Automatic Device Enrolled Profile Management

After MDS finishes installing macOS, it installs the profile out of the MDS “Profiles” folder.

Device Management is needed to be “Approved”. Once approved, the device is enrolled into the correct device group on our Apple Server’s Profile Manager but the profile is not pushed.

All our devices are Apple School Manager enrolled.

‌

System Preferences “Profiles”:

‌

Profile Manager Web Console (this profiles mobile config is in the MDS Profiles Folder):

‌

Usually we have to connect to our Apple Server’s Profile Manager website, download the same mobile config again and let it enrol that way. We then run (this soon to be deprecated command):

sudo profiles renew -type enrollment

This enrols the device through MDM and is then flagged as DEP enrolled so we can then provision laptops with Apple Classroom, etc.

‌

Is there a way to automate this step after MDS finishes running?

Apple claim that if you run through their macOS first startup installer and if the device has a placeholder in Profile Manager that it will automatically achieve this and enrol, but it is missing the automation that MDS provides

Comments (2)