- Jamf Nation Community
- Products
- Jamf Pro
- Re: Bypass profiles no longer working?
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Bypass profiles no longer working?
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 10-26-2016 04:13 PM
We used to be able to bypass configuration profiles during login by holding down the option key while logging in as an administrator and the clicking on the "Disable Settings" button.
Everything was working great until last week... now even though we still see (and click on) the "Disable Settings" button during login the configuration profiles are still in effect.
We've made multiple additional configuration profiles since last week, but unfortunately we are not able to go through them one by one and disable them to see if they might be causing an issues.
I can't see a new configuration profile stopping this from working anyway especially since we do see the "Disable Settings" button during login.
Any ideas?
Having to remove the computer from JAMF anytime we want to make changes in the system preferences (which we have locked with a profile) and then having to re-enrol the computer is a real PITA.
We NEVER had this issue with Profile Manager on the same OS by the way, so I believe it's a JAMF issue, not an OS issue
Thanks!
Labels:
4 REPLIES 4
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 10-26-2016 04:18 PM
I've tried the suggestions listed in the link below (besides replacing the entire plist file) and they did not work.
https://www.jamf.com/jamf-nation/discussions/13449/bypass-configuration-profiles-when-logging-in
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 10-27-2016 02:05 AM
Sounds like you're describing "Known Issue" D-005882 from Casper Suite 9.96 Release Notes to a tee?
Known Issues The following issues are a result of bugs in third-party software. Defects have been filed for these bugs and are awaiting resolution. [...] [D-005882] The Computer administrators may refresh or disable management option in a Login Window payload of an OS X configuration profile is not applied at login.
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 10-27-2016 08:21 AM
@seabash Thanks for the heads up.
I currently have a profile in self service to remove JAMF from the machine (since we also restrict terminal). So we have to completely remove JAMF from the machine and re-enrol it each and every time we want to make a change to anything in the system preferences.
Anyone by chance have a better solution for us until JAMF addresses this issue?
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Posted on 10-27-2016 11:33 AM
I found a fix...
If I remove the ethernet cable and network access then the "Option" key bypass works since the machine is not able to pull from our JAMF server.
Better than nothing, but we can't update machines remotely and have to physically be in front of them.
Here is to hoping the outstanding issue is resolved by JAMF soon as this really causes a lot more work for us having to be in front of a machine if we need to make any changes that require the profiles to not be loaded on a machine.
