Skip navigation

Profile Manager is baffling me

3492 Views 19 Replies Latest reply: Oct 3, 2013 1:53 PM by niteowl RSS
1 2 Previous Next
Scotch_Brawth Level 3 Level 3 (800 points)
Currently Being Moderated
Sep 15, 2012 12:05 PM

OK, I'm a noob.  I'll admit it.  I thought having some experience with iPhone Configuration Utility would stand me in good stead with Profile Manager, but it's not.  I have some questions:

 

1) What does it mean to assign a device to a user?  I can think of no purpose to this.

2) What is the purpose of the "Apps" tab when you select a user?  At the moment it's completely blank, and offers no guidance as to its purpose.  If it were available under the Devices section, I'd guess it allowed you to push applications out, but under Users? *baffled*

3) How do I automate user creation, and associated preferences, using Profile Manager?

4) What, in fact, do "Users" and "Groups" have to do with Profile Management at all?  I can see no purpose to these in relation to device management.  At least, not how it's presented in Profile Manager.

 

Sorry if these are atrociously simple questions, but Apple's (lack of) documentation has killed any desire to keep on searching for answers in their official places.

 

Someone, please help.

Mac Pro, OS X Mountain Lion (10.8)
  • Mark23 Level 3 Level 3 (975 points)
    Currently Being Moderated
    Sep 15, 2012 2:12 PM (in response to Scotch_Brawth)

    1) Assigning a device to a user is simply telling mobile device management (MDM) that the device is linked to a person. The advantage is managing the different devices a user has gotten, for instance if you make a profile with all settings that are relevant to that user and the user has a MacBook Air, iPhone and iPad assigned to him or her, the profile will be automatically distributed to all three devices, while the administrator only has to set up one profile.

    2) At the apps tab you can drag apps in *.ics format to the input window as long as they are free or custom built.

    3) You can user Presets:

     

    Creating a Preset for User Accounts

    You can create presets to use when creating user accounts in a directory domain.

    Presets are stored in the directory domain you’re currently viewing. If you change directory domains, the presets you created in the other directory domain are not available.

    To create a preset for user accounts:

     

    1. In Workgroup Manager, click Accounts.
    2. Click the globe icon and choose the domain where the user’s account resides.
    3. To authenticate, click the lock and enter the name and password of a directory administrator.
    4. To create a preset using data in an existing user account, open the account; to create a preset from scratch, create a user account.
    5. If you’re basing the preset on an existing account, fill in the fields with values you want new user accounts to inherit and then delete values you don’t want to specify in advance.The following attributes can be defined in a user-account preset: simultaneous login, default shell, comment, primary group ID, group membership list, home folder settings, disk quota, mail settings, and print settings.
    6. Click Preferences.
    7. Configure settings you want the preset to define and then click Accounts.After configuring preference settings for a preset, you return to the Accounts settings to save the preset.
    8. From the Presets pop-up menu, choose Save Preset, enter a name for the preset, and click OK.The preset is saved to the current directory domain.

    4) You can not mage users in profile manager, you need to do that on the server running Profile Manager or at the master when you are running on a replica.

  • Mark23 Level 3 Level 3 (975 points)
    Currently Being Moderated
    Sep 15, 2012 2:19 PM (in response to Scotch_Brawth)

    You can set up Open Directory so you just have to create the user once on a server and never again on a client Profiles do not create users.

     

    p.s. you don't have to apologize for asking, nobody was born knowing anything of Apple computers, although Apple is much easier than any of the competition.

  • Mark23 Level 3 Level 3 (975 points)
    Currently Being Moderated
    Sep 16, 2012 12:04 AM (in response to Scotch_Brawth)

    It's not depricated.

    Depricated would mean Apple disapproves, but they've made Workgroup manager 10.8 which is very useful.

  • Mark23 Level 3 Level 3 (975 points)
    Currently Being Moderated
    Sep 16, 2012 6:26 AM (in response to Scotch_Brawth)

    I agree with the consensus that Profile Manager is not even near finished.

     

    Workgroup Manager may very well be deprecated in the (near?) future in favor of Profile Manager, but I don't think Apple will until there is a great enhancement of Profile Manager and at that point I'm sure there will be no more objections we can render. Maybe MCX is then integrated into Profile Manager or the concept of MCX has been replaced by another mechanism.

  • Mark23 Level 3 Level 3 (975 points)
    Currently Being Moderated
    Sep 16, 2012 6:42 AM (in response to Scotch_Brawth)

    The best help for Workgroup manager is to be found in the application itself (Help menu item --> Workgroup manager help)

  • Mark23 Level 3 Level 3 (975 points)
    Currently Being Moderated
    Sep 16, 2012 6:59 AM (in response to Scotch_Brawth)

    The added bonus of WGM is, in short, that you can manage client preferences on OS X:

    Look here for more info: http://support.apple.com/kb/HT1822

  • Mark23 Level 3 Level 3 (975 points)
    Currently Being Moderated
    Sep 16, 2012 1:36 PM (in response to Scotch_Brawth)

    This is about creating network accounts. Do you have anything agains using network accounts? Network account do let you use the laptop when unplugged from the network, you just need to log in once and I beleive it remembers 5 users' credentials.

  • Mark23 Level 3 Level 3 (975 points)
    Currently Being Moderated
    Sep 18, 2012 12:27 PM (in response to Scotch_Brawth)

    Why didn't you say so before?

     

    Backup and Restore Open Directory:

    sudo slapconfig -backupdb <archive-path>

    Creates an archive containing the LDAP, Password Server and Kerberos data-bases. It also contains Certificate Authority related data.

    sudo slapconfig -restoredb <archive-path>

    Restores a directory to the backed-up state.

  • Mark23 Level 3 Level 3 (975 points)
    Currently Being Moderated
    Sep 18, 2012 1:04 PM (in response to Scotch_Brawth)

    You could just clone the server and re-apply the clone when you like but for other versions of the OS it would be better if you just use the OD backup.

1 2 Previous Next

Actions

More Like This

  • Retrieving data ...

Bookmarked By (1)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.