And this lesson we're going to talk about profile manager, go ahead and open up the server at.
And as you can see, I've got my different services on the left and one of these here is profile manager.
Currently, it's turned off and we're going to go ahead and turn it on to get started.
We'll just flip the switch here from on off and you'll step us through some options here.
Call this a dummy group.
All right, but some basic information in here.
So I had an.
Choose this now, this isn't signed by a trusted civilian authority, if you do plan to use this in
production, you're going to want to get a signed certificate.
For push notification, you can just put in your Apple ID and password, I'm going to skip this for
right now.
All right, we'll go ahead and finish.
We're going to skip this option here.
And our service services on, we've got a whole bunch of different things we can edit here, and I'm
not going to do that right now.
We're only going to look at this basic profile managers service.
And both of my devices in profile manager service are Web services and will open those up in Safari
by clicking the button here.
All right, you'll see here I've got my options, I'm going to go ahead and log in with my local username
and password and.
I won't save the password for now.
All right, now we're in profile manager, as you can see, we're running an insider web interface.
This is a Web application.
So in profile manager here, we've got a couple of different things I want to show, I'm going to take
this very slowly and just kind of go through each of these sections individually over the course of
several lessons.
The first thing I'm going to talk about, it's just setting up some of the basic settings for Macintosh
machines in your environment.
So go into groups.
I've got the everyone group here and you may have the screen here about and it has some information.
We'll get into this later when we talk about MDM.
But right now we're only just worried about the settings tab.
So go into that and you'll see here we've got options to download and edit.
Download is great.
Great out.
That's great out because there's really nothing in here as far as settings go right now.
So I'm going to go ahead and just hit add it to that.
And now we've got our settings for everyone group here, so on the left hand side, in this pain, you'll
see that we've got a bunch of different options and you can see they're all separated by headers.
So these are settings that are able to be applied across these device families.
So we've got Mac OS, iOS and TV OS.
So anything I can figure in this section here would actually apply to any of those three devices.
As I go further down here, I've got Mac OS and iOS.
These are things that are only available on those.
So we kind of drop the Apple TV section here, then we've got iOS and turbos and then we have iOS here
again, things that wouldn't be configurable on a Mac but are unique to iOS.
And then down here, things that are unique to Mako's that then wouldn't apply to iOS and then things
that are unique, Steve OS so that's how these are separated out.
We're going to go in here and just do a couple of things.
So first of all, hit General and they want to know what this is going to be called and basically what
we're doing right now.
And you can see this is great out.
We're going to do manual download because we do not have the MDM configuration done yet.
We'll do that in a future or less, and then we'll have the ability to push these things out automatically
to devices.
But for right now, manual download is our only option, and I can't change that.
I'm going to go ahead and change the name here organization, you dummy description of basic config
for Mac OS devices and not for.
And the security thing here, this shows when the profile can be removed, if you're a local administrator
on your Mac, you'll be able to remove the profile.
Even if you say never, you'll still be able to remove it.
And the same thing here as well.
You can have it removed never on a date at a future date and have it automatically removed or after
some interval of time.
So because we're not using automatic push, we're using manual download.
This is basically, you know, having these options are really kind of moot.
So we'll just leave those as the default for now.
Further down here, let's play around with some stuff.
Let's do restrictions on Mac OS.
So this is a common thing that you may want to do just to lock down some of your settings from your
users.
So we've got preferences, we've got apps, widgets, media.
So these are the kinds of things in sort of an enterprise or a computer lab environment you may want
to lock down.
So I'm going to go ahead and say restrict items and system preferences, and then I'm just going to
choose to enable the selected items.
So I'm going to go ahead.
And first, just start by saying I don't want anyone messing with users and groups.
I don't want anyone messing around with software update.
I don't want to go on changing the date and time.
I don't want to messing with the doc.
I don't want I'm changing energy saver so you can go through and pick and choose.
I don't want them on the Start-Up desk.
I don't want them in sharing so you can pick and choose what kinds of things you want to give them access
to and you don't.
So I think that's probably a pretty good overview here of those.
And then I'm going to go down to security and privacy and I can figure this.
I'm not going to allow the user to change the password.
I'm not going to require password after the thing sleeps because it's going to be a shared computer.
I really don't want anyone using their Apple Watch with these, and I'm not going to allow them to set
a locked message as well.
So they can't lock the display with something written down on the screen that we don't want.
And so make those changes and then I'm going to configure the doc and I'll just go in here and what
the doc.
Sighs I'm going to make a little smaller.
I'm going to have magnification, turn it on only to one level.
I want a position on the bottom of the screen and the genie effect is fine.
And I want to put a few things in the doc.
So I'm going to make sure that these applications are in here.
So let's make sure Safari's in the doc.
We'll add that let's make sure that do male.
And let's to messages.
Let's do iTunes.
All right, so those are the applications we want on the dock, and then I also want to just have the
users.
Folder here, so I'm just going to say.
What was that in here?
And here's what's interesting, so you can choose to merge with the users, doc, which means if they
don't have these icons in there already to replace them or to add them rather, or if I want to say
no, I don't care what your doc looks like, blow that away and replace it with just these items.
And that's what I'm going to do.
Some uncheck that and I'm going to not allow them to modify items because I want the doc to stay consistent
from user to user.
And, you know, actually, I'm going to remove this doc items here and I'm just going to do this one
because that's a little easier.
This allows it to automatically map the documents folder.
If I've got other users logging in, doing what I did before may actually work, but it may create a
folder map to some users who wouldn't be able to access it.
If I'm logging in as you dummy, it would work by logging to somebody else.
I may not have permission.
That person may not have permission in that folder.
So we'll go ahead.
So we've set those things up so you can see the left as I've set these.
We have one payload configured here.
I've got one payload configured here.
I've got one payload configured here and I have one up here as well.
So let's go ahead and hit, OK?
And now you can see these are the things that it has set up for me.
I must hit save in the bottom corner here.
Once I've done that, I can see that this download has changed from being great out to being a button
that I can click on.
I will cook this.
I like Mac OS and you can see it's downloaded and it'll actually asked me if I want to go ahead and
install this, which I don't right now.
I can hit show profile and it'll show me everything that it's going to do based on what we had just
listed.
High profile of that, I'm going to cancel.
So I actually haven't installed any of the profiles.
But what I have gotten is we just go to my downloads folder.
Here is a settings for everyone, mobile config file.
Now, I can take that, I can email it, I can put it out on a Web server for people to download.
I can load it into Apple remote desktop and push it to other devices.
Any other way that I can basically provide it to users are provided to machines that will create this
double click on it and it'll try to on board this profile.
And if I hit continue, it would go ahead and configure all those changes and settings and restrictions
that we had outlined a moment ago.
And a future lesson.
We're going to talk more about using profile manager as a mobile device management system and where
we can push out these mobile config profiles out to devices live as long as they're registered and on
board and profile manager.