IBM Security MaaS360

 View Only
  • 1.  MacOS policy won't deploy mobileconfigs or extension

    Posted Tue March 08, 2022 07:50 AM
    Hello,

    On our MacOS policy, things like mobileconfigs, filevault setting, system extensions, won't apply/push to DEP MacOS device UNTIL after we assigned a user to the said device.  The device is showing that it's getting the policy, but it won't apply the things listed above until a user is assigned to it.  Is there a way to apply these without assigning a user to a device first?

    Thanks!


    ------------------------------
    Tri Tran
    ------------------------------


  • 2.  RE: MacOS policy won't deploy mobileconfigs or extension

    Posted Wed March 09, 2022 04:09 AM
    Hi Tri
    You should be able to use the "Enroll on Behalf of" feature to do this. 
    If you go to Setup > Settings > Device Enrollment Settings > Advanced this is the first option on the page, just click the box and save the changes. 
    This allows you to do an admin enrollment and just get the user to authenticate when they receive the device. 
    Please test and let us know how you get on. 
    Best

    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM Security
    Dublin, Ireland
    ------------------------------



  • 3.  RE: MacOS policy won't deploy mobileconfigs or extension

    Posted Wed March 09, 2022 10:17 AM
    Hi Eamonn, these are DEP devices that I'm referring to.  They enrolled, showed up, and applied "some" of the default policy on MaaS.  The things they won't get from the policy are mobileconfigs, extensions, filevault settings, etc. until we assign a user to the device.  From my conversation with our tech support yesterday, this is how MaaS works.  Thank you for reaching out anyway :)

    ------------------------------
    Tri Tran
    ------------------------------



  • 4.  RE: MacOS policy won't deploy mobileconfigs or extension

    Posted Wed March 09, 2022 03:58 PM

    Hi Tri, 

    If you navigate to Setup-->Settings-->Advanced Enrollment Settings and scroll to the section "Advanced Management for Apple Devices" there is a line that says "Deploy apps and configurations to devices enrolling without authentication and set their ownership to Corporate Shared."  Check the box next to that feature and the devices should begin receiving the configurations. 



    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------



  • 5.  RE: MacOS policy won't deploy mobileconfigs or extension

    Posted Wed March 09, 2022 04:06 PM
    Hi Matt, that option is checked on our console.

    Thanks!

    ------------------------------
    Tri Tran
    ------------------------------



  • 6.  RE: MacOS policy won't deploy mobileconfigs or extension

    Posted Wed March 09, 2022 04:54 PM

    If it's still not working would you mind contacting our support team so we can investigate?  Want to get you up and running but need to gather some information not suitable for these forums.  

    Information can be found here: https://www.ibm.com/support/pages/node/6445463



    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------



  • 7.  RE: MacOS policy won't deploy mobileconfigs or extension

    IBM Champion
    Posted Thu March 10, 2022 10:59 AM

    Eamon, is there a knowledge based article for this process?

     

     

    Thanks,

     

    Mitch Lauer

    connecTel  Wireless              

    216-970-6981 | Cell-US          416-801-1327 | Cell-Canada  

    412-339-5775 | Help Desk     412-339-5765 | Direct Dial

     






  • 8.  RE: MacOS policy won't deploy mobileconfigs or extension

    Posted Mon March 14, 2022 06:06 AM
    Hi Mitch
    The answer is yes!
    Support response: https://www.ibm.com/mysupport/s/question/0D50z00005pey8fCAA/what-is-enroll-on-behalf-of-in-maas360?language=en_US
    Training on Security Learning Academy: https://www.securitylearningacademy.com/mod/book/view.php?id=13793&chapterid=619#:~:text=MaaS360%20offers%20admins%20the%20opportunity,preparing%20devices%20before%20actual%20deployment
    IBM Documentation: https://www.ibm.com/docs/en/maas360?topic=portal-configuring-directory-enrollment-settings-in-maas360

    Best

    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM Security
    Dublin, Ireland
    ------------------------------