our Firewall. I opened up TCP Port 5223 as outlined in the Apple Docs but that doesn't get me anywhere. Do I need to NAT that port to the lion server? I thought that push sent notifications down to individual machines and then they went and grabbed the new config from the server? How does a firewall with NAT know what machine to send the notification to? Any help would be appreciated.
Also, what are you supposed to manage users with, the Work Group Manager or the Profile Manager. It seems like apple is moving away from the WGM style of management, although you can't do everything in PM, like setting up home folders etc. Very confusing to a novice.
Email Addresses in Profile Manager configurations and Webmail.
I might be missing something really simple here, but no matter what I do the Profile Manager spits out a default payload for email with our FQDN as the email address for the user ([email protected]). I have set the local alias and checked the checkbox to allow our example.com domain to work. Manually setting the email address to [email protected] works just find. I'm a bit bothered that everytime I push a configuration out to a device I'll have to go back in and manually change the email address. Has anyone figured out how to change that?
In webmail it always lists the email address as [email protected] instead of [email protected]. You can go in and edit the identity and all is right with the world, but that's sort of a pain? Seems like common sense that you could set that as the default.
Kerberos
I was excited to get a Single Sign On solution going for our users since it would come in handy, however, straight out of the box it just doesn't work.I'm also not sure what to look for in the logs to make sure that things are working smoothly. I'm joinging the client machines to the server by going into users and clicking join. Selecting the server from the drop down and hitting submit. Do I have to set up a search order and all that jazz or is that set up automatically then. I can see that I'm getting tickets with the Ticket Viewer but I'm still getting prompted for passwords in mail, ichat, AFP etc. Close to giving up on that front.
Any help or general words of encouragement appreciated.

Push
You've opened the secure iChat port to have push notifications working? Take a look here for the right ports:
http://help.apple.com/advancedserveradmin/mac/10.7/#apdCA9A73CE-5F0C-4BDC-93E8-2 952C362FA3E.
On that page are all port numbers you need to forward to your server.
Email
The addresses being displayed as [email protected] is a bug in Lion Server in my opinion, you can file a bug report at apple.com/feedback.
Kerberos
Is as poorly documented as invisible in OS X Lion Server. Single Sign-On is a great tool for making services more user-friendly, it should be top of mind at Apple. You can file an enhancement request at apple.com/feedback.
Regards,
Mark

Push one new app and Profile Manager resends them all; turn this off?

I manage the ipads for a medium sized school district. We're using Apple Configurator on Maverics to manage about 700 ipads most of which have been updated to iOS7 and supervised manually through the mini that functions as our MDM and server.
So average day: a teacher requests a new app to be pushed out to the 30 ipads that are in one of the shared ipad carts. I have all the ipads in a device group in profile manager, so I go out to itunes, download the app, upload it to profile manager and add it to the device group, hit save, and I can see that a new active task has begun pushing that app out to all the devices in the cart.
The active task used to just say "Push Apps to [device group] 30 of 30 in progress: [#] succeded" 30 copies of an app, one for each of 30 devices. Totally normal.
Now since the update to iOS7/Maverics when I send one app to one cart configurator is erasing EVERY app on that cart and resending them ALL. So now the active task in the same situation looks like "Push apps to [device group] __ of 538; [#] succeded." Where the 538 is the total number of apps on all 30 ipads.
As you can imagine this is a bit of a mess. Not only does it bring the mac server to its knees, but it makes the ipads in question useless until the apps have all redownloaded-- which can take hours, if not days, depending on other network traffic. At the very least with iOS7 one doesn't have to hit "confrim" on each app install, but still, small consolation there.
Is there a way to turn this weird behavior off? Are other people experiencing this? Is it just a horrible bug that someone is planning to fix very soon?
Any insight is much apreciated!

Here are the places to report bugs:
Get an account at
http://developer.apple.com/ then submit a bug report to http://bugreporter.apple.com/
Developers:
"Submitting Bugs and Feedback
Your feedback goes a long way towards making our products even better. With Apple Bug Reporter, you can submit bug reports or request enhancements to APIs and developer tools."
https://developer.apple.com/bug-reporting/
Enterprise support:
Call enterprise support (866) 752-7753 to create a case ID number

Why do I keep getting "Error getting push certificate" when trying to enable Profile Manager

I keep getting this stupid error message! The Stupid Workgroup manager doesn't work! Won't allow me to do anything! What is the point in that! Sorry, just having a rant as I have just purchased this server which I can't do anything with. Can't get Profile Manager working because I keep getting error getting push certificate and cannot associate any user with a group. I can delete groups and users from AD but just wont allow me to create anything. The padlock is open so am authenticated. WHAT IS GOING ON WITH APPLE!

And do you know what is really sad, 3 hours later and I am still waiting for a confirmation email from Apple. No wonder the UK use mostly Windows!

Can os x server Profile Manager updates iOS os and appl installation?

I've currently use Apple configurator to push profiles, update OS and app deployment to our College ipads. Have been told to use os x server to deploy instead. After upgraded the macbook air to mountain lion and install os x server, i'm kinda wondering does the profile manager in os x server is only for pushing out profiles and assigning users to the ipads etc? Do i still need to use apple configurator to do all the updates and appl installed first then use profile manager to push profile?
We've got quite alot of ipads need setting up and we normal use a ipad case where one usb cable connect to the laptop and charging case to deploy our apps.

How to configure ibm traveler as a profile for iOS devices:
http://www.manageengine.com/products/desktop-central/configuring-ibm-traveler-fo r-ios-devices.html

Pushing Paid apps via 10.8 Profile Manager (working solution!)

Hello,
It seems the profile manager solution leaves a lot to be desired. I am quite disappointed there are several limitations that make the software a real deal breaker for it's price. The number one issue other than black/white listing non productive apps is of course, the PAID app Deployment. One would think they would totally OWN this process, but as they have done so many times before, left it up to a 3rd party solution. THANKS @pPl3! only no thanks.
Well I have created a solution that I believe works and would like to share it with everyone.
The model is simple, use Apple configurator to image and deploy the devices, and then manage them via Profile manager with 1 shared apple ID
1. The Master iPad we used was configured with 1 apple id:[email protected]. We set up all the Free applications we liked with our settings inputted. We then deleted any unique information such as usernames, wifi networks, etc. so it's a clean image with some custom configuration. We then connected to Apple configurator and created a back up.
2. We loaded any Free apps we wanted preinstalled into the Apple Configurator software and then when prompted used the same apple id as the ipad:[email protected]. These free apps were downloaded through itunes on the server using the same apple id. We also added one profile to be loaded, the trust profile and also have a web clip taking us to the "Enroll Device" page on
3. We then connected a brand new ipad, choose to wipe and restore from back up along with updating to the newest IOS. After that configured Wifi and Enrolled the device to the Profile manager server. Then added the device to the proper groups to get policy information downloaded.
4. Now the paid app Test, we purchased one application on the OSX Server's itunes. In order to be compliant with the test, we only purchased one licence, therefore we could only push it out to one device. We uploaded the App into the profile manager and deployed OTA to one of the iPads.
5. We accepted the install and then the App loaded and was able to launch. We removed it and the pushed it to another device freshly configured by profile manager, it worked as well.
6. For future purchases we use the VPP, buy as many apps as we want but only redeem ONE of the codes on the osx server, using the same apple ID as before. We then upload it to profile manager and deploy it to as many devices as we are licensed to.
The only problems I can imagine:
1. If apple doesn't like it, I am under the opinion we are not breaking any licensing compliance. We still have the apps paid for and legally have the licensing for auditing purposes.
2. IF after 10 devices the apple id starts giving us issues. I read there is a limit but it appears the options to manage your devices has been removed from itunes which makes me think, No this will never happen.

Wonder what went wrong...
Also do you find another solution?
Right I am looking at three companies that run on the OSX server.
Absolute Manage
nuVizz enterprise MDM
FileWave

Profile management push setting always sending

Hello everyone.
I'm newbie for mac administrator. I was configure my mac mini server and looks like works. But i've a problem with profile management. It's always sending.
When the task is complete, the device is not included in the devices list. In the user portal for enroolment device, it's not shown wipe and lock options. Just the server can be shown in device list in profile manager.
I'm use mac mini server with OSX mountain lion 10.8.2, and my clients running 10.8.3 and 10.7.2.
Anyone heeelpp mee~~

Push
You've opened the secure iChat port to have push notifications working? Take a look here for the right ports:
http://help.apple.com/advancedserveradmin/mac/10.7/#apdCA9A73CE-5F0C-4BDC-93E8-2 952C362FA3E.
On that page are all port numbers you need to forward to your server.
Email
The addresses being displayed as [email protected] is a bug in Lion Server in my opinion, you can file a bug report at apple.com/feedback.
Kerberos
Is as poorly documented as invisible in OS X Lion Server. Single Sign-On is a great tool for making services more user-friendly, it should be top of mind at Apple. You can file an enhancement request at apple.com/feedback.
Regards,
Mark

Push lock function Profile Manager not working

Hello,
I came to a problem setting up a test server 10.8.2 (before future deploy) and in this case i follow the example described at krypted (thanks Charles)
http://krypted.com/iphone/configuring-using-profile-manager-2-in-os-x-mountain-l ion-server/ (also checked OS X Lion Server Essentials information)
Setup Mini server and Macbook as client (in our AD/OD environment) the correct ports are open - check changeip -checkhostname is OK
- use a self signed certificate - push changes works - until i will lock the mac, this failed. (in profile manager and my devices)
When I look in the log file I see this message:
Nov 14 11:30:06 srv-mac2.server.local ruby[12665] <Info>: Pruning certificate chain to 18446744073709551615
Nov 14 11:30:06 srv-mac2.server..local ruby[12665] <Debug>: Trying to add a bogus certificate
Nov 14 11:30:06 srv-mac2.server..local ruby[12665] <Debug>: An error occured while inserting an untrusted certificate into the chain
Nov 14 11:30:06 srv-mac2.server..local ProfileManager[12665] <Info>: Pushed to <Device:"mlp-auto-001"> with token Nl6Ed4FOOR4fmFKJXiEMfGgvDQnyeCBHK09ctY5qQMI=, {"mdm":"","time":"1352889006.442850"}
Nov 14 11:30:09 srv-mac2.server..local ProfileManager[12401] <Info>: Processing MagicController#do_magic (for 10.136.73.100 at 2012-11-14 11:30:09) [POST]
Nov 14 11:30:09 srv-mac2.server..local ProfileManager[12401] <Info>: Completed in 243ms (View: 0, DB: 37) | 200 OK [https://srv-mac2.server.local/magic/do_magic]
Nov 14 11:31:08 srv-mac2.server..local ProfileManager[12402] <Info>: Processing MagicController#do_magic (for 10.136.73.100 at 2012-11-14 11:31:08) [POST]
Nov 14 11:31:08 srv-mac2.server..local ruby[12402] <Info>: Pruning certificate chain to 18446744073709551615
Nov 14 11:31:08 srv-mac2.server..local ruby[12402] <Debug>: Trying to add a bogus certificate
Nov 14 11:31:08 srv-mac2.server..local ruby[12402] <Debug>: An error occured while inserting an untrusted certificate into the chain
Nov 14 11:31:08 srv-mac2.server..local ProfileManager[12402] <Info>: Pushed to <Device:"mlp-auto-001"> with token Nl6Ed4FOOR4fmFKJXiEMfGgvDQnyeCBHK09ctY5qQMI=, {"time":"1352889068.171044","mdm":""}
I guess (but I'm not sure) the problem with lock had something do with this:
Nov 14 11:30:06 srv-mac2.server.local ruby[12665] <Info>: Pruning certificate chain to 18446744073709551615
Nov 14 11:30:06 srv-mac2.server..local ruby[12665] <Debug>: Trying to add a bogus certificate
Nov 14 11:30:06 srv-mac2.server..local ruby[12665] <Debug>: An error occured while inserting an untrusted certificate into the chain
So works the "lock" only with proper certificates? or is there something else not setup properly?
(the lock function is not imported for me but gives this error mayby more problems (now or in the future))
thanks
Peter

the device logs gets 500 error code, you van see this in iphone configuration utility or in apple configurator.
as follows in console:
"US Desc: A transaction with the server at “https://server.com/devicemanagement/api/device/connect” has failed with the status “500”.
Domain : MCHTTPTransactionErrorDomain
Code : 23001
Type : MCFatalError

Can I use Apple Volume Purchasing Codes with Apple Profile Manager?

I am using Apple Profile Manager (on OS X 10.8) to manage some iOS devices. I would like to be able to push apps to users using Profile Manager, however, I cannot seem to find a way to import an Apple Volume Purchasing Program redemption code spreadsheet. Basically, I am looking for a way to deploy apps to the devices without the users having to purchase them using their own Apple ID's. I've done some research, and I have determined that this funcationality seems to be included in Apple Configurator. I am wondering if I can do the same thing in Profile Manager. I would rather not have to change my MDM solution, if at all possible. Thanks in advance, I appreciate it.

Hey JTShelatz,
just push you Apps with Profileservice. But just the amount of purchased licences .
Thats how I understood Apples VPP deployment strategy.

Profile manager w/o Apple Push Certification

Similar Messages

Maybe you are looking for