mirror of
https://github.com/fleetdm/fleet
synced 2026-04-21 13:37:30 +00:00
Update unmanaged profiles section with Migration Assistant details for enrollment profile (#39385)
Related to: - #38354
This commit is contained in:
parent
15d123db50
commit
5e7ed01a87
2 changed files with 10 additions and 1 deletions
|
|
@ -149,7 +149,9 @@ On Android hosts, a broken profile will remove the enforcement of the OS setting
|
|||
|
||||
## Unmanaged profiles
|
||||
|
||||
macOS, iOS, and iPadOS profiles installed manually by the end user aren't managed by Fleet. They're not visible and can't be removed from the host via Fleet. Additionally, if a backup is migrated to a new host using [Apple's Migration Assistant](https://support.apple.com/en-us/102613) and it contains configuration profiles, those profiles aren't managed.
|
||||
macOS, iOS, and iPadOS profiles installed manually by the end user aren't managed by Fleet. They're not visible and can't be removed from the host via Fleet.
|
||||
|
||||
If a backup is migrated to a new host using [Apple’s Migration Assistant](https://support.apple.com/en-us/102613) and includes configuration profiles, those profiles aren’t managed. Migration Assistant also restores the enrollment profile, but without a valid private key, which breaks communication with Fleet. Fleet still shows MDM as turned on. If this happens, the end user will have to manually turn MDM off and back on.
|
||||
|
||||
To manually remove unmanaged profiles, ask the end user to go to **System Settings > General > Device Management**, select the profile, and select the **- (minus)** button at the bottom of the list.
|
||||
|
||||
|
|
|
|||
|
|
@ -187,6 +187,7 @@ The log file name is `fleet-desktop.log`.
|
|||
- [Generating fleetd for Windows using local WiX toolset](#generating-fleetd-for-windows-using-local-wix-toolset)
|
||||
- [Config-less fleetd agent deployment](#config-less-fleetd-agent-deployment)
|
||||
- [Experimental features](#experimental-features)
|
||||
- [macOS Migration Assistant](#macos-migration-assistant)
|
||||
|
||||
### Supported osquery versions
|
||||
|
||||
|
|
@ -489,6 +490,12 @@ but can result in a large volume of error logs. In fleetd v1.15.1, we added an e
|
|||
Applying the environmental variable `"FLEETD_SILENCE_ENROLL_ERROR"=1` on a host will silence fleetd enrollment errors if a `--fleet-url` is not present.
|
||||
This variable is read at launch and will require a restart of the Orbit service if it is not set before installing `fleetd` v1.15.1.
|
||||
|
||||
### macOS Migration Assistant
|
||||
|
||||
When transferring data with [Apple's Migration Assistant](https://support.apple.com/en-us/102613), first [turn MDM off, unenroll the Mac, and delete it from Fleet](#unenroll). Next, use Migration Assistant to transfer data and then re-enroll the Mac and turn MDM back on.
|
||||
|
||||
If you don't unenroll and delete the Mac first, you'll get duplicate host records in Fleet.
|
||||
|
||||
<meta name="category" value="guides">
|
||||
<meta name="authorGitHubUsername" value="noahtalerman">
|
||||
<meta name="authorFullName" value="Noah Talerman">
|
||||
|
|
|
|||
Loading…
Reference in a new issue