Resolved Profile Manager - overlaying profiles

Discussion in 'Mac OS X Server, Xserve, and Networking' started by DennisBlah, Oct 15, 2018.

  1. DennisBlah macrumors 6502

    DennisBlah

    Joined:
    Dec 5, 2013
    Location:
    The Netherlands
    #1
    Hi all,

    I just started with more device groups than just 1 default one.
    Reason:
    For about 70% of clients I need to perform parental control to only allow certain webpages. Which I took as 'default' on enrollment.

    Other clients I made a placeholder and add them manually to other devicegroups

    Now on enrolling it seems to go pretty well and it took away the parental control limits.

    Would this be considered a 'bad practice'?
    I don't want to write down all computernames and serialnumbers because that would be a lot of work..
    (I hate a lot of repetive work, and would waste time and effort on scripting it for one time only)

    Any advice on above? I have issue's with restrictions on the preferences screen.
    Default disabled lots of options, and the other group has then enabled. As far as tested till now I end up with 100% disabled options.

    Also I seem to miss my network accounts when they already logged in once before.
    When I set checkmark to show network accounts it shows ALL available accounts :)
     
  2. DennisBlah thread starter macrumors 6502

    DennisBlah

    Joined:
    Dec 5, 2013
    Location:
    The Netherlands
    #2
    Already figured that its a bad idea for overlapping profiles.
     
  3. chrfr macrumors 604

    Joined:
    Jul 11, 2009
    #3
    Yes, results will be unpredictable if profiles conflict.
     
  4. DennisBlah thread starter macrumors 6502

    DennisBlah

    Joined:
    Dec 5, 2013
    Location:
    The Netherlands
    #4
    Indeed conflicting as in overlapping:
    default enrollment profiles contains parental control, ONLY allow following.
    It was worth a try, from global and customer perspective I have to lockdown internet for all operators except their process required pages, but office can have internet..
    Thank god I tested it good first

    And other device group of the device placeholder, has parentalcontrol to allow all. Just depends which one loads last

    Ah well, now I'm forced to go 100% placeholders. Missing some cli commands, and some python project pmcli is not working anymore I ended up with direct postgresql commands..
     

Share This Page

3 October 15, 2018