Remove Remote Erase/Lock Right on OS X Server 10.8 Managed Devices?

Re: Mac OS X Server 2.2.1
Recently, a friend had his iCloud account hacked into, and all of his devices were wiped and locked. They had to be taken to an Apple Store to be restored.
To keep this from happening for OS X Server managed devices, is there a way to restrict "Mobile Device Management" Rights, to remove Remote Wipe/Erase/Lock capability?

Bumping this old thread.  We are a distributed company with independent contractors who enroll in MDM via Profile Manager.  I'd love to disable these features so as to save the time I end up wasting trying to convince people that these "features" are not a threat to them. 
Up until the recent Server 3.1.1 release, we offered our users the ability to just download the 'Settings for Everyone' profile without actually enrolling the device.  This appeased the most security conscious users who didn't want the scary management privelages looming over them.  As of this latest release, however, it seems this approach does not work any longer.  The settings fail to install.  I should note that we do NOT sign configuration profiles.

Similar Messages

  • Does "Deleted Messages - Remove"  on iPhone and iPad  refer to the server, or just the device?

    I have been trying to understand the settings in iOS devices in mail apps "Deleted Messages - Remove" and the selection of time including never. Does this refer to deleting from the severs - wherever/whomever they are - or from the device itself. This appears in the advance settings in mail for pop accounts.
    If never is selected, is that so the sever holds it for the computer's mail client to see (albeit as unread) and trash it then (where it could be on sever forever if desired) or does that mean it will not be removed it from the iPhone or iPad until trashed and therefore not seen by one's other devices/computer.
    Be gentle - this is my first question.

    Your scores will not sync. You will have "different scores' on each device. And say if the game has different levels that you have to unlock, your progress on one device will not sync to the other.

  • Identifying the Remote Operator on the Managed Device

    I just have one question regarding Remote Management. Since we are using an external VeriSign certificate, the remote operator is currently identified as "unknown user" when a managed device is remote controlled. I think this is working as designed because the Remote Operator's name is derived from the certificate generated on the ZCM server. When External CAs are used (i.e. VeriSign), certificates are not generated for the remote operator, therefore the operator is recorded as an "Unknown User". Am I correct ?
    I read the following in the ZCM documentation:
    B.3 Identifying the Remote Operator on the Managed Device
    When a remote operator launches a remote session on a managed device through ZENworks Control Center, a certificate that helps the managed device to identify the remote operator is automatically generated by ZENworks if an internal CA is used. However, if an external CA is used, the remote operator needs to manually provide the certificate that is chained to the deployed external CA and is certified for SSL Client Authentication. For more information on using the external CA, see Use the Following Key Pair for Identification in Section 2.8, Starting Remote Management Operations. Novell Documentation
    If a remote operator launches a remote operation on a managed device without providing a certificate, the name of the remote operator is recorded as An Unknown User in the audit logs, the Visible Signal and the Ask User Permission dialog box. To ensure that the remote operator provides the certificate, deselect Allow Connection When Remote Management Console Does Not Have SSL Certificate in the Remote Management policy.
    Do you know how the required key pair for identification is generated ? What are the steps ? We need for the remote operator to be identified.

    rguerra,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Visit http://support.novell.com and search the knowledgebase and/or check all
    the other self support options and support programs available.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.novell.com)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.novell.com/faq.php
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://support.novell.com/forums/

  • Why did Word on Office 2013 REMOVE Auto Correct from Right-Click Context Menu??

    Hi Microsoft -
    I normally don't rant, but this is a killer feature removal, and the reason given is for aesthetics - 'Removal of clutter" is how it's worded here:
    [Changes in Office 2013]
    http://technet.microsoft.com/en-us/library/cc178954(en-us).aspx
    I copy n pasted below the operative row from the linked TechNet page as to the reason WHY this critical (and very popular feature) has been removed from Microsoft Office 2013 Word's context-menu: LESS CLUTTER
    And your answer is ambiguous and doesn't solve the issue that you created to make things prettier: "Click the AutoCorrect Options button" Then what?  ADD EACH WORD MANUALLY? 
    Please advise ALL OF US that want this feature back how to have our commonly misspelled words fixed and added automatically to the dictionary.  If I am missing this in a major way somehow, I apologize completely and will issue a public apology via any
    social media platform of your choice.  If it really is gone, and I have to manually add the entries into a buried table 6-clicks deep, then I will issue a public excoriation of this feature on as many social platforms of my choice.
    Sincerely,
    Maximus Mednick
    COPY N PASTE AS FOLLOWS:
    =-=-=-=-=-=-=-=
    Contents of spelling error context menu
                    Word and WordMail within Outlook
    Modifying the feature
    Auto-Correct and certain formatting tools are no longer available from the spelling error context menu.
    To make Word 2013 cleaner and less cluttered, we removed AutoCorrect and certain formatting tools from the spelling error context menu. The features are still available in Word 2013 through other entry points within the Word user interface.
    Less clutter in the spelling error context menu. This enables users to find popular commands more quickly. In addition, the spelling error context menu now fits better on the screen.
    To change AutoCorrect options, do the following:
    Choose File -> Options -> Proofing
    Choose the AutoCorrect Options button.
    =-=-=-=-=-=-=-=
    Thanks, MAXIMUS

    Microsoft used to be about allowing users to customize the OS and apps however they want. This was one reason I have always preferred Windows over Mac. There are 5 ways to do any one thing, and you can customize it to do it however you want. It's all about
    user choice. Please don't go the way of Apple and force users into the way that you *think* we should do things. 
    <rant>
    While I whole heartedly agree with this suggestion, if you look through this blog about the design decisions that went into the 2007 ribbon:
    Jensen Harris: An Office User Interface Blog -
    http://blogs.msdn.com/b/jensenh/archive/2008/03/12/table-of-contents.aspx
    You'll see that one of the considerations of the ribbon was to ELIMINATE/REDUCE customization because it was costing large corporate customers too much time/money to support their users with 2003 customized menu/toolbars.  In other words, the ribbon
    was intentionally built as a fixed design so that average user cannot change it.  The QAT was an afterthought, a sop, to allow users minimal customization. 
    They found that the 2007 lock down was too much of a "good thing", too much like the good old "IBM 360 green screen" (even if most people don't recognize the reference), so in 2010 they
    re-introduced limited Ribbon customization within the UI.
    But you still can't customize the default tabs. And to add injury to insult, if you do want to customize a default tab and go to the effort of trying to recreate the default tabs and groups
    within the Ribbon UI, you'll eventually find that YOU CAN'T'! There is no way inside the UI to force the buttons to layout the same way! AHHH!
    Even in 2007,
    EXPERTS have had the option of creating custom Ribbons/tabs by editing XML, but that is pretty serious programming, out of scope for 99% of users.
    The "solution" to the problem was too simple. Just add an option to allow users to turn on the old menu UI.  Even if it had been buried as a registry hack, the people who really wanted it would have learned about it. Then MS could have collected statistics
    on usage that would have "proved" that the menu was preferred over the ribbon.  The thing is, if the ribbon was defaulted "out of the box", over time people would eventually all switch over to it. Simply because it was the default, because MS only produced
    new training material referring for the ribbon
    Now, I'll concede that the ribbon really may be more "intuitive", but only for new users. For long time users the change is very jarring.
    They made the same choice with Windows 8.  In the last Windows 8 consumer Preview there was a registry hack to bypass the Start Screen.  I learned about it in July or August. But MS was so sure the Start screen/metro was the only way to go they
    rushed out a Windows Update to eliminate that registry entry. And it was eliminated from the RTM version. 
    WHY?
    Why did they remove the user's right to chose the UI that worked best for them? I don't know.
    </end rant>  sorry, this is a hot button for me.

  • HT1766 I lost my IPhone 4S this morning and want to increase my cloud storage so I can back it up when it finds a signal and then remotely erase it...I'm assuming the worst that whoever finds is will not callme or want to return the phone

    I lost my IPhone 4S this morning and want to increase my cloud storage so I can back it up when it finds a signal and then remotely erase it...I'm assuming the worst that whoever finds is will not call me or want to return the phone. I went to icloud but it only govers me options to increase storage from my iPhone or a synced computer (mac or PC).

    If the phone is offline there is no way to track it or send a message to it.  You can place it in lost mode to lock it and send it a message (see http://help.apple.com/icloud/#/mmfc0f0165), but this will not take place until the phone goes back online, if it ever does.  If it does, you will get an email informing you.
    You might want to read this: http://support.apple.com/kb/HT5668.

  • I have iphone 5 with icloud accont but isn't for me need to remove oredy erase my iphone but while activated it request  enter your i cloud account plz help me

    i have iphone 5 with icloud accont but isn't for me need to remove oredy erase my iphone but while activated it request  enter your i cloud account plz help me

    Contact whoever you purchased the phone from. That's called activation lock. There is no way to bypass it without the credentials for the account that was used to lock it.

  • TS3376 How to reset Find My iPhone to remove the erase prompt after locating phone?

    iPhone was taken.
    Phone was locked, therefore, offline when taken.
    Set Find My iPhone to erase phone when back online.
    Now have recovered phone. 
    How do I reset Find My iPhone to remove the erase prompt so I can start using my phone again?

    What To Do If Your iDevice Is Lost Or Stolen
    If you activated Find My Phone before it was lost or stolen, you can track it only if Wi-Fi is enabled on the device. What you cannot do is track your device using a serial number or other identifying number. You cannot expect Apple or anyone else to find your device for you. You cannot recover your loss unless you insure your device for such loss. It is not covered by your warranty.
    If your iPhone, iPod, iPod Touch, or iPad is lost or stolen what do you do? There are things you should have done in advance - before you lost it or it was stolen - and some things to do after the fact. Here are some suggestions:
    This link, Re: Help! I misplaced / lost my iPhone 5 today morning in delta Chelsea hotel downtown an I am not able to track it. Please help!, has some good advice regarding your options when your iDevice is lost or stolen.
      1. Reporting a lost or stolen Apple product
      2. Find my lost iPod Touch
      3. AT&T. Sprint, and Verizon can block stolen phones/tablets
      4. What-To-Do-When-Iphone-Is-Stolen
      5. What to do if your iOS device is lost or stolen
      6. 6 Ways to Track and Recover Your Lost/Stolen iPhone
      7. Find My iPhone
      8. Report Stolen iPad | Stolen Lost Found Online
    It pays to be proactive by following the advice on using Find My Phone before you lose your device:
      1. Find My iPhone
      2. Setup your iDevice on iCloud
      3. OS X Lion/Mountain Lion- About Find My Mac
      4. How To Set Up Free Find Your iPhone (Even on Unsupported Devices)

  • Can't remove the screen lock by PIN and can't use the screen to receive calls

    Hello, I have a brand new SONY Xperia , Model Number D5803, Android version 5.0.2. , Baseband version 8974-AAAAANAZQ-00063-42, Kernel version 8974-perf-g3f600d1. , Build number 23.2.A.1.62.
    I set a screen lock by PIN. However when I receive calls I can’t take them, because the screen in locked.
    I tried to turn off the screen lock, but when I select the “ Screen lock” menu and after entering the correct PIN, the following items are not active “None”, “Slide” and “Pattern” . So I can't select  “None”
    The only active items are “PIN” and “Password” .
    Please advice how to remove the screen lock by PIN. I hope this will help to be able to receive calls.
    Thank you

    To enable None and Swipe options, you need to go to Settings -> Security -> Clear credentials. Then those options will become active again.
    However, you should be able to take calls even when you have PIN security, can you describe what shows on the screen when you have an incoming call while screen is locked?
    A proud Sony User since 2002
    If I was helpful to you, thank me by Kudos

  • The photos in my photo stream removed and it says you don't have enough storage and your device why I am receiving this message and why my photos erased from photo stream

    The photos in my photo stream removed and it says you don't have enough storage and your device why I am receiving this message and why my photos erased from photo stream

    Try deleting the old backup.
    Settings>iCloud>Storage & Backup>Manage Storage, tap the device name and on the resulting screen, scroll down and tap on Delete Backup.

  • TS4006 The iPod is offline and pending to erase, how can I cancel  remote erase the content and setting?

    How can I cancel the remote erase the content and setting of my iPod touch by ( find my iPhone apps)? The iPod touch is offline and pending to erase! Please help!! Urgent

    You can't cancel an erase command.

  • How to check if remote phone locking in E5 is work...

    how to check if remote phone locking in E5 is working

    If the phone is off nothing can be done about it.
    As is evident in the thread that aspergerguy linked you can check by sending the required sms to your phone but that guy was reporting what sounds like a bug if you do just send the message to test.
    Honestly you have very little time to actually do something about a stolen phone. It's not like tracking a car which itself is not 100% effective. I don't bother with such software it's actually for the stupid thieves.
    Show your appreciation. Hit that kudos button real hard

  • I misplaced my ipad, so I remotely erased it.  Then I found it, but now I cannot use all of the options in the settings.  I have restored from backup, but it still is not letting me use all functionality.  Help!

    I misplaced my ipad, so I remotely erased it.  Then I found it, but now I cannot use all of the options in the settings.  I have restored from backup, but it still is not letting me use all functionality.  Help!

    Would throwing it in Recovery mode and restoring as new clear it up?
    (same for Ipad)
    Step 1: Turn off the iPhone. To do this press and hold the power button till you see the “Slide to Power off” screen. Now slide the button to turn it off.
    In case your iPhone is stuck in an infinite loop and the previous option is unavailable, press and hold the Power and Home button till the screen goes off. Remember to leave both the buttons as soon as the screen goes off and before the Apple logo appears again.
    Step 2: Connect the iPhone’s USB cable to your computer but not to your iPhone yet.
    Step 3: Now hold down the Home button and while you are holding it connect the USB cable. Keep holding the Home button till you see the Connect to iTunes screen on your iPhone(Screenshot shown below). iTunes will show an alert saying a device in recovery mode has been detected.
    Here’s what your iPhone screen will look like once its in the iPhone Recovery Mode.
    Read more: http://www.callingallgeeks.org/15018/how-to-put-iphone-or-ipod-touch-into-recove ry-mode/#ixzz296y04ygX
    Under Creative Commons License: Attribution No Derivatives
    THEN RESTORE THE DEVICE AND SETUP AS NEW. JUST YOU WILL HAVE TO DOWNLOAD YOUR APPS AGAIN(FREE) ETC....
    LEAST THE SECURITY WORKS HAHA!!! I also wouldnt get upset, be thankful you found it.

  • How do i remove the Icloud Lock on a Iphone thats Clean and can not get in touch with the oraganal owner

    How do i remove the Icloud Lock on a Iphone that's Clean and can not get in touch with the oraganal owner
    thers no  you cant put a reset tool on your site to reset phones thats not stolen or in lost mode

    it's an anti-theft measure DAH Its Not Stolen SO what the crap Then. I wish thay would Remove it From there Ios and Redo it so it Only Locke if you Report it Stolen  or enter Lost Mode. BC thers A lot of PPL that abuse it.

  • Officejet 7310 Error Message "Remove & check cartridge on right"

    After installing a new HP cartridge # 96 on my Officejet 7310 the  Error Message "Remove & check cartridge on right" persists.
    Am using OS 10.7.4. Tried everything.  Any thoughts would be greatly appreciated.

    Hi ike69,
    There are several causes to this issue, please see the following for an explanation and troubleshooting of the possible causes:
    http://h10025.www1.hp.com/ewfrf/wc/document?docname=c01423559&tmp_task=solveCategory&cc=us&dlc=en&la...
    If I have helped in any way, just click the Kudos star on the left. Also, if your issue has been resolved, don't forget to select Accept as Solution

  • ICloud Remote Erase

    I was having some problems with my iPod, and long story short: I erased it via iCloud. My iPod is now displaying a black screen with the white loading wheen in the middle. How long can I expect this to go on? And is there any way I can shorten the time it will take? If someone could just explain to me how the remote erase process works that would be great as well.

    Try placing it in recovery mode with one of these programs and then try a restore
    For PC
    RecBoot: Easy Way to Put iPhone into Recovery Mode
    or
    http://joshuabailey1997.wordpress.com/2010/09/02/recboot-v1-3/
    If necessary:
    Download QTMLClient.dll & iTunesMobileDevice.dll for RecBoot
    and                                           
    RecBoot tip
    RecBoot may have problems on 64X windows, then try:       
    Tenorshare ReiBoot – Enter & Exit iPhone, iPad, iPod Recovery Mode with a Single Click
    For MAC or PC       
    The Firmware Umbrella - TinyUmbrella
    Installs blootware on PC too

Maybe you are looking for

  • Making the fields grey in a sap screeen

    Hi all In CKECP transaction, while hitting the display button, the next screen appears with estimae details. While pressing the 'show item view', a subscreen with the estimate details appears. Now the requirement is to make the 'Total Price' and Tota

  • About jms c api!!!

              I have passed the debug of the jmscapi sample , but it seems that it cannot set           the message listener ! After noting the function called "JmsConsumerSetMessageListener"           , the sample can send message! the reason must be th

  • Sun Management Center - how to install the SMC agent on linux

    Dear Gents, I have one X86 Solaris Server configured and installed to be Sun Management Center Server. successfully i could monitor the Sun Solaris Servers after i have installed the SMC agent on them. my problem is that i could not install the SMC a

  • Employee Grouping Fixed Account Assignment in FMDERIVE

    Hello Experts, I am configuring derivation rules in FMDERIVE for a client, where I have to configure those for HCM. I came across a Source Field "Employee Grouping Fixed Account Assignment". Can someone explain me what this field do, its use in FM De

  • Advice for Making Screen Recorded Videos for FCP

    I want to use some screen recording software to record some tutorials on using various features of a website. The video will later be imported into FCP where I will edit it, add transitions, titles and voice overs. The final videos will be uploaded t