Tag: mdm
-
Ensure your VMware Fusion Macs enroll in Jamf as Computers, not Devices
It used to be that you could create a VMware Fusion virtual machine Mac, enroll it in Jamf (either by spoofing the serial number for Automated Device Enrollment or just using an auto-generated VM serial for manual enrollment). Recently (not sure when, exactly), you may have noticed if you try to enroll a VMware Fusion…
-
Signs you may have conflicting MDM profiles in macOS
Jamf doesn’t currently let you easily separate out individual parts of a profile, so if you deploy a Restrictions profile, you have to enforce all the parts of the Restrictions profile. Sure, you can download the profile, un-sign it, modify it, re-sign it, and then re-upload it, but that’s not very easy to then modify…
-
Enrolling with management server failed with 500 status
This isn’t a comprehensive “if you get this, these are all the solutions” post. This is more of a “this worked for me, and it may work for you, too” post. If you’re using sudo profiles renew -type enrollment to enroll a Mac in your MDM via DEP (or “automated device enrollment”), you may get…
-
Dealing with iCloud accounts on DEP-enrolled iOS devices
I’m not sure how many other schools deal with this, but we found out something rather curious the other day, and it’s been confirmed by Mosyle (our MDM) and a couple of folks on the MacAdmins Slack. My understanding was that a DEP-enrolled MDM’ed iOS device would not allow an iCloud account (regular Apple ID,…
-
Preventing alarms from going off on MDM’ed iPads
If you have alarms set on iPads (either an actual alarm or an alarm from the “bedtime” portion of the Alarm app), you can’t disable the alarm by blocking the app. All blocking the app does is prevent the user from launching up the app. To prevent the alarm itself from going off, you have…
-
When DEP nag won’t work but Setup Assistant will to enroll in your MDM
Explanation Symptoms Workaround Automating Other Considerations Explanation The two-days-later update: after doing troubleshooting with our MDM, asking around to other Mac admins, Google searching, and creating an enterprise case with Apple, I finally got back a definitive answer from Apple, which is that this functionality is essentially broken in Sierra (10.12.6). They’re saying it should…
-
Importing custom .mobileconfig profiles into Mosyle MDM
Acknowledgements: Full credit to Tom Case on the MacAdmins Slack for this tip. It’s not immediately obvious that you can import custom .mobileconfig profiles into Mosyle MDM, but apparently you can if you go to Management > Certificates > (click on profile or add new one) > Select the file. Those can be any .mobileconfig…