Apple @ Work is brought to you by Jamf, the Apple management standard. Learn more at Jamf.com/9to5mac.ebrit19659002??Configuration profiles are a huge part of the mobile device management experience when working with iPad and Mac. They are the "building blocks" of how the iPad and Mac know what restrictions or settings should be in place. If you can get hold of this aspect by using an MDM, you will become a master in no time. If you are looking for how to recover a deleted Jamf profile to remove it, I will cover it at the bottom.
Configuration profiles are what give IT managers control over a device in order to make changes without requiring (or even allowing) end users to override. Configuration profiles are one of the ways Apple has continued to develop iOS and macOS management over the years, so it's wise to take the time to get the basics down.
The most restrictive profile always wins
An error I've come across over the years is wondering why something was disabled on an iPad when I pushed a profile that had it activated. This was because I had multiple configuration profiles on the same device. Using multiple profiles is certainly allowed, but the most restrictive policy will always override the other. An example of this is if one profile disables Safari, but another does not. The profile that disables Safari will override whoever did not.
Wi-Fi credential preview
One of the questions I often get emails about is how to distribute a Wi-Fi pre-shared key to iPads. It's a chicken and egg situation, because until the iPad is connected to Wi-Fi, it can't receive a configuration profile. My suggestion is to create an open Wi-Fi network during the distribution period, connect the iPads or Macs to it, let it receive the profile with the PSK information, and then disable the open network. When devices no longer see the open network, they will be able to connect to what requires a password.
Checking the iCloud Photo Library
If you use managed Apple IDs through the Apple School Manager, you will know that students get 200 GB of iCloud storage. You also know that devices that capture HD video can take up a lot of storage space. If you don't want students to be able to use iCloud Photo Library (save space for Pages files and Keynote presentations), you can actually disable it inside a configuration profile as well.
Restore a deleted Jamf profile
A few years ago, I discovered a very useful trick in Jamf Pro and it restored a deleted profile. If you come to this article from a Google search, you can rest assured that the issue you have solved with this trick.
I like to keep the list of configuration profiles as clean as possible. As your organization's use of iOS grows, you will find that the use of configuration profiles is growing. I have a few general profiles that go on all our devices, but then I have a number of them that go on individual grades. If you are a K-1
So what happens if you go to delete a profile that is still loaded on devices? I ran into this problem a few years ago when I had a test profile installed to lock some iPads in a single app mode (for standardized testing). I removed it and deleted it without thinking. The problem is that an iPad still had installed. This profile made the iPad somewhat useless for anything but the standardized test app. An alternative would be to wipe the iPad, but it brought other complexities, and seemed like a lot of work.
One trick I discovered is that even a deleted profile still exists in Jamf, but you have to find it. Each configuration profile generates a unique URL.
It will be something like this: https://jss.jamfcloud.com/bbs /iOSConfigurationProfiles.html?id=34&o=r.
The bold part of the text is unique to my organization, so you want to replace it with your URL. The Id = 34 section is what you want to focus on next. You must find the number of the profile you deleted. Your profiles obviously start at 1 and go up from there. You can try and fail to see which one was deleted. Once you find the one that was deleted, you will see a notification that this profile was deleted. Your first reaction might be to clone it, but you actually want to download it.
After you download it, you will return to the main configuration profiles screen and look for the Upload button. You will then upload it and it will be assigned the same profile ID as before. You can then work on it inside Jamf to remove or change as needed.
Thanks to Jamf for sponsoring Apple @ Work. Jamf, the Apple management standard, is committed to enabling IT to empower end users and bring the legendary Apple experience to businesses, educational institutions and government organizations through their product portfolio.
Find out more at Jamf.com/9to5mac.ebrit19659023] Check out 9to5Mac on YouTube for more Apple news: