Self Service Configuration Profile

[charliwest]

Am I missing something really obvious? I have made a config profile to install new mail settings in self service, it appears in self service, but then when I click install it asks for an admin password, is that correct behaviour? Can I make it not do that as my users mostly are not admins.

[kitzy]

Hi @dwest

The behavior you're seeing is expected. Unfortunately, this is a limitation on Apple's side for local accounts needing to be enabled for MDM. You can read more about it in this kbase article: https://jamfnation.jamfsoftware.com/article.html?id=372.

[charliwest]

thanks @johnkitzmiller, had a read through, I'm a little confused about the kb article. Does this mean you have to enter the password once and from then on they can install any mdm profile themselves?

[kitzy]

@dwest that's correct! The account only has to be enabled for MDM once. After that, the user can install as many MDM profiles as they want.