Skip to main content
Question

Prevent Users from Removing Configuration Profiiles

  • August 22, 2012
  • 7 replies
  • 26 views

Forum|alt.badge.img+20

What is the best way to do this minus no admin rights? I tried to limit the System Preferences but what ends up happening is all Prefs in the "Other" section are disabled as well. What is the best way to stop users from removing the profiles? This is the future replacement for MCX after all :D

7 replies

Forum|alt.badge.img+19
  • Contributor
  • August 22, 2012

enable the passcode payload, and set a password on the profile. Even local admins will need to supply the password you set to remove the profile.


Forum|alt.badge.img+20
  • Author
  • Valued Contributor
  • August 22, 2012

Interesting!!! Let me give that a go. Ill mark as answer once I verify.

Thanks!


Forum|alt.badge.img+20
  • Author
  • Valued Contributor
  • August 22, 2012

Interesting!!! Let me give that a go. Ill mark as answer once I verify.

Thanks!


Forum|alt.badge.img+20
  • Author
  • Valued Contributor
  • August 22, 2012

Maybe I am missing something but I see the passcode payload, where is the passcode actually entered?


Forum|alt.badge.img+7

I didn't see the option to add a passcode in the JSS.

I made a profile on Lion Server with password protection and imported it to the JSS.

The JSS seems to keep the password setting.


Forum|alt.badge.img+7
  • Employee
  • August 23, 2012

Hi Matt,

Maybe this article will help out:

https://jamfnation.jamfsoftware.com/article.html?id=204

We can add preference panes from the 'Other' section and keep them enabled.


Forum|alt.badge.img+19
  • Contributor
  • August 23, 2012

oh, sorry, I use profile manager to create my profiles, not the JSS. The JSS does not make this setting available, but as fritz said, the password will survive uploading to the JSS.
Also, my memory apparently sucks, because it's not the passcode payload, it's in the General payload, Security section. Sorry for the confusion!
Screenshot:
external image link