iPad syncing conflict when using Casper managerd Restrictions

[nancy_walsh]

Having trouble with syncing iPads.
- Must have "allow installing apps" turned on in order to add new apps
- Using Casper I have created a profile that turns on "allow installing apps"
- Only one profile at a time can manage an individual or group of devices
- I have one master profile that sets ALL desired restrictions
- I disable the "ALL desired profile", then enable the one that "allows installing apps" that cannot happen because during the interim between profiles management the "individual iPad "Enable Restrictions" kicks in and won't allow changes in settings.
- If I disable restrictions and run the "All desired profile" unpredictable applications get turned on that I don't want to be turned on: iTunes, Ping, and "Allow delete apps".
- As long as any profile is managing an iPad(s) you are locked out of manually changing any settings

[CasperSally]

Not sure if it's helpful to you, but we have a similar set up in that we have one profile that sets all restrictions.

For that profile, I have a static mobile device group scoped.

When we do a sync, only a technician does it (may not be applicable for you). We uncheck the devices from the static group, all restrictions are disabled, and we do the sync.

Once iPads are all ready to go back into production, we readd the iPads back to the static group to turn restrictions back on.

I wonder if/when Apple will ever update their IPCU (which would give JAMF more options to manage as well). They haven't updated it since prior to iOS5 and IMO it's a bit of a crime to push to th education market like they did last week until they beef up management ability.