Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 17 replies
  • Answers 2 answers
  • Subscribers 9 subscribers
  • Views 38350 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DEP Profile "assign User to device"

Andrew Mullins

Hello, Has anyone managed to get the DEP enrollment process to work with the "assign user to device" enabled in your Apple DEP profiles? i have the enrollment process working but when i enable "assign user to device" this i get the following message " the configuration for your iphone could not be downloaded from the "ORG" Invalid profile, if i disable this it works as expected/

also did you figure out how to apply your config?

thanks in advance.



This thread was automatically locked due to age.
Parents
  • 0

    Hello Andrew,

     

    i do have the same problem.  if i use : "assing User to device" ik get an erro.

     

    is patch 6.1.12 the solution ?

  • 0 in reply to Roy Timmermans

    yes, the patch fixed this problems and other problems i was seeing when devices were attempting to download profiles on my dev and live environment.

  • 0 in reply to Andrew Mullins

    Unfortunately, it is not working.  

    Yesterday we installed Sophos control 7 but   the Function Assing User to device is still not working.

     

    Andrew Why do you use it ? what is the use of the function ?

  • 0 in reply to Roy Timmermans

    i have version 7 running in a dev environment and that is working fine using DEP.

    have you created a DEP profile thats deployed to the devices? we use DEP for seamless deployment to devices, devices can be delivered direct to uses rather than coming into IT for their device setting up and enrolling.

    once the user logins into their device use their AD credentials the device sets itself up, supervises the device, install default apps from our VPP account (without apple ID), apply's user email config and makes the device compliant on the sms server. seamless and slick and all one touch.

    unfortunately our smc licenses expires soon so looking at trend MDM and having to do it all again :-(

  • 0 in reply to Andrew Mullins

    Thats the function that we also need. 

    we alse use DEP, and delivers  the device directly  to our users.    at what time do you have to login in with your AD Credentials ?

     

    if i Use the function Assign user to device,  we still get an error at profile downloading.

     

  • 0 in reply to Roy Timmermans

    from a factory reset, the device boots, you connect to wifi or 3g, the next screen is a DEP splash screen, the next screen requests credentials.

     

    does it work if you disable assign user to device?

  • 0 in reply to Andrew Mullins

    It does works when disable the function Assing user to device. 

  • 0 in reply to Roy Timmermans

    can the user access the self service portal, login and have the ability to create a new device?

  • 0 in reply to Andrew Mullins

    Good questions, you do know the product ;-)

     

    Yes, they can self register a device, by the self service portal and with theire credentials. 

  • 0 in reply to Roy Timmermans

    haha only because ive asked lots of questions in here :-)

    in the customer your device is assigned to in DEP and SMC. 

    go to the customer container in SMC, click devices on the left, then at the top click "Apple DEP" you should then see your apple devices your trying to DEP, check to make sure a profile is assigned, as you have stated it works when "assign user to a device" is disabled this should be ok and profile status is either assigned or pushed. 

    other than what i have said i can help no more :-( i could only suggest a server reboot and retest, still a problem then upload your logs to sophos for their assistance as maybe an application problem.

    you are running version 7.0.8

    your firewall must be fine as it works when this function is disabled (you only need port 443 open)

    self service portal is available over 443

    when this was was a problem for me this was my upgrade path.

    Sophos Mobile Control 6.1.4 "DEP broken"

    Sophos Mobile Control 6.1.8 SR "DEP Broken"

    Sophos Mobile Control 6.1.12 SR "DEP Fixed in this version"

    Sophos Mobile Control 7.0.8 "DEP still fixed" with added feature to install a pre configured task bundle

     

     

Reply
  • 0 in reply to Roy Timmermans

    haha only because ive asked lots of questions in here :-)

    in the customer your device is assigned to in DEP and SMC. 

    go to the customer container in SMC, click devices on the left, then at the top click "Apple DEP" you should then see your apple devices your trying to DEP, check to make sure a profile is assigned, as you have stated it works when "assign user to a device" is disabled this should be ok and profile status is either assigned or pushed. 

    other than what i have said i can help no more :-( i could only suggest a server reboot and retest, still a problem then upload your logs to sophos for their assistance as maybe an application problem.

    you are running version 7.0.8

    your firewall must be fine as it works when this function is disabled (you only need port 443 open)

    self service portal is available over 443

    when this was was a problem for me this was my upgrade path.

    Sophos Mobile Control 6.1.4 "DEP broken"

    Sophos Mobile Control 6.1.8 SR "DEP Broken"

    Sophos Mobile Control 6.1.12 SR "DEP Fixed in this version"

    Sophos Mobile Control 7.0.8 "DEP still fixed" with added feature to install a pre configured task bundle

     

     

Children
Unfiltered HTML