Exporting Configuration Profile for use in the JSS

[perrycj]

Hey guys...I've made a configuration profile using profile manager on OS X Server 3.2.1. I'm making it there so my 3rd party preference panes don't get greyed out with restrictions in configuration profiles as they do when made on the JSS directly.

Is there a way to export this configuration profile from profile manager and/or the client they're installed on from profile manager and then import to the JSS for use and deployment? Let me know what you guys think and thanks as always for any help you provide.

This is for JSS 9.61 and then also possibly 8.73.

[davidacland]

I haven't got a profile manager server to hand to check but I think you can download them from the /mydevices page as a quick workaround.

[perrycj]

@davidacland Thanks for the feedback. There is an install button but not download. From what i can see, this just installs the profile on the client you are viewing the webpage from. That's fine, but I'm then looking for a way to export that installed profile for use of importing into the JSS.

[davidacland]

Ah ok, I wasn't sure if it downloads the .mobileconfig first, then runs it?

[perrycj]

It looks like it installs directly to the client you're on when you hit install, right away. There has to be a way to export it ha but I can't figure it out (yet).

[davidacland · Accepted solution]

Looking at this link you should be able to click on the user / device or device group and download it:

http://help.apple.com/profilemanager/mac/2.2/?lang=en-us#apdBD71EBC9-7C1E-4CD0-A0BB-1BB1A50B52E9

"1. In Profile Manager, select a user, device, or group from the Library.
2. Click the Download button."

[perrycj]

I'm dumb. I didn't realize it was downloading a file as well as installing it. I didn't even notice it.

[perrycj]

However, it imported but didn't carry over the restrictions. All the restrictions I set for system preferences have been erased.

[davidacland]

Hmm, sounds like a compatibility issue with the way PM is making the mobileconfig file.

To troubleshoot I would create a system preference restriction profile in the JSS and download it, then compare the xml with the one from profile manager.

That being said, it doesn't sound like you are onto a winner :(

[perrycj]

So it seems you can't change the name. You have the leave the .mobileconfig file as is once imported into the JSS. If you don't change the name of the configuration profile once it's uploaded, it works as expected.

[jaharmi]

@perrycj, just to confirm, does that mean that you were able to successfully import the Profile Manager profile containing the System Preferences restrictions, and have those restrictions present in JSS?

It sounds like you were setting up whitelist (rather than blacklist) restrictions for System Preferences.

[perrycj]

@jaharmi Yes that is correct. You can do it either way, Black or White list. You just need OS X Server 3.x or above and then to use Profile Manager within OS X Server. As long as you have the 3rd party plug-ins/clients/etc installed on the client you're running OS X Server on, when you set restrictions in profile manager when making the configuration profile, they will show up as options to either enable/disable in system preferences.

When importing into the JSS, make sure not to change anything about the profile. Also, I've really only had success using a custom configuration profile on JSS 9.x or above. Hope that helps.