Remove previous Profile Manager settings

Hi All!
I have a Lion OS X Server running at home for my couple of Macs. Despite many issues i am still trying to get it going.
One of the issues I have right now is with Profile Manager. When I initially started using it I thought it was a good idea to setup a printer for all users. I added the printer to a profile and it showed up on all the systems eventually.
Trouble is somehow it installed the printer in the system but no drivers so all I get is junk on the printer if somebody tries to print. To much hassle to solve so I removed the printer from the Profile Manager settings and manually installed the printer on each Mac.
Now here comes the trouble: Even though the printer is removed from the profiles in Profile Manager it keeps on reappearing on the Macs!!!!
I have tried everything I can think of but I no change. I think deleting a setting on the Profile Manager does not remove this setting from the client Macs. I have the supsicion the client Macs store somewhere the intial profile and reload it.
Anybody any ideas how to solve? Or does anybody know where the client Macs store the Profile Manager configuration profiles?

Mac's Profiles are stored in System Preferences > Profiles AFAIK.
I've not played too much with Profile Manager on Macs.. but have a look there?

Similar Messages

Profile Manager Settings for Group does not display for individual members of the group

Hi there,
Can anyone confirm whether I am going mad or not, I and new to Mac Server and have set up Profile Manager on OSX Mavericks from scratch and have been using it successfully to deploy enterprise iPads. I have just gone to edit the profile as we wish to increase the timeout time to locking and have been greeted with something strange.
We have all users in a Group which has settings applied for timeout, pass code change etc. however if I go to an individual account who is part of that group then it isn't showing any settings for that user and it would appear I need to set them again. Similarly if I go to a device belonging to a member of the group then its not showing any settings for that device.
I would have assumed that if you set restrictions for a group then when you view the restrictions for a member of the group then it would be the same however it appears that you can have a separate payload for a group. Is this the case?
I am grateful for any advice people can give me.
Thanks again.
Rob

I would have assumed that if you set restrictions for a group then when you view the restrictions for a member of the group then it would be the same
That was never the way it worked in older versions of 10.3, 10.4, 10.5, 10.6 Server.
The restrictions for a Group were shown for a Group. The restrictions for a User (alone) were shown for that User.
And the advantage is that if you see something wrong for a single user, you might be tempted to fix it there, in that user, and when you had changed six of them, you might remember that you meant that to be a group setting after all.
And the software to implement them separately is simpler, but YOU have to test it to find out the end results of compositing Group and User settings.

OS X Server 4.0.3 Profile Manager Settings for Mobile Users problems

OS X Yosemite 10.10.2 with Server 4.0.3
We are using Profile Manager to control Settings for Mobile Users, and give homeSync to the users. Our problem is that the exclude / Skip items (Items matching any of the following will not sync" This setting is not working an example. I have put this folder to Skip Items ~/Downloads but the home Sync still Syncing items in the Downloads folder.
I have this problem on all the 3 users/machines on that server. Every client is using os x 10.10.1 og 10.10.2 I have check that the profile from the server is on the client.
Has any a solution to that?
Regards
Brian

I have no solution but have experienced failing sync settings (quite often) in both 10.6 Server and 10.9 + Server 3 (upgraded from 10.6 Server) in the same way as you described, it syncs too much. We have given up on synched home folders and will cut them and use other backup methods since we’re not so dependant on switching between different devices. Our users usually have one computer, one iPhone, one iPad and stay with those until it’s time to exchange them.

Profile manager settings device management disabled error when enabling

Hello,
I have installed OS-X Lion on a mac mini. Everything is working fine, including open ldap as a master where other imac can connect and use this ldap server for login.
However in profile management i try in the settings section to enable management of devices. When the wizard starts it asks me to enter the password for diradmin as this server needs a master ldap (is already there).
The wizard then mentions that this computer already has a master ldap server and i cannot continue installing device management in profile manager.
Probably because of this I cannot see devices in the profile manager portal.
Does anyone have a solution to solve this issue.
Thanks
Paul Bot

I would try demoting your Open Directory server from Master to Standalone in the Server Admin app - there's an assistant in Server Admin > Open Directory > Settings > General > click the change button.
Once it's demoted to a standalone, restart.
From there, don't create an OD Master again - go to Profile Manager in Server.app and run through the wizard again. In the process, it will create an OD Master for you.
Hope that helps,
Chris

Profile manager won't clear previous settings

While messing around with profile manager it do a couple basic things. Start FaceTime at login and map some network drives. This worked fine but when i went back in later to turn those off they continue to go through. When I log on to a different computer the settings are correct, however. Is there someone I can do a clean refresh of the machine to wipe it of all previous profile manager settings. I've even tried deleting and re adding the machine to Profile manager but this still doesn't work.

You'll need to cleanup DNS on the domain controller not client systems.
Give me some information on how this server is integrated into your environment.
Is it bound to Active Directory? If so, what happens when you launch terminal? Does the hostname match the name under Sharing in sys prefs on your server? If not, you've probably got some stale DNS screwing things up.
To see if this is the case, log in to your primary DC (or whichever server hosts DNS records in your environment) and check your forward and reverse lookup zones. In my case, I saw more records than we have machines! Problem with Macs is those records stick around even after you remove a machine. Macs aren't always automagical unfortunately.
Another way to see if you have DNS problems is simply take a freshly imaged server (BEFORE it's bound to AD) and fire up profile manager. If it launches easy breezy (aka not getting DNS from the potentially messy server) then it's safe to assume you'll need to scavenge out those records. But that another story for a Win 2008 R2 board.

Profile manager - removing computer settings

I've searched for an answer to this, but haven't found anything.
What happens when you remove profile manager settings for a computer? For example, I created settings for the dock that were pushed out. After that, I removed the settings in PM, but the settings still are in effect on the computer.

That is the problem I'm having. I remove the settings in PM, but they still remain in effect on the computer.

Why don't network volume mounts (login items) configured in Profile Manager show up

Using Lion server and Lion clients. Bound both the server and client to Active Directory and successfully got Profile Manager up and running. All I really need from Profile Manager is the ability to mount network volumes so when the user logs in it mounts their home directory. Please note we do not specify any home directory paths in AD. I can login with my AD accounts on the Lion client and get other Profile Manager settings to work, however when I try and mount a network volume via login items nothing happens. I am using SMB for this. If I try to manually connect to the same path via Go -> Connect To Server it works fine. For a simple test I even created a folder on one of my Windows servers D drive and shared it and within profile manager configured it as SMB://server/share and still nothing. I tried setting it in the Dock section as well which I read in another post somewhere but all I get is a question mark. I have tried all variations of server name, FQDN, ip address, etc. I know it's not permissions since it works when I try it manually so am really at a loss here. Is there any way to log what happens at login to see if it's even trying to mount the volume? I do know the client is getting the profile since i can see it in system preferences but it never works. Any ideas would be greatly appreciated, thank you!

@bkma did you find any solution? i run into the same problem.

Deploying Calendars via Profile Manager

I recently needed to start sharing calendars between staff here at school. I have successfully created and shared calendars between two test accounts, setting them up manually via the "Mail, Contacts & Calendars" section of system preferences for each user.
I then shared then opened up the calendar app and shared each test accounts calendar with each other via the right click menu>Sharing Settings.
Everything is working exactly as I want but I want to automate this setup for our staff and so I turned to profile manager thinking that we could at least skip the step that was covered through "Mail, Contacts and Calendar".
I could not.
It seems that Profile Manager settings requires a password which is terrible and that would have all staff subscribe to one calendar account rather than having their own.
Is there a way around this or am I destined to set up each user individually?

Thank you both so very much for using these forums. Today I was having the issue of the profile not pushing when there were Calendar settings in the profile. Then I ran across this discussion. I was able to confirm your findings Henry. Indeed when I set it to manual, downloaded the profile and installed, it worked like a charm. (sad this is still an issue in Yosemite) Anyway, it gave me an idea. All I did was add a description to the General section of the profile, changed it back to automatic push, no password installed and using SSL, and it worked. I have no idea, but just placing a comment in the field did the trick. Thought it should be shared. Thanks for your discussion, help, and feedback. Have a great day!

Profile Manager failed after update

Hi all
I have just updated my OS X Server to 3.2.1 and after the installing the update (with no restart required) I can no longer access my profile manager web page. The error I am getting is:
An Error Occured
Reload Profile Manager and try again
Error: SyntaxError: JSON Parse error: Unrecognized token '<'
Can anyone tell me what this means? Has anyone has similar issues with the latest update?
I noticed as well that on the Server app in the profile manager settings some settings have been lost since updating.
Any help will be truly appreciated!
Regards,
Ashley

Also, on the Profile Manager settings in the Server app it is showing configure. The first screen says
Configure Device Management
"you can use this server to manage your users' Apple devices. If the devices have an internet connection, you can remotely lock or wipe them."
The second screen confirms the Organization Information
The third screen wants to confirm a certificate (I am using a self signed certificate). Once you click next it has at the top of the screen Confirm Settings and in the message section it has a warning /!\ sign with an error that says "An error with code -1 occurred"

Setting parental controls via profile manager

So I've got Lion Server running on an older mac mini. I've setup up accounts on the server for my kids. (they're my guinea pigs!) We have 2 other macs in the house both running Mavericks. I'm able to do a networkin login into the kids' accounts from those client machines with no problem. I'm also storing their home folders on the server and creating "mobile" accounts (I think that's the terminology) on the client machines. I've installed the Trust certificate from the server onto those client machines. I've also installed the group certificate on the client machiens. (most of the profile manager settings I have for the kids are handled in a group called "kids")
Here's the problem: if I try to enforce parental controls on the kids' accounts (such as limiting the time they can be on them, etc) it doesn't work. In fact, after the settings get pushed to the client machines, they (the client machines) often will lock-up or start acting really flaky. A reboot "fixes" that, but the parental controls still won't work.
I've tried this literally dozens of times with the same result. Other changes in profile manager, such as restricting access to certain apps, DOES seem to work. It's mainly just the settings related to parental controls that seem to be the problem.
Am I doing something wrong? Is this stuff supposed to work? Thanks for any help, this is incredibly frustrating!

Unfortunatley I never got this resolved. In fact, it turns out that this is really a bug in how the parental controls work with a "managed" account. All of the other settings that can be managed on OSX server seemed to work just fine in my testing, but the parental controls do not. Or more specifically, the curfew (time limit) settings definitely don't work. It's hard to believe, but apparently this is a use-case Apple never considered. (if you do some googling for parental controls and OSX server you'll find we're not alone)
I don't recall exactly, but if you're trying to determine if changes got pushed to the clients there is something in the profile manager (web UI) that shows "completed tasks" or "active tasks" (or something like that) which should show what was pushed and if it was succssfully received by the client.
Anyway, after all that effort I ended up not using the profile management feature in OSX server at all. My kids accounts are now just plain 'old local accounts. I came to the conclusion (as many others have) that OSX server, at least in a home setting, just isn't worth the effort. It's too bad because if it all worked properly it could be really useful. If you still want to mess around with OSX server you might want to check out some nice youtube videos by a guy named Todd Olthof. He has a bunch of videos on OSX server that are actually geared completely towards the home user.
Good luck!

Messages Settings in Profile Manager 2.1 Mountain Lion

Just want to let anyone and everyone know about something that I've found in Profile Manager.
I have been messing about with Messages, trying to get it set up without any success but I have found something that could be useful to anyone else in the same situation.
When applying messages settings to a Profile it seems to spoil all other settings, or at least Dock settings.
I set up my Dock and other settings for a group and all was fine. I then added the messages settings to the group and all of the Dock settings were removed leaving just Finder and the Trash Can in the dock.
Removing the Messages setting restored the previous Dock settings and everything is back to normal. Perhaps I am doing something wrong but this seems to be a bit of a bug with Profile Manager.
On a side note, I'd really appreciate some help with setting Messages up. I work in a school where it would be great if the teachers could use Messages as instant messaging between classrooms.

Did you ever get this resolved? This error is usually related to DNS, hostname, or Open Directory configuration. Let me know if you still need help.

Set advanced IMAP settings with profile manager?

I've finally gotten profile manager working successfully so that my employees can enroll their iOS devices and laptops for easy setup of our company services. However, there are two advanced IMAP settings we need to manage that are not available in the Profile Manager controls.
Is there a way to crack open a profile source and add in the keys for advanced IMAP settings? Specifically, i need to set "Remove Deleted Messages" to "Never" and assign an alternate mailbox for "Deleted Mailbox" under "Mailbox Behaviors"
Thanks for any help or advice!

While I was not at the time trying to do it via Profile Manager I did previously look at trying to enable Location Services via a script. Unfortunately I found it too hard or more accurately I failed to do this. I ended up 'cheating' by logging in on a test Mac, manually setting up Locations Services the way I wanted including most importantly setting the Security & Privacy settings to allow a specific application to use Location Services. I then saved a copy of the relevant configuration file which is -
/private/var/db/locationd/clients.plist
I then as part of my DeployStudio workflow to image fresh computers included a step to copy this to the correct location on the fresh computer, thereby 'restoring' the settings.
So the short answer is that /private/var/db/locationd/clients.plist is the file but the structure is such that a simple defaults write is not possible.
Let me know if you get anywhere with this.

Is there a way in 10.8 Profile Manager to assign certain users the sole right of adding/removing users to user groups?

Hello,
I want to assign certain network users the ability to login via browser to the profile manager for 10.8.x server and add/remove other users from user groups. Think teachers managing their class rosters, if the class was a group and the users their students. I do not want any other admin funtionality beyond that for them.
Suggestions?

Well thank you for being so polite. Yes, on looking on my 10.8 server, I have the same thing. How annoying. I have no idea how to answer your question. If the management abilities are no longer in Workgroup Manager then there's a change that the server doesn't pay any attention to the settings, so manually changing settings in LDAP won't have any effect either.
At least I can verify that it's not just you who gets that result. I wonder what happened and how we're meant to do this now.

Is it possible Messages Settings break Profile Manager?

I've recently been playing about with the Messages app in ML and ML server.
I've got everything working manually, as in going to each machine, logging in as the user and adding their credentials to the Messages app.
I'm trying to automate this using profile manager, I've done simialr for Mail settings but the profile never succeeds. Always fails.
Removing the Messages component from the Profile makes everything work again.
Is this possible? I don't see how it could be any of the information that I am typing in the boxes that breaks it, I've been using %short_name% for the use names, this works for the Mail settings, could this be breaking it?

Hi,
Partner profile setting are actually soft configuration and you cannot transport them.
You have to set partner profile in all stages.
Nilesh

Profile Manager - Remove icons in ipad and disable home button

Hello,
First of all sorry for my bad english.
Im working on a project, installed LION Server with Profile Manager configured, also Enrolled my iPad, i can also push the settings in to the ipad.
But now what i realy want, what the meaning of the project is; remove all of the icons and place only one icon (WEBCLIP) and what even will be beter is, when i boot my iPad the webclip popups by default. Is this possible guys?
Thank you!

It's impossible to develop an iPad app that can't be closed until some actions are done. The iPad programmer cannot override what happens when the user presses the 'Home' button. The 'Home' button will always tell the front application to go to the background, and if that application doesn't cooperate within a reasonable time it will be terminated.
Bear in mind that an iPad is an overgrown iPhone. It's always possible that someone will phone you up when you're running an app, and the app must release control and let you answer that phonecall.
I suggest you discuss the design philosophy with whoever wants the application, remembering that computers are meant to help us do what we want to do, not boss us about.

Remove previous Profile Manager settings

Similar Messages

Maybe you are looking for