MDM profile for user/device

Question

Level 1

0 points

MDM profile for user/device

Hi All,

I am testing MDM in lab. I have several profiles ... have created few users also (target device was member of that user)

Purpose is hide other profiles from the current logoin user.... I mean loged in user should get its own profile.

When I created some Preloads for a user and tested, found the settings has not been applied (or when I log in I cant see any profile besides Trust Profile and Enrollment Profile).

Then I created profile for Device Group, tested it again, did not work...

What I am doing wrong? My perpose is to give user access to a certain profile, not more, so no one can run a profile that is not intended for their use.

iPad, iOS 6

Posted on Apr 25, 2013 6:36 AM

Reply

Answer 1

macsally

Level 1

0 points

Apr 25, 2013 7:52 AM in response to iPad786

4/25/2013:

Apple's APNs services are currently not working. Enrollment yes, but Profiles or inventory updates no. Appears to be a global issue.

People in Asia reported this 13 hours ago (http://www.sophos.com/ja-jp/support/knowledgebase/119235.aspx) and people in Europe have been tweeting about it for a few hours. Seems like a global issue with Apple. Unfortunetly Apples services page doesnt list APNs: http://www.apple.com/support/systemstatus/

Take a break 😟

Reply

Answer 2

Apr 26, 2013 3:03 AM in response to macsally

It's back now. SSL certificate expiry not spotted by Apple, apparently!

---john---

Reply

Answer 3

iPad786 Author

Level 1

0 points

Apr 30, 2013 3:17 AM in response to johnatexeter

I need to isolate profiles, so a user will get the targeted profile only. How can we manage this?

Reply

Answer 4

Apr 30, 2013 4:53 AM in response to iPad786

Profile Manager controls devices, not users. It has no idea which user uses which device. So rather than identify your user you want to treat specially, you identify the device you want to treat specially.

You can set a different profile for each device if you want. Or make a group and put just that one device in it. What part of the user interface are you having problems with ?

Reply

Answer 5

iPad786 Author

Level 1

0 points

Apr 30, 2013 5:38 AM in response to Simon Slavin

If I have a profile for device, and have many devices I have to create same profile for all devices.... this can be controled if I move all devices under a device group.

But what I meant is if I have 10 profiles for 10 customers and in production its easy to run a wrong profile on a device since you can see all 10 profiles. If a user login on iPad with a specefic user ID and password then they should get ONLY the profile they are intended to use. For example User1 get Profile 1, User 2 get profile 2 ..etc.

Reply

Answer 6

Apr 30, 2013 6:20 AM in response to iPad786

iPads do not have user IDs. One iPad is assumed to be used by one person. There's no login screen that asks for a username and password.

Reply

Answer 7

iPad786 Author

Level 1

0 points

Apr 30, 2013 7:36 AM in response to Simon Slavin

Simon you didnot get me, I meant when I login to Profile Manager on iOS device, here I can see available profiles.... I want to see only required profile not all.

Reply

Answer 8

Apr 30, 2013 9:26 AM in response to iPad786

Okay, I think you just got hung up on enrollment profiles. But you don't really want lots of enrollment profiles you want your users to get no choice that level. You would configure your devices by putting them into groups instead, and put the detailed settings into the configurations for the groups, not the enrollment profile. Enrollment profiles are just for "You're on board but we don't know what to do with you yet.".

So on the main page of profile manager, look in the left blue column under ENROLLMENT PROFILES. If you have things there, delete them. Then the only profile your users will be able to pick (if they decide to pick somethign at all) is 'Settings for Everyone' which is the set of settings you see when you choose LIBRARY-->Groups-->Everyone(All Users). Set up your initial enrollment details in that section.

Once you (as admin) notice a new device being enrolled you (as admin) can put it into a 'Device Group', which will cause the server to push the settings for that group to that device when it is next connected. Or you could manually set the settings for each Device individually if you wanted.

Reply

Answer 9

iPad786 Author

Level 1

0 points

May 1, 2013 5:19 AM in response to Simon Slavin

Yes this is what I concluded, thanks for the reply.

Reply