Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Profile Manager and enrollment on a closed network

Hi,


I'm old hand at MS server stuff, but have only recently had the opportunity to start working on some nice mac machines.


Apologies for the probably dumb question, but I've had the same issue on 2 different sites 1 on Lion and 1 on Mountain Lion.


Both installs were vanilla out of the box installs, I set up Open Directory (I think correctly) and will be joining all the machines to AD as well.


But the issue I'm having is with enrolling machines to profile manager. Basically I can't. I can get the Trust profile installed and then Enroll. I can see that the Profiles appear on the client machines etc. Exactly as I would expect.


But, the machines never actually appear in the profile manager. If I prestage one, then join it, I can get it to lock etc. However, when I try to enroll the 2nd machine, the 1st one disappears.


I'm completely stumped on this and can't seem to find an answer anywhere.


The other thing to note, I think it may be relevant, is that both networks have limited http and https access to the rest of the world. They are on a closed council/school network and I'm not going to be able to get any ports opened up from the outside world.


Thanks very much in advance for anyone who can help!


Cheers,


Noel

iMac, OS X Server

Posted on Oct 17, 2012 8:58 AM

Reply
2 replies

Oct 17, 2012 12:27 PM in response to NoelTaylor

I've been grappling with this issue over the past few days as well. You're actually further along than me. I am unable to enable Mobile Device Management in Profile Manager. I supply it with an AppleID but it never acquires the certificate from Apple's Push Notification Services. It just spins. Because of that, Devices do not appear in Profile Manager and so the clients do not "see" the Enroll button.


Anyway, because your setup (and mine) are inside a firewall, I believe there are certain ports that the server and clients must have access to. In case you haven't seen them, here are some good documents on the subject.


OS X Server: Ports used by Profile Manager

http://support.apple.com/kb/HT5302


Profile Manager Help

http://help.apple.com/profilemanager/mac/2.1/#


Managing OS X with Configuration Profiles

https://docs.google.com/viewer?a=v&q=cache:f5YopgsSW4oJ:training.apple.com/pdf/w p_osx_configuration_profiles.pdf+&hl=en&gl=us&pid=bl&srcid=ADGEESiZN7W2bT3Z53-j_ O9y_F8gY1mKcgjtIJE5KSO1skxqbSZXPmcFvM2aTwrFZjVrXVI6WkKW2btDn6sMOifaZsRLjN-h9elV7 XK1seSZqqloP3RyyO3JPmhcR9n1Vqg5-LAmDlcj&sig=AHIEtbRtOqJN_KCKdn60LILJzdzA2P4zeg

Profile Manager and enrollment on a closed network

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.