Device is not supervised?

Question

Level 1

10 points

Device is not supervised?

I am running Server at home and I would like to set up some restrictions on the devices for websites they can visit.

I have Profile Manager up and running. I have a signed certificate (startSSL). I have the iPad mini (iOS 7.0.3) I want to configure with two profiles, the Trust profile The Dalzells & Remote Management.

I create the restrictions in the Profile Manager but it simply will not push those changes to the iPad.

I see an error in the log:

[ {

'ErrorCode'=>4001,

'ErrorDomain'=>'MCInstallationErrorDomain',

'LocalizedDescription'=>'Profile Installation Failed',

'USEnglishDescription'=>'Profile Installation Failed'

},{

'ErrorCode'=>4001,

'ErrorDomain'=>'MCInstallationErrorDomain',

'LocalizedDescription'=>'Profile Failed to Install',

'USEnglishDescription'=>'Profile Failed to Install'

},{

'ErrorCode'=>1009,

'ErrorDomain'=>'MCProfileErrorDomain',

'LocalizedDescription'=>'The profile \u201cSettings for Christine's iPad\u201d could not be installed.',

'USEnglishDescription'=>'The profile \u201cSettings for Christine's iPad\u201d could not be installed.'

},{

'ErrorCode'=>29000,

'ErrorDomain'=>'MCSupervisedErrorDomain',

'LocalizedDescription'=>'This profile can only be installed on a Supervised device.',

'USEnglishDescription'=>'This profile can only be installed on a Supervised device.'

Any ideas?

iPad mini-OTHER, OS X Mavericks (10.9)

Posted on Nov 2, 2013 10:43 AM

Reply

Answer 1

edalzell Author

Level 1

10 points

Nov 6, 2013 9:54 AM in response to Todd Fernandez

Awesome, so the steps are:

Prepare device in AC
Set it to restore from backup so that all apps/settings are set
Supervise the device
Push out changes to device via MDM

Thanks a lot Todd, you've been really helpful. I will try this tonight on a spare device so I can see what happens.

Reply

Answer 2

Nov 6, 2013 9:19 AM in response to edalzell

Which restrictions (as well as any other settings or payloads) are you configuring in the configuration profile you are trying to install? If any of them are marked "Supervised devices only", try removing them and installing the profile again.

Reply

Answer 3

edalzell Author

Level 1

10 points

Nov 6, 2013 9:29 AM in response to Todd Fernandez

I am just trying to add some URLs to the blacklist. Yes it does say supervised devices only.

I just figured out yesterday that I need to Prepare then Supervise a device with Apple Configurator before you can push things like this from MDM.

And to Supervise a device I need to wipe it so I'm not sure I'm ready for that yet.

Reply

Answer 4

Nov 6, 2013 9:34 AM in response to edalzell

An unsupervised device won't allow installation of settings or payloads which are for supervised devices only. Just avoid using any of those settings until you're ready to supervise a device with Apple Configurator, which can also enroll your devices in MDM while preparing them.

Reply

Answer 5

Nov 6, 2013 9:51 AM in response to edalzell

Supervision itself doesn't have any implications beyond _allowing_ you to use those additional restrictions and settings. It doesn't restrict anything itself, with one exception, which is now configurable in iOS 7: whether or not the supervised device will pair and sync with other Macs besides the one which supervised it. (Prior to iOS 7, a supervised device could never connect to another Mac.)

To say it another way, if you use the default supervision options in Configurator (leave "Allow devices to connect to other Macs" checked), supervising won't have any immediate impact on what the device can do. It just allows you to later use any of the supervised-only settings.

Reply