Profile manager pending on some devices

apple-idosx-serverprofile-managersystem-prefs

I have this problem that most of the options in the system preferences are greyed out, even when I log in as an admin.
But I need to log in to my iCloud account to get some software to run on these machines. So I changed the restrictions payload and tried to push it.
But for some reasons only 4 of the 12 Macs will update the settings.

All Macs are turned on and connected to the local network and the internet.

I tried to figure out if any settings on the machines 1-4 are different from 5-12. The IP is manually inserted with the same DNS server address. They are all running on 10.10.5 and even the caching seems to work. The protocol on the server does not give me back any error message.
I can not even remove the device from profile manager.

What could it be? Port problem? Certificate?

I don't know what to search for. Any suggestions how to get into system preferences? Terminal works if I log in as admin.

Best Answer

As an admin you may be able to bypass the managed preference settings. Log out and then back in while holding the Option key. If allowed you'll see a dialog allowing you to disable managed preferences.

As far as the clients not receiving the profiles check the system.log file for errors. Look for entries from mdmclient. On the server, check the Profile Manager logs in Server.app or in /Library/Logs/ProfileManager/ probably starting with the profilemanager.log file.

Is this a user-level profile or a device-level profile? I think user user-level profiles are only installed when the user logs in.

If all else fails you can try removing all profiles:

sudo profiles -D
Related Question