Skip to main content
Question

Bypass profiles no longer working?

  • October 26, 2016
  • 4 replies
  • 50 views
R
Forum|alt.badge.img+7

We used to be able to bypass configuration profiles during login by holding down the option key while logging in as an administrator and the clicking on the "Disable Settings" button.

Everything was working great until last week... now even though we still see (and click on) the "Disable Settings" button during login the configuration profiles are still in effect.

We've made multiple additional configuration profiles since last week, but unfortunately we are not able to go through them one by one and disable them to see if they might be causing an issues.

I can't see a new configuration profile stopping this from working anyway especially since we do see the "Disable Settings" button during login.

Any ideas?

Having to remove the computer from JAMF anytime we want to make changes in the system preferences (which we have locked with a profile) and then having to re-enrol the computer is a real PITA.

We NEVER had this issue with Profile Manager on the same OS by the way, so I believe it's a JAMF issue, not an OS issue

Thanks!

4 replies

R
Forum|alt.badge.img+7
  • RLBII
  • Author
  • Contributor
  • October 26, 2016

I've tried the suggestions listed in the link below (besides replacing the entire plist file) and they did not work.

https://www.jamf.com/jamf-nation/discussions/13449/bypass-configuration-profiles-when-logging-in

seabash
Forum|alt.badge.img+7
  • seabash
  • New Contributor
  • October 27, 2016

Sounds like you're describing "Known Issue" D-005882 from Casper Suite 9.96 Release Notes to a tee?

Known Issues The following issues are a result of bugs in third-party software. Defects have been filed for these bugs and are awaiting resolution. [...] [D-005882] The Computer administrators may refresh or disable management option in a Login Window payload of an OS X configuration profile is not applied at login.
R
Forum|alt.badge.img+7
  • RLBII
  • Author
  • Contributor
  • October 27, 2016

@seabash Thanks for the heads up.

I currently have a profile in self service to remove JAMF from the machine (since we also restrict terminal). So we have to completely remove JAMF from the machine and re-enrol it each and every time we want to make a change to anything in the system preferences.

Anyone by chance have a better solution for us until JAMF addresses this issue?

R
Forum|alt.badge.img+7
  • RLBII
  • Author
  • Contributor
  • October 27, 2016

I found a fix...

If I remove the ethernet cable and network access then the "Option" key bypass works since the machine is not able to pull from our JAMF server.

Better than nothing, but we can't update machines remotely and have to physically be in front of them.

Here is to hoping the outstanding issue is resolved by JAMF soon as this really causes a lot more work for us having to be in front of a machine if we need to make any changes that require the profiles to not be loaded on a machine.

Terms & ConditionsCookie settingsAccessibility statement