Setting parental controls via profile manager

So I've got Lion Server running on an older mac mini.  I've setup up accounts on the server for my kids.  (they're my guinea pigs!)  We have 2 other macs in the house both running Mavericks.  I'm able to do a networkin login into the kids' accounts from those client machines with no problem.  I'm also storing their home folders on the server and creating "mobile" accounts (I think that's the terminology) on the client machines.  I've installed the Trust certificate from the server onto those client machines.  I've also installed the group certificate on the client machiens.  (most of the profile manager settings I have for the kids are handled in a group called "kids")
Here's the problem:  if I try to enforce parental controls on the kids' accounts (such as limiting the time they can be on them, etc) it doesn't work.  In fact, after the settings get pushed to the client machines, they (the client machines) often will lock-up or start acting really flaky.  A reboot "fixes" that, but the parental controls still won't work.
I've tried this literally dozens of times with the same result.  Other changes in profile manager, such as restricting access to certain apps, DOES seem to work. It's mainly just the settings related to parental controls that seem to be the problem. 
Am I doing something wrong?  Is this stuff supposed to work?  Thanks for any help, this is incredibly frustrating!

Unfortunatley I never got this resolved.  In fact, it turns out that this is really a bug in how the parental controls work with a "managed" account.  All of the other settings that can be managed on OSX server seemed to work just fine in my testing, but the parental controls do not.  Or more specifically, the curfew (time limit) settings definitely don't work.  It's hard to believe, but apparently this is a use-case Apple never considered.  (if you do some googling for parental controls and OSX server you'll find we're not alone) 
I don't recall exactly, but if you're trying to determine if changes got pushed to the clients there is something in the profile manager (web UI) that shows "completed tasks" or "active tasks" (or something like that) which should show what was pushed and if it was succssfully received by the client. 
Anyway, after all that effort I ended up not using the profile management feature in OSX server at all.  My kids accounts are now just plain 'old local accounts.  I came to the conclusion (as many others have) that OSX server, at least in a home setting, just isn't worth the effort.  It's too bad because if it all worked properly it could be really useful.  If you still want to mess around with OSX server you might want to check out some nice youtube videos by a guy named Todd Olthof.  He has a bunch of videos on OSX server that are actually geared completely towards the home user. 
Good luck!

Similar Messages

  • Safari Keep-Alive via Profile Manager

    Greetings Community!
    Does anybody know of a way to issue a keep-alive to Safari via profile manager so it always stays open and that if it somehow closes it will automatically re-open?

    Worked it out!
    I also host a couple of personal websites and these were configured to use the IP of the server; removed this and set it to use the "Any" option and profile manager started working as expected. Not done a full test of the entire thing to see if anything else is broken but this has me moving on from here!

  • IPSEC VPN Settings via Profile Manager

    It is not possible to set the following lines via GUI in Apples ProfileManager or via Apple Configurator in the IPSec section:
    <key>XAuthPassword</key>
    <string>myVPNuserPassword</string>
    You can set the lines via GUI in the old iPhone Configuration Program on Windows.
    If you can't set the "XAuthPassword", you have to type in the password every time you want to establish the VPN.
    We use certificates for device authentication.
    Anyone a solution ?
    greetings
    robin

    klatuu wrote:
    It is not possible to set the following lines via GUI in Apples ProfileManager or via Apple Configurator in the IPSec section:
    <key>XAuthPassword</key>
    <string>myVPNuserPassword</string>
    You can set the lines via GUI in the old iPhone Configuration Program on Windows.
    If you can't set the "XAuthPassword", you have to type in the password every time you want to establish the VPN.
    We use certificates for device authentication.
    Anyone a solution ?
    greetings
    robin
    Yes, there are two possible solutions.
    1. As per my article here http://jelockwood.blogspot.co.uk/2014/03/how-to-do-vpn-on-demand-for-ios-at-zero .html you would use a StrongSwan VPN server and as per my article use the xauth-noauth plugin to prevent it asking for a username and password, it will then only use the client certificate for device authentication.
    2. You can use the two keys listed above but you will have to manually edit the mobileconfig file and add them. Therefore you cannot use Profile Manager or Apple Configurator. For this I used iPhone Configuration Utility to create the initial mobileconfig file, and then I used TextWrangler to add the two keys. With a manually produced mobileconfig file I do not believe there is anyway to send it via Profile Manager but you can either email it to the device or make it available via a web server. Other MDM solutions than Profile Manager do allow pushing uploaded mobileconfig files, I used Meraki Systems Manager and pushed my hand edited mobileconfig files 'over the air' to the devices.
    It should be noted that if you are authenticating usernames and password against a directory server e.g. Active-Directory, Open Directory or LDAP, then if you enforce password ageing and changes you are going to have to hand edit and resend an updated mobileconfig file with the new password in it. This is why I chose option 1 above for my own situation. It is in theory less secure as it only uses a single basis for authentication - the certificate but I felt this an acceptable trade-off.

  • Setting parental controls and allow safari access

    when is set parental controls i can't fine safari (although it's checked) in the guest user profile of my applications

    Sharon...
    Possibly a restriction causing this...
    Read here >  Mac OS X v10.5, 10.6: About the Parental Controls Internet content filter

  • Can I set parental control on firefox for a specific user only?

    I'm using windows 7 and firefox 18.0.2. On my PC I have my Admin account and my kids account. Now as they're coming to an age they're needing Internet access for projects and so on, I wonder if I can set parental control on firefox (by add-on?) as I have on windows, so that whenthey log on their account, firefox will only allow access to what I have allowed. That is, limit internet usage ONLY on their account, while I'll still be able to use firefox unrestrictedly. I don't want to have them use another browser that I' m not as familiar with just so I can set parental control on everything on that browser. Any ideas?

    If you mean you want to block certain sites by some parental control software, you can try a web filter to block sites by URL or keywords.
    https://support.mozilla.org/zh-CN/questions/938721?esab=a&s=&r=1&as=s
    * <sub>'''edit'''</sub> or link [/questions/938721] <sub> this type of link should match viewers locale -J99</sub><br /> <sub>used ''<nowiki>[/questions/938721]</nowiki>'' , omit ''/zh-CN'' </sub>

  • Unable to set parental controls on itunes b/c my username and password are not correct.  How do I reset them?  There is no prompt to give any clues what they are.

    unable to set parental controls on Itunes b/c my user name and password got rejected.  How do I reset them or figure out my username and password?

    This is a user to user support forum.  We are all iphone users just like you.
    You are not addressing Apple here at all.
    This is an odd way to ask your fellow iphone users for help. Berating oterh users will not help you.
    "it's too fragile"
    No it is not.  i have never damaged one, nor has anyone I know.
    " U loose data when Ur phone is locked"
    No you don't.  Why do you think this?
    "and there is no customer support!!!  "
    Wrong yet again.  Apple has an 800 number and they have many retail stores and they have support articles that you can access using the search bar. Or you can contact them throgh express lane online
    "but I will go back with Blackberry "
    Please do.
    Good ridance

  • Setting parental controls in an iTunes movie?

    I know you can set parental controls in the iTunes program generally, but is there a way to tweak an indivusal movie parental controls? Or add parental controls to a single movie or TV show, or music song? I could not find this option when displaying a movies "info". I'd think iTunes would add a parental control settings the user can modify..?

    Try going here and emailing the store about the issue
    http://www.apple.com/support/itunes/musicstore/download/

  • Where do Apps uploaded via Profile Manager go?

    I've just up updated around 30+ apps and I've had to manually add them via profile manager one by one!
    I was just wondering if anyone knew the location where the apps are stored on the server as I thought I could perhaps just drag and drop all of the updated ipas at once.

    There are several tools which allow selecting network profile settings with respect to sites i.e. available network environment data:
    ControlPlane - <http://www.controlplaneapp.com/>
    Little Snitch - <http://www.obdev.at/products/littlesnitch/>
    and maybe some more.
    Additionally, you may find this discussion helpful:
    ML Server: How do i push my school proxy settings to our ML clients?
    i.e. <https://discussions.apple.com/thread/4715399>

  • Hi, I hope someone can help.... When I open a new user account, which I want to set parental control on, the screen keeps freezing once the account is open. The wee rainbow circle appears and I can't do anything. Does anyone know how to fix this? Thanks

    Hi, I hope someone can help.... When I open a new user account, which I want to set parental control on, the screen keeps freezing once the account is open. The wee rainbow circle appears and I can't do anything. Does anyone know how to fix this? Thanks

    Could be many things, we should start with this...
    "Try Disk Utility
    1. Insert the Mac OS X Install disc, then restart the computer while holding the C key.
    2. When your computer finishes starting up from the disc, choose Disk Utility from the Installer menu at the top of the screen. (In Mac OS X 10.4 or later, you must select your language first.)
    Important: Do not click Continue in the first screen of the Installer. If you do, you must restart from the disc again to access Disk Utility.
    3. Click the First Aid tab.
    4. Select your Mac OS X volume.
    5. Click Repair. Disk Utility checks and repairs the disk."
    http://docs.info.apple.com/article.html?artnum=106214
    Then try a Safe Boot, (holding Shift key down at bootup), run Disk Utility in Applications>Utilities, then highlight your drive, click on Repair Permissions, reboot when it completes.
    (Safe boot may stay on the gray radian for a long time, let it go, it's trying to repair the Hard Drive.)
    Report any errors it found for Disk Repair, don't need the ones for Permissions Repair.
    Try it again & see if anything changed, but have Activity Monitor open & Show All Processes & sorted on CPU%, also have Console open if we can... maybe not when switching, but we'll see.
    Does this happen if you just try to create a new admin user???

  • Deploying Calendars via Profile Manager

    I recently needed to start sharing calendars between staff here at school. I have successfully created and shared calendars between two test accounts, setting them up manually via the "Mail, Contacts & Calendars" section of system preferences for each user.
    I then shared then opened up the calendar app and shared each test accounts calendar with each other via the right click menu>Sharing Settings.
    Everything is working exactly as I want but I want to automate this setup for our staff and so I turned to profile manager thinking that we could at least skip the step that was covered through "Mail, Contacts and Calendar".
    I could not.
    It seems that Profile Manager settings requires a password which is terrible and that would have all staff subscribe to one calendar account rather than having their own.
    Is there a way around this or am I destined to set up each user individually?

    Thank you both so very much for using these forums. Today I was having the issue of the profile not pushing when there were Calendar settings in the profile. Then I ran across this discussion. I was able to confirm your findings Henry. Indeed when I set it to manual, downloaded the profile and installed, it worked like a charm. (sad this is still an issue in Yosemite) Anyway, it gave me an idea. All I did was add a description to the General section of the profile, changed it back to automatic push, no password installed and using SSL, and it worked. I have no idea, but just placing a comment in the field did the trick. Thought it should be shared. Thanks for your discussion, help, and feedback. Have a great day!

  • Change Parental Controls via ARD

    I'm trying to determine the most efficient way to add a particular application to 150+ users in 2 different facilities via "Parental Controls" in System Preferences.
    There doesn't seem to be any easy way to globally affect all the users' preferences. I'm hoping I don't have access each user station one-by-one. I was thinking that I could replace the related plist file in all the users, but I can't seem to find the one that drives parental control settings.
    Any ideas out there?

    hi mecklists thanks for your response.
    I've explored a workgroup manager-based solution, but right now that's not viable. I think I'm either gonna find a way to do it globally via ARD, or I'm gonna bite the bullet and go station-to-station.
    Specifically the problem is that users currently can't calibrate their monitors with the Display system preference, because some apps are made inaccessible through the parental control settings. I've discovered in need to make an application called "Display calibrator" available, along with the Colorsync Utility.
    The solutions I'm exploring are:
    - Create an automater/applescript script to launch globally through ARD. Main problem: I don't know how to do this, or even if this is possible.
    - Create a good plist file to copy into users' folders via ARD. Main problem: I can't figure out which plist files drive parental control settings, if any.
    - Go station-to-station. Problem: repetitive task which won't help me learn anything.
    -RR

  • I was trying to set parental controls and somehow lost the abitlity to sign in as adminstrator. When I try to reset using my OSX CD, it says I need to install Rosetta before I can reinstall MacOSX. I say yes, but it asks for my administrator ID/password

    Somehow lost my ability to login as administrator when i was trying to set up Parental Controls. Now it does not recognize my administrator name or password. When I try to reset my password by reinstalling MacOSX, it tells me I have to first install Rosetta. When I say yes, it asks for my administrator name and password!  ARG!  Help please!

    Whew, let's see if we can trick it into making a new admin account...
    Reset OS X Password Without an OS X CD...
    http://theappleblog.com/2008/06/22/reset-os-x-password-without-an-os-x-cd/
    Admin Hack...
    http://www.hackmac.org/?q=node/4
    Starts up like the first time you buy a new Mac, but after filling in all that info again, you should have access to the computer and the other Users & files will still be there... give the new User a different name than an existing one.

  • I can't find a way to upload applications to iOS via Profile Manager

    I have Mac OS X Lion Server 10.7.2 and multiple devices. I added them to the Profile Manager and now I can create different profiles for them. But I have not found a way of moderation of installed applications on iOS. Please tell me how to do this?

    CFax, I am experiencing the same problem.  I see your solution, but I am unsure how to "install the main language English".
    My system uses English.  Is there a particular setting?
    Thanks a bunch.

  • Safari disappears when I set parental controls

    I have set up accounts for my children with parental controls but the accounts do not have access to Safari. I have checked the Safari box in preferences but a big question mark appears where the icon should be. Can you help?

    This article may help  >  Mac OS X v10.5, 10.6: About the Parental Controls Internet content filter

  • How does the concurrent 'Set cost controls' in cost management work?

    Hi,
    Can anyone tell me the use of 'Set cost contols'?
    Thanks in advance!
    Thanks,
    Kaveri

    The "Set cost controls" concurrent program is used in R12 to mass update the cost control fields on item costs.
    The cost control region is found by going to Cost management >Item costs > Item Costs
    The concurrent program lets you specify which items /costs should be updated by using various parameters such as cost type, item range, category range etc.
    And you can specify the source for the new cost control data and the new value for the fields.
    Hope this answers your question,
    Sandeep Gandhi

Maybe you are looking for

  • OK I'm still confused on how to create a 2006 slideshow

    Happy New Year All, I'm trying to create a slideshow of about 400 photos from my iPhoto library. I would like to just click on one chapter button to start the slideshow, but would like to break up the slideshow into several sections with different mu

  • How to execute code saved in string variable??

    Hello experts, I need to execute a select which I obtain concatenating several fields into string variable. So the select is saved in a string: var  = 'select... from ... where...'. There is any way to execute that select? ("exec var." or similar??)

  • 1st Gen Ipod nano

    So I have a 1 generation ipod nano, I've heard reports about the battery exploding. I don't have proof of when I bought it and I'd like to get a refund and get a new one. Who could I email since my phone isn't working at the moment?

  • Using UNIX DD to recover data on damaged drive

    My internal drive failed. I attempted to recover the data using Prosoft's Data Rescue II, but the program repeatedly crashed while trying to scan the drive. No love from Techtools, either. I tried creating a disk image with Disk Utility, but got an I

  • L10N: Why is implicit support for Thai numbers, missing from DateFormat

    If a Locale happens to have different characters for representing numeric digits from 0 to 9, then the year received back from formatting a date shows the characters for the year in the localized form as well. For example, the following code:   Local