Configuration Baseline and Profile installation Permissions

Discussion in 'Parallels Mac Management for Microsoft SCCM' started by KenjiL1, Jul 28, 2016.

  1. KenjiL1

    KenjiL1 Bit Poster

    I've created a Configuration Baseline and when it applies to a Mac it asks the user to authorize the installation of the Profile. Is there anyway around this were it doesn't ask for permission? Also if the user only has standard security rights on the Mac they cannot install it.
  2. ToddT1

    ToddT1 Bit Poster

    I believe you have to use apple configurator 2 and import the baseline. then you can deploy the baseline silently
  3. MarcoL1


    Internal error: Unable to logon user (WIN14001\vigotsky): (1331) Logon failure: account currently disabled. (Error code 1)
  4. RobR1

    RobR1 Bit Poster

    Hi Kenji,
    Todd is on the right path, but doesn't quite give the whole story. If you're trying to deploy a Configuration Profile using PMM's native OS X Config Profile Wizard, I don't believe this is possible. However, it can be done if you create your profile using Apple Configurator 2 via an OS X Server. Once you do and have your exported mobileconfig file you must choose the "Create Parallels Configuration Item" > "Mac OS X Configuration Profile from File" option. When you're creating the Configuration Item this way you are presented with a simple window with "Name", "Description", "Path to file" AND the option to deploy as a "User Profile" or "System Profile".

    If you select "User Profile", the profile will be deployed using the user's credentials, prompting them at the time of delivery to authenticate the profile (what I believe you're describing). However, if you select "System Profile", the profile will be deployed using the system's credentials and deploy quietly in the background. Unlike deploying Software, there are no "silent" options when deploying a Configuration Baseline, so you must make sure the Config Item is built using the correct parameters.

    I have abandoned using the native Parallels Config Profile building tool primarily because it is not possible to deploy a signed profile this way, but as far as I can tell it also isn't possible to use the native tool to deploy a "System Profile" either. Hopefully Parallels can improve the native Profile builder to include such things in the future.

    Good luck,

Share This Page