Remove Mac profiles from managed devices
Mac profiles can be configured to remove user and system profiles from Agent-managed Mac OS X devices. This configuration is useful when you have installed a profile on a large number of devices, and you need to remove that profile from all of those devices or from a subset of those devices.
a. |
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
3. |
Click Remove from Device. |
The Mac Profile Detail page for a new profile, with the
Action set to
Remove, appears. The new profile has the same
Profile Name and
Profile Identifier as the original profile. The original profile, with the
Action set to
Add, remains on the list with its
Schedule set to
None. This prevents the same profile from being installed on or removed from the same set of devices, and it enables you to reactivate the original profile later if necessary.
4. |
On the Mac Profile Detail page in the Deploy section, select the devices from which you want to remove the profile: |
Option |
Description |
All Devices |
Remove the profile from all KACE Agent-managed devices running a supported version of Mac OS X (version 10.8, 10.9, or 10.10). If the Organization component is enabled on your appliance, this action includes all supported Mac devices in the selected organization. |
Labels |
Remove the profile from the devices in the labels that you select. Limiting the removal to labels, especially Smart Labels, helps to ensure that profiles are removed appropriately.
To use this option, you must already have created labels or Smart Labels. See Adding Smart Labels for devices. |
Devices |
Remove the profile from the supported Mac OS X devices that you select (version 10.8, 10.9, or 10.10). To search for devices, begin typing in the field. |
Operating Systems |
Select the operating systems of the devices from which you want to remove the profile. Only supported operating systems (Mac OS X version 10.8, 10.9, or 10.10) are displayed. To remove the profile from all supported Mac operating systems, leave all operating systems unselected. |
Remove All |
Remove all selected devices from the Devices list in this section. |
5. |
In the Schedule section, select the options for removing the profile from target devices: |
Option |
Description |
None |
Do not remove the profile on a schedule. Profiles that have their schedules set to None have a status of Disabled on the Mac Profiles list. However, profiles whose schedule is set to None can still be removed if you select Run Now at the bottom of the page. |
Every n minutes/hours |
Run at a specified interval. |
Every day/specific day at HH:MM |
Run daily at a specified time, or run on a designated day of the week at a specified time. |
Run on the nth of every month/specific month at HH:MM |
Run on the same day every month, or a specific month, at the specified time. |
Custom |
Run according to a custom schedule.
Use standard 5-field cron format (extended cron format is not supported):
Use the following when specifying values:
• |
Asterisks (*): Include the entire range of values in a field with an asterisk. For example, an asterisk in the hour field indicates every hour. |
• |
Commas (,): Separate multiple values in a field with a comma. For example, 0,6 in the day of the week field indicates Sunday and Saturday. |
• |
Hyphens (-): Indicate a range of values in a field with a hyphen. For example, 1-5 in the day of the week field is equivalent to 1,2,3,4,5, which indicates Monday through Friday. |
• |
Slashes (/): Specify the intervals at which to repeat an action with a slash. For example, */3 in the hour field is equivalent to 0,3,6,9,12,15,18,21. The asterisk ( *) specifies every hour, but /3 restricts this to hours divisible by 3. |
Examples:
|
The Mac Profiles page appears. The
Targeted column shows the number of devices that are scheduled to have the profile removed. The
Succeeded column shows the number of devices from which the profile has been removed. On target devices that have an active Agent connection to the appliance, the profile is removed according to the selected options.
Example: Remove a profile that has been deployed to specified devices
If you inadvertently deploy profiles to target devices, you can remove them by creating a Remove profile.
a. |
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
2. |
On the Mac Profile Detail page for Profile A, click Remove. |
3. |
Click Remove from Device. |
The Mac Profile Detail page for a new profile, with the
Action set to
Remove, appears. The new profile has the same
Profile Name and
Profile Identifier as the original profile. In this example, this is
Profile A Remove. The original profile, with the
Action set to
Add, remains on the list with its
Schedule set to
None. This prevents the same profile from being installed on or removed from the same set of devices, and it enables you to reactivate
Profile A later if necessary.
4. |
On the Mac Profile Detail page for Profile A Remove, in the Deploy section, select the devices from which you want to remove the profile. |
The Mac Profiles page shows the number of target devices in the
Targeted column and the number of devices from which the profile has been removed in the
Succeeded column for
Profile A Remove.
7. |
In Profile A, verify that the correct devices are targeted and enable the profile: |
a. |
Go to the Mac Profile Detail page for Profile A. |
Delete Mac profiles from the appliance
You can delete Mac profiles from the appliance as needed.
Deleting a profile does not remove it from any devices on which it has been installed. To remove profiles from devices, use the Remove option. See Remove Mac profiles from managed devices.
a. |
Log in to the appliance Administrator Console, https://appliance_hostname/admin. Or, if the Show organization menu in admin header option is enabled in the appliance General Settings, select an organization in the drop-down list in the top-right corner of the page next to the login information. |
Using Task Chains
Task Chains allow you to create a sequence of tasks to run in a specific order.
You can add one or more Patch Schedules, Scripts, File Synchronization items, and Wake-On LAN Requests to a Task Chain. Use Task Chains, for example, when you need to deploy managed installations and then run scripts on target devices. The order of tasks in a Task Chain can be easily changed, as required.
Each Task Chain runs against a configured set of devices, as defined in the Task Chain.
If a target device in a Task Chain is offline, you can configure the Task Chain to run when the device becomes connected. When a target device is referenced in multiple Task Chains, only one Task Chain runs against the device at a time.
The following concepts apply to device selections in a Task Chain: