10.7 configuration profiles - Am I missing something?

[daworley]

I love that 8.3 has Configuration Profiles, compatible with managing Lion. However, it seems like the options in Lion Server's Profile Manager does not match parity with a 8.3 JSS.

Compare the following two screen shots:

Nowhere in the JSS seems to be the same level of device filtering options as the Lion Profile Manager does. Relatedly, I would assume I could create these settings in Lion's Profile Manager and upload it to the JSS. Has anybody done this with success?

Thoughts?

-----------------------------
Douglas Worley Apple Certified System Administrator Apple Certified Trainer AppleCare Certified Service Trainer Certified Casper Administrator


[nkalister]

I noticed that, too.
The new casper suite guide does mention this:

"Note: Some payloads and settings available in Profile Manager cannot be configured with the JSS."

Since you can upload profiles created in profile manager, my next step is to create a profile in profile manager with a payload not available from the JSS, upload that profile to the JSS and then see if I can distribute it to clients with the profile manager payload intact.
nick
--
Nick Kalister
Desktop Engineering
Hitachi Data Systems
Office: 408.970.4316

750 Central Expressway
Building 32 : M/S 3240
Santa Clara, CA 95050

[zebulonsmith]

If any of you guys figure out a way to make the profiles pushed by the JSS a bit "stickier" I'd be interested in hearing about it. So far in my testing, the profiles apply properly but if a user removes them they don't get re-applied. I did some testing with Profile Manager and there's a dropdown to specify whether or not a user can remove a policy while enrolled on the server. Adding the profiles to JSS is a huge step up, but it's not going to help me much if the admin users can remove them at will.

Zeb Smith
330.672.2278(w) 330-474-9327(m)

[ImAMacGuy]

In iOS, Profiles are an Opt-In thing. Apple views them as a Consumer
product, not a corporate. So users will have the right to remove them.

May be the same theory on the Mac computers as well.

John Wojda

Lead System Engineer, DEI & Mobility

3333 Beverly Rd. B2-338B

Hoffman Estates, IL 60179

Phone: (847)286-7855

Page: (224)532.3447

Team Lead DEI: Matt Beiriger
<mailto:mbeirig at searshc.com;jwojda at searshc.com?subject=John%20Wojda%20Fe
edback&body=I%20am%20contacting%20you%20regarding%20John%20Wojda.>

Team Lead Mobility: Chris
<mailto:cstaana at searshc.com;jwojda at searshc.com?subject=John%20Wojda%20Fe
edback&body=I%20am%20contacting%20you%20regarding%20John%20Wojda.> Sta
Ana

Mac Tip/Tricks/Self Service & Support
<http://bit.ly/gMa7TB>

"Any time you choose to be inflexible in your approach to an
unpredictable project you are already building failure into your plan"

[tlarkin]

Can you import/export profiles like you can MCX with the dscl command? I don't have a 10.7 machine handy at the moment.

-Tom

[nkalister]

Yep, the command is 'profiles'. There's pretty detailed man page for it.
nick
--
Nick Kalister
Desktop Engineering
Hitachi Data Systems
Office: 408.970.4316

750 Central Expressway
Building 32 : M/S 3240
Santa Clara, CA 95050